Edit tour

Windows Analysis Report
https://aka.ms/AAb9ysg

Overview

General Information

Sample URL:	https://aka.ms/AAb9ysg
Analysis ID:	1428788
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 1976 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2364,i,1424053567238745393,8923254789058136685,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/AAb9ysg" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjiss	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d1204d05d-0618-27aa-c5ce-34b1b850bb66%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d1204d05d-0618-27aa-c5ce-34b1b850bb66%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=9qdt76iwqf9e	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=2uuinniaxkc5	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=2uuinniaxkc5	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=u05dyj9dvlk0	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=n32cf68a96c0	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=n32cf68a96c0	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49769 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:50266 version: TLS 1.2

Source:	Binary string: this.ha="rtl"===document.documentElement.dir;(this.O=a.soy.ui)\|\|_.ba(Error("Ae"));this.na=null!=this.O;this.H=this.Va("K9a4Re").Zb();this.Ub=a.service.Ub;const b=new _.Imb(()=>{WDb(this);const e=Math.abs(this.H.scrollLeft),f=this.H.scrollWidth-this.H.offsetWidth;this.Wa(_.oDb,e);this.Wa(_.pDb,Math.abs(f-e))},500,this);_.$e(this,b);const c=_.hn(_.jn(this,_.UQ).Nb(()=>{b.H()}));a=new _.VQ(this.H);a.O(c);_.$e(this,a);const d=new _.UDb(VDb(()=>{c()}));_.TDb(d,this.oa().el());_.Ze(this,()=>{d.H.disconnect()}); source: chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr
Source:	Binary string: _.nDb=_.wk("McwVAe");_.oDb=_.wk("nGw9D");_.pDb=_.wk("ocQAhc"); source: chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr

Source: unknown

HTTPS traffic detected: 173.222.162.64:443 -> 192.168.2.6:49769 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 20.25.241.18
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152

Source: global traffic	HTTP traffic detected: GET /AAb9ysg HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /krs?id=lxDNVZKK HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect?id=lxDNVZKK HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/styles.css HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://krs.microsoft.com/redirect?id=lxDNVZKKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/GooglePlayStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=lxDNVZKKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/AppleAppStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=lxDNVZKKAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/GooglePlayStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/AppleAppStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /completeRedirect/lxDNVZKK?correlationId=39685ffc3e1858cc72ea29eff46b6f54&platformSelected=Android HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&_u=YEBAAEAAAAAAACgDI~&z=1962904036 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjiss HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&_u=YEBAAEAAAAAAACgDI~&z=1962904036 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&gjid=232704198&_gid=1292932856.1713535574&_u=YEBAAEAAAAAAACgDI~&z=189821880 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjissAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjissAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/browserinfo?f.sid=-6586912540577714630&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=57977&rt=j HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8; _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; _ga_6VGGZHMLM2=GS1.1.1713535576.1.0.1713535576.0.0.0; _ga=GA1.1.1762860312.1713535574
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOag9GFO29r7AyeurnkOhdxdHVeu20oxB3RJ5ERJ4QhZfuDpQadxPGWHpH3irRA4s-isqRliDi4zqx83B718; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /completeRedirect/lxDNVZKK?correlationId=39685ffc3e1858cc72ea29eff46b6f54&platformSelected=iOS HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=9qdt76iwqf9e HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOag9GFO29r7AyeurnkOhdxdHVeu20oxB3RJ5ERJ4QhZfuDpQadxPGWHpH3irRA4s-isqRliDi4zqx83B718; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/browserinfo?f.sid=4786649840398366022&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58007&rt=j HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8; _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535604.0.0.0
Source: global traffic	HTTP traffic detected: GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535604.0.0.0; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=2uuinniaxkc5 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/data/batchexecute?rpcids=qnKhOb&source-path=%2Fstore%2Fapps%2Fdev&f.sid=1808081091980566436&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58011&rt=c HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535612.0.0.0
Source: global traffic	HTTP traffic detected: GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/browserinfo?f.sid=1808081091980566436&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=158011&rt=j HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535612.0.0.0
Source: global traffic	HTTP traffic detected: GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahAvZyr0H0NRCnjg-4-dMJTRBiLvcPTNs2ukbQS8YRK9joXovvE-UQMrhWL6kaD8Q2KdwpXNKLEFUSZkP8; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=u05dyj9dvlk0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahAvZyr0H0NRCnjg-4-dMJTRBiLvcPTNs2ukbQS8YRK9joXovvE-UQMrhWL6kaD8Q2KdwpXNKLEFUSZkP8; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/data/batchexecute?rpcids=w3QCWb&source-path=%2Fstore%2Fapps%2Fcategory%2FPRODUCTIVITY&f.sid=-2785155342641865316&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58022&rt=c HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535622.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/data/batchexecute?rpcids=vyAe2&source-path=%2Fstore%2Fapps%2Fcategory%2FPRODUCTIVITY&f.sid=-2785155342641865316&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=158022&rt=c HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535622.0.0.0
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/browserinfo?f.sid=-2785155342641865316&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=258022&rt=j HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535622.0.0.0
Source: global traffic	HTTP traffic detected: GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s124-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Yld8nGY9Bomd8JIxg7mHNFvTgP-iJvYCWkJdcmDSMz3ZWY8YlscDTJEf08WOkJ7yMWce77Dxi9g=s56-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0Kc4kyHqyq8zcMO7lev1TyvzQeuunYD0ZC8Iv7JZiXyoZSLb4k4xDQsd-ryTsJm-dceqvFPxWOaG=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XM6MUzHrZgnqgHqbNfNd460VSiWac9xFKsYVpSU4czPoBFVFOiI-R6qVHg_NcwwGJtWjlvGnZeo=s56-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D8lU2BDUjyA9IkpQd5aEs5WCL4-sBw_l0qcbRvh1Fnj6KCAry9N2egg9v5BX2KayzLPJBJJPNP0=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /V358DKJP2RLO71dDY-utlVRUtUqd5i9peLoaLnpV7zt1J-xFk__7_sx-AymkIjt-kil_XrG3biQ=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TXeP-H2Ed1mhoPVB_CJApRXYyewNk1NTKykuQpLQ_YlkUPUXpOR3-zUkvIxYlXd5Llwi6m2USA=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ELKhrJ7hv6iWk1rEBNgrzxEpc0cHXmWbyvwtoXxT3lWAz9h6cuBEjEgw3fhf4HD5VqbrLhTgj2g=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bRfIm6ZoVTb59C0VtTs9Z8XOmUq6kowkPLMBK5CZZwIT8wSjbkvnF9tzkqykImW_P4F1q27PIjs=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Wl1YKkwmkZ-VAZZ8aPU1MpLztOhf_a2Dj6m7oDj9jaBnJ6P47KqhLln4h7ObG8loPLfeymcFgQ=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SX38vsuBS8RwRaZU4SfvlW1aQHyyXD1BuKnF7dE2qXo9uAFbUkXPcKvzfpLNA7AEB0Ls9trKFw=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zIYevie2ONWPy0aVtCfmjrrBnetJuH9IEN1l8STqyoJW5F5wS_9wiA1F-oiyTR_gpI9PjTcAzmDj=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /No2w0orQK-x9CrDxyLjaMIeBnZIaldNZpAiguVlGKWMHtl7RlzgLQBeE35n2OA0zytGeDgo6Sg=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ONI8zPDjMPTgfk-uKHf7VFmSvJjAQcc1Ga0z2G_JbbGocqpMxuLrXubxsqxw31el6IrODMMsqYI=s56-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Yld8nGY9Bomd8JIxg7mHNFvTgP-iJvYCWkJdcmDSMz3ZWY8YlscDTJEf08WOkJ7yMWce77Dxi9g=s56-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /D8lU2BDUjyA9IkpQd5aEs5WCL4-sBw_l0qcbRvh1Fnj6KCAry9N2egg9v5BX2KayzLPJBJJPNP0=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XM6MUzHrZgnqgHqbNfNd460VSiWac9xFKsYVpSU4czPoBFVFOiI-R6qVHg_NcwwGJtWjlvGnZeo=s56-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /V358DKJP2RLO71dDY-utlVRUtUqd5i9peLoaLnpV7zt1J-xFk__7_sx-AymkIjt-kil_XrG3biQ=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /0Kc4kyHqyq8zcMO7lev1TyvzQeuunYD0ZC8Iv7JZiXyoZSLb4k4xDQsd-ryTsJm-dceqvFPxWOaG=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s124-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /TXeP-H2Ed1mhoPVB_CJApRXYyewNk1NTKykuQpLQ_YlkUPUXpOR3-zUkvIxYlXd5Llwi6m2USA=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ELKhrJ7hv6iWk1rEBNgrzxEpc0cHXmWbyvwtoXxT3lWAz9h6cuBEjEgw3fhf4HD5VqbrLhTgj2g=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bRfIm6ZoVTb59C0VtTs9Z8XOmUq6kowkPLMBK5CZZwIT8wSjbkvnF9tzkqykImW_P4F1q27PIjs=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Wl1YKkwmkZ-VAZZ8aPU1MpLztOhf_a2Dj6m7oDj9jaBnJ6P47KqhLln4h7ObG8loPLfeymcFgQ=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zIYevie2ONWPy0aVtCfmjrrBnetJuH9IEN1l8STqyoJW5F5wS_9wiA1F-oiyTR_gpI9PjTcAzmDj=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SX38vsuBS8RwRaZU4SfvlW1aQHyyXD1BuKnF7dE2qXo9uAFbUkXPcKvzfpLNA7AEB0Ls9trKFw=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /No2w0orQK-x9CrDxyLjaMIeBnZIaldNZpAiguVlGKWMHtl7RlzgLQBeE35n2OA0zytGeDgo6Sg=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ONI8zPDjMPTgfk-uKHf7VFmSvJjAQcc1Ga0z2G_JbbGocqpMxuLrXubxsqxw31el6IrODMMsqYI=s56-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s24-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=n32cf68a96c0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.134"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09ALYNOajJ5aKC3DiKeewT2fZtoWR42azqMY0KDO7xFL0bYKxRCOmTPrtEkXVDWRCCEnUBvp25pGmRmKDmsgr05Fg; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/browserinfo?f.sid=4519024966731911618&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58034&rt=j HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0

Source: chromecache_251.2.dr	String found in binary or memory: "https://www.facebook.com/AppStore/" equals www.facebook.com (Facebook)
Source: chromecache_251.2.dr	String found in binary or memory: <p dir="false" data-test-bidi>Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.<br /><br />Here's what you'll love about Outlook for iOS:<br /><br />- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.<br /><br />- Swipe to quickly schedule, delete and archive messages.<br /><br />- Share your meeting availability with just a tap and easily find times to meet with others.<br /><br />- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.<br /><br />- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.<br /><br />- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.<br /><br />--<br /><br />Outlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.<br /><br />--<br /><br />To make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.<br /><br />Microsoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.<br /><br />Privacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839<br />Terms of Use: http://go.microsoft.com/fwlink/?LinkID=530144<br />Contract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary</p> equals www.hotmail.com (Hotmail)
Source: chromecache_251.2.dr	String found in binary or memory: <p dir="false" data-test-bidi>Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.<br /><br />Here's what you'll love about Outlook for iOS:<br /><br />- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.<br /><br />- Swipe to quickly schedule, delete and archive messages.<br /><br />- Share your meeting availability with just a tap and easily find times to meet with others.<br /><br />- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.<br /><br />- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.<br /><br />- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.<br /><br />--<br /><br />Outlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.<br /><br />--<br /><br />To make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.<br /><br />Microsoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.<br /><br />Privacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839<br />Terms of Use: http://go.microsoft.com/fwlink/?LinkID=530144<br />Contract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary</p> equals www.yahoo.com (Yahoo)
Source: chromecache_251.2.dr	String found in binary or memory: 2024 Microsoft Corporation. All rights reserved.\",\"description\":{\"standard\":\"Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.\\n\\nHere's what you'll love about Outlook for iOS:\\n\\n- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.\\n\\n- Swipe to quickly schedule, delete and archive messages.\\n\\n- Share your meeting availability with just a tap and easily find times to meet with others.\\n\\n- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.\\n\\n- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.\\n\\n- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.\\n\\n--\\n\\nOutlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.\\n\\n--\\n\\nTo make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.\\n\\nMicrosoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.\\n\\nPrivacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839\\nTerms of Use: http://go.microsoft.com/fwlink/?LinkID=530144\\nContract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary\"},\"isStandaloneWithCompanionForWatchOS\":false,\"isAppleWatchSupported\":true,\"is32bitOnly\":false,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"websiteUrl\":\"https://outlook.live.com\",\"versionHistory\":[{\"versionDisplay\":\"4.2414.0\",\"releaseNotes\":\"This update includes performance improvements and bug fixes to make Outlook better for you.\\n\\nFeel free to send us any comments or questions by going to Settings \u003e Help \u0026 Feedback equals www.hotmail.com (Hotm
Source: chromecache_251.2.dr	String found in binary or memory: 2024 Microsoft Corporation. All rights reserved.\",\"description\":{\"standard\":\"Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.\\n\\nHere's what you'll love about Outlook for iOS:\\n\\n- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.\\n\\n- Swipe to quickly schedule, delete and archive messages.\\n\\n- Share your meeting availability with just a tap and easily find times to meet with others.\\n\\n- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.\\n\\n- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.\\n\\n- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.\\n\\n--\\n\\nOutlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.\\n\\n--\\n\\nTo make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.\\n\\nMicrosoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.\\n\\nPrivacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839\\nTerms of Use: http://go.microsoft.com/fwlink/?LinkID=530144\\nContract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary\"},\"isStandaloneWithCompanionForWatchOS\":false,\"isAppleWatchSupported\":true,\"is32bitOnly\":false,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"websiteUrl\":\"https://outlook.live.com\",\"versionHistory\":[{\"versionDisplay\":\"4.2414.0\",\"releaseNotes\":\"This update includes performance improvements and bug fixes to make Outlook better for you.\\n\\nFeel free to send us any comments or questions by going to Settings \u003e Help \u0026 Feedback equals www.yahoo.com (Yahoo)
Source: chromecache_251.2.dr	String found in binary or memory: expertise, research, and best practices.\\n\\nSecurity is our top priority:\\nWhether you use myMail on a public or private Wi-Fi network, your data is always encrypted to protect all your email communications and information. myMail uses advanced security protocols and practices to ensure data integrity, security, and privacy.\\n\\nmyMail uses AdChoices. More information can be found here https://m.facebook.com/ads/ad_choices \\n\\nFollow us on social media:\\nFacebook: www.facebook.com/mymail.official\"},\"isStandaloneWithCompanionForWatchOS\":false,\"isAppleWatchSupported\":false,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"websiteUrl\":\"http://mymail.my.com\",\"versionHistory\":[{\"versionDisplay\":\"14.78.1\",\"releaseNotes\":\"We fixed bugs. Now you'll encounter even fewer of them.\",\"releaseDate\":\"2024-04-18\",\"releaseTimestamp\":\"2024-04-18T16:56:33Z\"},{\"versionDisplay\":\"14.78\",\"releaseNotes\":\"Fewer bugs means better karma. That's why we fixed some bugs in the new version.\",\"releaseDate\":\"2024-04-16\",\"releaseTimestamp\":\"2024-04-16T11:14:10Z\"},{\"versionDisplay\":\"14.77\",\"releaseNotes\":\"Some cosmetic changes before a major update.\",\"releaseDate\":\"2024-04-09\",\"releaseTimestamp\":\"2024-04-09T07:33:56Z\"},{\"versionDisplay\":\"14.76\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-04-03\",\"releaseTimestamp\":\"2024-04-03T07:21:02Z\"},{\"versionDisplay\":\"14.75.0\",\"releaseNotes\":\"We always listen to your feedback and fix the problems you report. That's just what we've done in this version.\",\"releaseDate\":\"2024-03-27\",\"releaseTimestamp\":\"2024-03-27T07:09:57Z\"},{\"versionDisplay\":\"14.74\",\"releaseNotes\":\"Fewer bugs means better karma. That's why we fixed some bugs in the new version.\",\"releaseDate\":\"2024-03-20\",\"releaseTimestamp\":\"2024-03-20T10:42:22Z\"},{\"versionDisplay\":\"14.71.0\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-02-27\",\"releaseTimestamp\":\"2024-02-27T08:03:39Z\"},{\"versionDisplay\":\"14.70\",\"releaseNotes\":\"We want to make Mail even more convenient and we never stop improving things. We believe that the new version has been a success. Update to check it out!\",\"releaseDate\":\"2024-02-21\",\"releaseTimestamp\":\"2024-02-21T09:47:59Z\"},{\"versionDisplay\":\"14.69\",\"releaseNotes\":\"Some cosmetic changes before a major update.\",\"releaseDate\":\"2024-02-14\",\"releaseTimestamp\":\"2024-02-14T07:17:02Z\"},{\"versionDisplay\":\"14.68\",\"releaseNotes\":\"We fixed bugs. Now you'll encounter even fewer of them.\",\"releaseDate\":\"2024-02-07\",\"releaseTimestamp\":\"2024-02-07T08:05:04Z\"},{\"versionDisplay\":\"14.67.0\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-01-31\",\"releaseTimestamp\":\"2024-01-31T11:10:39Z\"},{\"versionDisplay\":\"14.66.1\",\"releaseNotes\":\"A little fas
Source: chromecache_471.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Ij:function(){e=zb()},pd:function(){d()}}};var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_471.2.dr	String found in binary or memory: c(S[ka],E.xe)){mI("https://www.youtube.com/iframe_api");t=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Z.__ytl=u;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1;Z.__ytl.runInSiloedMode=!1})(function(u){u.vtp_triggerStartOption?n(u):ww(function(){n(u)})})}(); equals www.youtube.com (Youtube)
Source: chromecache_448.2.dr	String found in binary or memory: gf=u(["https://sandbox.google.com/tools/feedback/"]),hf=u(["https://www.google.cn/tools/feedback/"]),jf=u(["https://help.youtube.com/tools/feedback/"]),kf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),lf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),mf=u(["https://localhost.corp.google.com/inapp/"]),nf=u(["https://localhost.proxy.googlers.com/inapp/"]),of=S(Qe),pf=[S(Re),S(Se)],qf=[S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf)],rf=[S(cf),S(df)],sf= equals www.youtube.com (Youtube)
Source: chromecache_212.2.dr	String found in binary or memory: return a=n===l.CARD_DISPLAY_STYLES.appOfTheDay?_:n===l.CARD_DISPLAY_STYLES.gameOfTheDay?P:n===l.CARD_DISPLAY_STYLES.inAppPurchase?O:this.getTitleKey(e),this.i18n.t(a,{appName:r,storyTitle:i,_disableSafeString:!0})}getOGType(){return i.default.meta.og.type.story}getTwitterSite(){return this.appViewState.isMacAppStoreView?this.i18n.t("WEA.EditorialItemProductPages.Twitter.site.macOs",{_disableSafeString:!0}):super.getTwitterSite(...arguments)}getTwitterTitle(){return this.getOGTitle(...arguments)}getSchemaTags(e){const{product:t}=e.viewModel,r=E(t),[i]=r,n=(0,l.hasShelfDisplay)(i,"collectionLockup"),{lastPublishedDate:a}=t,o={"@type":"Organization",name:"Apple Inc",url:"http://www.apple.com",logo:{"@type":"ImageObject",url:"https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png"}},s=this.getOGImageTags(e).find((e=>"og:image"===e.name))\|\|{},p={"@context":"http://schema.org",name:this.getSeoTitle(e)??this.getTitle(e),description:this.getSeoDescription(e)??this.getDescription(e),image:s.content,author:o,publisher:o,headline:this.getOGTitle(e),dateModified:a,datePublished:a} equals www.twitter.com (Twitter)
Source: chromecache_270.2.dr	String found in binary or memory: return b}vC.H="internal.enableAutoEventOnTimer";var dc=ia(["data-gtm-yt-inspected-"]),xC=["www.youtube.com","www.youtube-nocookie.com"],yC,zC=!1; equals www.youtube.com (Youtube)
Source: chromecache_339.2.dr	String found in binary or memory: var AJb=function(a){return _.sb(null===a?"null":void 0===a?"undefined":a)},BJb=function(a){const b=new _.An(a);return"www.youtube.com"===b.ha&&"/watch"===b.H?(a=_.Nn(b,"v"),`https://www.youtube.com/embed/${encodeURIComponent(a)}`):a},CJb=function(a,b){0===a.H.size&&a.O.addEventListener("message",d=>{if(/\.google\.com$/.test(d.origin)&&d.data){var e=a.H.get(d.data.type);e&&e.ai().forEach(f=>{f.call(d)})}});var c=a.H.get("CLOSE_DIALOG");c?c.add(b):(c=new _.uM,c.add(b),a.H.set("CLOSE_DIALOG",c))},DJb= equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: aka.ms

Source: unknown

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&gjid=232704198&_gid=1292932856.1713535574&_u=YEBAAEAAAAAAACgDI~&z=189821880 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"Content-Type: text/plainsec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://play.google.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_387.2.dr, chromecache_472.2.dr	String found in binary or memory: http://127.0.0.1:$
Source: chromecache_251.2.dr	String found in binary or memory: http://aka.ms/outlookFAQ
Source: chromecache_251.2.dr	String found in binary or memory: http://box.com/static/html/terms.html
Source: chromecache_532.2.dr	String found in binary or memory: http://git.io/yBU2rg
Source: chromecache_339.2.dr	String found in binary or memory: http://itunes.apple.com/us/app/id746894884
Source: chromecache_405.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_448.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_251.2.dr	String found in binary or memory: http://mail.edison.tech
Source: chromecache_212.2.dr	String found in binary or memory: http://reportaproblem.apple.com
Source: chromecache_212.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_212.2.dr	String found in binary or memory: http://schema.org/ItemListOrderAscending
Source: chromecache_251.2.dr	String found in binary or memory: http://sparkmailapp.com
Source: chromecache_518.2.dr	String found in binary or memory: http://support.google.com/googleplay?p=report_review_computer
Source: chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_212.2.dr	String found in binary or memory: http://www.apple.com
Source: chromecache_251.2.dr	String found in binary or memory: http://www.apple.com/itunes/download/
Source: chromecache_251.2.dr	String found in binary or memory: http://www.appxy.com/famcalprivacy/
Source: chromecache_251.2.dr	String found in binary or memory: http://www.appxy.com/termsofuse/
Source: chromecache_251.2.dr	String found in binary or memory: http://www.box.com/static/html/privacy.html
Source: chromecache_339.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_414.2.dr, chromecache_202.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_471.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_471.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_270.2.dr, chromecache_471.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_270.2.dr, chromecache_471.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_251.2.dr	String found in binary or memory: https://aka.ms/onenote-ios-suggest
Source: chromecache_251.2.dr	String found in binary or memory: https://aka.ms/onenotefeedback
Source: chromecache_251.2.dr	String found in binary or memory: https://amp-api-edge.apps.apple.com
Source: chromecache_212.2.dr	String found in binary or memory: https://amp-api.books.apple.com/
Source: chromecache_212.2.dr	String found in binary or memory: https://amp.apple.com
Source: chromecache_557.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_212.2.dr	String found in binary or memory: https://api.books.apple.com/
Source: chromecache_284.2.dr, chromecache_513.2.dr, chromecache_226.2.dr, chromecache_545.2.dr, chromecache_548.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_448.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_212.2.dr	String found in binary or memory: https://apps.apple.com
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/#organization
Source: chromecache_212.2.dr	String found in binary or memory: https://apps.apple.com/$
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/assets/images/knowledge-graph/apps.png
Source: chromecache_212.2.dr, chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/story/id1538632801
Source: chromecache_212.2.dr	String found in binary or memory: https://apps.apple.com/story/id1539235847
Source: chromecache_212.2.dr	String found in binary or memory: https://apps.apple.com/story/id1604959672
Source: chromecache_212.2.dr	String found in binary or memory: https://apps.apple.com/us/app/apple-podcasts/id525463029
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/box-the-content-cloud/id290853822
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/box-the-content-cloud/id290853822"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/email-edison-mail/id922793622
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/email-edison-mail/id922793622"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-app-for-outlook/id1544804494
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-app-for-outlook/id1544804494"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-authenticator/id983156458
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-authenticator/id983156458"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-excel/id586683407
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-excel/id586683407"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-onedrive/id477537958
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-onedrive/id477537958"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-outlook/id951937596
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-teams/id1113153706
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-teams/id1113153706"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-word/id586447913
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-word/id586447913"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mymail-box-email-client-app/id722120997
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mymail-box-email-client-app/id722120997"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/spark-mail-ai-email-inbox/id997102246
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/spark-mail-ai-email-inbox/id997102246"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/xbox/id736179781
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/xbox/id736179781"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/zoho-mail-email-and-calendar/id909262651
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/app/zoho-mail-email-and-calendar/id909262651"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/productivity-apps/6007
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/productivity-apps/6007"
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/microsoft-corporation/id298856275
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/microsoft-corporation/id298856275"
Source: chromecache_212.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1436214772
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1455416618
Source: chromecache_251.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1455416618"
Source: chromecache_212.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1699686830
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_251.2.dr	String found in binary or memory: https://bit.ly/outlookprivacy
Source: chromecache_342.2.dr	String found in binary or memory: https://buy.music.apple.com/account/v1/affiliation/association
Source: chromecache_342.2.dr	String found in binary or memory: https://buy.tv.apple.com/account/v1/affiliation/association
Source: chromecache_270.2.dr, chromecache_471.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_591.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_591.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_532.2.dr	String found in binary or memory: https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.
Source: chromecache_591.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_591.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_591.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_448.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_448.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_448.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_448.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_448.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_448.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_448.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_342.2.dr	String found in binary or memory: https://git.io/fjule
Source: chromecache_342.2.dr	String found in binary or memory: https://git.io/fxCyr
Source: chromecache_471.2.dr	String found in binary or memory: https://google.com
Source: chromecache_471.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_448.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_448.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/48/c2/f4/48c2f437-f725-e227-59ad-8c075e2907f
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/8d/fb/f3/8dfbf394-7c38-8a86-f229-b5ca04f249f
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/1c/2b/7c/1c2b7cc6-e029-9bf9-f26f-4b5f533ee2f
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/6e/e2/e7/6ee2e7db-bf98-0d30-7adf-15aa80debeb
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/09/15/89/091589bc-f33b-2d71-9e77-2ef3729cd95
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features3/v4/96/18/e7/9618e7f9-abcd-beae-1698-c48249a8ae5e/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features3/v4/ea/2c/e5/ea2ce53d-eef4-088e-15b2-5280d1be13ca/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features41/v4/ed/2c/45/ed2c45db-7f5c-07c6-0f33-315f176121a0
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple115/v4/48/03/51/480351fd-99d5-2df1-d1df-257bafdacfbb/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/3d/bf/7e/3dbf7e7f-4e8f-00b6-6456-46557866aa1d/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/1a/29/0e/1a290eaf-858a-5646-dc8d-2ac276722ed2/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/20/3e/23/203e235f-857d-c3ab-3fac-52f72f3a697a/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/69/fe/e5/69fee50b-8d9d-9ec5-3ecb-0ecb34d97416/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/95/17/3c/95173cba-ae5f-bf73-f31b-f2206e46539a/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/18/6b/12/186b1254-9830-57a1-bb41-5223f073693a/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/1b/fd/01/1bfd0112-a692-6e6c-f88a-ce38d4e063ec/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/27/7d/0c/277d0c2d-59bc-5040-a1d1-48ebbae136d6/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/33/28/4a/33284a8b-0258-3452-9409-1e255c92896f/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/54/3d/89/543d8963-7d8d-f64c-0617-6df5c8a5f720/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/7a/09/1b/7a091bfa-5da0-10d1-28d2-e1d0b4ec2dd7/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/cb/8b/b3/cb8bb389-7741-a407-c29a-78c34ff23b06/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/d4/0b/b1/d40bb1d1-2715-3a91-6c04-0dc68dcb3212/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/e2/25/71/e22571b0-9d40-748e-6788-1534d37bf075/
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/3c/b3/45/3cb34544-49ad-f5a7-cf96-bae0e5b
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e33
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/c1/9d/53/c19d53e6-c08b-ec12-9dec-ab6dd48
Source: chromecache_251.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/d0/99/00/d099001a-0f42-0414-f655-2b81dff
Source: chromecache_251.2.dr	String found in binary or memory: https://is2-ssl.mzstatic.com
Source: chromecache_251.2.dr	String found in binary or memory: https://is3-ssl.mzstatic.com
Source: chromecache_251.2.dr	String found in binary or memory: https://is4-ssl.mzstatic.com
Source: chromecache_251.2.dr	String found in binary or memory: https://is5-ssl.mzstatic.com
Source: chromecache_212.2.dr	String found in binary or memory: https://itunes.apple.com$
Source: chromecache_212.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewFeature?id=1476734846&mt=11
Source: chromecache_212.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?cc=
Source: chromecache_212.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?genreId=38&mt=11
Source: chromecache_342.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStoreServices.woa/wa/processRedirectUrl
Source: chromecache_251.2.dr	String found in binary or memory: https://itunes.apple.com/subscribe?app=music
Source: chromecache_251.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6007
Source: chromecache_251.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6007"
Source: chromecache_251.2.dr	String found in binary or memory: https://js-cdn.music.apple.com
Source: chromecache_264.2.dr, chromecache_261.2.dr, chromecache_579.2.dr, chromecache_229.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt
Source: chromecache_251.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1713369093418
Source: chromecache_251.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components/
Source: chromecache_251.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.j
Source: chromecache_251.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.js?t=
Source: chromecache_342.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/media-api
Source: chromecache_448.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_251.2.dr	String found in binary or memory: https://locate.apple.com/
Source: chromecache_595.2.dr, chromecache_518.2.dr	String found in binary or memory: https://maps.google.com/?q=
Source: chromecache_572.2.dr, chromecache_552.2.dr, chromecache_480.2.dr, chromecache_211.2.dr, chromecache_529.2.dr	String found in binary or memory: https://myaccount.google.com/termsofservice
Source: chromecache_251.2.dr	String found in binary or memory: https://outlook.live.com
Source: chromecache_471.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_270.2.dr, chromecache_471.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_387.2.dr, chromecache_472.2.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_387.2.dr, chromecache_472.2.dr	String found in binary or memory: https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_588.2.dr	String found in binary or memory: https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZb
Source: chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_387.2.dr, chromecache_497.2.dr, chromecache_241.2.dr, chromecache_472.2.dr, chromecache_339.2.dr	String found in binary or memory: https://play.google.com/
Source: chromecache_595.2.dr, chromecache_476.2.dr, chromecache_518.2.dr	String found in binary or memory: https://play.google.com/about/comment-posting-policy?hl=
Source: chromecache_607.2.dr, chromecache_228.2.dr, chromecache_339.2.dr	String found in binary or memory: https://play.google.com/about/play-terms/index.html
Source: chromecache_476.2.dr	String found in binary or memory: https://play.google.com/about/play-terms/index.html;target;_blank;class;cOP9Jc
Source: chromecache_595.2.dr, chromecache_607.2.dr, chromecache_228.2.dr	String found in binary or memory: https://play.google.com/googleplaygames
Source: chromecache_476.2.dr	String found in binary or memory: https://play.google.com/googleplaygames;target;_blank;class;cOP9Jc
Source: chromecache_595.2.dr, chromecache_607.2.dr, chromecache_476.2.dr, chromecache_228.2.dr	String found in binary or memory: https://play.google.com/intl/all_
Source: chromecache_518.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_212.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$
Source: chromecache_572.2.dr, chromecache_552.2.dr, chromecache_595.2.dr, chromecache_607.2.dr, chromecache_480.2.dr, chromecache_476.2.dr, chromecache_228.2.dr, chromecache_211.2.dr, chromecache_529.2.dr, chromecache_339.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_607.2.dr, chromecache_228.2.dr, chromecache_339.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_476.2.dr	String found in binary or memory: https://policies.google.com/terms;target;_blank;class;cOP9Jc
Source: chromecache_405.2.dr	String found in binary or memory: https://preactjs.com
Source: chromecache_251.2.dr	String found in binary or memory: https://products.office.com/mobile/office
Source: chromecache_532.2.dr	String found in binary or memory: https://raw.github.com/emberjs/ember.js/master/LICENSE
Source: chromecache_591.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_448.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_448.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_595.2.dr, chromecache_251.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_595.2.dr	String found in binary or memory: https://schema.org/InStock
Source: chromecache_595.2.dr, chromecache_607.2.dr, chromecache_476.2.dr, chromecache_541.2.dr, chromecache_228.2.dr, chromecache_512.2.dr, chromecache_518.2.dr	String found in binary or memory: https://schema.org/Offer
Source: chromecache_595.2.dr	String found in binary or memory: https://schema.org/PreOrder
Source: chromecache_448.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_251.2.dr	String found in binary or memory: https://sparkmailapp.com/legal/privacy-app
Source: chromecache_251.2.dr	String found in binary or memory: https://sparkmailapp.com/legal/terms
Source: chromecache_478.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/
Source: chromecache_422.2.dr, chromecache_503.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/1712908896069/operatordeferred_bin_base.js
Source: chromecache_448.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_270.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_270.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_557.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_251.2.dr	String found in binary or memory: https://support.apple.com
Source: chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_448.2.dr, chromecache_478.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_387.2.dr, chromecache_472.2.dr	String found in binary or memory: https://support.google.com/googleplay/?p=remote_install_error
Source: chromecache_595.2.dr, chromecache_228.2.dr	String found in binary or memory: https://support.google.com/googleplay/?p=report_content
Source: chromecache_595.2.dr, chromecache_607.2.dr, chromecache_476.2.dr, chromecache_228.2.dr, chromecache_518.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/10066529
Source: chromecache_387.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/6014972
Source: chromecache_476.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/6209531
Source: chromecache_595.2.dr	String found in binary or memory: https://support.google.com/googleplay?p=eligibility_requirements
Source: chromecache_448.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_448.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_591.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_591.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_591.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_591.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_251.2.dr	String found in binary or memory: https://support.xbox.com/help/subscriptions-billing/manage-subscriptions/microsoft-software-license-
Source: chromecache_557.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_270.2.dr, chromecache_471.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_448.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_387.2.dr, chromecache_472.2.dr	String found in binary or memory: https://tokenized.play.google.com
Source: chromecache_212.2.dr	String found in binary or memory: https://tv.apple.com/search?q=
Source: chromecache_251.2.dr	String found in binary or memory: https://twitter.com/AppStore
Source: chromecache_284.2.dr, chromecache_513.2.dr, chromecache_226.2.dr, chromecache_545.2.dr, chromecache_548.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_251.2.dr	String found in binary or memory: https://www.OneNote.com
Source: chromecache_212.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.apple.com
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/#organization
Source: chromecache_212.2.dr	String found in binary or memory: https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/airpods/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/apple-arcade/
Source: chromecache_212.2.dr	String found in binary or memory: https://www.apple.com/apple-books/
Source: chromecache_212.2.dr	String found in binary or memory: https://www.apple.com/apple-vision-pro/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/choose-country-region/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/entertainment/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/ios/app-store/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/ipad/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/iphone/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/itunes/download/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/legal/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/legal/internet-services/terms/site.html
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/legal/privacy/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/mac/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/macos/mojave-preview/#mac-app-store
Source: chromecache_212.2.dr	String found in binary or memory: https://www.apple.com/osx/apps/app-store/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/retail/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/sitemap/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/tv-home/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/buy_accessories
Source: chromecache_212.2.dr, chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/help/sales_refunds
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/store
Source: chromecache_251.2.dr	String found in binary or memory: https://www.apple.com/watch/
Source: chromecache_251.2.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_251.2.dr	String found in binary or memory: https://www.dropbox.com/privacy
Source: chromecache_251.2.dr	String found in binary or memory: https://www.dropbox.com/terms
Source: chromecache_251.2.dr	String found in binary or memory: https://www.dropboxforum.com
Source: chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_557.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_557.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_557.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_448.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_471.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_557.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_284.2.dr, chromecache_513.2.dr, chromecache_226.2.dr, chromecache_545.2.dr, chromecache_548.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$
Source: chromecache_591.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_448.2.dr, chromecache_478.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_448.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_448.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_448.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_471.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_270.2.dr, chromecache_471.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_471.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_557.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_591.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__.
Source: chromecache_339.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/battlestar_signed_up-275d9e87.png
Source: chromecache_387.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/reviews_not_found.png
Source: chromecache_339.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/sign_up.png
Source: chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_476.2.dr	String found in binary or memory: https://www.gstatic.com/play/kids/header/kids_tab_header_v3.json
Source: chromecache_443.2.dr, chromecache_371.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Source: chromecache_478.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_448.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_251.2.dr	String found in binary or memory: https://www.wikidata.org/wiki/Q368215
Source: chromecache_339.2.dr	String found in binary or memory: https://www.youtube.com/embed/$
Source: chromecache_471.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_352.2.dr	String found in binary or memory: https://xp-qa.apple.com
Source: chromecache_352.2.dr, chromecache_251.2.dr	String found in binary or memory: https://xp.apple.com
Source: chromecache_585.2.dr	String found in binary or memory: https://xp.apple.com/config/1/report
Source: chromecache_342.2.dr	String found in binary or memory: https://xp.apple.com/register
Source: chromecache_330.2.dr, chromecache_370.2.dr, chromecache_398.2.dr, chromecache_360.2.dr, chromecache_585.2.dr	String found in binary or memory: https://xp.apple.com/report

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50211 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50234 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50257 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 50120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 50210 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50235 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50258 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50208 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50236 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 50121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50199 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50216
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50215
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50218
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50217
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50210
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50212
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50211
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50213
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50237
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50232
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50113
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50234
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50233
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50236
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50235
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50198 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50213 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50232 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50127
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50129
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50120
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50124
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50164 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50201 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50141 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50212 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50256 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50200 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50208
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50201
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50200
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50202
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50179
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50180
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50182
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50181
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50188
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50216 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50191
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50193
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50192
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50195
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50194
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50076
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50075
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50199
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50198
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50080
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 50193 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50131
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50133
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50256
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50134
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50137
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50258
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50257
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50141
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443

Source: unknown	HTTPS traffic detected: 20.25.241.18:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:49977 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:50232 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.159.126.152:443 -> 192.168.2.6:50266 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@26/683@46/20

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2364,i,1424053567238745393,8923254789058136685,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/AAb9ysg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2364,i,1424053567238745393,8923254789058136685,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: this.ha="rtl"===document.documentElement.dir;(this.O=a.soy.ui)\|\|_.ba(Error("Ae"));this.na=null!=this.O;this.H=this.Va("K9a4Re").Zb();this.Ub=a.service.Ub;const b=new _.Imb(()=>{WDb(this);const e=Math.abs(this.H.scrollLeft),f=this.H.scrollWidth-this.H.offsetWidth;this.Wa(_.oDb,e);this.Wa(_.pDb,Math.abs(f-e))},500,this);_.$e(this,b);const c=_.hn(_.jn(this,_.UQ).Nb(()=>{b.H()}));a=new _.VQ(this.H);a.O(c);_.$e(this,a);const d=new _.UDb(VDb(()=>{c()}));_.TDb(d,this.oa().el());_.Ze(this,()=>{d.H.disconnect()}); source: chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr
Source:	Binary string: _.nDb=_.wk("McwVAe");_.oDb=_.wk("nGw9D");_.pDb=_.wk("ocQAhc"); source: chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
play.google.com	173.194.219.113	true	false	high
i.ytimg.com	74.125.136.119	true	false	high
play-lh.googleusercontent.com	64.233.177.119	true	false	high
www.google.com	108.177.122.104	true	false	high
part-0012.t-0009.t-msedge.net	13.107.213.40	true	false	unknown
aka.ms	184.24.201.247	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
stats.g.doubleclick.net	64.233.177.156	true	false	high
is2-ssl.mzstatic.com	unknown	unknown	false	high
c.s-microsoft.com	unknown	unknown	false	high
is3-ssl.mzstatic.com	unknown	unknown	false	high
is1-ssl.mzstatic.com	unknown	unknown	false	high
is5-ssl.mzstatic.com	unknown	unknown	false	high
is4-ssl.mzstatic.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw	false	high
https://i.ytimg.com/vi/C4uzmiVn8Og/hqdefault.jpg	false	high
https://play-lh.googleusercontent.com/z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw	false	high
https://play-lh.googleusercontent.com/pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw	false	high
https://play-lh.googleusercontent.com/pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw	false	high
about:blank	false	low
https://play-lh.googleusercontent.com/6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw	false	high
https://play-lh.googleusercontent.com/u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw	false	high
https://play-lh.googleusercontent.com/U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw	false	high
https://play-lh.googleusercontent.com/b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjiss	false	high
https://play-lh.googleusercontent.com/vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw	false	high
https://play-lh.googleusercontent.com/9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw	false	high
https://play-lh.googleusercontent.com/zIYevie2ONWPy0aVtCfmjrrBnetJuH9IEN1l8STqyoJW5F5wS_9wiA1F-oiyTR_gpI9PjTcAzmDj=s24-rw	false	high
https://play-lh.googleusercontent.com/GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	false	high
https://play-lh.googleusercontent.com/csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw	false	high
https://play-lh.googleusercontent.com/Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/V358DKJP2RLO71dDY-utlVRUtUqd5i9peLoaLnpV7zt1J-xFk__7_sx-AymkIjt-kil_XrG3biQ=s24-rw	false	high
https://play-lh.googleusercontent.com/N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw	false	high
https://play-lh.googleusercontent.com/7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw	false	high
https://play-lh.googleusercontent.com/NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw	false	high
https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw	false	high
https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js	false	high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=9qdt76iwqf9e	false	high
https://play-lh.googleusercontent.com/ELKhrJ7hv6iWk1rEBNgrzxEpc0cHXmWbyvwtoXxT3lWAz9h6cuBEjEgw3fhf4HD5VqbrLhTgj2g=s24-rw	false	high
https://play.google.com/store/apps/datasafety?id=com.microsoft.office.outlook	false	high
https://play-lh.googleusercontent.com/XM6MUzHrZgnqgHqbNfNd460VSiWac9xFKsYVpSU4czPoBFVFOiI-R6qVHg_NcwwGJtWjlvGnZeo=s56-rw	false	high
https://play.google.com/store/apps/dev?id=6720847872553662727	false	high
https://play-lh.googleusercontent.com/B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw	false	high
https://play-lh.googleusercontent.com/6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw	false	high
https://play-lh.googleusercontent.com/ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s24-rw	false	high
https://play-lh.googleusercontent.com/vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw	false	high
https://play-lh.googleusercontent.com/EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw	false	high
https://play-lh.googleusercontent.com/rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw	false	high
https://play-lh.googleusercontent.com/9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw	false	high
https://play-lh.googleusercontent.com/ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw	false	high
https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw	false	high
https://play-lh.googleusercontent.com/1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw	false	high
https://play-lh.googleusercontent.com/keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw	false	high
https://play.google.com/_/PlayStoreUi/browserinfo?f.sid=4786649840398366022&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58007&rt=j	false	high
https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw	false	high
https://play-lh.googleusercontent.com/DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw	false	high
https://play-lh.googleusercontent.com/emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw	false	high
https://play-lh.googleusercontent.com/dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw	false	high
https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw	false	high
https://play-lh.googleusercontent.com/c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_270.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_448.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4	chromecache_251.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_591.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_448.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/20/3e/23/203e235f-857d-c3ab-3fac-52f72f3a697a/	chromecache_251.2.dr	false		high
https://support.google.com	chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_448.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_448.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_557.2.dr	false		high
https://www.OneNote.com	chromecache_251.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/48/c2/f4/48c2f437-f725-e227-59ad-8c075e2907f	chromecache_251.2.dr	false		high
https://aka.ms/onenote-ios-suggest	chromecache_251.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_591.2.dr	false		high
https://policies.google.com/terms;target;_blank;class;cOP9Jc	chromecache_476.2.dr	false		high
https://www.dropbox.com/privacy	chromecache_251.2.dr	false		high
http://www.appxy.com/famcalprivacy/	chromecache_251.2.dr	false		unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_448.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_557.2.dr	false		high
https://support.google.com/googleplay/?p=report_content	chromecache_595.2.dr, chromecache_228.2.dr	false		high
http://mail.edison.tech	chromecache_251.2.dr	false		high
https://support.google.com/recaptcha	chromecache_591.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_448.2.dr, chromecache_478.2.dr	false		high
https://git.io/fjule	chromecache_342.2.dr	false		unknown
https://www.dropbox.com	chromecache_251.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_448.2.dr	false		high
http://box.com/static/html/terms.html	chromecache_251.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/8d/fb/f3/8dfbf394-7c38-8a86-f229-b5ca04f249f	chromecache_251.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_284.2.dr, chromecache_513.2.dr, chromecache_226.2.dr, chromecache_545.2.dr, chromecache_548.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_448.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/95/17/3c/95173cba-ae5f-bf73-f31b-f2206e46539a/	chromecache_251.2.dr	false		high
https://schema.org	chromecache_595.2.dr, chromecache_251.2.dr	false		high
https://support.xbox.com/help/subscriptions-billing/manage-subscriptions/microsoft-software-license-	chromecache_251.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_448.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_591.2.dr	false		high
https://is5-ssl.mzstatic.com	chromecache_251.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_448.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_448.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_448.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/54/3d/89/543d8963-7d8d-f64c-0617-6df5c8a5f720/	chromecache_251.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_448.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/3d/bf/7e/3dbf7e7f-4e8f-00b6-6456-46557866aa1d/	chromecache_251.2.dr	false		high
https://policies.google.com/privacy	chromecache_572.2.dr, chromecache_552.2.dr, chromecache_595.2.dr, chromecache_607.2.dr, chromecache_480.2.dr, chromecache_476.2.dr, chromecache_228.2.dr, chromecache_211.2.dr, chromecache_529.2.dr, chromecache_339.2.dr	false		high
https://bit.ly/outlookprivacy	chromecache_251.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e33	chromecache_251.2.dr	false		high
https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1	chromecache_387.2.dr, chromecache_472.2.dr	false		high
https://play.google.com	chromecache_225.2.dr, chromecache_344.2.dr, chromecache_203.2.dr, chromecache_528.2.dr, chromecache_518.2.dr	false		high
http://www.gimp.org/xmp/	chromecache_414.2.dr, chromecache_202.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_284.2.dr, chromecache_513.2.dr, chromecache_226.2.dr, chromecache_545.2.dr, chromecache_548.2.dr	false		high
https://support.google.com/inapp/%	chromecache_448.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
184.24.201.247	aka.ms	United States	20940	AKAMAI-ASN1EU	false
64.233.177.119	play-lh.googleusercontent.com	United States	15169	GOOGLEUS	false
172.253.124.103	unknown	United States	15169	GOOGLEUS	false
64.233.177.138	unknown	United States	15169	GOOGLEUS	false
64.233.177.113	unknown	United States	15169	GOOGLEUS	false
13.107.213.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
64.233.177.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.136.119	i.ytimg.com	United States	15169	GOOGLEUS	false
172.217.215.119	unknown	United States	15169	GOOGLEUS	false
142.250.105.119	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
173.194.219.119	unknown	United States	15169	GOOGLEUS	false
64.233.177.100	unknown	United States	15169	GOOGLEUS	false
74.125.136.156	unknown	United States	15169	GOOGLEUS	false
108.177.122.104	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.7
192.168.2.6
192.168.2.10

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1428788
Start date and time:	2024-04-19 16:04:44 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://aka.ms/AAb9ysg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@26/683@46/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://krs.microsoft.com/completeRedirect/lxDNVZKK?correlationId=39685ffc3e1858cc72ea29eff46b6f54&platformSelected=Android Browse: https://krs.microsoft.com/completeRedirect/lxDNVZKK?correlationId=39685ffc3e1858cc72ea29eff46b6f54&platformSelected=iOS Browse: https://play.google.com/store/games Browse: https://play.google.com/store/apps/dev?id=6720847872553662727 Browse: https://play.google.com/store/apps/category/PRODUCTIVITY Browse: https://play.google.com/store/apps/datasafety?id=com.microsoft.office.outlook

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.9.94, 142.250.105.113, 142.250.105.102, 142.250.105.101, 142.250.105.100, 142.250.105.138, 142.250.105.139, 74.125.136.84, 34.104.35.123, 184.25.165.167, 184.31.62.39, 20.12.23.50, 192.229.211.108, 13.95.31.18, 199.232.214.172, 74.125.138.94, 172.253.124.94, 64.233.185.94, 173.194.219.113, 173.194.219.138, 173.194.219.139, 173.194.219.101, 173.194.219.100, 173.194.219.102, 64.233.177.97, 64.233.185.95, 74.125.138.95, 172.253.124.95, 173.194.219.95, 64.233.176.95, 74.125.136.95, 142.251.15.95, 108.177.122.95, 172.217.215.95, 64.233.177.95, 142.250.105.95, 142.250.9.95, 142.250.105.94, 184.31.52.29, 13.85.23.206, 104.76.210.86, 104.76.210.84, 104.76.210.73, 104.76.210.87, 23.44.104.28, 23.55.252.214, 23.79.51.34, 23.61.218.120, 23.40.205.49, 23.40.205.74, 23.40.205.18, 23.40.205.26, 23.207.48.206, 23.201.214.36, 23.40.205.81, 23.40.205.34, 173.194.219.94, 199.232.210.172, 74.125.138.139, 74.125.138.101, 74.125.138.102, 74.125.138.113, 74.125.138.100, 74.125.138.
Excluded domains from analysis (whitelisted): xp.itunes-apple.com.akadns.net, ssl.gstatic.com, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, a767.dspw65.akamai.net, e17437.dsct.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, itunes.apple.com.edgekey.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, fs.microsoft.com, content-autofill.googleapis.com, krs.microsoft.com, e6858.dscx.akamaiedge.net, amp-api-edge-cdn-lb.itunes-apple.com.akadns.net, c-s.cms.ms.akadns.net, itunes-cdn.itunes-apple.com.akadns.net, edgedl.me.gvt1.com, www.apple.com.edgekey.net, a1437.dscq.akamai.net, c.s-microsoft.com-c.edgekey.net, clients.l.google.com, www.apple.com.edgekey.net.globalredir.akadns.net, js-cdn.music.apple.com, amp-api-edge.apps.apple.com, www.apple.com, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.googletagmanager.com, xp.apple.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://aka.ms/AAb9ysg

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	downloaded
Size (bytes):	7626
Entropy (8bit):	5.215559608926212
Encrypted:	false
SSDEEP:	192:OtQ0m8mBOZgS9tn0Ll9829FAeHlVPrMNW:OtFuSD4829FAeHzPAW
MD5:	33AF753815E0763128B33C38F393AF19
SHA1:	FD81C07EDD497B91F91629687D2AB6976F287E17
SHA-256:	A7A8465112A5F495E5C95139568A59BF35B3116624A5861B71472070520D699E
SHA-512:	D5981A0D80035A3E0B8EFBE12B90C5E82A53F8C2CBC100001D344DC645B07A76DB3B75D863A5BB733F54B9E13B4C0A515B63041F50DCFC9AC750C092C436DBF5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.26.d8fd25d7ba389f9fe03e.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[26],{71026:function(e,t,n){n.r(t),n.d(t,{environment:function(){return a},eventRecorder:function(){return F},immediateEventRecorder:function(){return q},logger:function(){return D},network:function(){return E},setEventQueuePostIntervalEnabled:function(){return N}}).var s=n(76588),r=n(24178),u=n(32722),o=r.SC.attachDelegate,a={setDelegate:function(e){return o(this,e)},globalScope:function(){return window}},i={AJAX:"ajax",AJAX_SYNCHRONOUS:"ajaxSynchronous",IMAGE:"image",BEACON:"beacon"},v=r.vc.metricsDisabledOrDenylistedEvent,c=r.vc.removeDenylistedFields,l={},p=["dsId","consumerId"].function f(e,t,n){var s=null.return n&&!v.call(u.Z,n.eventType,t)&&(c.call(u.Z,n,t),m(t,n),e.apply(null,Array.prototype.slice.call(arguments,1)),s=n),s}function d(e,t){l[e]=l[e]\|\|{},l[e]=t}function Q(){l={}}function m(e,t){l[e]=l[e]\|\|{},l[e].anonymous&&p.forEach((function(e){delete t[e]}))}var y=r.SC.attachDel

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	189446
Entropy (8bit):	7.988359190242352
Encrypted:	false
SSDEEP:	3072:4V2AdqOB5zIXm9CGsdgOfiZ+mSG7lkEcDlPaj3H+lzhnWRy29tMV15gaYSbE7u:xAdqYCmzs6Ofi4TGR2JPaj3eznd2nMVZ
MD5:	387547FD54C693C114FF72576C5971CE
SHA1:	A0FF8E64FD3E61DD1142EBA06F969221ABAB3039
SHA-256:	D89318D9C1653A9A475CB99CFC1CFC2E2D334D391A4DE62896C7A077BF55B60D
SHA-512:	B71A3F754321E695273B51295E8CAD5ECDCD96D239E9C143ACC43D13E056D5221FAC082DD13B7B3E1B570404EE055C97A6247B94E0BD51494945E2BC4051EA45
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.MH..6l.......?X....O.$%^%)..y(.......R.....9....G..DN....'N,9..X.h.u#m.HQ~.8I..y..q.X.gNr[.J..3.....$zK"YV...@..V,.d....).G..k.<2O.9.9..$.N.!X&7DI"1.9.dV;.Nx.-HM.e...ms..3.....N.<..F&.>J$..8$1..`K.=~B.u.}....(.....#..d..-..M... ....b..m...-I..B.}w.....q.]\|5A..<......-.M^0J{..........}.H..+..[....r...;)g+.....I.c..'v,..-..Dv...M.m....K..v[.N..K.~..$....&.dy;.,.-.os.A..u%...l.i.DY...a....8.#..l+.-Ak...-.cT..../I\|...,1......'...,&...c.+....}Y.A......g.R,@w%..m..X...-........+v.dKt...G8iA...x..7...q...<...I.\|.r.@..{....Q`..W.dI.,..@I.,Ivr-...lY...o....(0.,Z.?..k..hO.o&..pC...Y..................K.mK.$...[.gf5......9..y\|>.b(.b8...8........'I.....Zji.QZ.=._.....u..>K....RHw!...m.vc.V....N."DSS2.`f._..U.4S0i.....m.I..C..P...t....e...M.4QP.$....Y.C.FFD...$.b+.j..a...!.fl0.IFD..\d,yEh. .I.Z..M..x4..I.B.@k4...$.I..jc.H2.Eq..a.K..iB.#c#.b##.......P..TTE.l..!9...d.D.M\|U.1.6..21...:.i.r..$.V.....6KD.bbaDl0.,Ye. .A"...eY..

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1880
Entropy (8bit):	7.8878381210189445
Encrypted:	false
SSDEEP:	48:NoW9rslz80QWxB7T8SjWr9slcrQUJKv/61H:NzrslIWx5TRmAiqQH
MD5:	41DB2402073D34E7C539CDFBB7290875
SHA1:	BC2B13CBDB0D33959F4F4A8B109DAD914280DD53
SHA-256:	CA4D719D9BF9FD875E4993E15D21D645303A93A032EB7CE738035ED880E29B8D
SHA-512:	AE7A13D618D884DDB2EDABEF76ACB029A529A8F92BFBDCE384B4CC26A7637B9F0A861A97019BD812B0C02359B6D762C71AA9509760DFED0787FC679603F09BF2
Malicious:	false
Reputation:	low
Preview:	RIFFP...WEBPVP8LD.../?...M(j.H.;....'...O..lMB.....Y',XE...+:._.p..>....m..^...v....m...5NJ.._d)...%W.G.]....<.,...c..."...C..?C.S.=X\|^.m[W.m.:'W.m_.6>...V_....'.....L.L......T.Ll..N..H.....{.L"<...c..J..)..~U.3...k..f...............03+mU.L..8.....s-.z`..O?......RF...Vj3.\.....z.....Z..).......jy..V........#t%.s....:....>....F...yJ..........T........c.......<..dJ5..4t?..3..g8{S_]....8z..O..9l...(i..B.h...a....U....Y.E.=..@H...J-...LV)...%#....PU.s...U[..!.[L..l...5..F.+=..C...x........A.,..'...-.n....'5)....c...Qf.,..V.b..4...h..%.....n96.JB.....&..r{..M..I..J......V...,.._Dy.....)....c...:.......!.`.\.."=H..9Jx.G~.&>L.6.\.."c~....;6.(..~Bz._....#.pp..sw....2,H."A/R.8V.......&.....wa....{xC.e.;....tp......bON..3{x.}}.5.....XdbD\...b.I....N9).../.j.>...A.k...z... ;..+........KwX.........j.......I...h.`3QS..Cw0...2.OH..;`.$G..9IyQ....@...:2..DC#.86..#^...Fz5.z..U.Rl.W..#......."....n+..B.&........AM{.....k...z...O.@..k.?.....4

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	870
Entropy (8bit):	7.668561411611923
Encrypted:	false
SSDEEP:	12:61sFkct9I6HmEcbkItek+dW4wpMsb21T5Ivw6YQT8ti15LadIYBrIs62NzgaW3+:YsFhlHm9EvdW9L8iEti7LgIYD6MzgJO
MD5:	30EE1F61136CB2FBDA7FE3BC5B2E9A7F
SHA1:	25578E8B132C97EA88CBE6DA83AC46672E720861
SHA-256:	61D232D57F5EA6B6E89416D11F27DDD25950F5F20820D1F258D2D5FF63A76967
SHA-512:	1AAD0121C2B8C5FA3A6783170092ADF42D522797007CFA9229E9744E1A729C1964BC1F5FC4DDD5CD373DBD83AFF83D3082A909AF3FE50CCCDCFEA632C303B772
Malicious:	false
Reputation:	low
Preview:	RIFF^...WEBPVP8LR.../?.../. .$E.;.o.=0.L?.p.H.".........t.I.".......a.]..&+......#T._...I$....)JLH..j.h. @.3"T.#C.s....H../ "".F....C.)"J.Fi".j.mT-".....(..j.jO?._..6"""p... A@~..q.?..~.%.H.6...P&.lg.6.CYl.R.......V.......O...xy...6.=<\|. ..;.82A.A.OBB..._(~V.%.:.. T..!.!,.8a[..j.&.......2.!1..0........d...^l.5b'.mk^w^3/._.../.....~.....4..B.t*`zS...[m.6.....n3..\Kk...hEk.....v..hKk.oK.v..lOk.s.....Ag.U..N..M..=...T....@.....^.pz.N.Nk.}..c...5...#..S.=m..L....h~..g.......N..p.C..........B..[...[.._......j. V....8>!(g.zM.....3..@.#...D1>..h>"..PW.@..M..1.[0))..R.9..LJJ..8JH.....A..G8r.....^.Y....!U...@.....5B..p..K.(... ..Qsz..$......\.Z..~...+>]d....R.T...........JH.>)..5. @....O..W..y..exa$;?...8.je..&...e.&.F.........Q...5B.t..E:@..GrKK...N.:..c...(sn.@...bS.S%...(<...........?.%..\X.......v......_.f.B..k...lg`..v..3.gC@.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	31756
Entropy (8bit):	7.956502283816247
Encrypted:	false
SSDEEP:	768:St2kT5NDIf0gcLIpQIP+DYzwVTCAxC62NxBcGFVUKOtLDvE:St2kT5N0f0gcLIt+DWwVTxQ62NxBnFZh
MD5:	2BF44080957E5D7552E6E4F36DD55652
SHA1:	F413AF4B336B19710BD76168CD2D1F39BE0A653E
SHA-256:	8621574F773A70374D42FADE3865AD3AFA33D31C2256A9935DE61FA1EFF65F9D
SHA-512:	B47201404E19FE2A314DAD8788ED6D2E28EE79B50BFF1D0DD805356A969D4B2B7902BE73822881627698A3B8FCBFEBE733358172C23A8F225A642E1764952857
Malicious:	false
Reputation:	low
Preview:	RIFF.\|..WEBPVP8L.{../..I.M8.$5lr..@ ..,.i!...PU..U.O......VV../l.SV...\r....-+..........t._.I_...z...l`..V2..c.XF..n1]7..NG...G.....P.O..6.....xw.J...t.U.k.0..--{...s......6l..p..".}.n.rZ.@..-8..\k.F"6..v+....j..~.A.U?...o.}?.n\|..x.x....V}N..U^..p.~...B.j.q#..E..._]U...O..#D...d+..ZUy...x......f'..arX.......l.mNY.9..K..@.......O...^.$.c..".,.I\.pa.7\|..X.c.d..-7.6l..2...n5..^Z.NM.BE7...t.Y.y...R..]..E.M..mkz.]8c..u......W#...[.n.z5.RI.vv....uF...1X..~..........[YY....(.T...\]Vi....R.Vf..[Xyi...RRU.R.6..j.rZ.Z...!iY....K.UH...PYIiiU.TYNU..G......l......;.;.j^Z....0.) zl.v..37..+VL..c.......x...s.ad8.@..nn^........}E./....o.=.G?c.1.:.@..Y7..'..=...x....O{.../+..=`-....6.Y.:.@. 1...L.K.=.1.a.)....{d...+.u.....f...y._,u..i.f&...=..7.3..f.......`.i.@.N.......@.\..h....K.N......1....r....{.......Y^...0.........,..NX.N.i..m.C....#Lh..Hc=\.z.).........4...!...M......"D...R........l.9KK..I.]q..^...S......B#qO..C.1.P.vLbR...9...B.......$.v.......D.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	1124
Entropy (8bit):	7.797221913617723
Encrypted:	false
SSDEEP:	24:+qzu5YFxsottexNW/Xa3Ay+kevJYGAH81LqlgMGfsK:+qq5YF5eOwHeBYGKOCGfsK
MD5:	3D3C755E05C91266B192156B9402E6D8
SHA1:	89538A9431507569B65BE39F6ABC87A712D0049F
SHA-256:	B628CAFC5F0E7317F05A81EE4B86D157F285CEB0A470FEAEF9D9F711F7742FF2
SHA-512:	3E8A750CB86AD1C1A617BEBD2CCE83D56B1BFCBA6BEFCE3888BC6BCF9A646CF4C6838931FC6E5D666C8F20034504A395A1A53A7074EBDFF990E6D4E677AEE895
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw
Preview:	RIFF\...WEBPVP8 P........@.@.>a(.E."....@....b.., f..'....._N...U.%.'.../.o.O....;........y9x.\|..7......}....k.3.....?.?...........G.7..._b?.."....'...;..+..rz.7.<Nut.'6.......b.i$.fGr.E.._._...zW&.+f@...(..;.n.i.E...]...s.Z..........;Y..5.}..Eo.d%..D.0.g.T...h..-......\|yn0./..{k...T.zP.S.(...`.w)..:...u..p3l?.4.of.L..%....}S.j.j..x..2.......V.J....a..5.?.~....).....<.....\. D..@...xl..?.&....3.l<.M...5...R.uf.#..a...}../@.g.......".i.7;...%.L.'.....Y\.O.0i=..W.4s....S.Ou;5l..Jv$_....B.#.....=~...G.....). \|[.....p~.PR..;q.......r\......cy.K....Z.O,...@..YRRWC*...c.F.i?D.....5.....S:!.....1..1.....d.I/.K...x!..j..\|)A..E.....gT........N).a..+N:..P-M....d:+1X8h\.K.......@..8G.e<.-TW%..`.0..D.........../.X !=k).x.....[....a...[.,^..zx."D...W.....S.w.3.....T......y...V'.`.._......V..[.G..........g.z.r.7...c...Z..3.~.......j5m..9......s..\|.aN.Q-.>...C.E...3...........9..v.\1^/.....{...&g.}...j.%....S..+.Z...}....$c.%.$...HD.s0\./8..Ry.4\|..J

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	244
Entropy (8bit):	7.153897685834863
Encrypted:	false
SSDEEP:	6:c3Zulvhb4/Ep0/bXorL+jrXTvx2GCTn0LpIaoyl:c3Ql94sp0/jorUXTZ2GS09Iaoyl
MD5:	9DEA3CBD9E0F9B455FDE32DCA965B41F
SHA1:	8049A160E77BF9FDD2446113611BB8C99D1E5A53
SHA-256:	3A1344E63287114EAD7F90BE694B7FC95370BF7B215D89BE93A54F39C15011CB
SHA-512:	E559F6BC3C44DC6E793EC98832926FAEB3D2D34811041868244CA89DF67DFAEB899689723C0DDAB5A58063EB4E42539614BEBBA23E09A8697E863F20416DB594
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../....5...Fm4.W#...0D.]....J...r..l.2...6.mU....5.C.(.....'vi...R...Fm.t.......\.._..Y.....c; .........\| ....pk..b....`..........p..../.72<.........AQ.........Y..@.ErE.....d..]:..KG.^.@L.S..g..z..^.g.zg..\.JE..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9108
Entropy (8bit):	7.949328366075731
Encrypted:	false
SSDEEP:	192:tB9/jljn53/VOxAspx9xKFbpmof9Gz/bSOsq7r2ogCj:tBhZVVOxtpKb7ceOzO8
MD5:	9A062526BB5E6BF5306613F900DBF363
SHA1:	DBBEDEC1CF0BA32AA843507B779E0E35E3C65E85
SHA-256:	732BC48C537FFB075AA1A628FA19A1E2E137690D6C3350C1C301059809963C3F
SHA-512:	DFDC7BF76F735226D2E8122ABF1F5373A12C5F991D55C8466C2B6EB0A2D84A8F0C770B13E7C34D9CB0EA894C6B0BE6EF8B2C8CBEF606C3D5BC7621CFB295023E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw
Preview:	RIFF.#..WEBPVP8L.#../..?.M8.$.Q"o....[..@.#.?..N:.N......ZR..C..LdWm..C.sW...'....[.....:.U&3Se.&.2.......KkC....e. .. ./...I."Yn.u.K..$`.y.8.$......_.....3.).$GR.G..bN...{....F......'."...y..2W2....".7.u.H...w.".E..{k.[...X..\|.T...#...m...Xc}"RJt.....D)...R.\|..$6..$.0...}.B..>0...h.i..[....,:I.e..x...-..R&q..].#G72.t.3=....Q.M.8.E...b....E...xJ.....9.W..H..@...y.. .D.H.....-S}H..<w.>.H."....ya;p!.FO.....RD....xa...X.x..=@....R....g....k/.... ..u......o0l.6....k.....1..u..;..8..-R.bgG...e.r..;-.F......?.."=.:.c.+....P....%).....2.f...Ov....H.m[..lR.Z.].].].]1&.%^....9.....o..l.i...H.....S..B[...?B.R,..."I.........Z..+..$)R.../...T.m.n..}:!^.....o[...q.83a\:.efffffffffffff...aN.3.......'..q....R.._.]r9ZWbt.\...U..V.k.Vm+c.#..w...d@vD.IPvw.z...m.Z'...I.....g......fn.`.,.-....q.9..p.F..."l8.k........?..G...8..x...N...q..#............1L..........B.}f...C..C...Z............A..x....8..a.\..K..ts8V....T].j.P..sU.......T.....kp@...'.2/..U

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	962
Entropy (8bit):	7.684392242336812
Encrypted:	false
SSDEEP:	24:B9nVLbvxwOWgIeHCQsr3JGvGG64BdQfSBZeKYLRkdFQ:7TwCHJsrZq6EQ6BZeK0ObQ
MD5:	3610D7EF95052EE46DDC80B178A5F028
SHA1:	3704EBF55FC94BC7019EC8B184F05C24517B5E3B
SHA-256:	C5E8A690ED36408782988C0B1A5CFAC135A247A5C3D21E46029D93492592A7BE
SHA-512:	227A1449C06E5EAECF4AA62C69BF4E26AE6DAA2569EEE684359253DCDDFE2DBF368F26A454B030BAAFD9534FED0EAA92AF95A6FF02D2625F38FCD8D6B15BBE2C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8Lq.../?...w.1.l.J..?.....p.Y,.H.$9...Br .......H.")......g...[7GR.........K!.j5..........@"Q.$...D.(l@.D....R.r..)...BT.A.\...B.!....B.F..._!.B.Z,....P...E..wl.8\|.PG..+5q.n....:.s...y..D..7.h...Fc.1.C..7...w}.Ov.!.._..?n.R.%..3#...!..MT..!......_/..1w#j...W[R.....esG....ul9j.-.a.Q3...n.c.Y\|..2....._..E..e......6.q..."SQQ/>..].F......S.........w......n.....M3M..{...O@.B....j....Vv.n.f..V...uTcF....!.3..ShG`u.....6.h.5.\|h.-..h.%+.h..X..@.......p..;z.0.. .......7w....9kv3+.^4m..4q...v .u..q.;f..&. .y...4\|.....2\|.`.4..5p:...__..D.....Ep...5....c.@...\|}H. ..@......P ....I.."1.^.%>..9C.......b......tU.x$KN:/.......prW..8.%..-.$._2.K....x(./......;\.2E=..(U@....y....\..%./.g._..p.Uy'...y....L..H)../....\|.$'..\-7...O#.J..p%.w..k.8....k....e...L.?...f....n...k.....(....^..(4.,#3...ed..y.I.22S.&..;.1/..Z....y5........fQ..bl.sZ.U....EXIF"...II*.......1...............Picasa..

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9371
Entropy (8bit):	6.775324714137017
Encrypted:	false
SSDEEP:	192:aSkVHhQQSk+tvHzKRlZfR/bwJ6b3nvIQe:aRVBaTTKRN0KIP
MD5:	96E7DA23073D7FFEB2B90FCEF2570B2C
SHA1:	6AEFAC48244653FE982489338E70C5FB0D900FC2
SHA-256:	89514515CA490C1E66E3298D91D74EAF1F760C0D4B21E4E9F18FDAF3996554F3
SHA-512:	D1D82FB43FDADD9F8A3F55AD7E7D8FBAA0B7EBB82B0742B8440121EB272E3D68E7A67A163AA095BD6DD961286B61A130DCE130FA7C308E79639A2D6DD9E6A718
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/images/GooglePlayStoreBadge.png
Preview:	.PNG........IHDR...4..........n. ....zTXtRaw profile type exif..x.mP..C!..w.........t..`.l{.'.x".\|...6.....MZ....P.8;tr.4y.)C...t]..pT....e.qa.E-..#~D.'.... :.....#.#.O.0P.Vn......w..4.xo...mzG.w.............u..B+Sc.J.3..9-..1.YO.+J~....iCCPICC profile..x.}.=H.@.._[KU*.F.q.P.."...E.P...:.\..M....G.....b...YW.WA...quqRt.....Z.xp.w..w.....T.'...e..q1._.C..........'3.Yx..{..z..Y.....J.d.O$.1..7.g7-..>...B\|N<i..........g.F6=O,..........x.8.....s.+..8..:k..0\.V2\.9....D."d.QA....j..H.~..?..S..U.#..jP!9~.?..Y..r..q .b...@h.h5l...['@....:.Z...$..."G..6pq...=.r..y.%Cr..M......7.[....... K]-.....D...=.....g.....~r.v......viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceE

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5770)
Category:	downloaded
Size (bytes):	797444
Entropy (8bit):	5.614406611994234
Encrypted:	false
SSDEEP:	24576:/LFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmt:/LFI80BM4gxA3svhhuRrBiFpAv6DbgWT
MD5:	03C0C8C6DEDC445C681608AA4E8FB04B
SHA1:	C54A3193A1EBF09C921F48EEAD75C412CA4B1226
SHA-256:	0420D35BF00799E7F4D3531175BAFCC855A74E0E10D911F27A8585FDD8389ECE
SHA-512:	AC0FBA464F8360AFF7ED4B543D1893BBB2C83139CA97F76BF3DBE81169AC9C8DDB950C1E15A0EADB355BCD5322679989653001BA9B03A2C0EEFBFB4227BAEB63
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,wW2D8b,vrGZEc,fPcQoe,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	13388
Entropy (8bit):	7.985174540557442
Encrypted:	false
SSDEEP:	384:w6RfuXN6ip0Qjdd/1StIWw9NKoG7MErzOIGB2Lx:wDN6iSQxdwtIWQDG7MEeR29
MD5:	418DE379E4609B0E8F7074A51BEEF6C3
SHA1:	97B93C7F5F40CC0906967488BD0E53595C73715C
SHA-256:	15005030242937DD784BB19074BDABEDD98A38C78DC7606F8AD90868C4E4A6FA
SHA-512:	33C9B93C1DCE225AF744D81938D37CF46FDB3244D8ED30F6906C129583BC26A279621EA407182C4C828C8CBD6399D1DA8C03F2FB396EF8A03EC7826A9A9ABC8E
Malicious:	false
Reputation:	low
Preview:	RIFFD4..WEBPVP8 84......(.(.>E .D..!....(.D..p...W......1V...t...@y.~...u..g........d.._.=.~......M.....w......U...._...?....._.z.:..5...k.._...?........~......o._..._..I...~............e.....7...(...'......./....V............?./..P_L.U...o.o._.s.y.P.......?.?..w.......K..........\|.......^:?L...+......._............o...?....c.....O.?....'...?................../.....=u~....L....YK\|........`..:0%....m.E....o...ZNP.......7.R.FP....>..1.....F.u`.........@c.JK......z......x..n.. Zj.M.\|.-iV...p%.5......,_.(....r..;.N.%/.R..Y.Nw.kK6...L........?..6.L....H.......V.......{....3m.)b.B.hz....q...7.~...^...r.H....$...%....#7.,.`.Z....k4.Y.\b%.8..t..l.-k.>T.}..m....f^L.OO5..:^.<...Kz!...+..K...o..$.;mg#._.I8.9...`.t5....B.v.....-.8H....z..Y.7..=.. ..+w.*.....N.Ws....9.k.O2q.....p\|.K..f........}....\....tz.i.....q.\|..a.0`/Ld.v..X.. S..d...... 1"].9.....CMU.=dA'....pFV.PZ=..p.i8."+..flX;..u.`c7...\D./.7.0<...0q........W..[....O.t.....7.kj..-.Q. ..{..(..

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99196, version 1.0
Category:	downloaded
Size (bytes):	99196
Entropy (8bit):	7.997868398992993
Encrypted:	true
SSDEEP:	1536:SQIJfyDgC8VN2bW1ToDcINoJjl3ox2/OSTGaaLDg39z0mRGRBLfG:lgpEW1T+Hel402bxk3ymQP+
MD5:	474D73A771E0CC31B43849CD2BAD9CC4
SHA1:	1D973B9CD90543FA43E6E74F164149278B9331FD
SHA-256:	AE98C3B1ED18478144791BFA0C71056B422287CD41F9B7D35C99063B04BE58EB
SHA-512:	257279598503AA3203ADA4A1A29CFA550F0485D3F7231E815A3734405D6BA18472D3E3F248CABDF39A774BF9B752D83218244F578D2FECA2C33711AA53888C01
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_regular.woff2
Preview:	wOF2.......\|....../0...............................&..H.`H...>...,..c.6.$..$..(.. ?meta....@. 8.t[;5..Cng....5.P........-..3.j......1.c..6@..;.......FI}..#.........a.....{0.w.. .fd.i.K.+..p.cL.b]YJ.%..+...c.HF4.ett....=...N......."F......../p,1Z...V$...)^.M..-M%..y/\|.^I......;..>..%...Jl....4.L%....<.l.,.:..u.Wy......:W.F.....}j,. V......-.U.F...8Q..Z}^t{x7......j.]-..V.]..7.).....Zqt..kD...~.......dG.U..b.V1S..8......Q...D7.]....n.9b'....="........&...OtG..R......S._.D$.1d..&...9..=.l..yQ.._J.5.{.T.6TX...\..NX.....#.tqR8L.iDuRkW..2hUa)..7.+........Y...!.........z.J.5U6..C......R..;CN....=..\...j......o...[..P.....{@.L........Y....B..?..;.f..Y...j.]...`..$.iW0=.9Yue.xH7....5F.o6.._[......K.,...-..J[.f!w...VaT.r..\..^TXq....S..G..6...n]l..TA0..0A,D1....R.\|...S?..v...!1Z.lR.......5.LF.....H=..X......`$....`0....F]..m..1...i.S.x..Vc.v?..DQ_&..(.(.......3.........K....`.....E.......n.?..5L...5P.c.( .*..EAQ.....c.F.+.l.s.3..J.k:....+...}v..

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (878)
Category:	downloaded
Size (bytes):	1441
Entropy (8bit):	4.923625217494772
Encrypted:	false
SSDEEP:	24:ildT+lZadfID4P9Gpl3fBzR1SQLA2RAMRMT6XFKg/7/GpSw8G9bFw4YZn:ild2ZbI9GpvRQQ82OUugFKg/7/Gpj8Gw
MD5:	188415311B33E9DFC79C3CC6147ED47D
SHA1:	486B072C15EA89B3D39F607F92327F1A338254B0
SHA-256:	8B3DA2AC016CE7C6F38F10052C50C7958935276BD5885009716FEC7B3D8ED681
SHA-512:	DD95C297899B58507824F3A3129E060BBA8A9F7D2045526DC66DAB584D19571069D84EB2591B7FBE71A0FBA96DD1BE1A32995184D37FCA9A1F699FC71739644B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.356.4d5c8581cf04321d0a9b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[356],{84356:function(t){var o="touch".function s(t,o){this._target=t\|\|document.body,this._attr=o\|\|"data-focus-method",this._focusMethod=this._lastFocusMethod=!1,this._onKeyDown=this._onKeyDown.bind(this),this._onMouseDown=this._onMouseDown.bind(this),this._onTouchStart=this._onTouchStart.bind(this),this._onFocus=this._onFocus.bind(this),this._onBlur=this._onBlur.bind(this),this._onWindowBlur=this._onWindowBlur.bind(this),this._bindEvents()}var n=s.prototype.n._bindEvents=function(){this._target.addEventListener("keydown",this._onKeyDown,!0),this._target.addEventListener("mousedown",this._onMouseDown,!0),this._target.addEventListener("touchstart",this._onTouchStart,!0),this._target.addEventListener("focus",this._onFocus,!0),this._target.addEventListener("blur",this._onBlur,!0),window.addEventListener("blur",this._onWindowBlur)},n._onKeyDown=function(t){this._focusMethod="key"},n._onMouseD

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	8956
Entropy (8bit):	7.972053517151453
Encrypted:	false
SSDEEP:	192:UlbCKATseTe8r8oy/zF7Ntufqluv4rPoxSYlOK5cbFBOmAq:UlbCKk3rg7haylKxSAOwcbFhl
MD5:	377CF0E1FE167DE18CBDAB4B67D2E326
SHA1:	ECA8A9C29E2AE14A1DED33160286057C424ABE70
SHA-256:	24566A4C7B24A46CB1B156E593AB4C98E40791CC5E4A49A410A2AC5860509A22
SHA-512:	A86583215D6A29E00068FEFA905B94FCCF8C53F95409849D23F88EEF0DAC463D2F130684ECA77917BFC27DA1D8336FDE7C817C825B4A228BE1835DC981F8D9CF
Malicious:	false
Reputation:	low
Preview:	RIFF."..WEBPVP8 ."..P....(.(.>A .D..!.i5.(....p....C....}+....w..3...?`."..?r?C....._..a......~......{.........P.......I...............~@?......k...^.....1........./....p.R.V..v.....?.>C...../.O.<.t...D?.}..........x...]./..}A...[........(....../.?.?.}......C../........_.].......>>.j.......w......~......{..._........7.#.....................3.......bOk.G.m.G...k...vg..>.8...+.k.y...9...........\|?&........^x.."w.w...T.Y............"At..r.b.a...vr!.K.nFQK4.W,....Yc/#.c.R.....;1P.+"..>.3......'....A.......O.7...r.Ou..36,.o?IrE8.g.V......#1X.X.D....f%...O._....V..DMi...".n.L...ee...r..HW...R.....&..\|..{..U....p..,.rK..D....f....N8..n...c..v/....l.H#..mT..N..0&WG!.......~\.I.)P:.u...{#.Y.......I...#.J.2D.0..bD=`#UnZPgd..>w.?.....O.......#.t(f..Qs>[....[.L.W\..D..9-....H..W.U.%.....O9K...M..6.T*'PJ.C..9...;+5G..O.ITE%+.p....~..W..2.Z...7..F!.......s6.[<.p.`6..s.X.!...x..({.. ...L.m"..o.a..a....W..<.t.....c........E....K.P\|P.v2!GZ......S..U..N..(

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	21244
Entropy (8bit):	7.98833258384387
Encrypted:	false
SSDEEP:	384:APzfxTOmFE4w5KxW2ALrGTGa352Rbag9F4gKBo6834AqAj:gFE4xNALrGkR2g9F4gKi683rqQ
MD5:	03B1DC5DEF3A03B3B513FDD42B8F44E3
SHA1:	DA9BE9F8AA07196AB9D43BC9F86EEC8D4D2CDF03
SHA-256:	1D34D1F432B486C70B71E5ED7A74C054BF2EE85F74CE00C5C2954204C340C82C
SHA-512:	60CC6D3D5D953968BC01A503CD5E28D4D6BE32B3B55D5D1EA19F55DE9DC163CE2DE98E6836A04F3618918C7A48F8866C35B09B7704470256394A96DB3935D01B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw
Preview:	RIFF.R..WEBPVP8 .R...B.....l.>A..D.....D.(.....H..l..#......o...K.....?.Y-.6/6.s...?..?........w..j?.?.{........#..........{~....f...g.../._._-..?g...t.].............}.......?....u.......O..H.......U.....w...?..?.@?........./1?a.q..O..#.7._2.\|......K....?..E.O.....g...{..?...}.?.................,...c...q.....o..._+.....M......_......8...[.?..}....o........$ q..ZUU..n-..q7..Uj...J..\M.UZ.&...T....t.b...q7..Uj...J..FV..B..O.P..x..J.M/....CO.X.:[~Y.SHm...6...i....Q&.\|.UW........~...5.....m.f..U......f.K9.;j..f.Y`O..Mr?..O.I..^MliiFI).>...o._$..m....v...I...Fk3...-s.$.....T.v........H....O.yh......V;....sEd.F....$.vf.L..T....1.W~.[j5....Ut..:.....0....A.:iV.S.p....5..n?.x..,.Z.Y.M..P........5...{5b...:\|...$...}\|,3Q...{....n..p.....fEz...1.....h+..R.....l.{.z.@.m.z..`M...,..ay...m;N_...7...;...!&M.]......qiR......b.....$L....pr...^..s..;Q.....j.h.z..u0.PB...N..;.i..^9...5R...m..`j.<.:q.a.PdI............I........U..{..`+a../....SL.3.8..Z.:

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3857)
Category:	downloaded
Size (bytes):	1093131
Entropy (8bit):	5.4455993131301
Encrypted:	false
SSDEEP:	12288:1zXssN8xoKol+C8OGMVi7i1QEyOb+p9hq:hhlqac9I
MD5:	600E6F5357E53E70107DB38ECCB385E2
SHA1:	3E2FEDFCA9389F5F2BA3A3CD7F7058B0F88EB6F1
SHA-256:	FFB081E6249F8964F9C42AA5BF60A20CABDB8A7CF00A11FC840D6DA52A096546
SHA-512:	17D8BF30CB438DEA7AD42B42200EE433E6733AF13821901DFDAFC1156A86885B841797C503E549FF5536DC65C5316B581BF740DD6ECFFA8CD490F1599AAE243F
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-15e080138b0af73416de20b7ca4c63c3.modern.js
Preview:	/! See /acknowledgements.txt for open-source licenses /."use strict".define("web-experience-app/app",["exports","@ember/application","@ember/debug","@amp/web-apps-featurekit","web-experience-app/resolver","ember-load-initializers","web-experience-app/config/environment","web-experience-app/utils/config","web-experience-app/utils/consts"],(function(e,t,r,i,n,a,o,l,s){function p(e,t,r){var i.return(t="symbol"==typeof(i=function(e,t){if("object"!=typeof e\|\|!e)return e.var r=e[Symbol.toPrimitive].if(void 0!==r){var i=r.call(e,t\|\|"default").if("object"!=typeof i)return i.throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(t,"string"))?i:String(i))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,"undefined"==typeof global&&"undefined"!=typeof window&&(window.global=window).class c extends t.default{constructor(...e){super(...e)

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1552
Entropy (8bit):	7.8594540212727475
Encrypted:	false
SSDEEP:	24:zjF9cfYoaifnCIxqtKYTetGYbh/wcww8o6h547DtgUBS+Z+sjTt4ctVZDEkoPWmF:fmYo3ytKYTyGOwv3h5it3Tt9SPPW0VYW
MD5:	AC47B4C1D3EDF0FF4DB738F9DB8DFD2D
SHA1:	6EDA933BBC8FF4ED73A94A5F77BA09C7C6E82E2B
SHA-256:	CAB22C287FDBF0E475222226DC89AA41E4E44BA751EF7B1DE60BBB677DDD6C78
SHA-512:	6C4CD51225B1724F17A032DCC00DB2AF2820BBEB7970C5C7DB5F2B279460B0AF257157DE7F9A676F681C6BB647D5D01C62B60F469D0F558505F64D73C655F21E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....m.0...w........1\|T..e.DD3......x......Aq.6n.i.^..m$........;.W.....w.s..M.M..........?.t..O.]..........;.......J..y..W`ff..\|..gg'p....\}..l...ye.6.....T.......$..d.z6.:.....m..m..m.m.oc G..H..9f\|...-.1.\eL.......m..m..8............3....W......(i....z..{....\|....`@.t...j.P+.....V......+.........M.g.Up`..Y......Z.F...#.....B~..\|8m?...H....!....6...H3.H4.,....1`1X.".3h........w....O..h....b....).\|]^.(....t.u....=..E7..\|a......b..(.Ad.d.3....0..n..A.......Q5.'<....Z#...<..?.q..o.$.....(..}.<.rj~..(..?...9.....w.B.a..Vt../L.......5`..2p4&/t.P...+....w;/..z..A.B.;v.+@.....C.9}..>$.&H..AY.....B..A...5x .....z...$ljLmd.....k._..~.56....}u..5.;...S.%4....AM.]...N.51..8...-.E....f'....J...a.RB..S..yxj..g..\;.W-d.g........{...M...\|_...3p.v!.~.......[c.....0.v....?*7u.W.O.0.....2.[.w...a...,..4:.../.eCW...... Ero(..:.c1...-....w...Q.......H5.p..Gj.}.^.?^.f6.WGG>...........AH...)B.A.....\?-/.e...C..:[N..9..

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3808
Entropy (8bit):	7.950242030946938
Encrypted:	false
SSDEEP:	96:px7j5UyPbDc9Wb/yVDfnjGYXrN3YlkhlhSeaBPZwvvX:n7hbw95BnjGwBYeVMBwXX
MD5:	A941806E97C8F4B7381CD34941A53882
SHA1:	68C9F1A424281FD3E1F52C330DB2EEB8EBC232D1
SHA-256:	BD91B9F00D443C35D3721A8AEDA3077F539A7AC16BECE5F61E7E6B311615EC3F
SHA-512:	1AEA2734A20F3CA82A10C50125499FB507FA4F1E26702B2A0F669994745BF688AE6762FA1C27D201D198DDF1AF12B45A87B7D3A29E45EC58372BAF33248DA86C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../{.....m.F....h...[ ....?.(g"J.RPX....+.$.....Y...\|..2........o/.G..T..;.....$.e.C.L#.........B"....G..8.:fF....d......K...,.P.....b..r....p...@..X..a..... v..T.c....\@.`N.c....JU.._J..jr./.....U.`..D...kb.8.....}...L..).,.=..jF.......L+....+ffff.......2...P.....#..C.Z.n....V.Nk...3..2.!...b.X.C.J..j.I....q.....w#.#...m...._....j...}..."@R9.R.5.S..#.c.%... ..)1...'&@..?.....x.,&. .8....g;9..,.)).p5..w.V..........}...a}.....6.I.dQ.\|....G....}.:.eg.L......b.\...c.).......n.YU....(.L.. .n.'s..%.^.....{...)...y.......j.{i.. xj..T.I.c.....R..........V@..,d,R.l..l....:.........@....`.z..k%tFo.C.:..kn..8..V..U..[7F...a..h..}...G. .M.....c.NR...5....ng.."}..r.__5.~?....a....7N....Waf=....s.....~=...B.u..#?...`N.....I9......t....v..b?..m.n..B.mw.'g}..).w...o..y......O...C.6.%.S.c/=.q8...B.w..z...:....{..c.h0@...WJ..]..I.#.i..I.......V.q..<Q4.!...*JDB...>8..i.D$5....Q-...,.d.e..g.?/t.9....Z(..T.GB2.[-.Q..K...y..y.Ek.V..Yr~.7

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2226
Entropy (8bit):	7.870795894442838
Encrypted:	false
SSDEEP:	48:2cX6HWbqDf9knZSFNHBNcw1E3D/nrCpJ01HMFaIuIpAkv0b+ZuJQ:2wO9gSFBWT/nrCpu+8wAkvo+Zum
MD5:	3BD45DA96F49C51F07255F200C9A5F2A
SHA1:	5F2651E7D417F69F7AA8D108A965BECF8ABE69D3
SHA-256:	EED9EB96DAAD84ECD65C7218FCE4C4C4501B9DF4A205CC7BEC0CE7030DFD88D1
SHA-512:	971C6BBBB557504AB46FE52E551D88AE6469A073A2FA055C2CBBB86A40DCC2DB6DDAE6E55AB10558000B8065B9BA2380B5965404353EBE4C89BB920F44672AFE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M0h$IQ..............J...@...X;z..s..m#G.....K.......5..$.I.[oi........F..h...G.&.ZK...F..:...._..).......\|(?e..l....NL.`."q}lj.}?....{V.Ym...%.....?.{z<..m...m{o.m....y..+.3.=.w.E.[....CE...^..&2vOO.{....<...I.....~.....gv...g~.m...m.Q...(..HR...(kww..-...;p...F.u...Swww...xc.8@.......a....c.....;.(5...G..Mi......&m_.m.....}.X:&..oq.......v'D.r.eP.6..k..g.k._Sg.E.k....G.^C..OP.2.....l."..dw}....Ft...>.o.I.......fU..m........S..^t&O.C..jhq..Q.6Jx.J.`..........5.../UU..T.....F.../.....PR1$..Ip".o.....a...]q.....Z..3HC"..MI.58..H.U.1D....y.t...3...]dq..E.d.Lh..........J.......%.9.cS..1..jnu&...ic\|&1.ZBj..b.V?.....BM...JLNA...R1..6>..h.5..$.. ..K..2...fb....L.A0..ic....@.p.(......@ .....i.Y.nU..t.../M.A.Zs....H.M..`.`.f...^._..e.........9....#.1..,.`.&a.O...D...,..Gk..cQ.U.H/..e.3.4D"..\.va....5...m5_Zyu'...0...2.J.p......!.-E.J...eLz..!..u.N...m.....5...fg..b..T.+$G}.....8M.#AP.....W.Yyr..k....xb[S.P5.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	7.358546821442648
Encrypted:	false
SSDEEP:	6:PZVS4Q+recdKlUVHiRQtvCoqYlbJq0AxtC0U8vAzIp9JtOOZkeWbCgfpH:D9Q+recdKlcHiRmC+bJqlAzIpTtOOZTM
MD5:	2F640AA73D5757BA0FE67B74E5D9F41E
SHA1:	A4D29ADF1BA739285BA35AFBD94D51734425429D
SHA-256:	469C936814B431210209150CA7F39A314A333269C07A5C83483D0C3EE0D772D4
SHA-512:	EB2C59AC81D5C2D8DFC90C5A06B283651225A3836A514B47E46009DBE9A9E2AB72EBC77558CD3CD4B3470844D417DE6958A7BFE1AF5BE16C2D7A2F9C314FA58D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw
Preview:	RIFFD...WEBPVP8L7.../.......m..s..c...m..[H.....X.q.\|..c[..*.m.#.Jw.E:.uro....z..m[....J..l.l.XNH...D<$A"X.k)......y..W..7T}........V.G..v4.d....%.Z....y)o.......]~.0jS/........$..\|.K......8M...=..I.q....[.9s.../.F:.j...{n..2..d.#A<.T.A.i.../..6.)..9.}. ..%.l..e_..=p.H......z.n.(^..}/.CJ..:;.G..3.q....ZG.ZF..&.b..;..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1842
Entropy (8bit):	7.8686931658333075
Encrypted:	false
SSDEEP:	48:V2aRqmpBIf+hVY/OTAjZOFbIPvWnEsluViRF68tU:gBfBQovWE3VM4r
MD5:	12DA10D9CC422A583E8809CAAE6171F7
SHA1:	CFA6A1A5369C69D86232267DD887F58809EA2F4B
SHA-256:	A7E96A2C96F56C0F4BD44A1EF8466C697A90D773B8B0B7612B3653BB4D205CA2
SHA-512:	0B6BE79311C3433AE242CB4CC3D818F0408DD3092BB2D1E28D8EEA6605E7D98D7CDE0980620A345BF337BCAC10F90175BF14F18E4C0FB981F79E131ED5EECB0C
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8L..../..?..=...m>.%..{..w.......j.N.le..u..xr.Z=..>....F... .....r.%.j...%....~..nG...../._M..........k.tG....3q.`.....:....i#......v...-..1.._...@..U..Jn....w9@..Sq...F..}...y.Tc.0?{...W9/.....J%7..c..+..u...1./."....A);............e.8u\yg.11...........N^)..}A..L.h...:,...c.H.Y.?.a,9_X".g....e.b..7..#}.JM...@..}..>.7...\.L..Y..,.}... b\|&[Z!Y.=..kQ~%!.9......2q9i....l..X....1]...Srak."..rr..Vg.......?.uZ.x..H.Gt.....\|.@..A."#.e.Gt.%.d.`A..5...-vY..1...@...x...-.....$...........@/l.t-...0.\..(b`..K.C.g..X..Y..1...t.......^=....q....}..]....j..\".........#...}.....E.y7t\.........dVr.d.q.w...o.......\|>.M....v..}..a^...../..um?X.Wm...c.N.f.W..V}..K....1.-TI..]p8=..b.H.5.....u.o.1f..%..\|.......b8.L.&.6. .iu....pb6s.Z'.g.{F..o.1b.e.5b8.......m#.d.g.{).{Z...e0K.t2.8..k..Q..C..<N.X... 4.z..#G.-....Z.'....`...}A...B..6h......!).. \|..w..&%.......7m.fI.v..[.7...+G...@....{?.:.S.&Pn..\|..P..E.Q].....3............nt.DX..\dA...N^.,j.[.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6842
Entropy (8bit):	7.96906227819572
Encrypted:	false
SSDEEP:	192:MjLzPB23UOO2Ikw6BsZyxwBFZJ2lSvVDc:MF231O2I2BsZyKBFHEEDc
MD5:	61AE66FDFE5C513A0E5619C9E5C91833
SHA1:	8425E423007C0CD4F5F3D4ECCF5BDB1F6AB72CB6
SHA-256:	87E46B14757FBDC8031EC5BBD0E7D65DC0B56C70FECCE186C53BFC6515D3C3C4
SHA-512:	1159C179236105701DAB66E1FC562D2B9F60A7E7078155FECB2364699EAF50898C5A2C6F254B8388A2614AA5D0BAD913F03154C2A04A6C177F7D3384DAFA1EBD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw
Preview:	RIFF....WEBPVP8 .....n...*(.(.>=..D.!..... ...w0h..e........!....;?.......O....C.'.......9....?A..}..W.?......y.n.E.?._.%>....?.....w./.~.s./..._..Z...A...[.K....r~........+...G..........[.?......b.....;.-......._......W.........6...............".u.c.o....................W.......i..pM0.......4....e'.M.v{......<8.j..LPi.Y.G..<.`H.i.o..Bl.GW"Ot.9j}H{.w+..1.%......\>s.....%gR......j.M.Z9.h..FJ+@N..A.....6o.K.yL_..c..L6.I.%-n...l..s)........!.tM0.......A._.'&}..../...ol,Al.oQt.s....76_...$.t.Z.{v.........X.N.&M^'..j./{..5L ..Q..W..2...N.,.^%...B..F...4.....\_.....&6d7..2..R.....K...... <.a..G.6..........<...(.S..O.....3.w.6...C.n.......(....C...~...TW%d...u`....\|..x...A}$Yx\|.Dx.....>5.1B..B....{~.........W.89-.Ns.f0Y....%_6.w..2\.K..9hZ...l...%S.x..8.{S.R....;.......#z.\|KR.\|.I.l.Z.....0vbr=..J..l9vn\|..,.w.&z.Nm..:.H..$b6...<.....G..NnJ^.u<...[....k.p6"..;...........H.......l...x.."(.Y.[.x.YM...7#...Q(..!.....0dy....e\.$.......]...4...y5../..>.D./.

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	206
Entropy (8bit):	6.880295672646258
Encrypted:	false
SSDEEP:	6:2AWZUtbC/VVGbD7J9iZ1DUd7kgXmaTY3+0S8:wqtedVafJ9KDE7zYOr8
MD5:	9DE344B11EF1B7FFE9169CEE56E5F5AA
SHA1:	7013E1B54B450D78441FE986C7F92FE6649A35DB
SHA-256:	44E1B1163C76A676E3600CD40A1092A84C8CAAD5BBD116E0F2C0E52D93AD763F
SHA-512:	E677DB9D93389D0E5EFB44D465D54B5BF0430FEC65E0B3B3DA3E1626D3CDB381D303BA50D2817F8E5BAF2CA9885503463BE61C3E97974F47358B925B5516A053
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../.......m#.....!0..{.4.4..-..!........$h...a...?5..H.k......wtW!...Uf.. .U.gy.............gP0h$I.../....t( ....Q2>._...d......(.s......E.n.t.../..C.....T.R.........K.1.Q.g.8g........

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2940
Entropy (8bit):	7.9144179696915335
Encrypted:	false
SSDEEP:	48:Kg7R8Yyn/yILvfcj06+Ic4QTniAdupEI6vy0zlVd9fl06vhfa3ka0qkW9Y2gHCtK:KkRpyn9LvfcIzT4QDdupDXqlNfl065Cy
MD5:	997EB9AF458C6DF564C09301CF9260A6
SHA1:	AD7A6F1F6A235512E4A3CCDFE677F253F699CE74
SHA-256:	F66958CF576D87CB419F45B2E9D066630099D117E44BE80558F152D9F1F4D811
SHA-512:	130EB98B02A2AAFC1C49A7FBF2ADC82D4098C0D9B50C677A659529388B2E90C6B78CFF3C6B1F0B7B909C3DCDCEAAB48B53E82E1641D38397A19120F78523F607
Malicious:	false
Reputation:	low
Preview:	RIFFt...WEBPVP8Lh.../..?..{...m#=..S........nJav..&.W3?..{L.r.y..9..k.a....\|.e^....+..m.Nm;....m.m.Fl.m.v../.m$G..u&.......(..1.....O..8a...e%q=v).H....Im..5G"..FR.S................1J......M...FV.dA..v.&.^..\|.............E.0.I.m..%s..6....;..._r#.i.o.US...9Q.yk(!Y.1$......-vTxJBl!..&......l.~1..m...c..v..O?o+..]...J..c.R2..@..@.....d.j....).....^....VzVn......//dO..o..........>F.x...D...)....a,.....x.#R....%.Q1Y.....^.D...w...k...B....v.O+...5D.d...^j....T..~........1..K.MG8bI(._r.fFM.\8Q...j!G.B.!..o..n9...m."G.h.%....]....k..r.Z.zdo...kV.i....@..p...7.%.j0...F..)Bn.Hv.i.K.....(..6o.*<`...1(.W..M._S.......:..o.........6.[......o.:~(.;..C)..\|...NU...lC...`"...2AX.......-rk.]..._.H...0.........C.t..."..,Km.1..a..8gG....H`.].....W0:...........,[Ak.a..0...)...e.2..U.........6U....d..P[&..!....u.#i..x@...Z....~..g#..?......a.......AS"..e...sV($.'`k..W...n1.......@e....6.p.....V.>.g.8.E..Xt........w..1Sfh,:r....r[...[....8C..Ft..a.La....m.%v.k..?q7#m...

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	882
Entropy (8bit):	7.658141913900172
Encrypted:	false
SSDEEP:	12:HoZGB9VdmJpBD9WieID/t1x+doVca7zjv7i5oBh/CViWyF08ldhOstIVHUPh3rS3:wGfVdmJDj/fx+doqk7i2vcifhLtauDS
MD5:	D6CFDAA52D298F60B063EFA3440B0E9A
SHA1:	94089B79C966E1576FAB459EEB583AC4DB65C28E
SHA-256:	C91EDA2A2AEADCFF53A9642F39246C27CBF11FD435018C47A28073CBAB5CEB8C
SHA-512:	5F73EA48897B6BEFC19A4225333607D44B2B74687546334FB4948550873055881E2DC2129AF3346E8FFFE2F20EA668FE0169B22FF1EB6D46C7DA928233E5D8DA
Malicious:	false
Reputation:	low
Preview:	RIFFj...WEBPVP8L].../..?....$.c..\0.....@.6qp.^..M#I....{.......$.I.D.B.d..M.o..K.+$........E...D.D.B._<....P...)<...0....@.D.y,..0D......<.b....6...~..........DH3...F..%..l[R$Es..}....,...!...n................G.x...=...5..Uu.......j..._..\.f_.1....k!a.O..]+.Sozf[J.z.um%L..U..S/z.f.....0. .ZM...k9aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&P>.I..'H4K......EY...D.....x.hg}q..nl...G.w...w............CT][1?\|.z.............A.Mq9i.?/.).L...Kqn...A......c....I.k.>....M..<.q9...G~j.?.......0......E...^.E.NO#...i.z$..&h.D.....j.....a......&(..42.J.SM...b.f....Q!Q.4a.D.8j..H..MP.....4:(...K,...nz,4.......8.....+i-E.....-..V.).V...s.hp...d2.c..eg..E..ih.`..J.....Fs;W.......[.A....2......b..B.M...x4......C...t..l.=..f.w..{.}o..U.M.........8......y.uW.n....{#}..}.E....8..j.X./.Fz.....mw.{.......C..?".

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	33182
Entropy (8bit):	7.980229814891373
Encrypted:	false
SSDEEP:	384:T4HjEABUqB4qR7nUC8i3B8mI8DW15t6XU7CW7n77adukVhmhTSt+ahDCaOoYPYnx:sQiUqmgaie7tAbW777itVYhrM8YnTN
MD5:	7B21D33BBB82B09ABD66A9AC59243B23
SHA1:	CE2DC4188AB4B25A12C8BF1141E13059A4EC43CA
SHA-256:	72A95B515F81A9102D1D290331505706B769572A309A1BD847DD02E394ED1B7E
SHA-512:	3DDFEC020A604ABBF4042B4D78E4A16DEC8B2702F4BEEA407043D64698CDC0FF517CB825F36ABE276499F3BE2A5AC563E7F6CCB26EDD0C8B39D98D5E20E893D5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?......m....d......".?.c. .y...I...)..R.n.On.nJ...e...Y..Xo..O.J.w...0.M9...O..`..._d...K.Q....l'.TIRU.p. u...T..n...AzFJ..\.$.S..e4.\|.7.O.{f..$...%..........I..84%5.,nI..I=#...^....Hs(._..;C...{......\`..{f...........S?......z...3._."a.4...^/<._d......$.CS...d&#..H.J..%?S.43..........3.].B.[,.U........1p.T....5.e.)-...........w..p.x..y&.{4"g.I...H..5.=3...0.H-.$I.......=.\2DXr..i..#...i#I..Z40M(....... H..Z...w.wh..........[.yB@U...`g....%WJ..$6.9..X@...R.a..6 .Y........o/.@..BpR..&..l...BD"......J@).l6x.F.8. ...BA@(.&...."....X.NJ#.c.a...........B... ".......B6...e..(.....X..."..Jn...6.CDd.A.....6.......b..8.... "..Y.;....7..B.e..l.....E.\p.@.a...a....3EF.!.2.....V.XD....c......W@..6....pD.4.X,c.xyy\|...N..e......&.@,..."........5\|\|....!.4..>4..Z?...._.....9.Z.Z.V+...9Ic..)....9J.Vk.c...F.D..0..l........@.>=.f."".\....n...L.....2.P..;9...68............"B....".,c..Y...".....n....l0.0l......>..F....0.P..6..Ir$...=w.O

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2620
Entropy (8bit):	7.907739599114583
Encrypted:	false
SSDEEP:	48:VvjWsYJqgQQ1DZsFI3v+a83wLw+umPOFXwrl6ipckhwH1VtCWjgg8Ofslf/zouhD:gsYolQdZ8KhjPqXNtkm1VtCWjgg8QY/p
MD5:	52025B894AEFE69D60C3062A654A9BCC
SHA1:	C6CEC5F7B2DB19A21339B974108DEE6B7190CF8F
SHA-256:	E838FE70129812268D3FBFAC662E7CC766EC430823187A64459F32C10DDEEFB4
SHA-512:	94A5924201EDE700FE74BCE864D96281771722B02AD1801EDE0F9747952CC5847494595B4656DAAAFCADFF48353C6591D6C273F24D1D8FC7AF1168FE9F89835D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw
Preview:	RIFF4...WEBPVP8L(.../?.....m.9...,..?0D....f[6h4....Z.Z.;....[h,.m.......P.6.c...B....II#IR9X...u#.....".I.O.... B.@....A....P........`.....M.l'........333K.3[.........Q...U=gV..b..h.LY.LL.W.K.u...0\|"Sf....&J..6%-bV"G.d.m...m..g./..l..m.m...?X.l.6.g.{........m.nF...m'u.{v8p.I........0...7....b..)8X........#K..bj.....G}...$.@$b2Y...A...1.@....I$.N $.@A...T.b "@].....5.2Sg.x...V.....%.Z2K.XN.)..X....4Q.Q.. .5.....\|.&f..%.\|.(Q.l....."c`..b.(....].LN....(%.}...S7Y.4EQ0!.A%.3zU.LD.......Z.e..s. +..........<._g.4 .lYv.F...:.....M.....!.cy......!Dz..D!...B..^...b/D>..Oe..PmW.o./...V..m,v6...lz..$.`..1.].fM.M.h.b.c..U.L...c.S..u}..2.O.....>..\..a..X._...[D.}Z..C=.b.R.a..cx.....5..Xqj2...4\bO.O%#c.zX..8.O.B..+...fG...Y...,3E...9.y..6l.b....I...G..R.\|.{U..#.M...qvk...p...'..4....-'..<.nO..^....>..Y.:......u.&\a....8...%c h.V.#~....<.n.X......<.\~5..{1...v.D.@.U../s.m.\...k.m.s........b?.a.}.....6v..g.......-.r"..)$..........d........).

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	272
Entropy (8bit):	7.003315047187512
Encrypted:	false
SSDEEP:	6:4k5ZKlxN0O5NxQCaF6rNOyp8oXnfo+4MAZnMLBYTTjfRY:4Plz0O5NxhayO4XQXfcuHdY
MD5:	D5D3B2C0C32D3DD03B361A59E085B8C6
SHA1:	F4D4F6BEC07F4AF2C58B2D9D5DE8830AECF6AF81
SHA-256:	1257441C5FC5BB9FEFBA6C3E196B5A9FC251F582A9F673448D5EBE90DE240BD4
SHA-512:	171708355F8B8F934499B6843F7D3564A87AF96C1F8FC87C11075002D8D099A55FEC10C0FEED7002C3DE9004619C706A5F647DD8CE585C062D899C7E52049727
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../.........f.."I=.w...F...a.9..&>..I.....Oz..<..m[.~..+....4.^.$...H`.\|-.....&...G..9..s..X.\...uV.....~...a...X.#I.......$@..G........$)R.>3.....KG."...m#E^.=x.3..m/...E.N...O.O.pv.2....=.^o........k=]a.}J..3.T...B......g.%..c.[.Q.......^..o..an..

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2353)
Category:	downloaded
Size (bytes):	775591
Entropy (8bit):	5.607033554009227
Encrypted:	false
SSDEEP:	12288:rLFI80BM4gxA3svlzhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN5x7HWwalM2TUYzy+:rLFI80BM4gxA3svhhuRrBiFpAv6DbgWY
MD5:	8C646A993F3D8C6D1BAC88E8415F56FD
SHA1:	FA66B055A27EA771F11AB8301939FD4A4E65AE03
SHA-256:	7AEAC72D89B2C9C683138B9033D4A12F86F40F0B5F8E984D2AFB2DC09849FDA5
SHA-512:	D420E700CA03B451D89AFA16A6899E165076A7687F28BA85FBB619B6F6A3E990AA6C95226C5A6A9A93B94BD82F4A741479EBED68E17319F702E01EB444E20668
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,appdetailsview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1810
Entropy (8bit):	7.782742801601338
Encrypted:	false
SSDEEP:	24:vCHQHJSYqzcZJaiJtanUsHxDKoDab/rGhdFBfXfjbaFdAm32bBeDGiYyu+7Be7Z9:E3FwtAjwoD+Kh5fPP1sDYR+CgtFv8v
MD5:	DBE7058FAB53AAADBA3E8A64731F7200
SHA1:	CE2E430957319BD9F9F33F4014DCCA9382D0A374
SHA-256:	8FA2D4CC29157073058624A5A6BB5866DDC4C7E8731D020A904C0929ECA595BB
SHA-512:	0F8FD53E6C69F5FA65530D5ADE1B6FF2350E30588F9A216F5E7897C772D2CE4F55BC408FDC7989C9A3C1AF8C6AAAB82F1328688E390A4705FB0742F79A8115FB
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/cb/8b/b3/cb8bb389-7741-a407-c29a-78c34ff23b06/AppIcon-outlook.prod-0-0-1x_U007emarketing-0-7-0-0-85-220.png/230x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 ...../.......>.J.I."....z.....n.q0....{.......9C..?..p..N..`?l.b=......n.m.3...w....\|.Mg....kl\|..a..eG#....S..r....`.VWX..Pe...K.....&m.<.._R.......aI................O.....\....`H..w..4O}wD.....hF....K.........&....y....<..3.*B=F.4uR.gI#.p.3..f........9.......y\|.O.A.....K..I,}\|.j..Q.@.0xCwn.y..]V...IT.RP...D...'.c....j1.FR .... H{.....7t.].#ym..P?k.D50..r.2..\|..B.A........:.._-...8..TC;...\.Z....}...Y..H.....,....,"@.r.._ <3..+.....6.H-.~w\..3.7D...\|o. ...hm.[}=.....#........LD....(.6....y4.......l[.X.......s$.....&,U.x...fw.\........(.1..#.Q..E\|..7.E..:.%1.)9..+....eA=.....C..^&suv.{.C...Q.k..S.Ho..o.<A3... . B..D.E[iB.PVS2..j.T..~..@{.z;........3.@fk.Q...m6....}.m.h.8.;.......F_.x..$Q...B....'Z32.>'.P.eD......Q..1.8...4...4..>..8.J..^s..J4..Q8..............$r.c]+Igq.~..a....j..q.5.b..Z)..s.[I.\#...S..........Q"I..E{.....qG..].7.hs.....+Si...O._..'s..swa..e...."."..f.Fe.`U..^..b.I.Z..~.."7...

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1219)
Category:	downloaded
Size (bytes):	128582
Entropy (8bit):	5.698594398983365
Encrypted:	false
SSDEEP:	3072:D5JacBqhUdU/kQmkZPLrCuvZcRl3p66/xzWF:ZohUdUgk9rgHm
MD5:	3AA4EE3AF6BAC01F887726060886FE49
SHA1:	ADEDD9D5F009C80CF1FE6D6F45ECAEA38328AED5
SHA-256:	8C2DBE77EC762E60B9B01CC8FEB6A86D776583F5A4B817468528BF43F988C274
SHA-512:	A4C748D75F82BE05EE86683CC9269A358DE60C0FF3FDAEF2211BA4DF61365F2700EF07F9762ACA333E7B609968A9CB02F6A4739924CED2507A354C6370B03C34
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,tucRse"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var ypa;_.ln=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");-1===c&&(c=a.length);const d="-"===a[0]?"-":"";d&&(a=a.substring(1));return d+(0,_.Qf)("0",Math.max(0,b-c))+a};.ypa={eO:["BC","AD"],eU:["Before Christ","Anno Domini"],AU:"JFMAMJJASOND".split(""),TU:"JFMAMJJASOND".split(""),vO:"January February March April May June July August September October November December".split(" "),IO:"January February March April May June July August September October November December".split(" "),FO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),JO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),PO:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),.WU:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),HO:"Sun Mon Tue Wed Thu Fri Sat".split(" "),VU:"Sun Mon Tue Wed Thu Fri Sat".split(" "),BU:"SMTW

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9869)
Category:	downloaded
Size (bytes):	10413
Entropy (8bit):	5.257533978847801
Encrypted:	false
SSDEEP:	192:8nla2OCNzv/zCPfx1WY6Q8X4tYPNF9cxi3/lpemo+AW4mr+oaq5:8nl3OCRvbIfxkgUPRcxw/lpemoPW4mrb
MD5:	1B5686244F6C6516B3C0CB73B85DEB30
SHA1:	207E5F9CC6C80B1B84C18CDFA732A5C3CC43AE2B
SHA-256:	3A91FF301DBC45B9035E65C7CACB68C5C06105196AB82BDE6AD6970348F2D819
SHA-512:	73AC415260CAA2291E3F2A24393B226E1275A1981775E3AA4183B2ECC941872AEB3F1024756479FD56E26F3E27976607E576A835864892F547E17DA17A3B6A32
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.js?t=1713369093418
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.import{d as e,N as a,w as i,p as t,b as o}from"./p-1ec6e574.js";import{g as l}from"./p-42d04e97.js";(()=>{const o=Array.from(e.querySelectorAll("script")).find((e=>new RegExp(`/${a}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===a)),l={};return"onbeforeload"in o&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(o.getAttribute("data-resources-url")\|\|o.src,i.location.href)).href,t(l))})().then((e

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	622
Entropy (8bit):	7.360018227574988
Encrypted:	false
SSDEEP:	12:goW+rA6Sj2Ze0Yppr3DljryW50FHT11msWzPIySoDVWD5TlTta/:gobmAeX3r3DkWQ5wsm3So0T8/
MD5:	39FF7552BB2F31BEE791376CDB4B9B2B
SHA1:	0A7891E5B13762CC013F47F52A16563A52298662
SHA-256:	B208F90A1EC3DF08DC635AF32F0E2D735B2442869D7A20E67CCBD625431763EB
SHA-512:	DFFE5114FC190FBD065E3F2C8D785D7F10A6CC9C2547E591C00644954ADD878205571808C2878D50C7960DB713C780C61A8E6C1894D994E5ADB78BB14CADC13A
Malicious:	false
Reputation:	low
Preview:	RIFFf...WEBPVP8X..............VP8 .........* . .>m.F."..7.....l..2.~'..D.e.&.q(.2G........>..X.....Y..F...X/...F....:.p.@.....5'.}...9.....6...Y)......7.t..d.W..].g.[7....d....lF..>.0..7P.Sh8...k?X..7..9=......('5.tQ..~..d....y.i.#8..B?...~8.g4......;.cd.t.....Y<.....9<..6.7g.v..>.g.1.......d..-.)....Q@.?x...Y.........z.....j.e+..K.../..Zz...2_..............-.....+.1{@...D..vE.J."..T....F.3.....U5z.._.IE.l...W/.....?..D.l..V.....`..O...].}..2...<A.e......... ..E&.5....g.<...].D<....io9...EQc4..uH...i.....r...=.].5......Kp(K.'.........o..4_.....EXIF"...II.......1...............Google..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	17977
Entropy (8bit):	5.172440917667389
Encrypted:	false
SSDEEP:	384:xV1W44hioeBevmrjGRp1AFjga2dCjrI7KV0t:s44hioeBA7AFjgaU7KV0
MD5:	E62FEA2030907AF7E89AE14B53FFA550
SHA1:	7B4F41FC31DA2F829A183DFF72CDD708EA76665D
SHA-256:	F66B859A3A06C27EF58D1CC069E5BA8A9A47B3C7AEAF448EADF1F589582C360B
SHA-512:	1CDD5DCFCA7F6EFB33854F4ED6BA0D535CC0D444A78499240DAFBBCA2ABE9772E14A5D0E7A34CDE9A9716E068CE5FD6F5EB3271BC549BF17DE075F18E31661CA
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.359.1a547c0d896fa5233fdb.js
Preview:	/! For license information please see chunk.359.1a547c0d896fa5233fdb.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[359],{65359:function(t,e,n){t=n.nmd(t),function(e){"use strict".var n=function(){return(n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function r(t){var e="function"==typeof Symbol&&Symbol.iterator,n=e&&t[e],r=0.if(n)return n.call(t).if(t&&"number"==typeof t.length)return{next:function(){return t&&r>=t.length&&(t=void 0),{value:t&&t[r++],done:!t}}}.throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}function o(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0.default:return s(t,Error)}}function i(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function a(t)

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	238
Entropy (8bit):	7.045749695935627
Encrypted:	false
SSDEEP:	6:Wd1ZoKwloGmpau12N9IUPNSZjSwiNRoBKc9:A1Lbx12VPNOjSwiroB39
MD5:	E37D455FEB14AA6D50B64F3865CE5545
SHA1:	BB67EF4AB3A9EF7BE3ECB0D2B7D73AD8D0CBEB42
SHA-256:	30B1646061F9307FB17A1E2A0393EE80DB4D85BF3C05E5800526771F06B141FA
SHA-512:	57DD9B395F55C2F1CD6DDE8E3B3CBC21AA138E97A6C3E12BEDC72F5ECD3BBAB21C3FD390424CCF8B53F4EF161873E3D016F40403DD7E2A8B80CEC60C739DBA52
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....(..g.o......C.6.2.$U.fEN.,....m........1.6RO.....?.O_3g..t`...B.........<....q$.i.,....}Z._..g.m$..}.8.....+y.h.\|....@%...pd.v.G....q..8.r.i5...G..U.. .."@u.I......%.nB./+B....C_......G.v...[+..`..$.X.V...~..

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	208
Entropy (8bit):	6.796529773581735
Encrypted:	false
SSDEEP:	6:43ZKlIqE1IdmJpB/nGuDyIghBKUjqcrgfiyHy:430lqSmJjnGusBxjdzUy
MD5:	D935897C67338E8043018C7E1840813B
SHA1:	D254A52264168B410401E2C379D86B3D4FE41A0C
SHA-256:	3DC480C6BD0CE0F762B8F7E91C43D650FAB678202069184F8DEF18FB4791D805
SHA-512:	B74D37FBADDEEC9D8199CCE6FE7767957CF6B8ABE664ED61C6A7A81E2D4590326D4949A7E666494D157F5B7AD1E03E3027F3EC0F393493A5FF530DAF773E5241
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../...... ....Gw54P..o...lP7.w.G...(h........Gi$)."...........@.3...W.]-...Oiv......S....njm{.'=..e..I. .J`g...@.1.cu....c ...@...........ub.C.......s4..E....S.5...G...I`."...a...I!...

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5880
Entropy (8bit):	7.9365576331910175
Encrypted:	false
SSDEEP:	96:p7+1iZWw3sbwxQ0X1DTNmd09eKWVCv2OFrn9i8Pa3K6sPfzKCqGT7M2j3VVATk3N:8cZbxD1/ACv2yi8P9fGCqGHTjlVAKY1C
MD5:	0411486320B9D5207FAE3AAC547CE8FD
SHA1:	39CB303F18AB006F845120EED8D840FD51ABDF20
SHA-256:	63A7B7220C070D94281F67E886ABFB277BDDBD22392D4057B8BD04F438B0AE78
SHA-512:	51E964BC037229FCD3005EC272C72CB7DD5D87C214CC2A75A4BF072EFA7122F5FFDB14331D125063012A8C6FE507D5B3FBC396EA4C70F5A80E222F6143E6AF0A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw
Preview:	RIFF....WEBPVP8X..............VP8L..../..?..Gn.H..BPH.....>.5....?......h.....%E..[f.. @@.33".hLG...Hfn.^.....Jy..$...rf...%a.$.`..>.k/......o..#.j....D......M..x.D.$!.@!K"[..W!Q.....$.J._ .H`,l..0.?....-C..]...`u./..k........`0.H........... h.1.2.7..\|..`X.0."-...~...A...?$^..... .......Z).B.ZWR.T.... .(...........9dY..5.=4.....$IV.Yw..f.oDL@.e.;....A....:..C.#h.NQ.K.c.}..Psv.r6...T."a.Y....\S........]kzm+7.D.\|..'.s..-r...`c\|+3....I...... ~.bm....f@kN...o....v......m[J63.......)..(.......m$IQ.Z....o}.h.....m.....!23...N.Sfv.R...333......V..h..n4i.J.L+......;p..g..:....z.l.uy.^.P...UmY....ww..........6@.D.jDH...\|...#I.m.Vj.{....7......i..........w.....Z.3INU..........3UF.9._..\|x@.EP.j.....\|...:.EyO..?../..lP3.9iP3..t....H..O...{.y.A.I.T....{,..b...x....x...../...._~._Y.)...U..._...W.=:)2K'_!.-......z.zCl.E......sNv.]..<..c.......tRA.J..1...66(A..w..Q..CPB.%..1..oy.kN8...$5.]q.......y.(A....E..D......S!.@.%....b)l......I..Q..9..(.#..XJPA....5..

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	6.993730114374904
Encrypted:	false
SSDEEP:	6:Y/PZdBrz45VdqQVVTDqBVVgdcSFsWyRVQa2e:Y3/545VdqQVVTDWV2F32Qa2e
MD5:	7D53C10A6AD0D3B061FA48DFAC576E4D
SHA1:	0F50E9303CE2287DE969DDB553D02A22D9541FD9
SHA-256:	148D8E2848281072E20F4F9F53C5FE15182FF8420D48A38FB80BDB70B0B780F1
SHA-512:	CC3FA26F8955D6F839A58E16A25AA566C786CB2F1B4634A596B3C1E71650AC4577C04F633451902D69066790F5BC41ED93A1F2C189F1A4AB54F608E09D263536
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/D8lU2BDUjyA9IkpQd5aEs5WCL4-sBw_l0qcbRvh1Fnj6KCAry9N2egg9v5BX2KayzLPJBJJPNP0=s24-rw
Preview:	RIFF....WEBPVP8L..../........$e/....yf....IRz..Z3t..;Em#9^......{..4.....Q...J...79....`?..6.h.....Ji.Y........H. p...>../.o.w4.F..4...y...,..@D...m.dx...#.<.#....Fp...m.DMsr.S.....#}.x.d..{.Z.k..m7.4w......T..2T..U.....oW26......+.

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	6.712236656780471
Encrypted:	false
SSDEEP:	3:2lygn1ZrMlllxNZuiy2VZdGv+BrxR5jkLtyVjai8pGWzWzHVHEC0OSA:2oi1ZYljLQilTEv+9R5jjVjWpGWzqHE4
MD5:	8368692FFC3D0CD67FBE0185D60569C6
SHA1:	9071FADA2FA9C11A752F8D00C04F5CDECB7E181C
SHA-256:	B9E68785AAF490791CB0AAA90D948545AEA332B090B6AC8E789A317813CB41F7
SHA-512:	5048611B102C6C214AD551B1C65BF48979929A1E64FD533E02729B7423A931BD6BF30920D1702AD06209E6A12108419E757F143238131A95A8A6488FB81D76E1
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/V358DKJP2RLO71dDY-utlVRUtUqd5i9peLoaLnpV7zt1J-xFk__7_sx-AymkIjt-kil_XrG3biQ=s24-rw
Preview:	RIFF....WEBPVP8L..../......(..h.K..>x..P.Hj..-...8..U....t..Y?.4..4.'':<...Ls.......[$.j...wO...#...a.......>Wu..K...$E...}}..;p.......v.[.%. .,n.....mBs.2.G...1.&. .1...tCV'.:+7O`..uw.

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8594
Entropy (8bit):	7.972041832412324
Encrypted:	false
SSDEEP:	192:zuNHCSZCF6C102YYaCWGBO2YAHsC5T3lfw+f5loPIU/MzBFbSta1v:Sk0C102YOW52YN+tdkIU/MzBF2Cv
MD5:	DB88717E6607B032D9690E1F2A1C8447
SHA1:	6B5CD217FB06FC4A7EC49581D2F8E3F46CA83483
SHA-256:	A702B4D7912E5E8E771907FA22E3D336906788A3094FA42EE0AF381F907612DE
SHA-512:	84194254A8B42A71EF76531E02B0D20A25F3398A9755A896C1372B3F7A151BFFC60FEC40A645934265B8397A91F911790C58004F6E6B8554E51F1C8850DAD6ED
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e338d943/36e9f782-1b90-4078-8114-f720e385d781_APP_IPHONE_65-4.jpg/230x0w.webp
Preview:	RIFF.!..WEBPVP8X..............VP8 .!...........>.H.I#"#...j.x...n.MM..h......n..~.t.x.....s...a._.'......2.........R.f.....C......{......6.w.A.O..}5....=..gh........._.>'........>w.G....z..~...?.z..W..`....>....v.....o........c..._.....}g?z....?D8@..m.0....S.=......R.7.&........U.S.b..!.Zr V..up...&-......D8@w.l@i...+HL@/.....(...3..f....5....h..Hi.R...>.B\|...'Pw.t....&.`.G.).PE....x^...g4R..-..a.(.... ...:....Ys......^7.Y.<M..n.WA.....Ft...H...$Jz...Q.K.F....\.O.s...;....!A_.%....y~.1.,2L...W..>...SM..L......]..`u.~9Sp~........+....-h/O/..u"...I..'b....ONr.R.>..F.....}.{3.)f.....SK S.0A.F~....!.P.#1=n]%re...W.j..8....G.L.@..U7..._.QG..<.~...a..u.u....I ..=@...v...3&.....n=.0....O.FU..0.J.h...q..O3b..T...6..K....8.vA..Y+x.W:-~.E.Z.be6.6\....=.....J..K.t..ET.....P9..rq.y0../....:..I.]K).#w.L...%#.......t....C.....jC..\|...h/+..>;.gh..S..^`L^..H\|...$..3.....G.J7n.G.[`..@.Wz8..h=..E'0w.=../.H.....7A.?..H.....+.+n.4.~m.[9+.9p{..0.

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1670
Entropy (8bit):	7.8767527471024845
Encrypted:	false
SSDEEP:	24:ph192w/y3IssGoCogO+MaZfU9LHAPwUtxrRiEEe/i0GI9E0cApv7R:/FEIsMaVogYsRiEEYGI9EzAx9
MD5:	4261C35A4740D97B2EA62DC1E730DE55
SHA1:	220A025A6B18C577508B7374741A9A58C2240022
SHA-256:	604C0FD6A3EA399AA08158490E254D25C68B0A89D2944C8E7BB9E00F4AC389FD
SHA-512:	5F7A46303F14AB9AD32353BE06DA9147EDFF298F09E02FD24F52322586383EDB8A42BDC821F603F11401FCE48778E492B4D04231260AD6B735F63E62A3A2867A
Malicious:	false
Reputation:	low
Preview:	RIFF~...WEBPVP8Lq.../?....Em.1..].?.E!....3...0v..\|...H...q./..."....AI#IR...0...=.Q$I.s.`......0..T.......@..j.P....{.....J.$..xx....<..\|.-.#........hv......;..\|.G...13333..Z..U...8.I..z..E..#..^.P)..l9....J.;.Ft.3;..wX.rh.6.g....m....6+;UR.m.Ie.......m[.........d..BF...p...H.]...=;..m.IJ....u..#..{...... .]..~...x.x.S..T...\@..Ep..Yr.J9\|..C:..0..[_....g.... .4X..~xd.z.K1V..65...!hs@....`....i;O=.U.Q.......q..V[u..6R..XM.....t:.5...hE....fX=......r.`....UN- .Y...U!....N.......3_z^...!.....(.J..................\.^.p.T/f....4...Y3.(.x9.s.+=.B..}...&z.-&..FQ........:.i.@.B.0z.=;.=..[.s_..St.(.+.....H....%....wF..&..C>.9..J..(l..E.I3.......B.<..+."~).....#.3Zn.%..J=P..hM...........q....NP.u.t.vo.{.Tg...`...v.A..j&E........f.^H.R...xRX..lB...CK....Fi[9.8w\|.".E.:T.E..`.........b.......jX.F^@.N.........z.4#...X..%..!...K.bc..,.(.2 ...)..U..XI.o...H=i&..+#.SF......F....`..%.!.[.....x].....a(.A.S.N.uRg:._.@.Z..>.n..N..BR'..$/...`TF...

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1402)
Category:	downloaded
Size (bytes):	143342
Entropy (8bit):	5.682920514745406
Encrypted:	false
SSDEEP:	3072:cPZKmtm7F33g5L5Yd5Ddo+g5EV+V4WonkjTcvlZAAdkNFxvQw07IiAM/sCp/kiqT:cPZKmtm7F33g5L5Yd5Ddo+g5EV+V4Woy
MD5:	764818032AB704B8CAF732702E3B1E96
SHA1:	0BE39301030C452081C201FD23E50844B9B48395
SHA-256:	31D38A3C950B05A896E4E1E2A232CC72FBAC5C0ADA04276897814B988963E438
SHA-512:	D2CA6191F9041BE58838DC723C6356E2BE9661A7C6906435F93E3798D4887CEED333758A9AA828F5BE6A714BE8D3DC9EA8D0F7023A08520657AA85E2863FEE4C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,IgeFAf,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,wW2D8b,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,PH175e,jZ2Ncd,tKHFxf,fdeHmf,rpbmN"
Preview:	"use strict";_F_installCss("@media (max-height:732px){.vFondc .VfPpkd-P5QLlc{max-height:calc(100% - 32px)}}@media (min-height:732px){.vFondc .VfPpkd-P5QLlc{max-height:700px}}@media (-ms-high-contrast:active) and (min-height:732px),(-ms-high-contrast:none) and (min-height:732px){.vFondc .VfPpkd-wzTsW{align-items:stretch;height:auto}}.xoKNSc{margin:0 -24px;padding:0 40px}.Ud1OW{background-color:#e9f0fe}sentinel{}");.this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.mCa=_.A("vNKqzc",[_.Oj]);._.u("vNKqzc");.var T6b=class extends _.Eq{static Ja(){return{service:{view:_.tL}}}constructor(a){super(a.wa);this.re=a.service.view}H(a){(a=a.event.target)&&(a=a.getAttribute("href"))&&_.rL(this.re,a)}};_.V(T6b.prototype,"fAsfBd",function(){return this.H});_.rs(_.mCa,T6b);._.w();._.u("r0aiGd");._.sAb=_.wk("efhmcb");._.w();._.YKa=_.A("sJhETb",[]);._.aLa=_.A("fI4Vwc",[]);._.pN=function(a){a.getData("enableSkip").H(!1)&&_.be(a.el(),()=>!0)};._.u("fI4Vwc");.var vAb

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	34150
Entropy (8bit):	7.9605429516569455
Encrypted:	false
SSDEEP:	768:1u9/IEI2Y8ovLDIm5VvC+TSPI05kE9xX0r+Xv4NdqnzYl:O/7Uh/ZeW0qqxEr+wNkUl
MD5:	4DF004D4F2D2F7921EE1AB1E16EEC7B7
SHA1:	39489B65493B9FE9883F359E5FAB5170C9D9E1F2
SHA-256:	ECF16BA0EBF68546464B4D0E8E47A95B961423E47413C25E5A5BA73DDED2FFD2
SHA-512:	09563045BAE58061067227F649EBFA4A334659B1A4BDB9164377B2D6BB85274AFB57D260609528E089533BFCB9FFDE4EBE8E945323D77EBDA5662E7CF7ACB83C
Malicious:	false
Reputation:	low
Preview:	RIFF^...WEBPVP8LR.../..I.M8l.F."gn/Y.._.<.BD.'.....n.....z..w../$uI..[]..9m[............f,......^...............C.....H83.3..0R.X.609/_[......$..\<-...tK...X..cl~...A.7."".....%..."-..!I..H.c..&.@K.L...I..h.~....F....\.>'...v..c.)"l.6qT......-...Hz.....{..Tko....."..5_...zo/A.!.!.J. I.-Gr.\|.\...j../AC/....."(..t."I.$E.Lf.fy....#.34Dyxf.t........u......A..H.RbL..0>..f.._d-.8j...e.....,.K..\.L..R..,J....gN.K{.$}.dQ"..Q.z.EO..I.....zk"c\|j.nm...t.WeHII.....gjW...J{...I.l.....z.SOii)M..3.K.Tm.:=..H.%.m.n.K.."......<$5.(.2.L.ti.....).!.E8Qyr.f..mW)...ZO..$$3-.....Xg.d/u..i...~c..Y.....x6.>..!.&t..(.h.]......3fg......{t.A ..p..u.a. [a......?.,.a.~......?.{u.Zn/..PQM..k^~.m.Q2...}..........#V.V..~w......L.a......wm.5wl.P.a1.P......./w......./........).~..Y.F.6........Q'o{w...f.K.j...a5...1.N.D.,l^...X0....r....,.\|...@...43X..u......g...~..J....'...Y..%....Nm..D.w.^....e.Rw....H.F.......3..N"..ok.0H}.Pv..E.....f...r...S...q....e..$........,X.......x

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	622
Entropy (8bit):	7.360018227574988
Encrypted:	false
SSDEEP:	12:goW+rA6Sj2Ze0Yppr3DljryW50FHT11msWzPIySoDVWD5TlTta/:gobmAeX3r3DkWQ5wsm3So0T8/
MD5:	39FF7552BB2F31BEE791376CDB4B9B2B
SHA1:	0A7891E5B13762CC013F47F52A16563A52298662
SHA-256:	B208F90A1EC3DF08DC635AF32F0E2D735B2442869D7A20E67CCBD625431763EB
SHA-512:	DFFE5114FC190FBD065E3F2C8D785D7F10A6CC9C2547E591C00644954ADD878205571808C2878D50C7960DB713C780C61A8E6C1894D994E5ADB78BB14CADC13A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw
Preview:	RIFFf...WEBPVP8X..............VP8 .........* . .>m.F."..7.....l..2.~'..D.e.&.q(.2G........>..X.....Y..F...X/...F....:.p.@.....5'.}...9.....6...Y)......7.t..d.W..].g.[7....d....lF..>.0..7P.Sh8...k?X..7..9=......('5.tQ..~..d....y.i.#8..B?...~8.g4......;.cd.t.....Y<.....9<..6.7g.v..>.g.1.......d..-.)....Q@.?x...Y.........z.....j.e+..K.../..Zz...2_..............-.....+.1{@...D..vE.J."..T....F.3.....U5z.._.IE.l...W/.....?..D.l..V.....`..O...].}..2...<A.e......... ..E&.5....g.<...].D<....io9...EQc4..uH...i.....r...=.].5......Kp(K.'.........o..4_.....EXIF"...II.......1...............Google..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3808
Entropy (8bit):	7.950242030946938
Encrypted:	false
SSDEEP:	96:px7j5UyPbDc9Wb/yVDfnjGYXrN3YlkhlhSeaBPZwvvX:n7hbw95BnjGwBYeVMBwXX
MD5:	A941806E97C8F4B7381CD34941A53882
SHA1:	68C9F1A424281FD3E1F52C330DB2EEB8EBC232D1
SHA-256:	BD91B9F00D443C35D3721A8AEDA3077F539A7AC16BECE5F61E7E6B311615EC3F
SHA-512:	1AEA2734A20F3CA82A10C50125499FB507FA4F1E26702B2A0F669994745BF688AE6762FA1C27D201D198DDF1AF12B45A87B7D3A29E45EC58372BAF33248DA86C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s124-rw
Preview:	RIFF....WEBPVP8L..../{.....m.F....h...[ ....?.(g"J.RPX....+.$.....Y...\|..2........o/.G..T..;.....$.e.C.L#.........B"....G..8.:fF....d......K...,.P.....b..r....p...@..X..a..... v..T.c....\@.`N.c....JU.._J..jr./.....U.`..D...kb.8.....}...L..).,.=..jF.......L+....+ffff.......2...P.....#..C.Z.n....V.Nk...3..2.!...b.X.C.J..j.I....q.....w#.#...m...._....j...}..."@R9.R.5.S..#.c.%... ..)1...'&@..?.....x.,&. .8....g;9..,.)).p5..w.V..........}...a}.....6.I.dQ.\|....G....}.:.eg.L......b.\...c.).......n.YU....(.L.. .n.'s..%.^.....{...)...y.......j.{i.. xj..T.I.c.....R..........V@..,d,R.l..l....:.........@....`.z..k%tFo.C.:..kn..8..V..U..[7F...a..h..}...G. .M.....c.NR...5....ng.."}..r.__5.~?....a....7N....Waf=....s.....~=...B.u..#?...`N.....I9......t....v..b?..m.n..B.mw.'g}..).w...o..y......O...C.6.%.S.c/=.q8...B.w..z...:....{..c.h0@...WJ..]..I.#.i..I.......V.q..<Q4.!...*JDB...>8..i.D$5....Q-...,.d.e..g.?/t.9....Z(..T.GB2.[-.Q..K...y..y.Ek.V..Yr~.7

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	962
Entropy (8bit):	7.684392242336812
Encrypted:	false
SSDEEP:	24:B9nVLbvxwOWgIeHCQsr3JGvGG64BdQfSBZeKYLRkdFQ:7TwCHJsrZq6EQ6BZeK0ObQ
MD5:	3610D7EF95052EE46DDC80B178A5F028
SHA1:	3704EBF55FC94BC7019EC8B184F05C24517B5E3B
SHA-256:	C5E8A690ED36408782988C0B1A5CFAC135A247A5C3D21E46029D93492592A7BE
SHA-512:	227A1449C06E5EAECF4AA62C69BF4E26AE6DAA2569EEE684359253DCDDFE2DBF368F26A454B030BAAFD9534FED0EAA92AF95A6FF02D2625F38FCD8D6B15BBE2C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8Lq.../?...w.1.l.J..?.....p.Y,.H.$9...Br .......H.")......g...[7GR.........K!.j5..........@"Q.$...D.(l@.D....R.r..)...BT.A.\...B.!....B.F..._!.B.Z,....P...E..wl.8\|.PG..+5q.n....:.s...y..D..7.h...Fc.1.C..7...w}.Ov.!.._..?n.R.%..3#...!..MT..!......_/..1w#j...W[R.....esG....ul9j.-.a.Q3...n.c.Y\|..2....._..E..e......6.q..."SQQ/>..].F......S.........w......n.....M3M..{...O@.B....j....Vv.n.f..V...uTcF....!.3..ShG`u.....6.h.5.\|h.-..h.%+.h..X..@.......p..;z.0.. .......7w....9kv3+.^4m..4q...v .u..q.;f..&. .y...4\|.....2\|.`.4..5p:...__..D.....Ep...5....c.@...\|}H. ..@......P ....I.."1.^.%>..9C.......b......tU.x$KN:/.......prW..8.%..-.$._2.K....x(./......;\.2E=..(U@....y....\..%./.g._..p.Uy'...y....L..H)../....\|.$'..\-7...O#.J..p%.w..k.8....k....e...L.?...f....n...k.....(....^..(4.,#3...ed..y.I.22S.&..;.1/..Z....y5........fQ..bl.sZ.U....EXIF"...II*.......1...............Picasa..

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8990
Entropy (8bit):	7.959388167722879
Encrypted:	false
SSDEEP:	192:qL+8F5flrsw2TNllSoGp5DRBcFOC41pMvNjC1O4BCJXn5tzmgb:K+83flr7BRBcFO9SCwjzzt
MD5:	7367103A0E06381FB02DE1C6E95DD998
SHA1:	C2A6FF6A9EC8AD29584C6E2D01B15C17658664AB
SHA-256:	162FAB3FA3AE06EAFE7E688D8628A6896E99139D18B34EEEEADCAB541565A8AF
SHA-512:	C45351B6AB639FD72D3A7CDB34D2F95CC4DC82BC46ACD029F2388FF091E48FCA84E66F698D419F8E6CC2537EE706ECD199F52D94DE69AD900E41706F43EC9B8E
Malicious:	false
Reputation:	low
Preview:	RIFF.#..WEBPVP8L.#../?...M0h.H.&.........$.)..v._.0J.ki..[t.$E.e...o.1....$+../.......E..$..<...p,..5.?^.B&"".I...."<(.d.S....$......N....t..........8.....0.....+...g..^..@..._F.>........:y3........?...XrNN<.B..wj......2.^..sw}....5www..`.. q;..{........}..N...`.m.m.m{..{.$....=Q{.W...}0..............1(.......Zf9:.M.RB.[.....$.....G..P...L.'..S<wHr0e...8X..i%R;....Z..s{.Y..@(...ze9;......4.$.......J..iAN...r.Osh......!.4o.w..xs..u.....z.?.}.r._:..gw...3.rddc.......^..Z...k..N`_.I....H...........'.z..<L..`>.......7....w..aS...;..W..$.\.p~...../.P..H......k.,=..9=..^.'.(...t_..N.W6#.+....e.<...(...8s.^.X{.QE~9...........]..p;........`...........P"6P?..p..Z.N.."(j...@.R.s.o.S.x.c".!.xxs.`z.....^..x...Ll..`........{..1P...~..#J...R.....[....}...Bd..{"M..g(..G..a.c..kz?y.l.D....0A.......l.......q.@..H.i(R..o6..!.X.y...i'..Z....%..~..?,../ck.)...c.......E...o....~$........Cz...T.............3.C<N.I.....i4M...........*=).p./$...........

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	7.381436238669479
Encrypted:	false
SSDEEP:	6:BZUD/+x4jC3ZCKlZ5n9Yc6LUkKH0e63io4ZWoEVvvouH3QyYUzSZhAwQXLpo3KMH:8YjrlZ5v67eujNovycZhY7gl
MD5:	49FE44DF71C20DD1E70BB35D1FE48981
SHA1:	17B45A3CEFED05DC47F8F15253D18460DAFA27C1
SHA-256:	4B961B44901AB92C97A0B5E61A7426E8320249D74F5608A59BA4DBF2D58AA6E9
SHA-512:	4A564D2A624C9A213EEA0B151CE8062FCF10DFCA9941A6FDEAB845D3A838AFC1DE6DA8AAC52ABF5C4A2C4E513134B78334A4A4E041223EAF6717441E1E6D135C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/No2w0orQK-x9CrDxyLjaMIeBnZIaldNZpAiguVlGKWMHtl7RlzgLQBeE35n2OA0zytGeDgo6Sg=s24-rw
Preview:	RIFF....WEBPVP8L~.../...... ..9....'Z.?...$+i,..'1>.m.6......>...e...d..g.f...0....<,....M.........v...y..x.(..<.U..v....&...\|Z....c:....<L....%...#.S.X....:..\|..F~..B.E.............`.I"...H.M[.l..Y..?.s..H ....m$u.......k...WE;.d...].Az..P...CYt...W.[..y]..$G..c.k.<$....[....z.jo-...........L......UI])@`...LPBqZ.b...EC..r2Y6...........n.k/D..?R~.....q...{...MR..3.(....r..:.G_G....?...K.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22904, version 0.0
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.9904849358693575
Encrypted:	true
SSDEEP:	384:evl4zAZ+ssqWqPRSKLA4kM0aQfBn9M2+iW50SIPzp6+NPf72UReN2CtbvejX7Ij:YqW+7qHP8n4L0aYn9jFDSmzp6w72Uyvv
MD5:	C654A623AD90BB3DCD769DBBAC34D863
SHA1:	8719DE38F17D8E4D73E2A5E4E867D63DD3965BAA
SHA-256:	DEEC787CCA1B9436E080478742A0299E0DB1A9712543A72D2CDC8373FC45A432
SHA-512:	B7440CEC44B71BCDBEFCD878A860EE3CC0163DC0905DC688EBCBCD7C6F5CFDFC187EA0C2B6247A362AD462450C34020933DF7825CF6CEAEB3138D65EB944ABAD
Malicious:	false
Reputation:	low
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2
Preview:	wOF2......Yx.......8..Y..........................`..`..8...Y........a.6.$..X..n.. ..[. ..S...u..l.....!......I=...ubpS5 ...o.........c.7<.y...Q..i.n..T`R.......\|h'..f.=4..G..xI&.V1...6...jf....%.y.!.).../Cj....].W%5VIj...(.........'Q.}.+.Jg.L0..$q.......#..d&...tV.".d..,.(!...p.).. ..d[........hdg.....!=..H..y.\..p.Q.O.........`e#.X..`#F..T....p.@.)UO.;85..y..@..)...!..........GNT.W...VV..j...-=+G%.yuK...u.........%c.Z......8%. ...V..P.^t....g.x.Tkw.g.....H..._R._{...u.....\%.L+...S...+).......Y&,......3......... c...v.S.LI6...X..A.....S...f-.f....X.....F.Zfwe<#c#...S......bk.HA...K.{.YG...9..24;._+ad.md..c..%..uo...6.5....../..tv.(.l.6.>.V..Q.[..Mr.O...,.......B.......TI.7..X.V...O_._3~.5..0..".$.(.j.....b.....W.O.F....$.H.I$.L.)..J.i....N..d..c.......".l..!.\r.#.\|.)..B.)..b...$D..J(..2.(...........j...:....h..&.h...Zh..l....i...:.....z.>.....d.!..f..F.e.1..g..&.d.)..f..f.e.....9.g...Xd.%.Xf..VXe.5.X.z6...ld....f....le....vv....d..

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003)
Category:	downloaded
Size (bytes):	18440
Entropy (8bit):	5.255534167782927
Encrypted:	false
SSDEEP:	384:kz8E0CXVpU4y7FeTEkrHfcBkoNiIvYcaSRCF+q4nAHY+6dDlqW1hCSallZsWY:kz8E0CXVpU4y7ZkrHfcBkSiIvYc/Re+J
MD5:	5F765A4A59A407D5DAA33CC0B48F2A35
SHA1:	44E29FDCCC78BAD49465D30F2AD9D5DE816AE150
SHA-256:	5C98E1CF88ADBADBE52321041E084AA2D5BC4DAAFFBF8EC6C45A438E8D393202
SHA-512:	ABD01A44A94A0BE2B000DB5BB60A439AFDA8948B32B3F0685AC9AFE175EC9E3701C3747457BE42032C1EA0707AF02109D46187FCA39F2815BD8AEDBBD365F38C
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.934.167974858ffab5c06580.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[934],{7934:function(e,t,r){r.r(t),r.d(t,{default:function(){return W}}).var n,o,a=r(32722),i=r(24178).function s(){return o\|\|(o=["app","appVersion","hardwareFamily","hardwareModel","os","osBuildNumber","osLanguages","osVersion","resourceRevNum","screenHeight","screenWidth","userAgent"].concat(["delegateApp","hardwareBrand","storeFrontCountryCode","storeFrontHeader"])),o}var p,c=i.SC.attachDelegate,u=i.Z_.cryptoRandomBase62String,l=i.Z_.exceptionString.function m(e){this.setDelegate({topic:e}),p\|\|(p=!0,s().forEach((function(e){m.prototype[e]=function(t){return t&&t.hasOwnProperty(e)?t[e]:this.environment()[e]()}})))}m._className="eventHandlers.base",m.prototype.setDelegate=function(e){return c(this,e)},m.prototype.topic=function(){throw l(m._className,"topic")},m.prototype.environment=function(){throw l(m._className,"environment")},m.prototype.eventRecorder=function(){throw l(m._className

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15710)
Category:	downloaded
Size (bytes):	1315045
Entropy (8bit):	5.486703405378463
Encrypted:	false
SSDEEP:	6144:qsZ2/h2j8zj/suCBj3siz82ILA+yodF7WY0WM1WAs0QHGlLX/lBB3FaqkjBdx6v:FIt4jyS1uHIZ1aqeBdc
MD5:	BD498BE75D39B74F9615A9C7D3A92ED5
SHA1:	30F367EABAD00F291822C4CD68F10EE7E5648A13
SHA-256:	4108C49C0C5FF2777D52BED5E4BD1F7EB27CC896F15638A577252B05FE499D65
SHA-512:	03505A65D5286D33C7BA6C44ED45F9019F2DE615F044D476347D6EC2BF7B10987DE538A6AD679AF39C6E8B64BF1139710685F7ECB7E99366ABDEA0D68BCC7F53
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d1204d05d-0618-27aa-c5ce-34b1b850bb66%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK
Preview:	<!DOCTYPE html><html dir="ltr" lang="en-US"><head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">. <meta name="applicable-device" content="pc,mobile">.. <script id="perfkit">window.initialPageRequestTime = +new Date();</script>. <link rel="preconnect" href="https://amp-api-edge.apps.apple.com" crossorigin="">.<link rel="preconnect" href="https://is1-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is2-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is3-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is4-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is5-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://xp.apple.com" crossorigin="">.<link rel="preconnect" href="https://js-cdn.music.apple.com" crossorigin="">.<link rel="preconnect" href="

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13280
Entropy (8bit):	7.960449800390654
Encrypted:	false
SSDEEP:	192:EXA78faBIIgC0Wtr1JbQhrs1WBxqlrX0w0OTqqBIZu1LwxLl1gRw4fDcGtu0uglT:L8fuIzClJbQh9qqqBAuN+h1kw4YIuFkT
MD5:	042D45E1ACC2A111B98DDEB55D0C3E66
SHA1:	C7D0BAC045E8A06FBE5A3FB010822C85DA42747A
SHA-256:	155ED1C06A9D1253C2783AF6BB6C434B76875264C1E26CAE948E671EA6629EE6
SHA-512:	75897D37198E76DFB4CE0C14B0854257C2B4E70759D1A7BC52EEB0B4CF8F3BB9B97823E8F0AED9CFC9FC7A4EC815BA5456B5C71B74DE2A3CCCE3A63EB5603B52
Malicious:	false
Reputation:	low
Preview:	RIFF.3..WEBPVP8L.3../..?..H.$.m.0..C....$..9.........K.k.~...ww.x..]..Z.s......~d.[m....d..S@..a...A.T.W-............#....Bv_.$eg.C...$i.I..........e..]...e'8....Ux..WedEde...6.aWp....%....._...$...H.)..B.+U..o.._Y...0...H..).G.....^df.7.$9R.......W...yG.'@.\|$.i.KA-....XvZ8..,..^z}..#=t.N..j.h.':@.I.....C......x.Y..z....N....!.@...).....W0.s.FC........iBq66.\|..@....{..k..P@An.E.......B.8.Cj.@.....s.R. I........_........"...v;....[^e..f..<...Q.$y..my..T..<....$ .yM$.u..` ...B.`..R....R.j.L....7i...b....gUQ............=...B....8..m.H.....1..m.[....-c..T.l.b...... .3dB....a.2(...$w.1..1...H...H,.f.fZ633333.}eff.23.@.v.L.4cq%E.z.YU.Q.....z.;...U.Ka.VfvKiJi....Q...4...].0J=c_.{JS...Z23,.F..m..6..7_.....m{.o.m.m[...n."i.....m.]I...km`.g..9.9.z....D.`..T......s...=....m+k.}..>.{..y..R..@J.HI.mN....{....s.sp...W=.J.1SC.4.S.).._..7_.P..%....D..3l........d[.2k..pw.<H....d.%........9.Zm....{.;?.B6.........{wL..8......S.{.z&.@\|j..#.U..._.LF[.QV.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35798
Entropy (8bit):	5.362239652266183
Encrypted:	false
SSDEEP:	768:xLV9hhNz5ouQq7vDsCYDHlo+yg2GsGsgo4ST5dX4+eT7Fi8mR5lfKGiLHCWtvdTZ:e
MD5:	3AB3496A7BFE9321B3FA0E2FC8668B14
SHA1:	EC704CA797F15BCDC6DE9AF8AB9F8311EB82B2A4
SHA-256:	E321803AB120C94CFFB459955214D4F783D14653749A9D9E01D5E81C5358C8D4
SHA-512:	1DDAFCEB91F8AF68ADDE9686537147615BD504D38FE24FAC13007DA412A58686D633A09A2E629B79297A826524D10374058E1A1178684C45D43795A62992E63A
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v2\|SF+Pro+Icons,v1\|SF+Pro+Rounded,v1\|New+York+Small,v1\|New+York+Medium,v1"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.eot');.../ (C) 2015 Apple Inc. All righ

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6294
Entropy (8bit):	7.954888158150672
Encrypted:	false
SSDEEP:	192:xnRvykBNBHOY65EWYJRCLDT/lrQo+IHHctEQHG/B3M:xndycf65PI4vFQoJnctxHGBM
MD5:	71FA9F5920145BEDD3FD217312A23549
SHA1:	10FDC7F1BF0F4BC6BB15BB0EB30A81FF4478A2C0
SHA-256:	19554DF472C0CBBB8DDE007BD5E0E5F62463C2C8EAACD03DFD8FC6AFEE979F1D
SHA-512:	0D3064E2F8EC3FA479AE9399702DE593B0019CBE65BEAC92686A8DB296E4ED62F23C5916B0841199621DF9F179C09D7B99B365F6CDF3FD9DC1A8DE5128BAA704
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.,....$g.afl.h.............y>.......G....3..RY.s.S.......jT..3[....Z...E..D.ed.#s.8.jT...fn.V.n@E....].].0g......Z.........J........A.QEeP....r..QA.?.....'W.......(.....l.v.c....m.m.\|~.m.m.b..I....M...,...m.j....k.h.T.......=..i...9.....!\|.6g...?.........u.......g.....eF.l.^....M..~.=+.;L..g...,.8s....~...S?..5.1t..#..9#....S.C..,.'......$qk'94k.;~..hx...B.I..8^_t.=t..f........f.z=....jl.Dg.....W..e..u...<._.........d~..?&.]..2SZKK.a...}S<Nm:h.....x.6..{.,..j.Psv..%6...l...5x..\|.....M7.l)...]v.K.p..J.......PaL.-R..W.[.Yq..t[.b.Ujv.8....a...nRc.{,..ZZ.(\.+j..3.&...."....eOe.9.G..}...=%.8N..!.u.dg.....l1g...].W..kJ......3.o.7.%..\...yi...r0C..,..[.e.~,;.<xZ.K..K.;.i..7h.k......Uky.w..B....s.%k5......U2w.(.Ll..3.u4[."..+....yk....-.,.}.....B.}...6-0".mX.....0..O..,....f..q.XJl......,Y..]'..T...0..".... .B...s.%.YA.6...,....g.gm......_..XV..e.2...j.43.8..C"...M.2o....C:..(9....@..=..A.W.54;.....={..c.D.)t..8...B"..[..o1"

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 107832, version 1.0
Category:	downloaded
Size (bytes):	107832
Entropy (8bit):	7.998208221352974
Encrypted:	true
SSDEEP:	1536:rbxyXX3FkzPtA4ze42dWs8sIQ6Y3SQnCvy7gALT4I073hT8k32wl0JvGdUB4x:rS1kUx8siYiZv+n4Ie82jBdUB4x
MD5:	2D753DE71684CC6C73161B6FE0C5A11C
SHA1:	B9B14B843008B6C9E8D6E933DDF52587CE0E32D7
SHA-256:	DC0663A7522F9A0A447DCA9A60A80275EA5906DDE2159B24CEA94A96D81DEE0C
SHA-512:	ED6FA0618E66A26107FCD828CDAE61C623C0BA6A0EF3BF6F49C1382ECB6A327D20A73A1F072E9BE6C2074DF6390D4DB17AD747FF7E7D64F66E1C25515DDD1E56
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_bold.woff2
Preview:	wOF2.......8......}................................`..H.`H...X...(....6.$..$..(.. ?meta....@. 8.t[.{.......}......R.Ju.1.u..WP...D:....:.v..{d..J:#.....T.nC@g.4.Q...........,?..{?...$.. V\.V@[.BH..2.b.!.U....9.....L....i6..9.\dYR8.......;un.5...(.."...b......pK....%9.gR..Aa.=......y._&.z.s..LnU...!_HJ..'[....x..Z.....to!.>.....c.J.....O....D..wz.K....Q)Gec..[.. ..#:..T....^6..\..ap0W./..n.(...e....^r(......~i!..\....7d..Q.x...%...RQ...]....]`...N0......G.W.Z[B...Q..8..[k...u..I..+6X...IHL.V/.o.y........s..::.9......._(-"~..Uw.Y.Q.^5...oH.O.=.F...>.W....{..~SX..d..T.k ..^..a.u..&...wH...>....xp.B./T..........K..w5.7......IX.....V.%.J.......!Y..y]...-..w..N..Z..;<p,....q..8G..}.g..].CrP..TK..QL...h.Lno..5%......4A A.-t....~...O.z+.K..?.".....qn......O...}o.]@..B.....sz.^.....#..`...C.{.....D....1=.c.,.X.......hn.H.VR..2A:..c..V."..a..F..*..E,T..(..y...?s...y.V...Q.!q(H.B..ZT..jc.~...:@u..=...D..d,.L..............O................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8594
Entropy (8bit):	7.966296411345263
Encrypted:	false
SSDEEP:	192:uBP/bR7pJfOTI3Nqeuo+gbCHvU0gMJ6FuAaPa2ZPStvh+Yl8:aPzRqTMUTgAvU0JMwAEaDl8
MD5:	4AEA614380B998263508C1153B9DDEC6
SHA1:	6160ABF08D74CE8A9BAED61A8634935147AC1700
SHA-256:	393065BD8ACF1D886E07030B1DAE40B2387EC3AA631C46774A43FCEAAF9689D7
SHA-512:	F427D3CAC274F57F1A307C19B9A31760DF4D05F066199EAC6B7778694E53216BD214F9FA2AB139013875E64209FD55D710347FC5908FFC07A29DDB6ABDB1ED9D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw
Preview:	RIFF.!..WEBPVP8X........?..?..VP8LA!../?...M(.$.2c....$"..T5L..'L3Tf.....0..S..w8...A$I.T.._.33.O....m+9......q"B"w.;..HRT.w..X.cf....4Cq..0EG.8........{.-.2.ap...(.....i}J.".H..MMvN.... T8....~.dQ.f#Yx..A..!..pA.........!e...9...D..._.H...PY.....[jf...efffff.aff...L3.`.R.J..._....!c)c^.....2.6B&E..'3-...l.dZF..of.....!33..]\|.v<.msn;..H).2..~l.^....m.6....y.N..$G.c..m.m..I....q&.J...i_=..m>.m.m.O..m.v.T.R.y.{L......4.\|..]N.....W}.Qk..i.j.......^...:..w...P.....s...k)Am.$...91}.t...._v....4....I3..j$.H....WG..d.2f.....f...x5..N...-....utsy.m\|."Z<....@.(..7g..qd\Z..w...L..9./.B]{.9.'Ieu..l#.{g.:go..D....4S....-q..C.....&...haAC.-....\;.v.^........9...>=d'..c..........RF..N._.e.b.FVM.......\|.T..)q..u......,..0*9X.l.....6Vf..AH.........!..@.uwf.{@0%w...u..a.etU.'.N.....j .4.tN_.6.~...\|.4..+C..W.n.P..XA.........x.GN3.DJ@J...',.Z9.J.....O..0].=...k....wi\.......&....Fl.i.+..1...[...ez0.y.V>....I.4.l-..c..D......P.<4.. .0..b...`$...?m

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	266
Entropy (8bit):	7.052421013235357
Encrypted:	false
SSDEEP:	6:yk5ZYChDBpEnS96WesGKsxdRM8Zj5elkndH7xLiGE6CAYdr0jSKIz/zZwE4:34CRBpEnLlD3Pb5e+LE6CACgmKIzLZwT
MD5:	0923A53B64E64DB75177B6972F016A42
SHA1:	6915D871CBEA8A3B8F4E54367DCA538DA0AC3082
SHA-256:	E0106DC1C0490A432C08671994F87FCBB982B7B25B4F9CBB640D49A03BD89CE3
SHA-512:	5054B69C1A895FEEC0CECD471FE317149D8F804E15CDC0ED51F8BA6B3FB61E092C5C78A92768D31273DBCBD189148D305BA4EB1EB210174DC6B0724615B1B1F4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........$g.......r^.E.$E.....~8...A.H....A8...%l#.Vr....b9.P......N..[n.P.........6\.w.+.....X....U'...#.}...Y....A.xdB.....$%.ww....t. ....Q\|.....,.........q...D.@!H.N.p.5.....*`...ms.~.l....\/.[/..u=..@...X...4j=.}..edi.i...%..0u~.MH..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2226
Entropy (8bit):	7.870795894442838
Encrypted:	false
SSDEEP:	48:2cX6HWbqDf9knZSFNHBNcw1E3D/nrCpJ01HMFaIuIpAkv0b+ZuJQ:2wO9gSFBWT/nrCpu+8wAkvo+Zum
MD5:	3BD45DA96F49C51F07255F200C9A5F2A
SHA1:	5F2651E7D417F69F7AA8D108A965BECF8ABE69D3
SHA-256:	EED9EB96DAAD84ECD65C7218FCE4C4C4501B9DF4A205CC7BEC0CE7030DFD88D1
SHA-512:	971C6BBBB557504AB46FE52E551D88AE6469A073A2FA055C2CBBB86A40DCC2DB6DDAE6E55AB10558000B8065B9BA2380B5965404353EBE4C89BB920F44672AFE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M0h$IQ..............J...@...X;z..s..m#G.....K.......5..$.I.[oi........F..h...G.&.ZK...F..:...._..).......\|(?e..l....NL.`."q}lj.}?....{V.Ym...%.....?.{z<..m...m{o.m....y..+.3.=.w.E.[....CE...^..&2vOO.{....<...I.....~.....gv...g~.m...m.Q...(..HR...(kww..-...;p...F.u...Swww...xc.8@.......a....c.....;.(5...G..Mi......&m_.m.....}.X:&..oq.......v'D.r.eP.6..k..g.k._Sg.E.k....G.^C..OP.2.....l."..dw}....Ft...>.o.I.......fU..m........S..^t&O.C..jhq..Q.6Jx.J.`..........5.../UU..T.....F.../.....PR1$..Ip".o.....a...]q.....Z..3HC"..MI.58..H.U.1D....y.t...3...]dq..E.d.Lh..........J.......%.9.cS..1..jnu&...ic\|&1.ZBj..b.V?.....BM...JLNA...R1..6>..h.5..$.. ..K..2...fb....L.A0..ic....@.p.(......@ .....i.Y.nU..t.../M.A.Zs....H.M..`.`.f...^._..e.........9....#.1..,.`.&a.O...D...,..Gk..cQ.U.H/..e.3.4D"..\.va....5...m5_Zyu'...0...2.J.p......!.-E.J...eLz..!..u.N...m.....5...fg..b..T.+$G}.....8M.#AP.....W.Yyr..k....xb[S.P5.

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1810
Entropy (8bit):	7.782742801601338
Encrypted:	false
SSDEEP:	24:vCHQHJSYqzcZJaiJtanUsHxDKoDab/rGhdFBfXfjbaFdAm32bBeDGiYyu+7Be7Z9:E3FwtAjwoD+Kh5fPP1sDYR+CgtFv8v
MD5:	DBE7058FAB53AAADBA3E8A64731F7200
SHA1:	CE2E430957319BD9F9F33F4014DCCA9382D0A374
SHA-256:	8FA2D4CC29157073058624A5A6BB5866DDC4C7E8731D020A904C0929ECA595BB
SHA-512:	0F8FD53E6C69F5FA65530D5ADE1B6FF2350E30588F9A216F5E7897C772D2CE4F55BC408FDC7989C9A3C1AF8C6AAAB82F1328688E390A4705FB0742F79A8115FB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 ...../.......>.J.I."....z.....n.q0....{.......9C..?..p..N..`?l.b=......n.m.3...w....\|.Mg....kl\|..a..eG#....S..r....`.VWX..Pe...K.....&m.<.._R.......aI................O.....\....`H..w..4O}wD.....hF....K.........&....y....<..3.*B=F.4uR.gI#.p.3..f........9.......y\|.O.A.....K..I,}\|.j..Q.@.0xCwn.y..]V...IT.RP...D...'.c....j1.FR .... H{.....7t.].#ym..P?k.D50..r.2..\|..B.A........:.._-...8..TC;...\.Z....}...Y..H.....,....,"@.r.._ <3..+.....6.H-.~w\..3.7D...\|o. ...hm.[}=.....#........LD....(.6....y4.......l[.X.......s$.....&,U.x...fw.\........(.1..#.Q..E\|..7.E..:.%1.)9..+....eA=.....C..^&suv.{.C...Q.k..S.Ho..o.<A3... . B..D.E[iB.PVS2..j.T..~..@{.z;........3.@fk.Q...m6....}.m.h.8.;.......F_.x..$Q...B....'Z32.>'.P.eD......Q..1.8...4...4..>..8.J..^s..J4..Q8..............$r.c]+Igq.~..a....j..q.5.b..Z)..s.[I.\#...S..........Q"I..E{.....qG..].7.hs.....+Si...O._..'s..swa..e...."."..f.Fe.`U..^..b.I.Z..~.."7...

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	532
Entropy (8bit):	7.283977070466249
Encrypted:	false
SSDEEP:	12:85sAWAvQ2Zb4GGt49trdImK9K9K9K9K9K9K9K9K9K9K9K9K9K9Cnt+dT5+rYI78v:86ArVZ0s9trdI99K9K9K9K9K9K9K9K9o
MD5:	22B41D7243F0BD9F96DFBE91BF838128
SHA1:	83E6CB1C51CAFB53A20C7CEFE6E731A380F98E19
SHA-256:	1BBED35B227E80E4532D92E8DA97B044311739957C2797D2B25017AC5567E849
SHA-512:	E9B94847AFC16F21E4E3D5911AF509007018E6763365BFFA23FCE253EEE0653BB3C5B3E346C37B61A380012B28D48B2B0AB1E506D601F6D429FA588598427826
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.?.*..Vs....C@x.......4...\|~:....n...c....ji.........l .....H...'>.O<~.:_...~p.%%%.H@(. p_......Y.2\...E.@.$J.......6.R.:...I.J....##.?.........o..>.r.l..c.R......n.X..9.V/c,...PK}..@..iu..D...S..5.f..".F..\...X2B-tS4B..b...O,.!....!....!....!....!....!....!....!....!....!....!....!....!....!....!....!.\....K...G......Yq..v..7.r.).r..X.mS,.yx.r.).r...r.M..aJ.....s....m.^..aJ......].......o..@...]......jw..[.^...6l..=.5K.]..okv.j..}......X..k..T....k...R.IJ..ZwM.y=.z.W..m.....\|D

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65005)
Category:	downloaded
Size (bytes):	696227
Entropy (8bit):	5.38605387106501
Encrypted:	false
SSDEEP:	6144:MGryUmPKObVMvcDMbtZNNVJKEq5f+dtaL6rHYGd/0GOCl/FQ1:TryUmiObivKMJZNTJKjp+dtaLq/FQ1
MD5:	90ED61CCFDBF59C72D9D5422BEA4C15D
SHA1:	DEC09B632108E19481F94F9CBD378E7AEB11452F
SHA-256:	6604C5A7BFA2E3F142248368D7C69135A8191D03C72D1024807150C32F4E8E55
SHA-512:	E99CFB370A8AF78ADA7252C5C28756731BBCDB28B71C7B671473C461BCF76A6147111D585A89631CEE3A0F693D45F7A9D3DC7462790EF8048631D96C457694D3
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1713369093418
Preview:	/*. IMPORTANT NOTE:. . This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. . ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. /..!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).MusicKit={})}(this,(function(e){"use strict";var n=void 0!==typeof self?self:this;function formatArtworkURL(e,n,d){return n=n\|\|e.height\|\|100,d=d\|\|e.width\|\|100,window.devicePixelRatio>=1.5&&(d=2,n*=2),e.url.replace("{h}",""+n).replace("{w}",""+d).replace("{f}","jpeg")}const

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4932
Entropy (8bit):	7.946928145289324
Encrypted:	false
SSDEEP:	96:MiV+u1u/FTCaDV90JQ7WOAuUM0CSY6+4vSNjAKoDhPA4SC5s:TIu1+VwvpuXSY6+MSVFotEos
MD5:	9C4D937F97530545BCCA9B4A91C2A5AD
SHA1:	2B95E133938E1066654D4A6AB0975EF32BD956ED
SHA-256:	D9B747411D8665D613DD401B4C683E8A1F2B6BD0FD14C289A9F3BFF38552A33C
SHA-512:	101ECF27F8D0DEDD3B398F1F16BC87119994ABDFC034E7F5D6BDC3F34B169D865355D04B9D3990D1757CBF119883C5ABF37152A64371576D07356035CD3E22A8
Malicious:	false
Reputation:	low
Preview:	RIFF<...WEBPVP8L0.../..?....$I.v..7.?b.2..D.....%..g.F....+...n.ip.Z........j...K4...$...N..\|k"e}.E.`....LY..-....i..m{...........F..Hy\|"?...Io...6.$E......5aM....?..>..M......CL.C{}_..h...n:...r.~.Tm...&.f.7....w.w..j..Ar]3H..Ca@.C6..D.o....y.O].A.m&DJn%DC...!!..l.........().X"?.Y...D0.....$NL...&...A..j#Q.M.:T..]d.~.f.Cq..............p.'.0<i..ci.O.v..w][q.AP.s,s......7"r.@.]N.X........:...Q.......L......I..s:.......^.:....Br.%F@.k&@w...m.N....+.0....Ac.B?...<...@.$I.U=..?....4<{_.3.B.,H..Y......$!..7...I...##2..VwA3cA.................;(....)K.z.A..4.y.Y..k[..Ac.'........<:..-...\|..._.....p.q.A.u2.t<...S.f[.+}........I..jk..sm.m.}h.m...v....J...F....x..)./..?.p$....d./e:...^.!..E..F(...$...Qw.o}..5....S.=..o.dv3U....8.}.Q..y...O...E.G..f.[.../.....x%..6..\|.y.L..+...Q?.^Ybw...B..wp\....S.3...;....8f:...@(.0.s.:......./N&."2.$.......D..!...........9O.....F{...nY]X.'{a.]g..V..^..X./m.N+mnZmoC.NI.a..*.n.=.3k..T...J.f...B..K...

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7114
Entropy (8bit):	7.949066568760502
Encrypted:	false
SSDEEP:	192:fSsvvBv3D6GRt1wC7xRQ2N2KLb6X30dGN4gFlF9+l:fSi5v5Rrf7/QxYb6HZ4W9+l
MD5:	794D878D3F3333508C9270AF3E2EADA2
SHA1:	1AB7FAA454D5EF9A1599B106C8002B7B2B22677E
SHA-256:	669AF012E2BBC4A3665B8BBE67DFAF6C65E31C5601FAD90B78C66E297C077730
SHA-512:	7F17E2EB5975129EE51039A746D6D8EB64EECB7DDFA429B90EFC405EE1E4181488FFBEE8F52430C98B2189980135BE40D28647811E58074C526EF086E9FE5FCF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M(l..Avw.......}.w...)..E..... Y8.$Y.........`q..d..l....T....{3l#.V.pw.)... "uww....G.:-z...^~u..Z.D.~.......'h............K.V.....S....}........w...7+W'....S...-.Z2.@._y`..k^......i....!"&...O....<..H.m[..)s...,f..Z..^.X.ZI[Affc3..1..[.J..k.V$9..h....,.].ki&............k..P6.......01.E......P.m..t..o.....m.n...qDd.2.....l.m..'.m..u..\Y....q..m......C..m...8##.U..j./.m.6~.m.5....3+.q..7.M.m-.R[o]..m....m[sn.m.....^k.s...h...B..j..G....%.............<Z..d......}.P.....D.d.E.!@=;....g..t.2g...A...lq-i.4...h....L..........d....a..).&s..q................t..t.@..BG.T.Ub........l......AO.....ZO ...-....Qs..1!.=....P...]...L..XfP(.b......w.}c.?........!A).D."..*c..-..A....(!D).Rg{;'.MU...R&HO..n.....^k...<.K...H.W..W@...y..AF.$.l........{/[S.&.(-..8..........;...........&....H;.........-?=.i...(...I..w..~....3......w..~g...:.l.K......~..u{..RAr C.c.L..7.......j7....t..k.....'.8..[..@.......Z..YQg..-.......

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12513)
Category:	downloaded
Size (bytes):	13517
Entropy (8bit):	5.314863543101727
Encrypted:	false
SSDEEP:	384:8nlFipHnQ5/BRZJ/bzwT62waHKsR5ssRaREW+ou:8lF2HQ5JRjbQw9sRasROEWY
MD5:	24F387A60FE0B05A15426D721C397D47
SHA1:	012EB578C3C097193F20F123732AC646D2800096
SHA-256:	6AD8C8A703856136FEA1D1911FE8C0E09BCE87EDE20F4C8B98AB8F8961462738
SHA-512:	787E1A2BCCBCD973135E53B53FA5BC89E59AC277D95F30B0595B225667B1F0DEB6616914915200ABB6E522DDEA144E2EEF140876CA502D1317E13E86E63DA9A1
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-1ec6e574.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const e="musickit-components";let t,n,l,s=!1,o=!1,i=!1,r=!1,c=null,f=!1;const a="undefined"!=typeof window?window:{},u=a.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,l)=>e.addEventListener(t,n,l),rel:(e,t,n,l)=>e.removeEventListener(t,n,l),ce:(e,t)=>new CustomEvent(e,t)},p=e=>Promise.resolve(e),$=(()=>{try{return new CSSStyleSheet,"function"==typeof(new CSSStyleSheet).replaceSync}catch(e){}return!1})(),m=(e,t,n)

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	882
Entropy (8bit):	7.658141913900172
Encrypted:	false
SSDEEP:	12:HoZGB9VdmJpBD9WieID/t1x+doVca7zjv7i5oBh/CViWyF08ldhOstIVHUPh3rS3:wGfVdmJDj/fx+doqk7i2vcifhLtauDS
MD5:	D6CFDAA52D298F60B063EFA3440B0E9A
SHA1:	94089B79C966E1576FAB459EEB583AC4DB65C28E
SHA-256:	C91EDA2A2AEADCFF53A9642F39246C27CBF11FD435018C47A28073CBAB5CEB8C
SHA-512:	5F73EA48897B6BEFC19A4225333607D44B2B74687546334FB4948550873055881E2DC2129AF3346E8FFFE2F20EA668FE0169B22FF1EB6D46C7DA928233E5D8DA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw
Preview:	RIFFj...WEBPVP8L].../..?....$.c..\0.....@.6qp.^..M#I....{.......$.I.D.B.d..M.o..K.+$........E...D.D.B._<....P...)<...0....@.D.y,..0D......<.b....6...~..........DH3...F..%..l[R$Es..}....,...!...n................G.x...=...5..Uu.......j..._..\.f_.1....k!a.O..]+.Sozf[J.z.um%L..U..S/z.f.....0. .ZM...k9aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&..=aBO...&P>.I..'H4K......EY...D.....x.hg}q..nl...G.w...w............CT][1?\|.z.............A.Mq9i.?/.).L...Kqn...A......c....I.k.>....M..<.q9...G~j.?.......0......E...^.E.NO#...i.z$..&h.D.....j.....a......&(..42.J.SM...b.f....Q!Q.4a.D.8j..H..MP.....4:(...K,...nz,4.......8.....+i-E.....-..V.).V...s.hp...d2.c..eg..E..ih.`..J.....Fs;W.......[.A....2......b..B.M...x4......C...t..l.=..f.w..{.}o..U.M.........8......y.uW.n....{#}..}.E....8..j.X./.Fz.....mw.{.......C..?".

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 10380, version 1.0
Category:	downloaded
Size (bytes):	10380
Entropy (8bit):	7.960698675136466
Encrypted:	false
SSDEEP:	192:wTBTIh6auIWVQOv4Rh3hOpcN+Ho5E9Qdyi1vBH5eITpvRCobJNblSq/:wFW6aQwRFU4cwNdyifTH3Jd
MD5:	9CACA193FE7BFF016EF17E26937711D9
SHA1:	121E523FE8F27D18017C2F7A056F2F14BF43BFC9
SHA-256:	3B7D2B4C5417A697678081ED3B344955F0B25E694171178B0C01E029B4A18E8B
SHA-512:	280F17FBEFA9682CECCDAAEB9D4CB5B283F22F3B403FC03420FF3BB51084F8820AE726DD6D3F3308D0EB2939E1A067C28F6F466AD5E7C736A79FEC85AADD2E31
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Icons/v1/SFProIcons_regular.woff
Preview:	wOFF......(.................................GSUB.......;...T .%zOS/2...D...D...V..pWcmap...........p..$.glyf...t...O...l...^head......./...6...Chhea...........$....hmtx.......S....64..loca...d..........Xmaxp...<....... ...:name...\.........S\.post..&8...Q....Ajkx.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d?.8........L..F9..\|.!.I........+.HsMapP...M.....y... 9.'..;x....R.W.......{.AH.&(.%&&&j..{A..QI.$.\..+.r5.....=]....Y..+..8.Pl...-..h.....i.;.......J..y.......sft.M..f..e.k[.....`......mh'...G..~..5..'..7o.g...nr.........Xc..l..#..l..3vx..^..O../..+..M?];.t..g.>.....1....1.o....9.a.9...\|.\|..G9..\|.<.=.....%Nr.e..4_..g...8....9.s..Y.".....r...`...?S..>z...^.......7..=..N..%..Jk8..f8#..pZ(...P:...t..D.........'.4Jo8s..p.(...R......I....2..+e$.\.h8..p.)..\S&...L..N....r .....&P..w.r8......Q{@..].......>.fx.P[x.P{x.PG..Pgx.QW...;...'...7.../...?..h ..h0..h(..h8..h$..h4..h,..h<..h"..h2..h..n.pk.#A=....lP..zv<.3.D.q.B.{.b...R....p3.S.B..B+A

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 160, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6391
Entropy (8bit):	7.925576155945514
Encrypted:	false
SSDEEP:	96:yBOHH4i/VNQ9Z6PSWSzCjDXbh6LTzPAZTMu7EmBOTzB8rl3Y5/T1q04U6xjbM3M:97Q9Z6PSCfl6nzPMVBOfBE3GMp5jbqM
MD5:	BAEA015A2869C38653A857D46D227854
SHA1:	54D9F20EBE2369F3DE5FF260E5660F54A550A247
SHA-256:	B504DD0577136856D78114D514A13139F2D1FB8B05712787019A5D750C811A50
SHA-512:	92D1E731ACA8E1A9E3B9C48695246A941A9D2FBBCC0ACF699593946DFA4DBBF0B6D138EE371AA2A02F4298188AE749579687372DB0449B0EA8B912E2E02C4811
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/images/AppleAppStoreBadge.png
Preview:	.PNG........IHDR..............%O....SPLTE........................................................................YYYMMM...................iii333.............................!!!.........eee...}}}.........III...ppp%%%...www............mmm<<<BBB...+++(((..........???...666......FFFbbbRRR.........ttt......\\\.....999........UUU........^^^WWWOOO000.............```...yyy.~-y....tRNS.T...G...P.....s.;h........>IDATx...;O.`....8..!9.C'C..".....C.-..HMg..d.....(........yo.=+..b8H..7,..h.......J..R. ?.%../.tV...F.;..e5}82o......F.eqJ..bY...zY..Jc..".19.,....%..p..r...^Lg.K.y....h\|z'..>.......6.r&..f%.>Mx.LN.(.m...#...B....8p{z@y+F.......".Z.._......b.9./.$..].U9..0.-`+h}..,....b...~.<.X.2..r........]CWb.~w.!.....8l...Z.:50j...J.B+.6.g.A.B._.J.,.(T...8..... t.o.h..@.%..........t...;..r.t.t...tW......J?.7.$.(..z..8..v.A`..... .%n^P1E.LM+.....]gv.0%...y...p...g.....q.._E..o...T.Wih..r..L.\.....?y@..N..BJ@.@.X......3...z.V...&X.XNhY.U..R.^+..'Tp......K...Q

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	7.003315047187512
Encrypted:	false
SSDEEP:	6:4k5ZKlxN0O5NxQCaF6rNOyp8oXnfo+4MAZnMLBYTTjfRY:4Plz0O5NxhayO4XQXfcuHdY
MD5:	D5D3B2C0C32D3DD03B361A59E085B8C6
SHA1:	F4D4F6BEC07F4AF2C58B2D9D5DE8830AECF6AF81
SHA-256:	1257441C5FC5BB9FEFBA6C3E196B5A9FC251F582A9F673448D5EBE90DE240BD4
SHA-512:	171708355F8B8F934499B6843F7D3564A87AF96C1F8FC87C11075002D8D099A55FEC10C0FEED7002C3DE9004619C706A5F647DD8CE585C062D899C7E52049727
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Wl1YKkwmkZ-VAZZ8aPU1MpLztOhf_a2Dj6m7oDj9jaBnJ6P47KqhLln4h7ObG8loPLfeymcFgQ=s24-rw
Preview:	RIFF....WEBPVP8L..../.........f.."I=.w...F...a.9..&>..I.....Oz..<..m[.~..+....4.^.$...H`.\|-.....&...G..9..s..X.\...uV.....~...a...X.#I.......$@..G........$)R.>3.....KG."...m#E^.=x.3..m/...E.N...O.O.pv.2....=.^o........k=]a.}J..3.T...B......g.%..c.[.Q.......^..o..an..

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	38832
Entropy (8bit):	4.79684101098726
Encrypted:	false
SSDEEP:	768:t0Hr1eMxTF69ukmv+ZNrMUVfd7k3pY7jVSHUo6eI:t+ehL
MD5:	CA74523C8DD2AF8E71096EB90ABEA33B
SHA1:	47B67EF377E9AFC52340BED1A69DD53BF5DA51C0
SHA-256:	FA8045C24FFB80F06CCF48CAB215B0B3D7FF1A59A0F91FCC6B361A73B1462892
SHA-512:	DC2D4CB324F37671A6FE35A4F7E4FF6F8B9BA307EFC12C244348BF0393ED31B3105E7227D9B447B9F7CE52E23DAC42E0A57BCCC18D368AADFC4E194774215CA0
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/flyouts?locale=en_US
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5955)
Category:	downloaded
Size (bytes):	247397
Entropy (8bit):	5.569394951695908
Encrypted:	false
SSDEEP:	3072:mwmScAZVNSNcMzszFeI+k86jCBPIrTWRvYElfh6St2nBsLqey9XDeltzvsXGh9A:ExAFMgzFejDLfh6St+aqey9XDelJsXN
MD5:	3678760E30581207A551BAE1EDB16450
SHA1:	A4B9D4E06EE7A48C7C5E0FC527B01F04E728C479
SHA-256:	5A27AF0D825558B56A364B99BE3B51B4842C2524E51C0038BC802CBA63E32E58
SHA-512:	6E45B45EF3C9FF3242B9728B7777F455CEF88864950893B24F6A952007A9F08B095426CF3A961FFB531317FEABD5D089BA24B9E3227BD69364A805C6C409BE95
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-6VGGZHMLM2&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":17,"vtp_rules":["list","play\\.google\\.com"],"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","play\\.google\\.com"],"tag_id":18},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SE

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	190
Entropy (8bit):	6.712236656780471
Encrypted:	false
SSDEEP:	3:2lygn1ZrMlllxNZuiy2VZdGv+BrxR5jkLtyVjai8pGWzWzHVHEC0OSA:2oi1ZYljLQilTEv+9R5jjVjWpGWzqHE4
MD5:	8368692FFC3D0CD67FBE0185D60569C6
SHA1:	9071FADA2FA9C11A752F8D00C04F5CDECB7E181C
SHA-256:	B9E68785AAF490791CB0AAA90D948545AEA332B090B6AC8E789A317813CB41F7
SHA-512:	5048611B102C6C214AD551B1C65BF48979929A1E64FD533E02729B7423A931BD6BF30920D1702AD06209E6A12108419E757F143238131A95A8A6488FB81D76E1
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../......(..h.K..>x..P.Hj..-...8..U....t..Y?.4..4.'':<...Ls.......[$.j...wO...#...a.......>Wu..K...$E...}}..;p.......v.[.%. .,n.....mBs.2.G...1.&. .1...tCV'.:+7O`..uw.

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5880
Entropy (8bit):	7.9365576331910175
Encrypted:	false
SSDEEP:	96:p7+1iZWw3sbwxQ0X1DTNmd09eKWVCv2OFrn9i8Pa3K6sPfzKCqGT7M2j3VVATk3N:8cZbxD1/ACv2yi8P9fGCqGHTjlVAKY1C
MD5:	0411486320B9D5207FAE3AAC547CE8FD
SHA1:	39CB303F18AB006F845120EED8D840FD51ABDF20
SHA-256:	63A7B7220C070D94281F67E886ABFB277BDDBD22392D4057B8BD04F438B0AE78
SHA-512:	51E964BC037229FCD3005EC272C72CB7DD5D87C214CC2A75A4BF072EFA7122F5FFDB14331D125063012A8C6FE507D5B3FBC396EA4C70F5A80E222F6143E6AF0A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8L..../..?..Gn.H..BPH.....>.5....?......h.....%E..[f.. @@.33".hLG...Hfn.^.....Jy..$...rf...%a.$.`..>.k/......o..#.j....D......M..x.D.$!.@!K"[..W!Q.....$.J._ .H`,l..0.?....-C..]...`u./..k........`0.H........... h.1.2.7..\|..`X.0."-...~...A...?$^..... .......Z).B.ZWR.T.... .(...........9dY..5.=4.....$IV.Yw..f.oDL@.e.;....A....:..C.#h.NQ.K.c.}..Psv.r6...T."a.Y....\S........]kzm+7.D.\|..'.s..-r...`c\|+3....I...... ~.bm....f@kN...o....v......m[J63.......)..(.......m$IQ.Z....o}.h.....m.....!23...N.Sfv.R...333......V..h..n4i.J.L+......;p..g..:....z.l.uy.^.P...UmY....ww..........6@.D.jDH...\|...#I.m.Vj.{....7......i..........w.....Z.3INU..........3UF.9._..\|x@.EP.j.....\|...:.EyO..?../..lP3.9iP3..t....H..O...{.y.A.I.T....{,..b...x....x...../...._~._Y.)...U..._...W.=:)2K'_!.-......z.zCl.E......sNv.]..<..c.......tRA.J..1...66(A..w..Q..CPB.%..1..oy.kN8...$5.]q.......y.(A....E..D......S!.@.%....b)l......I..Q..9..(.#..XJPA....5..

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9564
Entropy (8bit):	7.97584128021527
Encrypted:	false
SSDEEP:	192:ECJfBVNEZiq09tLVyXEheWrIngVaN6Bd10IkSmqDXn5R:EGBWizPwXEhergVasGIeqD3L
MD5:	64020C74B49AEB0E58B7150F0499D07E
SHA1:	040E51B00591EC2ACF8C6D78BAA8585FB39F4C4D
SHA-256:	EDAEE1F52C4AD3284D51C88F2BEE378C6018A45BE70349DB914073CDCEE2EEE5
SHA-512:	33715C326405E085D85AE03F9CB3A8A750C35503EAC444DB5F717369B2C912DE62F434248D321C79780E5C7675A49D98A3589F3D85259FEBEBC3A4115055B469
Malicious:	false
Reputation:	low
Preview:	RIFFT%..WEBPVP8X..............VP8 .$...........>.J.I#.#...<....y;-......}.....?...i.<....z.....k....w...[......k...^......._n..........S_......_...x.....^....A.i.;...{O..@/c...k..\|..{..<...G......j.!.y.....W..._..K.....c.../`..oN.b.......3~....W.8.......q..(...U.`h...O. .$.CQQv....0Y........O....2...'..........b......do.#"~....Xb...m.....v!84..[`..O..v.@...y}ma.{m.....S.1....d.......y......Z.cb.....mu..h.3....4..:..._<GP.5!&..Ti.v....M...i..z..m;.k.9.....Z[%.#.......~z.lB..T...X.30.I.......qe.Gm.>Y..n.Er..T.{..;."....p..rE.{..p.S....._.Y.\..f.6......M-=.%..,.#....T.....l...w.%.`fh?q..x`j....g.S.B4.0...V...\...).7..z......JT.O.".n.v...^%.dv.%..N>.$.._z`.D.N.!5/q..j.......dx).. y.\|8.D&R.a.F.;=Y?......l-. ...^...%n..G\.)....%....W7..l.Fh.q)e.WO[q...2..Z@...G..&S3...M.=.^..j[]..6'.t1..19....-{.}.....Pan2...(W..&*.(.=....{wr..#.mj..5x/...KR..\|.r$.......".U.>.\|Z.ZP{.,u.c....HX.(~.br._....D.U.jC.b91.-.N....)..A..L..^y'V...,Wm.s.:..(...).....C.Q.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	14592
Entropy (8bit):	7.979566802302065
Encrypted:	false
SSDEEP:	384:g1OLN7HRNRMf8GjkVlFs3kBk/6Iu+HB9YTqv8hgCeTWM97qZa:g1OLNjHJGIVljyzfY+UdeyGqQ
MD5:	B01009243AEE7B58A9160284C54C452F
SHA1:	FE7822587D0E986CC47918A00454C38645D9C98A
SHA-256:	61417E20FE18149D6D87C80EB994D48F0F1D501F45861FE6F1D3E38869149DFB
SHA-512:	2E170A10A063BA2A7A543EAB115FB132E2841AC207B59CDE43B5577DA9048DCE10A0F041DBB80E292495D6C2D632C37B43585A18A6396541732B57670AECBE07
Malicious:	false
Reputation:	low
Preview:	RIFF.8..WEBPVP8L.8../..?.M@r....4.....5..O...2......yI....5.7.X.Zk..Y..5U..F>..U..O.a...."c....c...8r2)[..7...TOzwwy...;....`.(...,3....z...:..$.........I....53=...V{f.E&...6".w.."!k.[.V.Y..C.r.Ir$.....o.e.DbH.o.:..-..K.dUU...;.././....U+.......g.ct.......O..^7....^..l.l...{8.(B.l..........EJ)@{...w..O=..\|.QJ $.A.,.rx.L...b.(PH..ReV...."..H.DH)..(...a..@.$..E)...>..w....c)..M.....R$..Y.f.....`u...@..pEn.P..`...R}.(.._../..'..p...eu-.^...>.7.../.D..P.S.D(1..]."H.A .bS...#.,...B&U..'fR..."..!.V.......(......W.1.&!.R...L.&Sm/&..v.Y.;.9..$B...0..&S..8.g.&ui{........J)K.....d....R......).....N...lG.J.$.@"..&m.]..`W.....;.2.J.&U.....uV.......:..m$I.....g..F...g.>.w.P...9.z....A.C......3....=....wTp..V...R[..K`3...6BM.QAj..Y.)..sqwC.`..7..U....j...Yff.3333333Y......i.yw.{fg......1...s...s7..B9...z-=G,U.o.r.MCn+.lq..W..(..C..lw,....".:..t)....b.{..C...5w.q[..N\..C.m.y.CP...b.....1.e..J.w...+S.K1.. ...R.m...}..*..m.mw.BF.....'e}...=t.m[.F..\|.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	6.796529773581735
Encrypted:	false
SSDEEP:	6:43ZKlIqE1IdmJpB/nGuDyIghBKUjqcrgfiyHy:430lqSmJjnGusBxjdzUy
MD5:	D935897C67338E8043018C7E1840813B
SHA1:	D254A52264168B410401E2C379D86B3D4FE41A0C
SHA-256:	3DC480C6BD0CE0F762B8F7E91C43D650FAB678202069184F8DEF18FB4791D805
SHA-512:	B74D37FBADDEEC9D8199CCE6FE7767957CF6B8ABE664ED61C6A7A81E2D4590326D4949A7E666494D157F5B7AD1E03E3027F3EC0F393493A5FF530DAF773E5241
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/TXeP-H2Ed1mhoPVB_CJApRXYyewNk1NTKykuQpLQ_YlkUPUXpOR3-zUkvIxYlXd5Llwi6m2USA=s24-rw
Preview:	RIFF....WEBPVP8L..../...... ....Gw54P..o...lP7.w.G...(h........Gi$)."...........@.3...W.]-...Oiv......S....njm{.'=..e..I. .J`g...@.1.cu....c ...@...........ub.C.......s4..E....S.5...G...I`."...a...I!...

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	22360
Entropy (8bit):	7.983148681146632
Encrypted:	false
SSDEEP:	384:5AnHZ16ygMyBK7YYHeVcG6PbdoaVbjs1Xnr2lufRp80RHWDYlPJYmsZ:m516nBfIPW08A85pvRWAPJx0
MD5:	814D2E18A827E16BE3519D1262D3ECBA
SHA1:	6B569111006DBC20425C43DD2E4C69E691133130
SHA-256:	148BC30E64E19E263DEF1FF9E357B60B10CEC9EB4D1BDA231F3EBEFED488A1AC
SHA-512:	3F9516A95EDA1A824062C43AE25419C6BC865BE96198555D0E1BCCC4420C3285AF08AECF1745ABAA0DBA13ACF1571A9D79A163C83E297E3A34BB0417270AD661
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw
Preview:	RIFFPW..WEBPVP8LCW../..?.M8n$I..UuX{..<p.............M...C2S.J$P..E.i..f.d...X...U.I..aM':C.!i..j7D..I.....v.~\.._.$g.._v~.}...d&8@PB...VYH.kb.j..$...J.u4K..e..N4&$.$4f..N..nq&.......h....}W....#y..6XHp$I..03..Gc.?....Tj..{+...T.n$. .......0...ZA...B......U.Y#f.......`..if.Q...m.H..w.1n...0h.tJ. ".....x.............2>.......[uan...5D......r...\|+... .H].5k.XL..93....2...x.@]..k.X.?.bW....<..]f..qF`..7.1@E...??.........?&..2...z..XX...f.9....31UV..vD.!..L...a1x.%.F.x;...W..3..@D.O..SI];._L/\]x...\|Z..9..aE...?..x...[_..-.....r....iW...k!..X....Z/L...._..x.UB.N..@..MD...Z.k...c}W..!"".Q.y/......6P6.R=...ir...<.n.._.a.]i./.5._..6... .ra.IDf........GE.`.A.&tED..f.....z:n$.4......4&..q.v.p....L.C..@.4.}.....3>...te.G.3A.ID..wN..aB.C..aN..%.(".0.\.:/.!...._9...eC[k{2.Q.#kY..u....)...h..XN...I.......Z$...%./...&$&"... 9'..$..e0,$H.uA....A.B.H...E....dg'.\..3..@:..g2`..u..0y..;.....'... ..m#9.....w.\|#b.x....k...v.0..>N.........-[...KI.8....x...`.0SD

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	39909
Entropy (8bit):	7.976805543329996
Encrypted:	false
SSDEEP:	768:RH5XX+GbkfLohh7BRsSrRq/oiREkzqNZJsLjt1DUaJNmjgftLEYZjT9:RZ9bkDcBRsyk/oiRuNfsLQaJNqgVLEAp
MD5:	ED6B32D646E747CD9BBD172A3764C098
SHA1:	EEAEE2B6587AAB5280C9131B73BC17C62BC7B02C
SHA-256:	9B860B3327FD3D017F15B8589D08DD6CD9E01CF7FD59910DE16416B28FD4FFBB
SHA-512:	90C9C43F95FB7E173DEC3396782F7438677CFE7E125B80B4255CAA46C2F5BA4C281328DD9E676FAE761B2651A26CAF58FFFDCA73A4D9D59528DF43BF9828FF45
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/uWsQ5IWVilM/hqdefault.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................N........................!1..A."Qaq.2..B.......#R.Sbr.........3C...$..s...4c..................................?........................!1.AQaq."......2....#B..Rbr.$3C..................?..eE.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.En..-q.._._...^...f;l.........8...`.W.<?..k.../.......}......{....Q...D.p........'......_...Q.......pG......fc..r..X.........p..^...^W.d...-.....Z..P...X...........z.................*'...EJ.....E~..~.\Iw..>./..QU.....0.......O..s#.>...El....W.....E...v......j...Q..........1q..p..^...\....W.....l/v.x...)Em....W..................

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10312
Entropy (8bit):	7.978077493567659
Encrypted:	false
SSDEEP:	192:ZZ9O0GzTQJx8I1hrBhBuYUgnORFf7Po/cLyipdDmRqLkBia7mkOJl4KzlRYu:VGY8I1hrJuZgwBkS1LMia7LmvZX
MD5:	48AEFD624535D25098B2666E195C478C
SHA1:	71FF016A958F1AF6B72BB2A7820CF4E0145FB86C
SHA-256:	478052D8E3A1A597646E36658A3634725534437AEE4C4037B16F5DE9120847A3
SHA-512:	80ECBCE481BB3070975E3F81B9C74D3214DF809AB8CD4ABE12D11F479D8186B3D01A826B070753A2C7F6C359AF6F94B20A2712BEF2DCDB52308C0DEB6B4897D0
Malicious:	false
Reputation:	low
Preview:	RIFF@(..WEBPVP8 4(.......(.(.>A..D.......(....p...\|0......>Yg..q................}.....Y..?.;Z.....o...;..........D...?r..}Y.../....._{?....o...}@...=.3.......9.[......s.../......e_.?/..\|!.....?.......?..q..........<t~.....././......e.O...w..........+.......?...........................7.W.?o....}.?_?...-.b.:..k.lXGT..}....d..v.4....1.Y_}{.j...((..R....uF.0.....JU..<~?....-.%...vPzt.9.c....}..Mr.... ....Wp._@.!..t.T....3\|..C-........O..7u..s"k.n...(.V..K..*a..^0.....x.....%6...G.....4.)....o...4R..K?.H$..B6...B.n.!.%..Z^.T.....o-.Z..../x.e..<n.Io....b...O..C...I`..Q.,4?.U...(w.;l..k..$.h.=i..Rq....]...F$.$..r......=.....oVW..........TKh.N........1.A..,g%.T......h.~...Tf...-_0R"[...F..H.SC....9T.h....?..w.P.........0...%o......7.-c..K&4...R.yB.<x...o......p.>.6 ....by[6#.:f...#........{...).......a[......1...z..&.$1.....[.S.......v..j....[:.9n3......)ii".N...+A.......G(.....nLZ.-...UX.@.a..~...#...)....K...5.,...'?..Z.^.b.O

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	41526
Entropy (8bit):	7.992625090894611
Encrypted:	true
SSDEEP:	768:JQdMiAS5ol6obaU/l7US696c0IckBX+vSfz7McN47gw4qu30WNxf:JRit5GLHd7VSdtX+Zc67zu30Kxf
MD5:	E425865C796C7B29CB4EEAF48F07B960
SHA1:	993B7AA2516AC4932146DC2F02C71D99C4DCDCBA
SHA-256:	6CB58A3D29AAFF6031184C736767F2834B375BDCA270134A075B68853F997671
SHA-512:	BE54AD16598EAA9D6E42CF1B8124389AD779394453D269882EEE74F7376548151377DFF93D2F95557CDCC3A5AC0C7D61C3B9E1262DA076A676C8B78EAE017A3D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw
Preview:	RIFF....WEBPVP8L".../..?.M@.l7n3 .....`...........#".....xn.......gD.l.mV.5.[.].....ROj.]W{j.H.R..`.)...w..#...n.b..@ ..@b. ....z.L@b]r...$..(p{c........k.xG-.Oi.....L..]... ...^.=.._y>....u..=..vc.`.Pv.;[..1........y$.e..x.`DH:..EU!.G...nkk.;.w.o..lA.m.V.B...l..O..qw...nw..w......e...J..Cq)6...D.....q.......n+..IR$).......].ToTVvM.....mD..=.......C......g.........Z..s"E.O.....O.....R...F..(.5.@.V..........<'Q_.>~z..~._{...B...o......R.N...V....>.B(...I.._I....s./.f...W..n....<...=.......4..j\|o\|.;...4....S.f...&.@.@a..[. :..HN..DN.....4........w.S..L..9. P..-.[nT.C..)L...Y..U.h...B......K..J...@t.@..u..9n..8....'..B.4f...n....8>d...#N.8.".[6#.x......}7c..o.nm..g[.<.......<.$...Q.....L.....HH$r..J.... zJr..P.....(f.>C"-]:$....@`;.`....LDnG .v.].....-1.JO..l.&............]..9...%........-.c...?H$U:..0AZ.m+.b=G8....FAAA.nr.Q.TT...@E.c.u^.....{.h..._....ur.9...K.2p.u..../..h.b_.*..U..J.=7.....@..n.c.+..o..1.c....'..cjD.....?./..I......Nz..

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	26572
Entropy (8bit):	7.986809716076815
Encrypted:	false
SSDEEP:	768:zN6VgER324ZHtXyFvDWRQaTiBDqFurqbnb1oIT+3RoX:zNKp36WRzErqbb1+BoX
MD5:	2825B30C1AFEE4994A0F81C32A936370
SHA1:	7266694A3892FD01357FDE8600428CBEA082B9BD
SHA-256:	2811C8044EBB5CA8A14EFF454B9BD01B07C9C35F65A02F115E41C9E69517C4C6
SHA-512:	7D41602AC05D65691C010631A539A8AF873C128D9ADBE8C7851453D2794D63CB9BF69527B4086E03897C4852FC6EF3DFEEBBEC33C12F82C58D9561F819DBB0F1
Malicious:	false
Reputation:	low
Preview:	RIFF.g..WEBPVP8L.g../..?...m#I......u.............`;......2Od...l....}..S)e.3;.WP`'.%A.B<z%.%.+.nYz.....\|...V.^.E.5...E....W+yh.....]/uo.$mk[o.v...-..-}...],.s.m........o.P.M...aw.<..+..,H.z.......-.~..%.I%-....L.-.V^.C*.b(......d.i...S.e.1!..I,..?...GZ ..I.)....oLrZ)..Ix..[3.4.2...;..Bnd..5Z.6.E...`..f.g~..d.h!IR#<..S...m.$.$.5.w...2Dx..Z...O..T.....3....U....'N...%.:.......a.......P....(..;x.Y.%.R.....`............o.......R...\|..........L..y).1a........{..sB..S.B)...! .S..O..0...4p...!..........x........0.0.1./L...i.1.8...dg........s8D....#..Z.b..vy`.7F......D.x......#F...w.-n....b .H..c...<d.1."bD.x...#".._gq1...s....#.b....p...@.Cgc..../\|...1.x.._..ig........./..Vn...Xu(.$...?m..#b.xU.OE..5.......9.(A.Gs.....`.=...0g.#F%.."..+Iv..dV...{y.[.7.sy...{..v..8y........sd..'/..-..$.54.!../..On.w..[H<4a......R.}o.i......-....bE..M..M.....d..D.QH.@...zSLqV...4.0.Wp..+mAP....J.....q.!......BMe.$N.-.:........3K.K.T.R.m[......n...._..5.....ewJ.....II.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	144
Entropy (8bit):	6.510067015271117
Encrypted:	false
SSDEEP:	3:OZrOnlo+yJt+IV8u5s/SL/8qBIbngqpzl04ETsa1JciVsl:OZIloNj5s/SXBIjvpJ04ybSik
MD5:	8B20EF77A94CC5CB2AA859BF2F9A4C0C
SHA1:	7D88AF2A677FB11865305D5C0CD98AE6BFB4F36B
SHA-256:	D2C5E6E11D173EE3F594F0EBF9AEC6F81F09840CCF9BDB19F617CE75794DDCE1
SHA-512:	F931252B89EDCC45D7B8043413C384A354C7CE5520799C3B862975413D57A028F0240F332D0DAA19F8799122160EBCB790C2AC7754A6B7B385D8638F19F10A26
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/0Kc4kyHqyq8zcMO7lev1TyvzQeuunYD0ZC8Iv7JZiXyoZSLb4k4xDQsd-ryTsJm-dceqvFPxWOaG=s24-rw
Preview:	RIFF....WEBPVP8L{.../....?..m......H.m.kz'{&...M{U......M...9..@......)@.`..V...$t..K.&J..A....W..C.g.I....V..~^%9.C....$W..%y.....;.y`d...

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,appsdatasafetyview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	122
Entropy (8bit):	6.193622167186358
Encrypted:	false
SSDEEP:	3:SPZrkgZKMHBDSJzFQ4lHIJ7iJ5aRe87X:SPZdIMHBDSJphlHI1iJEEqX
MD5:	FEB72E879CFBEBD89C09EC8C1726E60D
SHA1:	DE5262635E71D3ED4BD3E922E3697E7016AA785C
SHA-256:	662FEFAA5DBF93270D2AFCF8FB1AD9C789D600A17E3D3911CF366ADCB5F77D53
SHA-512:	E89213168D37DBD873AC806CAC400738BBCD81B1B89AB84914219FC2106BC767231CF6E8C0A195945CE45E839D730225E9F5182764666CD126F6ED6E6E30F626
Malicious:	false
Reputation:	low
Preview:	RIFFr...WEBPVP8Le.../....'@&m.^5;.C&m.^.;.A&m.~.9.". m.f..O[...m.....HrT.M`!\ .>...U....O..u.....+,.?....$Y.M......

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	194
Entropy (8bit):	6.777928192792645
Encrypted:	false
SSDEEP:	6:8Zgxlhoqb+bM8uFqgrBk1uW4spTAw/SOrfCdx:8eThoKJ1FgAUUiu3
MD5:	79E453B72F3470B2C8171356409CAB1E
SHA1:	26A9FD1736BD5899035606756CC61A86C6B0913D
SHA-256:	5E20B59F35EEBDEBEDA7DDA606EE21DB6907A544EB5B82181A9DB787EA9BBC57
SHA-512:	9145DF93042A0FA21305A9818DBB5198FF2ABB57EAE8E7D3A4DB8D8EBCDE4FF2FDD4B8185D8E98500EE3DAC456FFB5D80A8600CA90CD1CA5C345C8E58DCBD819
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../......l.=...$C$-W`......m..U<.C..'..o....$h......i?N........$..#..M].\]S...NDU........=..Y.d.Or.I.....GnO\.........3.../.'.w.LUf<..&S....Oki..Ir...'j...iA.o.....

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	7.153897685834863
Encrypted:	false
SSDEEP:	6:c3Zulvhb4/Ep0/bXorL+jrXTvx2GCTn0LpIaoyl:c3Ql94sp0/jorUXTZ2GS09Iaoyl
MD5:	9DEA3CBD9E0F9B455FDE32DCA965B41F
SHA1:	8049A160E77BF9FDD2446113611BB8C99D1E5A53
SHA-256:	3A1344E63287114EAD7F90BE694B7FC95370BF7B215D89BE93A54F39C15011CB
SHA-512:	E559F6BC3C44DC6E793EC98832926FAEB3D2D34811041868244CA89DF67DFAEB899689723C0DDAB5A58063EB4E42539614BEBBA23E09A8697E863F20416DB594
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw
Preview:	RIFF....WEBPVP8L..../....5...Fm4.W#...0D.]....J...r..l.2...6.mU....5.C.(.....'vi...R...Fm.t.......\.._..Y.....c; .........\| ....pk..b....`..........p..../.72<.........AQ.........Y..@.ErE.....d..]:..KG.^.@L.S..g..z..^.g.zg..\.JE..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4318
Entropy (8bit):	7.952340208238396
Encrypted:	false
SSDEEP:	96:SLBOj/g0KkuukzuVqxuBTZCYb56WkKEmNH8YeXEBSiJM:9j/rKEExoZztz/heUEZ
MD5:	603B8BA36C22566C50A10EB94C3511A5
SHA1:	8E076393F2A191B2C38899552B566A287CDD9B6F
SHA-256:	657F14CDFFE966B1D6FABC4E06F4DB674D17E8A570C44CBCABE046F5CC98C8A9
SHA-512:	0904EFFAF009A5E5214AE78D3BED2703D9D91F096714A9CAA4189E950BAA28D10673799A94156B123C5608B6FFD647A08B1C8BD4AF8E9C7508046FDA61DCD2E7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.U.m.$G{......%.R..EuT\.lf..f..0.>....O`......:).0CL.`f.Y2.);..J..d....V{.X...f.......-Hn..Oa.R.X.<YLu..y....K..........\~.8[.'..h.4....v...R.`...J..cv0..sV.......m.Y,.d..,`.1...8.q.v0...$..XFR...;..l......:..Du..;.......c.."......Ij.b..].J:Bf.l...%.F..m.\|.%q_6J..6J...=.%i[......[W,..<..if......UW..kfC4/.E.TjO-,..&.a+...5.....[....G.'.g..X..g.#....;.'.m...gU.v..........@S.P7gFu.=.nA.7k.......k....u.i.t.....4U.[^F...w....&.a~....4%...K..W.W...}c.c...V.{.>..,.pa;..<..U.p.]4./c.....z..7.{.c...q...~XHNMJf..&...WW....'.?.hT0..d..:i.F.....n.4Pf...6.......Py...q..b..b/".dG.;.n.._".77.-\n..:(.....z.dp..28.....c 9.........6s.D] .P..o...T.2.T.v..w..X]].n...-.....S......8q.QM..4....A.V...jn..Q..)......W..'...M6N...oC1.Jjg...:pq...]./ucF.,....S.._0..[....<J.G_..]....2i5.X.9..JK.uR...Z ..j.....d.L.g\.#..2m1...R.\.f........d..Y.%.D.....(...p8......ny,.J.]N.8..m.{r...^m...a...F...5..g..K7...'....Z.i....b...:..H./z...G.. 4C.

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2070
Entropy (8bit):	7.864485372164771
Encrypted:	false
SSDEEP:	48:d/wu0b4B+mbxo6SMsT/zllswHeztVJTqqKiTRAtp9g/:dXU6xgl/he5fdC3i
MD5:	E2B81851FF866572E97F2A6ED8F3A87D
SHA1:	EC7EA23254A38C5777FEFFE98AC98C042F762EC8
SHA-256:	592923F8744D20C59F2ACCB1B816F2C3106617F59DD33AE623A770DE0765D9DA
SHA-512:	65DB4EFE0F3A633DD6977B1F8FAC6ED5EC8A0EC60855621140EA07D6E3FBDE7826D3B5ED63198A9B7F1191D09008D98505F88009315F330ACFBF71B71FE9CF4F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw
Preview:	RIFF....WEBPVP8L..../..?...9.$ER....XE.c.N..$)R..o...f..d..$j.o.~.._m...Sf.gA.....2....".0.~.!...~..A@Z.......B..B...J..A!L!.A....P..Dq..i.L. -..a.q.0.B.?..a......Q..../_EA.E..&...X......6y...J.....oP...F.....D.7...`......+..i....(\...VZ...........yE.q....~_.....>lD.!.p.!...2... Y....A.g......u......t...w.eH#G..?..b9...sl....0...Vf;m3..q..dO.[.."..O NQ..DQt..R.....\|1C..S. L.96G./R:.~....[..l...{..$s.....k.....a6...bQW..q..:E..p...+....{....$D...>.b#9ls.[q.5.7W..(N..\.............P.......6L..nl.g..:mB..r(N.)j\|...I..B.{z...ES...8....d......v~.&!...1....t]L..y.-8./...&!..r5I.).....QG...C.{z.^O........6..IO.x....MY...rJT5............w2.7.......9..i.bJi.......E..+k....z7.^..fN.WRG.B1S..'t...1.Dd!.p$.....NB.8e..S..].F...o:.~OS......-..(..N...Dvrem........Sf..S>t...<=..JsT.f.....u.O...?..w1.4/..yYT>1J.. N......."../..E.W3m..@qJ....:..5.....,.Bq.....;o{..{..."$9...5.!B.=kZ....6XOF...:-.z......kf.z.Ru....l8o...........1.5...;..........

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6458
Entropy (8bit):	7.957918669828179
Encrypted:	false
SSDEEP:	96:7PVKoL/qyR2sELBjs3+O6RVlTRbQhJVQjxlCgtOftuKb:7dKg/VEBIeRVlyhJ+xlntOkQ
MD5:	A379AF75205280638DD6B7D078B65C3C
SHA1:	00AC5861CDC7F407D5740FF96AB6191A501684FB
SHA-256:	E81307F9904D497F5F5456A76B65880030C4ADF8C991FD60CE20FACB94899D80
SHA-512:	103B2CB011D1550BEBC6E7903BEC80D8FC1BAB79C85CF062EE538F01FF2DB6723596418D1E260BC4395798C7A31E8181D851BA99B8A5F9B371FC629870B20AF3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw
Preview:	RIFF2...WEBPVP8X..............VP8L..../..?.M@l.H....:....... ... I.<......l$y.H<....cb[.G<.$.@.'..l.y.$.id<o...tG.@....$(I.<.F.....:...@m....@I5.-..z...A.&...v..B.......\bP..n.JUUG.t.O..)......j.pc.v.,L...`(....HC$...29.m$....}.....a[..F..I2..........G.8..?..@,^.H..?.D.d....T.0@.k.g..../l...;.8xS.A.V..........k%=...@#'g[..H...S.Eh&......~=.-I....G.......0x..w...UE=8...Br%.>...T....z.Q%...c ...@.XDGU8.3lp...l.w..p........B.............W...EN6......@...<..P6.h....0L.....}.n..!..P..x..D..L....2q.m....;.....m.e....JCp.A....z....B\<Z.Dz N.,T...[.1.#G<..Dm.i[s......m.U?.b.m.l...3.m.h5..s.5U....9f0..../.S...v.5f......9....V.......'...^...m..6.....ffN..ct...;0..]..sk.S1(..?H.m.N.N.f.A......#....X.m.$......"5.0n......CC1SR./.?".#.k.....+.:.A..9...R.L..1.bF.r.^. I2m....;..o.m.m....m.6.Z..m[Z.}...b'D......yw.mt..;h.....t... ..~...!..E/]........t...U.1.9...X.uNs......>}.."...\|........p...q:.C.9Y.].x...l1!pDb3.\e...J..F=.`tf......6..p..

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1420
Entropy (8bit):	7.799297445764672
Encrypted:	false
SSDEEP:	24:azlJ+zVAu5cXL9iUYO56HbSlCYvfwU93E7rrL1IkqTl7e0Sw0ePlT/enCLgYYPZQ:GQ5zUYAakvfwU90zZIkgRPSlcTmnCkYZ
MD5:	CCB410D15817F7665022D4BC0A36AF3E
SHA1:	D0A857054F3CD3EE67150A456825C7BDA284E454
SHA-256:	52B9D8F221B438BF8B914425520DB5FAA49B4FF50F8F89C3419BEFE6201BA332
SHA-512:	63BAE64AC6D0C8402E3955EBDB58D5F9ACDE621AF78AE9E55F80414A2818DA7738C5EB0D1478CCE222BE7C899A2443348DEF117AB15FF78E001E130E3E984425
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8Lw.../3....3m.({...;......J.q....,.E..(....\|.u...`$.../...?..P..m..Y>.........F1...@........ ....+..<..(@g.c.s..`..m.....n.1Z..>....Fe...\|.U\|kg.)........~...m.Fes..0..:.2.....ve...\'..U.J.....w.."..R#.b!.J.qX.D...w....?>..]......b.Z-V...V....'.z;....W...R....[....Z% J....{..O'....f.2.......4#...v....N.JRX.%.y%.JPa(A.Im+.+f...).Fs.4A.....)I%.i.....d.D[.v.'P....;P. Gm....D1.....Tp.....m.R..h......hZU...I1...S..T.Whq...Y..bI.. ..U......z....KE6.F...a.aw...^p..77.>...d..........`l.~..>w........FkC.}...)u.$.V".B.Z+3...7w...o......E'...c.O......."X.#...K...1?.j.......=.@.]u...W...2#A..).`!.w.k..f\|..7o}..Q;.P.^\..Z.....y. ....a.1.F...jQr..W\|..]....v..~.../.g^.k...b.D..@.$.,2\.rji.......p.#......)@.V...AM...\|{.....3..10........(.....b...Tm.]g...q...VN.G1...X.....N...P.5.^k.`...^.v..;h..=............_..-........Q...jb!.......Nt.`ym.^x.........Vf..O....>....u.....b.....M..m`..C6.F>....+?...]q..f..).R.,..n...z....vk. .....e....#Gi..

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15902
Entropy (8bit):	7.979385311048091
Encrypted:	false
SSDEEP:	384:MIuCkzTM2Z9KfMO16MXqHCiwGJV3XZ7nCrSnykTm9FJpt30f:putzTM2ZUnqiiwG3wrX9Bt30
MD5:	C9BF1B0C8E9A522267763ABD87AC849C
SHA1:	1422C93842559FC4D7DC187F9291938D8A6082B3
SHA-256:	BE5EFC8F8DF15934C93EFB63685E801D4F9CBB2329587BACEAB6A0230F89A29A
SHA-512:	6EA335EC4AE7ED60394D2540721C2CA862243474276C92487A9CD4C62EAEEC20EE62DD699234DD2BD3127D51F90F559D19767C3067E2C3792BF710618BA63377
Malicious:	false
Reputation:	low
Preview:	RIFF.>..WEBPVP8X..............VP8L.=../..?.M..d7nS..........d......?}.'..c}..^0c..cC....{.OH.$...YDw...>.w.....J.....7....$. $.P...:\.l-...M[f&.U.w.Y.o.^..y.{..T.<.....3..n!.bm_....y..9H........l...6..gPHRd.{.......k...[..B.k....&..Z....0.)..".7....}.i..$I...N\..;.......On..N...ik.o.....{....F......Z.......U..r.5.<2.....W.D..5...Yb....@...D.B..x[.Qi..(.OT.RA....7.TJ..[....B.@....EQ....H.h2S.X.Z.-.@.D.....>....(. I........(...zv.........Z.(D.x......@A..>.).O....CD.!..'..\|...`pu........@...t.......N+Q[.....G........F...._.....P.%.=...P.J.L.v`...^z.'...@+..F.k.i..it........ .vY.@..@.T.D.u..``p....Bqj.9.-.r...................K}t[y..ap.B3...Z4V'..........{.s.V..`G...E.m._~].N,.,q9.A.....G.......I........8"&....T?r.....u.U...\|.u..:....G^w.u.......S.v..5`.`.......<..V.;...;...u.=6..S............V..S.P...>S...k...h....)`....A..AP....7..2.Zs.1....:.Y....kc.....\. ....7" ..E..@.*.<..-....I..!...!....3..\|.%........sfJy.4.+P...b.0O

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2620
Entropy (8bit):	7.907739599114583
Encrypted:	false
SSDEEP:	48:VvjWsYJqgQQ1DZsFI3v+a83wLw+umPOFXwrl6ipckhwH1VtCWjgg8Ofslf/zouhD:gsYolQdZ8KhjPqXNtkm1VtCWjgg8QY/p
MD5:	52025B894AEFE69D60C3062A654A9BCC
SHA1:	C6CEC5F7B2DB19A21339B974108DEE6B7190CF8F
SHA-256:	E838FE70129812268D3FBFAC662E7CC766EC430823187A64459F32C10DDEEFB4
SHA-512:	94A5924201EDE700FE74BCE864D96281771722B02AD1801EDE0F9747952CC5847494595B4656DAAAFCADFF48353C6591D6C273F24D1D8FC7AF1168FE9F89835D
Malicious:	false
Reputation:	low
Preview:	RIFF4...WEBPVP8L(.../?.....m.9...,..?0D....f[6h4....Z.Z.;....[h,.m.......P.6.c...B....II#IR9X...u#.....".I.O.... B.@....A....P........`.....M.l'........333K.3[.........Q...U=gV..b..h.LY.LL.W.K.u...0\|"Sf....&J..6%-bV"G.d.m...m..g./..l..m.m...?X.l.6.g.{........m.nF...m'u.{v8p.I........0...7....b..)8X........#K..bj.....G}...$.@$b2Y...A...1.@....I$.N $.@A...T.b "@].....5.2Sg.x...V.....%.Z2K.XN.)..X....4Q.Q.. .5.....\|.&f..%.\|.(Q.l....."c`..b.(....].LN....(%.}...S7Y.4EQ0!.A%.3zU.LD.......Z.e..s. +..........<._g.4 .lYv.F...:.....M.....!.cy......!Dz..D!...B..^...b/D>..Oe..PmW.o./...V..m,v6...lz..$.`..1.].fM.M.h.b.c..U.L...c.S..u}..2.O.....>..\..a..X._...[D.}Z..C=.b.R.a..cx.....5..Xqj2...4\bO.O%#c.zX..8.O.B..+...fG...Y...,3E...9.y..6l.b....I...G..R.\|.{U..#.M...qvk...p...'..4....-'..<.nO..^....>..Y.:......u.&\a....8...%c h.V.#~....<.n.X......<.\~5..{1...v.D.@.U../s.m.\...k.m.s........b?.a.}.....6v..g.......-.r"..)$..........d........).

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-c88356640b7a7aedb98664cb26145a83.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34202
Entropy (8bit):	7.960545923350099
Encrypted:	false
SSDEEP:	768:sNDrB7TpS9fy9Rk6AZ0HCNuep05RfI6zQWlkA4ig30dlG+dkQ5G7dyD/XlA50Ina:sNPB7Twfy9G6nSuDpzQWNLRdlTyQ5G7i
MD5:	40BAE2E96B69FE58B121D7E6938CA0EF
SHA1:	865AD4D08F7CE3E6B64906B9F12D5D2DD3FC1D61
SHA-256:	DEF24518B45222080C6CAC48429194BBF6769ACAA8D5D046D184F6800D4E6154
SHA-512:	9BDBB6B5BF9DAAE21130BC8BF052AC705CBDBEF198482ADF7AD3AB3A8042D577CB60B5D0116ECA3174469DD067AB91AFAC7B3567271DE21CCBA7DDC3733B966B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@.d+l...e...`.&%D.......o..svw.9..>...v....{.....$...s.......e.v.PU..$.M2T...s..c...y.Q.....7R.IU..X9p.$@...o.z....u.#r.V.H.!@..CM..C...<.@H.L.A....D.oUqYXO.....P..Yj.....H.5.ls..z.TG@s..w.F.r}=P@...sR.{...x".G..!.t.O....R..+...]...m.s:..F."._...$..B.C..{...Ir])...v....{..F4K#.1.....m$9......[...............+l.af.%..$I..1..5.c.....3O...16}.u.9kl.t...R.b..8..l..@..z^^e.i.t\|..c.o../.\.H.F..\..u...6.G........Y.N5....l.Q.U........w.W./...e\|.u.x.55.x:Lc.e.....5.+9He.......VF...6,l8u....T8I(...R/#..R$CB...BR.PrQw.m...B.+u)...5..".!..dM.R6%.\|.,...\..M.6..md../...1.....e.'.m....x...5.....6..>.m....u.{^.....8....". ....z......l...<.5..=./..........K}....z.............G..{.>....7T4....;....h.wc^..M.@.v....Q<.m.v...:.O.0.N..o.......t..5.!.V..'.....ga...P.P.V....G...X .NB.....>.....v4....'y...k..}..7v..q....}....s.......{4...=.....(...mhh........x...p.....@hh.a.../......HN..61..O."x...K.l....\|.......[.h..,V..........b0

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17696)
Category:	downloaded
Size (bytes):	18291
Entropy (8bit):	5.675040290596522
Encrypted:	false
SSDEEP:	384:A10ZNodN7X9fo6Gfx+VfvBZbIPGIu/9xJMD5RjTORps0E30cIMW4XdiGZ0ZeaeoR:A10ZY7XNo6Gfx+dvBZkPGt/97K5lTORP
MD5:	8D120D4D5CB207E52720218A143FEF17
SHA1:	DAE68D4F786BDA08FE39D89AB6F3366B1199CB8B
SHA-256:	AC88D994CF1935F39E5504E88EDB7938FB98F589C4D02013F36B46D15F98517D
SHA-512:	4611F40996ABD45761C5D56FD3EE000A3733ED872C6CFA89E112E32104E328AF632B0330C20E125E248F6D5718116D848A1D0CA28F01626CEDE564610319D629
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,createScriptURL:m})}catch(F){a.console&&a.console.error(F.message)}return z},m=function(z){return z};(0,eval)(function(z,w){return(w=K())&&1===z.eval(w.createScript("1"))?function(F){return w.createScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),w).push(z[8]<<24\|z[9]<<16\|z[10]<<8\|z[11])},zc=function(z,w){return z[w]<<24\|z[(w\|0)+1]<<16\|z[(w\|0)+2]<<8\|z[(w\|0)+3]},Fk=function(z,w,a,m,q){(((m=(a=(m=B((w&=(q=w&4,3),z)),B(z)),G)(z,m),q)&&(m=wk(""+m)),w)&&e(a,U(m.length,2),z),e)(a,m,z)},Q=function(z,w,a,m,q,M){if(!w.SQ&&(q=void 0,a&&a[0]===H&&(q=a[2]

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-border-f519029c9bc5f9130e7826c69b475d0b.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8990
Entropy (8bit):	7.959388167722879
Encrypted:	false
SSDEEP:	192:qL+8F5flrsw2TNllSoGp5DRBcFOC41pMvNjC1O4BCJXn5tzmgb:K+83flr7BRBcFO9SCwjzzt
MD5:	7367103A0E06381FB02DE1C6E95DD998
SHA1:	C2A6FF6A9EC8AD29584C6E2D01B15C17658664AB
SHA-256:	162FAB3FA3AE06EAFE7E688D8628A6896E99139D18B34EEEEADCAB541565A8AF
SHA-512:	C45351B6AB639FD72D3A7CDB34D2F95CC4DC82BC46ACD029F2388FF091E48FCA84E66F698D419F8E6CC2537EE706ECD199F52D94DE69AD900E41706F43EC9B8E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw
Preview:	RIFF.#..WEBPVP8L.#../?...M0h.H.&.........$.)..v._.0J.ki..[t.$E.e...o.1....$+../.......E..$..<...p,..5.?^.B&"".I...."<(.d.S....$......N....t..........8.....0.....+...g..^..@..._F.>........:y3........?...XrNN<.B..wj......2.^..sw}....5www..`.. q;..{........}..N...`.m.m.m{..{.$....=Q{.W...}0..............1(.......Zf9:.M.RB.[.....$.....G..P...L.'..S<wHr0e...8X..i%R;....Z..s{.Y..@(...ze9;......4.$.......J..iAN...r.Osh......!.4o.w..xs..u.....z.?.}.r._:..gw...3.rddc.......^..Z...k..N`_.I....H...........'.z..<L..`>.......7....w..aS...;..W..$.\.p~...../.P..H......k.,=..9=..^.'.(...t_..N.W6#.+....e.<...(...8s.^.X{.QE~9...........]..p;........`...........P"6P?..p..Z.N.."(j...@.R.s.o.S.x.c".!.xxs.`z.....^..x...Ll..`........{..1P...~..#J...R.....[....}...Bd..{"M..g(..G..a.c..kz?y.l.D....0A.......l.......q.@..H.i(R..o6..!.X.y...i'..Z....%..~..?,../ck.)...c.......E...o....~$........Cz...T.............3.C<N.I.....i4M...........*=).p./$...........

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 162924, version 1.0
Category:	downloaded
Size (bytes):	162924
Entropy (8bit):	7.998614826254304
Encrypted:	true
SSDEEP:	3072:XdhkQyBlHVVYwHUFDrzXtPz/qJwZmUyhjpimMS6DW4hb59a06EziVFKth8Biq:wQyBBvYw0FD/tPWJZjI3PXhbrduVFc8f
MD5:	7F2E1B48B71EC58FDA4539018A2F56CC
SHA1:	507BF81F52FA8C99BF2C5C8BD59A981899CA9995
SHA-256:	7F80C4C91054B3D6C80721939242C2D4F68F15E41F251E12641F695D78EB2F35
SHA-512:	DD7B52119D1179332147984F6C7D8CDCB3388AEB1E8AF708EF9036ACDDE6E7B3900ACC965221F4E4864DAD89797072E19E5B308CF065A65DDA7656BE884CDD77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2
Preview:	wOF2......\|l..........\|..................................`..P..........N.....6.$.... .... [.m.A.B.$...c....5s/E...%.u..v..J6...:......;............$........@..M..... 8.HA.6%R...tB ..D..M".f.$G.....<....~.y;..R..23.S.T...p...'V{\|u.,S....Z...lZ)..Dc..D..;=n...V...<.X6...h.......:sw.....T.6.eF..!=.f..H\..dDd.q"s.E.Q......JT..v..#Mf"sH}A.>.....q.h.mLC...Q..Cv...+\|.u......6..B...I......K..I...R.[..m(...P<B."R.Ap.f.j:.o...\o..L..G3Yn.C..........\rI..$$!DH.!....v0r.E...p..WK.v...muW...X.[. ......j...1\U..8V.&.X..i.T^TO..^\......&.g2Iv....>.J(.T...y...v....4.f..a....$.K...M-5...1D.ya...'.'...A ....!.@..c...$.D.3q..:...:&O.rV..V..v.m...[-.Z..m.......:o......$}.h..i.N.FH.$(..Zq....v...k. ._.A...J&.J..D.......>...~!...H.".$........_...;v...*gU....W Y3lI...;.....RG.....\|.rw.. ..=@.....N.....=.W..=O.(...`..M......Y..&.O. R..'0.~6@$.4f.`I@.dV{..YJ[j`v).1(.L.."(oO...R...cI(.l.K..P,1.C.b....A=,u.B....;wm..H{.>......8e.8d.2.~.4.CDDDDDDDD..\|.Z..s.G!.._.....

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	498
Entropy (8bit):	7.0509595066397575
Encrypted:	false
SSDEEP:	6:ak5Z8mI7GZ6O0InWZRbA8igtUldnXgs+19DU0kxErVQ8LnYI0KKzKaGQgMPkg+RT:vJIKP6ZR1WDlGgPiuKRBWb+R3N7dJJ
MD5:	D2AA07EDFB36B4BA1DF3EC8342623AA1
SHA1:	8DB533A05072407E431273FD65488D450682F08B
SHA-256:	3AFC77704EB5C56502F127722842B9D8F3D82A49B5CC2EE280E2DFAA4FFD22DC
SHA-512:	122C5D4F5096866E72AF53F0C7CB5B5C7845D383AB866B09BBFE2CB82190A407A357921C9F32C739043F2374C08881D07C186FB100A52F8C94539FE6E3A0E0E7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.O..m#I..eq4...W....3..q?..m.,...Lc.I..F....0.....P"@.4....9p.M..>k.w.Z.[.Q..@.:..-..k.A...+"L....!..m.md.7........?K.AQ..........G.~._\W+o..~.i.U3.....^M.;!b.6.........w'....U5ID.^.Q".....1z......n....7.D..U.D..'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'").'.{\|..z..9.....8+f....,smj1....ys.....e.M-f..8o..d.. ..Z...........r.]...........>.o........{..../G.V...&...!...S..1D...{./..8....'..........y.....s;,._.?..

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3702
Entropy (8bit):	7.937104656961242
Encrypted:	false
SSDEEP:	96:hVlHZ4aIdJfMliUwe0R+qAwLZqDhRVY/oOB5N:hTHZ45vUiUN0LHLaeoOvN
MD5:	EA221EB1F8BDC413DA31D0FDBDC05CA5
SHA1:	E1EB42835453846CA5F9DE12BB395A98394B6B2B
SHA-256:	6C9C866ED2A72E42A8EF956286C88B5B7669371AE810FBDA1E72EE8D9B76F4D0
SHA-512:	4A89B72C5336A1D54306F7925DF7062B53B8844D7F86711634AB1AFCF48B859253EA55E147C70663D2472772EE524DC1DAB02412D8B9084F0754F2CAAE366BE8
Malicious:	false
Reputation:	low
Preview:	RIFFn...WEBPVP8La.../..?.U....%E?.].]pwwwwww(.............s......e.,..2...........h...X..V..S1......7l...#..".T#w.x... t.:.f..R......j....KK.E.)...3b.mv.>.a....S.Du&r...p....."K.-....j...=...3..d.9.#IRd+.y...W._...@.t%H.m.m....Ga.@.jV.{K...d)...I.4.......^zK..T.J=r)G..~$...+a-.=...K........q.H.`0....Y...1....#B6..1x)..s....`.GZ!].a3F+f.A....c...Y...Rs^....tH..N.u4..8..E....`...N.{..WD..t..]...M..X.lv... .....rj`..\..L.]....i...1..-...b....X_...D..$h2,C..(T.. J2.....o.d....{v.....b.)....\..A.......z.`.A3...Tc.o.......?9?.1m0....E../]..b..Z..x.,.b...j.\y.H...y....EC-.!x.<..=.C.`.J.=D.}D..`.e.J.3..vC..^.....ACu...o.....f.6.....17.i....H.~.'].V...(S.?D}Z.............v....`<...m......W.ck......a.V...d.... ..Z.(q/<9,.a$..D^..g"d.S.o)2V6..n.....<H.j9....%V.?Y.>..(...@....)..d../...(..I.......B..O...h.ne2x.?..LTE...5.).U.6.C....+.U.AS.......<.hBXE..8../.?.gP.3...S..a....<dF.p:..X,.r....i.+(..F."..O...Q4,....\|(.%....2.........A..;2l.a

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33182
Entropy (8bit):	7.980229814891373
Encrypted:	false
SSDEEP:	384:T4HjEABUqB4qR7nUC8i3B8mI8DW15t6XU7CW7n77adukVhmhTSt+ahDCaOoYPYnx:sQiUqmgaie7tAbW777itVYhrM8YnTN
MD5:	7B21D33BBB82B09ABD66A9AC59243B23
SHA1:	CE2DC4188AB4B25A12C8BF1141E13059A4EC43CA
SHA-256:	72A95B515F81A9102D1D290331505706B769572A309A1BD847DD02E394ED1B7E
SHA-512:	3DDFEC020A604ABBF4042B4D78E4A16DEC8B2702F4BEEA407043D64698CDC0FF517CB825F36ABE276499F3BE2A5AC563E7F6CCB26EDD0C8B39D98D5E20E893D5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw
Preview:	RIFF....WEBPVP8L..../..?......m....d......".?.c. .y...I...)..R.n.On.nJ...e...Y..Xo..O.J.w...0.M9...O..`..._d...K.Q....l'.TIRU.p. u...T..n...AzFJ..\.$.S..e4.\|.7.O.{f..$...%..........I..84%5.,nI..I=#...^....Hs(._..;C...{......\`..{f...........S?......z...3._."a.4...^/<._d......$.CS...d&#..H.J..%?S.43..........3.].B.[,.U........1p.T....5.e.)-...........w..p.x..y&.{4"g.I...H..5.=3...0.H-.$I.......=.\2DXr..i..#...i#I..Z40M(....... H..Z...w.wh..........[.yB@U...`g....%WJ..$6.9..X@...R.a..6 .Y........o/.@..BpR..&..l...BD"......J@).l6x.F.8. ...BA@(.&...."....X.NJ#.c.a...........B... ".......B6...e..(.....X..."..Jn...6.CDd.A.....6.......b..8.... "..Y.;....7..B.e..l.....E.\p.@.a...a....3EF.!.2.....V.XD....c......W@..6....pD.4.X,c.xyy\|...N..e......&.@,..."........5\|\|....!.4..>4..Z?...._.....9.Z.Z.V+...9Ic..)....9J.Vk.c...F.D..0..l........@.>=.f."".\....n...L.....2.P..;9...68............"B....".,c..Y...".....n....l0.0l......>..F....0.P..6..Ir$...=w.O

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (687)
Category:	downloaded
Size (bytes):	9936
Entropy (8bit):	5.542342043008501
Encrypted:	false
SSDEEP:	192:ZwIzYQLYQ2ziA8ciP97bX1oEH/2vVbiIJcBnJdVKXMKOF/4xQKnS5tYE+Eg:iIzYQLYQGi9PP97bX1oEHevVfcBnJd6f
MD5:	576D3E924CC3FC775E59318318A95407
SHA1:	D90D2CEB01D3CB93AEE16588BABA66A1A33CB3AC
SHA-256:	210BAF7DB084AC00F6A74C3B520D25CCED24B402CF5F95144A1147E2B993E0D9
SHA-512:	A9B513246DEFAD541FC0290EF5CC89FB513317A030EB6C5D9B3B73396219226EB49898B80C2EF1D63DBCC3215A30CAF1C03BC87BC5B52EC4BD8442BB44C0FB11
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=DRmmld"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.L3=function(a,b,c,d,e,f,g,h,k){a.open("span","n1tOxb");a.ma("class","DPvwYc"+(k?" sm8sCf":"")+(h?" "+h:""));d&&a.ma("title",d);c&&a.ma("aria-label",_.to(c));(d\|\|c)&&f&&a.ma("role",""+f);d\|\|c\|\|a.ma("aria-hidden","true");e&&a.ma("jsname",e);g&&_.PN(a,_.fO(g));a.W();a.print(b);a.Ga()};.var Ebc,Fbc,Gbc,Ibc,Jbc,Kbc,Lbc,Mbc,Nbc,Obc;._.Hbc=function(a,b,c,d,e,f,g,h,k,m,n){a.open("div","UXP6Xb");a.ka(Ebc\|\|(Ebc=["role","menu","tabindex","0"]));a.ma("class","JPdR6b"+(d?" e5Emjc":"")+(e?" CblTmf":"")+(c?" "+c:""));a.ma("jscontroller","uY3Nvd");a.ma("jsaction","IpSVtb:TvD9Pc;fEN2Ze:xzS4ub;frq95c:LNeFm;cFpp9e:J9oOtd; click:H8nU8b; mouseup:H8nU8b; keydown:I481le; keypress:Kr2w4b; blur:O22p3e; focus:H8nU8b");f\|\|a.ma("jsshadow","");_.Z()&&_.PN(a,_.fO());a.ma("style","position:fixed");(h\|\|g)&&a.ma("data-stay-open-after-checked","true");.k&&a.ma("data-stay-open-after-action","true");(m??!0)\|\|a.ma("data

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	7576
Entropy (8bit):	7.965330171017618
Encrypted:	false
SSDEEP:	192:qVTHZOqECObjBb0tEYx5oHxUHmdvzdTQx+5:crZZPkFbmxKoO5
MD5:	588BF96FFDFAB9151554E942AB001FBB
SHA1:	D0FB8A3682EBE36A91A8208410124E18A88C2183
SHA-256:	324835560ED72AE03B43EAC045ED72668C68697FCFF8B73C79DC990B0C248AA2
SHA-512:	D7CA474706E2E663D441EE7F2285F5518D74E61DE24AB5DCDB24634C8636D4DF1B24C2575E017DA04377C4BD87A7315A0A24836A00107EF1E4D4CF678991B0B6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..H..........s.........}..H.....$..1 ..?....z...2.[.!..r.<...A..j..4./D<......>.P.T'.,..f}K.nL{.0.4y..4"..y..a..P.A#..lv..c/.H....x.O<f...u=...{.=..m.S.....x.A.G.$E.wU..4...3....'....P..I..=g..j.Ab...'(.0...e-...........U.....a.C`^.bM .Hd..l....,..5b.?'......f.9.54..'..zA..q.8...\..........3I#j=..j....a.R...h.......8...... M.2.:...v.7..x.....2.....0x.........p.sD.P.FR. x_;..B...$I.$.^.')..m.8..c_..oDL....`...6...N@%.4.i. k.s+....H;.`.h.3U.;.-...H.......m.w..m.m.mw..f..+3#.........W..ks..+G....b...[s..X?..<.......m;$Y......=..j...A.zt..9...l.m.#"..?....o..\|_..UR.c.m.,f~.m.c.........l.#Ir".D..Z..(......S...V....AKk...b...fU....49....../...l.[.. .X.z.. )..Z..IY' .h4...&k..P.?......$IRl'.......JW..t.....?J..[..-k.{..8.Q.D...wAn..g... .&....'._.k)o$.@..p5...7.o...m...+..4t..&-...d$.8.6.xbq'R;..].......7.6...x...c.0xL.V....1...... $...............Ev.....B.l.3..K@...D...../.....]#8S.?..../..../@..3y.??..4..C.z

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	24734
Entropy (8bit):	7.989220634720192
Encrypted:	false
SSDEEP:	768:Wn/UZZAPjZWKhquQDmo9BSv8PJLR4gnr6CODy:WnhtWKMaCSevOm
MD5:	A3D5BF1609455BA96B672C1B43A17921
SHA1:	AEE2172F613F47722E9E763B1CD827C94FA611BB
SHA-256:	49F3861FADDCE7B94ED6B3B27534B8E2942A66C78DC1F62B9694ADA23CA218FF
SHA-512:	38A05D14D1C74893EA5229728319CB4FADECF12EC64DA07DDF1E4D5D2653E90FFE544AFBDEC83BEF5020D8B190BA66E5445B06B94056F07932B1B9263924CD46
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw
Preview:	RIFF.`..WEBPVP8L.`../..I..I.$.md.Yl....?....f9F........Y.7.&.&.W._o.............t....Y..moB.)o.B......OL\|..)3.!..F.@.)I.#.a[B..k...;.........{....$..C.S0.@.U..e...s.m..n......;......o.1..$E.Z.....ZPt..$U.......B. .....iT]D@V./=.{/..F......9ms>.[...>..[w...y...n?.1.c.!.W{...q..8...u.F.G...1.c~..!^xa..9.l}Mw.(.......d.U.Y........n......./.anxm...\.L..4.......9..p...[.@.$[...]p....w...]0rw'.?.._5...,N..+..!.J'..S..Wf..p.....e.9...6aB....K.. ...Lx...m..._..F.m.......No./... ..:CG..;!"W S".B..p.F.m.).0....&G.....A!@!t..HO.....Td.@._.0.p{ty.k...v.....C..,>J...H. ...""AD......w..]....P.2w...6..H...2@.G.H.D.@6.H.L.....4.g.Y6Cht>."y0...R_U..H. ..D@z:D.GzfI..k....N.&.... -..t...RC..2.......\|....D`.K@45.`~.......CD.2...B0.. ....-.M..@..b.@....Z..&....!.q.:...;.'..o...X-.. 2%..#...H-.).<.;"..u.i...Af..H_..H.k7..2.....(...........R.h@..<.9.NZ.`.....i.%..b.....k.{.<.8h...IX..03..Y.Q.1..b..@.&MC........D`..h..B.4.....j.`/...{.....2..D....cs PM...[....U{.@...g..

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	dropped
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2196
Entropy (8bit):	7.903352074253317
Encrypted:	false
SSDEEP:	48:A17BRcX4d/54k9kTYtkJ4oTzfwo1nGzV5b24fwp45m:KTmZt2s08uV845m
MD5:	CC16F1781CB55F8A72A01137B6858055
SHA1:	E8795092CB6CFFE1BEAE50651C8668DF6CF92D75
SHA-256:	3BEBC5B2415254D0A88AA1DAAF00AC69F2E98D6B6936918462F9AC6DA35C129B
SHA-512:	2472814001D47CE40BE0A50F05072E34B908AC4E4AE588CFA0040909E467A8D4A0031F0E9E2043B4F436ACCCEDB4CE1EC8AA770306D00A041440192C3311E8DA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....m.F..'.p.;D......d..(.M...$.P.F....O..?.O..m......N7...m#9..z.{.....+..t...\|..5\|...i."le.......>Ev..W$.95s.^33.3f.#.^."Gv....33333./Cw..F.../z....:I.....#.F.Yz0c...{..;..o,..TvU.w`=...q....m.V5.>....[.$D..@..[...;...j...>..p........ ..%v: ...p.....j.@....i..x....=.U..[.....c........t.[].f.8....&0.H....(..LB.` ...12].%._^469.B.\|.........ro.y5.. 0.].&b.@!.4.E.3..B.S.....\F...)....M.:.0. ,x..<..._.D. B.....j... ,.b.{BE.k".....6.......0..!.`..TQz......8...)".!4..C...(}O.....'..Q`.!.a..)..l\|#.5...^...P.,7.....4.(.A..:.0........Z.......F.B..Im......b.@o..)T.. ..$.8RQ.a[.....F../Y.$K....7z.+x...T.b!9.."....>M8o.A.......x..b...>.).....S...".B..j..l...#...^..\..e...a.r..6..ez.GX..V.S......5OO.....p..<...MTr%G..qd.<..tY..5-.6O-#......x.(=.s.:.N.1.+\|....w..R...}m.Z...}..>.Yd'.....=U..P^(..Lg..%.~.)%M..p&.\..7....p..^..........M.a_F.p.1%.}I..c.p....B.dAA...7zzQ.A..6M.!.)id...Y...u.....@NG..l5.*..d.<8...o.;.i......

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	498
Entropy (8bit):	7.0509595066397575
Encrypted:	false
SSDEEP:	6:ak5Z8mI7GZ6O0InWZRbA8igtUldnXgs+19DU0kxErVQ8LnYI0KKzKaGQgMPkg+RT:vJIKP6ZR1WDlGgPiuKRBWb+R3N7dJJ
MD5:	D2AA07EDFB36B4BA1DF3EC8342623AA1
SHA1:	8DB533A05072407E431273FD65488D450682F08B
SHA-256:	3AFC77704EB5C56502F127722842B9D8F3D82A49B5CC2EE280E2DFAA4FFD22DC
SHA-512:	122C5D4F5096866E72AF53F0C7CB5B5C7845D383AB866B09BBFE2CB82190A407A357921C9F32C739043F2374C08881D07C186FB100A52F8C94539FE6E3A0E0E7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.O..m#I..eq4...W....3..q?..m.,...Lc.I..F....0.....P"@.4....9p.M..>k.w.Z.[.Q..@.:..-..k.A...+"L....!..m.md.7........?K.AQ..........G.~._\W+o..~.i.U3.....^M.;!b.6.........w'....U5ID.^.Q".....1z......n....7.D..U.D..'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'"{".'").'.{\|..z..9.....8+f....,smj1....ys.....e.M-f..8o..d.. ..Z...........r.]...........>.o........{..../G.V...&...!...S..1D...{./..8....'..........y.....s;,._.?..

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6354
Entropy (8bit):	7.960700089781389
Encrypted:	false
SSDEEP:	192:7tW8Nc0ZfXfSCFxtCKqEbGO4ADvM0FzD4Hk6rD:7MCcgvuKquGZAhD6rD
MD5:	51B2B08CF48FB14C10A5BC00F7EB3E49
SHA1:	FD547F92F080C9DC6C78BB8CD0CC73E021C61978
SHA-256:	4E0CE59BD28423F000B98ACCDB10FC79F7FBDFB4C536ABC64B35AE17C9CF65C7
SHA-512:	1162EE7C174C160DB1E88538B3E0FA0CA4845FFF919E8DDDD5DEAB2BFC7EDE670B2F491EBCD58BA7C771DC81B300D005F445D3F13742D738986CB91575791DA4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..G..Ma!..Z...f............x\|.......x'...B.("..[f.M......D..j@.......-....(S..6..L.b..L.#seV\...,.;'..{...{8...7......6..`.P.;g....k..3......h...w........H..%O.o..Wh.=gJ.'@..R..4...o..7t...Q.E.u\|.Xh..S....I.....1..B4...lP.........`..s...#.${&.....`P%:A...t&&0:....^.j....&....LT.LTJ.I:.}..........S...+.Z`. :..X..A``.$..4....lO6LL$.l...w.=...8.mn...}...i.h. ...f.M.WG..V.V.V....D=..9..m.Y...;i..1....!Ef .....U.......`...R.n.j.!.JR...z.z.._m[W.\...{..9.9.@...1!9.x......k.c.....X8...6...C..h..........e.n.F7C..~....h&#Ef#WpgUp....W.d..+8)...^...Um........8..@y.......n..}.~...j+c.}.w._w... .....1.v.._'.i.e.a8...3..R....Y.@%O.......gy....o...#lw..K..f....qU..B`.:.`]a...'K.A.J....u.^...._>..o..."K...Ye.1...m.$.@..Q.m.m.m..mu......A..6vt...GV.o"...O5N...^.&.....p...O..".A....{,........eS,.....E.....g.].....k.W.......-..}e@'..y.^...kF....a..oO).x..[.R.5;...d/..1...>..l\|.lh...*..=..Q..6o..g.$@...........y.M.P../....'.........-...

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	48232
Entropy (8bit):	7.993389789636593
Encrypted:	true
SSDEEP:	768:3w4PyBvkKHgQ5PKr+iZBtEceZM6+S04rRnOQc2ET/yJquqFXjiSY+1UZUK3seY/A:3pOT9K6iVaZGS04rdBsyJeThY/Zjs9/A
MD5:	8F207042AE152EF501F2391AF098AFC7
SHA1:	D9B7233450008EE49E6DE7701769046B093B4126
SHA-256:	610D71F82FE6887B785BF15376DD51175779AA98CC85834700663575F608EC3F
SHA-512:	5FF79B88A3F487F3AF2F47808952CA18037EA216B9927CFD47D7F5E2BC752EF400B81171AD88FEF0104FFD4E38BBAAD9F778E578282318724BBB72F8CF42969D
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw
Preview:	RIFF`...WEBPVP8LS.../..?.MH..6n..\|D.....[!...`....5Y..'..&...$.H.g7YU.@:.#.n.v.....M.....A.vG....o0l.su.&84m..Zq..C.. .U.......I..!.$..nk..H.$...../_q....f}=.sN."..is..u.xl....i0....OD i.0G. .<.....ne.$I.?.n.UE.f&...toK/......K.../...Zb.._..A......\|..2....m.........}.9.. @\| .....~....r3..sf...'l.5..6`'..d...-q..WR.c.{..aM..b$..#@.......$..@......91:.@hf......P(2...q..<..d0.A..g7F...f&m.J.#qU...#I.$If.pvZ....P......D\.z.@.m.S.z.?O...a....!.^d...$J.m.v...*.......R..._=.1....?......c#.c.{.....F.c0....8.....\...`........p.@p>....W...-.\...4.s.js..........)m..617.M7..h`K3..&....&m.is.6...?.RV..z.1w.7....... @...q.q....c2)=......}.^....v............. ...?p-.a"...d......a......W..].'.B.....1c.%...PwuWw....L.X^........?.l..R..`. .`..,...6..w.v......].... @...cr.B).4fv......W.l.Wz..c@0...C>..K..++.O.2.<{%.....4%..R...1'c2.4......>.7..U..\...n.$o.6..e....8..>.2i.{.#....&..mn2..+..^......(..1..d.]&7......g>........,.t?...0..p...C........EY..x....

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	984
Entropy (8bit):	7.674068185768488
Encrypted:	false
SSDEEP:	24:j3Tnqu3iggc6XDmjArkqCHB5hnUoirkQQ:DTnRTgc6QXqCHqoZQQ
MD5:	521AB661D05B5E40ACFAEAB1F65DFCB7
SHA1:	AE1C2E4A193121281F5D39BD7A4701D0BD9265D8
SHA-256:	2F85BCEB5105CD1F57EA59264441AA3231AC11EF7D714A06EB0A2F578B9A697F
SHA-512:	CD3334CBE3D856ED5E8A041CE75AE88099254EB2B07BBAC09E8E14C38B65DC07BF5B01F8983C52A5769461DFE36A644453C3DB9AAE121B3BF3E7BA81FD4B70C9
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?.......$GR...g..Cp.6.$5...`..A.H.........._..!...6.....Np'.l..V.y...E..V......;..Q.&(.l...FYQ......M..f...w.. .....7......Q........bs}....ylS.....)..R.isy.......T.s.~..p..nmO.X.03333333..>.<o.+Gv.X.....'_.UD.'...vI_.i....d_.ja.h..c.FO]....J...Zjq...{o.1...UF.w.................wv.n...wkR..mA..h....eD...AhE..m.....mt6.../n.......7.mv..DD.RG..$J.t.....Jp..3..%...=.Xp.R...5..u....t;4.o....L..]..<._v....f.B.p...G.%.Q.IO4..J.....c.....['..>Z...Q..C.2Z.A/.u......n..a.........Lv..j....m.....k .,Q..T..1..i"..J.x...#.]6^.h...=.hz....)GF..].h..D.G.&...(..4.....dx(kB..J:...4....'M...1)G2M.E.@..Z<......p.e.!. >B-_...!.2....l...W... ...s..._.........4.$Gw.iU..1.gZ..D.....P...D[.....\|@D..X.S"J:.8J.=t$D.T.A+.....%..V....!...-.@.....Pr!...."...wl~.v..V...x...>8.E@v'......w..D..~.._l.v....9^...;........uT.).N..0..j...\...D..d...x.h....}....'..dy.&.].}.EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	51228
Entropy (8bit):	7.992246318048376
Encrypted:	true
SSDEEP:	768:0c7WoVIu7cy6olmezhzB8gL+cPKE/LpOeP+8VqSHWgGjK7WeNUmMhLcRutE0Sa6K:nWb46SzB8mlCEDpOetVqSHYMiLTQWHr
MD5:	89D3B9BF317C62E45422276B387D3C2F
SHA1:	BECB39F56997FED9BB9D08228762629275C608E3
SHA-256:	AB99996E1B0942C3412330BECDC643BDCC019B495455349A1D1034FC5D4B4C42
SHA-512:	8965A87A6D42895E0F5CED0526DAE8D3EB61BAF3FC8B45350FD4C91F3200235B4A2AACBA5F5C0340C66080DDAE23FE794680D11CBC7D2CD5371054BEDC387EF7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@.$9nS.......Pv......(.......xH...h....j.r.,$k..2...O@...3.G.a...T=U...P.Q.<c......cDU.q........._....@;........I.i#>#...8&..@o.:......`....z.mP..Z...,1>6..5e.xo.sJ.q...{K-....lx{i)....~3{o..7..i.`Cw...20..M.!.l..z_N...oP.m&.....ku7....n....9....l23K..yAI.-G.tJ.V...jzX..c8..p..0JE..$.......oz..V.....a.u.....A..c~...l.z.6......!d....N...xQ.l3B.'.J...JQ....H..I..TQ)..R.T.R.Ee....Y......c.c.c.).asj.E$.%F....5..C..q.....f..0...A.$. 7..\....9:.1..Ni............3.;d9.1..i...JD..L....LH&.N..:t.P.{...k..jj...Q'.........rf.k?.......=p.6'.raee.X.\K...............8.......~=..^<=n.J{...j:u.T).D"1d.M..Iy.........R.$.8J...T.$....HV.....s.vI...?"A.!....u5~.c..g. I...$0D........e.L.b....$I..o"...N....dx{...n.@.$.8zC.......c....%I.oJ....`.m-.\...3..x..C.....b.+tF...../3\|.....I.I........n..,<(.X.8......RS.t.#.d>.n~...yV.b6....T..5.y...m.j^Y...Q...^..../.........I..J.mM.U.U B...f..L.$..%..z...t.c.1........O?..&.$+.&.p[.....{O.0m3.o.G...o

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9308
Entropy (8bit):	7.974353499824232
Encrypted:	false
SSDEEP:	192:zDg0G2sR8LUmyGDrhXiK2dyteRImDFdLjL1V/0LrSKag:zvGfml5sdzVxdZ+LrSKag
MD5:	996537520A738869CB05986E447E410B
SHA1:	F5BEEB6371D2D6B030E282E31C61AAC9BCD9C835
SHA-256:	8C66F387C174CA6F3990FA128B3F70202A7C52FCC677E0FFB5927A7824E241ED
SHA-512:	5BC3557C167FE06E4D19F3D671D00CE5DEFDB75FAEA6DEA5DC2EA97F82117952C4B9241B4516BD19E3CA758EA70F01EDFDF3FF738642972EA9280EA8CEA97C4F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw
Preview:	RIFFT$..WEBPVP8LH$../..?.M8r.F..r....3Y....O..\|..1........jH-Z.N...b..H....+.o7..v.Y....1....cH..&$%.~.xZ.....8.$In......>.....4..6u_s..$.q$.J.8KB8a..$......mY........T..r.e.....@.l...7. ..`g/]+..D..:{Iz ....vY.. >...=.......KCD@..\|R..!.Zcy.1...D...4B+.YD@...../....A..h.p.Y@.i.){ID.D...d1].#R>./$ "..7.4K.&.!Y/Y.o.8.]..#"J.D..m7"....."i..)...).L!.Mh#{...4..I......@. ....h.5..@D.......2e.{R...!..s\|c..'...I.?........X.i~)./..:JS...%.hW.....M7.....4ehe@.8A.....c..lg..........qm..,.Jd......2...L...s.....\#...../+u...~.B<O....7k.aB..;.$..m+...._.%.BH...?p.E......999..q...$.a#I.{w6AK ..........W.HRDd..2..v..........v..w_`..w.......l..N...y.I.2.uY.....64....3.!{:....b.mi.B.x...Xr...6..+..m...s..'...m.m.m.m..JR...{.$IR.X...^.03le..v..\|..6./f..tNw.D.V.F7..!.A@.....'...8.?N...y..?...8...9...?{.7+%.S).g...Mk....`x...f...z........s.n..G...S?v.._.9p...lT.....],.Q\|.Y<`egf^..P....?.@.............d%.....).w..{......r.Bi...p....9.C...3V.."......[...W.\~98.'

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (750)
Category:	downloaded
Size (bytes):	2169
Entropy (8bit):	4.9548772147686115
Encrypted:	false
SSDEEP:	48:ildRbgqluYoCoLUmledemlxUlIUvfALSAl/lmmqlmWlfBlAlVlWlgwheAYf9hbF5:INx4gd/d4fTvsaMefp5oD
MD5:	89F8EE167E82FADB507197C109ED684B
SHA1:	F5A728E7805C71BAE1A8786921AB2735AB07C15E
SHA-256:	0B70D5380DCC5A0C4BDD30DE4D68C4B0F598EB4EA92BEEC1B6D5F0852BD96D22
SHA-512:	BC12D7CB827E364176A691C2ED5C73A481547C572A0C00E5FF6B8BD8E698AC7DA96F2D8DA08485F9363F98A1F21338E61A9E813A31DF0A2EB7E96D43A902E5CE
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.961.e281a7b797aa9204873b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[961],{54961:function(n,e,t){t.r(e),t.d(e,{cleanup:function(){return c},environment:function(){return o},eventQueue:function(){return i},eventRecorder:function(){return r},immediateEventRecorder:function(){return u}}).var i=t(71026),o={_document:function(){if("undefined"!=typeof document)return document.throw"metricskit-delegates-html.environment HTML delegate 'document' object not found"},_window:function(){if("undefined"!=typeof window)return window.throw"metricskit-delegates-html.environment HTML delegate 'window' object not found"},cookie:function(){return o._window().document.cookie},pageUrl:function(){return o._window().location.href},parentPageUrl:function(){var n,e=o._window(),t=e.parent.if(t!==e)try{n=t.location.href}catch(e){n=o._document().referrer}return n},pixelRatio:function(){return o._window().devicePixelRatio},screenHeight:function(){return o._window().screen.height},scre

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45050)
Category:	downloaded
Size (bytes):	45236
Entropy (8bit):	4.986932890972818
Encrypted:	false
SSDEEP:	768:1S7p4S44vR3b8uuXTxXIXcave1vee/YNVwA1NAGCR//f5TTCE6/iSphWhO7E9Z8A:1S7p4S44vR3b8uuXTxXIXcave1vee/YG
MD5:	4A7162BBFB49C42F9BA734511824AD69
SHA1:	22E2808CF5C907572C6E4D0FABA98505CE63E05B
SHA-256:	47BA4BC1501E3717D778816F6C577942876A1796EA75D7798A0C73F8E7E78885
SHA-512:	68DB8592C78320AF013445CA64FC0FA31C1490EA187932CD3DE3BC5D4076C5E45ACC1D3020889A6CAA767153051F4A92231F54470A126F1C09387372160CA955
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/global-elements/2406.3.0/en_US/ac-global-footer.4a7162bbfb49c42f9ba734511824ad69.css
Preview:	@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:100;src:local("."),url("../assets/ac-footer/legacy/appleicons_ultralight.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_ultralight.ttf") format("truetype")}@font-face{font-family:"Apple Icons 100";src:url("../assets/ac-footer/legacy/appleicons_ultralight.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:200;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 200";src:url("../assets/ac-footer/legacy/appleicons_thin.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:300;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 300";src:url("../assets/ac-f

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.700481639872808
Encrypted:	false
SSDEEP:	12:nJQycZnvmWyX+WMhfiI/vmIAIsZeOwWeRdEvt2wtj3X+LV:0nvpy+hqI/vAeOORd0tBtjWV
MD5:	7A2561667DD16C7736D021BE44F7C74A
SHA1:	7D4E6D8C7FB356B619568E8301885F0E232730B9
SHA-256:	4BCB3795DAEB9400A7F3E6B01E2F10CFC9E13908AF7C936B803EB9D91918F41E
SHA-512:	DF01C63184D5DE317B9808441ED743C90CFD0968DE96EE06444F10D3161620D13ABD7385DF68C91D272E3EEC28C018FC0576365732156873B17FFE1B01012B2A
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/css/styles.css
Preview:	..container {.. font-family: Segoe UI,SegoeUI,"Helvetica Neue",Helvetica,Arial,sans-serif;.. margin-top: 64px;.. display: flex;.. flex-direction: column;.. text-align: center;.. align-items: center;..}.....flex-row {.. display: flex;.. flex-direction: row;..}....h1 {.. font-size: 2.5rem;.. margin-bottom: 0.5rem;.. font-weight: 500;.. line-height: 1.2;..}....footer {.. position: absolute;.. bottom: 0;.. left: 0;.. right: 0;.. margin-bottom: 16px;.. text-align: center;.. font-size: 0.5em;..}..

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/icon-app-mask-border-61226afcae6a8f2b3d2755728daaf4f2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	332
Entropy (8bit):	7.358546821442648
Encrypted:	false
SSDEEP:	6:PZVS4Q+recdKlUVHiRQtvCoqYlbJq0AxtC0U8vAzIp9JtOOZkeWbCgfpH:D9Q+recdKlcHiRmC+bJqlAzIpTtOOZTM
MD5:	2F640AA73D5757BA0FE67B74E5D9F41E
SHA1:	A4D29ADF1BA739285BA35AFBD94D51734425429D
SHA-256:	469C936814B431210209150CA7F39A314A333269C07A5C83483D0C3EE0D772D4
SHA-512:	EB2C59AC81D5C2D8DFC90C5A06B283651225A3836A514B47E46009DBE9A9E2AB72EBC77558CD3CD4B3470844D417DE6958A7BFE1AF5BE16C2D7A2F9C314FA58D
Malicious:	false
Reputation:	low
Preview:	RIFFD...WEBPVP8L7.../.......m..s..c...m..[H.....X.q.\|..c[..*.m.#.Jw.E:.uro....z..m[....J..l.l.XNH...D<$A"X.k)......y..W..7T}........V.G..v4.d....%.Z....y)o.......]~.0jS/........$..\|.K......8M...=..I.q....[.9s.../.F:.j...{n..2..d.#A<.T.A.i.../..6.)..9.}. ..%.l..e_..=p.H......z.n.(^..}/.CJ..:;.G..3.q....ZG.ZF..&.b..;..

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/productlogos/avatar_anonymous/v4/web-32dp/logo_avatar_anonymous_color_1x_web_32dp.png
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	34202
Entropy (8bit):	7.960545923350099
Encrypted:	false
SSDEEP:	768:sNDrB7TpS9fy9Rk6AZ0HCNuep05RfI6zQWlkA4ig30dlG+dkQ5G7dyD/XlA50Ina:sNPB7Twfy9G6nSuDpzQWNLRdlTyQ5G7i
MD5:	40BAE2E96B69FE58B121D7E6938CA0EF
SHA1:	865AD4D08F7CE3E6B64906B9F12D5D2DD3FC1D61
SHA-256:	DEF24518B45222080C6CAC48429194BBF6769ACAA8D5D046D184F6800D4E6154
SHA-512:	9BDBB6B5BF9DAAE21130BC8BF052AC705CBDBEF198482ADF7AD3AB3A8042D577CB60B5D0116ECA3174469DD067AB91AFAC7B3567271DE21CCBA7DDC3733B966B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@.d+l...e...`.&%D.......o..svw.9..>...v....{.....$...s.......e.v.PU..$.M2T...s..c...y.Q.....7R.IU..X9p.$@...o.z....u.#r.V.H.!@..CM..C...<.@H.L.A....D.oUqYXO.....P..Yj.....H.5.ls..z.TG@s..w.F.r}=P@...sR.{...x".G..!.t.O....R..+...]...m.s:..F."._...$..B.C..{...Ir])...v....{..F4K#.1.....m$9......[...............+l.af.%..$I..1..5.c.....3O...16}.u.9kl.t...R.b..8..l..@..z^^e.i.t\|..c.o../.\.H.F..\..u...6.G........Y.N5....l.Q.U........w.W./...e\|.u.x.55.x:Lc.e.....5.+9He.......VF...6,l8u....T8I(...R/#..R$CB...BR.PrQw.m...B.+u)...5..".!..dM.R6%.\|.,...\..M.6..md../...1.....e.'.m....x...5.....6..>.m....u.{^.....8....". ....z......l...<.5..=./..........K}....z.............G..{.>....7T4....;....h.wc^..M.@.v....Q<.m.v...:.O.0.N..o.......t..5.!.V..'.....ga...P.P.V....G...X .NB.....>.....v4....'y...k..}..7v..q....}....s.......{4...=.....(...mhh........x...p.....@hh.a.../......HN..61..O."x...K.l....\|.......[.h..,V..........b0

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qAKInc,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3872
Entropy (8bit):	7.926482378681672
Encrypted:	false
SSDEEP:	96:JQRKMqA0SMQYXXObysJt0txHfvwqKPOCFZB+y0vCD9ycU:WRvc91+twx/vwqKHwCD98
MD5:	B27AA4BB5D8D2244C0D0EDC2D9BC52F1
SHA1:	BABE6F9AABBA26A755DB9E5714774F1537836CE0
SHA-256:	44D9D3A4AAD1573E010A54B69D3FCDE65D2AAFBDE64E44493C2DAF29D8285C95
SHA-512:	60AB5312CC9F2B2BA18C90FC6B8576DAEA9CCA8D5836C8DBCAC271C5985E4BCFE1767186ADB75C32287AE54CE93AC1F19396164D38433CAAF1E58EBD639510C7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.......m[.u]...m6.zl..TE.m+....m..Bf.y..y....m....3.Yu-9.}E.m.\.X.!%j.G....)....=I.3+.vc.m.mw'...i.mJ.vU.e.a#.@.m.m....^.H......$I.....w.....7\|..?'..i.j.j..w...`..>........r/..r..o0.J.^.x3p.....'..:.z M...e[.M..%..#....K.V.....D{*..l.1....E..7.z.&c...v...T.9.o...(%z).C..k..!<y.8.^......yJiqaa.......ooK..4.3..V....GryYa...}.\|:..'}.f./B.a(R79.H_.\C<......#..{..@.....-J.ak.9.).Az.1.......#........^....r0]v...0z....QT...........-..A-.CUN..\x.-tS....XM..<.@[..X.......Ec_'...%.055\|W.....X....2...TI<..]......C...m...ED.e./.B..G..-..!/.O..).<H3........&.."......L.o.xYi.s...Y......1......z..#.1..=.....e........^.{.}?v..,/.@,.......\|.\..r^.7.4\|w..t....X.....G.....i2.z....0.R]..t....c..e.:......9.1b....F+....1.....'...6.\|.T.~........a.\.9lK.rB.3F1..O.eX{..&..3.....{v.a......u.N..........&.N...Em.'.~.....b...p8..'..`p..F..x..Az.0..g..d..>..f....s...&'..D.s.m..g..qv'..H..#y1.'ax.u....3T...{...f....?.h...q.=.....@.....6..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1166
Entropy (8bit):	7.813164360491701
Encrypted:	false
SSDEEP:	24:0XCeVNXXPnkMaRcGc/FBHIF0YuEucwz4R7Fv9Qlgq:OfN/kFRzc/FBHu0JEuLsdFiiq
MD5:	C548A4921CE73792FB7C2A50CD611304
SHA1:	81071865B0605F5A21B931D18C8B09A4793D7F36
SHA-256:	98D136C2043FCDEA673A7B322A8A8276FDCB750D1962CBB2B80839FA2F1C34D2
SHA-512:	4CE53EE88B5C2774C5E156AA844F9AE53C403149AA129AAD30F4E2D6D7888FF7F7C37D1DC130C00CFD937663FB1926733315B394FD55AE713C4DFDB9182148B6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8Ly.../7.....).$G...Gr......Gm#..g.S9r....0j.I.w..X.....9.$E.g-3....X{wO.....H...A.._G!........Q...../....j...l.'..(.Gi\|.,.c. .h..i4...o.;.-...uw./..h..6.......A0B..~..._t.Q..[....)H."....R.. .W..!E..T9s...SHe6.4.)m.yWPB..1;f....Uy.._.../o..{..mI.1...,..p.......3..R..R..$.!"..l......F..#...JP..u.A.@.x.wT>?.bv..Z...,T...(..i..g.m...t.....m.6S.A.........3s".?..4.j..=..(T..]..&.E.....Ve...c.U(.\N...C.....P.;-8R.x. J.s...S..X..P..$.....r.....B.X.Ul8h(yDqD.xp!.9.R.Z.Z...8Jff..6>.-PB.d.,..@..K6.....\|......#..I:8.9..:s......vM.......6\| ........[.X.....9..]V...{.[.(...H.!..;u..U....\|...."F*.w...v.o....;...N.W4.....f........z..t7...O....(.]?S...Kq.].a.?.f'....=.I...}...o\|..o..E..Ci.v...l<wb..-'..h.....h.G0.....;.c...W.b............M@......9=........_.R$.?PzG..@l.7....^....._.Ke..tL.aKe/.....7K.V..w; {..f...}m..>.W9.N.T..\|...ji...d..8R.Qi..%.Ia...8.....T..3..."C..n...C..d....1"..?.l...T....o...../......,.Z_..E

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	6.9991712725025685
Encrypted:	false
SSDEEP:	6:Y/PZql/KiDZfb08qzALLJRn3PRB8y1BLqmX45oBezn:Y3Ul/KMb0tzALL3391t1o5oBezn
MD5:	BA44425C00D3898F79D74B5748E49934
SHA1:	BB2CFD3AC724BDAF3C1F3A3A61030671C79D1B60
SHA-256:	35F1F26A525AFA469CEC210657087027502D02CE5ADC3BB1C431A29C4544FECD
SHA-512:	23D0D7732B4E677FA0E464C3BB834DD28BB232E0460AB6918AACA4CEB1AF7D149A7BA50035B4F39C102472F30B1840EEEF73310517FFDE7810EEE2B4F0F78647
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw
Preview:	RIFF....WEBPVP8L..../........$e...'..6.F..u....H....m$'....P.>;L..L3f.S...+Q....Y............j.s...)...w...B?.V.y?..9.......~`..C..1.b...$)Y.....?O........y+..g.i.V.\.q*.f....5...1. (2.s..R....w=.b....)..0...(......e.........n.n.

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10268
Entropy (8bit):	7.976305561250909
Encrypted:	false
SSDEEP:	192:u0okuRcas/S9gZj9R47fOxjzVbfF/j2o/81TB8rvrrDSnIAT6kTwh:u0okuRcV/S9gh9e7E3VzFbCorrDosz
MD5:	6CA37269D896136472A6A0ACED9B04B4
SHA1:	C0FAAF416776C9B0528EA82CD6BB9D0574C26273
SHA-256:	FCB702F59C90EA20D70FE8EB4B56FB631CE38C4D89C6F067CC7109FBFCDF2DCC
SHA-512:	A56E7416C08A4F2743C7429503DC3ECB6746B044FB9D4DFC32F4C68F23EDE80899E8D26D4085EC0F5EFCD64571DDF030AD7C83B1454B6D1BF797109BB26730C9
Malicious:	false
Reputation:	low
Preview:	RIFF.(..WEBPVP8X..............VP8 .'...........>.L.I..#...K.x...n...4..et!...U...s...E..}.............Z~......=.9.......E.O@...e.../^\.../...\|f..D...U..]?..O....5....W..<j~`^..w.O..B~.~.\|.~....[.......h.....w........?.....}..........@....^.........]...^/].IG...-.:....U@.B^._XE.S?{,........^.Z.....(..BQG....}~..1.F.i.o..%v....ho...7..5..B;;..ln.O...R.....e.#S.\....98:..0x\=>...~.z.&.{.....1......`E'.c....@X.l.M.Z0.3_(..<..M....7...e..E.T3.".M...Pu...0......^]t....R.....I7....B/.`a...(......=...I..qh.x..V.F$.Xp.....m.\|..C"+.^.........qw.\|LQ.d@{.;..9.Wa.V.......A%...6f&..."Z..h...=][Ci....$..4Fb...s.......Gw.{..n..Z.w}p..BGg..Y...#YOu....Y.7....dm(.......a........`Av..]rK.w....O{......7-.ub@.PX..?.].=..Emk...,....;....g....'.R5#.._<..4...'#.`..'T.....f....fI..~....+..[........U.>.B%W.PH@...c...X.2.j.{.h4."..m.5m.^I.,e..-.....-.^rk..B....ZW.l.}..1.$.?$.......%j.TOE..:gnXI.z..._q.F.I.......7..l7R.....-A.E:.'./...]_{...#..#v.B...\|.

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	downloaded
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/favicon.ico
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19928
Entropy (8bit):	7.9897850540383635
Encrypted:	false
SSDEEP:	384:VjFfZmo/KPGwhtSdfAZYpwqF5TiGTcrvKfhTJzhQKGZq:V3VC+wg4ZYpDF5qkHuKGZq
MD5:	FC180EDAE53C0E7D087CCF30EC6AD3EA
SHA1:	FE449E4462A34CB7D38D3AC4012862960F1CE309
SHA-256:	3CEE4A336B1EEFCC589F4BF43CF1C5AE463C095677AD834A786E7C6065133458
SHA-512:	615627AD2B4E6A03EB793FB3DE80BADDEB5881314A2E81E51D42FAA9ED3F91A2C3F042884C152ADB95D7FE0E7F1C84511BE65D4996B233C3EFA29BC449EF165E
Malicious:	false
Reputation:	low
Preview:	RIFF.M..WEBPVP8 .M..P8.....l.>=..D.!..Y]0H...\|%]..W.\|Q..p~.r....=g....Y.A.~........o..C.W.}....%.?...f'...0.......G..o.........t.C.......?........c.../...?\|.v..~....y......./[.c.@O.oLO...~........{...O...o.... .....r~.......>r}...6../..4?.~@.....o...w..S..P.........s......\|}g..QOi....._......r.+.?...~.{..^.P.............W...'..........;...3./.o._..p.......$~...&.vT.;c..1...AD3?..FvT.;#.(./v...T.;c..1..<...i.;....g......C..vT./C.....g..3.r......b!..Cf.E......9....:a.^;....tM..>.9.}....w.....A_#...OZ..]'0;a./...Q(...+..N....r.$..4..f...K@O..`.d...M.L@f>.o.wo...R50JDe.X...g..y.)..........X..a...U2W.i6H.L..P.........^n...+b.....a.7....$.Vk8D..4@)~7,....z..>...X..s.7Z...#.mUk......p....Mp.\U.?q.Z.U.9..M..J..h..._o\|)..y.H.*.v...^.....fL.t~..O..y.k.Tu.....i.K.......$...O..c.R..rj.h<.>.if./..t."..z...7.+?.Q.>......K...'....%.e..L..2.}..U\|,..8...K....v...c...H.g....n.;......&.....s..93?.{c<1?l.=.i..vw\|7..3.q..........1.....y1XP..oz.a.....Q..X....#..J....'

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5298
Entropy (8bit):	7.948762402090665
Encrypted:	false
SSDEEP:	96:wt7zIgs+Dfs6CrgUvOOBD9EA1j2uE5mY2et17KAEBae8AQPs1rdp0cpmeJ0:wRFodgEOsT3Yh1uF4e8A1ucTC
MD5:	B6D7404EDD22BF56596EA8D9DD923062
SHA1:	B735DE567505C7EC454D666F3475FC552A236742
SHA-256:	CF04A01ACD899385E6B767491C59E4BECC8F5148BBF327D54EC9EB9B83F5648F
SHA-512:	5D10D1C6373DECC0199091A990FBE6D5FBB8FD8D186A12F79A53C22378F8B0659D07CBE971A80414C754BABE744BA8A69D1C643ABF75DCEE4D732B86FBEE96EF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..Gn.H..Ou`...$5.9.....y.6...(D...\|..q.N.....+3..'..3)I$.II....b..RbFl.G.Q...'.2...d... ..-.2.....n[.%U......u.7.mW..".w.......-....{=s.1.H.U+...[OqX!..L....I.]5.'.._.....WE.L....W.q)-...4.......D~P..RE....#@}W....#.@J)U..\...w=[.z....>`.!d.Y!..C\|.e.I...(_.49\l...2....r:.Q6`.Hr8N......u)..E46.HnN7.....%I..9..`h. L...N&.............ts.`..{..`l..............@.{........F{...H..-...G..`yHiZ.....2..$.\lq8n.H.......j.wDL..4...5...........I-....j.kC.\|...8........je...W...o...$..%...9g".F!.........9.;#.....7......_.b@.T..f..Z."....?.CEic.i....+..g..7.m..>..O.Z...z..=_.-:r...8.m.X.~.Hl..........Xv._qd.T.....=3afff.........333s2.L.Z..-.T..7...K.........Zy...B..zV...............{f+..[..6z.O.9.i..Y.t............. ...Or$I..Df....;.N..w..........1.!0..A..&U..5...c."..D.y.Pd..b.C..?%......K)c.....]..L.{..........r.2W.....@Y.v..4..g..l..H,.'.....u;.Q........l8j....l..9.<...a.p.."8h......K........+..T.cq....Ai....H<.O..B*....oE..C...

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13388
Entropy (8bit):	7.985174540557442
Encrypted:	false
SSDEEP:	384:w6RfuXN6ip0Qjdd/1StIWw9NKoG7MErzOIGB2Lx:wDN6iSQxdwtIWQDG7MEeR29
MD5:	418DE379E4609B0E8F7074A51BEEF6C3
SHA1:	97B93C7F5F40CC0906967488BD0E53595C73715C
SHA-256:	15005030242937DD784BB19074BDABEDD98A38C78DC7606F8AD90868C4E4A6FA
SHA-512:	33C9B93C1DCE225AF744D81938D37CF46FDB3244D8ED30F6906C129583BC26A279621EA407182C4C828C8CBD6399D1DA8C03F2FB396EF8A03EC7826A9A9ABC8E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw
Preview:	RIFFD4..WEBPVP8 84......(.(.>E .D..!....(.D..p...W......1V...t...@y.~...u..g........d.._.=.~......M.....w......U...._...?....._.z.:..5...k.._...?........~......o._..._..I...~............e.....7...(...'......./....V............?./..P_L.U...o.o._.s.y.P.......?.?..w.......K..........\|.......^:?L...+......._............o...?....c.....O.?....'...?................../.....=u~....L....YK\|........`..:0%....m.E....o...ZNP.......7.R.FP....>..1.....F.u`.........@c.JK......z......x..n.. Zj.M.\|.-iV...p%.5......,_.(....r..;.N.%/.R..Y.Nw.kK6...L........?..6.L....H.......V.......{....3m.)b.B.hz....q...7.~...^...r.H....$...%....#7.,.`.Z....k4.Y.\b%.8..t..l.-k.>T.}..m....f^L.OO5..:^.<...Kz!...+..K...o..$.;mg#._.I8.9...`.t5....B.v.....-.8H....z..Y.7..=.. ..+w.*.....N.Ws....9.k.O2q.....p\|.K..f........}....\....tz.i.....q.\|..a.0`/Ld.v..X.. S..d...... 1"].9.....CMU.=dA'....pFV.PZ=..p.i8."+..flX;..u.`c7...\D./.7.0<...0q........W..[....O.t.....7.kj..-.Q. ..{..(..

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	39997
Entropy (8bit):	7.97375484107102
Encrypted:	false
SSDEEP:	768:gviOwqkxt4KkDuUR0nFMNGI9/2KRIzePd9m6g6pD1ielvE6f:idTa6Kkp8GEI9/jAKm6of6f
MD5:	CD5881AE4C1F96CA24D28DB455826360
SHA1:	033E3303FD048FC96B8E2FACADD8F9468AA0BCA8
SHA-256:	DD5062DE1DDEC283F55C40DB7E293FA9126E2E932DFD3A527346F9169DECE5BF
SHA-512:	427E0B600921DE49C18D1AB8DD25E51BF6B75496A1C91F635998A74CB38839529B90E2D5AFC70A07D710D3DF2EAEC5B85613E170457D4D1CE423FBA568127D4E
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................U........................!..1A.."Qaq.2....#BR....br...3.....$CS..Tc....4s...%...5DE.................................8.......................!.1AQ...aq..."....2R..#B..3r$b.............?..(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....K.......6#......cy.:..QtT.n...}[.kj..]<.z......T.<..]..,.y\|.k_....[+.$.k_.s..@.D?.).9....EY.3..e.DF....W=.K1.5......\|.......c.7.2<.a.."G.....9BJy#.B.(..j..6..6..^+....Y....>.A.....5..5Y..cPV...iUu.c..q\|......f.......B......]..~...?........2.kG..f........k.^ ..d..j..GGm...v...aHtU........N...\G.....4v.?p]......%QMX...Z...Ei>...%=

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1166
Entropy (8bit):	7.813164360491701
Encrypted:	false
SSDEEP:	24:0XCeVNXXPnkMaRcGc/FBHIF0YuEucwz4R7Fv9Qlgq:OfN/kFRzc/FBHu0JEuLsdFiiq
MD5:	C548A4921CE73792FB7C2A50CD611304
SHA1:	81071865B0605F5A21B931D18C8B09A4793D7F36
SHA-256:	98D136C2043FCDEA673A7B322A8A8276FDCB750D1962CBB2B80839FA2F1C34D2
SHA-512:	4CE53EE88B5C2774C5E156AA844F9AE53C403149AA129AAD30F4E2D6D7888FF7F7C37D1DC130C00CFD937663FB1926733315B394FD55AE713C4DFDB9182148B6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ONI8zPDjMPTgfk-uKHf7VFmSvJjAQcc1Ga0z2G_JbbGocqpMxuLrXubxsqxw31el6IrODMMsqYI=s56-rw
Preview:	RIFF....WEBPVP8Ly.../7.....).$G...Gr......Gm#..g.S9r....0j.I.w..X.....9.$E.g-3....X{wO.....H...A.._G!........Q...../....j...l.'..(.Gi\|.,.c. .h..i4...o.;.-...uw./..h..6.......A0B..~..._t.Q..[....)H."....R.. .W..!E..T9s...SHe6.4.)m.yWPB..1;f....Uy.._.../o..{..mI.1...,..p.......3..R..R..$.!"..l......F..#...JP..u.A.@.x.wT>?.bv..Z...,T...(..i..g.m...t.....m.6S.A.........3s".?..4.j..=..(T..]..&.E.....Ve...c.U(.\N...C.....P.;-8R.x. J.s...S..X..P..$.....r.....B.X.Ul8h(yDqD.xp!.9.R.Z.Z...8Jff..6>.-PB.d.,..@..K6.....\|......#..I:8.9..:s......vM.......6\| ........[.X.....9..]V...{.[.(...H.!..;u..U....\|...."F*.w...v.o....;...N.W4.....f........z..t7...O....(.]?S...Kq.].a.?.f'....=.I...}...o\|..o..E..Ci.v...l<wb..-'..h.....h.G0.....;.c...W.b............M@......9=........_.R$.?PzG..@l.7....^....._.Ke..tL.aKe/.....7K.V..w; {..f...}m..>.W9.N.T..\|...ji...d..8R.Qi..%.Ia...8.....T..3..."C..n...C..d....1"..?.l...T....o...../......,.Z_..E

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8086
Entropy (8bit):	7.96079286623829
Encrypted:	false
SSDEEP:	192:C/p2NUmgrtCLI4+vUSf31ESZLaegozslnytMWa7TkDcop:C/UNzgrtCLI4GUaESpzsgA7TKZ
MD5:	7BFC640FA12EC8BEAFFFF8CA1CCD9BCA
SHA1:	1AA8C0219571A38E8C1600E4A1862FE5B4190B54
SHA-256:	9BDE6D454CCD3BDFD0CB82052F4B559F91BCDE1ACD09C200B25CEAB5D8441178
SHA-512:	BF5A9BE7E0D4F221CD0CA7C9C13F07997507762F6AB48CDC6E69030635867281CC3DA8154B28FDC89A3670EC27F61099F7C87CAD55D0EEA2394E5EC9157908D3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M0h.H...{...xID.?...,.0...<L.....6.`.I..).p.(...sz.u..$.I.#,.......u$.........g...BKu.D.....i.&...........a.n@..wU..#y"BDE*A.....t.. ....o..... ...........Ir..#5..g..m.U.m...c..k.-i.,..N.effff...<.....en.....,.........).../R.m.....gf.[.F...v44..H...pwwwwwwwww..nqO...(.X`agw...'Z.N.m.y../.6w.[.m...2l.m.mN......{k..R.7..m.t..p.7.....&....`..@....!a..d..b<....7d9..}.....0.f......~).x.g.Fe....K.RP..,2 ........q....Rc{...a.m...@..ET .@. .S..Y.#}..?.{x+.Ad.k.2.k....Vw.6..l.9...:..."@...".. .)R..... .....)..........V.A...0<...{......IW...[...=1...\|..;.t.]...8...A....[5....W.._.'...~.?z..b$..)....B..!......T1"R` ........9....]+>.g?[_}.V... E#P `.f.......N....Uw.:........y.a(..A.:[.B..3.9.....^...Y.C{.og.w9..".HQ.P.x.Vy(.....dG......t......y.'.q.o.9.d@A....\P...S..&%pQZ..Oq.5OD_C.rm.e..6d.+8.P)..@...z...u.....J0b.$......T....C......V7.J.....{....../.!.......6(...>..T.$:o..N..tW..x..V...,......1;.....,F.....k..!..T....

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17028)
Category:	downloaded
Size (bytes):	226937
Entropy (8bit):	5.7153243443160395
Encrypted:	false
SSDEEP:	6144:UPZKmtm7F33g5L5Yd5Ddo+g5EV+V4WonF/AHNFxvQw07IiAM/sCp/k25FGTB7Zoq:UPZKmtm7F339d5Ddo+g5EYynFSD9CIis
MD5:	B26057A8D4D6877953493F979B193FAF
SHA1:	73F015E018E026B680E1A77A9281471C5E47D93F
SHA-256:	ADC2057E8584CBA1C4BD08D855E5E82633946A630322926D20B049983E6D451B
SHA-512:	0F21CB3CF149AE86B1A1ADF187414BA3C9E0E58DB6F4D6E12D26264F607EB66B1BBD33B337068C2924F13D71D5C31A49D3F0872E1D859F9E33900586941087B1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,wW2D8b,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,CvxVpd,gKWqec,tKHFxf,M2Qezd,t7vw0b,rpbmN"
Preview:	"use strict";_F_installCss(".hUTled{height:50px;left:50%;margin-left:-25px;margin-top:-25px;position:fixed;text-align:center;top:50%;width:50px;z-index:20001}.k7smx{background-color:#fff;bottom:0;left:0;opacity:.5;position:fixed;right:0;top:0;z-index:20000}.rFrNMe{-webkit-user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;flex-shrink:1;min-width:0%;position:relative}.A37UZe{box-sizing:border-box;height:24px;line-height:24px;position:relative}.qgcB3c:not(:empty){padding-right:12px}.sxyYjd:not(:empty){padding-left:12px}.whsOnd{box-flex:1;flex-grow:1;flex-shrink:1;background-color:transparent;border:none;display:block;font:400 16px Roboto,RobotoDraft,Helvetica,Arial,sans-serif;height:24px;line-height:24px;margin:0;min-width:0%;outline:none;padding:0;

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1370
Entropy (8bit):	7.823077151796236
Encrypted:	false
SSDEEP:	24:S7pwlY+AmgUlrCJxuIiBnbrm05zdVVS/19Kdg39tZdW+Jo7fHUMc7:NlY+DL+3uIiBPdVVS9cSRk+Jo70Mc7
MD5:	3595AEBDA2618A417FE3F94DD42073FA
SHA1:	7BB689955E0E89E881851C5A145F08225C2F8E98
SHA-256:	B8305A6CBDD3226FF704DCB17AC1228FCC07ADFFFA502531651799CC120C058E
SHA-512:	45106CD3454A5D779BE1A200BFF8FE2F3F399452CF9E12E473BF07BA5B40E1233E09BFF67747527A91F8A163FC3A255AE8800337517F1EAA6E608E031D9F500C
Malicious:	false
Reputation:	low
Preview:	RIFFR...WEBPVP8LF.../7....@ 9..."b..P.d.n..._j1s..mY.........Y...@.6..O.$m..w.....w...pi Z.5.Q..k.Y.C......P....m.(.=f.~A.m..\|Z.@.k.m....S.m.8....c...On.Vk....m....7...m.6W...3p.HQ....P.a9..!,2&).O.>..u......^..2...8I....t....^U..@..[>a...XM`..]....gRl..........V........Bs..E.4..,}.YlX..Dvn.:i.....{.P.e..2..&...)..;....>....{&...&.2w...<.Bm.........O8...&.N{..b...__....[$y.Y%+....$..s`:..._.v...M....A.M.xS.x.0.bp...i.vjQ.L5.q.E."...TI...:.d4...,].5.Ri`<..!m..4,..-M^....P....M\.....y.k...)..../.X..j.ad5v........+F..L....G..N.p.iW..)..s........7B&..{r8?.."N7gaR........L....6...`.........L...1;.... .()7..#..=d9....b~e.'..c...V....lk4..u+.X.u).../FO.>.....wZ.)...Q.H..9.[Lf.$......x.-..P..E..p.5.id.$D.m-c....N".e..G...e_..<..g...3..................g.R../.....J.fD.$F.Y.......~j.4....].7.._R...k..j.._&.ro..`.RU...Y..YFm..46:...)..Q3..o(.#..aJ.B5.mE.@I......N..0./.<.....9?.}.0.,....@.....v....;;5..o.3..kQOX5Z....L....V3.yM......:

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8966
Entropy (8bit):	7.962228622683082
Encrypted:	false
SSDEEP:	192:O0jiu/DGEQ3nJBvAr6d5wpg4r6MSVAnZqy9iX3Q0UJru7x8e:O0l2nQQ4gg3S0y3Q0UgV
MD5:	7CDE9F13220A8FC1073D0EB6FED06286
SHA1:	3F4AFDF9A345389AC3EAFA1079EF390A417C34DE
SHA-256:	1508F18A43EC8965B4ED441F87698CF8E28AA28C0C394B720AAB35A1D777AF6F
SHA-512:	B9032FD40F693B8121F25DCC38642A15B08CCE403E503B72E35CFED4FAC85269FAF327D437FAFAEBCA2833E8816EF2EEA3B22BD784D9DA7DBE0D10528EAFEC20
Malicious:	false
Reputation:	low
Preview:	RIFF."..WEBPVP8L."../..?..H.... ......._#.?..#{.....\|.Y..G'GY..MaH!..8.<H..@.....-Iw..=.........H..1:.,V.Z...@2.F...23....WQ.........M7k...xM......#.v#.............\j.#H.G..... k.........H..(.>}.......n.'@...O..n..N.....v.6$[(vrB..f.....h..G4.A0ki..C..P~.3.&.@...........t......v.H. ...-QQ.Bp..`B"...;.\..a7"..x.>SA. I..)).@s..Ms.\....$I.5..0H..a9H............L.;W...2.0(X=..,......Qp;88.~.P.C..Z.i.8.....4......w........4oP.(......,.`..,.Y..m#I....{.{.wDL...4.3w....(\...i.p..f...').........P.9L.C...6U..*2....v...>..u...m....Z....9g..XN...W..9.......A..k.]sg...;2o...0....K..T...M.t.5.+l....5w.5.#.TjZ.e..LS.u.f.2C.M.T"9.m.V.\.$.C.d@..)Z....;.8}w.^.k.Vm+c.....?..1...A..5b..@.8..V.`...2333333o.fvD133C....4,..s.g.4.}..M7......=.[...\.(.R......)...!.-....2.1OB...C.t.."...=.m.m..m.m.#WF2.{tl.Vm+c...9.www....3.(...R............WL@.\|..o..[..fX.O..z+P.P.."...r.A>.A...f.Og.. ...B.).9.b....\..z...........Q...m!...6......r.A.D[.`...b..8....p.....1<.c.`f..

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1827)
Category:	downloaded
Size (bytes):	262961
Entropy (8bit):	5.23813262677432
Encrypted:	false
SSDEEP:	1536:n704E5LJB0R0J0qzioyhqJmEJcqt6UqZSqCs94MF2ymxwxJ3P5A4GaGHk6uv3W19:nxWehEmEJcqt6UqZS44MFJA4GJDQahZ
MD5:	A9CB7E537707AB2AAA83815F8CB2CA5C
SHA1:	9C311FF38BE0EDC0695C8E8975EF1CFCFD8073E3
SHA-256:	DEB6C181DB15C6ACACA699FD64801CE046F55721A7E22514AA4BC190A527C565
SHA-512:	95B2BF58FC7E6C04F0A10074B5C1BBD1C9AFED11ABA777CCD1F1FCF2821816C1DC652400E618B5F73D156EE4C7DD5A9FFF3E1C6CC439F6E76D6308B96D3AB067
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.526.04cd0c888ecd9194aa60.js
Preview:	/! For license information please see chunk.526.04cd0c888ecd9194aa60.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[526],{2353:function(e,t,r){"use strict".r.r(t),r.d(t,{KNOWN_CAMPAIGN_AND_AFFILIATE_QUERY_PARAMS:function(){return n},KNOWN_MARKETING_QUERY_PARAMS:function(){return a},METRICS_REGISTER_ENDPOINT:function(){return o},MUSIC_AFFILIATIONS_ENDPOINT:function(){return u},PROCESS_REDIRECT_URL_ENDPOINT:function(){return i},TV_AFFILIATIONS_ENDPOINT:function(){return s},default:function(){return c},handleCampaignAndAffiliateUrls:function(){return f}}).var n=["affC","adId","advp","at","ct","itsct","itscg","itscc","itcCt","its_qt","ls","partnerId","pt","qtkid","uo"],a=["mttn3pid","mttnagencyid","mttncc","mttnmyad","mttnmyadg","mttnmycmp","mttnmykw","mttnmypla","mttnmypub","mttnmysite","mttnpid","mttnrefid","mttnsiteid","mttnsub1","mttnsub2","mttnsub3","mttnsubad","mttnsubadgp","mttnsubcmp","mttnsubkw","mttnsubpid","mttnsubplmnt"

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1370
Entropy (8bit):	7.823077151796236
Encrypted:	false
SSDEEP:	24:S7pwlY+AmgUlrCJxuIiBnbrm05zdVVS/19Kdg39tZdW+Jo7fHUMc7:NlY+DL+3uIiBPdVVS9cSRk+Jo70Mc7
MD5:	3595AEBDA2618A417FE3F94DD42073FA
SHA1:	7BB689955E0E89E881851C5A145F08225C2F8E98
SHA-256:	B8305A6CBDD3226FF704DCB17AC1228FCC07ADFFFA502531651799CC120C058E
SHA-512:	45106CD3454A5D779BE1A200BFF8FE2F3F399452CF9E12E473BF07BA5B40E1233E09BFF67747527A91F8A163FC3A255AE8800337517F1EAA6E608E031D9F500C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/XM6MUzHrZgnqgHqbNfNd460VSiWac9xFKsYVpSU4czPoBFVFOiI-R6qVHg_NcwwGJtWjlvGnZeo=s56-rw
Preview:	RIFFR...WEBPVP8LF.../7....@ 9..."b..P.d.n..._j1s..mY.........Y...@.6..O.$m..w.....w...pi Z.5.Q..k.Y.C......P....m.(.=f.~A.m..\|Z.@.k.m....S.m.8....c...On.Vk....m....7...m.6W...3p.HQ....P.a9..!,2&).O.>..u......^..2...8I....t....^U..@..[>a...XM`..]....gRl..........V........Bs..E.4..,}.YlX..Dvn.:i.....{.P.e..2..&...)..;....>....{&...&.2w...<.Bm.........O8...&.N{..b...__....[$y.Y%+....$..s`:..._.v...M....A.M.xS.x.0.bp...i.vjQ.L5.q.E."...TI...:.d4...,].5.Ri`<..!m..4,..-M^....P....M\.....y.k...)..../.X..j.ad5v........+F..L....G..N.p.iW..)..s........7B&..{r8?.."N7gaR........L....6...`.........L...1;.... .()7..#..=d9....b~e.'..c...V....lk4..u+.X.u).../FO.>.....wZ.)...Q.H..9.[Lf.$......x.-..P..E..p.5.id.$D.m-c....N".e..G...e_..<..g...3..................g.R../.....J.fD.$F.Y.......~j.4....].7.._R...k..j.._&.ro..`.RU...Y..YFm..46:...)..Q3..o(.#..aJ.B5.mE.@I......N..0./.<.....9?.}.0.,....@.....v....;;5..o.3..kQOX5Z....L....V3.yM......:

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5770)
Category:	downloaded
Size (bytes):	831349
Entropy (8bit):	5.621097742816547
Encrypted:	false
SSDEEP:	24576:/LFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmL:/LFI80BM4gxA3svhhuRrBiFpAv6DbgWl
MD5:	E719E0F4CF4B0A3D67EC4D1B98095431
SHA1:	84EE28D86E3A5623D39E1B55E1D495FF5872E95C
SHA-256:	777B77D667B3ED654DA6F97E3211E47C7E1A705B640EFDABA8A066A81096AA7A
SHA-512:	96BBF782DF7CB8F732B04E858505FD6FF0D3282206F495E12B0D1B83CA24E38C229BDE3FBECB939FB6C961AD4CF3164A014B978DCD45A5980F5AD6B927A518D2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,fPcQoe,vrGZEc,IgeFAf,wW2D8b,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9060
Entropy (8bit):	7.976507557570821
Encrypted:	false
SSDEEP:	192:YrL4HF6Tj4qE56uPel70Ps1y+O/m4lYAOtjSdUpW1yU2yRx/qXu5uj2UjGU4qM:YrvdE56ueIPTaAKjSdgWF9RfUjGUs
MD5:	61916AD8B9C0A3FC8413D347446FBBDF
SHA1:	3C8C57695675DE18CDC76E506D1E13EDA857E1F3
SHA-256:	F1D3C5464C5708E948DF88738979DBDC822732226B2B99C4A78DDE55E173545F
SHA-512:	8409675C0FB5DEB030AF87B5075EE1C3489D98C6BDDD33880E449A28B07C2F425EA74E7582892D51115ECF5C883BC056D9C290D68C4ACFB221EB1C8912826346
Malicious:	false
Reputation:	low
Preview:	RIFF\#..WEBPVP8X..............VP8 ."...........>.J.I."!.LUL4....~.Kn.....`/.5`..d......0.m...\|......yr.1......N...o.i...'..m.....8.....>t...O...>....5.....O.....~.^......W._.F.#.7......=:.%.}..._...\|..2...3..._...o.......?../._.^...?v.....w....CW.6....Cb..'.n.o..%..j...oA.......%+..o(.v#.h.R+......@..s.....,.......iR}.S.....a..X&l...@..T5.\..._..).Z....hf..q....O..Zh....+.z..DB........L.'.}H..el.....5.&.Q.O..(.l.#./EM3..QU..Qr\.68.b.....k.....iDE.......~(....=....<9ooS.x..M.b.#.,{.Q.."r!..2...d......b.Bv'..\.._.;..j..v..?...xK3."..$M..Cd...47..Ev...M.5.v.....P.@..L...wn........n..y......?....o.%{.A..x.....Jm20...Y..`.#.+.MBG..{.Yk.X/.M!...x...Q......IE(...........z....En9............Pt3..H@...Q....2........7..a4/.B.^i...}.-.e.f..o).8Z.q.~.Eb/..q.)......4l*.".........j...F'.z;.G'..G[[x...x...Z..=...e..y.....K...>m..V..b..#`/P~...3..=YG.SB.I7~hyUQ...!.U.I.;lbg....J1..PT..W.Y.3..$e5F....._....i.U.qJ..4.....v._...j...v.U#YH.c=..._{.N...JCN..5.

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PZ1hre,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6842
Entropy (8bit):	7.96906227819572
Encrypted:	false
SSDEEP:	192:MjLzPB23UOO2Ikw6BsZyxwBFZJ2lSvVDc:MF231O2I2BsZyKBFHEEDc
MD5:	61AE66FDFE5C513A0E5619C9E5C91833
SHA1:	8425E423007C0CD4F5F3D4ECCF5BDB1F6AB72CB6
SHA-256:	87E46B14757FBDC8031EC5BBD0E7D65DC0B56C70FECCE186C53BFC6515D3C3C4
SHA-512:	1159C179236105701DAB66E1FC562D2B9F60A7E7078155FECB2364699EAF50898C5A2C6F254B8388A2614AA5D0BAD913F03154C2A04A6C177F7D3384DAFA1EBD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....n...*(.(.>=..D.!..... ...w0h..e........!....;?.......O....C.'.......9....?A..}..W.?......y.n.E.?._.%>....?.....w./.~.s./..._..Z...A...[.K....r~........+...G..........[.?......b.....;.-......._......W.........6...............".u.c.o....................W.......i..pM0.......4....e'.M.v{......<8.j..LPi.Y.G..<.`H.i.o..Bl.GW"Ot.9j}H{.w+..1.%......\>s.....%gR......j.M.Z9.h..FJ+@N..A.....6o.K.yL_..c..L6.I.%-n...l..s)........!.tM0.......A._.'&}..../...ol,Al.oQt.s....76_...$.t.Z.{v.........X.N.&M^'..j./{..5L ..Q..W..2...N.,.^%...B..F...4.....\_.....&6d7..2..R.....K...... <.a..G.6..........<...(.S..O.....3.w.6...C.n.......(....C...~...TW%d...u`....\|..x...A}$Yx\|.Dx.....>5.1B..B....{~.........W.89-.Ns.f0Y....%_6.w..2\.K..9hZ...l...%S.x..8.{S.R....;.......#z.\|KR.\|.I.l.Z.....0vbr=..J..l9vn\|..,.w.&z.Nm..:.H..$b6...<.....G..NnJ^.u<...[....k.p6"..;...........H.......l...x.."(.Y.[.x.YM...7#...Q(..!.....0dy....e\.$.......]...4...y5../..>.D./.

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4318
Entropy (8bit):	7.952340208238396
Encrypted:	false
SSDEEP:	96:SLBOj/g0KkuukzuVqxuBTZCYb56WkKEmNH8YeXEBSiJM:9j/rKEExoZztz/heUEZ
MD5:	603B8BA36C22566C50A10EB94C3511A5
SHA1:	8E076393F2A191B2C38899552B566A287CDD9B6F
SHA-256:	657F14CDFFE966B1D6FABC4E06F4DB674D17E8A570C44CBCABE046F5CC98C8A9
SHA-512:	0904EFFAF009A5E5214AE78D3BED2703D9D91F096714A9CAA4189E950BAA28D10673799A94156B123C5608B6FFD647A08B1C8BD4AF8E9C7508046FDA61DCD2E7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.U.m.$G{......%.R..EuT\.lf..f..0.>....O`......:).0CL.`f.Y2.);..J..d....V{.X...f.......-Hn..Oa.R.X.<YLu..y....K..........\~.8[.'..h.4....v...R.`...J..cv0..sV.......m.Y,.d..,`.1...8.q.v0...$..XFR...;..l......:..Du..;.......c.."......Ij.b..].J:Bf.l...%.F..m.\|.%q_6J..6J...=.%i[......[W,..<..if......UW..kfC4/.E.TjO-,..&.a+...5.....[....G.'.g..X..g.#....;.'.m...gU.v..........@S.P7gFu.=.nA.7k.......k....u.i.t.....4U.[^F...w....&.a~....4%...K..W.W...}c.c...V.{.>..,.pa;..<..U.p.]4./c.....z..7.{.c...q...~XHNMJf..&...WW....'.?.hT0..d..:i.F.....n.4Pf...6.......Py...q..b..b/".dG.;.n.._".77.-\n..:(.....z.dp..28.....c 9.........6s.D] .P..o...T.2.T.v..w..X]].n...-.....S......8q.QM..4....A.V...jn..Q..)......W..'...M6N...oC1.Jjg...:pq...]./ucF.,....S.._0..[....<J.G_..]....2i5.X.9..JK.uR...Z ..j.....d.L.g\.#..2m1...R.\.f........d..Y.%.D.....(...p8......ny,.J.]N.8..m.{r...^m...a...F...5..g..K7...'....Z.i....b...:..H./z...G.. 4C.

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1106
Entropy (8bit):	7.787752803201212
Encrypted:	false
SSDEEP:	24:38dJmd6OzRCT5aF/lekKHPDT5QSs0t2CWJ/KaK8nsO5IHbUkXIgXlsxtr5TPg:uJmd6OzHwkKJQSUCAK8n35I4T9j+
MD5:	E40F0B71296EC07AFAA6C592D4672836
SHA1:	1E2DEBD68264E2B5F125F9F8A3BC30F91A2F4F8E
SHA-256:	CF6CE632581A0288769E35E2A3112F5C98BBD195803F7DE322F87DA6F2ABCF3F
SHA-512:	BABC4FE33E46FAE6DCE38B06BA6526BE1F158B77AF461712C72A15AFC2E740356B23B7B972A6F75D40807B0D579CC393F1A8BEAA5A51AE4B5E784F8A9767857E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Yld8nGY9Bomd8JIxg7mHNFvTgP-iJvYCWkJdcmDSMz3ZWY8YlscDTJEf08WOkJ7yMWce77Dxi9g=s56-rw
Preview:	RIFFJ...WEBPVP8L>.../7.....$G.>..........6..9.@....m......8.....$I..Y..$.t.......m...j... ...t...:]P.`.-..h..D~.....K...dkN.U.Q....v..c.)...1D....?..o$Zz....(...R....-.U6..`.\|..zD.".~.eD..nk..}...s......@..J0...B.......V..%U.aE.Z.?HQ!....D.&-I..fv..+.d.J...LKl.5.Z....\gT."F.....9..].8.OA.3....x_.:..T........%..{...2....f.H./?..HH..%.D.7..e.Ri1..~.T......vrf..m...w.w..\.n....m[Yw...@D...@..v..9#..@D)s.n.<~..<..v...l.f4tz.. D..........~.?....U)1`%D.....O....O......].x.B...&.........>.r...ka.1.......s..h..N.q.cF8F.b.y...)....)...b...z{...ja......{..0L....M...VZY^..VpB...DwE........+.#....6.n.]...En.F$......?...OY_f9.-o."...c..B.sb>..........7.....j.w.........~.0..j.S\.;.].t......`.A..=QT....}.kJ..D......fv..>-.......WPV.x.7..).....8..z..!n......!y..............E4}..7......G.rRR..Q.!.).=...0-....,......'..4$w..B..o.7.mep!.\|...7/.\|....._:@...........Q.M'.2`0..8.3>'u../..d.I....~I.....D}Z~VV.}.........7k0~....?.........Xt.\|...x..Y..V.-{...{I

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	339
Entropy (8bit):	5.203782911992142
Encrypted:	false
SSDEEP:	6:kRZzRxVvn9vrbUAx8G/QVf1M0s8tHf1pOwQRaNw6JpyxZRNlad0:kRZTFdrH/Af1M8N9VkbRN20
MD5:	A532AEBCB8933AAE390902FD1A297C8C
SHA1:	FD058D6777372B85F9BF76FA1AF2516859B393FE
SHA-256:	CD2324267E731EE120BBED75D33C4507BA56E2D9D3425E6A0C8F967F06AC61DC
SHA-512:	742333173486842626FB26442639A1CD9AD3001ECF001D6E65D4822F2ECB5EF6D4F77D9E7B6BC0EF1CBB719333B36986982C19FCD4D0E17D434E14E61AF693DF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=PZ1hre"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("PZ1hre");._.$q(_.SAa,class extends _.ar{constructor(a){super(a.wa)}H(){return"PZ1hre"}O(){return!0}kb(){return _.KCc}});_.Aq.PZ1hre=_.$Pa;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	downloaded
Size (bytes):	62120
Entropy (8bit):	5.200233203039825
Encrypted:	false
SSDEEP:	768:rPksmcJcApCeZygCoEOuTudKEEB8xAnpFyS5eCyDvmojEWCykh5kNbeAFjg5gvC8:rPksrJCeZygColbQJL5/U
MD5:	3EA70AE6D554F9FC0FFB8CB0281EC0A6
SHA1:	58D41E45856B15260F69F19200B6DE7FDCBC82E6
SHA-256:	A5B0CC4EF0FF84660C52A703030A8F948CC8702EF6B0535CC31FF8611823DBB9
SHA-512:	00E5EA6FF4C91E1419C4F7FE95815E67C11EDE4849810C2F3371E694622084D439F0E73C855101CB0A1A5B516A8821DE3B2EB1AEB450325F8A38E3EF3B9CC19B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.171.ce33468efea141bac957.js
Preview:	/! For license information please see chunk.171.ce33468efea141bac957.js.LICENSE.txt /."use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[171],{70171:function(t,e,n){function r(t,e){(null==e\|\|e>t.length)&&(e=t.length).for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n].return r}n.r(e),t=n.hmd(t).var o=function(t,e){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)}.function i(t,e){function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var a,s,c=function(){return(c=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function u(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator].if(!n)return t.var r,o,i=n.call(t),a=[].try{for(;(void 0===e\|\|e-- >0

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13280
Entropy (8bit):	7.960449800390654
Encrypted:	false
SSDEEP:	192:EXA78faBIIgC0Wtr1JbQhrs1WBxqlrX0w0OTqqBIZu1LwxLl1gRw4fDcGtu0uglT:L8fuIzClJbQh9qqqBAuN+h1kw4YIuFkT
MD5:	042D45E1ACC2A111B98DDEB55D0C3E66
SHA1:	C7D0BAC045E8A06FBE5A3FB010822C85DA42747A
SHA-256:	155ED1C06A9D1253C2783AF6BB6C434B76875264C1E26CAE948E671EA6629EE6
SHA-512:	75897D37198E76DFB4CE0C14B0854257C2B4E70759D1A7BC52EEB0B4CF8F3BB9B97823E8F0AED9CFC9FC7A4EC815BA5456B5C71B74DE2A3CCCE3A63EB5603B52
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw
Preview:	RIFF.3..WEBPVP8L.3../..?..H.$.m.0..C....$..9.........K.k.~...ww.x..]..Z.s......~d.[m....d..S@..a...A.T.W-............#....Bv_.$eg.C...$i.I..........e..]...e'8....Ux..WedEde...6.aWp....%....._...$...H.)..B.+U..o.._Y...0...H..).G.....^df.7.$9R.......W...yG.'@.\|$.i.KA-....XvZ8..,..^z}..#=t.N..j.h.':@.I.....C......x.Y..z....N....!.@...).....W0.s.FC........iBq66.\|..@....{..k..P@An.E.......B.8.Cj.@.....s.R. I........_........"...v;....[^e..f..<...Q.$y..my..T..<....$ .yM$.u..` ...B.`..R....R.j.L....7i...b....gUQ............=...B....8..m.H.....1..m.[....-c..T.l.b...... .3dB....a.2(...$w.1..1...H...H,.f.fZ633333.}eff.23.@.v.L.4cq%E.z.YU.Q.....z.;...U.Ka.VfvKiJi....Q...4...].0J=c_.{JS...Z23,.F..m..6..7_.....m{.o.m.m[...n."i.....m.]I...km`.g..9.9.z....D.`..T......s...=....m+k.}..>.{..y..R..@J.HI.mN....{....s.sp...W=.J.1SC.4.S.).._..7_.P..%....D..3l........d[.2k..pw.<H....d.%........9.Zm....{.;?.B6.........{wL..8......S.{.z&.@\|j..#.U..._.LF[.QV.

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	7.052421013235357
Encrypted:	false
SSDEEP:	6:yk5ZYChDBpEnS96WesGKsxdRM8Zj5elkndH7xLiGE6CAYdr0jSKIz/zZwE4:34CRBpEnLlD3Pb5e+LE6CACgmKIzLZwT
MD5:	0923A53B64E64DB75177B6972F016A42
SHA1:	6915D871CBEA8A3B8F4E54367DCA538DA0AC3082
SHA-256:	E0106DC1C0490A432C08671994F87FCBB982B7B25B4F9CBB640D49A03BD89CE3
SHA-512:	5054B69C1A895FEEC0CECD471FE317149D8F804E15CDC0ED51F8BA6B3FB61E092C5C78A92768D31273DBCBD189148D305BA4EB1EB210174DC6B0724615B1B1F4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw
Preview:	RIFF....WEBPVP8L..../........$g.......r^.E.$E.....~8...A.H....A8...%l#.Vr....b9.P......N..[n.P.........6\.w.+.....X....U'...#.}...Y....A.xdB.....$%.ww....t. ....Q\|.....,.........q...D.@!H.N.p.5.....*`...ms.~.l....\/.[/..u=..@...X...4j=.}..edi.i...%..0u~.MH..

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2666
Entropy (8bit):	7.917807355344063
Encrypted:	false
SSDEEP:	48:HVHk2OeFdRrLnN/m8Idf2KWfLnSu4KKohxCiac6tXdMMHyu:9LOe93Nu8IdfSjSMiiEHMMHJ
MD5:	0EB6C2E6E8F82DAEDC8AC2110E0A10CB
SHA1:	B9C32C32437D67AFB1ACFA5ED3309666227619FA
SHA-256:	D3C8506B84D348EE58F5BD43BD4115D893DA7382E12D5D49D19D0E2942528B52
SHA-512:	7AC74EC945882051DD0DAFF7509776A6F217F56B38593F7A027080CDA77B467AE612B299F2FC7EF5ED5BDE1FBEF0DE3C2D976F060CA1C2627FAA6D78440F9643
Malicious:	false
Reputation:	low
Preview:	RIFFb...WEBPVP8LV.../?.....m#9.....?.....AU...3K./..-.3-..7..t7>.Y.i$.Q.".7.......$......<..$E.......t.B...A.P..........H.....`..]`+.......6.......A.m..c...1...).....6[.d.rO.Ui.Z..Z.V.....%x$(...gL...p`P.A........R...&.S.F..(.A.6..>......m#A.?.C....?.-..m.........L~{..zLC..cfffff..02o..>...]j:.:oL..X.....!.{.K.Y.^O!.s....n...%...{...m.Qe...!....gH.R....~...,I........3..uq.@w.?3.7.]1.?.~...H.!/.',..9.8%QSeVr....8U..q...f..k...8..f..W..q.Zk.d.m.\..i..s..3.....q.U..m..w....l.-...(.\ehi.Lc.y.....U.I..)~..j&..k..p.u.P.7....5.6.Fs.".7,.af.a.....^.[..._...A...Y^.B/..:.@4n"8....weD\Ec<d..G....h<../...`......C...D.I..YM!D.....9df0.{.D.....9.<d.$......n.....E8..(.z.!H......H.......)....L..Y...8n....AA....q...<..\..`.j.....U..HH.....2.R....;.[....p..Q..#.W.z........g$.2.... .Q.%...E.y.T...!.C.,JO...^B.......WhQ...v..[...z<:...8.ao..r...Zc.K....m.r!/.]Cv:.i....#...[.v..$z.vN5L5..\..5c..j.+@Pr......Y{..2I..&.f,....}Pk..&...^s..).'.[VdI.e.q.

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9974
Entropy (8bit):	7.969479858844765
Encrypted:	false
SSDEEP:	192:nz45Jy4YOKB5tvq5tbZNfyQCMcdFJcf4TWoY5FX6ZaQHHqGn:85JMb0LfVCZdF6ebnX
MD5:	F469161DCB6B428ED579066643E0FACC
SHA1:	06C807905D0264AA497FB2090A7EAA2F9838DACF
SHA-256:	F4A3A202AEF5AA38C9E2281BD8000312FBAC33F3F2576C92326921DFC126BCF4
SHA-512:	FF11D3FF7738202FF698922FE87CC85CF59D7497077B47B2C382A27347F973C632A4BFA506C5D1379DB9E237069AE07879CD2B4B056CD5101A7593104FBB0368
Malicious:	false
Reputation:	low
Preview:	RIFF.&..WEBPVP8L.&../..?..X...m.=... ....Ag.......h.M..]..=9..`.b.ZK{.....Bd.<..%..2.{.n`f6.; ....Z...D.o.....j.....?.....5n"".I........23..\|........y=.....q..33..h.V.......$........}...+...e...C..gYE.....{ ...........w..d0..P.......!........t.{.......@....]........>.....v.0H`{=Y.$.....T..#5..>.ni.@@(Q....1...1.h,.O.n...,..!....A....]....V.:..m.H..}-....1.\|.Y.y..!.+.4...'v....$.M....`..p...s.]......X.m{-K.Zk........{?H.{...y1/.......ow...w..k.6..%...S.E!Z14...?... 4\Y.K.`1]..,$..!]..Kt....N....P.A....=.OA.Qo.P.s....\\.Ep....G.C...\.6.1........t..;.E.S8)....\|.>..@....m....I.I..YR..m...m.m.^z...W.1/j...hG...<k.2.?....3.>g.2&@K.m.&mN.Wf.....%Aq....YV....Y4.A. .B/....%#<..C....BY.......K_...h..C..vFK~z.G..>....C..(.....x....~.z."..C...ZY.\|...]..".!...2..1...m.H.$........\|..?........J..RkO...Qn...........k;7VP.xY........~O.,.7....d..r.,.B.Y.<S.B7J......a....a#....).nP...f......G\.@....Ax.!...\S;.]m.'..........n.....u......+.\I..

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	6.880295672646258
Encrypted:	false
SSDEEP:	6:2AWZUtbC/VVGbD7J9iZ1DUd7kgXmaTY3+0S8:wqtedVafJ9KDE7zYOr8
MD5:	9DE344B11EF1B7FFE9169CEE56E5F5AA
SHA1:	7013E1B54B450D78441FE986C7F92FE6649A35DB
SHA-256:	44E1B1163C76A676E3600CD40A1092A84C8CAAD5BBD116E0F2C0E52D93AD763F
SHA-512:	E677DB9D93389D0E5EFB44D465D54B5BF0430FEC65E0B3B3DA3E1626D3CDB381D303BA50D2817F8E5BAF2CA9885503463BE61C3E97974F47358B925B5516A053
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s24-rw
Preview:	RIFF....WEBPVP8L..../.......m#.....!0..{.4.4..-..!........$h...a...?5..H.k......wtW!...Uf.. .U.gy.............gP0h$I.../....t( ....Q2>._...d......(.s......E.n.t.../..C.....T.R.........K.1.Q.g.8g........

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2544
Entropy (8bit):	7.891775535822655
Encrypted:	false
SSDEEP:	48:ss55FpCT8U8Oba48YEXgXWnmdU5eoar5/GYSEwZK3aZ2TO5N:ss5oh8IL8ngmny8eDpGYSSK2Ob
MD5:	245FFD8BAF56F775D50CFA5C52B15A06
SHA1:	096D6C17A3B3B9EBBEC34D99986D219CC770D166
SHA-256:	158BC574F2905504BDFEFD8E199CE012011CCFB49635CD3E56B4FF94C3270D25
SHA-512:	F3F08D32E9FC6E6E6BBDA64020C4B795B27F5437E62B4157A5D653F9DA93471B058DF03DAE4AF8114779114FFEE36C7F2E754A79A2AE8B4E6962AC9806A07082
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M(h.......'.."....?!Me.... =q.i.D:3$=_/...T...\|.. ..m#.\|...CF......=A..?B....v.`.}..}.......7'..D.h:HJ4.q......$..i.4.m.....Pi.j.....m.m+....;D.J.N.h.9.....&.......[3Xk...\|...W..d6.:.U.#.C..N.#..../$rVM...N.v....$).<..$.._:..%.I..I......\|...3_.....m.([..Nr:..m.m.m.m.6.{l....u......u........._l.r..m.V.+w`;.U.s6..IR$.=.fw....?cfjM..m#.............lq1..gp......NA.L\.T<..Y.Y......k.....U.O..>.H.h..a.......X.4..I.jC0.\+..}..X.-..P...a.....5....D.t.U...R."#. ......\|.@iT..,xQ..n.Ry.....P...-NA...1P.F?...%....\|C.P;.3.!t.(...L"2.` .c5~iw...+...nh...E....V...`.p...D..4.............i/(..H..8.v.....T..x.".m<.j.....,...q[....e$..~...%..f......$@4...=./..5.}J../R.\|(.F2.._,G..........GJ3.@.A...h...r..%..q....s..Z..e.46.....#.MSrm.!.,...... ...x.-....g`D..D..g...$.?jY..b.P...........8vAkla....ky.. ..x..+.f.p.P9..e.........,.<.t.,...\.&....;..0\,.h....%.-L..{...!..P.....W...}..C...tcPp...B......3...a...voU..t.A.@2eZF......b...,........ .@.

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33456
Entropy (8bit):	7.96315139927072
Encrypted:	false
SSDEEP:	768:yO0Z3NC1cNlRVV3VgrsC/JKLNBNS8smKGI:S3NC1Ajnlg78N9sm8
MD5:	C971C780267D5B469120B497DB586452
SHA1:	531F1AAA2FDA20CCC72E359F9C60FFF68A74868B
SHA-256:	14D2F0860EA6336EE9DCB02D274E18B0A0FB05FE76C40D4A0BE9F6732821300F
SHA-512:	3F504D40867774BC4F62357A1A991224D6138BDDF54F89DB9F14186F133E959349F66200C7896A392C4C366FB2A3DFC3B4237E81943177FFBF090F918E762404
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@l.H.tr.S....p..^.........;..m.........,..^<.#J..=...=..m.l&L...juA.<$.I.@.C...q.....:.PU..=>$..dQudb).L.I..z..@6FU.-i.Y...b.=.../E........B._v.....I>."%\|G...$qH0v.p.#.w.....1...Pt.....!....s..H..e...DK(@.I...w..K.9B.....m....,F..4......^!.....0..z. [.-E.V{P...-.)....?.=H.&(. (.]..H.#I..s"..]./.....0....3.....&A....I$.DbL...c\|..Uc...&....qP...y......:g.1..,.$.%G..#G.6</<s.9..e.>..U&)/Z.....9.q..m......71..k..\|h.jj.....j.6.l..^......c.q.?..%.u.V.m.6T.VS..G>.6].9.......e..b.5.H9.PR.Y(}..M.9...p..,g......6)..i..:.i.%....#..}^...6mBN%.a...k.J.`.lS..N.w.8GWR..`......A.*UB...........Ah'....P!.6.Z\-....V......P%T.U.BP.UrF.!Pq....hl^...+....4}.(x...p..!(T..[.Z;.....6.c..p...<w.....X<.q.pn....F..!d.I&.i.p.......B.u....Z..\..jtl.......my[.=l>;;.9..&..K..\|}..\|q..z.7..NN..;..\|.,.....t+=..@....v.zt.p..._..S..1EL...M..}<.,.,.h...Ll.`.......\..6lX.1........>.?.C.j.m.`.a....L......\j&...K..P..L....a?@}...h.~w..,....cyY....D..

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	14592
Entropy (8bit):	7.979566802302065
Encrypted:	false
SSDEEP:	384:g1OLN7HRNRMf8GjkVlFs3kBk/6Iu+HB9YTqv8hgCeTWM97qZa:g1OLNjHJGIVljyzfY+UdeyGqQ
MD5:	B01009243AEE7B58A9160284C54C452F
SHA1:	FE7822587D0E986CC47918A00454C38645D9C98A
SHA-256:	61417E20FE18149D6D87C80EB994D48F0F1D501F45861FE6F1D3E38869149DFB
SHA-512:	2E170A10A063BA2A7A543EAB115FB132E2841AC207B59CDE43B5577DA9048DCE10A0F041DBB80E292495D6C2D632C37B43585A18A6396541732B57670AECBE07
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw
Preview:	RIFF.8..WEBPVP8L.8../..?.M@r....4.....5..O...2......yI....5.7.X.Zk..Y..5U..F>..U..O.a...."c....c...8r2)[..7...TOzwwy...;....`.(...,3....z...:..$.........I....53=...V{f.E&...6".w.."!k.[.V.Y..C.r.Ir$.....o.e.DbH.o.:..-..K.dUU...;.././....U+.......g.ct.......O..^7....^..l.l...{8.(B.l..........EJ)@{...w..O=..\|.QJ $.A.,.rx.L...b.(PH..ReV...."..H.DH)..(...a..@.$..E)...>..w....c)..M.....R$..Y.f.....`u...@..pEn.P..`...R}.(.._../..'..p...eu-.^...>.7.../.D..P.S.D(1..]."H.A .bS...#.,...B&U..'fR..."..!.V.......(......W.1.&!.R...L.&Sm/&..v.Y.;.9..$B...0..&S..8.g.&ui{........J)K.....d....R......).....N...lG.J.$.@"..&m.]..`W.....;.2.J.&U.....uV.......:..m$I.....g..F...g.>.w.P...9.z....A.C......3....=....wTp..V...R[..K`3...6BM.QAj..Y.)..sqwC.`..7..U....j...Yff.3333333Y......i.yw.{fg......1...s...s7..B9...z-=G,U.o.r.MCn+.lq..W..(..C..lw,....".:..t)....b.{..C...5w.q[..N\..C.m.y.CP...b.....1.e..J.w...+S.K1.. ...R.m...}..*..m.mw.BF.....'e}...=t.m[.F..\|.

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	48322
Entropy (8bit):	7.9925923618023305
Encrypted:	true
SSDEEP:	768:3tbqdESEHUPdAzlINODPguMRR/OC8ipneWj5tMb+K/ZeG6G62sc2fVAAdgIseEeq:9W6SSCAMOcuwxOr0nnXMb+KRtiztdgZF
MD5:	76497700655681491A9BA6D4BAF13B64
SHA1:	C8DF276FEAF8A43717EC0F9B1EA2DC4AE71C188C
SHA-256:	BBFC9CB7F900979F318D15A59045CB7236636E11B5F8A441E309D9E3F08B9139
SHA-512:	D16D03A8B7D3DA893463A7DA05F7D018CAC6399E6FFFB8535BB8B07114B5B8F3ECB7457C5DD46B3EBD27CCBC14FA79949A74240C3AA1FD7A0335FCABE14B0DE0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw
Preview:	RIFF....WEBPVP8X..............VP8Lq.../..?.M8l.6l.M.#._.4m.........mI.l.{..@..m.........d...I$....N..l{a.Jb.I....,..O.9Z..N.DR.a[I..ND..gC.....$..6.h.I..?...X\|...Wdm..5^....zh.V..8aE.!........k./..... /..H........^..^@.$.U...7..g.E../....$I2k.>.c.d^..](..FR....<.......AN.....Df.(...........P..".........WB.)A.. .q.....1.....!"7."2B).. .....d.+...8.#.8....)"....#.. s..G.g....G......~...........1f...I$.....H0.f....T.lIR.dI..%?[..L.PE.D.'"..q.....Tc].PE.=.4..K.H........,R.D..\|.Y..........I=1..3...G "&.............k..^....d.U.J.%9.........>...\lA....I.>E..]...R.>FHg..B..V.?z.RQBo.....bz...<.KY..."f.C.0..Y3.....m.\|.=...C..{u.w.s..?._.g...{...Y....lk..{_g....N..[t.......gu.2,._.p_.7.#.l.<.8vY.l.....+..p.#...o...U.....7.;.P..fX.99W..}.7\|......DH.;.m.m...c..s.fF......5J.\.j.m.....1..f0[.Hj...l.X....-.....-.r.].....d.g'9T..~.<k.........c.a.x-.'.m..CY...+.....+..=O......Z.Z7F`XS8.)..G$...c.=....@x..w\E.<..H.......A.G7.C....".C^.n..D.q.....(T'...C7.!

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (589)
Category:	downloaded
Size (bytes):	4545
Entropy (8bit):	5.573837955056086
Encrypted:	false
SSDEEP:	96:kgCHfhXmwu2F6vRzgV4Hg+3sMo7Yjr6NrhrWl0k0tfSRYW6YJPhVJIml:LifFmRF5zG4HgYs3Ujr6NrhrO0F8l6Y3
MD5:	CB39B97274A40824CEBECA48602DE036
SHA1:	F1AA40C780F1EBDC3FB2770FD4506F54F9DAA89B
SHA-256:	BB5450F390D8D6D62F55FF791B6A14FEDC071D93A0E08258023A19825EC1E543
SHA-512:	A0194ED085E2A4B7B1742D6AC09C011BC3079B2FE809508F25032443AE05F44AC8A18EE5E4DF8F1349E4926AE89E16F340DF367E09309A265B4C84E38308C2D1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qAKInc,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=UZStuc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var iKb,jKb;_.gZ=function(a,b){b=b\|\|{};_.fZ(a,_.oo({Ha:iKb(b)},b))};_.iZ=function(a,b){_.hZ(a,_.oo({Ha:iKb(b)},b))};iKb=function(a){a=a\|\|{};const b=a.Vg,c=a.Kh,d=a.De;a=a.Dv;let e;e=_.jZ();e=e+" "+(null!=b?b:a?"cKScvc":"IfEcue")+" "+(null!=c?c:"HPiPcc");return e+" "+(d??"")};_.fZ=function(a,b){b=b\|\|{};const c=b.content;a.open("button","J4hqjc");jKb(a,b);a.W();a.print(c??"");a.Ga()};._.hZ=function(a,b){const c=b.href,d=b.target,e=b.content;a.open("a","BDhSBd");jKb(a,b);a.ma("href",_.zo(c));d&&a.ma("target",d);a.W();a.print(e??"");a.Ga()};.jKb=function(a,b){b=b\|\|{};const c=b.Ha,d=b.Of,e=b.We,f=b.ariaLabel,g=b.jscontroller,h=b.jsaction,k=b.jsname,m=b.jsmodel,n=b.jslog,p=b.id,t=b.attributes,v=b.hidden,y=b.disabled;b=b.autofocus;f&&a.ma("aria-label",f);a.ma("class",(c?c:"")+(null!=e?" id-track-click":"")+(y?" hf6Ybc":""));null!=e&&a.ma("data-uitype",""+e);d&&a.ma("title",d);y\|\|(g&&a.ma("jsc

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ojPjfd,ovKuLd,pYCIec,pjICDe,pw70Gc,qqarmf,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2666
Entropy (8bit):	7.917807355344063
Encrypted:	false
SSDEEP:	48:HVHk2OeFdRrLnN/m8Idf2KWfLnSu4KKohxCiac6tXdMMHyu:9LOe93Nu8IdfSjSMiiEHMMHJ
MD5:	0EB6C2E6E8F82DAEDC8AC2110E0A10CB
SHA1:	B9C32C32437D67AFB1ACFA5ED3309666227619FA
SHA-256:	D3C8506B84D348EE58F5BD43BD4115D893DA7382E12D5D49D19D0E2942528B52
SHA-512:	7AC74EC945882051DD0DAFF7509776A6F217F56B38593F7A027080CDA77B467AE612B299F2FC7EF5ED5BDE1FBEF0DE3C2D976F060CA1C2627FAA6D78440F9643
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw
Preview:	RIFFb...WEBPVP8LV.../?.....m#9.....?.....AU...3K./..-.3-..7..t7>.Y.i$.Q.".7.......$......<..$E.......t.B...A.P..........H.....`..]`+.......6.......A.m..c...1...).....6[.d.rO.Ui.Z..Z.V.....%x$(...gL...p`P.A........R...&.S.F..(.A.6..>......m#A.?.C....?.-..m.........L~{..zLC..cfffff..02o..>...]j:.:oL..X.....!.{.K.Y.^O!.s....n...%...{...m.Qe...!....gH.R....~...,I........3..uq.@w.?3.7.]1.?.~...H.!/.',..9.8%QSeVr....8U..q...f..k...8..f..W..q.Zk.d.m.\..i..s..3.....q.U..m..w....l.-...(.\ehi.Lc.y.....U.I..)~..j&..k..p.u.P.7....5.6.Fs.".7,.af.a.....^.[..._...A...Y^.B/..:.@4n"8....weD\Ec<d..G....h<../...`......C...D.I..YM!D.....9df0.{.D.....9.<d.$......n.....E8..(.z.!H......H.......)....L..Y...8n....AA....q...<..\..`.j.....U..HH.....2.R....;.[....p..Q..#.W.z........g$.2.... .Q.%...E.y.T...!.C.,JO...^B.......WhQ...v..[...z<:...8.ao..r...Zc.K....m.r!/.]Cv:.i....#...[.v..$z.vN5L5..\..5c..j.+@Pr......Y{..2I..&.f,....}Pk..&...^s..).'.[VdI.e.q.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8188
Entropy (8bit):	7.97315987746307
Encrypted:	false
SSDEEP:	192:XqKdQmquxznJXzDlIROUAHaKl8LfX3ZfWdJvM/+Ctw4VVT1:XqTmxznhzDlfUKaKqL/Swtwqh
MD5:	D678E080423DE82EFA6CC7C3B426D423
SHA1:	C06E34366683C2EB72B426CAA294C64CFD25D627
SHA-256:	9F2537CA549890BAC770EDE0892AB9AE80E9EA94D1467087A5B27F4F1DF12E37
SHA-512:	58210A7DE37F7F5497B06D7CF9812ECBABC3BBB1D27658BEAB966E00B6AAD8EE50F17E4571936144C8A3E76C6DD6BDB4775EE5F801682E6DDCF323DA37816DED
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.U...$Q....]t.E...Z....6u...R..bu}Gv.a........w...Gls.c.m.m..m.=.c...k...:..\|......S...N..U.6..V...C... ...TYk..6:;...GX.].9.m'{..3'..+.t.b..5....n.q....^q...]..8.lN..I..S.(]..@.:.m..T.b...`;...S].....m....`.A..Z.kkS$9.#.A..a..4...i%...\|...R%gdDTfE...Q.m7mnY[...I..0..k....&...3...G.[.Z...@.K7Q.bP....p.Ca... ..f."\|.:H.......U.r..q.a.....ff.7U....z.^(mL....k^..B..l...&.W.b.S./.......@..L.....+[.(......s..A.7.l...X.(..A...0..-~.L..h[Q..%k.....:../.a9....n.7...W.4.,y.c....b. ...F.1.m.m..6..fjw<..d5..?.>D..".G...$I.$.c...^.xd0.un....fX..?+..8x...9..9..]n....~....9..........Oe.R...x.x.....S.f....4.....l.......2X...9...;X...N.R.uk.g.R8..T!X..z5.2~..Q.c.}.L.P.;.s.I.v..vniv.C.w...-.;.4A.U..3..Mi...My...s.,.$M.~~Ys.{....../M...<vJ....m.....;'...U......C........Q.%w.qW.....tKs...3vi.N..VEf.....M..M)./.....q./..&n...?.9..P...Q..un.G.g.T~)k.Ji..;..N/M.?Y..S..g..a.f..+....tJ...=._..\YpU..QJ9J1%

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3175)
Category:	downloaded
Size (bytes):	45694
Entropy (8bit):	5.118242929635633
Encrypted:	false
SSDEEP:	768:tpi7T07ytsSwuLFB3t8KbX3zrcW3HsBtuv3BtlK7vKH5v9u8kEFsW1:tpK1L5bTIByv9u1EFd
MD5:	8B2EA74C2950F702116F9B02ABC52BCB
SHA1:	AD7455A6E9F0D7E73BA4B80422EF805FC66F7879
SHA-256:	FFEA291B7D7F014FDC619350CAC7B5CECF876DD20EFB498EF0D915FE3AC4BA17
SHA-512:	942397EE9B53797364C02D073689CD3FC049E2EA7AF9D89F19608A61EBB76DA8A554D124F8BE99CECE74EB540806C9BBC383DAC238448D07A42DFC4D421B89A3
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.990.023f8bfb4104e9778375.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[990],{67990:function(e,t,n){n.r(t),n.d(t,{ClickstreamProcessor:function(){return we}}).var r=n(24178),i=n(32722),o=n(76588),s=function(){}.s.prototype.setDelegate=function(e){return r.SC.attachDelegate(this,e)},s.prototype.localStorageObject=r.tO.localStorageObject,s.prototype.sessionStorageObject=r.tO.sessionStorageObject.var a=function(){this.environment=new s,this.logger=(0,o.RG)("mt-client-constraints")},c={nonEmpty:function(e,t){return!!r.SC.isObject(t)&&t.hasOwnProperty(e)&&r.SC.isDefinedNonNullNonEmpty(t[e])},valueMatches:function(e,t,n){if(!r.SC.isObject(t))return!1.var i=t[e].return t.hasOwnProperty(e)&&n.indexOf(i)>-1}},p="overrideFieldValue",u=function(){}.u.prototype.constrainedValue=function(e,t,n){var r=e&&e.hasOwnProperty(n)?e[n]:null.return this.applyConstraintRules(r,t)},u.prototype.applyConstraintRules=function(e,t){var n=e.return t&&t.blacklisted?n=null:t&&t.hasOwnProp

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	7.694737520848792
Encrypted:	false
SSDEEP:	24:Q0gnfwftjFBkUSEMixW78yt1x/YUsfUHS4Xj5OQ/5YDQ:QdIjiDEMixW78ytbNs7+FOQgQ
MD5:	B268DC2EF4CA78606A491547A017C832
SHA1:	4140A3CA287E6C52EFAF6407FDD3B30C190DF53D
SHA-256:	F1AD01CD2BE867EAEE0DC3A0B0BECC8358F3FCF27EE7E1EE8854BD85DD3A2DCB
SHA-512:	EAA399EFCEB9B86652497833C8DD7D424CFF7881F6E07FB5999E00FEA3A795BBB44EE2BDB9455117403EF61F3D7C5B4E50AF536D3063496964BF37CAEA2207BF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L:.../?....'!.$G.b..:BZ..L....."I.$I...Z.8....&!.$G...?.G...L........h......@.?{.......0D.......D0B.A.9..c..........@ .O.DC@.>.@.o..v.%.P.M;l.... .Lh.....0.....t.....t.b4&....p..]..3 ..........`.....4...{....f..c...M....K............c..{.t..x.9.>.!.=v............}EH.B.)....].~......?...u..#..........hm;67w2...I..Im7........Y75..ij...\|..v{....=.QD.'..efmt}LRw..\........h.6....@....O...6.4..o'..r$..6vn(p.D............Ec...%..p,..g....."Ob.8`.G...0..c..n.x..<I.1'...(.0...P..?..?M4v..\|.4Y.8..........\|.aC...-.......+G......F.u.]{.a..{..7..R.D...r..#P...2.............y.Q..< ................\.j$<..;\.y..O....6../..{F.@...V3.5....=v;~s...2q.m.2.X..V%......,.....zc......u..S.I...j...@w.R...6.h.r.v<p..q}.+..R.N..E...XD.KV.G..j.&....Q..C.......7...G.......q.....Rq......H.T.R.Y}j.T..Y.I.U..-........G...&3^.UM....o.Q.X..,]..Z....+S....)K-0...>.....^OS..0.Z_....."...>..f.>..LK.....i.....X...Zr.-...6car...[...KF...^.P..

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_web_exp
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1406), with no line terminators
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	5.807036422634925
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA5QHy+KVCLTLv138EgFB5vtTGJTl4OtBbbLyWOeIbc8s1ngirLOg:VKEcJHxKonR3evtTArjHFmc8s1/OXLrY
MD5:	5D849C49F6C797198E802E070D85A3C5
SHA1:	56781822E84C590993A455C08580481A416772E6
SHA-256:	DEAAEFE3A032841BFEDCED33992A3EA6F0C2BB13F37B3D811385371CA3578BB0
SHA-512:	B385E251214D49B29AAD3BE2D8BF6F1CFA630AE4A8E21AD37EA263E4E6BD8A93F7FCEB2C17CDFE090C7BAEE636B2A4A5214E6D5BC7AA0196F8327E83C6111DEA
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var s='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js',tt=w.trustedTypes,cp=tt&&tt.createPolicy,cp=cp&&cp.bind

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	48232
Entropy (8bit):	7.993389789636593
Encrypted:	true
SSDEEP:	768:3w4PyBvkKHgQ5PKr+iZBtEceZM6+S04rRnOQc2ET/yJquqFXjiSY+1UZUK3seY/A:3pOT9K6iVaZGS04rdBsyJeThY/Zjs9/A
MD5:	8F207042AE152EF501F2391AF098AFC7
SHA1:	D9B7233450008EE49E6DE7701769046B093B4126
SHA-256:	610D71F82FE6887B785BF15376DD51175779AA98CC85834700663575F608EC3F
SHA-512:	5FF79B88A3F487F3AF2F47808952CA18037EA216B9927CFD47D7F5E2BC752EF400B81171AD88FEF0104FFD4E38BBAAD9F778E578282318724BBB72F8CF42969D
Malicious:	false
Reputation:	low
Preview:	RIFF`...WEBPVP8LS.../..?.MH..6n..\|D.....[!...`....5Y..'..&...$.H.g7YU.@:.#.n.v.....M.....A.vG....o0l.su.&84m..Zq..C.. .U.......I..!.$..nk..H.$...../_q....f}=.sN."..is..u.xl....i0....OD i.0G. .<.....ne.$I.?.n.UE.f&...toK/......K.../...Zb.._..A......\|..2....m.........}.9.. @\| .....~....r3..sf...'l.5..6`'..d...-q..WR.c.{..aM..b$..#@.......$..@......91:.@hf......P(2...q..<..d0.A..g7F...f&m.J.#qU...#I.$If.pvZ....P......D\.z.@.m.S.z.?O...a....!.^d...$J.m.v...*.......R..._=.1....?......c#.c.{.....F.c0....8.....\...`........p.@p>....W...-.\...4.s.js..........)m..617.M7..h`K3..&....&m.is.6...?.RV..z.1w.7....... @...q.q....c2)=......}.^....v............. ...?p-.a"...d......a......W..].'.B.....1c.%...PwuWw....L.X^........?.l..R..`. .`..,...6..w.v......].... @...cr.B).4fv......W.l.Wz..c@0...C>..K..++.O.2.<{%.....4%..R...1'c2.4......>.7..U..\...n.$o.6..e....8..>.2i.{.#....&..mn2..+..^......(..1..d.]&7......g>........,.t?...0..p...C........EY..x....

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	5.233057420667474
Encrypted:	false
SSDEEP:	6:kRZzRxVvnbAx8G/QVf1Nw80MwQRaNw6JpyxZRNlad0:kRZTFwH/Af1i80RkbRN20
MD5:	8B5E20AF4C5DA4D3807256150855F420
SHA1:	34A53D10E321133E4ADE52E3465C71FED4FBAAD6
SHA-256:	B52C7F8014600DEE1B48C98BD62B64C91F1A95D7786AEC368836E2AD8B4BBAD6
SHA-512:	19F9020A5FE89C6BBF2E244399C8F231E130483D80269BCE53660971238724AD14DA4AAF7E880294F0E1BA90EE9872A219A94814F39DE6C261E1453BDCCFD9C3
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,DRmmld,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RBsfwb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("RBsfwb");._.$q(_.LAa,class extends _.ar{constructor(a){super(a.wa)}H(){return"RBsfwb"}O(){return!0}kb(){return _.dCc}});_.Aq.RBsfwb=_.hA;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/supports/supports-Wallet@2x-daec7ef3fb160308d05ddd69a2b1dece.png
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1968
Entropy (8bit):	7.887842259839152
Encrypted:	false
SSDEEP:	48:zKS0PU7BIWKegISpoMKLQe4L5G/PfkKg5IESU1Pd8/kho8QTm+hA6P:z30PUyHSlgIPMXtm/r8QthfP
MD5:	5595E532F330186A628DF64B6BF2AB9C
SHA1:	DAD41B26075CA3D857C92241E646088F87FC593D
SHA-256:	242280AAACE4E73539F6328A80E12486699E260FAD50AD3941C17B32B3126BEB
SHA-512:	D9793F6B1B4455CF2618F6DC76ADB832A342B331536D147B6A74AB62E5D0C17EBCF4295F7EEF6762186DB5051FB16E48C92DCBBABA90BCFBB727B2D7CC367E6F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?....Em.I.v~]../......a....:..!.^..$.I[..&..?O..q#I...."..=g_j.HRc~..C....D...0($...%....w]k.{{..D.##.....qZ.v.. 1.........H....g...........3s........<.3-..u.Z.l...L..=.....p...bdf{)4C.9.....~._..(Z.m...f....m..=.}...}rd.Vme.}.s..?...-..N..;......g...b....FKq./...~..?.Y.,hW=.X.=Z..X..DGQY^.qpj.e...y@...$.2.C.P9.Uv...G.....9>....c...D.....l}....._/=Z..-...f.7.z...R..k....Q.Z.17..5..S....@(Ue.!.......u......k".....E.C...+.........C....v&.>...y.q.F.4jP.........,..>...T.....H\k....}Ivm........U..T..!0..{.....Z...c.a...........y....[......n..q..g.yf..@c../.m.7,..vx...j2X..P.@..{U.9r.......u..O<.....AE@.\.2..I.......@0(...Ib,EB...?..puB.d.......{...n.Y..j...;rUk....n.Z..xI...!H.P..<l............_...3a....s.>...7....<r...6.8. .C@.....mZ..>V[..F.Cc.........R...#.d.Q.@.$B....."Z.B.....9Y..E5...B...a..S" .....ru&wxh...(.tU,.G.E.\|.....7..^(.q.F...A.m.......Y.[$...B.. .1.l!A..A.....s....1..;..A(. .B.j.....H.Q\..0..B...

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4790
Entropy (8bit):	7.920770886596427
Encrypted:	false
SSDEEP:	96:qC4tQxwaUNu/BdFfVD2uYRanUd22fYx08kUHn723QEItHB3fCI6I:Z4GxOUdF9DDYKwu0tfQhPCpI
MD5:	24F44AE57FE644A09175B4CC4ABA8F65
SHA1:	15EB3A04426D5257525C00364CA9EA041D27AB14
SHA-256:	BC20924415481F17717E875B13F2DD99C1A36EF340A46DF7392CC271B8458D05
SHA-512:	4F7D9B233FFC2C26CE62CFD364DFD897077DBA574D86B29399AE6505A3C490CE53F9333906740A70B3FD8FA89818F0DA8B35C08C1DC1E08B81C21A7DCF2EE4E7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8Le.../?...M0j.IR........CD.'@.{...Q.B...E....6..Cx...F.c. .6.........{{.g.d....n3y.'..t.U..8.1.5-....G......8....7..m...._CDL.dv.Uh?(_.....%eV.xl.Z.m.W.m.ug...3....>....O......._l\|.vm..VN.Z..!..e......2...i0.".:..D"2.......]+....?...0.0. .FH.9....m..N....7....?dG._U5n..m.m{l......'...Z.'..>......3....=.m.........Gd.53k.m.m.m....mTUVD..kkS$9.H..f.ffff...p@....4A{f.aff....?&.'NZ.2..,0..5....6w.7..9..I..AZ..p.JB)Q..e..e.}3...............D.......ea[0`0..`.....1R.q....).8,.HBB.....$.e...L....e.......x........L.z.Pf......B.......5.....1.`......>.p...,...@...._\|..)..@ ...5...mc.l.....tye....N..'..s.......1.6...6`..............`P...3p!....b.J(c....n`..2#.d...vp.....@BB....l..c.`0..q.J... .p..o.....lc.oC.b.e.C,....m......3.....lc......L.L......q..c...'..`...q..ZF.7...J..L.A..A.G.......`....x.../....7......n.w..A"..=.......=...rRQ.U....O.......V.m....x.5g;.0D..`.A0.6.4..cvDUj.3....I.....s............

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	240
Entropy (8bit):	6.9991712725025685
Encrypted:	false
SSDEEP:	6:Y/PZql/KiDZfb08qzALLJRn3PRB8y1BLqmX45oBezn:Y3Ul/KMb0tzALL3391t1o5oBezn
MD5:	BA44425C00D3898F79D74B5748E49934
SHA1:	BB2CFD3AC724BDAF3C1F3A3A61030671C79D1B60
SHA-256:	35F1F26A525AFA469CEC210657087027502D02CE5ADC3BB1C431A29C4544FECD
SHA-512:	23D0D7732B4E677FA0E464C3BB834DD28BB232E0460AB6918AACA4CEB1AF7D149A7BA50035B4F39C102472F30B1840EEEF73310517FFDE7810EEE2B4F0F78647
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........$e...'..6.F..u....H....m$'....P.>;L..L3f.S...+Q....Y............j.s...)...w...B?.V.y?..9.......~`..C..1.b...$)Y.....?O........y+..g.i.V.\.q*.f....5...1. (2.s..R....w=.b....)..0...(......e.........n.n.

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	37564
Entropy (8bit):	7.962934539665607
Encrypted:	false
SSDEEP:	768:OwoSQdgxtwSFVcBULLwPSwwtTdiqsS4QhabMUNHzNJ:wd6uSDcBULjHTdiSXhfy
MD5:	21EAC75763F5C2012DDFEEB866FCD348
SHA1:	526E0BAF20277F985072DEBDAD9CBD7A20B44144
SHA-256:	7D91F09A449207296941E6E5AADA5FCA26942BAF69591DF1936B9EA28C59FC3F
SHA-512:	DF9D6E9F47F3D71FC709906B72760EE2A696881A30E29CBCE0F7F1C97F4B0B35C9583B94169037175E9D0846DFD80838532CF96743D833B7283DF66D1D79AED6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M8l.F.FNn/Y.._.<.BD.'.....n.....z..w.T.....0.]u.T.......A,..].ou7.......l........Zd.&@...... ..#"...."bd:sIl[..!I............K@.".......%.8/...6`@'i...XZd..K\.%b1.A.)q?.'...N.U...1.l....=..-0.D_.i..}6.........0.V..$.p.W.....#....YHR.=.....K"2..WU..1?F.a.&nRK..l{.F....92s....Y....#.0".&.#1.m.....D....;.s...i.'..t/I..1.e.Yf.$.93...g.X.c.d.W.5..u..\.oI....%...E...Zl-....)nO..A.....I.Z.T.R.I.-Z.......,..o..c...;.V.Yk..T.J....B-N.?jq...g.......7..u..V.J.4.%..4,.?.J...K.....K.R.fa.%I....]..W.~\.$iY..U..4.)VZ.IHQ.I..C>d.L.r3..J..r..W...y.B...Z.}mo.....]..x..._.n%UEJ3....o>..x....E...am...@(3.. .8&>..dr8b..X..#.b8.Xb..F..b:.x.....!........Y...~,..%z..o..g.qu..2.^k......b.\9..t~....;f.........7..@mL..~...b....8Y....V.l..'...@.z....V.q.#.n..:i...!.o.~.. . ....j?....H....n;.......Lned@.k.}8).1`...bO.....5`..........22..............@...`..t..u@....x:V.........W.....2....kw.....J..}S:\|...4/W .............}$......v.

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	31756
Entropy (8bit):	7.956502283816247
Encrypted:	false
SSDEEP:	768:St2kT5NDIf0gcLIpQIP+DYzwVTCAxC62NxBcGFVUKOtLDvE:St2kT5N0f0gcLIt+DWwVTxQ62NxBnFZh
MD5:	2BF44080957E5D7552E6E4F36DD55652
SHA1:	F413AF4B336B19710BD76168CD2D1F39BE0A653E
SHA-256:	8621574F773A70374D42FADE3865AD3AFA33D31C2256A9935DE61FA1EFF65F9D
SHA-512:	B47201404E19FE2A314DAD8788ED6D2E28EE79B50BFF1D0DD805356A969D4B2B7902BE73822881627698A3B8FCBFEBE733358172C23A8F225A642E1764952857
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw
Preview:	RIFF.\|..WEBPVP8L.{../..I.M8.$5lr..@ ..,.i!...PU..U.O......VV../l.SV...\r....-+..........t._.I_...z...l`..V2..c.XF..n1]7..NG...G.....P.O..6.....xw.J...t.U.k.0..--{...s......6l..p..".}.n.rZ.@..-8..\k.F"6..v+....j..~.A.U?...o.}?.n\|..x.x....V}N..U^..p.~...B.j.q#..E..._]U...O..#D...d+..ZUy...x......f'..arX.......l.mNY.9..K..@.......O...^.$.c..".,.I\.pa.7\|..X.c.d..-7.6l..2...n5..^Z.NM.BE7...t.Y.y...R..]..E.M..mkz.]8c..u......W#...[.n.z5.RI.vv....uF...1X..~..........[YY....(.T...\]Vi....R.Vf..[Xyi...RRU.R.6..j.rZ.Z...!iY....K.UH...PYIiiU.TYNU..G......l......;.;.j^Z....0.) zl.v..37..+VL..c.......x...s.ad8.@..nn^........}E./....o.=.G?c.1.:.@..Y7..'..=...x....O{.../+..=`-....6.Y.:.@. 1...L.K.=.1.a.)....{d...+.u.....f...y._,u..i.f&...=..7.3..f.......`.i.@.N.......@.\..h....K.N......1....r....{.......Y^...0.........,..NX.N.i..m.C....#Lh..Hc=\.z.).........4...!...M......"D...R........l.9KK..I.]q..^...S......B#qO..C.1.P.vLbR...9...B.......$.v.......D.

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	458
Entropy (8bit):	7.061920474186539
Encrypted:	false
SSDEEP:	12:3JcWXSom7OiRJNOtqnZBLWsssssssssssssdijHjGBaEgl4:i+SJOWXOtqjWsssssssssssssMHjGBae
MD5:	6C38690E2D4AC20F2352EC9A67FA13AC
SHA1:	FD9961AB0FF195148F4E1DCFC66A4CBCCF1E2664
SHA-256:	79BF41F2F5C98680409453FE1E5557141994107B9CB35126237A9A6E3BECE001
SHA-512:	959D76FF67256F3A1470C00A0127424A9839A3C7D43B70314B217EBD2AD6EC9F4C546F63949E822628A0A9C93E9A542C920655E5F6269F3950510257BC9D41FC
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.7.........!..?...i....{.v.A.....$.I..U*.Hx.2.7......2......X..&..na.C....@..d..GA..e}.l..... .v.6P....\...:%..S...O@.......\|.>lZ/.g...k3k..A..w.Z..X=....M!R..u.B.f..%.a..NQ...Z.(..c.Bt.3..:v.B..u.B\|Z.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.($...\|.>S..Y....av..p]..{5..tu...\.......;]].)...\.............w...\|............s...yfw%..g.Y..{......T..K....<..k.......3[..K(..7G.cs.~Z.......

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	138
Entropy (8bit):	6.457985054525866
Encrypted:	false
SSDEEP:	3:UZrRK3DZArJWrS23uVU+ZiDboiby9jeunPwRGhiTD0bNl2L38JSh:UZY3DZAV52eVUMilyaunPkGV3K3YQ
MD5:	B31F640C5ED25981848A55D76C333074
SHA1:	E0C7DD7DE571B4D40028FDE7D3305C8733F56AD3
SHA-256:	57630A90CF10246CF4D8C16962BF1EDC70E9EFED50B1483A7F2DACD83FE915D6
SHA-512:	2311126ABB131056664012FC31BA39AAB9B80D2A210A8861750553387BFD8E60B24941D31082597C05F5CB9CA7B37FC98446B51292AF95C0B4CF5BFFF2DF2BA0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8Lv.../....O...$..%..T....l$A.R...*h.....587f..TZ.Jl.w......:<.....1`.IV..B.w4$!.z....=.....W.f...(.......A.J,..VV..

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	187116
Entropy (8bit):	7.989674958243787
Encrypted:	false
SSDEEP:	3072:wkcdGbyQVF/cW7NvzfeGAsl1h4zfai1j/drkZSsnaroTdP2Wm1Xw+Z9/3eTogOXv:2SDNxfFBl18yiJ/NkparoBeT1XzL/fiQ
MD5:	AB9C95719FFDEC8C51CEFC3A9E7E58F1
SHA1:	8456B445DA8080A253B5F162D503536F5EB10BA2
SHA-256:	5C373BC7E0DD60BB5A98A1C519FE274369C00A294CBA34D1E2D3B92DBFDC3D70
SHA-512:	B43A92C5A2E9BFED54B967CA134F19E83723B94AE321024DD1961A092349BEA7010426D07242639B9B6DDD0AD5225ABEF1908A7F8F17038D4BA250334504DB56
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.MP..6l...a.@..........O.$%.%)..y)...2ZJb)R.d.C^9..=.v.$.....'...w.}K4f..A...[.I.....Ibe..9.eet.....!..DzH"..m.K..3..D{...$.7.j[.....Hw.../..p.\|.........w]....u..].,.^.S.(!.e..J$..8$........m.$.]..2J....6...N.Q$?-...E".%'...9o;.-9.N.......v.[......J.y....z_..\ Q..{..t9...#@...i+.\|f#8..K....;)o....H.&I,z..O`E....!..m.!..A.z.,A.O.....7d...$..M..v..v.,.....<..N.8Q.....j..$y&N.(q,).,MR").Db-...?..%.HR.....?.g..%...zq.?..e.......'....C...-...O....(..@[.m......?.-.....@..[.....} H.D./......[_._...\|......S... .4r.@>.37.O.X......,.%..(I.%.....b......A~>.O?(I.E../~..@.mAt.t\|s.X..b&....@.4p.\|....<...%I.m5.........)."..Ng .. ..C.t....p.O..z#I....H..H..hwyo.]......:Mr.4E#...B.x.m[uc.J.}....KC.#.b23..;..X.Jf/f......H..0.t.G..Z.....9.n.V.+..X.....L.....RLD.H.S+.....att.f"EZ.(.....H.1L...!n.t. ...xG1)z.....IC..(.F...0. .AjR31..".....[.H.R..D.DDf""v.....P0`.........XE.0D3.!.....k.a..+V+.b.8..6)..^..{..f.R..X1 RL 0........`V.....R

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	7.045749695935627
Encrypted:	false
SSDEEP:	6:Wd1ZoKwloGmpau12N9IUPNSZjSwiNRoBKc9:A1Lbx12VPNOjSwiroB39
MD5:	E37D455FEB14AA6D50B64F3865CE5545
SHA1:	BB67EF4AB3A9EF7BE3ECB0D2B7D73AD8D0CBEB42
SHA-256:	30B1646061F9307FB17A1E2A0393EE80DB4D85BF3C05E5800526771F06B141FA
SHA-512:	57DD9B395F55C2F1CD6DDE8E3B3CBC21AA138E97A6C3E12BEDC72F5ECD3BBAB21C3FD390424CCF8B53F4EF161873E3D016F40403DD7E2A8B80CEC60C739DBA52
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....(..g.o......C.6.2.$U.fEN.,....m........1.6RO.....?.O_3g..t`...B.........<....q$.i.,....}Z._..g.m$..}.8.....+y.h.\|....@%...pd.v.G....q..8.r.i5...G..U.. .."@u.I......%.nB./+B....C_......G.v...[+..`..$.X.V...~..

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3812
Entropy (8bit):	7.922451062209362
Encrypted:	false
SSDEEP:	96:sx3SGYzpNuTh2qDNrGXbgQZHYYh+ITpWXdBYM7bKWY+:sx3SDp8CXbgJYh+xBYAY+
MD5:	3C50577E74966837BE535CFA1BB62E38
SHA1:	DF35010A655CBF896DC5F592C1656410CB83DD63
SHA-256:	9C960DB00934C89DE1A7BE6931C972CB67E9E20C07462A7C870CB93943AB8BE0
SHA-512:	BD86FF5C590F1603E32238D0DB6F7CB17B8C1A46AA78177296D8F6359B3DD73605ABD72EB4BC34A49BF3AB6548947540ABA62E429AE8E428FB6CE67E2C465340
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.M8r.F...f............M?6.n...`]..c....Lp2.;0.$.Y......v.^J.v.....&^...KaGT......m.v.1....z....SX$n..h.._7<\|...H.......K...).?..G.[g.3......0@L...z..z..m.@......)...wa. .9....j....z..$..o..;.B...M.!.vR...0......tV...)...V......^..&.e...z4=.L..d6....[..?....^{7........]......Je...C......R...rW5N3.....K.UR<........[....7.m.V.QX#H..UZ.Lz.....N...}.#..m..\|r.^.......(....vL..\|.......?p.....[.......yo.Q.....&.....v..o......f.WtO.7...Vf..i.).[I.J.v..?./.z.y/{..\..!....+.:.{o.+..]..."\......T........U....S.zD-.......\|..\|.E.......v..$i.....lY.V.I.\......(b.bEQ!5G...].K...Z.f.=.4..s.[WY..i..T.l....kz?......RH.e......$.D...C.i ......n..A.S.P.i:.....ai4......s.e..C.(..>.i...@i.i....".....H.HR`.H.W.BN.=..9z......\Y.sE.;q.P...5i..20:.G.H..tvy.,..kT.........O....2&...i.6.I.!....x.7...8v.$.C3=...r...r.>pC...q%*Q..M.qA`.....k..8..6..43T#..f..7.....y..r[tT.R.k.\,..Fa`.@Hn\..&s.z7&..7.CM......4..@........GQ.n%...4<.+2

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	32634
Entropy (8bit):	7.961527082075673
Encrypted:	false
SSDEEP:	768:yHmWR8UySBjEp9NQkOfO+0L7Pf6PHtrcplIIPEL3sCB:yR/KdmvOjf6P9GlIiEL3ZB
MD5:	35BC5A79BCAD7AFE5F11FEDE9447B784
SHA1:	FE5BE320827F27490393126067470BEBADDCC836
SHA-256:	2BDD685AE4F92D871CC525437EB3606D7F40162CAF2E1ADF8F620127648C5AAF
SHA-512:	62E76DFD6BE19D290FA0320E04F8B1A48D9EF2D33FD252D6DA50A6231F5469510EC48BBC5ACA745087FFCF7DC30950B50AA87D8C5BE4FB14235997CD6DAF1E5F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw
Preview:	RIFFr...WEBPVP8Le.../..I.M8l.F.F.>.z...gv....O.mw........^y.._....^<.")...d..{j......y.Y]....U+.Z.a;>..y5.W.u.....8$i..:2e..Z0.$ UU.;......AU}K..d.....w.{......J...$..^D...SU4 @...Q.?65sH..u......$]{...).^.14.n-.~u..+r....\|EK.......;`.tm.!.....T[......."...q...#.0.I.d...9....%..I........A.\..H.m.m..&...K^......hD...m......A.Ph.S.r21...'1>...X.c.'..{9....e..)..T+\z.G..(YK/...b.r~..s......\).X.Rz=.f..Dq.... ..j..s.9...RV2e.`UEII.r...i..Ci.b...SM.ZO...K..j63.PVV.U...^UU....t\|i.C......ia.K.Y...kVK?..\|....E.L...U.....A...8..GY..8I.....+....I..B........;\.".Ho.d?.^.dX..............7.A..Z.&.:...<c........?.\|...F...b5.7.0.[M..Q../.W7K..z..-......+.su.V:\....&3..@..........5.&.8.u.....G...M.b....@.zA.?nz/L.+....iF5...,.........]...M...P.s..7...6...r.....3.f.b...L...E..:pq^...B.?.n.k.y...5...-..AN[C...........\.okI;x.C....d.......4..g..p..G/ .O.......C.................qr.z.g..J.Ohy.,..;4..?Z^.............H6.UY.\zSM..b[%0.5..u....V]t.U..X.....

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8594
Entropy (8bit):	7.972041832412324
Encrypted:	false
SSDEEP:	192:zuNHCSZCF6C102YYaCWGBO2YAHsC5T3lfw+f5loPIU/MzBFbSta1v:Sk0C102YOW52YN+tdkIU/MzBF2Cv
MD5:	DB88717E6607B032D9690E1F2A1C8447
SHA1:	6B5CD217FB06FC4A7EC49581D2F8E3F46CA83483
SHA-256:	A702B4D7912E5E8E771907FA22E3D336906788A3094FA42EE0AF381F907612DE
SHA-512:	84194254A8B42A71EF76531E02B0D20A25F3398A9755A896C1372B3F7A151BFFC60FEC40A645934265B8397A91F911790C58004F6E6B8554E51F1C8850DAD6ED
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8X..............VP8 .!...........>.H.I#"#...j.x...n.MM..h......n..~.t.x.....s...a._.'......2.........R.f.....C......{......6.w.A.O..}5....=..gh........._.>'........>w.G....z..~...?.z..W..`....>....v.....o........c..._.....}g?z....?D8@..m.0....S.=......R.7.&........U.S.b..!.Zr V..up...&-......D8@w.l@i...+HL@/.....(...3..f....5....h..Hi.R...>.B\|...'Pw.t....&.`.G.).PE....x^...g4R..-..a.(.... ...:....Ys......^7.Y.<M..n.WA.....Ft...H...$Jz...Q.K.F....\.O.s...;....!A_.%....y~.1.,2L...W..>...SM..L......]..`u.~9Sp~........+....-h/O/..u"...I..'b....ONr.R.>..F.....}.{3.)f.....SK S.0A.F~....!.P.#1=n]%re...W.j..8....G.L.@..U7..._.QG..<.~...a..u.u....I ..=@...v...3&.....n=.0....O.FU..0.J.h...q..O3b..T...6..K....8.vA..Y+x.W:-~.E.Z.be6.6\....=.....J..K.t..ET.....P9..rq.y0../....:..I.]K).#w.L...%#.......t....C.....jC..\|...h/+..>;.gh..S..^`L^..H\|...$..3.....G.J7n.G.[`..@.Wz8..h=..E'0w.=../.H.....7A.?..H.....+.+n.4.~m.[9+.9p{..0.

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8117)
Category:	downloaded
Size (bytes):	222505
Entropy (8bit):	5.692644832889038
Encrypted:	false
SSDEEP:	6144:WPZKmtm7F3W5L5Yd5Ddoym5EV+V4WonFxNFxvQw07IiAM/sCp/jKZO+VVlYUZA+B:WPZKmtm7F3Hd5Ddoym5EYynFxD9CIiA9
MD5:	80EEBB4F2008641CCF983CDE50014FE8
SHA1:	C9BE005F11464757A777A32532864BC674E5EE29
SHA-256:	81D1543B92C18C3FAE4FFCB75FAD7393B520C7A68A1F67FD9503F5EA18B15988
SHA-512:	CB978954F9292CEB9F2BCF0974E8087A8997D3819832B7116ECEDA837AE7CD43ABA8EE1E62E9863E33FAF8C6F2B913B7A5E97123A0FAA5102C111E4C89B38319
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fl2Zj,gychg,hKSk3e,hc6Ubd,j9sf1,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,wW2D8b,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,kJXwXb,chfSwc,aTwUve,indMcf,RQJprf,lpwuxb,NkbkFd,nKuFpb,zBPctc,jX6UVc,qfGEyb,fdeHmf,SWD8cc,tKHFxf,rpbmN"
Preview:	"use strict";_F_installCss(".H1RBrd{max-width:500px}.UIeOBe{margin-top:30px;min-height:120px}.k2cXo{margin:0}.XWz5yd{margin-left:160px;padding:0 20px 20px}@media screen and (max-width:480px){.XWz5yd{margin-left:0;padding-left:0}}.iCVHHc{height:215px;text-align:center;width:160px}.FOYkDe{max-height:215px;max-width:160px}.Dtwbxf{font-size:28px}.Hv8szf{text-align:right}.rYrxJf,.rYrxJf:visited{color:#00838f;padding-left:3px}.F9JOfb{margin-right:3px}@media (max-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:calc(100% - 48px)}}@media (min-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:fit-content}}@media (-ms-high-contrast:active) and (min-height:fit-content48px),(-ms-high-contrast:none) and (min-height:fit-content48px){.ZDGq3b .VfPpkd-wzTsW{align-items:stretch;height:auto}}@media (max-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:calc(100vw - 48px)}}@media (min-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:480px}}.ZDGq3b .VfPpkd-P5QLlc{min-width:calc(100vw - 32px)}.ZDG

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	13528
Entropy (8bit):	7.980890722978058
Encrypted:	false
SSDEEP:	192:5QAxwCZOYOiezE7GakTksZoo2CdmPWuyPyduJDx3iEjxPuBD4FoA1rwuLyEgdGfa:5+ttiezE7GVkcTmPuNx/jx6D4FoggT
MD5:	6EDD8C15A386648ADA9A1E14858128E7
SHA1:	95CDC4A11E3DF841575FA88EBE5C2C66A789500E
SHA-256:	22B76AB369CF9F12C901159F053C1BE0821B31C075760A15A7F4248FF9B270E1
SHA-512:	5FD73BB2B0B0D1D0AFE238359343E9AA25424E11BFA98E9BB59C04227BBD3221ABF1C62A1ED2E7D4E7CB7351E1F915B92768CD8A62D74419DF2EDA13FFC80C13
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw
Preview:	RIFF.4..WEBPVP8L.4../..?..Fn.F..E......9.5....?..!-.".@C.B...p.$....p..U.8!......-G...K<H.l...... ..^d.K..G?....K/..9g... .hI..#=?u.G.mUU.r....2..i.....H.G........`I.q....$I..=-.O.....O.R.fI....GMh@.....I.$e..\|W5...N. ..@...^....X...V...U..u.6..Hb.40 .T.Xjo........d2.R.....P.%b...A.{).....]U.H...J.H..i....*.B_9o......@...c[...z....m...%....p..-.....ci.&.....K%.Q.X.p".S.9.T.........u.V..j...R<....:....x.....d(.l.9..q.I....{.....1..L.<.......+.Q....u.....pD/NLB..2Uk......Oc....m;U.p3.a.......W..9Q.....3o.q..k......Dw.d...C.l,..\.._..d..)-..i{.....BO .u.p..m.-{....\...n.6L........v.l.l. .+4.&.h.<..%..L ........c.5..E..4.#...9..3.;..;..z.e. .6m[.c...l.m.m.m..m.....k.O....m.Vy._...m{...3Cf.6C.m[..k...........l..1.j!....\..p..S.P]...`....L..s..?...i...v..3......h...d.b8t.I75..%z......zJ.N.....s8)8.../5l..8.......HaS.....Z.Z...M}..E.T.5.Q.U..F^zwA.$I.....D@.qx#.}.t......_.......c.4.....!N....../.TA...H.,.X....A..<..Q..U.....;..+...W

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8404), with no line terminators
Category:	downloaded
Size (bytes):	8404
Entropy (8bit):	5.23122971904006
Encrypted:	false
SSDEEP:	192:S1XF2VhJJU2h2dc1cJcpcTv9cqxPs3rcTctcIcuBVcgcVAxg+EsYNtD1l:S9FmpU2h2dc1cJcpcb9PYrcTctcIcuBa
MD5:	CDF596B6A09E2D33415C8429AD5AC858
SHA1:	B7AD84975B629937AF85B055D5CC4E34D85267B6
SHA-256:	0558F702BC35AD30CF70512357E17658D9B7E8227E4C5DFB7466830CF3AF6AFE
SHA-512:	6953A59C54D55C370FDFA81EEFB5403F98CA409A0E5F2DFC27A8DC8ADF3177AA6A729E501E135B74194166B139682AE2C2A1F28AF67E8CF5E0BA0275F027768E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/global-elements/2406.3.0/en_US/ac-global-footer.cdf596b6a09e2d33415c8429ad5ac858.js
Preview:	!function t(e,i,s){function n(a,o){if(!i[a]){if(!e[a]){var h="function"==typeof require&&require;if(!o&&h)return h(a,!0);if(r)return r(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var d=i[a]={exports:{}};e[a][0].call(d.exports,(function(t){return n(e[a][1][t]\|\|t)}),d,d.exports,t,e,i,s)}return i[a].exports}for(var r="function"==typeof require&&require,a=0;a<s.length;a++)n(s[a]);return n}({1:[function(t,e,i){"use strict";e.exports={EventEmitterMicro:t(2)}},{2:2}],2:[function(t,e,i){"use strict";function s(){this._events={}}let n=s.prototype;n.on=function(t,e){return this._events[t]=this._events[t]\|\|[],this._events[t].unshift(e),e},n.once=function(t,e){let i=this;return this.on(t,(function s(n){i.off(t,s),void 0!==n?e(n):e()}))},n.off=function(t,e){if(!this.has(t))return;if(1===arguments.length)return this._events[t]=null,void delete this._events[t];let i=this._events[t].indexOf(e);-1!==i&&this._events[t].splice(i,1)},n.trigger=function(t,e){if(thi

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/five-star-rating-gray-ec0707c56bc834adf5dd504c555d4982.svg
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38832
Entropy (8bit):	4.79684101098726
Encrypted:	false
SSDEEP:	768:t0Hr1eMxTF69ukmv+ZNrMUVfd7k3pY7jVSHUo6eI:t+ehL
MD5:	CA74523C8DD2AF8E71096EB90ABEA33B
SHA1:	47B67EF377E9AFC52340BED1A69DD53BF5DA51C0
SHA-256:	FA8045C24FFB80F06CCF48CAB215B0B3D7FF1A59A0F91FCC6B361A73B1462892
SHA-512:	DC2D4CB324F37671A6FE35A4F7E4FF6F8B9BA307EFC12C244348BF0393ED31B3105E7227D9B447B9F7CE52E23DAC42E0A57BCCC18D368AADFC4E194774215CA0
Malicious:	false
Reputation:	low
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1968
Entropy (8bit):	7.887842259839152
Encrypted:	false
SSDEEP:	48:zKS0PU7BIWKegISpoMKLQe4L5G/PfkKg5IESU1Pd8/kho8QTm+hA6P:z30PUyHSlgIPMXtm/r8QthfP
MD5:	5595E532F330186A628DF64B6BF2AB9C
SHA1:	DAD41B26075CA3D857C92241E646088F87FC593D
SHA-256:	242280AAACE4E73539F6328A80E12486699E260FAD50AD3941C17B32B3126BEB
SHA-512:	D9793F6B1B4455CF2618F6DC76ADB832A342B331536D147B6A74AB62E5D0C17EBCF4295F7EEF6762186DB5051FB16E48C92DCBBABA90BCFBB727B2D7CC367E6F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw
Preview:	RIFF....WEBPVP8L..../?....Em.I.v~]../......a....:..!.^..$.I[..&..?O..q#I...."..=g_j.HRc~..C....D...0($...%....w]k.{{..D.##.....qZ.v.. 1.........H....g...........3s........<.3-..u.Z.l...L..=.....p...bdf{)4C.9.....~._..(Z.m...f....m..=.}...}rd.Vme.}.s..?...-..N..;......g...b....FKq./...~..?.Y.,hW=.X.=Z..X..DGQY^.qpj.e...y@...$.2.C.P9.Uv...G.....9>....c...D.....l}....._/=Z..-...f.7.z...R..k....Q.Z.17..5..S....@(Ue.!.......u......k".....E.C...+.........C....v&.>...y.q.F.4jP.........,..>...T.....H\k....}Ivm........U..T..!0..{.....Z...c.a...........y....[......n..q..g.yf..@c../.m.7,..vx...j2X..P.@..{U.9r.......u..O<.....AE@.\.2..I.......@0(...Ib,EB...?..puB.d.......{...n.Y..j...;rUk....n.Z..xI...!H.P..<l............_...3a....s.>...7....<r...6.8. .C@.....mZ..>V[..F.Cc.........R...#.d.Q.@.$B....."Z.B.....9Y..E5...B...a..S" .....ru&wxh...(.tU,.G.E.\|.....7..^(.q.F...A.m.......Y.[$...B.. .1.l!A..A.....s....1..;..A(. .B.j.....H.Q\..0..B...

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	236
Entropy (8bit):	6.924370871583175
Encrypted:	false
SSDEEP:	6:UAi1ZmlxFiVJszmUx6jqxAE1nxbBLzCoxl2yrEIbfC6cczvG:Ud1Yl2VJYXAElLu3o9+aG
MD5:	8E8CE47D6A2FBCC618A05E4F65193BC1
SHA1:	247998D6FB96006AF9BF9E658E9395455C3C6574
SHA-256:	D03F68654B41460A62DE3EC476D411F984B188A2BA8933BD6119CD4D42F578C7
SHA-512:	F250A8059FC0F1498BE2416F56C77B41334673604F7161BF9BDBA47EF680035AFB0C6F9F7911451F029887D63AF5BFE8FAA36546643E44A395188A9477746B8B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/zIYevie2ONWPy0aVtCfmjrrBnetJuH9IEN1l8STqyoJW5F5wS_9wiA1F-oiyTR_gpI9PjTcAzmDj=s24-rw
Preview:	RIFF....WEBPVP8L..../.......m.A.....,.......F.2.....J._.m$E..o.CH...J#.j~$...(.E[x,.......PD.s.\|......7.R..UI..l...2..f..\|...T..}....}g...$I..w.......wD.'...\|.'.)v.i..7.O.p..9..'Pw.]...`4...Z.k.0...k.JH4....uV.@*)..K.........

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	696
Entropy (8bit):	7.671310320036595
Encrypted:	false
SSDEEP:	12:mPXiJwvNPm1F+nu24710UPgizMQRBNt/Sh+1EBti7GhAp0P10Y:iiJwV6VFPg/Q3NtqQ2tYDsl
MD5:	04E23AC8DE78BD97B9094438AEA6E9FA
SHA1:	6B85504C01DC4265B88D22BC6CFFCA553DC368C8
SHA-256:	31652DBAD187570B093D34FD68C4A475CDD03F7C458C76A1D8321EC0EC518731
SHA-512:	6CBCEEF3FACBDE15473846A2514210236C89542A7E8CCDA6BB2DDA58024D54478F3739AFC6B20EA0D022A65FE0CB109B07EC01B1CC3109A4BEBB3755F2601BCB
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....).$GR........{.i@.$I....r..d<..p.I..d......5..&..2..."D@..I@..bIF..F...n.S........N.R7..{)..}...aM"0.?..$...$:.H...R'....I.P7Lm.CM2.rD0#$.$".0.0...g.H0..!.C.bd.0.......J?.d....s.+ 9..In5.~&....g.o.....D.@..,,.K.r.....O.X.C^.y>.^f._./dM..:L.t..7..m.\...%.6mk..m.m..m.....\k.=.~..+....~S6...O@.........O.......0E....7RQu..`&.IL..m.Z...qtzsW...;x..FD.Mm..mD.7...f...`"..Me.^.....L....]..._..c....Q.{;.J.QO\|..U=C.Z.+.!.3.@n-.[.$.jQ0,v9....._b.2......I........,-.....Q.>=T...B*g..9Q}.v.$...0............h.c.F.....'~9.L..&^t..y7'\<...#..3..TmS.Q.Nl.x......')....3a......W]...~'.bt.............m.z......xd........B...UN.A.>...^R.p.:...P..`..1

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	503752
Entropy (8bit):	7.999414825379731
Encrypted:	true
SSDEEP:	12288:MM0EDiDX/+r484zoXSLPIaBV2VcjgxUSQ:MIDcX/tFzXAaHmUSQ
MD5:	4F2639665269079C0E8DC00CF16C1952
SHA1:	4000BC56899ACB809434F3866E00ABD68C8DCF30
SHA-256:	711A0EC08E8FC86D73EC96BC2C070DEC25E946F38C1703F26E5AD4EA74D51D97
SHA-512:	EC7D8AEC4541DE76E0F51F70C4E2E433D5B99E5D553FC274C46CAC3EDF787633EB82DA457F1D78E29D5AE986E26C136AFBF5013D3FA89F4B4DF8F6FCDD121DD6
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw
Preview:	RIFF....WEBPVP8X...........o..VP8 ....."..*..p.>=..D.!.&".i0...gn._...._.s..F........f......7......g........I....;.n_.O.o.~.?....?...W..S_...}..g....y...._s.i..~_.9.w......7._..W...o........\|......../.O._........C.w.....7.?....`.c.....?.#........?......5...........U......_.?z>,.........m..._n.L..................7.W._.?+..............._..>.g........i..._......I.....G.o..?.~R..r............._........%.............7...?......../..v...\...{..................W...........9.y............}..........,@82>..D2r.Mj 858h..m...........D-...V.w..(.k.8.......'.rQ...../O....Fg.Q...I...rC..E....Z......lyX..?..B.75.j.=Z.Y..x\..@k.n..e5.........h..a[A.4.....]..@pd}x.c#........z..08..2y..O..Y....i..`!..8.....L......-.1i.1;Y.\|.P.T.V#..6.oC.T......u.-.........H....x_6...2...#.IkMI%n..8._...&....\|.^}.oq5.....pZ..oC j.!.bK%L.3.W.%u..........$t...d\.A..fB....P..........I\~..u.z..V...p.......vt.Z.......\|7.r.@.`.....&.L.E..tB...k.....w...]...\.P.J..&m.8[.J..a...0h..me

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10602
Entropy (8bit):	7.9529391117564465
Encrypted:	false
SSDEEP:	192:T0hh3kXnWQNYV6Q4MtjuGlPUBwc7k9GueRJvaWZRFrMcBs8U:whhUXWQNYYX2lPQ4UXtZRiJ
MD5:	27903BD5B9AA7C3ABAB807AB493ADBD3
SHA1:	8D19C7DEA760EB480A0508FDC22708C80223E7BE
SHA-256:	5FFD3C8D248CB815E2194F28C8D1A7E8031E3301FFC09BE727D9E42D6D470731
SHA-512:	7ED5DFB90E3C059B30D5EE4C41A7969A18A5E66EDBDE18499209F188AE1C8D92C38592346D61ACB7A7347609E9083AFCF9349AAED0BDB54BEDC20231717F2A74
Malicious:	false
Reputation:	low
Preview:	RIFFb)..WEBPVP8LU)../..?.M@r.H.... .....g.......:b.....-..dC.Gp.....m<;...~...+.v&...j.e.MK.....L[]..%....A...M...6z%......e.^z.l.5......+".......}.s...rd..F. ...m..?.2.SH.m.j...]^.:..K.....I.#.gz...d!........Us`../,.....3..Fe..=C..C.....">....-.N.....\.%.H...E.?.......zt."!Q]J....f........YW..~.@.....X.z. ..V.s..L.1...X.....i..t.v!.,e.....k..Y....@$..];."}i.]C>....A?)E.k..)H).kQ._......@".2u).K$.QTJ.i...(:..B.R..R'...ED......?....)}.....R.P.TSGx....+.m.EC...c..K.#".j>...\.......>...c..+..+.8....HRU.Qo.s...n/..3.w.=..D5+..$qr.......U.T6.b.A5.B.4...$YI....@Wv.B...v....,%.JW..>b.....R.R.....6..W.r..g...a...M.3"...!...k......h..'R.\.W...^....k ....^...NF....*8..F........y<.._..$)..K...g.1....K../..dV...............vswww.uw.....:.LOU..s..:......"V.].........~...'..$Z.....S!.".}.9.l.A;.$E..Q={.133.......j.xB03.s..LWR.m.$..>....2"r...m..3s.#......V..p..........".v2..e...~.zD......3..g&s.39Uuh.5.......Ui.V./."....^...J.2.Wf.

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	33456
Entropy (8bit):	7.96315139927072
Encrypted:	false
SSDEEP:	768:yO0Z3NC1cNlRVV3VgrsC/JKLNBNS8smKGI:S3NC1Ajnlg78N9sm8
MD5:	C971C780267D5B469120B497DB586452
SHA1:	531F1AAA2FDA20CCC72E359F9C60FFF68A74868B
SHA-256:	14D2F0860EA6336EE9DCB02D274E18B0A0FB05FE76C40D4A0BE9F6732821300F
SHA-512:	3F504D40867774BC4F62357A1A991224D6138BDDF54F89DB9F14186F133E959349F66200C7896A392C4C366FB2A3DFC3B4237E81943177FFBF090F918E762404
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@l.H.tr.S....p..^.........;..m.........,..^<.#J..=...=..m.l&L...juA.<$.I.@.C...q.....:.PU..=>$..dQudb).L.I..z..@6FU.-i.Y...b.=.../E........B._v.....I>."%\|G...$qH0v.p.#.w.....1...Pt.....!....s..H..e...DK(@.I...w..K.9B.....m....,F..4......^!.....0..z. [.-E.V{P...-.)....?.=H.&(. (.]..H.#I..s"..]./.....0....3.....&A....I$.DbL...c\|..Uc...&....qP...y......:g.1..,.$.%G..#G.6</<s.9..e.>..U&)/Z.....9.q..m......71..k..\|h.jj.....j.6.l..^......c.q.?..%.u.V.m.6T.VS..G>.6].9.......e..b.5.H9.PR.Y(}..M.9...p..,g......6)..i..:.i.%....#..}^...6mBN%.a...k.J.`.lS..N.w.8GWR..`......A.*UB...........Ah'....P!.6.Z\-....V......P%T.U.BP.UrF.!Pq....hl^...+....4}.(x...p..!(T..[.Z;.....6.c..p...<w.....X<.q.pn....F..!d.I&.i.p.......B.u....Z..\..jtl.......my[.=l>;;.9..&..K..\|}..\|q..z.7..NN..;..\|.,.....t+=..@....v.zt.p..._..S..1EL...M..}<.,.,.h...Ll.`.......\..6lX.1........>.?.C.j.m.`.a....L......\j&...K..P..L....a?@}...h.~w..,....cyY....D..

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_appstore_perf
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6438
Entropy (8bit):	7.962532855941252
Encrypted:	false
SSDEEP:	192:uoIjRkriJCEqyo/J4/efNcy7NIPBQFn7ci2WGSOEqM8p:mjRkmQQo/fcy7NIPGcSOBM8p
MD5:	85DC87478C1A43485A97BE67420532E0
SHA1:	2946EA409D9E66A559F275E5A472470F9CB142F4
SHA-256:	9426C1CB54B6F8B4334CED56F6B4DF85E3D16AA52348A4022E5788C75F45FFB6
SHA-512:	A9ECAB0707DD44889EBE40CEB013B0FED713F7EF0ABB88C7213556CDC2CE52696C86B1C77CBEE006A32DFC4C825C4A3B3C87EF9F0BD249C823C95AC7E9DF5E00
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M0p.6n4..#.....f......c.<.B+G......?.`.(.$E..B-._..).....6.$'.....l...u..H......O.....u...z..V.W..&....Y.S<x$f1..y........s.M..[...E...Vk.....G.=...k.}91.;..+.^.....^.:D.9\.....>C....#"YlOw.h.....p..m.6~.m.9f....YffF<....c...[...$=..GdTVe..\S.c.m.Gk...m......Uf".....)7..=....A2q.w.zo.k.m.m.v...I.[#I.r...L....z=...F...0..?..x............z....~..xs.%.............9?.vHn.f.?.........\.!S..%.L.y...1.{........G...p..V..qv....sRnJ..23.z....{.........zS.?......^N..I{...^{..,_..=E..Y.{F.C...x.NDQ.8..Z.14....Pp.Q..o........../."..Q.\|S.Z...Y]..i.....n.....:..s.pY!y[.......'.%w.\z.Rr.P....F....%..........\_...g.......V.........b.....m.....u..s..=.. &.....c.'.$...n.rW.].................[....5.bg..%..+a.A.......5.t...8......O.:C..-@......m.'.....%.c.).$.ebb:^G.N<D<B\|`......}.z.p.2X..N...5.-o....r...7\|.i.VX.0i...6;.m.....EF.!..(@.(..`...%...'....B..K.G]^(X;........US.....(.U.A...T......Y/.6>..B./p.....K.{G.)&k..

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3008
Entropy (8bit):	7.926057879000394
Encrypted:	false
SSDEEP:	48:2gx9k+wslq4eVo2DMgnG5WdpvsqjvL8bgw33dsbhTKayGlGOu1PE/:2gxGKE46oqG5sEqjgbgG3UhtyGEJs
MD5:	E4B704C1858279E8A36F96DA4D88A4F3
SHA1:	AAA8A2F1617FE294FEE71879A6014A5078DF71DF
SHA-256:	F0A7A3B74E026E51F2102FC58905CAE03ADA02331BD673F7519A77EEF73A1282
SHA-512:	AFFC2F4AC891FB123811754765A730E7A095A74904C7770BF445D22DDA4F9031217C4E20718D4C208CF1AD24E27A59EBB00980301BA8F43C01C31B1B29A55CB1
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..P.6..._.1.+"&...4....[.lE...F..."......)o..y<7.ms...=....z.=.m.m;9g.W.....JiW.X9.r.:.l].!$.....t6&v..W.......].J..j.{.1..s.9'...-6..m...+.NF.m.....8._l.6.j..m.m......?..?.rk.Z.....L.k...........Jp._....bG.=..L.......\.f.....9S.m.A...........WO..!....f..R..[Uvik.,...k....8...$.........y....K....E.M.6.H0c<....?.d6w.k......).{..i...=..?.2.c..^s.V..~7J/n3..x..Q.S..`.K...E...@...A..AY..#..c..Y..}......N.H.T..Ez.F9..fs.E...)...J...=...).E.....'..Y.\.;..wh.G.v. /...m...O.x..:Z.m.....]@.wj.L.8R9.....9.P...4.........#.^<.....d...aQ..I..^2w.J...u.a....k/$..).G.;g...g..k2..\w...d{....C.^.S.1..m../..>....... ...U0..\|......!.#...l.\|...1 $._H.5....2.Fo.V.}..K.g..ta.V.W...B.......q......r...C1....V0.F....n.\."C.5"..........Z.Z..Z$n.....J.Co..q~.`..8..._..P}I........6G.X#..{...yw....N.#96`.+......Mw&..O.n..<.5..i).AR%..Y=..s.8.._w2.A..D......Zs.X.l.8.).N#.hZ...'...K..q.K.i..t...I...'!.`zqQE.....+Y.tK.( NR..x/.*..t..SK

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9564
Entropy (8bit):	7.975992498379311
Encrypted:	false
SSDEEP:	192:ECJfBVNEZiq09tLVyXEheWrIngVaN6Bd10IkSmqDXn5V:EGBWizPwXEhergVasGIeqD3T
MD5:	18B846DB041E3F11BE9340530B6B9874
SHA1:	7CAB1A9058EB1D43C90DEEB8769269EAAADE2E46
SHA-256:	65C02CFAABFF3E56F2995CDF9AB587B96D19BB4F2B7D33450049A6203D5B9985
SHA-512:	471FE675B08E9E9FDBDD3A5A95636044782985E7E9A74072018FC8ADB9F30F1651261E5692F8BE1A05312C088C9F6DF87A7F96488337C445E74839B36A27331F
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/3c/b3/45/3cb34544-49ad-f5a7-cf96-bae0e5bfdd99/0b2afd26-fee6-4027-9487-caa6c1887dd8_APP_IPHONE_65-3.jpg/230x0w.webp
Preview:	RIFFT%..WEBPVP8X..............VP8 .$...........>.J.I#.#...<....y;-......}.....?...i.<....z.....k....w...[......k...^......._n..........S_......_...x.....^....A.i.;...{O..@/c...k..\|..{..<...G......j.!.y.....W..._..K.....c.../`..oN.b.......3~....W.8.......q..(...U.`h...O. .$.CQQv....0Y........O....2...'..........b......do.#"~....Xb...m.....v!84..[`..O..v.@...y}ma.{m.....S.1....d.......y......Z.cb.....mu..h.3....4..:..._<GP.5!&..Ti.v....M...i..z..m;.k.9.....Z[%.#.......~z.lB..T...X.30.I.......qe.Gm.>Y..n.Er..T.{..;."....p..rE.{..p.S....._.Y.\..f.6......M-=.%..,.#....T.....l...w.%.`fh?q..x`j....g.S.B4.0...V...\...).7..z......JT.O.".n.v...^%.dv.%..N>.$.._z`.D.N.!5/q..j.......dx).. y.\|8.D&R.a.F.;=Y?......l-. ...^...%n..G\.)....%....W7..l.Fh.q)e.WO[q...2..Z@...G..&S3...M.=.^..j[]..6'.t1..19....-{.}.....Pan2...(W..&*.(.=....{wr..#.mj..5x/...KR..\|.r$.......".U.>.\|Z.ZP{.,u.c....HX.(~.br._....D.U.jC.b91.-.N....)..A..L..^y'V...,Wm.s.:..(...).....C.Q.

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/stars-lg-bc4f4bfdd931e007ab096dd1c209c689.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157352
Entropy (8bit):	5.4513730019566164
Encrypted:	false
SSDEEP:	1536:VcQ2UlYdxMXwcK2Bg6mqBhHPVy/ynVmXeXWH2H3i47UW4nb00pqpIReMaahQYg5o:f1mhfaahWI8sMkVT+StdOaBrdD
MD5:	2CB0588B519CA96061BA5C30AAC4511A
SHA1:	22DE2E42A74CA721B55269B6D81E3E9B7D465817
SHA-256:	4657EFB3912F2E0FCD1ED177EED282FE799F23E62219C0DEC5230142D51DC530
SHA-512:	ADBE5F35891E985F8EDC3B2C609A2E04DE165933D2963B6B1149130B02B6A6AA5B0648E1126B42510063E78FC1A6BE87E5802F3BB3934A0FF14C2DDD7C50906F
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.umd.js
Preview:	(function(mt){typeof define=="function"&&define.amd?define(mt):mt()})(function(){"use strict";function mt(e,t){return t.forEach(function(s){s&&typeof s!="string"&&!Array.isArray(s)&&Object.keys(s).forEach(function(n){if(n!=="default"&&!(n in e)){var a=Object.getOwnPropertyDescriptor(s,n);Object.defineProperty(e,n,a.get?a:{enumerable:!0,get:function(){return s[n]}})}})}),Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}var Ye,M,ss,ns,Je,is,as,dt={},os=[],Pn=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function we(e,t){for(var s in t)e[s]=t[s];return e}function rs(e){var t=e.parentNode;t&&t.removeChild(e)}function Xe(e,t,s){var n,a,i,l={};for(i in t)i=="key"?n=t[i]:i=="ref"?a=t[i]:l[i]=t[i];if(arguments.length>2&&(l.children=arguments.length>3?Ye.call(arguments,2):s),typeof e=="function"&&e.defaultProps!=null)for(i in e.defaultProps)l[i]===void 0&&(l[i]=e.defaultProps[i]);return et(e,l,n,a,null)}function et(e,t,s,n,a){var i={type:e,props:

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	179240
Entropy (8bit):	7.988894279260863
Encrypted:	false
SSDEEP:	3072:bU0fv2bXl6ABM7Me/fBwILHrMIjcgEXe0Czq/hI1hagswlQ7N8WAVPu:AwIl6xaILHYIg7X4i2agswlQG3I
MD5:	47BB815C40A19EEFA2EAFDB66AA679A8
SHA1:	4D1B601F178A658E42A6B7F534D80CC0ADEE0181
SHA-256:	E3D077DCE75D0C3AA12A656FAB50252AE70E4C38E157C55171EACF714A01B979
SHA-512:	17AA1B0B7C908A991623AF3EA760ACED520B2F5D388EABC56AAB2C29ECB5668F1B172570E59EC0A15473C8B9271D0A6FFA8E149A2AEAA318201CBF1BFEE48F6F
Malicious:	false
Reputation:	low
Preview:	RIFF ...WEBPVP8L..../..I.M@..6ls..b..?l;.....O.$%^%).Y.\|).......R...C^9....W..DN.....'...3.$.f.H.%R.O.'..;g).'....u..Q..d}.x..........Y..G...In-..(Kw.q..c)3..$Q.D.z."I...c..)i.$%..8..V.H.}7K.....B}K..G...].(.8.w..qhfv.....K...~..l.!Zn[.EY...$.).7.1..<0.m..@.m..0..I,9.n.g......O).tl'H..F.(..j}.$w....lk'VlI~..9+....k.-Fk+.\|Gz.?.eK.9OR.e0. H...8...${$I..f.vB..$.....C....ha..t..9..A.0.X.D..9.g...H...lGR..wr........v.<..;.m.N.8{.h{}"Ek"..H.........P../b...+...E.t..j.-Ws?..{E_. .. ..l.vi..@.@[...........v).........../......+..=.\J...\|..O.........^....\..-....$Y.$.....Z.{....E.g.......q }.....\...f.,0.......7....d..m.V,....O..4..B..h4..Fg.....-..Uks$G:$.H.B...E.z.......IS.b..$..~...m..$.{.....bf.....3..!....m.&....@.4...t.8.0...B.J...@.(...B'C............9..a8L.H%.BL H......p........A0J..I..U......@.t...:. .@...M.)..`..C..0$R.....1.Q.... ..A.....P.`.&......!.!..!}..b..0........S.......(i....9.)RP...)&.8..E#.@.RP.+.a.D..B1...Q..n......)... ..P... f...R.......

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4722
Entropy (8bit):	7.943014014932954
Encrypted:	false
SSDEEP:	96:36VZKKvG+iqhwic63hSW1+qokCWMg3QO0rg0KC9SKBI7KFXRBYw2FAThwY4B:KhZc6p1+qXDNBUBxFBb2FAThJ2
MD5:	E9595764EE6671D7E2E923003120A8FE
SHA1:	C1D3A729073D5FE3355B2A7865654E0FC324022B
SHA-256:	94C4A2BF82F3A33FC0BCDF7AB25D6A8A8717045E4F6E0C7BDCF0E8B8DFAF567F
SHA-512:	27D67AC98D6DC5A92097E198EB46F3147352AF54490B6C88B362A2CC612364549C16C4E97BA7F7B998ECE2CCA3451CBB690F29FC1EEA052FBDD6E7EB3F3C9179
Malicious:	false
Reputation:	low
Preview:	RIFFj...WEBPVP8X..............VP8L!.../..?....-.-.rg...Y...mG....}.......-..}.y.~.^..Y'".L.D."./$..N..+xks...k.k....tW....d8..._...uG].....&..M....@5......&.MNLMH..pb....s..p..OJM..N>....; ......]b..DTu2.....5..uF....}._E.....";.........iG+vr3.m.m.m{b.m....m.v.b'7c.m.m.'.m.m....d.......psW+).....v...].......N.N.l....k.-....{.i.Z.'"..]..L.....f....w...eRRV..Z..p......7........[..t......LL.?8x./.)..F~..`.....n.....j.U6..G............99s..Lnm}.#G..v.V...8Z\.p...qpX">.9]..z....>}.;x....Z.x.0...b....j..s..u9s&N..&P......I.....@U..\..]....Z.@....v........k?s..V..j8.k7h.^^...F....[4Z.3....e..P..>...^.......H/_.;.s...}..j....5+Q.......jYY.e..{.`........^.HU....k.....b....h...c.,.....AG........q.o.R-....9.....@\.m..7.h.1.~}.kX..JeK'%...s.!/]j+.^./z.........Z.._-'.. M.T+*f../.....9.+3....:^}....tt:L.^0u...QF....$$...@...z.....AA....;..m...<? .e..).O.B.........O..^.@F..fd$.H/^,.......9:.VT..&..VR.SYZ..........BM.JF.\....SR......L.j..7

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2840
Entropy (8bit):	7.8803852518960795
Encrypted:	false
SSDEEP:	48:r724o8WCI7otjpJlgP8pMjdg8XgFxi5HyC+slXUutOVletFxksBuN/X+cy2FgVSv:mf8WdotjpJlgPcMgissf0V2F6N/6ZZY
MD5:	D1A7C5BDAE96E3CEF5D2EA33660454F5
SHA1:	A208B8BB9D376CDE199CC48D75EBC3E60CDEE75F
SHA-256:	83153E7F75101015D69EB7EF66BBA3500B6EC29A1DC6B889DB5D1A2E7F314956
SHA-512:	144E1D2FEB5B5203E7A39C7F41298009BAD98F4088DB823E2BE7F98D232052C89C58BB790E97A35C2BCF76F033F23753CB4E0CC3F6B7F8E68F25F6879E5EE2DD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M(n.6....t....".?.\|..`....b..t.u.....m+.^D.T@D.E.....6.$'..0.0/.....m#I..3..#bf6......Z8....9.3l.jL....{.g%: W%.....W.P.W$kU}......ke..>..,m.vL.t.....U.c.m......fi....m.m'#...{/2...X.....m..m.V...1.m..m.m.m..i{..V(.m..\..s..m.T.hQ...Q..#.H.m...{..k..........r.....Te1j........={..[L..<..8.4.}....1..>E......,.,..k......y..K..r('>M..=.i..jH..K...e.v.^q.?.;......f.....N.6..U.'........I.X.d2....6....8pc..=.....W.........`b$ ..b.,F..LmRKG....Em...}g....:.G>:...u..A.3.@.FJ...H..d.Rv.@R.f.u5.....~....v.'/[.."......I.38.,......@..3..nmy\z.y...m.y.y..A.`@.DY.L.S....p..h.. JLR.Rv._8{..'N..rN..o.g@D......nhd....(..B.....)-MP.......k..`..<p.:[P.(....!s..34b....if%(.A..PY.K%....W.s...._..wN"B-..\y.cM..!.......]. ...A.C. ......A..V...[...]ZA..E.Ht2..........v(..$.J..t.....f..!@bG.@. .0iNf.D.?T.......f.s..bi..o...Ken..9..D..b..I...p.....OC.......$..0s.e....j].VR..t.~w.._;..[E%.f....`b......5.Pg}z179E..0....

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9990
Entropy (8bit):	7.964763181222116
Encrypted:	false
SSDEEP:	192:5FwLEVi+Ir5AkxUUgJ78hdL1JBK7n/kp36JIIx0OoYDDifrlYepwrukCIA:I3+InWUg9EhJk7/kp66+0TKDifrlYepx
MD5:	04D389A4467BA76AE8C0623AC9BEA07F
SHA1:	2A12DFF7CC279729B8D0AC71BF552A6A9A58250B
SHA-256:	7D9F877546306975C24D6A72B65B3F4B31816D8712735796D0BBC159DE49FD9F
SHA-512:	E36617ECCAA6F6D069B6AA2DD71D7AEC81F10D13596FC70A9CF707AE8EE3F5F59992966F5AC361AFDE89DA164005086FBA41F7C7280D9900FE7C09D520EA7A2B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw
Preview:	RIFF.&..WEBPVP8L.&../..?..X...mj...X....!.v...........1.s1...w...b.q.t...1....[..+RmeF1/.f..F...cS.5.t>.e............7)..}...d\]...D...p.\.Z...v.....~..m$..............F.IJ6.C.P..?....m$IN..DX...QPX......').x..1C.2sq.Xx:.\.\...7s...8..v..p.ff6...jf...1P6.P...t..Ap.O...f603gk.c....L(a.L.GR..F.7Ao...&..RF...9.U.tq8n.H.......c........Zk.?.n.r..m..].t...+w..iy...tn`........M...]...k.v....i..Z.........V..Zk..=..c.9..E........U...a..z.#pS.+..E7...'f.S..}l.~..k}..j.j.;.#.V................Ue.....b.Q.[FFL.....7.m.......b.....\P..!8..9H.d7l.5._.... .....}...c.7s.^..ef.afff...{..2.33..K.f.33.=>..S&.....~...;.#k.Q...G.j........;....N.:U..03.......6.l.V.5k].pw(R.....{....SJ..=....Z..R............J.r:zJ......p....pw.-._.G.,...o.m$..^......m{..l.l+q...tBQ\.._pB....~...A..$C..:...../.....g'.=.#.SA...;.3.j.pD.rt.....:...:(....3.w..+}.>(.Tv._...r.(.6^W.KA.......6E..U.'v..]-......`7..Y.8......f.W.....* .U.Q...e..q%.@`..r...}...R.S..Wy..=.

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	7.8594540212727475
Encrypted:	false
SSDEEP:	24:zjF9cfYoaifnCIxqtKYTetGYbh/wcww8o6h547DtgUBS+Z+sjTt4ctVZDEkoPWmF:fmYo3ytKYTyGOwv3h5it3Tt9SPPW0VYW
MD5:	AC47B4C1D3EDF0FF4DB738F9DB8DFD2D
SHA1:	6EDA933BBC8FF4ED73A94A5F77BA09C7C6E82E2B
SHA-256:	CAB22C287FDBF0E475222226DC89AA41E4E44BA751EF7B1DE60BBB677DDD6C78
SHA-512:	6C4CD51225B1724F17A032DCC00DB2AF2820BBEB7970C5C7DB5F2B279460B0AF257157DE7F9A676F681C6BB647D5D01C62B60F469D0F558505F64D73C655F21E
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....m.0...w........1\|T..e.DD3......x......Aq.6n.i.^..m$........;.W.....w.s..M.M..........?.t..O.]..........;.......J..y..W`ff..\|..gg'p....\}..l...ye.6.....T.......$..d.z6.:.....m..m..m.m.oc G..H..9f\|...-.1.\eL.......m..m..8............3....W......(i....z..{....\|....`@.t...j.P+.....V......+.........M.g.Up`..Y......Z.F...#.....B~..\|8m?...H....!....6...H3.H4.,....1`1X.".3h........w....O..h....b....).\|]^.(....t.u....=..E7..\|a......b..(.Ad.d.3....0..n..A.......Q5.'<....Z#...<..?.q..o.$.....(..}.<.rj~..(..?...9.....w.B.a..Vt../L.......5`..2p4&/t.P...+....w;/..z..A.B.;v.+@.....C.9}..>$.&H..AY.....B..A...5x .....z...$ljLmd.....k._..~.56....}u..5.;...S.%4....AM.]...N.51..8...-.E....f'....J...a.RB..S..yxj..g..\;.W-d.g........{...M...\|_...3p.v!.~.......[c.....0.v....?*7u.W.O.0.....2.[.w...a...,..4:.../.eCW...... Ero(..:.c1...-....w...Q.......H5.p..Gj.}.^.?^.f6.WGG>...........AH...)B.A.....\?-/.e...C..:[N..9..

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 232500, version 1.0
Category:	downloaded
Size (bytes):	232500
Entropy (8bit):	7.998884606824205
Encrypted:	true
SSDEEP:	6144:e5M3heALdDh/vgiW8Voyf6TCBh/59/JIPo3LA/mjKkcJjzHGm:33hDNhXgiWyoyf6TCBR5NJrs/+BcJjCm
MD5:	61961C768851CA32A9CF38E8F30C7277
SHA1:	5E0A7018DE235BC07AB09AAB70056FB7EDF23136
SHA-256:	51DC07699694A66AD46960C186AA00FD12DD8B4E55F209839F85C173B436984A
SHA-512:	45A98EAC5F87B2DF41B3D0A261C48FBD11B7200411AA29DD565BA4395C80C613F6831B2515EAFE5F7B778CB6C060E68DC310F8CAB144251759155154F5E8574A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlematerialicons/v141/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2
Preview:	wOF2OTTO...4.......................................e.....`..X.6.$..b....~. [.......K...BE......Y........S(.Dp'9.k0<..%.q(.?.....e.EBn...q...............K~<.........&.lb...P. xp..].R.h...m..,.#j.S.U.. t....R_=H....!Y.:....@.C.C.. ..BK......h...`3U.....).\.Pf.......d e....!h`..4.X...=Tl.tk....@.;,(.A..m#..<..b......sw..7336.=IU.}...(RM.t....P..Gy.j.J..J.{T..Q.....{ttr..N+...HM<#3.XNw.[z\|..P..]....x.L.....9....Bi........x.7.9....4........\|..l..LR....=H..Y~A.1.._p3.......<......iB....7.$U.!L..kJ,2..KZP.z..Ff...(.R',.X...2.........O.4.7....)Mi..1F..L.D@F..B....G=.^.U" ."..{/....6rw_.l" ..}.(5.)..?.f" .....A.).]T1../....@i..a....[.]..Az8.&."wc....L....uI.9..\|..V.......\......BJ)...\.rgUUUU...)7.N:.......7b....QQ..}.^....{.j.....w.'R.,.\.)...5...O'.`..t.4..:.a..V..Y~&.b[h..,......v.6.e2(..h..R....(p..2\.)C....u.... o(..@.....Z....X..H...h)....e..!%..a..uyS.RM...\....}Z15v...\....W.{.m?.Q..,wyK...0l..V..YM60c......q....}.....X..Y.[.......v..........."...v:..c

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	370
Entropy (8bit):	7.278552618982457
Encrypted:	false
SSDEEP:	6:hZcT2lC/bcdl0zAtd84/0PHO2a1fRMDOG2mPBbmHCxn7BG3NsoX4fgYsvq:kT7Qpdp/06RM6hmpb/h7BG3NfmgY/
MD5:	BDAFFEF3A4430AEB4D69E68075DB2848
SHA1:	7CF67CFD33F3D1663C7CA30509B6EC1888F17EC1
SHA-256:	F0D985ED1BF4BA2A0A127B598E07DA6FE733523A99386A38FB53F4E16C87C8D4
SHA-512:	DC9D802F2E5054FC3168EDCB52B19912D240B3F3DA0B6C76F82EBB32245A7DAE2DB656A5AB291BB204A462D6F4E37CB44EF8C73FFAFF823149C08B6B8B34257B
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw
Preview:	RIFFj...WEBPVP8L^.../]@....6.mU..~...&..)......F.$I.Y..V..2L.Zn.M$.R.98.....`.....:M@P........M.O.n.....E.}!(..a....."......0f#...C...u...(..S.^.G.?...j7...K.A.....Y..,v...........w.-.,N...!..}....?..$.6m.k.m.6......^E....X...W..s...X./K....Wc4q...<M.'....rY^...v.M.....~T.5...WF....P2.....V@...(b...>...ip..h.`.A..R.p..)...:.z.`..:..8Zft....55z]p_...:

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	39997
Entropy (8bit):	7.97375484107102
Encrypted:	false
SSDEEP:	768:gviOwqkxt4KkDuUR0nFMNGI9/2KRIzePd9m6g6pD1ielvE6f:idTa6Kkp8GEI9/jAKm6of6f
MD5:	CD5881AE4C1F96CA24D28DB455826360
SHA1:	033E3303FD048FC96B8E2FACADD8F9468AA0BCA8
SHA-256:	DD5062DE1DDEC283F55C40DB7E293FA9126E2E932DFD3A527346F9169DECE5BF
SHA-512:	427E0B600921DE49C18D1AB8DD25E51BF6B75496A1C91F635998A74CB38839529B90E2D5AFC70A07D710D3DF2EAEC5B85613E170457D4D1CE423FBA568127D4E
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/5CBdVmCuDx4/hqdefault.jpg
Preview:	......JFIF......................................................................................................................................................h....".........................................U........................!..1A.."Qaq.2....#BR....br...3.....$CS..Tc....4s...%...5DE.................................8.......................!.1AQ...aq..."....2R..#B..3r$b.............?..(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....(..".(....(B(....K.......6#......cy.:..QtT.n...}[.kj..]<.z......T.<..]..,.y\|.k_....[+.$.k_.s..@.D?.).9....EY.3..e.DF....W=.K1.5......\|.......c.7.2<.a.."G.....9BJy#.B.(..j..6..6..^+....Y....>.A.....5..5Y..cPV...iUu.c..q\|......f.......B......]..~...?........2.kG..f........k.^ ..d..j..GGm...v...aHtU........N...\G.....4v.?p]......%QMX...Z...Ei>...%=

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9371
Entropy (8bit):	6.775324714137017
Encrypted:	false
SSDEEP:	192:aSkVHhQQSk+tvHzKRlZfR/bwJ6b3nvIQe:aRVBaTTKRN0KIP
MD5:	96E7DA23073D7FFEB2B90FCEF2570B2C
SHA1:	6AEFAC48244653FE982489338E70C5FB0D900FC2
SHA-256:	89514515CA490C1E66E3298D91D74EAF1F760C0D4B21E4E9F18FDAF3996554F3
SHA-512:	D1D82FB43FDADD9F8A3F55AD7E7D8FBAA0B7EBB82B0742B8440121EB272E3D68E7A67A163AA095BD6DD961286B61A130DCE130FA7C308E79639A2D6DD9E6A718
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...4..........n. ....zTXtRaw profile type exif..x.mP..C!..w.........t..`.l{.'.x".\|...6.....MZ....P.8;tr.4y.)C...t]..pT....e.qa.E-..#~D.'.... :.....#.#.O.0P.Vn......w..4.xo...mzG.w.............u..B+Sc.J.3..9-..1.YO.+J~....iCCPICC profile..x.}.=H.@.._[KU*.F.q.P.."...E.P...:.\..M....G.....b...YW.WA...quqRt.....Z.xp.w..w.....T.'...e..q1._.C..........'3.Yx..{..z..Y.....J.d.O$.1..7.g7-..>...B\|N<i..........g.F6=O,..........x.8.....s.+..8..:k..0\.V2\.9....D."d.QA....j..H.~..?..S..U.#..jP!9~.?..Y..r..q .b...@h.h5l...['@....:.Z...$..."G..6pq...=.r..y.%Cr..M......7.[....... K]-.....D...=.....g.....~r.v......viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceE

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4722
Entropy (8bit):	7.943014014932954
Encrypted:	false
SSDEEP:	96:36VZKKvG+iqhwic63hSW1+qokCWMg3QO0rg0KC9SKBI7KFXRBYw2FAThwY4B:KhZc6p1+qXDNBUBxFBb2FAThJ2
MD5:	E9595764EE6671D7E2E923003120A8FE
SHA1:	C1D3A729073D5FE3355B2A7865654E0FC324022B
SHA-256:	94C4A2BF82F3A33FC0BCDF7AB25D6A8A8717045E4F6E0C7BDCF0E8B8DFAF567F
SHA-512:	27D67AC98D6DC5A92097E198EB46F3147352AF54490B6C88B362A2CC612364549C16C4E97BA7F7B998ECE2CCA3451CBB690F29FC1EEA052FBDD6E7EB3F3C9179
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw
Preview:	RIFFj...WEBPVP8X..............VP8L!.../..?....-.-.rg...Y...mG....}.......-..}.y.~.^..Y'".L.D."./$..N..+xks...k.k....tW....d8..._...uG].....&..M....@5......&.MNLMH..pb....s..p..OJM..N>....; ......]b..DTu2.....5..uF....}._E.....";.........iG+vr3.m.m.m{b.m....m.v.b'7c.m.m.'.m.m....d.......psW+).....v...].......N.N.l....k.-....{.i.Z.'"..]..L.....f....w...eRRV..Z..p......7........[..t......LL.?8x./.)..F~..`.....n.....j.U6..G............99s..Lnm}.#G..v.V...8Z\.p...qpX">.9]..z....>}.;x....Z.x.0...b....j..s..u9s&N..&P......I.....@U..\..]....Z.@....v........k?s..V..j8.k7h.^^...F....[4Z.3....e..P..>...^.......H/_.;.s...}..j....5+Q.......jYY.e..{.`........^.HU....k.....b....h...c.,.....AG........q.o.R-....9.....@\.m..7.h.1.~}.kX..JeK'%...s.!/]j+.^./z.........Z.._-'.. M.T+*f../.....9.+3....:^}....tt:L.^0u...QF....$$...@...z.....AA....;..m...<? .e..).O.B.........O..^.@F..fd$.H/^,.......9:.VT..&..VR.SYZ..........BM.JF.\....SR......L.j..7

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	470
Entropy (8bit):	7.4146471227456825
Encrypted:	false
SSDEEP:	12:bLWPGWCEc/+27vldHlmdjS8XsV1NT+1jFDdK5f:bLWHCEaxxdFmdEVf2j1+f
MD5:	70B83508C47435C6BE7F011F3CF327C5
SHA1:	0E12A15996C6C029924680A1199A1413D59B6070
SHA-256:	11FC75B3A72464C116728AD752E49D80BE9DAE38C4CD48B997069357AB8CDEC1
SHA-512:	3B93F50709008496CC6BD1A7466E45C09112DCAF4F1FB47D19DEA68223E20E2CBE997B284DE57B5EE2F964E20737D31BA9015A684E817323FF6C976BAB37EEF4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/SX38vsuBS8RwRaZU4SfvlW1aQHyyXD1BuKnF7dE2qXo9uAFbUkXPcKvzfpLNA7AEB0Ls9trKFw=s24-rw
Preview:	RIFF....WEBPVP8L..../......8.$G.....+y...F8.$E....'3..H..)......f.ml.r.<.....R..Q!.P.9.........`...}.h..%...?.{r.o...\|...c...Y.............\|...z...2....o^5..q.jYg...7.8I...c..U....wz.$.B........zEt......<....... ......$.... ..%.I."...l..9........]V.`.....m.......N.?....v......yx......2....I....N..,V8.y.&..E..# /..o..5...H..=...b....p..E............}#....9.G.0{..I........../..ki....p. .5.......r.c..?9.R.c)3...I....^.tM..dOr ..,..^.c6...

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19928
Entropy (8bit):	7.9897850540383635
Encrypted:	false
SSDEEP:	384:VjFfZmo/KPGwhtSdfAZYpwqF5TiGTcrvKfhTJzhQKGZq:V3VC+wg4ZYpDF5qkHuKGZq
MD5:	FC180EDAE53C0E7D087CCF30EC6AD3EA
SHA1:	FE449E4462A34CB7D38D3AC4012862960F1CE309
SHA-256:	3CEE4A336B1EEFCC589F4BF43CF1C5AE463C095677AD834A786E7C6065133458
SHA-512:	615627AD2B4E6A03EB793FB3DE80BADDEB5881314A2E81E51D42FAA9ED3F91A2C3F042884C152ADB95D7FE0E7F1C84511BE65D4996B233C3EFA29BC449EF165E
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw
Preview:	RIFF.M..WEBPVP8 .M..P8.....l.>=..D.!..Y]0H...\|%]..W.\|Q..p~.r....=g....Y.A.~........o..C.W.}....%.?...f'...0.......G..o.........t.C.......?........c.../...?\|.v..~....y......./[.c.@O.oLO...~........{...O...o.... .....r~.......>r}...6../..4?.~@.....o...w..S..P.........s......\|}g..QOi....._......r.+.?...~.{..^.P.............W...'..........;...3./.o._..p.......$~...&.vT.;c..1...AD3?..FvT.;#.(./v...T.;c..1..<...i.;....g......C..vT./C.....g..3.r......b!..Cf.E......9....:a.^;....tM..>.9.}....w.....A_#...OZ..]'0;a./...Q(...+..N....r.$..4..f...K@O..`.d...M.L@f>.o.wo...R50JDe.X...g..y.)..........X..a...U2W.i6H.L..P.........^n...+b.....a.7....$.Vk8D..4@)~7,....z..>...X..s.7Z...#.mUk......p....Mp.\U.?q.Z.U.9..M..J..h..._o\|)..y.H.*.v...^.....fL.t~..O..y.k.Tu.....i.K.......$...O..c.R..rj.h<.>.if./..t."..z...7.+?.Q.>......K...'....%.e..L..2.}..U\|,..8...K....v...c...H.g....n.;......&.....s..93?.{c<1?l.=.i..vw\|7..3.q..........1.....y1XP..oz.a.....Q..X....#..J....'

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2916)
Category:	downloaded
Size (bytes):	7201
Entropy (8bit):	5.323454849442783
Encrypted:	false
SSDEEP:	192:1i9TDfZmRHx+tvDXXKzB7fk+sI4F1G6qFw:aeW7XXKpfk+sIi1/N
MD5:	93F809A7464F12CDB8C36C914F4B366E
SHA1:	A316C094169B5C61CBA6CED2A3C4AF46932F15C4
SHA-256:	8928FFCAE58EF6FD63FBB0F66649AAC026D57CA06F73502C91189E854CA0C5D2
SHA-512:	CF4EE35387A00C94E2C2CE122DC3048713249986DC59FFCCA2C2ED663EA4ACA57524D89E74DEFF02E65338CE5EC633C567E4D35D1F7529A82C7D80C3F1662B08
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.143.00046eaa0c4ba0e3f4b0.js
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,i,o={4161:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-apps-featurekit",[],(function(){return

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	41480
Entropy (8bit):	7.984382119800143
Encrypted:	false
SSDEEP:	768:aHHQZTU84STKu1gLXOCLa/FI+y+rW2NIeLq9wTqjrlWRd7OjSRTdXjuq4/G:S8CSTHkPLcFr1ww9TgM9dCqcG
MD5:	F0216C5E6F3164CA18EEAD137A37D41F
SHA1:	C6C7FAA47A3F8426A12041AF7961927CFB605612
SHA-256:	4ED0BC7515E91E83DAB8605FC80486996624880FB4D0C065F26A79DE18615524
SHA-512:	7093E020C1362F28AA15C5B203D2D0F4A99AB630715B9A712157D979BF2C6CC5CE7D3AB0B63006651CD1E96B6B6C159F4AF49E45CA3596B6A8F7396E722BD072
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L.../..?.....m.........................3.L8.Dd&33.l.!{..C..LfnNBf.H......[Of.18...1m.=...........c2;...{....f.9..D..p..;'...5F.8v....G.....L....]. .y....E.2.<.......v..NJ.....O\|..m...m....<..u..<bw.c....I..Bb.....l{.=...v..vE.....N\...~..v.c.2...yh..=9....G.._{.f./R=....=s.".........~m....^$...mGT..../.......f....U..?."B.. ..ND...H..l/.s^".."......C.[..MwH........WwK.....H....{...r\[...d&.Bx....JU..e._.L.%0C....-.um[.2r.\..pJjj.....~...E.l....W.......53.qh.n....((.JA@).J.@.........R(@A).............C.....+.3PB..J).P.P.@...P..6..BP.L3].<.q&.P.H]....J!.......C...T....RJ.!..g.#..<..@...6B...Ea8..u$..;..m)..8...p...p..i.".P....8o....\.. ...........Q8.@....f`=8oj".4k..!D.a..W.x.'...?..}.S....;5.6e..^.l>...,.!......<..L.r...Cl. ..s...D..vLy..j...qG.,....~............N.~..F..Y:.PJ.(...@..4..Mzv.Y..q?..<..s...(.......3..B..^....F.u1n..Y<..........;~.p..h...-...>XM.......%.! .......{.a....J-........@...1..a..F#].'....c

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	835
Entropy (8bit):	5.13432744982287
Encrypted:	false
SSDEEP:	24:D76bBSjFvVdGUF+fWlp9SlTpXXW/clctloFHMZeKsf:H8yNAwlp6lmicnosk5
MD5:	CE070B0F37AAD4B4E4D88BD0E0F05F4C
SHA1:	FF566AEB9CC2716C836185D1F88A0FB4E19DAB90
SHA-256:	0F9DD240A0A865EE1EF94A10A67490A7908BC6EC3CFB1CBC803A1D143B38399F
SHA-512:	DB29ADAABB650CF2966BDA1CE171D8C54644A965464DF996DDA0F7F8D51944EBA1B0446623A8B268C1CADFC0265F95C305B4849FB35B6269053DB4A79BD85ADE
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/realtime/operatorParams
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1712908896069/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1712908896069,. "screenShareVersion": 1713258072750,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qAKInc,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1832
Entropy (8bit):	7.878490302274349
Encrypted:	false
SSDEEP:	48:xufyDYyYs7HE6Ua/MRJ3TV9nEaAjoLdvPBu:xuf47H7Uj3TlAEZ8
MD5:	15AF7E993179F66E122C70161FC09778
SHA1:	D57AC0DAD5DDFE9255D4E3CDA8F23B80D1A33ADB
SHA-256:	645DE20533AF34C49BCA2B961E8C7D8E9C3EBBB1D03B00925B87F2C647668DA1
SHA-512:	F3EC179D15C5591A6CB7E0EE4BA5F327E45CF1D34522B145618D00D7CD1E04CA5880D9BA1F4E2F124FAD0FC9A3D4C8991E95EF5C90160368B1646982D72F2A21
Malicious:	false
Reputation:	low
Preview:	RIFF ...WEBPVP8L..../?....Em.@.....0D...x....6\.f...l.IRT....-.....6...t........Em#.I?.z!.......(..3`..f..\.^Vfv...f.d.........z...3I.?.Et..Sd+3.r.wwwwx."2..4u2ww...)"ww......[37$......a..l..pI..m...r...dS.u.g[.......G.:.M..m..{?....0...g.l..U..m....)..-.V.:U.w..K".Y.$#....D.i...j..(....}.=U..)...."`..,,..0w....C.&5....,(...%.NC`IS.;8...r.......T\|...../lw.........(..6)...p.M..!.y...Rh..D....., ..B...b>}.........a[$..H...._C.o'.T...B......G.7..d......o<[.O.R....^a.....y...pn.....J...d....%.'..=....-...........9.....%0./!ESR..Y.5Hx...A.........X....hXp.2...F$.......\|.. .E..Z.b./...~..g..4[(b...$.D.&./.V....\h..g..\|...5R[...B.$"..%"M.B..\.Q...N."..!I.5E...M.j.(.'.....$4,.!..../..x.j.f5..Hn..\.7..,`.P....:?..C<.J....wf9...>._.I.}....k.~...X:>..-....,.if.=hA...u;.;..,c..D.^.....?Z...%.W.G...j..t..*....c..=.#;v.ep.....xA... .` .g..tra.u....l}.'.{c..C.........!.....g.:^.uu'..o.=.eB4......@...8R..E...n.!.e'.....2.4.0.f.I.]C..{/.q...F.!_..~....'ZUZ..5`.

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	16242
Entropy (8bit):	7.9402572379727125
Encrypted:	false
SSDEEP:	384:Xuw19G/c5AIyS87w1YRmRAjkECvcFd/NP5zOoYJw0:P19GU5T587wiAsw0H/NPeJw0
MD5:	6B2CB8AD472A93B0D97FEE592C13E1AB
SHA1:	F40C495C1CA874FE508F6F69059041A5243D9A38
SHA-256:	49CA14F45BE05F2A2CB10304CB6481A9A18E15141819C86D15E8891CF371AEC8
SHA-512:	7C63115A9EA99072CC01CE04D354952C4EEC03B7CB781186199F6D45967A7FD5D7E190B2810D671F53A03A6B3964AB1B7F7A4D84114EF3BCDA7BA4BCABA23C1C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/dSg_iqQpKYA/hqdefault.jpg
Preview:	......JFIF....................................'.....'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./../W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.A."Qaq..2RS....#B......3Cbr...c...$...4ds.........................................................!1.Q.A"2.3Baq.#.....$............?...B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..N..N+.P.?...8.n....Z.>H.9.N..N+.P.?...8.yC...L5a.G...t.bq^...}..{..g.a...>.n.......<....N+.....K.\|..sp...W.G..LO...n....i/B.a..a:/...n.....C1>.......a..a:A.N$..yC...Lp....(y..V?.>.f.......<...../.P.?..X......O......3.1.b.>...i/B.#..!:?.x.yG...L>..}.>g.c.^.....Bt..O.....;.6+.P.?....?.>.f.......<....6+.P.?..Xo.g1.....{..g.a....(y..7..........3.0.....<...V....Bt..a.^....a.^..3.0...s0.Jz..c...?.%?.w....;..4

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	9646
Entropy (8bit):	7.978414359238506
Encrypted:	false
SSDEEP:	192:ZmMOm1hQDK+AidUQxUm02pPk1Lg+cvKF52Z2atvUsKV5eae52KKYh7:Zrk13mQZF+T/b28sKV5He5Hh7
MD5:	0AE371A505FE3C80969A9688D951A2F5
SHA1:	A57D4DFEF281175CB496A794D26ABCF907A6D3D9
SHA-256:	A6BAB33920314E85B5AA549B27FB2FE901B5F48ECF4772C9E51D8A8129DB70D0
SHA-512:	45BE99C58FD0917C31A5E7658651C93E16D00ECD5A08F7F385B880CB4248AB30E27B255CB162BFA00F5D7E67C4D661E5B8E96E99E9FA7C4AB9E207CB39C4B545
Malicious:	false
Reputation:	low
Preview:	RIFF.%..WEBPVP8 .%.......(.(.>A..D....z}X(....\|/.x............E......'......x..=.~C.....k.w.?..h...r?.?...?..n...".c...o.G....>@?..=.....U.g......../._......?...?....g.....?.>.?.~D.k.g...#.'......!..xN...~..K........y...{.)......(~....K.K.c.../...................g.'..^..~-}....9.......o..X.....?`/............../........n...G.?............I.........?..........#.w.G.....Q..-.}.>..............z.l..z/Y.s...;.o.............-.D7."._.8....`...UiO}.O......JK..O.....u .q.......!....`.0.......o...$V..l.Jr]...J.(....8A..... ).W....=B.!.A\..Y..z..;...%>X....<.....%...W..s..C..........9..-...[f.@i....&$. .EX..2......g...Y.D...\.bs:..b....1C)..\|.O......a......w..R3.?..-..f.U^P..q.f#...hq....p.E._..a(..o........I.8.Ul.....,.J3OKe..h. ....t...........g........M.:.J.9..gY.z.0c,p.#p.....9...F\...E......8....8...Nj....R .....Y.e..I.O..{.B.]$.A..gM.u.p.."...N..{OU%H=..}..)....;.^>.d..l.pW.u..[....vZ...Y...d.$.m...D1w..g..........>1~..V.ly...).m.v...#.Z..:i

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64931), with no line terminators
Category:	downloaded
Size (bytes):	993776
Entropy (8bit):	5.432288530865964
Encrypted:	false
SSDEEP:	3072:/t0Ebp7itYQmgT5Awu48KFIVChBVbIjvOmCC/fYUasWtJOKbPMCP:hitYQmgTOyOKbPMCP
MD5:	0FA73178BA92E4FE8E9648CC3094F379
SHA1:	AF8BF58424E1B12E3C15B88C4578FEF497ABB288
SHA-256:	26A2B01575B24D20C686C774C5B26D6C246800145D6BE0B18F83AE14A22A754C
SHA-512:	033A03C3B03FB7C45868F24D2769D5A108DB3080FAE6D81AABA9161EF22C8348C39188FC4E90C5A3A388E9C393782C862916FCC2362F17B6778E0E257BB28BBC
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-real-0fa73178ba92e4fe8e9648cc3094f379.css
Preview:	@charset "UTF-8";#localnav-viewport-emitter{overflow:hidden;position:absolute;top:0;left:0;width:0;height:0;visibility:hidden;z-index:-1}#localnav-viewport-emitter::before{content:"ac-localnav:large"}@media only screen and (max-width:1023px){#localnav-viewport-emitter::before{content:"ac-localnav:medium"}}@media only screen and (max-width:767px){#localnav-viewport-emitter::before{content:"ac-localnav:small"}}.localnav{position:relative;top:0;left:0;width:100%;height:52px;min-width:1024px;z-index:9997}@media only screen and (max-width:1044px){.localnav{min-width:320px}}.localnav.localnav-stacked{height:66px}@media only screen and (max-width:767px){.localnav{height:48px}.localnav.localnav-stacked{height:63px}}.localnav-overlap .localnav{margin-bottom:-52px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-66px}@media only screen and (max-width:767px){.localnav-overlap .localnav{margin-bottom:-48px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-6

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
Reputation:	low
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2940
Entropy (8bit):	7.9144179696915335
Encrypted:	false
SSDEEP:	48:Kg7R8Yyn/yILvfcj06+Ic4QTniAdupEI6vy0zlVd9fl06vhfa3ka0qkW9Y2gHCtK:KkRpyn9LvfcIzT4QDdupDXqlNfl065Cy
MD5:	997EB9AF458C6DF564C09301CF9260A6
SHA1:	AD7A6F1F6A235512E4A3CCDFE677F253F699CE74
SHA-256:	F66958CF576D87CB419F45B2E9D066630099D117E44BE80558F152D9F1F4D811
SHA-512:	130EB98B02A2AAFC1C49A7FBF2ADC82D4098C0D9B50C677A659529388B2E90C6B78CFF3C6B1F0B7B909C3DCDCEAAB48B53E82E1641D38397A19120F78523F607
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw
Preview:	RIFFt...WEBPVP8Lh.../..?..{...m#=..S........nJav..&.W3?..{L.r.y..9..k.a....\|.e^....+..m.Nm;....m.m.Fl.m.v../.m$G..u&.......(..1.....O..8a...e%q=v).H....Im..5G"..FR.S................1J......M...FV.dA..v.&.^..\|.............E.0.I.m..%s..6....;..._r#.i.o.US...9Q.yk(!Y.1$......-vTxJBl!..&......l.~1..m...c..v..O?o+..]...J..c.R2..@..@.....d.j....).....^....VzVn......//dO..o..........>F.x...D...)....a,.....x.#R....%.Q1Y.....^.D...w...k...B....v.O+...5D.d...^j....T..~........1..K.MG8bI(._r.fFM.\8Q...j!G.B.!..o..n9...m."G.h.%....]....k..r.Z.zdo...kV.i....@..p...7.%.j0...F..)Bn.Hv.i.K.....(..6o.*<`...1(.W..M._S.......:..o.........6.[......o.:~(.;..C)..\|...NU...lC...`"...2AX.......-rk.]..._.H...0.........C.t..."..,Km.1..a..8gG....H`.].....W0:...........,[Ak.a..0...)...e.2..U.........6U....d..P[&..!....u.#i..x@...Z....~..g#..?......a.......AS"..e...sV($.'`k..W...n1.......@e....6.p.....V.>.g.8.E..Xt........w..1Sfh,:r....r[...[....8C..Ft..a.La....m.%v.k..?q7#m...

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	503752
Entropy (8bit):	7.999414825379731
Encrypted:	true
SSDEEP:	12288:MM0EDiDX/+r484zoXSLPIaBV2VcjgxUSQ:MIDcX/tFzXAaHmUSQ
MD5:	4F2639665269079C0E8DC00CF16C1952
SHA1:	4000BC56899ACB809434F3866E00ABD68C8DCF30
SHA-256:	711A0EC08E8FC86D73EC96BC2C070DEC25E946F38C1703F26E5AD4EA74D51D97
SHA-512:	EC7D8AEC4541DE76E0F51F70C4E2E433D5B99E5D553FC274C46CAC3EDF787633EB82DA457F1D78E29D5AE986E26C136AFBF5013D3FA89F4B4DF8F6FCDD121DD6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X...........o..VP8 ....."..*..p.>=..D.!.&".i0...gn._...._.s..F........f......7......g........I....;.n_.O.o.~.?....?...W..S_...}..g....y...._s.i..~_.9.w......7._..W...o........\|......../.O._........C.w.....7.?....`.c.....?.#........?......5...........U......_.?z>,.........m..._n.L..................7.W._.?+..............._..>.g........i..._......I.....G.o..?.~R..r............._........%.............7...?......../..v...\...{..................W...........9.y............}..........,@82>..D2r.Mj 858h..m...........D-...V.w..(.k.8.......'.rQ...../O....Fg.Q...I...rC..E....Z......lyX..?..B.75.j.=Z.Y..x\..@k.n..e5.........h..a[A.4.....]..@pd}x.c#........z..08..2y..O..Y....i..`!..8.....L......-.1i.1;Y.\|.P.T.V#..6.oC.T......u.-.........H....x_6...2...#.IkMI%n..8._...&....\|.^}.oq5.....pZ..oC j.!.bK%L.3.W.%u..........$t...d\.A..fB....P..........I\~..u.z..V...p.......vt.Z.......\|7.r.@.`.....&.L.E..tB...k.....w...]...\.P.J..&m.8[.J..a...0h..me

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	370
Entropy (8bit):	7.278552618982457
Encrypted:	false
SSDEEP:	6:hZcT2lC/bcdl0zAtd84/0PHO2a1fRMDOG2mPBbmHCxn7BG3NsoX4fgYsvq:kT7Qpdp/06RM6hmpb/h7BG3NfmgY/
MD5:	BDAFFEF3A4430AEB4D69E68075DB2848
SHA1:	7CF67CFD33F3D1663C7CA30509B6EC1888F17EC1
SHA-256:	F0D985ED1BF4BA2A0A127B598E07DA6FE733523A99386A38FB53F4E16C87C8D4
SHA-512:	DC9D802F2E5054FC3168EDCB52B19912D240B3F3DA0B6C76F82EBB32245A7DAE2DB656A5AB291BB204A462D6F4E37CB44EF8C73FFAFF823149C08B6B8B34257B
Malicious:	false
Reputation:	low
Preview:	RIFFj...WEBPVP8L^.../]@....6.mU..~...&..)......F.$I.Y..V..2L.Zn.M$.R.98.....`.....:M@P........M.O.n.....E.}!(..a....."......0f#...C...u...(..S.^.G.?...j7...K.A.....Y..,v...........w.-.,N...!..}....?..$.6m.k.m.6......^E....X...W..s...X./K....Wc4q...<M.'....rY^...v.M.....~T.5...WF....P2.....V@...(b...>...ip..h.`.A..R.p..)...:.z.`..:..8Zft....55z]p_...:

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5890
Entropy (8bit):	7.94622741341264
Encrypted:	false
SSDEEP:	96:Xy2Vh+rv7Qrx+t8MWjldUnIbVXIPO0zSXfTYntSqoJDf7pmWBvDm3n2AMOKOK:XyO8ru+0RdUI4IXknEqWD5v6X23oK
MD5:	8745A61AD5DD31A669049AD41A8DBB94
SHA1:	D430CE11AAD6FA7F00824776B14E1FF33335963F
SHA-256:	774146DF2B94845D2FC4B1524AC05AC93F62699EDAFBB1FF073EBF589A729288
SHA-512:	E263D752DB0FBB3B5841808E54E77B0FACFA098CBD0AEBCE2B4376C7E9B2669252D2887E6F566448438580A57C1B14F1D95649B2CEC2239780999F075230E824
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..X...mjw..(..?...m'........=kP7u..[...S.\|...t....~T..gF...;`Q...T.r..NUSE.\|U.H.."9#....H.6./.....gE`.2.3 .....w.......rl...\|...6..G`...m8.d.V......=._.1"DDn.Hr$.4...z\|..].g...?......r...h..A........v.K.7dJ..O..+.\| ..uG%.....S..........T..?.+N`gj`....8)3~.G.../.[;..s.S...........D...'.+f..BDL...tc~..}....A._r"..A...x..(...Q....u.............>g.K..g...5..5@.......`..#.../m.wDL@?..w..9.. bDhLh)d.d..0.^y......X....^.33[L.S.J.}.B.........1..:sggN.x..w.'.A.?g.Jd]....f'".Wp...+..s.J........A..9Y\.....0.2K...m..~~....>....)...a.......e..t......rk.V.j....V.d..6@........._........."I..i.........~w=.......w..W.......I..H...L ..v.d...\7...F..hp..&.nD.....y...H.m..S.FR5.m.m.m.m.l.J..C..=..#.~.m.....g..U....m..'&`....;..'.A..9`...K8...3.g..:3..8....Y......-.....g...........y?...8T..;...~...f..[..i....CF.....\|2..Q.E.._.^....J... ...X.w...A./i.,..(..z.....p.(MN`y..R.....P!....p......f....e...k9H9..zxVP...x......!../.Y

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	26572
Entropy (8bit):	7.986809716076815
Encrypted:	false
SSDEEP:	768:zN6VgER324ZHtXyFvDWRQaTiBDqFurqbnb1oIT+3RoX:zNKp36WRzErqbb1+BoX
MD5:	2825B30C1AFEE4994A0F81C32A936370
SHA1:	7266694A3892FD01357FDE8600428CBEA082B9BD
SHA-256:	2811C8044EBB5CA8A14EFF454B9BD01B07C9C35F65A02F115E41C9E69517C4C6
SHA-512:	7D41602AC05D65691C010631A539A8AF873C128D9ADBE8C7851453D2794D63CB9BF69527B4086E03897C4852FC6EF3DFEEBBEC33C12F82C58D9561F819DBB0F1
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw
Preview:	RIFF.g..WEBPVP8L.g../..?...m#I......u.............`;......2Od...l....}..S)e.3;.WP`'.%A.B<z%.%.+.nYz.....\|...V.^.E.5...E....W+yh.....]/uo.$mk[o.v...-..-}...],.s.m........o.P.M...aw.<..+..,H.z.......-.~..%.I%-....L.-.V^.C*.b(......d.i...S.e.1!..I,..?...GZ ..I.)....oLrZ)..Ix..[3.4.2...;..Bnd..5Z.6.E...`..f.g~..d.h!IR#<..S...m.$.$.5.w...2Dx..Z...O..T.....3....U....'N...%.:.......a.......P....(..;x.Y.%.R.....`............o.......R...\|..........L..y).1a........{..sB..S.B)...! .S..O..0...4p...!..........x........0.0.1./L...i.1.8...dg........s8D....#..Z.b..vy`.7F......D.x......#F...w.-n....b .H..c...<d.1."bD.x...#".._gq1...s....#.b....p...@.Cgc..../\|...1.x.._..ig........./..Vn...Xu(.$...?m..#b.xU.OE..5.......9.(A.Gs.....`.=...0g.#F%.."..+Iv..dV...{y.[.7.sy...{..v..8y........sd..'/..-..$.54.!../..On.w..[H<4a......R.}o.i......-....bE..M..M.....d..D.QH.@...zSLqV...4.0.Wp..+mAP....J.....q.!......BMe.$N.-.:........3K.K.T.R.m[......n...._..5.....ewJ.....II.

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	40644
Entropy (8bit):	7.989683828799069
Encrypted:	false
SSDEEP:	768:9ALe12qaOKZw6Md4iF7CWrx7LZLKsjiCCvryGLKeoKGYVIoKIg:9ALtqaOKZwl4ivrlZOs2CAbWeoKGYVIH
MD5:	9D9A28DFE5CFE510C0E17D3990D8FE4A
SHA1:	969D7269198571814924D52DBEC15339A67E2908
SHA-256:	1C324A06CE457154BD370FFB15EB6F7F3A0258786138B75823BF6752594B2248
SHA-512:	6A680B135D11C9E223306F6397DBFFC22DDCD9D57E2431D883B657750B029F5739AFE42218246A8F7B7957C218A299A4911EBEAF99D37A10CB82D2BD4C3C91FD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.MH.$Il.t..X..?..........._......WGe$9dA"....%..g.. .........wF.q...'.......HU.?.1R#.H9.3-dJ]i.h..\|R...f....$.Kl[@..... .s.l.WI../_.........Z.o..T........;.....l6.0..9.7.$,;p.].A...Z..`!..R..Jmy..H.C".LUZ.2u......a.Z..iX.U.: .d..r.".H.8_...FM.......:G..>.L.Yj...8..[...#u'.-oo......i.i..m)IL.z..E..o....S@.S..A..`}5...8.o<&...9...A..#.$$.$.9....'....oFX.[.q$I...MqE..=..b.h$... y-x_.U]..EH.m)..AP.q.\J....[.mA...9.m..2......o....[.....^....._U.$C.!dH..!.!..!IB.....1..H.i3..dF.u/_m.q6.l...2..$!$!.Y.0.$ic.F&0.....c.$A..$...I....}.$F.$.`..c.c."..I.....}Y.e.......nc6f.0..1.0.0.I.,..c&.......o..P.B..;...!.......h...i..d....S.,c....@.1qu.R.(.....Q:@~.@.n..B....2p.I.~.u.u.u.u.YQ.......?.E7.N....qR..:...!.gB....z..BPnN......PHHB...=@.PKL\_..g..........u.$.e..TS.$....(...+.Zf..4.... .0...6.`.X#.1..$......._...b.....c2KLar"1.1...a....oWH.0..I....T.`..!.......b4...H.NI..-...g...!..{.^....~.l?.Z C.DfIb*$&1&1.$......../~......8....8.

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1494
Entropy (8bit):	7.855673114226291
Encrypted:	false
SSDEEP:	24:Hd5CJTJTAPUAME518c5CAyxmU2mqt2bkPRYoJ5WyAmzDBv4VA/Sps7oSXZ+dKvs7:HETAcAMLc5CFH2bt1txzDyV2Sp/SoEF+
MD5:	0C8023F37B95AA08269C9DD68B7FB3CB
SHA1:	74C8DA8823B9B49DB4804561CF98D8F09CB9F1A2
SHA-256:	3D4D89F4E5DCEF362E3730ECFCC66BF553BAE7AAA8E7A7AA169C93D0271BACF2
SHA-512:	A70850CBD44BEC4A775BF5CB8B14167A60F74ED6CBA261EF3C6B6B10E9299493F94F92698C546E6FE554DB75F1A0B2796E70E9B7D0346A728DA82768F2768199
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?....Em.@J...#.(D...8.H...I#.>...6..Y....,....`.m.......A....9..?..x..@..>s\|..x....x2....d...........m.{.>..]rRwww._...dN..C......t.g.../b......n.:EJ\|k...[ON.....Tg...Z..n.e.]........y..m.......vw....6.......{t.......N.Cg...)a...m..wL....]..e..8.4..8.).~]}`....9.Q\|;..3....v~/z..R._......;.L...E..J..Q..8)<.a....#_....A.\..$.(^+....4.._..:.D.k..,.?.?o.)K..Q/.....R...;..~....-a.h.B.8h.....y.\zt.5}G.0.d.,9d. ...x.,Y...../....dC.CYb..}.'.O....U.(.).QT-.l.U..A..z....M.'.....1,.l{.-.R..:..9......!.S./....T.r.^..XO...R5Y.J..S..0.K..&%.\.....Z..V.%z92.,..z7[..yk^.O..sd?.N....k.'e..f...{v.f.9.j..&......;....'.G..C......'......z.Es\|.:..^....._.K.S...].i%)#.S.X.h...cs}...;.>......q..{R.4.q...f.....Y....[$;..<}...o.+...:...l.D.Q$.Ha.P.(wz.j...g..'.9.:.T)E.<P.k..yCLL<@.2~\w.1...x....d..s.!.F..k..B..2O.B...Q,....,a.V.....n/...@....O...3... ..2....<.........V(.....8P!.}}YU....S...R.1...+..0..3'.zy.s...J.^./L.x...h....2<..A.....-..

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9108
Entropy (8bit):	7.949328366075731
Encrypted:	false
SSDEEP:	192:tB9/jljn53/VOxAspx9xKFbpmof9Gz/bSOsq7r2ogCj:tBhZVVOxtpKb7ceOzO8
MD5:	9A062526BB5E6BF5306613F900DBF363
SHA1:	DBBEDEC1CF0BA32AA843507B779E0E35E3C65E85
SHA-256:	732BC48C537FFB075AA1A628FA19A1E2E137690D6C3350C1C301059809963C3F
SHA-512:	DFDC7BF76F735226D2E8122ABF1F5373A12C5F991D55C8466C2B6EB0A2D84A8F0C770B13E7C34D9CB0EA894C6B0BE6EF8B2C8CBEF606C3D5BC7621CFB295023E
Malicious:	false
Reputation:	low
Preview:	RIFF.#..WEBPVP8L.#../..?.M8.$.Q"o....[..@.#.?..N:.N......ZR..C..LdWm..C.sW...'....[.....:.U&3Se.&.2.......KkC....e. .. ./...I."Yn.u.K..$`.y.8.$......_.....3.).$GR.G..bN...{....F......'."...y..2W2....".7.u.H...w.".E..{k.[...X..\|.T...#...m...Xc}"RJt.....D)...R.\|..$6..$.0...}.B..>0...h.i..[....,:I.e..x...-..R&q..].#G72.t.3=....Q.M.8.E...b....E...xJ.....9.W..H..@...y.. .D.H.....-S}H..<w.>.H."....ya;p!.FO.....RD....xa...X.x..=@....R....g....k/.... ..u......o0l.6....k.....1..u..;..8..-R.bgG...e.r..;-.F......?.."=.:.c.+....P....%).....2.f...Ov....H.m[..lR.Z.].].].]1&.%^....9.....o..l.i...H.....S..B[...?B.R,..."I.........Z..+..$)R.../...T.m.n..}:!^.....o[...q.83a\:.efffffffffffff...aN.3.......'..q....R.._.]r9ZWbt.\...U..V.k.Vm+c.#..w...d@vD.IPvw.z...m.Z'...I.....g......fn.`.,.-....q.9..p.F..."l8.k........?..G...8..x...N...q..#............1L..........B.}f...C..C...Z............A..x....8..a.\..K..ts8V....T].j.P..sU.......T.....kp@...'.2/..U

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8966
Entropy (8bit):	7.962228622683082
Encrypted:	false
SSDEEP:	192:O0jiu/DGEQ3nJBvAr6d5wpg4r6MSVAnZqy9iX3Q0UJru7x8e:O0l2nQQ4gg3S0y3Q0UgV
MD5:	7CDE9F13220A8FC1073D0EB6FED06286
SHA1:	3F4AFDF9A345389AC3EAFA1079EF390A417C34DE
SHA-256:	1508F18A43EC8965B4ED441F87698CF8E28AA28C0C394B720AAB35A1D777AF6F
SHA-512:	B9032FD40F693B8121F25DCC38642A15B08CCE403E503B72E35CFED4FAC85269FAF327D437FAFAEBCA2833E8816EF2EEA3B22BD784D9DA7DBE0D10528EAFEC20
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw
Preview:	RIFF."..WEBPVP8L."../..?..H.... ......._#.?..#{.....\|.Y..G'GY..MaH!..8.<H..@.....-Iw..=.........H..1:.,V.Z...@2.F...23....WQ.........M7k...xM......#.v#.............\j.#H.G..... k.........H..(.>}.......n.'@...O..n..N.....v.6$[(vrB..f.....h..G4.A0ki..C..P~.3.&.@...........t......v.H. ...-QQ.Bp..`B"...;.\..a7"..x.>SA. I..)).@s..Ms.\....$I.5..0H..a9H............L.;W...2.0(X=..,......Qp;88.~.P.C..Z.i.8.....4......w........4oP.(......,.`..,.Y..m#I....{.{.wDL...4.3w....(\...i.p..f...').........P.9L.C...6U..*2....v...>..u...m....Z....9g..XN...W..9.......A..k.]sg...;2o...0....K..T...M.t.5.+l....5w.5.#.TjZ.e..LS.u.f.2C.M.T"9.m.V.\.$.C.d@..)Z....;.8}w.^.k.Vm+c.....?..1...A..5b..@.8..V.`...2333333o.fvD133C....4,..s.g.4.}..M7......=.[...\.(.R......)...!.-....2.1OB...C.t.."...=.m.m..m.m.#WF2.{tl.Vm+c...9.www....3.(...R............WL@.\|..o..[..fX.O..z+P.P.."...r.A>.A...f.Og.. ...B.).9.b....\..z...........Q...m!...6......r.A.D[.`...b..8....p.....1<.c.`f..

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	15512
Entropy (8bit):	7.94238830224228
Encrypted:	false
SSDEEP:	384:mjfpnSj/q8g10wKLg6B8XW7l4CUYLmWWbxd:wnS7vgSLgO8Xcl4CUfW4
MD5:	7744F5AC69419F5A2B6B6C9A21F8F307
SHA1:	38DC8DD4AF99B44B73BEE5025FA1114AC15DD5AF
SHA-256:	B417A3C865819CC87799E5FA4A5C190057D3935AFF7659609B2EBF4F642858A0
SHA-512:	BF368CC50E928A6370A9BEB331DF36E152D3DA2F1F9068AC5C11E426AFDEF923C1ADD1D6E3A54647072AB2891C6A3FDE8623929372D810FF8FEF15B800D87749
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/C4uzmiVn8Og/hqdefault.jpg
Preview:	......JFIF............................."% ..%%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./..0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................B........................!1.AQ.."aq.2....B..#$Rr...b..34CS...cs.%.............................-......................!.1A.Qa.."2q...#Rb..B............?...B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.G.G./r\|..G.'p\|.h.(.G.....O.X#...._g=DZ.0....'r\|..#...>P.O.X#...>Q{.....%...N..E.8IE......@...en...dn.....%.cn...cn....^.s.n...p..-.(IE...a....0..+u..F.>.h.BX.F.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. ....}a..}b.+.X.6.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. .....O.X#..P'._fn.-..I.......DZ....+u..V.". ....Q...Z.P..9.p\|.."....Q...Q...$...D=.....a&.f.!...E.HE.".`3..!.....)..B..G.....)&...Y..y..t....9.Tn0..XFN...ibV.e........V....1>7.:._....b...

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1566)
Category:	downloaded
Size (bytes):	41276
Entropy (8bit):	5.2368089739293495
Encrypted:	false
SSDEEP:	768:EkxiX+skUbNIvnXh5hC+gSyJNbX+V4N8zuZYJOKLNWDjqcR5cXcpcO0cDcIvScTu:lskUbNIvnX7hC+MNhZYVNWDjRE3
MD5:	CF98EF659A7C40F16FB89858EE051693
SHA1:	F223F862E3DC2347DEC54A932E35C5BC5F794C8D
SHA-256:	D1DAC8F97C25357AE55BB0FF7EFAB6349022317CFBC549BB2057C15ED2DD337D
SHA-512:	58043EF2BA149E03964670CA8A2FB8039691129058FB95D29851F84E7D65F66270B5ECBED675D56E871D6722B959FF3AA7ED2672E1E3E89B6F071A90B120C7E4
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.706.4a437bd91dd079e92306.js
Preview:	(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[706],{43862:function(t){"use strict".t.exports=Object.freeze({ELEMENT:1,TEXT:3,COMMENT:8,DOCUMENT:9,DOCUMENT_TYPE:10,DOCUMENT_FRAGMENT:11})},96339:function(t,e,i){"use strict".var n=i(38694).t.exports=function(t,e){return n.insertNode(t,"insertBefore"),n.childNode(e,"insertBefore"),n.hasParentNode(e,"insertBefore"),e.parentNode.insertBefore(t,e)}},38694:function(t,e,i){"use strict".var n=i(37844),s=i(43862),r=s.COMMENT,a=s.DOCUMENT_FRAGMENT,o=s.ELEMENT,h=s.TEXT,c=[o,h,r,a],u=[o,h,r],l=[o,a].t.exports={parentNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,l))throw new TypeError(e+": "+i+" must be an Element, or Document Fragment")},childNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,u))throw new TypeError(e+": "+i+" must be an Element, TextNode, or Comment")},insertNode:function(t,e,i){if(i=i\|\|"node",t&&!n(t,c))throw new TypeError(e+": "+i+" must be an Element, TextNode, Comment, or Document Fragment")},

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	402
Entropy (8bit):	7.381436238669479
Encrypted:	false
SSDEEP:	6:BZUD/+x4jC3ZCKlZ5n9Yc6LUkKH0e63io4ZWoEVvvouH3QyYUzSZhAwQXLpo3KMH:8YjrlZ5v67eujNovycZhY7gl
MD5:	49FE44DF71C20DD1E70BB35D1FE48981
SHA1:	17B45A3CEFED05DC47F8F15253D18460DAFA27C1
SHA-256:	4B961B44901AB92C97A0B5E61A7426E8320249D74F5608A59BA4DBF2D58AA6E9
SHA-512:	4A564D2A624C9A213EEA0B151CE8062FCF10DFCA9941A6FDEAB845D3A838AFC1DE6DA8AAC52ABF5C4A2C4E513134B78334A4A4E041223EAF6717441E1E6D135C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L~.../...... ..9....'Z.?...$+i,..'1>.m.6......>...e...d..g.f...0....<,....M.........v...y..x.(..<.U..v....&...\|Z....c:....<L....%...#.S.X....:..\|..F~..B.E.............`.I"...H.M[.l..Y..?.s..H ....m$u.......k...WE;.d...].Az..P...CYt...W.[..y]..$G..c.k.<$....[....z.jo-...........L......UI])@`...LPBqZ.b...EC..r2Y6...........n.k/D..?R~.....q...{...MR..3.(....r..:.G_G....?...K.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	240
Entropy (8bit):	6.993730114374904
Encrypted:	false
SSDEEP:	6:Y/PZdBrz45VdqQVVTDqBVVgdcSFsWyRVQa2e:Y3/545VdqQVVTDWV2F32Qa2e
MD5:	7D53C10A6AD0D3B061FA48DFAC576E4D
SHA1:	0F50E9303CE2287DE969DDB553D02A22D9541FD9
SHA-256:	148D8E2848281072E20F4F9F53C5FE15182FF8420D48A38FB80BDB70B0B780F1
SHA-512:	CC3FA26F8955D6F839A58E16A25AA566C786CB2F1B4634A596B3C1E71650AC4577C04F633451902D69066790F5BC41ED93A1F2C189F1A4AB54F608E09D263536
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........$e/....yf....IRz..Z3t..;Em#9^......{..4.....Q...J...79....`?..6.h.....Ji.Y........H. p...>../.o.w4.F..4...y...,..@D...m.dx...#.<.#....Fp...m.DMsr.S.....#}.x.d..{.Z.k..m7.4w......T..2T..U.....oW26......+.

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.87377555746297
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKeHZQx66FTEVgWaee:PLKdXNQKOyo6FIVgL
MD5:	701C50FE2F9D8CFCA61542DEE7684552
SHA1:	952A04F81A291E11F5D4ECD7364A3840412BA65E
SHA-256:	9FC5DFC54DE18E9C98733BBEA6EBDCBC1F01C0B23F985556F24684EE96DC0582
SHA-512:	5CA3C342F4BE563EE68235F32BCB8B25B62215A961B903B3568C496FCAD4508B9408FBDE00C6592085A819826630462863630F888FE73348F13FC037A9AB2C99
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1162
Entropy (8bit):	7.694737520848792
Encrypted:	false
SSDEEP:	24:Q0gnfwftjFBkUSEMixW78yt1x/YUsfUHS4Xj5OQ/5YDQ:QdIjiDEMixW78ytbNs7+FOQgQ
MD5:	B268DC2EF4CA78606A491547A017C832
SHA1:	4140A3CA287E6C52EFAF6407FDD3B30C190DF53D
SHA-256:	F1AD01CD2BE867EAEE0DC3A0B0BECC8358F3FCF27EE7E1EE8854BD85DD3A2DCB
SHA-512:	EAA399EFCEB9B86652497833C8DD7D424CFF7881F6E07FB5999E00FEA3A795BBB44EE2BDB9455117403EF61F3D7C5B4E50AF536D3063496964BF37CAEA2207BF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L:.../?....'!.$G.b..:BZ..L....."I.$I...Z.8....&!.$G...?.G...L........h......@.?{.......0D.......D0B.A.9..c..........@ .O.DC@.>.@.o..v.%.P.M;l.... .Lh.....0.....t.....t.b4&....p..]..3 ..........`.....4...{....f..c...M....K............c..{.t..x.9.>.!.=v............}EH.B.)....].~......?...u..#..........hm;67w2...I..Im7........Y75..ij...\|..v{....=.QD.'..efmt}LRw..\........h.6....@....O...6.4..o'..r$..6vn(p.D............Ec...%..p,..g....."Ob.8`.G...0..c..n.x..<I.1'...(.0...P..?..?M4v..\|.4Y.8..........\|.aC...-.......+G......F.u.]{.a..{..7..R.D...r..#P...2.............y.Q..< ................\.j$<..;\.y..O....6../..{F.@...V3.5....=v;~s...2q.m.2.X..V%......,.....zc......u..S.I...j...@w.R...6.h.r.v<p..q}.+..R.N..E...XD.KV.G..j.&....Q..C.......7...G.......q.....Rq......H.T.R.Y}j.T..Y.I.U..-........G...&3^.UM....o.Q.X..,]..Z....+S....)K-0...>.....^OS..0.Z_....."...>..f.>..LK.....i.....X...Zr.-...6car...[...KF...^.P..

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8092
Entropy (8bit):	7.964327266421199
Encrypted:	false
SSDEEP:	192:FAC6CN+YAyzayeAXNsSvg2nxAjl6Aje6TB8wEwJ:FAbLyfeENfv3Kjezc
MD5:	2732EE9ACBD98558EDD0FEE72B12737A
SHA1:	217BD081BFAD5BF68CF646B9CE832DCC746AC4AF
SHA-256:	7083924024981422FF404CB4CE7B52E3C95D98A6DF17AF6AE8D79EF69B9455BF
SHA-512:	E07E8FEF98957720C3E736A0DF5A28E68410B64B8D9CD13A2CD320651FCF271F2AEAB05E93A4BBB1441E6AA4D4898487E5B6E17A0207529A5D9F5A1286DEA0D5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.M@r.H.....E...\YQ9.5.....r...%......J.>......-bFF..Z.H.R[D4..\.$........U"..k..j...\p6.{...;.d:.s.."'..wd.\..m....mL......8.m.V.ww.).?.B.......=....H.U.qV......+w.[.).m.mv..2.$..a.s.'....u...P;5..c@..aR...<..f;j^.V...Q.<....,.r...DDB.......@..8..A.T4......~.E....G.(..........t....;..;......P...Z .8.....P.O..B.....N.@$B.n-.;.F....9.....n.v@D.\.;>m.2....' ...B.x.s..!h..Aa.U!D.O5..^4R.....'...+:...g.o.G".(PS....].cCD!.D...}.S....a...0..\|...~\|...."2^mN.9.w...b.......m.I....].......m.'.%........A.a.V=...pr.....~.w.....K.Yv(w..).?.Oum.&..y.m.%..B.+....XK...{o...}......H.\.ph..c.'\|.....R._.S(JJ'.t.N'.%!..N:.......O...P..~.p8........X.DH(..N..ml...w.......-:...?z...Ue..?..R.m.'%1..n.......d.SUM3=..a..^133333K.3333333-3.0O.4V.1.......q....D.b).....@.s..Q(...K.f..s.R8....B...n.B.&..rw.....`...B......#V.9...r..&..G.Yw.X..eqC.+s\-..J@.t.%...5e.....^..<..d.;.\|.w\.........I2Y.m.v{0vO`.L...u.m.m....}.-....y......ef.G&.9

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 108468, version 1.0
Category:	downloaded
Size (bytes):	108468
Entropy (8bit):	7.997835393798081
Encrypted:	true
SSDEEP:	3072:pWhXrpbCa6gSWYdNt9aYKHEX2a2k+kgylVi5nh9B:QhXYaGNR5ynyl49B
MD5:	5011345B7AEB8F847CAEF745BB1B464E
SHA1:	B37CE84520A2B9607E19BC0FC9CC7B841BC1C831
SHA-256:	27464F709D857A113F9AC53FA038A3F61FD0059F9EF4BD48A58C41EDBFCDD996
SHA-512:	BA5775614D07C16CB98625833EB3B3D381BD14278AEEA16A9F114FCCE1FD903F7264C76C135F069BCDA4E3936A64A10F103F32F62B0A4AD50CF6F209CF3ECAE8
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_bold.woff2
Preview:	wOF2..............y....Q...........................$..H.`H...>...4..c.6.$..$..(.. ?meta....(. 8.t[.x.F.m.n..I.....[G4..&.{.3............x.....+..8.vY.I...........y....;f..;.K..(.D.(...r..Z2..VTk.R6.......09..9.&.i.URN....f..n.@+..&[."...."ke.5L..r.E.....fd.\|..nJt)..2.....u..`.k....:3mb...OZQ.Gs..~..bv.......?..,.....R%..j)._....b#.v..#1./.....t.+v..O..5.xe..Na.......y3.?v...R}.kO...[.le...(.>........F...2.3f.9a......)%d.s.2....9.....7..f....H...+aC..F..c..R.?..L.?.f1...uT.-..z.....\e.Q.c.q.W3$..b.P?F.]......&....TM...+Q.;..4i.DJ!)V..AQ..~?....N.xS...V!.A.`..0....[.."...&...g...V%U2.\|..B..T.....i..!....g.~..oe)'.....F94....Y....x.9./&.m..h.7..W..\M4.n...7Q..`Z..t.....n..`...B.{qu<.;.......L..]...(..8....u.......v.A. ..Iz...qr!7......o......A.....<..........."....=...N?...". D.-4H....!..'..7;.w7.8x{..Rq.yH...qT....."..... ..8.?.TK......>.T...Rb...J).Ak.....vB.sw.....V.8.!dMR.2.....R..........,k..Dp"8Q...%.bk..v.../R.M.9.IO..I..

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	11258
Entropy (8bit):	7.847770069025951
Encrypted:	false
SSDEEP:	192:INqfUfaNNMfiWyCtescqvtnHrB8yDQWJ5Rj34yaEkCBLsY7UXTTHEoLNQF:X4oHmciHVNT7RVa5C5LCTTkSNQF
MD5:	16ADA80965BE7D202D4097C02E38DA64
SHA1:	7A79BE8F463124C104C2021FD95163F9F2A7CFEA
SHA-256:	FFFFBF93550764FCD667CF954B3E7DB27C270D2925796C35D1D1193763E9D382
SHA-512:	8AD31BDA1C87DAC3A22CC004A3C362E5DC1E9023A21EF05CE28C0D8A8615C66E4D32FE906BFA81A7B5F536BA097580F3D43FFDF810A32A634C074A16AAF3BA96
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/R3x88pl2rZI/hqdefault.jpg
Preview:	......JFIF............................... ....%...!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W.......-..-W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................E........................!.1AQ.."aq.2R.......S...#3Bbr.C.cs....%4.$...............................'........................!1AQ.2.aB..Rq............?...........................................................................................................................6..g.\|..~.8...k./.@m..8.....>q..!....P.....>o.?g.\|..92.............7...8Y.M@m..8....W`V..Wr..m...on..H.C......K.~%^.\....q>0./..p..p.g... e..q.C...O/.`.....<.1.....#.Bx.J..szNI......A..... d._q..d.g.m....p..................7.L.5...".8y..g.j.........t..J.i7..w...}...k.../..92..}..<...Gk8..J..+.Cp......5V.....E].V...c.!...\|s.....WR..r..}.......Cp.....=.VR.....Ilz.YsB./.9...<.Z...U....F...<..sC...7'.g..>o.Q`e.>o.7....:./..qU.8T..Z.NRY.,....,E..-9J_H.N.[..o..R..<..].(o./.7...>;....\|. g.

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108855
Entropy (8bit):	5.485794699594584
Encrypted:	false
SSDEEP:	1536:smuR3kfQlFl9S9ITIKDCK5NFmYwHiWfgqx5OkN/cihLLXWvZ5XGmsvE6dN:WktCDtDFVrONThLLXW6msT
MD5:	DE2F04957196AC8C3C7678AD4C33A46A
SHA1:	4788D5B2576E992626DF52268F212A5A2D141D02
SHA-256:	E4073A5D69E86546E65B01C6F50F43B91691CEEE2A9EEDFE2DDFCBB90A8D695B
SHA-512:	74316ECAAA611B47C1CB5D192BC77A71877B610A456605CCF35A2C35449D8A35861290C7B3012DA6F6E54D25C59423D1D568C8D7904DDF0FE0BCE864EEB9200D
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.vc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.vc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5890
Entropy (8bit):	7.94622741341264
Encrypted:	false
SSDEEP:	96:Xy2Vh+rv7Qrx+t8MWjldUnIbVXIPO0zSXfTYntSqoJDf7pmWBvDm3n2AMOKOK:XyO8ru+0RdUI4IXknEqWD5v6X23oK
MD5:	8745A61AD5DD31A669049AD41A8DBB94
SHA1:	D430CE11AAD6FA7F00824776B14E1FF33335963F
SHA-256:	774146DF2B94845D2FC4B1524AC05AC93F62699EDAFBB1FF073EBF589A729288
SHA-512:	E263D752DB0FBB3B5841808E54E77B0FACFA098CBD0AEBCE2B4376C7E9B2669252D2887E6F566448438580A57C1B14F1D95649B2CEC2239780999F075230E824
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..X...mjw..(..?...m'........=kP7u..[...S.\|...t....~T..gF...;`Q...T.r..NUSE.\|U.H.."9#....H.6./.....gE`.2.3 .....w.......rl...\|...6..G`...m8.d.V......=._.1"DDn.Hr$.4...z\|..].g...?......r...h..A........v.K.7dJ..O..+.\| ..uG%.....S..........T..?.+N`gj`....8)3~.G.../.[;..s.S...........D...'.+f..BDL...tc~..}....A._r"..A...x..(...Q....u.............>g.K..g...5..5@.......`..#.../m.wDL@?..w..9.. bDhLh)d.d..0.^y......X....^.33[L.S.J.}.B.........1..:sggN.x..w.'.A.?g.Jd]....f'".Wp...+..s.J........A..9Y\.....0.2K...m..~~....>....)...a.......e..t......rk.V.j....V.d..6@........._........."I..i.........~w=.......w..W.......I..H...L ..v.d...\7...F..hp..&.nD.....y...H.m..S.FR5.m.m.m.m.l.J..C..=..#.~.m.....g..U....m..'&`....;..'.A..9`...K8...3.g..:3..8....Y......-.....g...........y?...8T..;...~...f..[..i....CF.....\|2..Q.E.._.^....J... ...X.w...A./i.,..(..z.....p.(MN`y..R.....P!....p......f....e...k9H9..zxVP...x......!../.Y

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	39909
Entropy (8bit):	7.976805543329996
Encrypted:	false
SSDEEP:	768:RH5XX+GbkfLohh7BRsSrRq/oiREkzqNZJsLjt1DUaJNmjgftLEYZjT9:RZ9bkDcBRsyk/oiRuNfsLQaJNqgVLEAp
MD5:	ED6B32D646E747CD9BBD172A3764C098
SHA1:	EEAEE2B6587AAB5280C9131B73BC17C62BC7B02C
SHA-256:	9B860B3327FD3D017F15B8589D08DD6CD9E01CF7FD59910DE16416B28FD4FFBB
SHA-512:	90C9C43F95FB7E173DEC3396782F7438677CFE7E125B80B4255CAA46C2F5BA4C281328DD9E676FAE761B2651A26CAF58FFFDCA73A4D9D59528DF43BF9828FF45
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h....".........................................N........................!1..A."Qaq.2..B.......#R.Sbr.........3C...$..s...4c..................................?........................!1.AQaq."......2....#B..Rbr.$3C..................?..eE.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.E.P.QE.!.QE.E.QB.En..-q.._._...^...f;l.........8...`.W.<?..k.../.......}......{....Q...D.p........'......_...Q.......pG......fc..r..X.........p..^...^W.d...-.....Z..P...X...........z.................*'...EJ.....E~..~.\Iw..>./..QU.....0.......O..s#.>...El....W.....E...v......j...Q..........1q..p..^...\....W.....l/v.x...)Em....W..................

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	36974
Entropy (8bit):	7.869731994362244
Encrypted:	false
SSDEEP:	768:H3cLtbg0waKsaI+Oq3roGLTAyzNTshamT+EUUQezg+koJXrxZXBsKCLqL96YggQR:H3cLdZL+Oq72yzNXtEjQecmXrx5BsKlY
MD5:	C2EF0B7FC3C86FF987368BC05E66511F
SHA1:	0AE925FB913D4A07D3B5259B88182F83D210750A
SHA-256:	5194A1EA73958A6DFF29A73D5F583B3D689B4CFBDBB4484842ED77B204409813
SHA-512:	835A7A424469B428CC390F97C36E423AC6F05304BF25045DD84034B6A2B42489DDEED9E24F9C1EECD19E893C6EB021D8A782F07B27E1C67781D74E1835ED94DB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw
Preview:	RIFFf...WEBPVP8LZ.../..I.MHl.H.$.S...q..<=..BD.'..".d$..J.R..}..}...-.....H..6.#.k....w.....wK.Nw.p...H...u...3.._..b...LS...\|......$...@....6G..0...3...^.k3X.....9....+)I.K.P..........\|..'.H....lQ..d...u...w.4.m...Z..H..9s.......G..3....pP.T...".<..O.........y.......u..u.w..I~.Q..S.O...!.'!`I..rd...\|.3".......u..'1.rm[..4\|......E..n+7Ov^.,..H..I.c.g._.....gs.{......9.H .1........F F...L..#.,.4 "e.0.......`.@ ...q.....+.7q.....:..."..).`.,.B..3..!0$4...UG...h+0.E.....U..0...P..P.{...!..... .......j...\|.{}r.[".,..........=..`........X...6......jc.D$...h/..(.lp.[.. ..".u..4.N...H.xG......;..;.7..="....b..].s..I..............k/_...A......;..})0...4m..L..o.!"0.yh...."E....b.x'!.n9>.".....=.....V........' .a...!...+..X\\\>...X,.A[W..;.....j..E....$....v..k.BD.....3.V.S.k=;e..6.\.W...(...sg.....L.W.E&qwd.[up29... A..V\|_.......3W.x.B!I.b..a......._...8Sg...y...(....tg.n.a.I.a`.L...H<.FgR..'..b".8q.p.....k8\|..y.}g.....H#=.P.}O.^v.8...P.s...R....m#IR.....;...

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (664)
Category:	downloaded
Size (bytes):	14214
Entropy (8bit):	5.423098025111413
Encrypted:	false
SSDEEP:	192:5Ou495s6yYMkJqYWJ+Jaucgd/ix0BSc1e6t44KfKb6m3PbBISj:5BVuqYWJ+Jauld/g0BS56t4IuoPlISj
MD5:	853877426A53490ADEDBCB2E1CE9624E
SHA1:	BA2E275A1C0148B2F12CA53F17746BB920B7D555
SHA-256:	F3163FB2E48B27F81ECCDB331EEBD4F05AEAF9AF7253765323A35E869D8E5D6B
SHA-512:	12368317D1C18BD215ACB20B1D4EB859C72A7DA8FBD8299348E2D5A462EBE57BC015748330C4C1E07FF5404CEBE61B1A228145F9748D92C12DD2B00346AC910E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.572.93058cb1137c31242bbc.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[572],{24178:function(e,t,n){n.d(t,{BU:function(){return J},EE:function(){return q},GP:function(){return H},L5:function(){return Z},P0:function(){return R},Qk:function(){return B},SC:function(){return O},Z_:function(){return X},tO:function(){return ce},vc:function(){return k},wr:function(){return oe}}).var r={setDelegate:!0}.function o(e){return void 0!==e}function i(e){return o(e)&&null!==e}function a(e){return d(e)&&0===e.length}function u(e){return v(e)&&0===e.length}function s(e){return p(e)&&0===Object.keys(e).length}function l(e){return"function"==typeof e}function c(e){return"number"==typeof e}function f(e){return c(e)&&e%1==0}function d(e){return"string"==typeof e\|\|e instanceof String}function v(e){return!!e&&e.constructor===Array}function p(e){return!!e&&e.constructor===Object}function h(e){return p(e)&&l(e.__lookupGetter__)&&l(e.__lookupSetter__)&&l(e.__defineGetter__)&&l(e.__de

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	186166
Entropy (8bit):	7.9883329493359385
Encrypted:	false
SSDEEP:	3072:MFt9erMnJxsut9gyDLs52SZ7+uuyxA7yrlgqvvgmeoIypUpgLfi08zeRcwcaWI9t:M/9e6xsAdLmLauAerLgsIypUI58zeRc8
MD5:	BB8A102A409774C8F013747DA753C110
SHA1:	648F0F7ECCD079D0DD995F1FDF04098130714C95
SHA-256:	2576569306CD6DC10DA6D4F98E7885F590B27E2EC300D38237623AD5FD29A478
SHA-512:	D6FC0430772D7D827F21A92D52F7278EECF4F8F1418822C55771A0CFA4EEC55CABA26BBB3138781A7B32B65D11611490404DCEE2A7A241670D920A719555274A
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L".../..I.MH..0l....!.?,..zAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R....D......).4..u]YZ..B..x...4I.,...D..$.&Ig.7.h.J.B..IJ.(.G...n0J..rA...K;gm+d.k.t7p\.....].l'.l.2.....@..@. ....]..K.:0H.%.. .$..$Gb.c............ c)v.K...e#....S.b[r.0bG"..,J...?..}.g..Q.Y..D.\[....`..Q..Gy.......M&...P{..e.......K..0..$K.,.Vq..-.@..U\|....([..A..P.=..].O...%eV..$.C..#K...O..ZFJ$]....H...SJ.U.$.$'q.'.(.....mERf[J.H.......l...S..-'N.......?......}.....N...h;.h......D.a..D...g%....}....x..F...1..57..@Q,m..p.i&@.%@.`W..P.....a....\b[l[.$.,Y...$.-..../........x..@..pG`,........1.l..'..,.....m..............,+.....i.*K".......m.$.z..R).,ei..../..g...Z...B.......mm#m.}?..#...\].ff...v...v\........Q2<.W..J...3.n..n.aEy...+.@. .I....&DH!e.^ .3...1...)..@!L@ ."..a.0l".q..C.. ......[.sQ.u..........a.A...n.B.!....5...R...!........fo..... ..`.&.."...!.!..!....:.a..+.^....F.....Q....s.RH....B...p.......H....0.X.[](......V......R.

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1880
Entropy (8bit):	7.8878381210189445
Encrypted:	false
SSDEEP:	48:NoW9rslz80QWxB7T8SjWr9slcrQUJKv/61H:NzrslIWx5TRmAiqQH
MD5:	41DB2402073D34E7C539CDFBB7290875
SHA1:	BC2B13CBDB0D33959F4F4A8B109DAD914280DD53
SHA-256:	CA4D719D9BF9FD875E4993E15D21D645303A93A032EB7CE738035ED880E29B8D
SHA-512:	AE7A13D618D884DDB2EDABEF76ACB029A529A8F92BFBDCE384B4CC26A7637B9F0A861A97019BD812B0C02359B6D762C71AA9509760DFED0787FC679603F09BF2
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw
Preview:	RIFFP...WEBPVP8LD.../?...M(j.H.;....'...O..lMB.....Y',XE...+:._.p..>....m..^...v....m...5NJ.._d)...%W.G.]....<.,...c..."...C..?C.S.=X\|^.m[W.m.:'W.m_.6>...V_....'.....L.L......T.Ll..N..H.....{.L"<...c..J..)..~U.3...k..f...............03+mU.L..8.....s-.z`..O?......RF...Vj3.\.....z.....Z..).......jy..V........#t%.s....:....>....F...yJ..........T........c.......<..dJ5..4t?..3..g8{S_]....8z..O..9l...(i..B.h...a....U....Y.E.=..@H...J-...LV)...%#....PU.s...U[..!.[L..l...5..F.+=..C...x........A.,..'...-.n....'5)....c...Qf.,..V.b..4...h..%.....n96.JB.....&..r{..M..I..J......V...,.._Dy.....)....c...:.......!.`.\.."=H..9Jx.G~.&>L.6.\.."c~....;6.(..~Bz._....#.pp..sw....2,H."A/R.8V.......&.....wa....{xC.e.;....tp......bON..3{x.}}.5.....XdbD\...b.I....N9).../.j.>...A.k...z... ;..+........KwX.........j.......I...h.`3QS..Cw0...2.OH..;`.$G..9IyQ....@...:2..DC#.86..#^...Fz5.z..U.Rl.W..#......."....n+..B.&........AM{.....k...z...O.@..k.?.....4

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9646
Entropy (8bit):	7.978414359238506
Encrypted:	false
SSDEEP:	192:ZmMOm1hQDK+AidUQxUm02pPk1Lg+cvKF52Z2atvUsKV5eae52KKYh7:Zrk13mQZF+T/b28sKV5He5Hh7
MD5:	0AE371A505FE3C80969A9688D951A2F5
SHA1:	A57D4DFEF281175CB496A794D26ABCF907A6D3D9
SHA-256:	A6BAB33920314E85B5AA549B27FB2FE901B5F48ECF4772C9E51D8A8129DB70D0
SHA-512:	45BE99C58FD0917C31A5E7658651C93E16D00ECD5A08F7F385B880CB4248AB30E27B255CB162BFA00F5D7E67C4D661E5B8E96E99E9FA7C4AB9E207CB39C4B545
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw
Preview:	RIFF.%..WEBPVP8 .%.......(.(.>A..D....z}X(....\|/.x............E......'......x..=.~C.....k.w.?..h...r?.?...?..n...".c...o.G....>@?..=.....U.g......../._......?...?....g.....?.>.?.~D.k.g...#.'......!..xN...~..K........y...{.)......(~....K.K.c.../...................g.'..^..~-}....9.......o..X.....?`/............../........n...G.?............I.........?..........#.w.G.....Q..-.}.>..............z.l..z/Y.s...;.o.............-.D7."._.8....`...UiO}.O......JK..O.....u .q.......!....`.0.......o...$V..l.Jr]...J.(....8A..... ).W....=B.!.A\..Y..z..;...%>X....<.....%...W..s..C..........9..-...[f.@i....&$. .EX..2......g...Y.D...\.bs:..b....1C)..\|.O......a......w..R3.?..-..f.U^P..q.f#...hq....p.E._..a(..o........I.8.Ul.....,.J3OKe..h. ....t...........g........M.:.J.9..gY.z.0c,p.#p.....9...F\...E......8....8...Nj....R .....Y.e..I.O..{.B.]$.A..gM.u.p.."...N..{OU%H=..}..)....;.^>.d..l.pW.u..[....vZ...Y...d.$.m...D1w..g..........>1~..V.ly...).m.v...#.Z..:i

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,DRmmld,EEDORb,EFQ78c,FuzVxc,GjTCAc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7576
Entropy (8bit):	7.965330171017618
Encrypted:	false
SSDEEP:	192:qVTHZOqECObjBb0tEYx5oHxUHmdvzdTQx+5:crZZPkFbmxKoO5
MD5:	588BF96FFDFAB9151554E942AB001FBB
SHA1:	D0FB8A3682EBE36A91A8208410124E18A88C2183
SHA-256:	324835560ED72AE03B43EAC045ED72668C68697FCFF8B73C79DC990B0C248AA2
SHA-512:	D7CA474706E2E663D441EE7F2285F5518D74E61DE24AB5DCDB24634C8636D4DF1B24C2575E017DA04377C4BD87A7315A0A24836A00107EF1E4D4CF678991B0B6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..H..........s.........}..H.....$..1 ..?....z...2.[.!..r.<...A..j..4./D<......>.P.T'.,..f}K.nL{.0.4y..4"..y..a..P.A#..lv..c/.H....x.O<f...u=...{.=..m.S.....x.A.G.$E.wU..4...3....'....P..I..=g..j.Ab...'(.0...e-...........U.....a.C`^.bM .Hd..l....,..5b.?'......f.9.54..'..zA..q.8...\..........3I#j=..j....a.R...h.......8...... M.2.:...v.7..x.....2.....0x.........p.sD.P.FR. x_;..B...$I.$.^.')..m.8..c_..oDL....`...6...N@%.4.i. k.s+....H;.`.h.3U.;.-...H.......m.w..m.m.mw..f..+3#.........W..ks..+G....b...[s..X?..<.......m;$Y......=..j...A.zt..9...l.m.#"..?....o..\|_..UR.c.m.,f~.m.c.........l.#Ir".D..Z..(......S...V....AKk...b...fU....49....../...l.[.. .X.z.. )..Z..IY' .h4...&k..P.?......$IRl'.......JW..t.....?J..[..-k.{..8.Q.D...wAn..g... .&....'._.k)o$.@..p5...7.o...m...+..4t..&-...d$.8.6.xbq'R;..].......7.6...x...c.0xL.V....1...... $...............Ev.....B.l.3..K@...D...../.....]#8S.?..../..../@..3y.??..4..C.z

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	51228
Entropy (8bit):	7.992246318048376
Encrypted:	true
SSDEEP:	768:0c7WoVIu7cy6olmezhzB8gL+cPKE/LpOeP+8VqSHWgGjK7WeNUmMhLcRutE0Sa6K:nWb46SzB8mlCEDpOetVqSHYMiLTQWHr
MD5:	89D3B9BF317C62E45422276B387D3C2F
SHA1:	BECB39F56997FED9BB9D08228762629275C608E3
SHA-256:	AB99996E1B0942C3412330BECDC643BDCC019B495455349A1D1034FC5D4B4C42
SHA-512:	8965A87A6D42895E0F5CED0526DAE8D3EB61BAF3FC8B45350FD4C91F3200235B4A2AACBA5F5C0340C66080DDAE23FE794680D11CBC7D2CD5371054BEDC387EF7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@.$9nS.......Pv......(.......xH...h....j.r.,$k..2...O@...3.G.a...T=U...P.Q.<c......cDU.q........._....@;........I.i#>#...8&..@o.:......`....z.mP..Z...,1>6..5e.xo.sJ.q...{K-....lx{i)....~3{o..7..i.`Cw...20..M.!.l..z_N...oP.m&.....ku7....n....9....l23K..yAI.-G.tJ.V...jzX..c8..p..0JE..$.......oz..V.....a.u.....A..c~...l.z.6......!d....N...xQ.l3B.'.J...JQ....H..I..TQ)..R.T.R.Ee....Y......c.c.c.).asj.E$.%F....5..C..q.....f..0...A.$. 7..\....9:.1..Ni............3.;d9.1..i...JD..L....LH&.N..:t.P.{...k..jj...Q'.........rf.k?.......=p.6'.raee.X.\K...............8.......~=..^<=n.J{...j:u.T).D"1d.M..Iy.........R.$.8J...T.$....HV.....s.vI...?"A.!....u5~.c..g. I...$0D........e.L.b....$I..o"...N....dx{...n.@.$.8zC.......c....%I.oJ....`.m-.\...3..x..C.....b.+tF...../3\|.....I.I........n..,<(.X.8......RS.t.#.d>.n~...yV.b6....T..5.y...m.j^Y...Q...^..../.........I..J.mM.U.U B...f..L.$..%..z...t.c.1........O?..&.$+.&.p[.....{O.0m3.o.G...o

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	186166
Entropy (8bit):	7.9883329493359385
Encrypted:	false
SSDEEP:	3072:MFt9erMnJxsut9gyDLs52SZ7+uuyxA7yrlgqvvgmeoIypUpgLfi08zeRcwcaWI9t:M/9e6xsAdLmLauAerLgsIypUI58zeRc8
MD5:	BB8A102A409774C8F013747DA753C110
SHA1:	648F0F7ECCD079D0DD995F1FDF04098130714C95
SHA-256:	2576569306CD6DC10DA6D4F98E7885F590B27E2EC300D38237623AD5FD29A478
SHA-512:	D6FC0430772D7D827F21A92D52F7278EECF4F8F1418822C55771A0CFA4EEC55CABA26BBB3138781A7B32B65D11611490404DCEE2A7A241670D920A719555274A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw
Preview:	RIFF....WEBPVP8L".../..I.MH..0l....!.?,..zAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R....D......).4..u]YZ..B..x...4I.,...D..$.&Ig.7.h.J.B..IJ.(.G...n0J..rA...K;gm+d.k.t7p\.....].l'.l.2.....@..@. ....]..K.:0H.%.. .$..$Gb.c............ c)v.K...e#....S.b[r.0bG"..,J...?..}.g..Q.Y..D.\[....`..Q..Gy.......M&...P{..e.......K..0..$K.,.Vq..-.@..U\|....([..A..P.=..].O...%eV..$.C..#K...O..ZFJ$]....H...SJ.U.$.$'q.'.(.....mERf[J.H.......l...S..-'N.......?......}.....N...h;.h......D.a..D...g%....}....x..F...1..57..@Q,m..p.i&@.%@.`W..P.....a....\b[l[.$.,Y...$.-..../........x..@..pG`,........1.l..'..,.....m..............,+.....i.*K".......m.$.z..R).,ei..../..g...Z...B.......mm#m.}?..#...\].ff...v...v\........Q2<.W..J...3.n..n.aEy...+.@. .I....&DH!e.^ .3...1...)..@!L@ ."..a.0l".q..C.. ......[.sQ.u..........a.A...n.B.!....5...R...!........fo..... ..`.&.."...!.!..!....:.a..+.^....F.....Q....s.RH....B...p.......H....0.X.[](......V......R.

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8092
Entropy (8bit):	7.964327266421199
Encrypted:	false
SSDEEP:	192:FAC6CN+YAyzayeAXNsSvg2nxAjl6Aje6TB8wEwJ:FAbLyfeENfv3Kjezc
MD5:	2732EE9ACBD98558EDD0FEE72B12737A
SHA1:	217BD081BFAD5BF68CF646B9CE832DCC746AC4AF
SHA-256:	7083924024981422FF404CB4CE7B52E3C95D98A6DF17AF6AE8D79EF69B9455BF
SHA-512:	E07E8FEF98957720C3E736A0DF5A28E68410B64B8D9CD13A2CD320651FCF271F2AEAB05E93A4BBB1441E6AA4D4898487E5B6E17A0207529A5D9F5A1286DEA0D5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.M@r.H.....E...\YQ9.5.....r...%......J.>......-bFF..Z.H.R[D4..\.$........U"..k..j...\p6.{...;.d:.s.."'..wd.\..m....mL......8.m.V.ww.).?.B.......=....H.U.qV......+w.[.).m.mv..2.$..a.s.'....u...P;5..c@..aR...<..f;j^.V...Q.<....,.r...DDB.......@..8..A.T4......~.E....G.(..........t....;..;......P...Z .8.....P.O..B.....N.@$B.n-.;.F....9.....n.v@D.\.;>m.2....' ...B.x.s..!h..Aa.U!D.O5..^4R.....'...+:...g.o.G".(PS....].cCD!.D...}.S....a...0..\|...~\|...."2^mN.9.w...b.......m.I....].......m.'.%........A.a.V=...pr.....~.w.....K.Yv(w..).?.Oum.&..y.m.%..B.+....XK...{o...}......H.\.ph..c.'\|.....R._.S(JJ'.t.N'.%!..N:.......O...P..~.p8........X.DH(..N..ml...w.......-:...?z...Ue..?..R.m.'%1..n.......d.SUM3=..a..^133333K.3333333-3.0O.4V.1.......q....D.b).....@.s..Q(...K.f..s.R8....B...n.B.&..rw.....`...B......#V.9...r..&..G.Yw.X..eqC.+s\-..J@.t.%...5e.....^..<..d.;.\|.w\.........I2Y.m.v{0vO`.L...u.m.m....}.-....y......ef.G&.9

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4416
Entropy (8bit):	7.94177891589712
Encrypted:	false
SSDEEP:	96:KDCeQjdXQvkXJ3GMRTLo0TAsN3YzZcBkJojedAZaUnEMX4CzvlMM:+MjdgvSdVTdTAsN3ocYyeSx/B
MD5:	E6A1A5EF5377B178774BF38CC5B0C0B9
SHA1:	F5D8C0A4E259D1D7AA265CC1FB19108949F63D3A
SHA-256:	19ADB2816B8C83892EF1735C8EEB67FA32FDDA93962D3FAB1FC9C31E4AC78E98
SHA-512:	C8E05C42661FE265B1293C04A5F31FF7AEF950C40DD75D4D663BD04B0BFB5141BB199CFD2030DB5A45F37EE6F6CDD7E1FF71E5370F9A514665006EE6B10A38CA
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw
Preview:	RIFF8...WEBPVP8X..............VP8L..../..?.U.._.e9gx......033333333C33s.cffl.6..k.sN..L........z..B_z..x[d.j0...v...xb..q..SX..#.5.0.....9.,.w..9.t..S....O...'..Y...X>....S..JK`.$p.+f:U....^...?..b.Ka..Y......V.d..N.e..N..7.<a[.uW.7..'Q....fu6.%ig.ms:..p.{.m.g.....I..I..........n.........V...r\....Ll#....f.\|l=...w...Z....=....'...b...6.()N.f(%..biK.......\.Y9..E...Ig........^).6vbW..e.U......JU+.S`'....Vs9..f2....`Y)/..'.i}%#..f..-M.%..&.0C../`.p....by.!.\......d"}.k..g.0..xl/$.`..L]............9..D....6w.{p..+T..].....6p.' A..O..{O..........G..q...vq.$u.1...x..hd.K.-..3.`..{.'w./.(U.#.ZY.G..v!.$.2.^+..5.B$.Y...Z...<'....hv...>..._.>{....+........oa.x..r.e.[.q{...... .X.%.....H.+.....M..l.K.}../.m...%.H...6d....6p.U.."..gg..ZZ.z...r..P....0.x.._.0.F6.P.@.f.\......Z'.8.....c<^Y.@ ...Q.@.fR."......EK..B....{r.y,..{..d!9..C. :.P\...5..xL.....0U,.v^.n.W.zt.$H...&6m.=..GI..3.`#...hO.gP.i.Jx..F).....l..;....5k[Z4:.H....hO...sJ.....@zf.Jq*.J.z.....

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	870
Entropy (8bit):	7.668561411611923
Encrypted:	false
SSDEEP:	12:61sFkct9I6HmEcbkItek+dW4wpMsb21T5Ivw6YQT8ti15LadIYBrIs62NzgaW3+:YsFhlHm9EvdW9L8iEti7LgIYD6MzgJO
MD5:	30EE1F61136CB2FBDA7FE3BC5B2E9A7F
SHA1:	25578E8B132C97EA88CBE6DA83AC46672E720861
SHA-256:	61D232D57F5EA6B6E89416D11F27DDD25950F5F20820D1F258D2D5FF63A76967
SHA-512:	1AAD0121C2B8C5FA3A6783170092ADF42D522797007CFA9229E9744E1A729C1964BC1F5FC4DDD5CD373DBD83AFF83D3082A909AF3FE50CCCDCFEA632C303B772
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw
Preview:	RIFF^...WEBPVP8LR.../?.../. .$E.;.o.=0.L?.p.H.".........t.I.".......a.]..&+......#T._...I$....)JLH..j.h. @.3"T.#C.s....H../ "".F....C.)"J.Fi".j.mT-".....(..j.jO?._..6"""p... A@~..q.?..~.%.H.6...P&.lg.6.CYl.R.......V.......O...xy...6.=<\|. ..;.82A.A.OBB..._(~V.%.:.. T..!.!,.8a[..j.&.......2.!1..0........d...^l.5b'.mk^w^3/._.../.....~.....4..B.t*`zS...[m.6.....n3..\Kk...hEk.....v..hKk.oK.v..lOk.s.....Ag.U..N..M..=...T....@.....^.pz.N.Nk.}..c...5...#..S.=m..L....h~..g.......N..p.C..........B..[...[.._......j. V....8>!(g.zM.....3..@.#...D1>..h>"..PW.@..M..1.[0))..R.9..LJJ..8JH.....A..G8r.....^.Y....!U...@.....5B..p..K.(... ..Qsz..$......\.Z..~...+>]d....R.T...........JH.>)..5. @....O..W..y..exa$;?...8.je..&...e.&.F.........Q...5B.t..E:@..GrKK...N.:..c...(sn.@...bS.S%...(<...........?.%..\X.......v......_.f.B..k...lg`..v..3.gC@.

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	41526
Entropy (8bit):	7.992625090894611
Encrypted:	true
SSDEEP:	768:JQdMiAS5ol6obaU/l7US696c0IckBX+vSfz7McN47gw4qu30WNxf:JRit5GLHd7VSdtX+Zc67zu30Kxf
MD5:	E425865C796C7B29CB4EEAF48F07B960
SHA1:	993B7AA2516AC4932146DC2F02C71D99C4DCDCBA
SHA-256:	6CB58A3D29AAFF6031184C736767F2834B375BDCA270134A075B68853F997671
SHA-512:	BE54AD16598EAA9D6E42CF1B8124389AD779394453D269882EEE74F7376548151377DFF93D2F95557CDCC3A5AC0C7D61C3B9E1262DA076A676C8B78EAE017A3D
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L".../..?.M@.l7n3 .....`...........#".....xn.......gD.l.mV.5.[.].....ROj.]W{j.H.R..`.)...w..#...n.b..@ ..@b. ....z.L@b]r...$..(p{c........k.xG-.Oi.....L..]... ...^.=.._y>....u..=..vc.`.Pv.;[..1........y$.e..x.`DH:..EU!.G...nkk.;.w.o..lA.m.V.B...l..O..qw...nw..w......e...J..Cq)6...D.....q.......n+..IR$).......].ToTVvM.....mD..=.......C......g.........Z..s"E.O.....O.....R...F..(.5.@.V..........<'Q_.>~z..~._{...B...o......R.N...V....>.B(...I.._I....s./.f...W..n....<...=.......4..j\|o\|.;...4....S.f...&.@.@a..[. :..HN..DN.....4........w.S..L..9. P..-.[nT.C..)L...Y..U.h...B......K..J...@t.@..u..9n..8....'..B.4f...n....8>d...#N.8.".[6#.x......}7c..o.nm..g[.<.......<.$...Q.....L.....HH$r..J.... zJr..P.....(f.>C"-]:$....@`;.`....LDnG .v.].....-1.JO..l.&............]..9...%........-.c...?H$U:..0AZ.m+.b=G8....FAAA.nr.Q.TT...@E.c.u^.....{.h..._....ur.9...K.2p.u..../..h.b_.*..U..J.=7.....@..n.c.+..o..1.c....'..cjD.....?./..I......Nz..

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1832
Entropy (8bit):	7.878490302274349
Encrypted:	false
SSDEEP:	48:xufyDYyYs7HE6Ua/MRJ3TV9nEaAjoLdvPBu:xuf47H7Uj3TlAEZ8
MD5:	15AF7E993179F66E122C70161FC09778
SHA1:	D57AC0DAD5DDFE9255D4E3CDA8F23B80D1A33ADB
SHA-256:	645DE20533AF34C49BCA2B961E8C7D8E9C3EBBB1D03B00925B87F2C647668DA1
SHA-512:	F3EC179D15C5591A6CB7E0EE4BA5F327E45CF1D34522B145618D00D7CD1E04CA5880D9BA1F4E2F124FAD0FC9A3D4C8991E95EF5C90160368B1646982D72F2A21
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw
Preview:	RIFF ...WEBPVP8L..../?....Em.@.....0D...x....6\.f...l.IRT....-.....6...t........Em#.I?.z!.......(..3`..f..\.^Vfv...f.d.........z...3I.?.Et..Sd+3.r.wwwwx."2..4u2ww...)"ww......[37$......a..l..pI..m...r...dS.u.g[.......G.:.M..m..{?....0...g.l..U..m....)..-.V.:U.w..K".Y.$#....D.i...j..(....}.=U..)...."`..,,..0w....C.&5....,(...%.NC`IS.;8...r.......T\|...../lw.........(..6)...p.M..!.y...Rh..D....., ..B...b>}.........a[$..H...._C.o'.T...B......G.7..d......o<[.O.R....^a.....y...pn.....J...d....%.'..=....-...........9.....%0./!ESR..Y.5Hx...A.........X....hXp.2...F$.......\|.. .E..Z.b./...~..g..4[(b...$.D.&./.V....\h..g..\|...5R[...B.$"..%"M.B..\.Q...N."..!I.5E...M.j.(.'.....$4,.!..../..x.j.f5..Hn..\.7..,`.P....:?..C<.J....wf9...>._.I.}....k.~...X:>..-....,.if.=hA...u;.;..,c..D.^.....?Z...%.W.G...j..t..*....c..=.#;v.ep.....xA... .` .g..tra.u....l}.'.{c..C.........!.....g.:^.uu'..o.=.eB4......@...8R..E...n.!.e'.....2.4.0.f.I.]C..{/.q...F.!_..~....'ZUZ..5`.

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4790
Entropy (8bit):	7.920770886596427
Encrypted:	false
SSDEEP:	96:qC4tQxwaUNu/BdFfVD2uYRanUd22fYx08kUHn723QEItHB3fCI6I:Z4GxOUdF9DDYKwu0tfQhPCpI
MD5:	24F44AE57FE644A09175B4CC4ABA8F65
SHA1:	15EB3A04426D5257525C00364CA9EA041D27AB14
SHA-256:	BC20924415481F17717E875B13F2DD99C1A36EF340A46DF7392CC271B8458D05
SHA-512:	4F7D9B233FFC2C26CE62CFD364DFD897077DBA574D86B29399AE6505A3C490CE53F9333906740A70B3FD8FA89818F0DA8B35C08C1DC1E08B81C21A7DCF2EE4E7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8Le.../?...M0j.IR........CD.'@.{...Q.B...E....6..Cx...F.c. .6.........{{.g.d....n3y.'..t.U..8.1.5-....G......8....7..m...._CDL.dv.Uh?(_.....%eV.xl.Z.m.W.m.ug...3....>....O......._l\|.vm..VN.Z..!..e......2...i0.".:..D"2.......]+....?...0.0. .FH.9....m..N....7....?dG._U5n..m.m{l......'...Z.'..>......3....=.m.........Gd.53k.m.m.m....mTUVD..kkS$9.H..f.ffff...p@....4A{f.aff....?&.'NZ.2..,0..5....6w.7..9..I..AZ..p.JB)Q..e..e.}3...............D.......ea[0`0..`.....1R.q....).8,.HBB.....$.e...L....e.......x........L.z.Pf......B.......5.....1.`......>.p...,...@...._\|..)..@ ...5...mc.l.....tye....N..'..s.......1.6...6`..............`P...3p!....b.J(c....n`..2#.d...vp.....@BB....l..c.`0..q.J... .p..o.....lc.oC.b.e.C,....m......3.....lc......L.L......q..c...'..`...q..ZF.7...J..L.A..A.G.......`....x.../....7......n.w..A"..=.......=...rRQ.U....O.......V.m....x.5g;.0D..`.A0.6.4..cvDUj.3....I.....s............

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 64x64, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	1124
Entropy (8bit):	7.797221913617723
Encrypted:	false
SSDEEP:	24:+qzu5YFxsottexNW/Xa3Ay+kevJYGAH81LqlgMGfsK:+qq5YF5eOwHeBYGKOCGfsK
MD5:	3D3C755E05C91266B192156B9402E6D8
SHA1:	89538A9431507569B65BE39F6ABC87A712D0049F
SHA-256:	B628CAFC5F0E7317F05A81EE4B86D157F285CEB0A470FEAEF9D9F711F7742FF2
SHA-512:	3E8A750CB86AD1C1A617BEBD2CCE83D56B1BFCBA6BEFCE3888BC6BCF9A646CF4C6838931FC6E5D666C8F20034504A395A1A53A7074EBDFF990E6D4E677AEE895
Malicious:	false
Reputation:	low
Preview:	RIFF\...WEBPVP8 P........@.@.>a(.E."....@....b.., f..'....._N...U.%.'.../.o.O....;........y9x.\|..7......}....k.3.....?.?...........G.7..._b?.."....'...;..+..rz.7.<Nut.'6.......b.i$.fGr.E.._._...zW&.+f@...(..;.n.i.E...]...s.Z..........;Y..5.}..Eo.d%..D.0.g.T...h..-......\|yn0./..{k...T.zP.S.(...`.w)..:...u..p3l?.4.of.L..%....}S.j.j..x..2.......V.J....a..5.?.~....).....<.....\. D..@...xl..?.&....3.l<.M...5...R.uf.#..a...}../@.g.......".i.7;...%.L.'.....Y\.O.0i=..W.4s....S.Ou;5l..Jv$_....B.#.....=~...G.....). \|[.....p~.PR..;q.......r\......cy.K....Z.O,...@..YRRWC*...c.F.i?D.....5.....S:!.....1..1.....d.I/.K...x!..j..\|)A..E.....gT........N).a..+N:..P-M....d:+1X8h\.K.......@..8G.e<.-TW%..`.0..D.........../.X !=k).x.....[....a...[.,^..zx."D...W.....S.w.3.....T......y...V'.`.._......V..[.G..........g.z.r.7...c...Z..3.~.......j5m..9......s..\|.aN.Q-.>...C.E...3...........9..v.\1^/.....{...&g.}...j.%....S..+.Z...}....$c.%.$...HD.s0\./8..Ry.4\|..J

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	7114
Entropy (8bit):	7.949066568760502
Encrypted:	false
SSDEEP:	192:fSsvvBv3D6GRt1wC7xRQ2N2KLb6X30dGN4gFlF9+l:fSi5v5Rrf7/QxYb6HZ4W9+l
MD5:	794D878D3F3333508C9270AF3E2EADA2
SHA1:	1AB7FAA454D5EF9A1599B106C8002B7B2B22677E
SHA-256:	669AF012E2BBC4A3665B8BBE67DFAF6C65E31C5601FAD90B78C66E297C077730
SHA-512:	7F17E2EB5975129EE51039A746D6D8EB64EECB7DDFA429B90EFC405EE1E4181488FFBEE8F52430C98B2189980135BE40D28647811E58074C526EF086E9FE5FCF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M(l..Avw.......}.w...)..E..... Y8.$Y.........`q..d..l....T....{3l#.V.pw.)... "uww....G.:-z...^~u..Z.D.~.......'h............K.V.....S....}........w...7+W'....S...-.Z2.@._y`..k^......i....!"&...O....<..H.m[..)s...,f..Z..^.X.ZI[Affc3..1..[.J..k.V$9..h....,.].ki&............k..P6.......01.E......P.m..t..o.....m.n...qDd.2.....l.m..'.m..u..\Y....q..m......C..m...8##.U..j./.m.6~.m.5....3+.q..7.M.m-.R[o]..m....m[sn.m.....^k.s...h...B..j..G....%.............<Z..d......}.P.....D.d.E.!@=;....g..t.2g...A...lq-i.4...h....L..........d....a..).&s..q................t..t.@..BG.T.Ub........l......AO.....ZO ...-....Qs..1!.=....P...]...L..XfP(.b......w.}c.?........!A).D."..*c..-..A....(!D).Rg{;'.MU...R&HO..n.....^k...<.K...H.W..W@...y..AF.$.l........{/[S.&.(-..8..........;...........&....H;.........-?=.i...(...I..w..~....3......w..~g...:.l.K......~..u{..RAr C.c.L..7.......j7....t..k.....'.8..[..@.......Z..YQg..-.......

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8594
Entropy (8bit):	7.966296411345263
Encrypted:	false
SSDEEP:	192:uBP/bR7pJfOTI3Nqeuo+gbCHvU0gMJ6FuAaPa2ZPStvh+Yl8:aPzRqTMUTgAvU0JMwAEaDl8
MD5:	4AEA614380B998263508C1153B9DDEC6
SHA1:	6160ABF08D74CE8A9BAED61A8634935147AC1700
SHA-256:	393065BD8ACF1D886E07030B1DAE40B2387EC3AA631C46774A43FCEAAF9689D7
SHA-512:	F427D3CAC274F57F1A307C19B9A31760DF4D05F066199EAC6B7778694E53216BD214F9FA2AB139013875E64209FD55D710347FC5908FFC07A29DDB6ABDB1ED9D
Malicious:	false
Reputation:	low
Preview:	RIFF.!..WEBPVP8X........?..?..VP8LA!../?...M(.$.2c....$"..T5L..'L3Tf.....0..S..w8...A$I.T.._.33.O....m+9......q"B"w.;..HRT.w..X.cf....4Cq..0EG.8........{.-.2.ap...(.....i}J.".H..MMvN.... T8....~.dQ.f#Yx..A..!..pA.........!e...9...D..._.H...PY.....[jf...efffff.aff...L3.`.R.J..._....!c)c^.....2.6B&E..'3-...l.dZF..of.....!33..]\|.v<.msn;..H).2..~l.^....m.6....y.N..$G.c..m.m..I....q&.J...i_=..m>.m.m.O..m.v.T.R.y.{L......4.\|..]N.....W}.Qk..i.j.......^...:..w...P.....s...k)Am.$...91}.t...._v....4....I3..j$.H....WG..d.2f.....f...x5..N...-....utsy.m\|."Z<....@.(..7g..qd\Z..w...L..9./.B]{.9.'Ieu..l#.{g.:go..D....4S....-q..C.....&...haAC.-....\;.v.^........9...>=d'..c..........RF..N._.e.b.FVM.......\|.T..)q..u......,..0*9X.l.....6Vf..AH.........!..@.uwf.{@0%w...u..a.etU.'.N.....j .4.tN_.6.~...\|.4..+C..W.n.P..XA.........x.GN3.DJ@J...',.Z9.J.....O..0].=...k....wi\.......&....Fl.i.+..1...[...ez0.y.V>....I.4.l-..c..D......P.<4.. .0..b...`$...?m

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	189446
Entropy (8bit):	7.988359190242352
Encrypted:	false
SSDEEP:	3072:4V2AdqOB5zIXm9CGsdgOfiZ+mSG7lkEcDlPaj3H+lzhnWRy29tMV15gaYSbE7u:xAdqYCmzs6Ofi4TGR2JPaj3eznd2nMVZ
MD5:	387547FD54C693C114FF72576C5971CE
SHA1:	A0FF8E64FD3E61DD1142EBA06F969221ABAB3039
SHA-256:	D89318D9C1653A9A475CB99CFC1CFC2E2D334D391A4DE62896C7A077BF55B60D
SHA-512:	B71A3F754321E695273B51295E8CAD5ECDCD96D239E9C143ACC43D13E056D5221FAC082DD13B7B3E1B570404EE055C97A6247B94E0BD51494945E2BC4051EA45
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.MH..6l.......?X....O.$%^%)..y(.......R.....9....G..DN....'N,9..X.h.u#m.HQ~.8I..y..q.X.gNr[.J..3.....$zK"YV...@..V,.d....).G..k.<2O.9.9..$.N.!X&7DI"1.9.dV;.Nx.-HM.e...ms..3.....N.<..F&.>J$..8$1..`K.=~B.u.}....(.....#..d..-..M... ....b..m...-I..B.}w.....q.]\|5A..<......-.M^0J{..........}.H..+..[....r...;)g+.....I.c..'v,..-..Dv...M.m....K..v[.N..K.~..$....&.dy;.,.-.os.A..u%...l.i.DY...a....8.#..l+.-Ak...-.cT..../I\|...,1......'...,&...c.+....}Y.A......g.R,@w%..m..X...-........+v.dKt...G8iA...x..7...q...<...I.\|.r.@..{....Q`..W.dI.,..@I.,Ivr-...lY...o....(0.,Z.?..k..hO.o&..pC...Y..................K.mK.$...[.gf5......9..y\|>.b(.b8...8........'I.....Zji.QZ.=._.....u..>K....RHw!...m.vc.V....N."DSS2.`f._..U.4S0i.....m.I..C..P...t....e...M.4QP.$....Y.C.FFD...$.b+.j..a...!.fl0.IFD..\d,yEh. .I.Z..M..x4..I.B.@k4...$.I..jc.H2.Eq..a.K..iB.#c#.b##.......P..TTE.l..!9...d.D.M\|U.1.6..21...:.i.r..$.V.....6KD.bbaDl0.,Ye. .A"...eY..

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12046)
Category:	downloaded
Size (bytes):	283649
Entropy (8bit):	5.545177278568316
Encrypted:	false
SSDEEP:	3072:IT0dmGCpAZVNSNcMzszJIRws819CBPIrTWR6JP/IR1fK6St2nBsLqXWJh7RCQ:IT0dmGgAFMgzJIQoLfK6St+aqXWJpRT
MD5:	AFD44D285BD5EB5B75E85FFFF2C68300
SHA1:	3FE9A4E356B85BA3BBF1A5349D6E89E1D8BFB3E6
SHA-256:	0968661805268F94182592A14B6E25F6983921573A50EE298917504FCF479935
SHA-512:	6D349C507D37E8E2CE0B25A5467C0639B37F7CAAECAFEABAC2489E1201F82201CD55C4C2D6F7816B5B384698A4A8906B2CF24681C6FAA829EF6F5EE29E568ECA
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K59689F
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__j","vtp_name":"navigator.userAgent"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":["macro",3],"vtp_name":"originalLocation"},{"function":"__u","convert_case_to":1,"vtp_component":"QUERY","vtp_queryKey":"utm_source","vtp_customUrlSource":["macro",4],"vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":["template",["macro",2],":",["macro",5]]},{"function":"__dbg"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"G-LL

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10585)
Category:	downloaded
Size (bytes):	198097
Entropy (8bit):	5.67237889332544
Encrypted:	false
SSDEEP:	6144:wXZKmtm7F33g5L5Yd5Ddo+g5EV+V4WonF/AHNFxvQw07IiAM/sCp/zdGLk3KZp7S:wXZKmtm7F339d5Ddo+g5EYynFSD9CIiH
MD5:	6429B46F68985F4BDC6874E272078682
SHA1:	0DC24233448544632105DA884B06BCE3642C4E65
SHA-256:	3DD4B441034A03619BAD26534C586285F762E00CEEE20648D70C2E8E4C5F3DEE
SHA-512:	9B535619C53FD881D5C1B5213DC00E26D8FBB7EA91D79A3F8F0F334C365BD101135D1B02234A57DF42542BFA44AA61703497FCB68E2635FC1F1329A322DD58E0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,kJXwXb,chfSwc,RQJprf,tKHFxf,rpbmN"
Preview:	"use strict";_F_installCss(".hUTled{height:50px;left:50%;margin-left:-25px;margin-top:-25px;position:fixed;text-align:center;top:50%;width:50px;z-index:20001}.k7smx{background-color:#fff;bottom:0;left:0;opacity:.5;position:fixed;right:0;top:0;z-index:20000}.rFrNMe{-webkit-user-select:none;-webkit-user-select:none;-webkit-tap-highlight-color:transparent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;flex-shrink:1;min-width:0%;position:relative}.A37UZe{box-sizing:border-box;height:24px;line-height:24px;position:relative}.qgcB3c:not(:empty){padding-right:12px}.sxyYjd:not(:empty){padding-left:12px}.whsOnd{box-flex:1;flex-grow:1;flex-shrink:1;background-color:transparent;border:none;display:block;font:400 16px Roboto,RobotoDraft,Helvetica,Arial,sans-serif;height:24px;line-height:24px;margin:0;min-width:0%;outline:none;padding:0;

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	144
Entropy (8bit):	6.510067015271117
Encrypted:	false
SSDEEP:	3:OZrOnlo+yJt+IV8u5s/SL/8qBIbngqpzl04ETsa1JciVsl:OZIloNj5s/SXBIjvpJ04ybSik
MD5:	8B20EF77A94CC5CB2AA859BF2F9A4C0C
SHA1:	7D88AF2A677FB11865305D5C0CD98AE6BFB4F36B
SHA-256:	D2C5E6E11D173EE3F594F0EBF9AEC6F81F09840CCF9BDB19F617CE75794DDCE1
SHA-512:	F931252B89EDCC45D7B8043413C384A354C7CE5520799C3B862975413D57A028F0240F332D0DAA19F8799122160EBCB790C2AC7754A6B7B385D8638F19F10A26
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L{.../....?..m......H.m.kz'{&...M{U......M...9..@......)@.`..V...$t..K.&J..A....W..C.g.I....V..~^%9.C....$W..%y.....;.y`d...

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4004
Entropy (8bit):	7.921213566288204
Encrypted:	false
SSDEEP:	96:pkHiDU35dDOAfHekbrRE5D9/EfTKECuk/5s:2h5Ye+eeD9sbKAkBs
MD5:	708900440644413321CCD0376724277C
SHA1:	C4B13DEB7753B8CBBCE953086239EF7C2CFC8006
SHA-256:	6EE43498CE91D71E442C035FFC0E818E033857DA143558AFDB14943312098E0B
SHA-512:	668736001E2D34BAD8A361C82B602AC61119A48ED126C40AB19251FCD44EB2E34A13076FB1D278A2DDA1B804100CCD1533569690F99CCCE79CABD52FD9B5A0C4
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw
Preview:	RIFF....WEBPVP8L..../..?....?.v..<B....O.{...r..9Gp..2s..........5.)..2J....9....Re.3MX.H.d[.Ui......3.>...@v$I.d....S.I..}.13.....H.L...m...m...m.m..y..$[U.s....e..(\.S../..O..%3]................@... y...f^..7....Qw.Q.LoD.d5..^.. By......a.+....EV.&b..7...E..v....);.A..1........S3iw...!.lo.y.+`E..:!.LAa.E..f....5.[..L...,.....@Rs...W...6......}A.jU.....v..i6..ZU.....aY6W! ....\2. 3....MYD.2...dV.r.H.e..Q.1.K...i.G.$#...>.wyD.n.......j.h..q.h7..n.r.....:.....G.MH......r..o_.XiU)($.......t......DP...k\+{.(!T.A..l...GKc.Av...(.....!Z..A.+..q.....q.:..X.@...C.k.l.H.v..B.b.M..b\2.... 6...B...7........Y.<..%sJ....]'L#..uo)..K...E#..j}.?Q...Y.h.f...(MJ...G......&....y...1s{..'.^...QE;3...aK"k.D..q"5.j.&....[w\|........n.....g...Y.......e.t.._...fUNY.3..s...F.....,4^..R/...... .Z.\2....e.j.....^.@...^E90IO.J.0...c./w .......r..D...F..]..z.........x.^.c....h......V=(.K.Cno..b5.p8....w.d(..-...."..r......Y V.".'.iW....r..C.....GH

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5456
Entropy (8bit):	7.942522923555875
Encrypted:	false
SSDEEP:	96:UqmY1qc8xV/J+OK020BBhhu62BoRzY84bIdTq90EiMjSUR9ehICAdn:5HkWOK02ujRUqRq91WUkICAdn
MD5:	D2108D9A773EBD36F5C1743122778A4D
SHA1:	41444509051F153357EC82E65E24279A756523B0
SHA-256:	D3DF3F41B93272A64F15B66948CC3E13CABF9FB0958C6503D5C9A6CCED3F46B4
SHA-512:	EB26F304BA523397188097BD4D8640883A08D45AB1152844E830C0073D36A10C46C49CD86AEC7C2472E3563D0EC643A526BFB12D7B1CB6199F7FF7E19D1D07CE
Malicious:	false
Reputation:	low
Preview:	RIFFH...WEBPVP8L;.../..?......,.....if.{.f...U}.......r.....G.....<.\.j.p.....\..3.....G.....1..S.J\.Xq.8..lG..p_@...\@....K.........f....c.uT..h....%......H.m.op.r.s.atK.;8.\...\@......t..T..9^a......QQ...K.1Z..'.m....iG{l.m...m..\|...m.)..m...m.'.m.m......m...e..6.Py.N.D..@.......?...._..2...S.).8.pd.H...).7.lK.U7....8,p.@.}x...Q..H.7...;.P....ZZ....df>P...*'...h.I.....,u.N..........2EW.<.;$p<...r....t....mms..........SQ1...7..:<../..)....u.Z...yy.....cY...'++......+.X41....`l....N\|...J.]8>^R@...ull."..8.f........9K.==.mV,\..tp~...i.frss'"q.{..'. z..@..B_.r..#.Mjn>4@..c.q.@2...INjj.$..G.....S.ZY....%......k.....e..S..y...P.t~.(+.Kc\....H......v..... .(........-,f.....`0.b../...h.NM.+,.G............./@u%.4.-..\2... _.[[%q...-.......{,@.&.':t.......qp .y..v....F.i.!.}..(%...c0..7B.Y<;KWh...?.RR....^..R..(...5-...U...F..=...li......OJ.cf....{..4G&c.. ...JT..........6I.=.......T....@.{..-.UVJ..n...Z...#...j.`~.}l....kk.ss+..i..../..6vu.I.

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (971)
Category:	downloaded
Size (bytes):	164847
Entropy (8bit):	5.667765963244268
Encrypted:	false
SSDEEP:	3072:D5JaWJB3kyKIcwTVI1vTQYVvFW9O1TmD069v:HJTKIcmI1UYlFWNx
MD5:	CCC25615949C7E72B7DFD79230547F62
SHA1:	F03690F3BA63BDB365B0E5619FCC2D02DBA995CD
SHA-256:	0E4F0B950E7E2E10F3E84237674311B878925767112DBF97DD68605FDDFDA675
SHA-512:	3B7E37609094DE0E7BA7627466C0DFD71BEE17A56B5DA5594F39C50376E02ED925BF7D0F2EBBC03C73C49CE0DB434278C0EA3493788EDD4BAA0F83D84F56C66B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,AKTwDe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var ypa;_.ln=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");-1===c&&(c=a.length);const d="-"===a[0]?"-":"";d&&(a=a.substring(1));return d+(0,_.Qf)("0",Math.max(0,b-c))+a};.ypa={eO:["BC","AD"],eU:["Before Christ","Anno Domini"],AU:"JFMAMJJASOND".split(""),TU:"JFMAMJJASOND".split(""),vO:"January February March April May June July August September October November December".split(" "),IO:"January February March April May June July August September October November December".split(" "),FO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),JO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),PO:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),.WU:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),HO:"Sun Mon Tue Wed Thu Fri Sat".split(" "),VU:"Sun Mon Tue Wed Thu Fri Sat".split(" "),BU:"SMTW

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	22360
Entropy (8bit):	7.983148681146632
Encrypted:	false
SSDEEP:	384:5AnHZ16ygMyBK7YYHeVcG6PbdoaVbjs1Xnr2lufRp80RHWDYlPJYmsZ:m516nBfIPW08A85pvRWAPJx0
MD5:	814D2E18A827E16BE3519D1262D3ECBA
SHA1:	6B569111006DBC20425C43DD2E4C69E691133130
SHA-256:	148BC30E64E19E263DEF1FF9E357B60B10CEC9EB4D1BDA231F3EBEFED488A1AC
SHA-512:	3F9516A95EDA1A824062C43AE25419C6BC865BE96198555D0E1BCCC4420C3285AF08AECF1745ABAA0DBA13ACF1571A9D79A163C83E297E3A34BB0417270AD661
Malicious:	false
Reputation:	low
Preview:	RIFFPW..WEBPVP8LCW../..?.M8n$I..UuX{..<p.............M...C2S.J$P..E.i..f.d...X...U.I..aM':C.!i..j7D..I.....v.~\.._.$g.._v~.}...d&8@PB...VYH.kb.j..$...J.u4K..e..N4&$.$4f..N..nq&.......h....}W....#y..6XHp$I..03..Gc.?....Tj..{+...T.n$. .......0...ZA...B......U.Y#f.......`..if.Q...m.H..w.1n...0h.tJ. ".....x.............2>.......[uan...5D......r...\|+... .H].5k.XL..93....2...x.@]..k.X.?.bW....<..]f..qF`..7.1@E...??.........?&..2...z..XX...f.9....31UV..vD.!..L...a1x.%.F.x;...W..3..@D.O..SI];._L/\]x...\|Z..9..aE...?..x...[_..-.....r....iW...k!..X....Z/L...._..x.UB.N..@..MD...Z.k...c}W..!"".Q.y/......6P6.R=...ir...<.n.._.a.]i./.5._..6... .ra.IDf........GE.`.A.&tED..f.....z:n$.4......4&..q.v.p....L.C..@.4.}.....3>...te.G.3A.ID..wN..aB.C..aN..%.(".0.\.:/.!...._9...eC[k{2.Q.#kY..u....)...h..XN...I.......Z$...%./...&$&"... 9'..$..e0,$H.uA....A.B.H...E....dg'.\..3..@:..g2`..u..0y..;.....'... ..m#9.....w.\|#b.x....k...v.0..>N.........-[...KI.8....x...`.0SD

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2083)
Category:	downloaded
Size (bytes):	70099
Entropy (8bit):	5.4172289664524875
Encrypted:	false
SSDEEP:	768:y4G5mqD21+io1L27Ljg07HGTehxiGVJoGoDvoaNIcG1mT/sWGpj60Y1+:yl422sfL0LEfTOx9VcMBmT/hiG0S+
MD5:	509018D1FE0ACEACCBA62427DEDF5130
SHA1:	76EAACB10B07C5D4C556DD7994B83BAF34324100
SHA-256:	A37F510CD4D24CE05B9E0D7116B9FDFED2D7A8E950C5F46F56553819FC30A948
SHA-512:	C0653F89067BF10355382904C0B89B5F5913333A3AAB7487B4CCD6E164D95BA10F39A02049E7408B9EC9F08A258C801DB8C899104E3C7D522687D9311C82A541
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function t(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(g){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(g\|\|"")+"_"+e++,g)}function c(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/android/market_images/web/favicon_v3.ico
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,fI4Vwc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ojPjfd,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	13822
Entropy (8bit):	5.308557467153006
Encrypted:	false
SSDEEP:	192:YPNfrSf3gy1fQx56zKsvEsSDIiFtTislPchPTwFlOvHChmC82YFK:YPNzSf3g6zKIHqtpRKEuvHTC82Yg
MD5:	2A92CDD99A42BFCD7DAB16887539E231
SHA1:	310E2855E334F6F49937490D621710021B15066B
SHA-256:	F20C946DA61069DF3F4DC8097FB617DB50F266D25D53758D91FCCBD8341C533C
SHA-512:	7DBD1CA6AF6E7AA86F408C6E3D5D35AA49AD39908D8AB10AEF4CF8C806AF27889DA43D8AEDDEE030E6351DF1D81442B431C6AF206A4DF6E9BFB043892850EF49
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.15.097368f212a6a942763f.js
Preview:	/! For license information please see chunk.15.097368f212a6a942763f.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[15],{21015:function(e,t,n){"use strict".e.exports={canvasAvailable:n(1892),continuousScrollEventsAvailable:n(93117),cookiesAvailable:n(2022),cssLinearGradientAvailable:n(83353),cssPropertyAvailable:n(15871),cssViewportUnitsAvailable:n(77499),elementAttributeAvailable:n(13462),eventTypeAvailable:n(70683),isDesktop:n(13459),isHandheld:n(30677),isRetina:n(25152),isTablet:n(53489),localStorageAvailable:n(83574),mediaElementsAvailable:n(58093),mediaQueriesAvailable:n(28342),prefersReducedMotion:n(54719),sessionStorageAvailable:n(63160),svgAvailable:n(91676),threeDTransformsAvailable:n(78795),touchAvailable:n(50012),webGLAvailable:n(72810)}},1892:function(e,t,n){"use strict".var r=n(93796),i=n(6379),o=function(){var e=r.getDocument().createElement("canvas").return!("function"!=typeof e.getContext\|\|!e.getContext("2d"))}.e

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 416x234, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	19102
Entropy (8bit):	7.989967773372439
Encrypted:	false
SSDEEP:	384:VUv4uedgnmnSVgEoS4ynDa+HTp7VQViv/Zo5rOeqny/:iQuNnwMghS4j+nOMxo5rOZG
MD5:	32353208EFEE7F4364C6E878C7D53AAF
SHA1:	6E5323D6567DEBFC7730138B42CA36DCAAB408F9
SHA-256:	B81B93F228219BA0E819E5A4399AB1060C2EDCD740370523173C3ACA1A766710
SHA-512:	1F21A71375C3402F509CCAC588086A1FC097D1781788CD43DF71B2D5BF3A79D5B05A66951135C701134C4D0E3C4C9520A93A1B26568B2C1894ED0CA8799276C7
Malicious:	false
Reputation:	low
Preview:	RIFF.J..WEBPVP8 .J...........>U$.E..!$(x.p...cm.D.Irt08X.y7......d..}/..k.?..P..>.}=y............SW...w.....>.......f-..~G..........z......C~.....D.....w..._..t.....O....B?).u......+...........~....../....l}......g.../...?....\|...........?.x.}..'...............................O.o.?......S......._.................>.?.?..?..]Pk..6h.d<.A...z.C...P.V. 5.Z5a. .....x.Nj...6V.......+..]c,.....!.].w..=Bw.i.W4..H.Q....YTV.....{.n......\|.J...{......S.........3.-.Q.....wR>...k,N._-....#rE..[........^^^.H..$...f..mW..[.,Ep..2.(JA..%.....""$i.Kq.M..^..........)...^7......,....yqE..,.<. ..3.4..........u...T..D.f4O$...c.:...%)Z.;.....>..XM.H.n.P{.6.s.dsV.S...E\|.^C.C..@.v.........!\.5..;...`....nN...dy..K.....0.B.....zbJ.V.......#..f.Y<Qi!....l.+.v........)..$.v".v....fb....e$}..dP.N..(O..).C....M.Y]..e......;O.d...8.YDE....W..&]..'.......r...H}....`0.....G(J..d.EU..O..[.:&8.)8...z...[.;../B....D.rTT..4....l..'.....-~..k.x.\|.@-.!...M...(...j.....

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	984
Entropy (8bit):	7.674068185768488
Encrypted:	false
SSDEEP:	24:j3Tnqu3iggc6XDmjArkqCHB5hnUoirkQQ:DTnRTgc6QXqCHqoZQQ
MD5:	521AB661D05B5E40ACFAEAB1F65DFCB7
SHA1:	AE1C2E4A193121281F5D39BD7A4701D0BD9265D8
SHA-256:	2F85BCEB5105CD1F57EA59264441AA3231AC11EF7D714A06EB0A2F578B9A697F
SHA-512:	CD3334CBE3D856ED5E8A041CE75AE88099254EB2B07BBAC09E8E14C38B65DC07BF5B01F8983C52A5769461DFE36A644453C3DB9AAE121B3BF3E7BA81FD4B70C9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?.......$GR...g..Cp.6.$5...`..A.H.........._..!...6.....Np'.l..V.y...E..V......;..Q.&(.l...FYQ......M..f...w.. .....7......Q........bs}....ylS.....)..R.isy.......T.s.~..p..nmO.X.03333333..>.<o.+Gv.X.....'_.UD.'...vI_.i....d_.ja.h..c.FO]....J...Zjq...{o.1...UF.w.................wv.n...wkR..mA..h....eD...AhE..m.....mt6.../n.......7.mv..DD.RG..$J.t.....Jp..3..%...=.Xp.R...5..u....t;4.o....L..]..<._v....f.B.p...G.%.Q.IO4..J.....c.....['..>Z...Q..C.2Z.A/.u......n..a.........Lv..j....m.....k .,Q..T..1..i"..J.x...#.]6^.h...=.hz....)GF..].h..D.G.&...(..4.....dx(kB..J:...4....'M...1)G2M.E.@..Z<......p.e.!. >B-_...!.2....l...W... ...s..._.........4.$Gw.iU..1.gZ..D.....P...D[.....\|@D..X.S"J:.8J.=t$D.T.A+.....%..V....!...-.@.....Pr!...."...wl~.v..V...x...>8.E@v'......w..D..~.._l.v....9^...;........uT.).N..0..j...\...D..d...x.h....}....'..dy.&.].}.EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Reputation:	low
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	36974
Entropy (8bit):	7.869731994362244
Encrypted:	false
SSDEEP:	768:H3cLtbg0waKsaI+Oq3roGLTAyzNTshamT+EUUQezg+koJXrxZXBsKCLqL96YggQR:H3cLdZL+Oq72yzNXtEjQecmXrx5BsKlY
MD5:	C2EF0B7FC3C86FF987368BC05E66511F
SHA1:	0AE925FB913D4A07D3B5259B88182F83D210750A
SHA-256:	5194A1EA73958A6DFF29A73D5F583B3D689B4CFBDBB4484842ED77B204409813
SHA-512:	835A7A424469B428CC390F97C36E423AC6F05304BF25045DD84034B6A2B42489DDEED9E24F9C1EECD19E893C6EB021D8A782F07B27E1C67781D74E1835ED94DB
Malicious:	false
Reputation:	low
Preview:	RIFFf...WEBPVP8LZ.../..I.MHl.H.$.S...q..<=..BD.'..".d$..J.R..}..}...-.....H..6.#.k....w.....wK.Nw.p...H...u...3.._..b...LS...\|......$...@....6G..0...3...^.k3X.....9....+)I.K.P..........\|..'.H....lQ..d...u...w.4.m...Z..H..9s.......G..3....pP.T...".<..O.........y.......u..u.w..I~.Q..S.O...!.'!`I..rd...\|.3".......u..'1.rm[..4\|......E..n+7Ov^.,..H..I.c.g._.....gs.{......9.H .1........F F...L..#.,.4 "e.0.......`.@ ...q.....+.7q.....:..."..).`.,.B..3..!0$4...UG...h+0.E.....U..0...P..P.{...!..... .......j...\|.{}r.[".,..........=..`........X...6......jc.D$...h/..(.lp.[.. ..".u..4.N...H.xG......;..;.7..="....b..].s..I..............k/_...A......;..})0...4m..L..o.!"0.yh...."E....b.x'!.n9>.".....=.....V........' .a...!...+..X\\\>...X,.A[W..;.....j..E....$....v..k.BD.....3.V.S.k=;e..6.\.W...(...sg.....L.W.E&qwd.[up29... A..V\|_.......3W.x.B!I.b..a......._...8Sg...y...(....tg.n.a.I.a`.L...H<.FgR..'..b".8q.p.....k8\|..y.}g.....H#=.P.}O.^v.8...P.s...R....m#IR.....;...

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	337
Entropy (8bit):	5.1776673129286745
Encrypted:	false
SSDEEP:	6:kRZzRxVvnQY1fV/Ax8G/QVf1324By8HedcMwQRaNw6JpyxZRNlad0:kRZTFfVmH/Af1G4s8HeYkbRN20
MD5:	25DA9B9A3176E6D44D1FD2642ED71360
SHA1:	B07456DFEEA93248A7110B9713B810F520B186AA
SHA-256:	8F816BB92E7D72265141EBFA316F56628D5A48920FA85F09830991E893A3D958
SHA-512:	181809C75B4348AA25CA625434395C1C22278AFBF5C6E630C3CD2F7BCE38C932EA796AA02AFA5239E61FF697B512097D1213881599AB6085E31F6A53F2051987
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=UZStuc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("UZStuc");._.$q(_.eza,class extends _.ar{constructor(a){super(a.wa)}H(){return"UZStuc"}O(){return!0}kb(){return _.f5}});_.Aq.UZStuc=_.mz;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 416x234, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	19102
Entropy (8bit):	7.989967773372439
Encrypted:	false
SSDEEP:	384:VUv4uedgnmnSVgEoS4ynDa+HTp7VQViv/Zo5rOeqny/:iQuNnwMghS4j+nOMxo5rOZG
MD5:	32353208EFEE7F4364C6E878C7D53AAF
SHA1:	6E5323D6567DEBFC7730138B42CA36DCAAB408F9
SHA-256:	B81B93F228219BA0E819E5A4399AB1060C2EDCD740370523173C3ACA1A766710
SHA-512:	1F21A71375C3402F509CCAC588086A1FC097D1781788CD43DF71B2D5BF3A79D5B05A66951135C701134C4D0E3C4C9520A93A1B26568B2C1894ED0CA8799276C7
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw
Preview:	RIFF.J..WEBPVP8 .J...........>U$.E..!$(x.p...cm.D.Irt08X.y7......d..}/..k.?..P..>.}=y............SW...w.....>.......f-..~G..........z......C~.....D.....w..._..t.....O....B?).u......+...........~....../....l}......g.../...?....\|...........?.x.}..'...............................O.o.?......S......._.................>.?.?..?..]Pk..6h.d<.A...z.C...P.V. 5.Z5a. .....x.Nj...6V.......+..]c,.....!.].w..=Bw.i.W4..H.Q....YTV.....{.n......\|.J...{......S.........3.-.Q.....wR>...k,N._-....#rE..[........^^^.H..$...f..mW..[.,Ep..2.(JA..%.....""$i.Kq.M..^..........)...^7......,....yqE..,.<. ..3.4..........u...T..D.f4O$...c.:...%)Z.;.....>..XM.H.n.P{.6.s.dsV.S...E\|.^C.C..@.v.........!\.5..;...`....nN...dy..K.....0.B.....zbJ.V.......#..f.Y<Qi!....l.+.v........)..$.v".v....fb....e$}..dP.N..(O..).C....M.Y]..e......;O.d...8.YDE....W..&]..'.......r...H}....`0.....G(J..d.EU..O..[.:&8.)8...z...[.;../B....D.rTT..4....l..'.....-~..k.x.\|.@-.!...M...(...j.....

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	5456
Entropy (8bit):	7.942522923555875
Encrypted:	false
SSDEEP:	96:UqmY1qc8xV/J+OK020BBhhu62BoRzY84bIdTq90EiMjSUR9ehICAdn:5HkWOK02ujRUqRq91WUkICAdn
MD5:	D2108D9A773EBD36F5C1743122778A4D
SHA1:	41444509051F153357EC82E65E24279A756523B0
SHA-256:	D3DF3F41B93272A64F15B66948CC3E13CABF9FB0958C6503D5C9A6CCED3F46B4
SHA-512:	EB26F304BA523397188097BD4D8640883A08D45AB1152844E830C0073D36A10C46C49CD86AEC7C2472E3563D0EC643A526BFB12D7B1CB6199F7FF7E19D1D07CE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw
Preview:	RIFFH...WEBPVP8L;.../..?......,.....if.{.f...U}.......r.....G.....<.\.j.p.....\..3.....G.....1..S.J\.Xq.8..lG..p_@...\@....K.........f....c.uT..h....%......H.m.op.r.s.atK.;8.\...\@......t..T..9^a......QQ...K.1Z..'.m....iG{l.m...m..\|...m.)..m...m.'.m.m......m...e..6.Py.N.D..@.......?...._..2...S.).8.pd.H...).7.lK.U7....8,p.@.}x...Q..H.7...;.P....ZZ....df>P...*'...h.I.....,u.N..........2EW.<.;$p<...r....t....mms..........SQ1...7..:<../..)....u.Z...yy.....cY...'++......+.X41....`l....N\|...J.]8>^R@...ull."..8.f........9K.==.mV,\..tp~...i.frss'"q.{..'. z..@..B_.r..#.Mjn>4@..c.q.@2...INjj.$..G.....S.ZY....%......k.....e..S..y...P.t~.(+.Kc\....H......v..... .(........-,f.....`0.b../...h.NM.+,.G............./@u%.4.-..\2... _.[[%q...-.......{,@.&.':t.......qp .y..v....F.i.!.}..(%...c0..7B.Y<;KWh...?.RR....^..R..(...5-...U...F..=...li......OJ.cf....{..4G&c.. ...JT..........6I.=.......T....@.{..-.UVJ..n...Z...#...j.`~.}l....kk.ss+..i..../..6vu.I.

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3346
Entropy (8bit):	7.927787140499046
Encrypted:	false
SSDEEP:	96:mY+rHnf5AhAsKKecLUsMccj/kRLYe0qxKeyT9FL9I9Vyk:MbsgsCjcr1HQzo9
MD5:	24432E68CDC80B8A42EBE0DEF7EE264E
SHA1:	6FB55525297EFC44D5DB9407AD46297AB2880218
SHA-256:	AEB2EEC5C20F7EFE0EE1E89E1043A19AAC4A77217797ECD839FC52D7DB357A8A
SHA-512:	86BA0C2C40C346D1620577402689A6AF4344FB0BC6F10E29FC455E809208E4A3C547FBF233E0285B50F4CF52F54032109E7620BF328D2E2C97CAD6ECB9B1CAD3
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw
Preview:	RIFF....WEBPVP8L..../..?..P..#.?v..oDL...u..v$.9..1.....dT#`R......N:.-........[SE..........w?n3...www9.h.;../.9i..O..".Y.@F.j..n..34....X.K..;.-`;p60..El.Fz..Y.; ..CS...f..Srm.:..T....k.M.L..v..Nm...>.>....I.$..~.m..g..m.m...m....O.....[Y%4A7..g}..............=...n.s.@3...n.G.,.1... u...-&....CdE.....i.r"fN.=.i......g~M....mB.$.m.g.m.9.g.m.m.m}D@h#I..@...::G..dTUw}........^.....:...<....~.ZMf..\|.z.k..h.....y.k6............ ....e.6..........5.o....Fi.....t,..........(.._.......V...;....d ..Z....,TmS... Qk..?...q....W`....C.....o.4jq..".H."@..A....F.%C.;.]..@..j.G..L.....n.-Q..B..`...e4....>..........~..BH.P...Hd.6..g.2)...f.i..6f....Xp.A...@.%..V..0...<Q.y&.....R.........R.r..w..{.%.n=^zn...n.hl..QpI..W.......[..#.Ca...!.6.lfP(..]..K....G.Td.:./..G.7F........3....VuE.(.. o...g.A..\.U..>....XttW..<.......R,.(.<..&Rg....q..&...V._C...5.T..T.=.!.F..k.z\.j...9\|..\|..%.6m..p...En}.#E........INN=.........^...!f.A.#...,.<O"D.s. _I..

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34150
Entropy (8bit):	7.9605429516569455
Encrypted:	false
SSDEEP:	768:1u9/IEI2Y8ovLDIm5VvC+TSPI05kE9xX0r+Xv4NdqnzYl:O/7Uh/ZeW0qqxEr+wNkUl
MD5:	4DF004D4F2D2F7921EE1AB1E16EEC7B7
SHA1:	39489B65493B9FE9883F359E5FAB5170C9D9E1F2
SHA-256:	ECF16BA0EBF68546464B4D0E8E47A95B961423E47413C25E5A5BA73DDED2FFD2
SHA-512:	09563045BAE58061067227F649EBFA4A334659B1A4BDB9164377B2D6BB85274AFB57D260609528E089533BFCB9FFDE4EBE8E945323D77EBDA5662E7CF7ACB83C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw
Preview:	RIFF^...WEBPVP8LR.../..I.M8l.F."gn/Y.._.<.BD.'.....n.....z..w../$uI..[]..9m[............f,......^...............C.....H83.3..0R.X.609/_[......$..\<-...tK...X..cl~...A.7."".....%..."-..!I..H.c..&.@K.L...I..h.~....F....\.>'...v..c.)"l.6qT......-...Hz.....{..Tko....."..5_...zo/A.!.!.J. I.-Gr.\|.\...j../AC/....."(..t."I.$E.Lf.fy....#.34Dyxf.t........u......A..H.RbL..0>..f.._d-.8j...e.....,.K..\.L..R..,J....gN.K{.$}.dQ"..Q.z.EO..I.....zk"c\|j.nm...t.WeHII.....gjW...J{...I.l.....z.SOii)M..3.K.Tm.:=..H.%.m.n.K.."......<$5.(.2.L.ti.....).!.E8Qyr.f..mW)...ZO..$$3-.....Xg.d/u..i...~c..Y.....x6.>..!.&t..(.h.]......3fg......{t.A ..p..u.a. [a......?.,.a.~......?.{u.Zn/..PQM..k^~.m.Q2...}..........#V.V..~w......L.a......wm.5wl.P.a1.P......./w......./........).~..Y.F.6........Q'o{w...f.K.j...a5...1.N.D.,l^...X0....r....,.\|...@...43X..u......g...~..J....'...Y..%....Nm..D.w.^....e.Rw....H.F.......3..N"..ok.0H}.Pv..E.....f...r...S...q....e..$........,X.......x

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10968
Entropy (8bit):	7.9747642221176225
Encrypted:	false
SSDEEP:	192:1Zf1+lBJQ0XtWeu6ZbUwo4lgZCjr3qXgceHJk0yzwoTYWkN/EG18xONadB0G:1RsRFEIwyjr3r5yGSrkN/p1c3d9
MD5:	288C5659B8B33851CBE776E6B0DFE99B
SHA1:	7899BBF88159EEF8EF8304C67C7D146FD4D7C52A
SHA-256:	44C509F255CEC0407C45A38BED31745FDBFED5A865DEB573BE80589DC63302EE
SHA-512:	CBE572C9864598553294EC672B45E6E5158C656A3296B019251B6F59DE1DFAD8EB2D5ADD093FD4A766119A1A3BABDEBC89345A6BAF75FC4B352E6FB0024682F8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw
Preview:	RIFF...WEBPVP8L.../..?..In#I..3s.......c.e.......{...w.$..b........3me...el.3.0.;.`%........)..23mIw..%....:B.$.e..0.3.51..#.....9i..d.....@U.....B}..........u..y.U7U7....q...$GR..A.+.....Ig.k3...4.m.jv.u.G..T.%...H..%...../.....0...@.;...0&L....wB....&.`..Z4c.....B..B...eQ...&. P.~bZ..C..A;...N......g.i%fX#....!Xm.......D.%:...eVc\..@..a.w. h5............W......J.......@.......{..7...Z.`~...j.....y.C..=...D'...1......O-Z7.P.Z4Z.^5..$IV.Yw...\|G....T.oH.A...<.[......Q.r.......j_.d.....<9.A.dAbT.J...QEdi..%..z!.3j.......z.m{6.V.g..A%.r!..,...h.jii...{..j/...D..'..x..~.R.....v:...T.Y.....\|.....^E..2.......t.b.h....]e....$G.T....0x..F.E.S!....."..6.dW....1.(.(........O.$....j.z......=.^.]=Y,.=fffffi...x).;...n..P....R......0.}....bi.-.[..d.q....\y..:@.. ..R.`\=..M.=..q...{.].].X..H.L..k\|.m.m.m.m....{...m[...}..;.A....5B..ww"w...91.z..We.Vj.\.vw9..D...........s>.5..6...;.!.....H.X./a.......).y%.3....._.LW.;?$.....t\.U..{.......v.ka.N....2....\

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3872
Entropy (8bit):	7.926482378681672
Encrypted:	false
SSDEEP:	96:JQRKMqA0SMQYXXObysJt0txHfvwqKPOCFZB+y0vCD9ycU:WRvc91+twx/vwqKHwCD98
MD5:	B27AA4BB5D8D2244C0D0EDC2D9BC52F1
SHA1:	BABE6F9AABBA26A755DB9E5714774F1537836CE0
SHA-256:	44D9D3A4AAD1573E010A54B69D3FCDE65D2AAFBDE64E44493C2DAF29D8285C95
SHA-512:	60AB5312CC9F2B2BA18C90FC6B8576DAEA9CCA8D5836C8DBCAC271C5985E4BCFE1767186ADB75C32287AE54CE93AC1F19396164D38433CAAF1E58EBD639510C7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.......m[.u]...m6.zl..TE.m+....m..Bf.y..y....m....3.Yu-9.}E.m.\.X.!%j.G....)....=I.3+.vc.m.mw'...i.mJ.vU.e.a#.@.m.m....^.H......$I.....w.....7\|..?'..i.j.j..w...`..>........r/..r..o0.J.^.x3p.....'..:.z M...e[.M..%..#....K.V.....D{*..l.1....E..7.z.&c...v...T.9.o...(%z).C..k..!<y.8.^......yJiqaa.......ooK..4.3..V....GryYa...}.\|:..'}.f./B.a(R79.H_.\C<......#..{..@.....-J.ak.9.).Az.1.......#........^....r0]v...0z....QT...........-..A-.CUN..\x.-tS....XM..<.@[..X.......Ec_'...%.055\|W.....X....2...TI<..]......C...m...ED.e./.B..G..-..!/.O..).<H3........&.."......L.o.xYi.s...Y......1......z..#.1..=.....e........^.{.}?v..,/.@,.......\|.\..r^.7.4\|w..t....X.....G.....i2.z....0.R]..t....c..e.:......9.1b....F+....1.....'...6.\|.T.~........a.\.9lK.rB.3F1..O.eX{..&..3.....{v.a......u.N..........&.N...Em.'.~.....b...p8..'..`p..F..x..Az.0..g..d..>..f....s...&'..D.s.m..g..qv'..H..#y1.'ax.u....3T...{...f....?.h...q.=.....@.....6..

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15902
Entropy (8bit):	7.979385311048091
Encrypted:	false
SSDEEP:	384:MIuCkzTM2Z9KfMO16MXqHCiwGJV3XZ7nCrSnykTm9FJpt30f:putzTM2ZUnqiiwG3wrX9Bt30
MD5:	C9BF1B0C8E9A522267763ABD87AC849C
SHA1:	1422C93842559FC4D7DC187F9291938D8A6082B3
SHA-256:	BE5EFC8F8DF15934C93EFB63685E801D4F9CBB2329587BACEAB6A0230F89A29A
SHA-512:	6EA335EC4AE7ED60394D2540721C2CA862243474276C92487A9CD4C62EAEEC20EE62DD699234DD2BD3127D51F90F559D19767C3067E2C3792BF710618BA63377
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw
Preview:	RIFF.>..WEBPVP8X..............VP8L.=../..?.M..d7nS..........d......?}.'..c}..^0c..cC....{.OH.$...YDw...>.w.....J.....7....$. $.P...:\.l-...M[f&.U.w.Y.o.^..y.{..T.<.....3..n!.bm_....y..9H........l...6..gPHRd.{.......k...[..B.k....&..Z....0.)..".7....}.i..$I...N\..;.......On..N...ik.o.....{....F......Z.......U..r.5.<2.....W.D..5...Yb....@...D.B..x[.Qi..(.OT.RA....7.TJ..[....B.@....EQ....H.h2S.X.Z.-.@.D.....>....(. I........(...zv.........Z.(D.x......@A..>.).O....CD.!..'..\|...`pu........@...t.......N+Q[.....G........F...._.....P.%.=...P.J.L.v`...^z.'...@+..F.k.i..it........ .vY.@..@.T.D.u..``p....Bqj.9.-.r...................K}t[y..ap.B3...Z4V'..........{.s.V..`G...E.m._~].N,.,q9.A.....G.......I........8"&....T?r.....u.U...\|.u..:....G^w.u.......S.v..5`.`.......<..V.;...;...u.=6..S............V..S.P...>S...k...h....)`....A..AP....7..2.Zs.1....:.Y....kc.....\. ....7" ..E..@.*.<..-....I..!...!....3..\|.%........sfJy.4.+P...b.0O

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6458
Entropy (8bit):	7.957918669828179
Encrypted:	false
SSDEEP:	96:7PVKoL/qyR2sELBjs3+O6RVlTRbQhJVQjxlCgtOftuKb:7dKg/VEBIeRVlyhJ+xlntOkQ
MD5:	A379AF75205280638DD6B7D078B65C3C
SHA1:	00AC5861CDC7F407D5740FF96AB6191A501684FB
SHA-256:	E81307F9904D497F5F5456A76B65880030C4ADF8C991FD60CE20FACB94899D80
SHA-512:	103B2CB011D1550BEBC6E7903BEC80D8FC1BAB79C85CF062EE538F01FF2DB6723596418D1E260BC4395798C7A31E8181D851BA99B8A5F9B371FC629870B20AF3
Malicious:	false
Reputation:	low
Preview:	RIFF2...WEBPVP8X..............VP8L..../..?.M@l.H....:....... ... I.<......l$y.H<....cb[.G<.$.@.'..l.y.$.id<o...tG.@....$(I.<.F.....:...@m....@I5.-..z...A.&...v..B.......\bP..n.JUUG.t.O..)......j.pc.v.,L...`(....HC$...29.m$....}.....a[..F..I2..........G.8..?..@,^.H..?.D.d....T.0@.k.g..../l...;.8xS.A.V..........k%=...@#'g[..H...S.Eh&......~=.-I....G.......0x..w...UE=8...Br%.>...T....z.Q%...c ...@.XDGU8.3lp...l.w..p........B.............W...EN6......@...<..P6.h....0L.....}.n..!..P..x..D..L....2q.m....;.....m.e....JCp.A....z....B\<Z.Dz N.,T...[.1.#G<..Dm.i[s......m.U?.b.m.l...3.m.h5..s.5U....9f0..../.S...v.5f......9....V.......'...^...m..6.....ffN..ct...;0..]..sk.S1(..?H.m.N.N.f.A......#....X.m.$......"5.0n......CC1SR./.?".#.k.....+.:.A..9...R.L..1.bF.r.^. I2m....;..o.m.m....m.6.Z..m[Z.}...b'D......yw.mt..;h.....t... ..~...!..E/]........t...U.1.9...X.uNs......>}.."...\|........p...q:.C.9Y.].x...l1!pDb3.\e...J..F=.`tf......6..p..

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1402)
Category:	downloaded
Size (bytes):	135002
Entropy (8bit):	5.661621953529161
Encrypted:	false
SSDEEP:	3072:cPZKmtm7F33g5L5Yd5Ddo+g5EV+V4WonkjTcvlZAAdkNFxvQw07IiAM/sCp/zNKy:cPZKmtm7F33g5L5Yd5Ddo+g5EV+V4WoH
MD5:	05DC9201BA7F74BEF4DCF0CA02CE9E54
SHA1:	69F1743BA03C9664A27A103EAE9CDF836E4C3357
SHA-256:	45A7CCEB1CF052C252689AEB97BB7B40FBA6C2E602BFBE62EA22C616BBB2980A
SHA-512:	570069F392B3EEB9644E40DE51356488355E3A848B83D40D0E1BA45B229FB3BDAD24E47AEA7FD2BC9574EB777DF1BDBAA29A0099615E79F948D5A0B296FF6975
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,ojPjfd,tKHFxf,rpbmN"
Preview:	"use strict";_F_installCss("@media (max-height:732px){.vFondc .VfPpkd-P5QLlc{max-height:calc(100% - 32px)}}@media (min-height:732px){.vFondc .VfPpkd-P5QLlc{max-height:700px}}@media (-ms-high-contrast:active) and (min-height:732px),(-ms-high-contrast:none) and (min-height:732px){.vFondc .VfPpkd-wzTsW{align-items:stretch;height:auto}}.xoKNSc{margin:0 -24px;padding:0 40px}.Ud1OW{background-color:#e9f0fe}sentinel{}");.this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.mCa=_.A("vNKqzc",[_.Oj]);._.u("vNKqzc");.var T6b=class extends _.Eq{static Ja(){return{service:{view:_.tL}}}constructor(a){super(a.wa);this.re=a.service.view}H(a){(a=a.event.target)&&(a=a.getAttribute("href"))&&_.rL(this.re,a)}};_.V(T6b.prototype,"fAsfBd",function(){return this.H});_.rs(_.mCa,T6b);._.w();._.u("r0aiGd");._.sAb=_.wk("efhmcb");._.w();._.YKa=_.A("sJhETb",[]);._.aLa=_.A("fI4Vwc",[]);._.pN=function(a){a.getData("enableSkip").H(!1)&&_.be(a.el(),()=>!0)};._.u("fI4Vwc");.var vAb

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	5298
Entropy (8bit):	7.948762402090665
Encrypted:	false
SSDEEP:	96:wt7zIgs+Dfs6CrgUvOOBD9EA1j2uE5mY2et17KAEBae8AQPs1rdp0cpmeJ0:wRFodgEOsT3Yh1uF4e8A1ucTC
MD5:	B6D7404EDD22BF56596EA8D9DD923062
SHA1:	B735DE567505C7EC454D666F3475FC552A236742
SHA-256:	CF04A01ACD899385E6B767491C59E4BECC8F5148BBF327D54EC9EB9B83F5648F
SHA-512:	5D10D1C6373DECC0199091A990FBE6D5FBB8FD8D186A12F79A53C22378F8B0659D07CBE971A80414C754BABE744BA8A69D1C643ABF75DCEE4D732B86FBEE96EF
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..Gn.H..Ou`...$5.9.....y.6...(D...\|..q.N.....+3..'..3)I$.II....b..RbFl.G.Q...'.2...d... ..-.2.....n[.%U......u.7.mW..".w.......-....{=s.1.H.U+...[OqX!..L....I.]5.'.._.....WE.L....W.q)-...4.......D~P..RE....#@}W....#.@J)U..\...w=[.z....>`.!d.Y!..C\|.e.I...(_.49\l...2....r:.Q6`.Hr8N......u)..E46.HnN7.....%I..9..`h. L...N&.............ts.`..{..`l..............@.{........F{...H..-...G..`yHiZ.....2..$.\lq8n.H.......j.wDL..4...5...........I-....j.kC.\|...8........je...W...o...$..%...9g".F!.........9.;#.....7......_.b@.T..f..Z."....?.CEic.i....+..g..7.m..>..O.Z...z..=_.-:r...8.m.X.~.Hl..........Xv._qd.T.....=3afff.........333s2.L.Z..-.T..7...K.........Zy...B..zV...............{f+..[..6z.O.9.i..Y.t............. ...Or$I..Df....;.N..w..........1.!0..A..&U..5...c."..D.y.Pd..b.C..?%......K)c.....]..L.{..........r.2W.....@Y.v..4..g..l..H,.'.....u;.Q........l8j....l..9.<...a.p.."8h......K........+..T.cq....Ai....H<.O..B*....oE..C...

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2544
Entropy (8bit):	7.891775535822655
Encrypted:	false
SSDEEP:	48:ss55FpCT8U8Oba48YEXgXWnmdU5eoar5/GYSEwZK3aZ2TO5N:ss5oh8IL8ngmny8eDpGYSSK2Ob
MD5:	245FFD8BAF56F775D50CFA5C52B15A06
SHA1:	096D6C17A3B3B9EBBEC34D99986D219CC770D166
SHA-256:	158BC574F2905504BDFEFD8E199CE012011CCFB49635CD3E56B4FF94C3270D25
SHA-512:	F3F08D32E9FC6E6E6BBDA64020C4B795B27F5437E62B4157A5D653F9DA93471B058DF03DAE4AF8114779114FFEE36C7F2E754A79A2AE8B4E6962AC9806A07082
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M(h.......'.."....?!Me.... =q.i.D:3$=_/...T...\|.. ..m#.\|...CF......=A..?B....v.`.}..}.......7'..D.h:HJ4.q......$..i.4.m.....Pi.j.....m.m+....;D.J.N.h.9.....&.......[3Xk...\|...W..d6.:.U.#.C..N.#..../$rVM...N.v....$).<..$.._:..%.I..I......\|...3_.....m.([..Nr:..m.m.m.m.6.{l....u......u........._l.r..m.V.+w`;.U.s6..IR$.=.fw....?cfjM..m#.............lq1..gp......NA.L\.T<..Y.Y......k.....U.O..>.H.h..a.......X.4..I.jC0.\+..}..X.-..P...a.....5....D.t.U...R."#. ......\|.@iT..,xQ..n.Ry.....P...-NA...1P.F?...%....\|C.P;.3.!t.(...L"2.` .c5~iw...+...nh...E....V...`.p...D..4.............i/(..H..8.v.....T..x.".m<.j.....,...q[....e$..~...%..f......$@4...=./..5.}J../R.\|(.F2.._,G..........GJ3.@.A...h...r..%..q....s..Z..e.46.....#.MSrm.!.,...... ...x.-....g`D..D..g...$.?jY..b.P...........8vAkla....ky.. ..x..+.f.p.P9..e.........,.<.t.,...\.&....;..0\,.h....%.-L..{...!..P.....W...}..C...tcPp...B......3...a...voU..t.A.@2eZF......b...,........ .@.

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9974
Entropy (8bit):	7.969479858844765
Encrypted:	false
SSDEEP:	192:nz45Jy4YOKB5tvq5tbZNfyQCMcdFJcf4TWoY5FX6ZaQHHqGn:85JMb0LfVCZdF6ebnX
MD5:	F469161DCB6B428ED579066643E0FACC
SHA1:	06C807905D0264AA497FB2090A7EAA2F9838DACF
SHA-256:	F4A3A202AEF5AA38C9E2281BD8000312FBAC33F3F2576C92326921DFC126BCF4
SHA-512:	FF11D3FF7738202FF698922FE87CC85CF59D7497077B47B2C382A27347F973C632A4BFA506C5D1379DB9E237069AE07879CD2B4B056CD5101A7593104FBB0368
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw
Preview:	RIFF.&..WEBPVP8L.&../..?..X...m.=... ....Ag.......h.M..]..=9..`.b.ZK{.....Bd.<..%..2.{.n`f6.; ....Z...D.o.....j.....?.....5n"".I........23..\|........y=.....q..33..h.V.......$........}...+...e...C..gYE.....{ ...........w..d0..P.......!........t.{.......@....]........>.....v.0H`{=Y.$.....T..#5..>.ni.@@(Q....1...1.h,.O.n...,..!....A....]....V.:..m.H..}-....1.\|.Y.y..!.+.4...'v....$.M....`..p...s.]......X.m{-K.Zk........{?H.{...y1/.......ow...w..k.6..%...S.E!Z14...?... 4\Y.K.`1]..,$..!]..Kt....N....P.A....=.OA.Qo.P.s....\\.Ep....G.C...\.6.1........t..;.E.S8)....\|.>..@....m....I.I..YR..m...m.m.^z...W.1/j...hG...<k.2.?....3.>g.2&@K.m.&mN.Wf.....%Aq....YV....Y4.A. .B/....%#<..C....BY.......K_...h..C..vFK~z.G..>....C..(.....x....~.z."..C...ZY.\|...]..".!...2..1...m.H.$........\|..?........J..RkO...Qn...........k;7VP.xY........~O.,.7....d..r.,.B.Y.<S.B7J......a....a#....).nP...f......G\.@....Ax.!...\S;.]m.'..........n.....u......+.\I..

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	696
Entropy (8bit):	7.671310320036595
Encrypted:	false
SSDEEP:	12:mPXiJwvNPm1F+nu24710UPgizMQRBNt/Sh+1EBti7GhAp0P10Y:iiJwV6VFPg/Q3NtqQ2tYDsl
MD5:	04E23AC8DE78BD97B9094438AEA6E9FA
SHA1:	6B85504C01DC4265B88D22BC6CFFCA553DC368C8
SHA-256:	31652DBAD187570B093D34FD68C4A475CDD03F7C458C76A1D8321EC0EC518731
SHA-512:	6CBCEEF3FACBDE15473846A2514210236C89542A7E8CCDA6BB2DDA58024D54478F3739AFC6B20EA0D022A65FE0CB109B07EC01B1CC3109A4BEBB3755F2601BCB
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....).$GR........{.i@.$I....r..d<..p.I..d......5..&..2..."D@..I@..bIF..F...n.S........N.R7..{)..}...aM"0.?..$...$:.H...R'....I.P7Lm.CM2.rD0#$.$".0.0...g.H0..!.C.bd.0.......J?.d....s.+ 9..In5.~&....g.o.....D.@..,,.K.r.....O.X.C^.y>.^f._./dM..:L.t..7..m.\...%.6mk..m.m..m.....\k.=.~..+....~S6...O@.........O.......0E....7RQu..`&.IL..m.Z...qtzsW...;x..FD.Mm..mD.7...f...`"..Me.^.....L....]..._..c....Q.{;.J.QO\|..U=C.Z.+.!.3.@n-.[.$.jQ0,v9....._b.2......I........,-.....Q.>=T...B*g..9Q}.v.$...0............h.c.F.....'~9.L..&^t..y7'\<...#..3..TmS.Q.Nl.x......')....3a......W]...~'.bt.............m.z......xd........B...UN.A.>...^R.p.:...P..`..1

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	187116
Entropy (8bit):	7.989674958243787
Encrypted:	false
SSDEEP:	3072:wkcdGbyQVF/cW7NvzfeGAsl1h4zfai1j/drkZSsnaroTdP2Wm1Xw+Z9/3eTogOXv:2SDNxfFBl18yiJ/NkparoBeT1XzL/fiQ
MD5:	AB9C95719FFDEC8C51CEFC3A9E7E58F1
SHA1:	8456B445DA8080A253B5F162D503536F5EB10BA2
SHA-256:	5C373BC7E0DD60BB5A98A1C519FE274369C00A294CBA34D1E2D3B92DBFDC3D70
SHA-512:	B43A92C5A2E9BFED54B967CA134F19E83723B94AE321024DD1961A092349BEA7010426D07242639B9B6DDD0AD5225ABEF1908A7F8F17038D4BA250334504DB56
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.MP..6l...a.@..........O.$%.%)..y)...2ZJb)R.d.C^9..=.v.$.....'...w.}K4f..A...[.I.....Ibe..9.eet.....!..DzH"..m.K..3..D{...$.7.j[.....Hw.../..p.\|.........w]....u..].,.^.S.(!.e..J$..8$........m.$.]..2J....6...N.Q$?-...E".%'...9o;.-9.N.......v.[......J.y....z_..\ Q..{..t9...#@...i+.\|f#8..K....;)o....H.&I,z..O`E....!..m.!..A.z.,A.O.....7d...$..M..v..v.,.....<..N.8Q.....j..$y&N.(q,).,MR").Db-...?..%.HR.....?.g..%...zq.?..e.......'....C...-...O....(..@[.m......?.-.....@..[.....} H.D./......[_._...\|......S... .4r.@>.37.O.X......,.%..(I.%.....b......A~>.O?(I.E../~..@.mAt.t\|s.X..b&....@.4p.\|....<...%I.m5.........)."..Ng .. ..C.t....p.O..z#I....H..H..hwyo.]......:Mr.4E#...B.x.m[uc.J.}....KC.#.b23..;..X.Jf/f......H..0.t.G..Z.....9.n.V.+..X.....L.....RLD.H.S+.....att.f"EZ.(.....H.1L...!n.t. ...xG1)z.....IC..(.F...0. .AjR31..".....[.H.R..D.DDf""v.....P0`.........XE.0D3.!.....k.a..+V+.b.8..6)..^..{..f.R..X1 RL 0........`V.....R

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.13432744982287
Encrypted:	false
SSDEEP:	24:D76bBSjFvVdGUF+fWlp9SlTpXXW/clctloFHMZeKsf:H8yNAwlp6lmicnosk5
MD5:	CE070B0F37AAD4B4E4D88BD0E0F05F4C
SHA1:	FF566AEB9CC2716C836185D1F88A0FB4E19DAB90
SHA-256:	0F9DD240A0A865EE1EF94A10A67490A7908BC6EC3CFB1CBC803A1D143B38399F
SHA-512:	DB29ADAABB650CF2966BDA1CE171D8C54644A965464DF996DDA0F7F8D51944EBA1B0446623A8B268C1CADFC0265F95C305B4849FB35B6269053DB4A79BD85ADE
Malicious:	false
Reputation:	low
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1712908896069/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1712908896069,. "screenShareVersion": 1713258072750,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	7.574658091098493
Encrypted:	false
SSDEEP:	24:pl5ZWw96EdiCvH86u3kT8kfl42Q2BAQbOKgaQ:pl5ZWuRdiV6iilrRA4pFQ
MD5:	A09C4FC40A9C597CF2D7C3965850FA28
SHA1:	0A9E6F625E373CF509180F37011C1D2E10C09B14
SHA-256:	D04A1E303595F131CEA2D8FE94BAD1565E2F6080DF3AD5C8EE29F422A9A3C532
SHA-512:	4E420B90A57923C9457B4675AC528DEF236794559CDCE4A6C5002C9C24A526DCF15083BDD5A6DA10CB9C5F4B4250A33B2D5187D3D38492F8D06FB91D290B717C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw
Preview:	RIFFx...WEBPVP8X........?..?..VP8L0.../?....%....j%y....Z.m.m...].;...........^Z....]..R.{...T.)....y."..~.>.{...1.#.\......\.0..w?.^{2Wb.mg.....e....,....;......<...5...kw...3..LO..{j0.>...wg....c........Xe....9..@.....4~.x.A.t.C...g'........l.}..m.E..+........YK...h./...$ $U.q........<^m...n.@.\|.3Z..K......I.`....m...e.......3..p....x...Q.=`.. ..^@^..G.N}.u......lI..L.HE....6..Gd.t.vZ.)@g'i .u.y).R.E......2....Z?.1...34.p..V....9..?.8....C...y....D..r\:.<4..............E..A.q.p...hHM...........i...L.H;...[.=A...N.a.Z....c6..bNvX..E....<.......N...#.......uc.\|...@(.L.u..p`..k.\|.+....R....+......+..nf.JI.y...C..iYo...&.....6a^_"kf^5:. .. fQ.8X!.v.q`:..W....hZ...~......z......pk.L._..@....+e=b.^.....i..98%.P.Q..w...Y[_4.z.....(pH.......N..'.......+.XnH'.....^S...,......<.....6f.r....}/......ej...]........EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10942
Entropy (8bit):	7.957006422703397
Encrypted:	false
SSDEEP:	192:YMY2AuhnJ2aKIHabY9G9uEpaoIEtSvrb467R4n6x9yQ6+xne3rQ/QzyPlj5XwhX9:aQhJiU9G97Czb46V4nkLne3GRPlxOt
MD5:	50D7B3BFBBBE0D627C40710B7A50B3B2
SHA1:	9ACBDF856DCB7814FE77D55C69AC51C403C33322
SHA-256:	CAF84F0C4AEE337CB0DC13903528C599C9090739FC0A25DC887CB0897A2D2350
SHA-512:	68F9EA5F32A12C3CA045317AE82F9CFC6DA928EBD0C2BD69AE949F87AB7CCC4C260A9C78937A4FA8ED1544B3D1D5FF3E6482E3E4DA9A9D8C0ED1DF95E7D2A665
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8L.../..?..Fn#IQU5=@.......O....d\0K.b.../ .L.E.JW.].-.....J{.!.C.m.u.8.$5M5...$.SM...............p......6l......rcs#.$N.}...3/.~.9.$E.....^\|W....S...@.$...&\....S...$I.$_..5.q.X........6R.9.Q...8CQ.0.1~..#\.`.Ku.7.>../?.T....`.......%I....p.Ps..z$...(....U.2...\)......!.........#C@4.Z..[...P..u!c.......H........s.Ps.s.\...U>y....^.Qw.7Z..1......f........S..w~.....R...-.p...w~8_X.....5Mza....%\...e.@...D..,.B...@+.....ilF..........i...'........z.+.2+......z....H.O.....t.{t\|. .3.....@...q...N......7u.........j..n...-...b....V.e...l..so...#.S.s...D....Y.....A.W....?"+3.E.I..#).+(.C".6.I...JjSk..h.K..+(...[(..2.Ljei.v...Z....]P..C.tC...NH...o.$.2...E........{..-......k..P. )..4.."I..<.Y-;=>..;....p.....n..........].*.........9..I"..k..I.!.vLL$:G.p...P.hb.!:.....+...T....:.......W..j.{{.F..}.2;.]v...m....z.....F...v...w.g.G..J.<....Q..A....3.{...m#E......'......@.....p1..P"...:..Pp....\DW.Y...jX.T.c.....Xd[.E9.

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	13528
Entropy (8bit):	7.980890722978058
Encrypted:	false
SSDEEP:	192:5QAxwCZOYOiezE7GakTksZoo2CdmPWuyPyduJDx3iEjxPuBD4FoA1rwuLyEgdGfa:5+ttiezE7GVkcTmPuNx/jx6D4FoggT
MD5:	6EDD8C15A386648ADA9A1E14858128E7
SHA1:	95CDC4A11E3DF841575FA88EBE5C2C66A789500E
SHA-256:	22B76AB369CF9F12C901159F053C1BE0821B31C075760A15A7F4248FF9B270E1
SHA-512:	5FD73BB2B0B0D1D0AFE238359343E9AA25424E11BFA98E9BB59C04227BBD3221ABF1C62A1ED2E7D4E7CB7351E1F915B92768CD8A62D74419DF2EDA13FFC80C13
Malicious:	false
Reputation:	low
Preview:	RIFF.4..WEBPVP8L.4../..?..Fn.F..E......9.5....?..!-.".@C.B...p.$....p..U.8!......-G...K<H.l...... ..^d.K..G?....K/..9g... .hI..#=?u.G.mUU.r....2..i.....H.G........`I.q....$I..=-.O.....O.R.fI....GMh@.....I.$e..\|W5...N. ..@...^....X...V...U..u.6..Hb.40 .T.Xjo........d2.R.....P.%b...A.{).....]U.H...J.H..i....*.B_9o......@...c[...z....m...%....p..-.....ci.&.....K%.Q.X.p".S.9.T.........u.V..j...R<....:....x.....d(.l.9..q.I....{.....1..L.<.......+.Q....u.....pD/NLB..2Uk......Oc....m;U.p3.a.......W..9Q.....3o.q..k......Dw.d...C.l,..\.._..d..)-..i{.....BO .u.p..m.-{....\...n.6L........v.l.l. .+4.&.h.<..%..L ........c.5..E..4.#...9..3.;..;..z.e. .6m[.c...l.m.m.m..m.....k.O....m.Vy._...m{...3Cf.6C.m[..k...........l..1.j!....\..p..S.P]...`....L..s..?...i...v..3......h...d.b8t.I75..%z......zJ.N.....s8)8.../5l..8.......HaS.....Z.Z...M}..E.T.5.Q.U..F^zwA.$I.....D@.qx#.}.t......_.......c.4.....!N....../.TA...H.,.X....A..<..Q..U.....;..+...W

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10312
Entropy (8bit):	7.978077493567659
Encrypted:	false
SSDEEP:	192:ZZ9O0GzTQJx8I1hrBhBuYUgnORFf7Po/cLyipdDmRqLkBia7mkOJl4KzlRYu:VGY8I1hrJuZgwBkS1LMia7LmvZX
MD5:	48AEFD624535D25098B2666E195C478C
SHA1:	71FF016A958F1AF6B72BB2A7820CF4E0145FB86C
SHA-256:	478052D8E3A1A597646E36658A3634725534437AEE4C4037B16F5DE9120847A3
SHA-512:	80ECBCE481BB3070975E3F81B9C74D3214DF809AB8CD4ABE12D11F479D8186B3D01A826B070753A2C7F6C359AF6F94B20A2712BEF2DCDB52308C0DEB6B4897D0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw
Preview:	RIFF@(..WEBPVP8 4(.......(.(.>A..D.......(....p...\|0......>Yg..q................}.....Y..?.;Z.....o...;..........D...?r..}Y.../....._{?....o...}@...=.3.......9.[......s.../......e_.?/..\|!.....?.......?..q..........<t~.....././......e.O...w..........+.......?...........................7.W.?o....}.?_?...-.b.:..k.lXGT..}....d..v.4....1.Y_}{.j...((..R....uF.0.....JU..<~?....-.%...vPzt.9.c....}..Mr.... ....Wp._@.!..t.T....3\|..C-........O..7u..s"k.n...(.V..K..*a..^0.....x.....%6...G.....4.)....o...4R..K?.H$..B6...B.n.!.%..Z^.T.....o-.Z..../x.e..<n.Io....b...O..C...I`..Q.,4?.U...(w.;l..k..$.h.=i..Rq....]...F$.$..r......=.....oVW..........TKh.N........1.A..,g%.T......h.~...Tf...-_0R"[...F..H.SC....9T.h....?..w.P.........0...%o......7.-c..K&4...R.yB.<x...o......p.>.6 ....by[6#.:f...#........{...).......a[......1...z..&.$1.....[.S.......v..j....[:.9n3......)ii".N...+A.......G(.....nLZ.-...UX.@.a..~...#...)....K...5.,...'?..Z.^.b.O

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10446
Entropy (8bit):	7.973434706139166
Encrypted:	false
SSDEEP:	192:7QwfKpIhWYRfB0p0/aXDCIWV6p4nn9Oss74DNBQI5gA5BP59Q:7PKp5YlB0miXDpWEaletQBY
MD5:	4F18E2DEADB10D605A2F3F89F6B39AF8
SHA1:	C20F2CB04244CC8DAECF90EBFB65FD6D8DBE3CAF
SHA-256:	4BF44BE09670FB94B4DA7343EC5B090A4088069C97D083E787285D4204A98406
SHA-512:	7FDCC54703D9ED2B933415DBA3B02C1FEE84E2C0FEEA0223AEF5A7C2322555FE12E445EDA4A3617A8850790366AE8C0E80BD5C495CF7B68025E7B7B962352745
Malicious:	false
Reputation:	low
Preview:	RIFF.(..WEBPVP8X..............VP8L~(../..?.U....#.e.af..Vs.U%.K...\..Y.Y.f....f...Zf...f..f<[.{~..%=u..m.:(3.....23.J..l..C....13].2d.$.=G..df(..>.A.d..d..P.9.l. ........:G..0.B3(0F.'.....?0.....X..qIf..1.I...e.3.!....v.........{..@.x..`R.].?@g.\|#.-3.]..)C.&rV...Tffv]..l....M[[.6..._...y^\|Mf.Y.e..$...D1..6.D..@...M.C..l..&R.....$.m.3.nG.$A`...j..~.}..}..}...Z...u..#.................2....!.@F.@R.P...\%Zm.ZUu.U.c..B...h. 9YN...h.?....b.AM..1z..p...../g..P.....b...>..e....k..{..k......c....v.$h9..7...H..]..6....i..,B.IB..]i7..z../o)IF.....L ..P.dp..../.o.....d!J.]..C>.=.G....h.......o..g.8..3j...Xb.4.%2.7.yt......3...f..!\|j.Q..V..1..x..+.)....BY.j4.q..sU...O..I.9.A.WJ.....v.I'.....b[..6.h.XE..T-d...vJ.R..l73D.._.v58\.`NW..<.l.C?nb..%#.6.+..fw=..s.3pjK..i.8....K..Z......_v.v.Gr....Z..e._....a.".O...mjpx...b.=.R....e.k.J...=?-Qrk.\AWRx...y..sI.MeN.....$..6......O......`....md.1..n~l].Q. ..#.v..\[.o.m .*E."....I...m.6j.....).<w.`....V..a...

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 160, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6391
Entropy (8bit):	7.925576155945514
Encrypted:	false
SSDEEP:	96:yBOHH4i/VNQ9Z6PSWSzCjDXbh6LTzPAZTMu7EmBOTzB8rl3Y5/T1q04U6xjbM3M:97Q9Z6PSCfl6nzPMVBOfBE3GMp5jbqM
MD5:	BAEA015A2869C38653A857D46D227854
SHA1:	54D9F20EBE2369F3DE5FF260E5660F54A550A247
SHA-256:	B504DD0577136856D78114D514A13139F2D1FB8B05712787019A5D750C811A50
SHA-512:	92D1E731ACA8E1A9E3B9C48695246A941A9D2FBBCC0ACF699593946DFA4DBBF0B6D138EE371AA2A02F4298188AE749579687372DB0449B0EA8B912E2E02C4811
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............%O....SPLTE........................................................................YYYMMM...................iii333.............................!!!.........eee...}}}.........III...ppp%%%...www............mmm<<<BBB...+++(((..........???...666......FFFbbbRRR.........ttt......\\\.....999........UUU........^^^WWWOOO000.............```...yyy.~-y....tRNS.T...G...P.....s.;h........>IDATx...;O.`....8..!9.C'C..".....C.-..HMg..d.....(........yo.=+..b8H..7,..h.......J..R. ?.%../.tV...F.;..e5}82o......F.eqJ..bY...zY..Jc..".19.,....%..p..r...^Lg.K.y....h\|z'..>.......6.r&..f%.>Mx.LN.(.m...#...B....8p{z@y+F.......".Z.._......b.9./.$..].U9..0.-`+h}..,....b...~.<.X.2..r........]CWb.~w.!.....8l...Z.:50j...J.B+.6.g.A.B._.J.,.(T...8..... t.o.h..@.%..........t...;..r.t.t...tW......J?.7.$.(..z..8..v.A`..... .%n^P1E.LM+.....]gv.0%...y...p...g.....q.._E..o...T.Wih..r..L.\.....?y@..N..BJ@.@.X......3...z.V...&X.XNhY.U..R.^+..'Tp......K...Q

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	196724
Entropy (8bit):	5.1354044541422486
Encrypted:	false
SSDEEP:	1536:ejNyqUXiJc25xwftWJc6qTWLwQnQoAkSWZmT6ocTzVqJlOYQA33hodGWXTDvFz8y:8UXiSNtrXojt
MD5:	E904CA2E7AED586F525E59F7F859D238
SHA1:	BD50A1EA868373C2C069B7DE97E702D00805F3C7
SHA-256:	B2A5E50BC93A01B4DD987643CF8EF1E5C60CB32EF061025461B76936F4E0A49E
SHA-512:	48F3CA3190205CBFC51C06052A675506D39FB12FB2441372EBA59883837DFB9D62AD8702C08E88C75E48FC5A021852091BC2EEA6CD25557BF608981AA8B86B8C
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Preview:	@charset "UTF-8";#globalheader{all:unset}#globalheader html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#globalheader body{margin:0;padding:0}#globalheader ul,#globalheader ol,#globalheader li,#globalheader dl,#globalheader dt,#globalheader dd,#globalheader h1,#globalheader h2,#globalheader h3,#globalheader h4,#globalheader h5,#globalheader h6,#globalheader hgroup,#globalheader p,#globalheader blockquote,#globalheader figure,#globalheader form,#globalheader fieldset,#globalheader input,#globalheader legend,#globalheader pre,#globalheader abbr,#globalheader button{margin:0;padding:0}#globalheader pre,#globalheader code,#globalheader address,#globalheader caption,#globalheader th,#globalheader figcaption{font-size:1em;font-weight:400;font-style:normal}#globalheader fieldset,#globalheader iframe{border:0}#globalheader caption,#globalheader th{text-align:left}#globalheader table{border-collapse:collapse;border-spacing:0}#globalheader main,#globalheader summary,#globalheader det

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	18916
Entropy (8bit):	5.57265507591957
Encrypted:	false
SSDEEP:	384:kSDkYvZDeaDoS5vjYeU4Cy9uZJ+rRb1rK+UmFo8dYrcHdrATlEXMIApxFq6YqvQh:kSDkYxVjRjYeU64J+Vb1G+UmFoEYIHdD
MD5:	7FFD93211D5E3E2369393D251B4A8FEF
SHA1:	3D350DB7D1541EC5013FB0DACB62B54C0C93291D
SHA-256:	726AB7B33F13E29086438A288F4BA3072471BD4CD4FD3872411DECA978E55781
SHA-512:	1D800284785806E9CF75BDE8448CF261718E1C9B930B2BFDCB0ACFF9B00A4D93A2D43B14A34ECA74AAAEE3D7A9099320643606B6B770C8367A896B130A9240E7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,DRmmld,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RBsfwb,RMhBfe,RjJvI,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=GjTCAc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var kFb,lFb;var xFb=function(a,b,c,d,e,f,g,h,k,m,n,p,t,v,y,z,C,D,I,J,K){t=void 0===t?!0:t;a.open("div","EjA6Vc");a.ka(mFb\|\|(mFb=["jsshadow","","jsaction","jSjncc:FNFY6c;eUpBOd:pRhyN;OD2uJd:LSNysb;FBWqge:XzoRjc;PfPQGe:E9dKsb;KTLxtc:pXwq6c;r2ouV:FNFY6c;N4OFW:E9dKsb;G25Qzf:pXwq6c;JIbuQc:KY1IRb; keydown:KY1IRb; transitionend:H9K8kb;"]));a.ma("jscontroller","ZakeSe");k&&a.ma("jsname",k);a.ma("class","VfPpkd-Sx9Kwc"+(n?" VfPpkd-Sx9Kwc-OWXEXe-vOE8Lb":"")+(n&&!d?" VfPpkd-Sx9Kwc-OWXEXe-di8rgd-bN97Pc-QFlW2":"")+(p?" VfPpkd-IE5DDf-OWXEXe-uIDLbb":."")+(h?" "+h:""));a.ma("data-inject-content-controller",""+t);v&&a.ma("data-disable-esc-to-close",""+v);z&&a.ma("data-disable-back-to-close",""+z);y&&a.ma("data-disable-scrim-click-to-close",""+y);p&&a.ma("data-is-scrimless",""+p);_.Z(K)&&_.PN(a,_.fO(K));a.W();a.Aa("div","NPq7h");a.ka(nFb\|\|(nFb=["class","VfPpkd-wzTsW"]));a.W();if(d&&C\|\|d&&J\|\|C&&J)throw E

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,appscategoryview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6294
Entropy (8bit):	7.954888158150672
Encrypted:	false
SSDEEP:	192:xnRvykBNBHOY65EWYJRCLDT/lrQo+IHHctEQHG/B3M:xndycf65PI4vFQoJnctxHGBM
MD5:	71FA9F5920145BEDD3FD217312A23549
SHA1:	10FDC7F1BF0F4BC6BB15BB0EB30A81FF4478A2C0
SHA-256:	19554DF472C0CBBB8DDE007BD5E0E5F62463C2C8EAACD03DFD8FC6AFEE979F1D
SHA-512:	0D3064E2F8EC3FA479AE9399702DE593B0019CBE65BEAC92686A8DB296E4ED62F23C5916B0841199621DF9F179C09D7B99B365F6CDF3FD9DC1A8DE5128BAA704
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.,....$g.afl.h.............y>.......G....3..RY.s.S.......jT..3[....Z...E..D.ed.#s.8.jT...fn.V.n@E....].].0g......Z.........J........A.QEeP....r..QA.?.....'W.......(.....l.v.c....m.m.\|~.m.m.b..I....M...,...m.j....k.h.T.......=..i...9.....!\|.6g...?.........u.......g.....eF.l.^....M..~.=+.;L..g...,.8s....~...S?..5.1t..#..9#....S.C..,.'......$qk'94k.;~..hx...B.I..8^_t.=t..f........f.z=....jl.Dg.....W..e..u...<._.........d~..?&.]..2SZKK.a...}S<Nm:h.....x.6..{.,..j.Psv..%6...l...5x..\|.....M7.l)...]v.K.p..J.......PaL.-R..W.[.Yq..t[.b.Ujv.8....a...nRc.{,..ZZ.(\.+j..3.&...."....eOe.9.G..}...=%.8N..!.u.dg.....l1g...].W..kJ......3.o.7.%..\...yi...r0C..,..[.e.~,;.<xZ.K..K.;.i..7h.k......Uky.w..B....s.%k5......U2w.(.Ll..3.u4[."..+....yk....-.,.}.....B.}...6-0".mX.....0..O..,....f..q.XJl......,Y..]'..T...0..".... .B...s.%.YA.6...,....g.gm......_..XV..e.2...j.43.8..C"...M.2o....C:..(9....@..=..A.W.54;.....={..c.D.)t..8...B"..[..o1"

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10446
Entropy (8bit):	7.973434706139166
Encrypted:	false
SSDEEP:	192:7QwfKpIhWYRfB0p0/aXDCIWV6p4nn9Oss74DNBQI5gA5BP59Q:7PKp5YlB0miXDpWEaletQBY
MD5:	4F18E2DEADB10D605A2F3F89F6B39AF8
SHA1:	C20F2CB04244CC8DAECF90EBFB65FD6D8DBE3CAF
SHA-256:	4BF44BE09670FB94B4DA7343EC5B090A4088069C97D083E787285D4204A98406
SHA-512:	7FDCC54703D9ED2B933415DBA3B02C1FEE84E2C0FEEA0223AEF5A7C2322555FE12E445EDA4A3617A8850790366AE8C0E80BD5C495CF7B68025E7B7B962352745
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw
Preview:	RIFF.(..WEBPVP8X..............VP8L~(../..?.U....#.e.af..Vs.U%.K...\..Y.Y.f....f...Zf...f..f<[.{~..%=u..m.:(3.....23.J..l..C....13].2d.$.=G..df(..>.A.d..d..P.9.l. ........:G..0.B3(0F.'.....?0.....X..qIf..1.I...e.3.!....v.........{..@.x..`R.].?@g.\|#.-3.]..)C.&rV...Tffv]..l....M[[.6..._...y^\|Mf.Y.e..$...D1..6.D..@...M.C..l..&R.....$.m.3.nG.$A`...j..~.}..}..}...Z...u..#.................2....!.@F.@R.P...\%Zm.ZUu.U.c..B...h. 9YN...h.?....b.AM..1z..p...../g..P.....b...>..e....k..{..k......c....v.$h9..7...H..]..6....i..,B.IB..]i7..z../o)IF.....L ..P.dp..../.o.....d!J.]..C>.=.G....h.......o..g.8..3j...Xb.4.%2.7.yt......3...f..!\|j.Q..V..1..x..+.)....BY.j4.q..sU...O..I.9.A.WJ.....v.I'.....b[..6.h.XE..T-d...vJ.R..l73D.._.v58\.`NW..<.l.C?nb..%#.6.+..fw=..s.3pjK..i.8....K..Z......_v.v.Gr....Z..e._....a.".O...mjpx...b.=.R....e.k.J...=?-Qrk.\AWRx...y..sI.MeN.....$..6......O......`....md.1..n~l].Q. ..#.v..\[.o.m .*E."....I...m.6j.....).<w.`....V..a...

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	236
Entropy (8bit):	6.924370871583175
Encrypted:	false
SSDEEP:	6:UAi1ZmlxFiVJszmUx6jqxAE1nxbBLzCoxl2yrEIbfC6cczvG:Ud1Yl2VJYXAElLu3o9+aG
MD5:	8E8CE47D6A2FBCC618A05E4F65193BC1
SHA1:	247998D6FB96006AF9BF9E658E9395455C3C6574
SHA-256:	D03F68654B41460A62DE3EC476D411F984B188A2BA8933BD6119CD4D42F578C7
SHA-512:	F250A8059FC0F1498BE2416F56C77B41334673604F7161BF9BDBA47EF680035AFB0C6F9F7911451F029887D63AF5BFE8FAA36546643E44A395188A9477746B8B
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../.......m.A.....,.......F.2.....J._.m$E..o.CH...J#.j~$...(.E[x,.......PD.s.\|......7.R..UI..l...2..f..\|...T..}....}g...$I..w.......wD.'...\|.'.)v.i..7.O.p..9..'Pw.]...`4...Z.k.0...k.JH4....uV.@*)..K.........

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1494
Entropy (8bit):	7.855673114226291
Encrypted:	false
SSDEEP:	24:Hd5CJTJTAPUAME518c5CAyxmU2mqt2bkPRYoJ5WyAmzDBv4VA/Sps7oSXZ+dKvs7:HETAcAMLc5CFH2bt1txzDyV2Sp/SoEF+
MD5:	0C8023F37B95AA08269C9DD68B7FB3CB
SHA1:	74C8DA8823B9B49DB4804561CF98D8F09CB9F1A2
SHA-256:	3D4D89F4E5DCEF362E3730ECFCC66BF553BAE7AAA8E7A7AA169C93D0271BACF2
SHA-512:	A70850CBD44BEC4A775BF5CB8B14167A60F74ED6CBA261EF3C6B6B10E9299493F94F92698C546E6FE554DB75F1A0B2796E70E9B7D0346A728DA82768F2768199
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw
Preview:	RIFF....WEBPVP8L..../?....Em.@J...#.(D...8.H...I#.>...6..Y....,....`.m.......A....9..?..x..@..>s\|..x....x2....d...........m.{.>..]rRwww._...dN..C......t.g.../b......n.:EJ\|k...[ON.....Tg...Z..n.e.]........y..m.......vw....6.......{t.......N.Cg...)a...m..wL....]..e..8.4..8.).~]}`....9.Q\|;..3....v~/z..R._......;.L...E..J..Q..8)<.a....#_....A.\..$.(^+....4.._..:.D.k..,.?.?o.)K..Q/.....R...;..~....-a.h.B.8h.....y.\zt.5}G.0.d.,9d. ...x.,Y...../....dC.CYb..}.'.O....U.(.).QT-.l.U..A..z....M.'.....1,.l{.-.R..:..9......!.S./....T.r.^..XO...R5Y.J..S..0.K..&%.\.....Z..V.%z92.,..z7[..yk^.O..sd?.N....k.'e..f...{v.f.9.j..&......;....'.G..C......'......z.Es\|.:..^....._.K.S...].i%)#.S.X.h...cs}...;.>......q..{R.4.q...f.....Y....[$;..<}...o.+...:...l.D.Q$.Ha.P.(wz.j...g..'.9.:.T)E.<P.k..yCLL<@.2~\w.1...x....d..s.!.F..k..B..2O.B...Q,....,a.V.....n/...@....O...3... ..2....<.........V(.....8P!.}}YU....S...R.1...+..0..3'.zy.s...J.^./L.x...h....2<..A.....-..

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34807)
Category:	downloaded
Size (bytes):	980080
Entropy (8bit):	5.672658813850526
Encrypted:	false
SSDEEP:	24576:pLFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmk:pLFI80BM4gxA3svhhuRrBiFpAv6DbgW6
MD5:	AE18B3BB7064D0485CC5D985D77E19BD
SHA1:	A74958DAC14D604334E792E09B55FE696E5A886F
SHA-256:	CDD8E31E6B624D02461CA40F6637B55FBA51D4585F2F623647BE4417DDE53492
SHA-512:	3DA01CC473AF9F1BCEE09ECC8C09B3643CB9BE3F905F9A4398C599F3CEEE7FA8741C3329FCD0AAA13B4FC90D8F915F7B01E2FB206DEAB6E8776C7C9CAF49991E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,fl2Zj,vrGZEc,wW2D8b,j9sf1,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	6.652039563662075
Encrypted:	false
SSDEEP:	3:ylygn1ZrglllvDaar9Slk9CD3Ilg8KelO4RkU96ysDoh2fn1ZMnsciE6mELl:yoi1Z0ljBrik948KqbbsTE2
MD5:	AD34BDD5D36590117E30C0EC47FC8837
SHA1:	D657298B669EFA1F9694DCEB185E3BE8D486FA56
SHA-256:	0F00E48098A405453027CEC5CAA6E2F64C539F0906EED42C2B1102FB6320816C
SHA-512:	D8FB990CFD46450BBB3D94655DB2A81ACBFE0A409B60583AE1900727774727D6D12AF417D347F396D1F8B7BE4ACF8F0FE0E074515BDC5308A7790E920776F779
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/bRfIm6ZoVTb59C0VtTs9Z8XOmUq6kowkPLMBK5CZZwIT8wSjbkvnF9tzkqykImW_P4F1q27PIjs=s24-rw
Preview:	RIFF....WEBPVP8L..../...._..m.(...._y.i.&.J...a...m...y.&n.m..EU.c.......t......`...C...H......%.s....S......v...vS...[....z....<6._H.-...T...0...

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	194
Entropy (8bit):	6.777928192792645
Encrypted:	false
SSDEEP:	6:8Zgxlhoqb+bM8uFqgrBk1uW4spTAw/SOrfCdx:8eThoKJ1FgAUUiu3
MD5:	79E453B72F3470B2C8171356409CAB1E
SHA1:	26A9FD1736BD5899035606756CC61A86C6B0913D
SHA-256:	5E20B59F35EEBDEBEDA7DDA606EE21DB6907A544EB5B82181A9DB787EA9BBC57
SHA-512:	9145DF93042A0FA21305A9818DBB5198FF2ABB57EAE8E7D3A4DB8D8EBCDE4FF2FDD4B8185D8E98500EE3DAC456FFB5D80A8600CA90CD1CA5C345C8E58DCBD819
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw
Preview:	RIFF....WEBPVP8L..../......l.=...$C$-W`......m..U<.C..'..o....$h......i?N........$..#..M].\]S...NDU........=..Y.d.Or.I.....GnO\.........3.../.'.w.LUf<..&S....Oki..Ir...'j...iA.o.....

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	138
Entropy (8bit):	6.457985054525866
Encrypted:	false
SSDEEP:	3:UZrRK3DZArJWrS23uVU+ZiDboiby9jeunPwRGhiTD0bNl2L38JSh:UZY3DZAV52eVUMilyaunPkGV3K3YQ
MD5:	B31F640C5ED25981848A55D76C333074
SHA1:	E0C7DD7DE571B4D40028FDE7D3305C8733F56AD3
SHA-256:	57630A90CF10246CF4D8C16962BF1EDC70E9EFED50B1483A7F2DACD83FE915D6
SHA-512:	2311126ABB131056664012FC31BA39AAB9B80D2A210A8861750553387BFD8E60B24941D31082597C05F5CB9CA7B37FC98446B51292AF95C0B4CF5BFFF2DF2BA0
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ELKhrJ7hv6iWk1rEBNgrzxEpc0cHXmWbyvwtoXxT3lWAz9h6cuBEjEgw3fhf4HD5VqbrLhTgj2g=s24-rw
Preview:	RIFF....WEBPVP8Lv.../....O...$..%..T....l$A.R...*h.....587f..TZ.Jl.w......:<.....1`.IV..B.w4$!.z....=.....W.f...(.......A.J,..VV..

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9990
Entropy (8bit):	7.964763181222116
Encrypted:	false
SSDEEP:	192:5FwLEVi+Ir5AkxUUgJ78hdL1JBK7n/kp36JIIx0OoYDDifrlYepwrukCIA:I3+InWUg9EhJk7/kp66+0TKDifrlYepx
MD5:	04D389A4467BA76AE8C0623AC9BEA07F
SHA1:	2A12DFF7CC279729B8D0AC71BF552A6A9A58250B
SHA-256:	7D9F877546306975C24D6A72B65B3F4B31816D8712735796D0BBC159DE49FD9F
SHA-512:	E36617ECCAA6F6D069B6AA2DD71D7AEC81F10D13596FC70A9CF707AE8EE3F5F59992966F5AC361AFDE89DA164005086FBA41F7C7280D9900FE7C09D520EA7A2B
Malicious:	false
Reputation:	low
Preview:	RIFF.&..WEBPVP8L.&../..?..X...mj...X....!.v...........1.s1...w...b.q.t...1....[..+RmeF1/.f..F...cS.5.t>.e............7)..}...d\]...D...p.\.Z...v.....~..m$..............F.IJ6.C.P..?....m$IN..DX...QPX......').x..1C.2sq.Xx:.\.\...7s...8..v..p.ff6...jf...1P6.P...t..Ap.O...f603gk.c....L(a.L.GR..F.7Ao...&..RF...9.U.tq8n.H.......c........Zk.?.n.r..m..].t...+w..iy...tn`........M...]...k.v....i..Z.........V..Zk..=..c.9..E........U...a..z.#pS.+..E7...'f.S..}l.~..k}..j.j.;.#.V................Ue.....b.Q.[FFL.....7.m.......b.....\P..!8..9H.d7l.5._.... .....}...c.7s.^..ef.afff...{..2.33..K.f.33.=>..S&.....~...;.#k.Q...G.j........;....N.:U..03.......6.l.V.5k].pw(R.....{....SJ..=....Z..R............J.r:zJ......p....pw.-._.G.,...o.m$..^......m{..l.l+q...tBQ\.._pB....~...A..$C..:...../.....g'.=.#.SA...;.3.j.pD.rt.....:...:(....3.w..+}.>(.Tv._...r.(.6^W.KA.......6E..U.'v..]-......`7..Y.8......f.W.....* .U.Q...e..q%.@`..r...}...R.S..Wy..=.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8002
Entropy (8bit):	7.975426170230245
Encrypted:	false
SSDEEP:	192:vaaEAeVeRaAQ5EWBzi1xR9lOSJskldqfI8KACyvEPUjPKB:NseRd6Ewzi1vJrdqvqGEsDKB
MD5:	856140824C7B8F250834759E1EF8421B
SHA1:	BCA87B45A030069D4A4418D6537448C06107A38A
SHA-256:	DC3A0E35C1514F143B94271F958255001A5954A7F63179109A2A16BC382537F7
SHA-512:	F4BE351A2013EC730668798DCD81DDABDB4D7DB56E21BD08A6024504B2C77A85437BA4F9F89259E6FA2622BB305AE7B2AE339A6E63000CC8CFB90803D0A44E78
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw
Preview:	RIFF:...WEBPVP8L-.../?...M(l..!.KjD........y..ff..)7.D.H`....Pt...$E}w.._.`f.....$Em...{...?..[.b.6....{\|.3.........\|#~`$......].#...NB.<.].C.!5.4.....s..HCM.....<>.o5.$z...Z#.e...=.[T^lS.yB.....$......+=.....{iV.P....C!"..&y.i6.j...-.....3s..#U$.].af(..3...+T...c...2.B>u.n....mo....f;...x<..FZ.A.w)gU.V........W..a...-].33..e....m[........f..1Hi...6(..(.-..c..-t.v.&....?y...km..r~....].v..J-nf...8cfffffff.a<..x...b.m...7..3....TR.L!G.,.J...`.S...f...}.fF...3..>d.L.,..n.e.....v(S:.)3..`0.u.......m.!I..~.......Y.j.m.m.....w..#....{.4].Y.....m.[g.6.Z.JIf.0.9........0'./fff..03.u..r.6..e...^+r.zr.#A..$....@..[..P...A$A.....ph....\C.......8..S.....sx..`....N..w....K..>........Q.w`....p`....rb. ....jx,~...l46Y....).eI.....N,...uI.EO......o^.K....^...)..."Y\..9Z....... .2..X.n..J.D....s..A.......>....6....%..^....Q...s..&L>-..D8..w...l...N:.=>...y.)l pSq.A/.z.;B...*$....FQH.TFGss.~.......;.}...g.......D4f.gs....!..S.W.;..oz.E.{......~..{~....Q

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3008
Entropy (8bit):	7.926057879000394
Encrypted:	false
SSDEEP:	48:2gx9k+wslq4eVo2DMgnG5WdpvsqjvL8bgw33dsbhTKayGlGOu1PE/:2gxGKE46oqG5sEqjgbgG3UhtyGEJs
MD5:	E4B704C1858279E8A36F96DA4D88A4F3
SHA1:	AAA8A2F1617FE294FEE71879A6014A5078DF71DF
SHA-256:	F0A7A3B74E026E51F2102FC58905CAE03ADA02331BD673F7519A77EEF73A1282
SHA-512:	AFFC2F4AC891FB123811754765A730E7A095A74904C7770BF445D22DDA4F9031217C4E20718D4C208CF1AD24E27A59EBB00980301BA8F43C01C31B1B29A55CB1
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..P.6..._.1.+"&...4....[.lE...F..."......)o..y<7.ms...=....z.=.m.m;9g.W.....JiW.X9.r.:.l].!$.....t6&v..W.......].J..j.{.1..s.9'...-6..m...+.NF.m.....8._l.6.j..m.m......?..?.rk.Z.....L.k...........Jp._....bG.=..L.......\.f.....9S.m.A...........WO..!....f..R..[Uvik.,...k....8...$.........y....K....E.M.6.H0c<....?.d6w.k......).{..i...=..?.2.c..^s.V..~7J/n3..x..Q.S..`.K...E...@...A..AY..#..c..Y..}......N.H.T..Ez.F9..fs.E...)...J...=...).E.....'..Y.\.;..wh.G.v. /...m...O.x..:Z.m.....]@.wj.L.8R9.....9.P...4.........#.^<.....d...aQ..I..^2w.J...u.a....k/$..).G.;g...g..k2..\w...d{....C.^.S.1..m../..>....... ...U0..\|......!.#...l.\|...1 $._H.5....2.Fo.V.}..K.g..ta.V.W...B.......q......r...C1....V0.F....n.\."C.5"..........Z.Z..Z$n.....J.Co..q~.`..8..._..P}I........6G.X#..{...yw....N.#96`.+......Mw&..O.n..<.5..i).AR%..Y=..s.8.._w2.A..D......Zs.X.l.8.).N#.hZ...'...K..q.K.i..t...I...'!.`zqQE.....+Y.tK.( NR..x/.*..t..SK

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	458
Entropy (8bit):	7.061920474186539
Encrypted:	false
SSDEEP:	12:3JcWXSom7OiRJNOtqnZBLWsssssssssssssdijHjGBaEgl4:i+SJOWXOtqjWsssssssssssssMHjGBae
MD5:	6C38690E2D4AC20F2352EC9A67FA13AC
SHA1:	FD9961AB0FF195148F4E1DCFC66A4CBCCF1E2664
SHA-256:	79BF41F2F5C98680409453FE1E5557141994107B9CB35126237A9A6E3BECE001
SHA-512:	959D76FF67256F3A1470C00A0127424A9839A3C7D43B70314B217EBD2AD6EC9F4C546F63949E822628A0A9C93E9A542C920655E5F6269F3950510257BC9D41FC
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.7.........!..?...i....{.v.A.....$.I..U*.Hx.2.7......2......X..&..na.C....@..d..GA..e}.l..... .v.6P....\...:%..S...O@.......\|.>lZ/.g...k3k..A..w.Z..X=....M!R..u.B.f..%.a..NQ...Z.(..c.Bt.3..:v.B..u.B\|Z.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.(d.B.($...\|.>S..Y....av..p]..{5..tu...\.......;]].)...\.............w...\|............s...yfw%..g.Y..{......T..K....<..k.......3[..K(..7G.cs.~Z.......

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3812
Entropy (8bit):	7.922451062209362
Encrypted:	false
SSDEEP:	96:sx3SGYzpNuTh2qDNrGXbgQZHYYh+ITpWXdBYM7bKWY+:sx3SDp8CXbgJYh+xBYAY+
MD5:	3C50577E74966837BE535CFA1BB62E38
SHA1:	DF35010A655CBF896DC5F592C1656410CB83DD63
SHA-256:	9C960DB00934C89DE1A7BE6931C972CB67E9E20C07462A7C870CB93943AB8BE0
SHA-512:	BD86FF5C590F1603E32238D0DB6F7CB17B8C1A46AA78177296D8F6359B3DD73605ABD72EB4BC34A49BF3AB6548947540ABA62E429AE8E428FB6CE67E2C465340
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.M8r.F...f............M?6.n...`]..c....Lp2.;0.$.Y......v.^J.v.....&^...KaGT......m.v.1....z....SX$n..h.._7<\|...H.......K...).?..G.[g.3......0@L...z..z..m.@......)...wa. .9....j....z..$..o..;.B...M.!.vR...0......tV...)...V......^..&.e...z4=.L..d6....[..?....^{7........]......Je...C......R...rW5N3.....K.UR<........[....7.m.V.QX#H..UZ.Lz.....N...}.#..m..\|r.^.......(....vL..\|.......?p.....[.......yo.Q.....&.....v..o......f.WtO.7...Vf..i.).[I.J.v..?./.z.y/{..\..!....+.:.{o.+..]..."\......T........U....S.zD-.......\|..\|.E.......v..$i.....lY.V.I.\......(b.bEQ!5G...].K...Z.f.=.4..s.[WY..i..T.l....kz?......RH.e......$.D...C.i ......n..A.S.P.i:.....ai4......s.e..C.(..>.i...@i.i....".....H.HR`.H.W.BN.=..9z......\Y.sE.;q.P...5i..20:.G.H..tvy.,..kT.........O....2&...i.6.I.!....x.7...8v.$.C3=...r...r.>pC...q%*Q..M.qA`.....k..8..6..43T#..f..7.....y..r[tT.R.k.\,..Fa`.@Hn\..&s.z7&..7.CM......4..@........GQ.n%...4<.+2

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 109628, version 1.0
Category:	downloaded
Size (bytes):	109628
Entropy (8bit):	7.997834372736158
Encrypted:	true
SSDEEP:	3072:I/PVzzcH7zULTR9S41qKYgEtXD/PhU/ffXEMY96gYGWPrInVe:+PlLd9N1qjxhYcZW84
MD5:	67A9B38ABD1F9F80D5ED943760F1C1E6
SHA1:	9C646D28E62FCF3C4A1ECF7043632FAE3DEA6270
SHA-256:	8D73261B2DB18AF30E93ACBC8E8591E0784706FC283C37C465F92012256757D2
SHA-512:	A479BB307B03F74202B24E95D85085E8855C48713E443F5EAE0CABD077D45282F8765BCD6D36733AC336504E1AE1B1C3CA3BB41A428F8A240EE7E7B91FAB39B8
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_semibold.woff2
Preview:	wOF2.......<......xd..................................H.`H...X...4....6.$..$..(.. ?meta.#..`. 8.t[.w...O.....m...ElU6......#..@dc..~.....1D'I@=h...3.m...................w'.H....^....P.P. .("...Y.K..4...i..R..Y.WH1..27..b..J.N.....C.C..'.h...{.f.8.2K9...[&...i/>b_8@..yX..q..=Qw=.......\Li.t..Q.....`Ov1.i.y............q..4#.(a.7...A8n.\|b...{o...Q.0}w.CL..ft...M.b...p...(.s....19...L....l...k.KJ6n...7....FZt....\|oc.n=l......5~!p.1...SOX.+.dn....Be.s..}.T..'.......4y2....,u..+U..]..~~.$..O...z....r.dEg.......<..yN%Q%8}...a.qu..]M...zcGwY...q.!#..,..4......n.X.W..B..s...i...B.`.DD"..b........c1....24w..\G.p....~.4.....M.^x.W.......[.CbS..b4.Q.c..N.."..._....t.-...F...q 'W.O..I......MjBX......?.nF......Ih.y..b.P.S..A..H..l.v}d.m..~...7.<.?..../...,$.).m&.."Tw....?.v..m..k>;v.Hf...c..."k......$;....Z...../{.........K.~."cXa..aQf.6[.U....>...d...P....j.diUI.'1...{.w6w.%.P..U....m.X..).%..K.......Z.Pr.2."...66`#kd.....U...E{.U}..^{..._..;..W).

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6193)
Category:	downloaded
Size (bytes):	836101
Entropy (8bit):	5.635644956594944
Encrypted:	false
SSDEEP:	24576:2LFI80BM4gxA3svhhuRrBiFpAv6DbgW1e9Y3YM3Oxb2g2rN592vlM2UUWXumlqmq:2LFI80BM4gxA3svhhuRrBiFpAv6DbgWM
MD5:	DFF45C1FAF7F2B6A4C853ADA5D8EF6DF
SHA1:	DD8D88E37A5E78300E470BF28B41DD9E8D5F4B83
SHA-256:	84B6206ABBDFD99098C2E7238E186C1C7455D11C505D9F3D7A3FE7B147B5399A
SHA-512:	C8CF1100F147040A8D6D3690067B66A88E83A690D84DBDD2BCE9225416492DFFE7B30FE0CD5CDF414D04ACB761ED1827A6E286550114C658E0182B30D1911245
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,fPcQoe,vrGZEc,TSrO,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 648x364, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	21244
Entropy (8bit):	7.98833258384387
Encrypted:	false
SSDEEP:	384:APzfxTOmFE4w5KxW2ALrGTGa352Rbag9F4gKBo6834AqAj:gFE4xNALrGkR2g9F4gKi683rqQ
MD5:	03B1DC5DEF3A03B3B513FDD42B8F44E3
SHA1:	DA9BE9F8AA07196AB9D43BC9F86EEC8D4D2CDF03
SHA-256:	1D34D1F432B486C70B71E5ED7A74C054BF2EE85F74CE00C5C2954204C340C82C
SHA-512:	60CC6D3D5D953968BC01A503CD5E28D4D6BE32B3B55D5D1EA19F55DE9DC163CE2DE98E6836A04F3618918C7A48F8866C35B09B7704470256394A96DB3935D01B
Malicious:	false
Reputation:	low
Preview:	RIFF.R..WEBPVP8 .R...B.....l.>A..D.....D.(.....H..l..#......o...K.....?.Y-.6/6.s...?..?........w..j?.?.{........#..........{~....f...g.../._._-..?g...t.].............}.......?....u.......O..H.......U.....w...?..?.@?........./1?a.q..O..#.7._2.\|......K....?..E.O.....g...{..?...}.?.................,...c...q.....o..._+.....M......_......8...[.?..}....o........$ q..ZUU..n-..q7..Uj...J..\M.UZ.&...T....t.b...q7..Uj...J..FV..B..O.P..x..J.M/....CO.X.:[~Y.SHm...6...i....Q&.\|.UW........~...5.....m.f..U......f.K9.;j..f.Y`O..Mr?..O.I..^MliiFI).>...o._$..m....v...I...Fk3...-s.$.....T.v........H....O.yh......V;....sEd.F....$.vf.L..T....1.W~.[j5....Ut..:.....0....A.:iV.S.p....5..n?.x..,.Z.Y.M..P........5...{5b...:\|...$...}\|,3Q...{....n..p.....fEz...1.....h+..R.....l.{.z.@.m.z..`M...,..ay...m;N_...7...;...!&M.]......qiR......b.....$L....pr...^..s..;Q.....j.h.z..u0.PB...N..;.i..^9...5R...m..`j.<.:q.a.PdI............I........U..{..`+a../....SL.3.8..Z.:

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9308
Entropy (8bit):	7.974353499824232
Encrypted:	false
SSDEEP:	192:zDg0G2sR8LUmyGDrhXiK2dyteRImDFdLjL1V/0LrSKag:zvGfml5sdzVxdZ+LrSKag
MD5:	996537520A738869CB05986E447E410B
SHA1:	F5BEEB6371D2D6B030E282E31C61AAC9BCD9C835
SHA-256:	8C66F387C174CA6F3990FA128B3F70202A7C52FCC677E0FFB5927A7824E241ED
SHA-512:	5BC3557C167FE06E4D19F3D671D00CE5DEFDB75FAEA6DEA5DC2EA97F82117952C4B9241B4516BD19E3CA758EA70F01EDFDF3FF738642972EA9280EA8CEA97C4F
Malicious:	false
Reputation:	low
Preview:	RIFFT$..WEBPVP8LH$../..?.M8r.F..r....3Y....O..\|..1........jH-Z.N...b..H....+.o7..v.Y....1....cH..&$%.~.xZ.....8.$In......>.....4..6u_s..$.q$.J.8KB8a..$......mY........T..r.e.....@.l...7. ..`g/]+..D..:{Iz ....vY.. >...=.......KCD@..\|R..!.Zcy.1...D...4B+.YD@...../....A..h.p.Y@.i.){ID.D...d1].#R>./$ "..7.4K.&.!Y/Y.o.8.]..#"J.D..m7"....."i..)...).L!.Mh#{...4..I......@. ....h.5..@D.......2e.{R...!..s\|c..'...I.?........X.i~)./..:JS...%.hW.....M7.....4ehe@.8A.....c..lg..........qm..,.Jd......2...L...s.....\#...../+u...~.B<O....7k.aB..;.$..m+...._.%.BH...?p.E......999..q...$.a#I.{w6AK ..........W.HRDd..2..v..........v..w_`..w.......l..N...y.I.2.uY.....64....3.!{:....b.mi.B.x...Xr...6..+..m...s..'...m.m.m.m..JR...{.$IR.X...^.03le..v..\|..6./f..tNw.D.V.F7..!.A@.....'...8.?N...y..?...8...9...?{.7+%.S).g...Mk....`x...f...z........s.n..G...S?v.._.9p...lT.....],.Q\|.Y<`egf^..P....?.@.............d%.....).w..{......r.Bi...p....9.C...3V.."......[...W.\~98.'

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1015)
Category:	downloaded
Size (bytes):	917113
Entropy (8bit):	5.3953864921990276
Encrypted:	false
SSDEEP:	6144:diNd6M1EGJzy7bbOUn8o/L0Kl21E7+oTuOCsPdqWuTjebERuo9qixj9qDNixjaP/:8Nd6eEGJzYbaUnl/Lpk1E7oc+HCXPUBG
MD5:	F7E4F0D782AA7D65A28B01A77784BD23
SHA1:	56AAE8C1E7957107737AC7ACDEEF5336C3CA0138
SHA-256:	4784F949156E9BEAB6C6D15D0448D9C157B37B71F6346583DD0BE5EC2ECF81D3
SHA-512:	7063C09C681202DA288CBF8C4E71B5FC565E6BE537CA0CEBF68F3F9E74356E86FA66AA5BB3DFC861E3C76AB08001B343248344FD21E223A647C4AE668448CF50
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/vendor-f7831efc0f48f466cf3b635d969ac06a.js
Preview:	window.EmberENV=function(e,t){for(var r in t)e[r]=t[r].return e}(window.EmberENV\|\|{},{FEATURES:{},EXTEND_PROTOTYPES:{Date:!1},_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!1,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0}).var loader,define,requireModule,require,requirejs,runningTests=!1;(function(e){"use strict".function t(){var e=Object.create(null).return e.__=void 0,delete e.__,e}var r={loader:loader,define:define,requireModule:requireModule,require:require,requirejs:requirejs}.requirejs=require=requireModule=function(e){for(var t=[],r=c(e,"(require)",t),n=t.length-1;n>=0;n--)t[n].exports().return r.module.exports},loader={noConflict:function(t){var n,i.for(n in t)t.hasOwnProperty(n)&&r.hasOwnProperty(n)&&(i=t[n],e[i]=e[n],e[n]=r[n])},makeDefaultExport:!0}.var n=t(),i=(t(),0).function o(e){throw new Error("an unsupported module was defined, expected `define(id, deps, module)` instead got: `"+e+"` arguments to define`")}var a=["require","exports","module"].

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1842
Entropy (8bit):	7.8686931658333075
Encrypted:	false
SSDEEP:	48:V2aRqmpBIf+hVY/OTAjZOFbIPvWnEsluViRF68tU:gBfBQovWE3VM4r
MD5:	12DA10D9CC422A583E8809CAAE6171F7
SHA1:	CFA6A1A5369C69D86232267DD887F58809EA2F4B
SHA-256:	A7E96A2C96F56C0F4BD44A1EF8466C697A90D773B8B0B7612B3653BB4D205CA2
SHA-512:	0B6BE79311C3433AE242CB4CC3D818F0408DD3092BB2D1E28D8EEA6605E7D98D7CDE0980620A345BF337BCAC10F90175BF14F18E4C0FB981F79E131ED5EECB0C
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw
Preview:	RIFF...WEBPVP8L..../..?..=...m>.%..{..w.......j.N.le..u..xr.Z=..>....F... .....r.%.j...%....~..nG...../._M..........k.tG....3q.`.....:....i#......v...-..1.._...@..U..Jn....w9@..Sq...F..}...y.Tc.0?{...W9/.....J%7..c..+..u...1./."....A);............e.8u\yg.11...........N^)..}A..L.h...:,...c.H.Y.?.a,9_X".g....e.b..7..#}.JM...@..}..>.7...\.L..Y..,.}... b\|&[Z!Y.=..kQ~%!.9......2q9i....l..X....1]...Srak."..rr..Vg.......?.uZ.x..H.Gt.....\|.@..A."#.e.Gt.%.d.`A..5...-vY..1...@...x...-.....$...........@/l.t-...0.\..(b`..K.C.g..X..Y..1...t.......^=....q....}..]....j..\".........#...}.....E.y7t\.........dVr.d.q.w...o.......\|>.M....v..}..a^...../..um?X.Wm...c.N.f.W..V}..K....1.-TI..]p8=..b.H.5.....u.o.1f..%..\|.......b8.L.&.6. .iu....pb6s.Z'.g.{F..o.1b.e.5b8.......m#.d.g.{).{Z...e0K.t2.8..k..Q..C..<N.X... 4.z..#G.-....Z.'....`...}A...B..6h......!).. \|..w..&%.......7m.fI.v..[.7...+G...@....{?.:.S.&Pn..\|..P..E.Q].....3............nt.DX..\dA...N^.,j.[.

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/store/images/regionflags/us.png
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (527)
Category:	downloaded
Size (bytes):	979
Entropy (8bit):	5.28398324106872
Encrypted:	false
SSDEEP:	12:kRZTFAJ7k3qCF/AfzZ1BS/NC1Fnvxym4mTAooIusuwvY7V6sijk9g1rggRkbRN20:kzOuFeHBS/sv4pyXCspQ7Vvijk96Krl
MD5:	B216CAE936727A2792F21512DC1B205A
SHA1:	9C1EC44C2338C43A5C3230DAF4594DF98998D507
SHA-256:	DEA4AB42996A71AF247B77D8E495190A19D6BB38F19A90CC7C93702EAEAC6644
SHA-512:	2B8C70C1FFEBF713976D098C3CD1172EFD831C0894DACF40B37F7E71A37C92CE9D9A0AB9547CE25C26E593A278D6BDFB4CEB5352EC4E125009E55094428B17D0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,tucRse,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=qAKInc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("qAKInc");.var Pwb=_.A("qAKInc");var $T=class extends _.Eq{constructor(a){super(a.wa);this.H=this.getData("active").Sc(!1);this.O=this.Va("vyyg5");this.na=_.hn(_.jn(this).Ce().Nb(function(){var b=this.oa();this.H?b.Eb("qs41qe"):b.Eb("sf4e6b");this.H&&this.O.Cd(b.getData("loadingmessage").string(""));this.H\|\|setTimeout(this.ha.bind(this),500)}))}isActive(){return this.H}qa(a){var b=a.data.ey;switch(a.data.name){case "data-active":this.H="true"==b,this.na()}}ha(){_.hn(_.jn(this).Nb(()=>{var a=this.oa();a.Xb("sf4e6b")&&(a.Fb("sf4e6b"),.this.H\|\|a.Fb("qs41qe"),this.O.Cd(""),this.Wa(_.Ak))}))()}};_.V($T.prototype,"kWijWc",function(){return this.ha});_.V($T.prototype,"dyRcpb",function(){return this.qa});_.V($T.prototype,"qs41qe",function(){return this.isActive});_.rs(Pwb,$T);._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	5.248046245100501
Encrypted:	false
SSDEEP:	6:kRZzRxVvn0kWq/Ax8G/QVf1Fp8DckwdMwQRaNw6JpyxZRNlad0:kRZTFwH/Af1Fp8idRkbRN20
MD5:	E193D6BB8BBBE4641E700622CD059B58
SHA1:	56292548B2AC47306F5C2D8230CCE63F07B25C17
SHA-256:	DCDBD55070BA6F818B59C74031AE43C747E8B367C9680DFB0BC614BFB0CBD84B
SHA-512:	EAABC082F0D27D888D117D35D9F644C0C7A60258C9B39838E02E8A19C0DB7509A4C8886114C16FDD36E24FEF14BB990BCFB444DD84725F61F5F2D6CA497CD2C4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=qyd4Kb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("qyd4Kb");._.$q(_.AAa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qyd4Kb"}O(){return!0}kb(){return _.Yzc}});_.Aq.qyd4Kb=_.cA;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8188
Entropy (8bit):	7.97315987746307
Encrypted:	false
SSDEEP:	192:XqKdQmquxznJXzDlIROUAHaKl8LfX3ZfWdJvM/+Ctw4VVT1:XqTmxznhzDlfUKaKqL/Swtwqh
MD5:	D678E080423DE82EFA6CC7C3B426D423
SHA1:	C06E34366683C2EB72B426CAA294C64CFD25D627
SHA-256:	9F2537CA549890BAC770EDE0892AB9AE80E9EA94D1467087A5B27F4F1DF12E37
SHA-512:	58210A7DE37F7F5497B06D7CF9812ECBABC3BBB1D27658BEAB966E00B6AAD8EE50F17E4571936144C8A3E76C6DD6BDB4775EE5F801682E6DDCF323DA37816DED
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?.U...$Q....]t.E...Z....6u...R..bu}Gv.a........w...Gls.c.m.m..m.=.c...k...:..\|......S...N..U.6..V...C... ...TYk..6:;...GX.].9.m'{..3'..+.t.b..5....n.q....^q...]..8.lN..I..S.(]..@.:.m..T.b...`;...S].....m....`.A..Z.kkS$9.#.A..a..4...i%...\|...R%gdDTfE...Q.m7mnY[...I..0..k....&...3...G.[.Z...@.K7Q.bP....p.Ca... ..f."\|.:H.......U.r..q.a.....ff.7U....z.^(mL....k^..B..l...&.W.b.S./.......@..L.....+[.(......s..A.7.l...X.(..A...0..-~.L..h[Q..%k.....:../.a9....n.7...W.4.,y.c....b. ...F.1.m.m..6..fjw<..d5..?.>D..".G...$I.$.c...^.xd0.un....fX..?+..8x...9..9..]n....~....9..........Oe.R...x.x.....S.f....4.....l.......2X...9...;X...N.R.uk.g.R8..T!X..z5.2~..Q.c.}.L.P.;.s.I.v..vniv.C.w...-.;.4A.U..3..Mi...My...s.,.$M.~~Ys.{....../M...<vJ....m.....;'...U......C........Q.%w.qW.....tKs...3vi.N..VEf.....M..M)./.....q./..&n...?.9..P...Q..un.G.g.T~)k.Ji..;..N/M.?Y..S..g..a.f..+....tJ...=._..\YpU..QJ9J1%

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1219)
Category:	downloaded
Size (bytes):	59153
Entropy (8bit):	5.602178783638648
Encrypted:	false
SSDEEP:	1536:mquW4jWRvdUqnK30xCurrb3JFVmWELruRDZK8:mquWVdU/kFUWELrC1K8
MD5:	7BBD7844542F87C6274AF9B998BB1AFC
SHA1:	CC303673ACB24D56282A7BD91F1F7FEB79529DE4
SHA-256:	2D00D264376F2F0F37B90227849C1C5109A6F36C4BB449CB007359CD661A74A0
SHA-512:	83E68839697F59008953E9A45FD56E5B33F8A23422C441F406300389A6F2A6693D4F22A77B1ABBBC4C9A2044EBF972F801BA7527CAB93DBF5960E097BCE01FB6
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,AKTwDe,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FCpbqb,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PZ1hre,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WhJNk,Wt6vjf,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,hhhU8,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qqarmf,qyd4Kb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=LRovxc,Y413Bc,J22eF,iLGjNb,ULFnWe,grWkAb,Lkzi5d,LcQwud,mmmrlc,YTx6oe,qk5AGd,kdbckd,dZ05Qb,UZStuc,xI1uef,PAQZbb,e3Zld,w08zce,UINLVc,iAQMie,NkwaS,GjTCAc,kpVlPe,g6aYuf,ElYdAc,PRm2u,pQUyNd,RBsfwb,ZMKy0d,Kfp2G,qczJ2b,C7e1Kc,FoxcOd,CKm2Wb"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("LRovxc");._.$q(_.dBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"LRovxc"}O(){return!0}kb(){return _.A6}});_.Aq.LRovxc=_.$A;._.w();._.u("Y413Bc");._.$q(_.kBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"Y413Bc"}O(){return!0}kb(){return _.zEc}});_.Aq.Y413Bc=_.TA;._.w();._.dX=function(a){var b=a.body,c=a.class,d=a.jslog,e=a.attributes,f=a.jscontroller;const g=a.jsmodel,h=a.jsaction,k=a.jsname,m=a.ls,n=a.ua,p=a.Ca,t=a.tA,v=a.dj,y=a.un;let z="",C=(a.Ha??"")+(a.Lg?" Ubi8Z":"")+(a.ks?" rETSD":"");const D=_.NM();z+="<c-wiz"+(_.R(n?.Za)?' jsrenderer="'+_.T(n.Za)+'"':"")+_.wo(_.vo(_.Do(c,C)))+(null!=d?' jslog="'+_.T(d)+'"':"")+(_.R(e)?_.wo(_.vo(e)):"")+(m?"":" jsshadow")+' jsdata="deferred-'+_.T(D)+'"'+(!t&&_.R(n?.qT)\|\|!_.R(n?.Ca)&&!_.R(p)?"":' data-p="'+_.T("%.@."+(n?.Ca??.p??null).tc().substr(1))+'"')+(null!=f?' jscontroller="'+_.T(f)+'"':"")+(h?' jsaction="'+_.T(

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1420
Entropy (8bit):	7.799297445764672
Encrypted:	false
SSDEEP:	24:azlJ+zVAu5cXL9iUYO56HbSlCYvfwU93E7rrL1IkqTl7e0Sw0ePlT/enCLgYYPZQ:GQ5zUYAakvfwU90zZIkgRPSlcTmnCkYZ
MD5:	CCB410D15817F7665022D4BC0A36AF3E
SHA1:	D0A857054F3CD3EE67150A456825C7BDA284E454
SHA-256:	52B9D8F221B438BF8B914425520DB5FAA49B4FF50F8F89C3419BEFE6201BA332
SHA-512:	63BAE64AC6D0C8402E3955EBDB58D5F9ACDE621AF78AE9E55F80414A2818DA7738C5EB0D1478CCE222BE7C899A2443348DEF117AB15FF78E001E130E3E984425
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw
Preview:	RIFF....WEBPVP8Lw.../3....3m.({...;......J.q....,.E..(....\|.u...`$.../...?..P..m..Y>.........F1...@........ ....+..<..(@g.c.s..`..m.....n.1Z..>....Fe...\|.U\|kg.)........~...m.Fes..0..:.2.....ve...\'..U.J.....w.."..R#.b!.J.qX.D...w....?>..]......b.Z-V...V....'.z;....W...R....[....Z% J....{..O'....f.2.......4#...v....N.JRX.%.y%.JPa(A.Im+.+f...).Fs.4A.....)I%.i.....d.D[.v.'P....;P. Gm....D1.....Tp.....m.R..h......hZU...I1...S..T.Whq...Y..bI.. ..U......z....KE6.F...a.aw...^p..77.>...d..........`l.~..>w........FkC.}...)u.$.V".B.Z+3...7w...o......E'...c.O......."X.#...K...1?.j.......=.@.]u...W...2#A..).`!.w.k..f\|..7o}..Q;.P.^\..Z.....y. ....a.1.F...jQr..W\|..]....v..~.../.g^.k...b.D..@.$.,2\.rji.......p.#......)@.V...AM...\|{.....3..10........(.....b...Tm.]g...q...VN.G1...X.....N...P.5.^k.`...^.v..;h..=............_..-........Q...jb!.......Nt.`ym.^x.........Vf..O....>....u.....b.....M..m`..C6.F>....+?...]q..f..).R.,..n...z....vk. .....e....#Gi..

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	16242
Entropy (8bit):	7.9402572379727125
Encrypted:	false
SSDEEP:	384:Xuw19G/c5AIyS87w1YRmRAjkECvcFd/NP5zOoYJw0:P19GU5T587wiAsw0H/NPeJw0
MD5:	6B2CB8AD472A93B0D97FEE592C13E1AB
SHA1:	F40C495C1CA874FE508F6F69059041A5243D9A38
SHA-256:	49CA14F45BE05F2A2CB10304CB6481A9A18E15141819C86D15E8891CF371AEC8
SHA-512:	7C63115A9EA99072CC01CE04D354952C4EEC03B7CB781186199F6D45967A7FD5D7E190B2810D671F53A03A6B3964AB1B7F7A4D84114EF3BCDA7BA4BCABA23C1C
Malicious:	false
Reputation:	low
Preview:	......JFIF....................................'.....'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./../W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................H........................!1.A."Qaq..2RS....#B......3Cbr...c...$...4ds.........................................................!1.Q.A"2.3Baq.#.....$............?...B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..B...!..N..N+.P.?...8.n....Z.>H.9.N..N+.P.?...8.yC...L5a.G...t.bq^...}..{..g.a...>.n.......<....N+.....K.\|..sp...W.G..LO...n....i/B.a..a:/...n.....C1>.......a..a:A.N$..yC...Lp....(y..V?.>.f.......<...../.P.?..X......O......3.1.b.>...i/B.#..!:?.x.yG...L>..}.>g.c.^.....Bt..O.....;.6+.P.?....?.>.f.......<....6+.P.?..Xo.g1.....{..g.a....(y..7..........3.0.....<...V....Bt..a.^....a.^..3.0...s0.Jz..c...?.%?.w....;..4

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	6354
Entropy (8bit):	7.960700089781389
Encrypted:	false
SSDEEP:	192:7tW8Nc0ZfXfSCFxtCKqEbGO4ADvM0FzD4Hk6rD:7MCcgvuKquGZAhD6rD
MD5:	51B2B08CF48FB14C10A5BC00F7EB3E49
SHA1:	FD547F92F080C9DC6C78BB8CD0CC73E021C61978
SHA-256:	4E0CE59BD28423F000B98ACCDB10FC79F7FBDFB4C536ABC64B35AE17C9CF65C7
SHA-512:	1162EE7C174C160DB1E88538B3E0FA0CA4845FFF919E8DDDD5DEAB2BFC7EDE670B2F491EBCD58BA7C771DC81B300D005F445D3F13742D738986CB91575791DA4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..G..Ma!..Z...f............x\|.......x'...B.("..[f.M......D..j@.......-....(S..6..L.b..L.#seV\...,.;'..{...{8...7......6..`.P.;g....k..3......h...w........H..%O.o..Wh.=gJ.'@..R..4...o..7t...Q.E.u\|.Xh..S....I.....1..B4...lP.........`..s...#.${&.....`P%:A...t&&0:....^.j....&....LT.LTJ.I:.}..........S...+.Z`. :..X..A``.$..4....lO6LL$.l...w.=...8.mn...}...i.h. ...f.M.WG..V.V.V....D=..9..m.Y...;i..1....!Ef .....U.......`...R.n.j.!.JR...z.z.._m[W.\...{..9.9.@...1!9.x......k.c.....X8...6...C..h..........e.n.F7C..~....h&#Ef#WpgUp....W.d..+8)...^...Um........8..@y.......n..}.~...j+c.}.w._w... .....1.v.._'.i.e.a8...3..R....Y.@%O.......gy....o...#lw..K..f....qU..B`.:.`]a...'K.A.J....u.^...._>..o..."K...Ye.1...m.$.@..Q.m.m.m..mu......A..6vt...GV.o"...O5N...^.&.....p...O..".A....{,........eS,.....E.....g.].....k.W.......-..}e@'..y.^...kF....a..oO).x..[.R.5;...d/..1...>..l\|.lh...*..=..Q..6o..g.$@...........y.M.P../....'.........-...

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,appshomeview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3346
Entropy (8bit):	7.927787140499046
Encrypted:	false
SSDEEP:	96:mY+rHnf5AhAsKKecLUsMccj/kRLYe0qxKeyT9FL9I9Vyk:MbsgsCjcr1HQzo9
MD5:	24432E68CDC80B8A42EBE0DEF7EE264E
SHA1:	6FB55525297EFC44D5DB9407AD46297AB2880218
SHA-256:	AEB2EEC5C20F7EFE0EE1E89E1043A19AAC4A77217797ECD839FC52D7DB357A8A
SHA-512:	86BA0C2C40C346D1620577402689A6AF4344FB0BC6F10E29FC455E809208E4A3C547FBF233E0285B50F4CF52F54032109E7620BF328D2E2C97CAD6ECB9B1CAD3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?..P..#.?v..oDL...u..v$.9..1.....dT#`R......N:.-........[SE..........w?n3...www9.h.;../.9i..O..".Y.@F.j..n..34....X.K..;.-`;p60..El.Fz..Y.; ..CS...f..Srm.:..T....k.M.L..v..Nm...>.>....I.$..~.m..g..m.m...m....O.....[Y%4A7..g}..............=...n.s.@3...n.G.,.1... u...-&....CdE.....i.r"fN.=.i......g~M....mB.$.m.g.m.9.g.m.m.m}D@h#I..@...::G..dTUw}........^.....:...<....~.ZMf..\|.z.k..h.....y.k6............ ....e.6..........5.o....Fi.....t,..........(.._.......V...;....d ..Z....,TmS... Qk..?...q....W`....C.....o.4jq..".H."@..A....F.%C.;.]..@..j.G..L.....n.-Q..B..`...e4....>..........~..BH.P...Hd.6..g.2)...f.i..6f....Xp.A...@.%..V..0...<Q.y&.....R.........R.r..w..{.%.n=^zn...n.hl..QpI..W.......[..#.Ca...!.6.lfP(..]..K....G.Td.:./..G.7F........3....VuE.(.. o...g.A..\.U..>....XttW..<.......R,.(.<..&Rg....q..&...V._C...5.T..T.=.!.F..k.z\.j...9\|..\|..%.6m..p...En}.#E........INN=.........^...!f.A.#...,.<O"D.s. _I..

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.419117155538355
Encrypted:	false
SSDEEP:	768:y2PluyvvFSc5Z2ykuUZYyujsN1pcHFMqvJa9Rive4W4LzqwLmJUwudtnMR0B28uk:95ZDkuI1+H+96e/w1LmJUhdhMR/SHYX4
MD5:	1F5535F441B82833D25612A3929B5A6D
SHA1:	6AA2A0E8BDD4EBC5AC254F0BC5CAAA381A71D81B
SHA-256:	43E2EB91593142C844445194E5C6B5B570266C5DA27C5E5B37773582733903AF
SHA-512:	C81AD3DEAEA5A594D10666ADD8C62A27EF00EEC125D574BE4F6948DECEC45B332F2C6801119553E4AE6675F49CDEC490F2BC27983EC9981B229C327A6E5FF5F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=_b,_tp/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Mpa=function(a){let b=0;for(const c in a)b++;return b};_.Npa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Opa=function(a){return a.Oh&&"function"==typeof a.Oh?a.Oh():_.ea(a)\|\|"string"===typeof a?a.length:_.Mpa(a)};._.xn=function(a){if(a.ai&&"function"==typeof a.ai)return a.ai();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.fb(a)};._.Ppa=function(a){if(a.Gm&&"function"==typeof a.Gm)return a.Gm();if(!a.ai\|\|"function"!=typeof a.ai){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.gb(a)}}};.var Rpa,Jn,$pa,

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	195972
Entropy (8bit):	5.483303994682546
Encrypted:	false
SSDEEP:	3072:jgPKlMLLFF+ZNbRJE227VDVLJhyXBdcEgTiQmod/AbgYrlwtNHK9EHRHCfYY5q8n:jgPKlMLLFYrbE227VDVLJgXBdHgTiQmH
MD5:	962D34F19BFCD0CB623DD132141089F1
SHA1:	90DE9AB10CCEC0EDBC51C93C86F986B7C56FBF5F
SHA-256:	D1642FDC89947D350E50EEB3CC55F8B0E4EFE8B477B605BA9DF53A14C636217E
SHA-512:	484BEB1FC14B1EF6914078A21CC0EDF8285189097386F643D2F8C1D141E4A5508211E549466D23365C307C86C07E882B6B92C050F0559B8A6F2B4899D0DCEA00
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/am=07MNBn1ggYH_SN-DLQ/d=1/excm=_b,_tp,developerdetailsview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFWShx96RcDVoHaFsc4GoUkjNxQvuw/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0x60581f4, 0x3df48ff8, 0xb60, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,Qa,maa,naa,oaa,paa,Wa,Ya,raa,uaa,mb,Haa,Jaa,Gb,Hb,Naa,Paa,Qaa,Uaa,bba,iba,jba,lba,oc,nc,oba,Bc,tba,sba,uba,vba,Cc,wba,yba,Gc,Aba,Bba,Rc,Cba,Dba,Oc,Fba,Nc,Qc,Gba,Dc,Mba,ed,Zba,od,aca,pd,eca,gca,kca,lca,nca,oca,sca,uca,Bca,Cca,Dca,Hca,Qca,Mca,Sca,de,Xca,Yca,$ca,oe,gda,ida,te,jda,lda,mda,qda,sda,vda,wda,xda,yda,zda,Cda,Dda,Hda,Nda,Oda,Pda,Rda,Vda,Wda,Xda,aaa,Yda,Zda,$da,aea;_.q=function(a){return function(){return aaa[a].apply

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	470
Entropy (8bit):	7.4146471227456825
Encrypted:	false
SSDEEP:	12:bLWPGWCEc/+27vldHlmdjS8XsV1NT+1jFDdK5f:bLWHCEaxxdFmdEVf2j1+f
MD5:	70B83508C47435C6BE7F011F3CF327C5
SHA1:	0E12A15996C6C029924680A1199A1413D59B6070
SHA-256:	11FC75B3A72464C116728AD752E49D80BE9DAE38C4CD48B997069357AB8CDEC1
SHA-512:	3B93F50709008496CC6BD1A7466E45C09112DCAF4F1FB47D19DEA68223E20E2CBE997B284DE57B5EE2F964E20737D31BA9015A684E817323FF6C976BAB37EEF4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../......8.$G.....+y...F8.$E....'3..H..)......f.ml.r.<.....R..Q!.P.9.........`...}.h..%...?.{r.o...\|...c...Y.............\|...z...2....o^5..q.jYg...7.8I...c..U....wz.$.B........zEt......<....... ......$.... ..%.I."...l..9........]V.`.....m.......N.?....v......yx......2....I....N..,V8.y.&..E..# /..o..5...H..=...b....p..E............}#....9.G.0{..I........../..ki....p. .5.......r.c..?9.R.c)3...I....^.tM..dOr ..,..^.c6...

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8002
Entropy (8bit):	7.975426170230245
Encrypted:	false
SSDEEP:	192:vaaEAeVeRaAQ5EWBzi1xR9lOSJskldqfI8KACyvEPUjPKB:NseRd6Ewzi1vJrdqvqGEsDKB
MD5:	856140824C7B8F250834759E1EF8421B
SHA1:	BCA87B45A030069D4A4418D6537448C06107A38A
SHA-256:	DC3A0E35C1514F143B94271F958255001A5954A7F63179109A2A16BC382537F7
SHA-512:	F4BE351A2013EC730668798DCD81DDABDB4D7DB56E21BD08A6024504B2C77A85437BA4F9F89259E6FA2622BB305AE7B2AE339A6E63000CC8CFB90803D0A44E78
Malicious:	false
Reputation:	low
Preview:	RIFF:...WEBPVP8L-.../?...M(l..!.KjD........y..ff..)7.D.H`....Pt...$E}w.._.`f.....$Em...{...?..[.b.6....{\|.3.........\|#~`$......].#...NB.<.].C.!5.4.....s..HCM.....<>.o5.$z...Z#.e...=.[T^lS.yB.....$......+=.....{iV.P....C!"..&y.i6.j...-.....3s..#U$.].af(..3...+T...c...2.B>u.n....mo....f;...x<..FZ.A.w)gU.V........W..a...-].33..e....m[........f..1Hi...6(..(.-..c..-t.v.&....?y...km..r~....].v..J-nf...8cfffffff.a<..x...b.m...7..3....TR.L!G.,.J...`.S...f...}.fF...3..>d.L.,..n.e.....v(S:.)3..`0.u.......m.!I..~.......Y.j.m.m.....w..#....{.4].Y.....m.[g.6.Z.JIf.0.9........0'./fff..03.u..r.6..e...^+r.zr.#A..$....@..[..P...A$A.....ph....\C.......8..S.....sx..`....N..w....K..>........Q.w`....p`....rb. ....jx,~...l46Y....).eI.....N,...uI.EO......o^.K....^...)..."Y\..9Z....... .2..X.n..J.D....s..A.......>....6....%..^....Q...s..&L>-..D8..w...l...N:.=>...y.)l pSq.A/.z.;B...*$....FQH.TFGss.~.......;.}...g.......D4f.gs....!..S.W.;..oz.E.{......~..{~....Q

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3702
Entropy (8bit):	7.937104656961242
Encrypted:	false
SSDEEP:	96:hVlHZ4aIdJfMliUwe0R+qAwLZqDhRVY/oOB5N:hTHZ45vUiUN0LHLaeoOvN
MD5:	EA221EB1F8BDC413DA31D0FDBDC05CA5
SHA1:	E1EB42835453846CA5F9DE12BB395A98394B6B2B
SHA-256:	6C9C866ED2A72E42A8EF956286C88B5B7669371AE810FBDA1E72EE8D9B76F4D0
SHA-512:	4A89B72C5336A1D54306F7925DF7062B53B8844D7F86711634AB1AFCF48B859253EA55E147C70663D2472772EE524DC1DAB02412D8B9084F0754F2CAAE366BE8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw
Preview:	RIFFn...WEBPVP8La.../..?.U....%E?.].]pwwwwww(.............s......e.,..2...........h...X..V..S1......7l...#..".T#w.x... t.:.f..R......j....KK.E.)...3b.mv.>.a....S.Du&r...p....."K.-....j...=...3..d.9.#IRd+.y...W._...@.t%H.m.m....Ga.@.jV.{K...d)...I.4.......^zK..T.J=r)G..~$...+a-.=...K........q.H.`0....Y...1....#B6..1x)..s....`.GZ!].a3F+f.A....c...Y...Rs^....tH..N.u4..8..E....`...N.{..WD..t..]...M..X.lv... .....rj`..\..L.]....i...1..-...b....X_...D..$h2,C..(T.. J2.....o.d....{v.....b.)....\..A.......z.`.A3...Tc.o.......?9?.1m0....E../]..b..Z..x.,.b...j.\y.H...y....EC-.!x.<..=.C.`.J.=D.}D..`.e.J.3..vC..^.....ACu...o.....f.6.....17.i....H.~.'].V...(S.?D}Z.............v....`<...m......W.ck......a.V...d.... ..Z.(q/<9,.a$..D^..g"d.S.o)2V6..n.....<H.j9....%V.?Y.>..(...@....)..d../...(..I.......B..O...h.ne2x.?..LTE...5.).U.6.C....+.U.AS.......<.hBXE..8../.?.gP.3...S..a....<dF.p:..X,.r....i.+(..F."..O...Q4,....\|(.%....2.........A..;2l.a

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	4932
Entropy (8bit):	7.946928145289324
Encrypted:	false
SSDEEP:	96:MiV+u1u/FTCaDV90JQ7WOAuUM0CSY6+4vSNjAKoDhPA4SC5s:TIu1+VwvpuXSY6+MSVFotEos
MD5:	9C4D937F97530545BCCA9B4A91C2A5AD
SHA1:	2B95E133938E1066654D4A6AB0975EF32BD956ED
SHA-256:	D9B747411D8665D613DD401B4C683E8A1F2B6BD0FD14C289A9F3BFF38552A33C
SHA-512:	101ECF27F8D0DEDD3B398F1F16BC87119994ABDFC034E7F5D6BDC3F34B169D865355D04B9D3990D1757CBF119883C5ABF37152A64371576D07356035CD3E22A8
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw
Preview:	RIFF<...WEBPVP8L0.../..?....$I.v..7.?b.2..D.....%..g.F....+...n.ip.Z........j...K4...$...N..\|k"e}.E.`....LY..-....i..m{...........F..Hy\|"?...Io...6.$E......5aM....?..>..M......CL.C{}_..h...n:...r.~.Tm...&.f.7....w.w..j..Ar]3H..Ca@.C6..D.o....y.O].A.m&DJn%DC...!!..l.........().X"?.Y...D0.....$NL...&...A..j#Q.M.:T..]d.~.f.Cq..............p.'.0<i..ci.O.v..w][q.AP.s,s......7"r.@.]N.X........:...Q.......L......I..s:.......^.:....Br.%F@.k&@w...m.N....+.0....Ac.B?...<...@.$I.U=..?....4<{_.3.B.,H..Y......$!..7...I...##2..VwA3cA.................;(....)K.z.A..4.y.Y..k[..Ac.'........<:..-...\|..._.....p.q.A.u2.t<...S.f[.+}........I..jk..sm.m.}h.m...v....J...F....x..)./..?.p$....d./e:...^.!..E..F(...$...Qw.o}..5....S.=..o.dv3U....8.}.Q..y...O...E.G..f.[.../.....x%..6..\|.y.L..+...Q?.^Ybw...B..wp\....S.3...;....8f:...@(.0.s.:......./N&."2.$.......D..!...........9O.....F{...nY]X.'{a.]g..V..^..X./m.N+mnZmoC.NI.a..*.n.=.3k..T...J.f...B..K...

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ojPjfd,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2196
Entropy (8bit):	7.903352074253317
Encrypted:	false
SSDEEP:	48:A17BRcX4d/54k9kTYtkJ4oTzfwo1nGzV5b24fwp45m:KTmZt2s08uV845m
MD5:	CC16F1781CB55F8A72A01137B6858055
SHA1:	E8795092CB6CFFE1BEAE50651C8668DF6CF92D75
SHA-256:	3BEBC5B2415254D0A88AA1DAAF00AC69F2E98D6B6936918462F9AC6DA35C129B
SHA-512:	2472814001D47CE40BE0A50F05072E34B908AC4E4AE588CFA0040909E467A8D4A0031F0E9E2043B4F436ACCCEDB4CE1EC8AA770306D00A041440192C3311E8DA
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?.....m.F..'.p.;D......d..(.M...$.P.F....O..?.O..m......N7...m#9..z.{.....+..t...\|..5\|...i."le.......>Ev..W$.95s.^33.3f.#.^."Gv....33333./Cw..F.../z....:I.....#.F.Yz0c...{..;..o,..TvU.w`=...q....m.V5.>....[.$D..@..[...;...j...>..p........ ..%v: ...p.....j.@....i..x....=.U..[.....c........t.[].f.8....&0.H....(..LB.` ...12].%._^469.B.\|.........ro.y5.. 0.].&b.@!.4.E.3..B.S.....\F...)....M.:.0. ,x..<..._.D. B.....j... ,.b.{BE.k".....6.......0..!.`..TQz......8...)".!4..C...(}O.....'..Q`.!.a..)..l\|#.5...^...P.,7.....4.(.A..:.0........Z.......F.B..Im......b.@o..)T.. ..$.8RQ.a[.....F../Y.$K....7z.+x...T.b!9.."....>M8o.A.......x..b...>.).....S...".B..j..l...#...^..\..e...a.r..6..ez.GX..V.S......5OO.....p..<...MTr%G..qd.<..tY..5-.6O-#......x.(=.s.:.N.1.+\|....w..R...}m.Z...}..>.Yd'.....=U..P^(..Lg..%.~.)%M..p&.\..7....p..^..........M.a_F.p.1%.}I..c.p....B.dAA...7zzQ.A..6M.!.)id...Y...u.....@NG..l5.*..d.<8...o.;.i......

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2070
Entropy (8bit):	7.864485372164771
Encrypted:	false
SSDEEP:	48:d/wu0b4B+mbxo6SMsT/zllswHeztVJTqqKiTRAtp9g/:dXU6xgl/he5fdC3i
MD5:	E2B81851FF866572E97F2A6ED8F3A87D
SHA1:	EC7EA23254A38C5777FEFFE98AC98C042F762EC8
SHA-256:	592923F8744D20C59F2ACCB1B816F2C3106617F59DD33AE623A770DE0765D9DA
SHA-512:	65DB4EFE0F3A633DD6977B1F8FAC6ED5EC8A0EC60855621140EA07D6E3FBDE7826D3B5ED63198A9B7F1191D09008D98505F88009315F330ACFBF71B71FE9CF4F
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?...9.$ER....XE.c.N..$)R..o...f..d..$j.o.~.._m...Sf.gA.....2....".0.~.!...~..A@Z.......B..B...J..A!L!.A....P..Dq..i.L. -..a.q.0.B.?..a......Q..../_EA.E..&...X......6y...J.....oP...F.....D.7...`......+..i....(\...VZ...........yE.q....~_.....>lD.!.p.!...2... Y....A.g......u......t...w.eH#G..?..b9...sl....0...Vf;m3..q..dO.[.."..O NQ..DQt..R.....\|1C..S. L.96G./R:.~....[..l...{..$s.....k.....a6...bQW..q..:E..p...+....{....$D...>.b#9ls.[q.5.7W..(N..\.............P.......6L..nl.g..:mB..r(N.)j\|...I..B.{z...ES...8....d......v~.&!...1....t]L..y.-8./...&!..r5I.).....QG...C.{z.^O........6..IO.x....MY...rJT5............w2.7.......9..i.bJi.......E..+k....z7.^..fN.WRG.B1S..'t...1.Dd!.p$.....NB.8e..S..].F...o:.~OS......-..(..N...Dvrem........Sf..S>t...<=..JsT.f.....u.O...?..w1.4/..yYT>1J.. N......."../..E.W3m..@qJ....:..5.....,.Bq.....;o{..{..."$9...5.!B.=kZ....6XOF...:-.z......kf.z.Ru....l8o...........1.5...;..........

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	48322
Entropy (8bit):	7.9925923618023305
Encrypted:	true
SSDEEP:	768:3tbqdESEHUPdAzlINODPguMRR/OC8ipneWj5tMb+K/ZeG6G62sc2fVAAdgIseEeq:9W6SSCAMOcuwxOr0nnXMb+KRtiztdgZF
MD5:	76497700655681491A9BA6D4BAF13B64
SHA1:	C8DF276FEAF8A43717EC0F9B1EA2DC4AE71C188C
SHA-256:	BBFC9CB7F900979F318D15A59045CB7236636E11B5F8A441E309D9E3F08B9139
SHA-512:	D16D03A8B7D3DA893463A7DA05F7D018CAC6399E6FFFB8535BB8B07114B5B8F3ECB7457C5DD46B3EBD27CCBC14FA79949A74240C3AA1FD7A0335FCABE14B0DE0
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8Lq.../..?.M8l.6l.M.#._.4m.........mI.l.{..@..m.........d...I$....N..l{a.Jb.I....,..O.9Z..N.DR.a[I..ND..gC.....$..6.h.I..?...X\|...Wdm..5^....zh.V..8aE.!........k./..... /..H........^..^@.$.U...7..g.E../....$I2k.>.c.d^..](..FR....<.......AN.....Df.(...........P..".........WB.)A.. .q.....1.....!"7."2B).. .....d.+...8.#.8....)"....#.. s..G.g....G......~...........1f...I$.....H0.f....T.lIR.dI..%?[..L.PE.D.'"..q.....Tc].PE.=.4..K.H........,R.D..\|.Y..........I=1..3...G "&.............k..^....d.U.J.%9.........>...\lA....I.>E..]...R.>FHg..B..V.?z.RQBo.....bz...<.KY..."f.C.0..Y3.....m.\|.=...C..{u.w.s..?._.g...{...Y....lk..{_g....N..[t.......gu.2,._.p_.7.#.l.<.8vY.l.....+..p.#...o...U.....7.;.P..fX.99W..}.7\|......DH.;.m.m...c..s.fF......5J.\.j.m.....1..f0[.Hj...l.X....-.....-.r.].....d.g'9T..~.<k.........c.a.x-.'.m..CY...+.....+..=O......Z.Z7F`XS8.)..G$...c.=....@x..w\E.<..H.......A.G7.C....".C^.n..D.q.....(T'...C7.!

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	41480
Entropy (8bit):	7.984382119800143
Encrypted:	false
SSDEEP:	768:aHHQZTU84STKu1gLXOCLa/FI+y+rW2NIeLq9wTqjrlWRd7OjSRTdXjuq4/G:S8CSTHkPLcFr1ww9TgM9dCqcG
MD5:	F0216C5E6F3164CA18EEAD137A37D41F
SHA1:	C6C7FAA47A3F8426A12041AF7961927CFB605612
SHA-256:	4ED0BC7515E91E83DAB8605FC80486996624880FB4D0C065F26A79DE18615524
SHA-512:	7093E020C1362F28AA15C5B203D2D0F4A99AB630715B9A712157D979BF2C6CC5CE7D3AB0B63006651CD1E96B6B6C159F4AF49E45CA3596B6A8F7396E722BD072
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw
Preview:	RIFF....WEBPVP8L.../..?.....m.........................3.L8.Dd&33.l.!{..C..LfnNBf.H......[Of.18...1m.=...........c2;...{....f.9..D..p..;'...5F.8v....G.....L....]. .y....E.2.<.......v..NJ.....O\|..m...m....<..u..<bw.c....I..Bb.....l{.=...v..vE.....N\...~..v.c.2...yh..=9....G.._{.f./R=....=s.".........~m....^$...mGT..../.......f....U..?."B.. ..ND...H..l/.s^".."......C.[..MwH........WwK.....H....{...r\[...d&.Bx....JU..e._.L.%0C....-.um[.2r.\..pJjj.....~...E.l....W.......53.qh.n....((.JA@).J.@.........R(@A).............C.....+.3PB..J).P.P.@...P..6..BP.L3].<.q&.P.H]....J!.......C...T....RJ.!..g.#..<..@...6B...Ea8..u$..;..m)..8...p...p..i.".P....8o....\.. ...........Q8.@....f`=8oj".4k..!D.a..W.x.'...?..}.S....;5.6e..^.l>...,.!......<..L.r...Cl. ..s...D..vLy..j...qG.,....~............N.~..F..Y:.PJ.(...@..4..Mzv.Y..q?..<..s...(.......3..B..^....F.u1n..Y<..........;~.p..h...-...>XM.......%.! .......{.a....J-........@...1..a..F#].'....c

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4416
Entropy (8bit):	7.94177891589712
Encrypted:	false
SSDEEP:	96:KDCeQjdXQvkXJ3GMRTLo0TAsN3YzZcBkJojedAZaUnEMX4CzvlMM:+MjdgvSdVTdTAsN3ocYyeSx/B
MD5:	E6A1A5EF5377B178774BF38CC5B0C0B9
SHA1:	F5D8C0A4E259D1D7AA265CC1FB19108949F63D3A
SHA-256:	19ADB2816B8C83892EF1735C8EEB67FA32FDDA93962D3FAB1FC9C31E4AC78E98
SHA-512:	C8E05C42661FE265B1293C04A5F31FF7AEF950C40DD75D4D663BD04B0BFB5141BB199CFD2030DB5A45F37EE6F6CDD7E1FF71E5370F9A514665006EE6B10A38CA
Malicious:	false
Reputation:	low
Preview:	RIFF8...WEBPVP8X..............VP8L..../..?.U.._.e9gx......033333333C33s.cffl.6..k.sN..L........z..B_z..x[d.j0...v...xb..q..SX..#.5.0.....9.,.w..9.t..S....O...'..Y...X>....S..JK`.$p.+f:U....^...?..b.Ka..Y......V.d..N.e..N..7.<a[.uW.7..'Q....fu6.%ig.ms:..p.{.m.g.....I..I..........n.........V...r\....Ll#....f.\|l=...w...Z....=....'...b...6.()N.f(%..biK.......\.Y9..E...Ig........^).6vbW..e.U......JU+.S`'....Vs9..f2....`Y)/..'.i}%#..f..-M.%..&.0C../`.p....by.!.\......d"}.k..g.0..xl/$.`..L]............9..D....6w.{p..+T..].....6p.' A..O..{O..........G..q...vq.$u.1...x..hd.K.-..3.`..{.'w./.(U.#.ZY.G..v!.$.2.^+..5.B$.Y...Z...<'....hv...>..._.>{....+........oa.x..r.e.[.q{...... .X.%.....H.+.....M..l.K.}../.m...%.H...6d....6p.U.."..gg..ZZ.z...r..P....0.x.._.0.F6.P.@.f.\......Z'.8.....c<^Y.@ ...Q.@.fR."......EK..B....{r.y,..{..d!9..C. :.P\...5..xL.....0U,.v^.n.W.zt.$H...&6m.=..GI..3.`#...hO.gP.i.Jx..F).....l..;....5k[Z4:.H....hO...sJ.....@zf.Jq*.J.z.....

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 6956, version 1.0
Category:	downloaded
Size (bytes):	6956
Entropy (8bit):	7.9301019807594955
Encrypted:	false
SSDEEP:	96:f1e/kvt6gM3QbPUKG6JPhlVrql6qKrPIaM4SUQ6rrLk6aa9qf4zZ260qv6Qo7HvF:deEo7dyVhlIDerrLZ9tzqqpoLN
MD5:	CE6FF493B5FCDD0A6B6545A6A51A9DB6
SHA1:	D1D22FBAAF1C286D4008CD63BC3CCA0B14E38EFB
SHA-256:	58253AE21FD05D80B422BF5538140E1E6B3D96D8D35DDAB958519FBFE25E302F
SHA-512:	B6AA2A36E512B4E79306546CBF93C5B9807F1413EFC62AC826AAAFCBAEA8D439BD1F2374397A900ADA1C5672FCD8E9EBEC61FDE7A2B969315ABDD677DEB20E7E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/webexp-iconfont/fonts/webexpicons_text-ce6ff493b5fcdd0a6b6545a6a51a9db6.woff
Preview:	wOFF.......,......).........................GSUB.......3...B....OS/2...<...C...VG.P.cmap...........ri..glyf.......+.....>head.......3...6 r..hhea....... ...$./..hmtx.............#..loca...8...L...LlVs.maxp........... .O..name.......:...v..P.post.......J...5.<..x.c`d``.b.c.a`tq..a.``a....cNfz"P.....i. f.....#.O.x.c`dY.8...........a+.f.c.g.......XA@.k...[......=`(a.....f.......C.x...YN.Q....Q..ypdr 1...].......Z..C.ex..t_....G@=<..T?T....._.}.o...mN.QSK3m...A....y]V......u-2..OM...V\|wJ.3..K.>....3a.K....n.c.%+.....u..-w.\|..m..7..lWE6.".W..":BE......9..Zt.z..S._4.h..-:G##3.FfL....132cnd......+#3.Ff.[L.z..5.h1u..b...b...b&..gy3.,.F.......\9_....x..Y....u...{f..9v...cwfvf.....E+V'..!...I...G..E....eWbs..0....#....G.6.W.6...E q.........]$.H..3.........{.{...C.w.>..\|..9..2Od..K.........(..\|.....5.....!...g)....38NFB..mc..jz(.D.n?zar......T<..F.X<iXtfhL...J%..p...Or.p3.\/K<.s.A..Q.K....I..m....n.[..~....z...!.{A=....n?.dj@%...+.........L....hD.._........2..

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.281884541305908
Encrypted:	false
SSDEEP:	12:kRZTFMTbKH/Af1V8jwR2dH/Af1U8+YwY3H/Af1oAs83gG17H/Af1u8ndkbRN20:kzeTefn00df+lwof8p7f8nerl
MD5:	11D3B60D9398C8C84B6216D12BFC9E13
SHA1:	CA364C152EDF391B0A5B55AC7A4924872E208F5F
SHA-256:	092B5B227740A6B23B6F5DD4CFF4D77BFB78E1ECDD8E7F4CE2A44D2D64885208
SHA-512:	659C7DF66F43C574D277EAD3BAA6262D518D75463970F30EC740429B2B47215FFDDE8903601F552099CB46131AF6A44F3AF85CC0DDD32D7657020E16893FAC2B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.$q(_.uBa,class extends _.ar{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.q2b}});_.Aq.yNB6me=_.v2b;._.w();._.u("qqarmf");._.$q(_.gCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.g4b}});_.Aq.qqarmf=_.F5b;._.w();._.u("FuzVxc");._.$q(_.iCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.a6b}});_.Aq.FuzVxc=_.d6b;._.w();._.u("I8lFqf");._.$q(_.lCa,class extends _.ar{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.g6b}});_.Aq.I8lFqf=_.i6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	896
Entropy (8bit):	7.574658091098493
Encrypted:	false
SSDEEP:	24:pl5ZWw96EdiCvH86u3kT8kfl42Q2BAQbOKgaQ:pl5ZWuRdiV6iilrRA4pFQ
MD5:	A09C4FC40A9C597CF2D7C3965850FA28
SHA1:	0A9E6F625E373CF509180F37011C1D2E10C09B14
SHA-256:	D04A1E303595F131CEA2D8FE94BAD1565E2F6080DF3AD5C8EE29F422A9A3C532
SHA-512:	4E420B90A57923C9457B4675AC528DEF236794559CDCE4A6C5002C9C24A526DCF15083BDD5A6DA10CB9C5F4B4250A33B2D5187D3D38492F8D06FB91D290B717C
Malicious:	false
Reputation:	low
Preview:	RIFFx...WEBPVP8X........?..?..VP8L0.../?....%....j%y....Z.m.m...].;...........^Z....]..R.{...T.)....y."..~.>.{...1.#.\......\.0..w?.^{2Wb.mg.....e....,....;......<...5...kw...3..LO..{j0.>...wg....c........Xe....9..@.....4~.x.A.t.C...g'........l.}..m.E..+........YK...h./...$ $U.q........<^m...n.@.\|.3Z..K......I.`....m...e.......3..p....x...Q.=`.. ..^@^..G.N}.u......lI..L.HE....6..Gd.t.vZ.)@g'i .u.y).R.E......2....Z?.1...34.p..V....9..?.8....C...y....D..r\:.<4..............E..A.q.p...hHM...........i...L.H;...[.=A...N.a.Z....c6..bNvX..E....<.......N...#.......uc.\|...@(.L.u..p`..k.\|.+....R....+......+..nf.JI.y...C..iYo...&.....6a^_"kf^5:. .. fQ.8X!.v.q`:..W....hZ...~......z......pk.L._..@....+e=b.^.....i..98%.P.Q..w...Y[_4.z.....(pH.......N..'.......+.XnH'.....^S...,......<.....6f.r....}/......ej...]........EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSEAk4BRY1LvFEvhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9060
Entropy (8bit):	7.976507557570821
Encrypted:	false
SSDEEP:	192:YrL4HF6Tj4qE56uPel70Ps1y+O/m4lYAOtjSdUpW1yU2yRx/qXu5uj2UjGU4qM:YrvdE56ueIPTaAKjSdgWF9RfUjGUs
MD5:	61916AD8B9C0A3FC8413D347446FBBDF
SHA1:	3C8C57695675DE18CDC76E506D1E13EDA857E1F3
SHA-256:	F1D3C5464C5708E948DF88738979DBDC822732226B2B99C4A78DDE55E173545F
SHA-512:	8409675C0FB5DEB030AF87B5075EE1C3489D98C6BDDD33880E449A28B07C2F425EA74E7582892D51115ECF5C883BC056D9C290D68C4ACFB221EB1C8912826346
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/d0/99/00/d099001a-0f42-0414-f655-2b81dff4201e/da8ab394-b67e-4de7-9785-915ea0fe254a_APP_IPHONE_65-2.jpg/230x0w.webp
Preview:	RIFF\#..WEBPVP8X..............VP8 ."...........>.J.I."!.LUL4....~.Kn.....`/.5`..d......0.m...\|......yr.1......N...o.i...'..m.....8.....>t...O...>....5.....O.....~.^......W._.F.#.7......=:.%.}..._...\|..2...3..._...o.......?../._.^...?v.....w....CW.6....Cb..'.n.o..%..j...oA.......%+..o(.v#.h.R+......@..s.....,.......iR}.S.....a..X&l...@..T5.\..._..).Z....hf..q....O..Zh....+.z..DB........L.'.}H..el.....5.&.Q.O..(.l.#./EM3..QU..Qr\.68.b.....k.....iDE.......~(....=....<9ooS.x..M.b.#.,{.Q.."r!..2...d......b.Bv'..\.._.;..j..v..?...xK3."..$M..Cd...47..Ev...M.5.v.....P.@..L...wn........n..y......?....o.%{.A..x.....Jm20...Y..`.#.+.MBG..{.Yk.X/.M!...x...Q......IE(...........z....En9............Pt3..H@...Q....2........7..a4/.B.^i...}.-.e.f..o).8Z.q.~.Eb/..q.)......4l*.".........j...F'.z;.G'..G[[x...x...Z..=...e..y.....K...>m..V..b..#`/P~...3..=YG.SB.I7~hyUQ...!.U.I.;lbg....J1..PT..W.Y.3..$e5F....._....i.U.qJ..4.....v._...j...v.U#YH.c=..._{.N...JCN..5.

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://c.s-microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.670128270565282
Encrypted:	false
SSDEEP:	384:BmGtXyXyzczuqcsTPEDfmrScmfQTXEEkaFs55TsdPEpURd3AQg8MrjLI94m2X+CN:BmGtCXyZqc4PEDfCSc8QTXEeCFsdMpUq
MD5:	69C2564F21930B7029D77D5D60A01807
SHA1:	3068D5E958BF97647797F0EB6996E11ED769907C
SHA-256:	79F6A5B3A0BC4FFCE89BBC6FA1FD1210995BD77390178695D2A1DE415E5215D9
SHA-512:	005CE182CB4567B3AE9A6FDF71190C6DA1DDE8C33D1589952E33B2BB1CD661954629B9B9225B2AE2FDC9C6C438EFFF1C0439452876FF20F0B19C7BD9166BFE37
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,IgeFAf,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PH175e,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,fdeHmf,gychg,hKSk3e,hc6Ubd,jZ2Ncd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appscategoryview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Me(_.voa);._.u("sOXFj");.var swa=class extends _.cq{constructor(a){super(a.wa)}H(a){return a()}};_.eq(_.uoa,swa);._.w();._.u("oGtAuc");._.jwa=new _.Hd(_.voa);._.w();._.kwa=class extends _.jk{static Ja(){return{Yh:{ZW:function(){return _.Ee(this)}}}}constructor(a){super(a.wa);this.soy=this.yj=null;if(this.Vj()){var b=_.$i(this.Wg(),[_.xj,_.wj]);b=_.re([b[_.xj],b[_.wj]]).then(function(c){this.soy=c[0];this.yj=c[1]},null,this);_.ik(this,b)}this.Qa=a.Yh.ZW}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}lq(){_.Ok(this.yj.Te())}HF(){}};_.$q=(a,b)=>{_.hk(b);a&&_.Id.Kb().register(a,b)};._.u("q0xTif");.var mwa=function(a){const b=c=>{_.rk(c)&&(_.rk(c).qc=null,_.Gq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var nwa,owa,pwa,qwa;nwa=function(a){const b=a.kb();return(...c)=>a.Ua.H(()=>b(...c))};owa=fu

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10268
Entropy (8bit):	7.976305561250909
Encrypted:	false
SSDEEP:	192:u0okuRcas/S9gZj9R47fOxjzVbfF/j2o/81TB8rvrrDSnIAT6kTwh:u0okuRcV/S9gh9e7E3VzFbCorrDosz
MD5:	6CA37269D896136472A6A0ACED9B04B4
SHA1:	C0FAAF416776C9B0528EA82CD6BB9D0574C26273
SHA-256:	FCB702F59C90EA20D70FE8EB4B56FB631CE38C4D89C6F067CC7109FBFCDF2DCC
SHA-512:	A56E7416C08A4F2743C7429503DC3ECB6746B044FB9D4DFC32F4C68F23EDE80899E8D26D4085EC0F5EFCD64571DDF030AD7C83B1454B6D1BF797109BB26730C9
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4d37d6/6720fe7e-df24-4815-a8f4-b0aef0659a33_APP_IPHONE_65-1.jpg/230x0w.webp
Preview:	RIFF.(..WEBPVP8X..............VP8 .'...........>.L.I..#...K.x...n...4..et!...U...s...E..}.............Z~......=.9.......E.O@...e.../^\.../...\|f..D...U..]?..O....5....W..<j~`^..w.O..B~.~.\|.~....[.......h.....w........?.....}..........@....^.........]...^/].IG...-.:....U@.B^._XE.S?{,........^.Z.....(..BQG....}~..1.F.i.o..%v....ho...7..5..B;;..ln.O...R.....e.#S.\....98:..0x\=>...~.z.&.{.....1......`E'.c....@X.l.M.Z0.3_(..<..M....7...e..E.T3.".M...Pu...0......^]t....R.....I7....B/.`a...(......=...I..qh.x..V.F$.Xp.....m.\|..C"+.^.........qw.\|LQ.d@{.;..9.Wa.V.......A%...6f&..."Z..h...=][Ci....$..4Fb...s.......Gw.{..n..Z.w}p..BGg..Y...#YOu....Y.7....dm(.......a........`Av..]rK.w....O{......7-.ub@.PX..?.].=..Emk...,....;....g....'.R5#.._<..4...'#.`..'T.....f....fI..~....+..[........U.>.B%W.PH@...c...X.2.j.{.h4."..m.5m.^I.,e..-.....-.^rk..B....ZW.l.}..1.$.?$.......%j.TOE..:gnXI.z..._q.F.I.......7..l7R.....-A.E:.'./...]_{...#..#v.B...\|.

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	23302
Entropy (8bit):	7.958321172488076
Encrypted:	false
SSDEEP:	384:LPli1P8wO0SgCkQbkgRqxucKTBbhvEGux1zpWDVGBuHpYxivQjajswlrkut:LQP8wzd9xDKT1hIzp8VGBGq5EPt
MD5:	9BBCE8B93B48E802C8150A155C8A02C2
SHA1:	2A71F550EDE725B2244CF6CB47B0D4B2D19A7D44
SHA-256:	99330868605BE6E93BDC2D4702ED59831C9474F4CAE6DCD2D86DACC40EB2A131
SHA-512:	FBA0E2BE102B79557D5116B3A24FA04F61F9A2ABBBC983D19C2BA53AE82287737AA28D14E93BBEEE35359A6ACAC7EFA430DB1794E9753E33BB8DAA803067E311
Malicious:	false
Reputation:	low
Preview:	RIFF.Z..WEBPVP8L.Z../..?...m.....i.....U.?!D.......'..X@.V1.....?QN.....=b.......,.39.E...W.;...=IN .n.'v.r..2...T....P...2..<(%..;..o...............j......@.{.LG.......a.._...J].,..^U..9....U.c..%......o@.q...v"o.-.{K.....;.../.......}C....+K..r#...M....1..d.p. E@.mS.#.....F....,..n!.....(.......@,.KF....G..G..r....^....@...@...%.D..$.@....fI..6.eY"....$...@8^\~@.......#.. 7e.@.pq.....5i.._z..1.1.....x#~2M.......J.......H..4.2`. ...M.....&....4.)..........i.q.,..@.i....;..).w....."@.....@...E...]..-a...GD.0..$`.....#bD p...c....0.. . ......}....n....c............\|:......1".1.1". ..#........G ..3.# ..m.92./{..{G.../....{C....R.K`.V.5.-.'I.@.tm...HN..II.m.....B.$E..V.4..r..v&...w.s..zmm.m..v....;....Z.<..z....F....u.i.cA...Uv.b.f'....4..q..fF.b.N.m.?.}!..Nt......_....F.A.Clkp.`.....2ww.....nO.9=,...o.j....S..].TM.xH...AWg.S....H....."....$.U.l~.....nc.V.{q.....:......L;p...!r............._Ct.?..._3.k.W....r..r9..v.&.Wuxe....#..

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	37564
Entropy (8bit):	7.962934539665607
Encrypted:	false
SSDEEP:	768:OwoSQdgxtwSFVcBULLwPSwwtTdiqsS4QhabMUNHzNJ:wd6uSDcBULjHTdiSXhfy
MD5:	21EAC75763F5C2012DDFEEB866FCD348
SHA1:	526E0BAF20277F985072DEBDAD9CBD7A20B44144
SHA-256:	7D91F09A449207296941E6E5AADA5FCA26942BAF69591DF1936B9EA28C59FC3F
SHA-512:	DF9D6E9F47F3D71FC709906B72760EE2A696881A30E29CBCE0F7F1C97F4B0B35C9583B94169037175E9D0846DFD80838532CF96743D833B7283DF66D1D79AED6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M8l.F.FNn/Y.._.<.BD.'.....n.....z..w.T.....0.]u.T.......A,..].ou7.......l........Zd.&@...... ..#"...."bd:sIl[..!I............K@.".......%.8/...6`@'i...XZd..K\.%b1.A.)q?.'...N.U...1.l....=..-0.D_.i..}6.........0.V..$.p.W.....#....YHR.=.....K"2..WU..1?F.a.&nRK..l{.F....92s....Y....#.0".&.#1.m.....D....;.s...i.'..t/I..1.e.Yf.$.93...g.X.c.d.W.5..u..\.oI....%...E...Zl-....)nO..A.....I.Z.T.R.I.-Z.......,..o..c...;.V.Yk..T.J....B-N.?jq...g.......7..u..V.J.4.%..4,.?.J...K.....K.R.fa.%I....]..W.~\.$iY..U..4.)VZ.IHQ.I..C>d.L.r3..J..r..W...y.B...Z.}mo.....]..x..._.n%UEJ3....o>..x....E...am...@(3.. .8&>..dr8b..X..#.b8.Xb..F..b:.x.....!........Y...~,..%z..o..g.qu..2.^k......b.\9..t~....;f.........7..@mL..~...b....8Y....V.l..'...@.z....V.q.#.n..:i...!.o.~.. . ....j?....H....n;.......Lned@.k.}8).1`...bO.....5`..........22..............@...`..t..u@....x:V.........W.....2....kw.....J..}S:\|...4/W .............}$......v.

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,SdcwHb,SpsfSb,TSrO,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gychg,hKSk3e,hc6Ubd,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,developerdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	23302
Entropy (8bit):	7.958321172488076
Encrypted:	false
SSDEEP:	384:LPli1P8wO0SgCkQbkgRqxucKTBbhvEGux1zpWDVGBuHpYxivQjajswlrkut:LQP8wzd9xDKT1hIzp8VGBGq5EPt
MD5:	9BBCE8B93B48E802C8150A155C8A02C2
SHA1:	2A71F550EDE725B2244CF6CB47B0D4B2D19A7D44
SHA-256:	99330868605BE6E93BDC2D4702ED59831C9474F4CAE6DCD2D86DACC40EB2A131
SHA-512:	FBA0E2BE102B79557D5116B3A24FA04F61F9A2ABBBC983D19C2BA53AE82287737AA28D14E93BBEEE35359A6ACAC7EFA430DB1794E9753E33BB8DAA803067E311
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw
Preview:	RIFF.Z..WEBPVP8L.Z../..?...m.....i.....U.?!D.......'..X@.V1.....?QN.....=b.......,.39.E...W.;...=IN .n.'v.r..2...T....P...2..<(%..;..o...............j......@.{.LG.......a.._...J].,..^U..9....U.c..%......o@.q...v"o.-.{K.....;.../.......}C....+K..r#...M....1..d.p. E@.mS.#.....F....,..n!.....(.......@,.KF....G..G..r....^....@...@...%.D..$.@....fI..6.eY"....$...@8^\~@.......#.. 7e.@.pq.....5i.._z..1.1.....x#~2M.......J.......H..4.2`. ...M.....&....4.)..........i.q.,..@.i....;..).w....."@.....@...E...]..-a...GD.0..$`.....#bD p...c....0.. . ......}....n....c............\|:......1".1.1". ..#........G ..3.# ..m.92./{..{G.../....{C....R.K`.V.5.-.'I.@.tm...HN..II.m.....B.$E..V.4..r..v&...w.s..zmm.m..v....;....Z.<..z....F....u.i.cA...Uv.b.f'....4..q..fF.b.N.m.?.}!..Nt......_....F.A.Clkp.`.....2ww.....nO.9=,...o.j....S..].TM.xH...AWg.S....H....."....$.U.l~.....nc.V.{q.....:......L;p...!r............._Ct.?..._3.k.W....r..r9..v.&.Wuxe....#..

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1106
Entropy (8bit):	7.787752803201212
Encrypted:	false
SSDEEP:	24:38dJmd6OzRCT5aF/lekKHPDT5QSs0t2CWJ/KaK8nsO5IHbUkXIgXlsxtr5TPg:uJmd6OzHwkKJQSUCAK8n35I4T9j+
MD5:	E40F0B71296EC07AFAA6C592D4672836
SHA1:	1E2DEBD68264E2B5F125F9F8A3BC30F91A2F4F8E
SHA-256:	CF6CE632581A0288769E35E2A3112F5C98BBD195803F7DE322F87DA6F2ABCF3F
SHA-512:	BABC4FE33E46FAE6DCE38B06BA6526BE1F158B77AF461712C72A15AFC2E740356B23B7B972A6F75D40807B0D579CC393F1A8BEAA5A51AE4B5E784F8A9767857E
Malicious:	false
Reputation:	low
Preview:	RIFFJ...WEBPVP8L>.../7.....$G.>..........6..9.@....m......8.....$I..Y..$.t.......m...j... ...t...:]P.`.-..h..D~.....K...dkN.U.Q....v..c.)...1D....?..o$Zz....(...R....-.U6..`.\|..zD.".~.eD..nk..}...s......@..J0...B.......V..%U.aE.Z.?HQ!....D.&-I..fv..+.d.J...LKl.5.Z....\gT."F.....9..].8.OA.3....x_.:..T........%..{...2....f.H./?..HH..%.D.7..e.Ri1..~.T......vrf..m...w.w..\.n....m[Yw...@D...@..v..9#..@D)s.n.<~..<..v...l.f4tz.. D..........~.?....U)1`%D.....O....O......].x.B...&.........>.r...ka.1.......s..h..N.q.cF8F.b.y...)....)...b...z{...ja......{..0L....M...VZY^..VpB...DwE........+.#....6.n.]...En.F$......?...OY_f9.-o."...c..B.sb>..........7.....j.w.........~.0..j.S\.;.].t......`.A..=QT....}.kJ..D......fv..>-.......WPV.x.7..).....8..z..!n......!y..............E4}..7......G.rRR..Q.!.).=...0-....,......'..4$w..B..o.7.mep!.\|...7/.\|....._:@...........Q.M'.2`0..8.3>'u../..d.I....~I.....D}Z~VV.}.........7k0~....?.........Xt.\|...x..Y..V.-{...{I

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	4.952963038414406
Encrypted:	false
SSDEEP:	12:UXv7Fc4DpWNRKL+BK/sgl9hrIYerznR3zueIDRTLG9fkVlF38LG0DAvYodXotHNu:u6oTTlrIYevhTuKtLG0MAodXcNu
MD5:	2DFF575911FD65E601AC64F87F07D5D1
SHA1:	AE28A08E8E333C9234AD0D024D0865E5E36C5B2C
SHA-256:	7DF89772DEFA309D97987A7D985ED3F0DA91D81180FE69BB11DA8A8B181B418D
SHA-512:	3E6530272A6497738135CE998D2221588C487A27F20BD3745224F3FA43FDBFF8A2C8DDD42709B01B1CBF8FCE8EB6DC1EC9FADFE5FCF1AAEF0DE5B18CAAA6CBD7
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-42d04e97.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const n=function(){window.MusicKitComponents={version:"2350.1.0"}};export{n as g}

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	24734
Entropy (8bit):	7.989220634720192
Encrypted:	false
SSDEEP:	768:Wn/UZZAPjZWKhquQDmo9BSv8PJLR4gnr6CODy:WnhtWKMaCSevOm
MD5:	A3D5BF1609455BA96B672C1B43A17921
SHA1:	AEE2172F613F47722E9E763B1CD827C94FA611BB
SHA-256:	49F3861FADDCE7B94ED6B3B27534B8E2942A66C78DC1F62B9694ADA23CA218FF
SHA-512:	38A05D14D1C74893EA5229728319CB4FADECF12EC64DA07DDF1E4D5D2653E90FFE544AFBDEC83BEF5020D8B190BA66E5445B06B94056F07932B1B9263924CD46
Malicious:	false
Reputation:	low
Preview:	RIFF.`..WEBPVP8L.`../..I..I.$.md.Yl....?....f9F........Y.7.&.&.W._o.............t....Y..moB.)o.B......OL\|..)3.!..F.@.)I.#.a[B..k...;.........{....$..C.S0.@.U..e...s.m..n......;......o.1..$E.Z.....ZPt..$U.......B. .....iT]D@V./=.{/..F......9ms>.[...>..[w...y...n?.1.c.!.W{...q..8...u.F.G...1.c~..!^xa..9.l}Mw.(.......d.U.Y........n......./.anxm...\.L..4.......9..p...[.@.$[...]p....w...]0rw'.?.._5...,N..+..!.J'..S..Wf..p.....e.9...6aB....K.. ...Lx...m..._..F.m.......No./... ..:CG..;!"W S".B..p.F.m.).0....&G.....A!@!t..HO.....Td.@._.0.p{ty.k...v.....C..,>J...H. ...""AD......w..]....P.2w...6..H...2@.G.H.D.@6.H.L.....4.g.Y6Cht>."y0...R_U..H. ..D@z:D.GzfI..k....N.&.... -..t...RC..2.......\|....D`.K@45.`~.......CD.2...B0.. ....-.M..@..b.@....Z..&....!.q.:...;.'..o...X-.. 2%..#...H-.).<.;"..u.i...Af..H_..H.k7..2.....(...........R.h@..<.9.NZ.`.....i.%..b.....k.{.<.8h...IX..03..Y.Q.1..b..@.&MC........D`..h..B.4.....j.`/...{.....2..D....cs PM...[....U{.@...g..

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8086
Entropy (8bit):	7.96079286623829
Encrypted:	false
SSDEEP:	192:C/p2NUmgrtCLI4+vUSf31ESZLaegozslnytMWa7TkDcop:C/UNzgrtCLI4GUaESpzsgA7TKZ
MD5:	7BFC640FA12EC8BEAFFFF8CA1CCD9BCA
SHA1:	1AA8C0219571A38E8C1600E4A1862FE5B4190B54
SHA-256:	9BDE6D454CCD3BDFD0CB82052F4B559F91BCDE1ACD09C200B25CEAB5D8441178
SHA-512:	BF5A9BE7E0D4F221CD0CA7C9C13F07997507762F6AB48CDC6E69030635867281CC3DA8154B28FDC89A3670EC27F61099F7C87CAD55D0EEA2394E5EC9157908D3
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../?...M0h.H...{...xID.?...,.0...<L.....6.`.I..).p.(...sz.u..$.I.#,.......u$.........g...BKu.D.....i.&...........a.n@..wU..#y"BDE*A.....t.. ....o..... ...........Ir..#5..g..m.U.m...c..k.-i.,..N.effff...<.....en.....,.........).../R.m.....gf.[.F...v44..H...pwwwwwwwww..nqO...(.X`agw...'Z.N.m.y../.6w.[.m...2l.m.mN......{k..R.7..m.t..p.7.....&....`..@....!a..d..b<....7d9..}.....0.f......~).x.g.Fe....K.RP..,2 ........q....Rc{...a.m...@..ET .@. .S..Y.#}..?.{x+.Ad.k.2.k....Vw.6..l.9...:..."@...".. .)R..... .....)..........V.A...0<...{......IW...[...=1...\|..;.t.]...8...A....[5....W.._.'...~.?z..b$..)....B..!......T1"R` ........9....]+>.g?[_}.V... E#P `.f.......N....Uw.:........y.a(..A.:[.B..3.9.....^...Y.C{.og.w9..".HQ.P.x.Vy(.....dG......t......y.'.q.o.9.d@A....\P...S..&%pQZ..Oq.5OD_C.rm.e..6d.+8.P)..@...z...u.....J0b.$......T....C......V7.J.....{....../.!.......6(...>..T.$:o..N..tW..x..V...,......1;.....,F.....k..!..T....

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56398), with no line terminators
Category:	downloaded
Size (bytes):	56398
Entropy (8bit):	5.907604034780877
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyB5lxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0B5chXwW49z2
MD5:	EB4BC511F79F7A1573B45F5775B3A99B
SHA1:	D910FB51AD7316AA54F055079374574698E74B35
SHA-256:	7859A62E04B0ACB06516EB12454DE6673883ECFAEAED6C254659BCA7CD59C050
SHA-512:	EC9BDF1C91B6262B183FD23F640EAC22016D1F42DB631380676ED34B962E01BADDA91F9CBDFA189B42FE3182A992F1B95A7353AF41E41B2D6E1DAB17E87637A0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	154
Entropy (8bit):	6.652039563662075
Encrypted:	false
SSDEEP:	3:ylygn1ZrglllvDaar9Slk9CD3Ilg8KelO4RkU96ysDoh2fn1ZMnsciE6mELl:yoi1Z0ljBrik948KqbbsTE2
MD5:	AD34BDD5D36590117E30C0EC47FC8837
SHA1:	D657298B669EFA1F9694DCEB185E3BE8D486FA56
SHA-256:	0F00E48098A405453027CEC5CAA6E2F64C539F0906EED42C2B1102FB6320816C
SHA-512:	D8FB990CFD46450BBB3D94655DB2A81ACBFE0A409B60583AE1900727774727D6D12AF417D347F396D1F8B7BE4ACF8F0FE0E074515BDC5308A7790E920776F779
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../...._..m.(...._y.i.&.J...a...m...y.&n.m..EU.c.......t......`...C...H......%.s....S......v...vS...[....z....<6._H.-...T...0...

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	334
Entropy (8bit):	5.264573531903094
Encrypted:	false
SSDEEP:	6:kRZzRxVvnGlUu6CQAx8G/QVf1lKy8ZpDMwQRaNw6JpyxZRNlad0:kRZTFGlqCDH/Af1V8XRkbRN20
MD5:	DEEF7F1143EF11F0A2E218CF3420FE38
SHA1:	BD2F6A5B506FF66C5B05AB951B0ABE9AB12B3CF9
SHA-256:	7FB650C42E05BA7364F274CCEB4937043BEFCEC5087261565FCA24311225D031
SHA-512:	5BA09540D16F3A448E212656DF34778D442A36B219FBFD2D10B4A092615B1DC3502775FAC6EF7DEFA9706B8E2A7BD1A35D38D6A4593C634DC9A2A6E98FFCE47C
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=C7s1K"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("C7s1K");._.$q(_.bDa,class extends _.ar{constructor(a){super(a.wa)}H(){return"C7s1K"}O(){return!0}kb(){return _.V3}});_.Aq.C7s1K=_.SC;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	9946
Entropy (8bit):	5.303383252274076
Encrypted:	false
SSDEEP:	192:NdbWsWxwiKpBpVyPPjg9bt9MVzclvs4oRL19n3kufDi/9secuFjel:LbWsWx3KDXR9THl1iL1l3kufG/9sebjS
MD5:	9BB28E4E947B15C91F9178EFF5B23264
SHA1:	87F5AC3AE29A7455DD00F79435B1D91F664F0395
SHA-256:	9FEC8921027F561C8BD0FDF17C244E35F26ABA8E336571597FCCCD9D42D7A0CA
SHA-512:	4566D611CDC37D0F4C34D36ABA45AF69036C4A9E155FAAEC80D70B20C24555A319C8227377D9AA7E7EF02077C2E83C050DB8BACCDBF48417D8772F64818AA7A5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.722.c70bd733e7b77d8198f0.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[722],{32722:function(e,t,i){var n=i(24178),r=i(76588),o=n.SC.attachDelegate,s={setDelegate:function(e){return o(this,e)},localStorageObject:n.tO.localStorageObject,sessionStorageObject:n.tO.sessionStorageObject},a=n.SC.attachDelegate,c={setDelegate:function(e){return a(this,e)},makeAjaxRequest:n.L5.makeAjaxRequest},l=n.SC.attachDelegate,u=n.SC.hasAnyKeys,p=n.SC.isArray,h=n.tO.saveObjectToStorage,d=n.tO.objectFromStorage,g=n.P0.exponentialBackoff,f=n.EE.valueForKeyPath,S="noTopicConfig",v={blacklistedFields:["capacitySystem","capacitySystemAvailable","capacityDisk","capacityData","capacityDataAvailable"],compoundSeparator:"_",configBaseUrl:"https://xp.apple.com/config/1/report",constraints:{profiles:{AMPWeb:{precedenceOrderedRules:[{filters:"any",fieldConstraints:{clientId:{generateValue:!0,namespace:"AMPWeb_isSignedOut",expirationPeriod:864e5}}},{filters:{valueMatches:{isSignedIn:[!0]}},

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	11258
Entropy (8bit):	7.847770069025951
Encrypted:	false
SSDEEP:	192:INqfUfaNNMfiWyCtescqvtnHrB8yDQWJ5Rj34yaEkCBLsY7UXTTHEoLNQF:X4oHmciHVNT7RVa5C5LCTTkSNQF
MD5:	16ADA80965BE7D202D4097C02E38DA64
SHA1:	7A79BE8F463124C104C2021FD95163F9F2A7CFEA
SHA-256:	FFFFBF93550764FCD667CF954B3E7DB27C270D2925796C35D1D1193763E9D382
SHA-512:	8AD31BDA1C87DAC3A22CC004A3C362E5DC1E9023A21EF05CE28C0D8A8615C66E4D32FE906BFA81A7B5F536BA097580F3D43FFDF810A32A634C074A16AAF3BA96
Malicious:	false
Reputation:	low
Preview:	......JFIF............................... ....%...!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W.......-..-W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................E........................!.1AQ.."aq.2R.......S...#3Bbr.C.cs....%4.$...............................'........................!1AQ.2.aB..Rq............?...........................................................................................................................6..g.\|..~.8...k./.@m..8.....>q..!....P.....>o.?g.\|..92.............7...8Y.M@m..8....W`V..Wr..m...on..H.C......K.~%^.\....q>0./..p..p.g... e..q.C...O/.`.....<.1.....#.Bx.J..szNI......A..... d._q..d.g.m....p..................7.L.5...".8y..g.j.........t..J.i7..w...}...k.../..92..}..<...Gk8..J..+.Cp......5V.....E].V...c.!...\|s.....WR..r..}.......Cp.....=.VR.....Ilz.YsB./.9...<.Z...U....F...<..sC...7'.g..>o.Q`e.>o.7....:./..qU.8T..Z.NRY.,....,E..-9J_H.N.[..o..R..<..].(o./.7...>;....\|. g.

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	15512
Entropy (8bit):	7.94238830224228
Encrypted:	false
SSDEEP:	384:mjfpnSj/q8g10wKLg6B8XW7l4CUYLmWWbxd:wnS7vgSLgO8Xcl4CUfW4
MD5:	7744F5AC69419F5A2B6B6C9A21F8F307
SHA1:	38DC8DD4AF99B44B73BEE5025FA1114AC15DD5AF
SHA-256:	B417A3C865819CC87799E5FA4A5C190057D3935AFF7659609B2EBF4F642858A0
SHA-512:	BF368CC50E928A6370A9BEB331DF36E152D3DA2F1F9068AC5C11E426AFDEF923C1ADD1D6E3A54647072AB2891C6A3FDE8623929372D810FF8FEF15B800D87749
Malicious:	false
Reputation:	low
Preview:	......JFIF............................."% ..%%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W......./..0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWW......h....".......................................B........................!1.AQ.."aq.2....B..#$Rr...b..34CS...cs.%.............................-......................!.1A.Qa.."2q...#Rb..B............?...B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.B......!.!.@.G.G./r\|..G.'p\|.h.(.G.....O.X#...._g=DZ.0....'r\|..#...>P.O.X#...>Q{.....%...N..E.8IE......@...en...dn.....%.cn...cn....^.s.n...p..-.(IE...a....0..+u..F.>.h.BX.F.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. ....}a..}b.+.X.6.>..6.>.h..'.F.>..F.>.h.BO..}a..}b. .....O.X#..P'._fn.-..I.......DZ....+u..V.". ....Q...Z.P..9.p\|.."....Q...Q...$...D=.....a&.f.!...E.HE.".`3..!.....)..B..G.....)&...Y..y..t....9.Tn0..XFN...ibV.e........V....1>7.:._....b...

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1750
Entropy (8bit):	5.374422569465188
Encrypted:	false
SSDEEP:	48:o12++pAloqNqe84OuDgkzVJ+mv+gNFkl+:w2+/iqX6Du+mv+gNFkl+
MD5:	50FCF5208E1F2B6FA60F3D6DCC260927
SHA1:	B480EABEA6568561D4B06CC02F23B5B2F0572122
SHA-256:	C28F84FCB3D69A28629B10BBCF6DBF0E0405FEA67DD88E7B5D681854D56FB177
SHA-512:	43C255C39BE06F995DECECF69269C7D983F1349FA6A03715F7F6DF31096A3347DE78268E41313C10D30A8590EF68A00E9541E40C1C939A452010CB5DA595BCA9
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/redirect?id=lxDNVZKK
Preview:	..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://krs.microsoft.com/completeRedirect/lxDNVZKK?correlationId=39685ffc3e1858cc72ea29eff46b6f54&platformSelected=iOS">.. <title>Outlook</title>.. <link rel="SHORTCUT ICON" href="https://c.s-microsoft.com/favicon.ico?v2" type="image/x-icon" />.. <link rel="preload" as="font" crossorigin="crossorigin" type="font/woff" href="https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2">.. <link rel="stylesheet" href="/css/styles.css" />..</head>..<body>.. <div class="container flex-column text-center">.. <img id="icon-img" src="https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw" alt="icon" style="max-height: 128px" />....<h1 id="title">Outlook</h1>....<div cl

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (924)
Category:	downloaded
Size (bytes):	1366
Entropy (8bit):	5.331375343987578
Encrypted:	false
SSDEEP:	24:kziO9JWvTfRFbfjm/Fy7eQXKzHAxtRGbTkLmGbydsVr1sZaSenuXJDezM0Nrl:kiHvTb5yHAxtRGboiGbTYZD5az7Nrl
MD5:	718FDDD40B8C20B3D3724B75A0F986A8
SHA1:	28DFD178747F28A996C6F16C85034CDCD487E436
SHA-256:	6A092F05408B35A3E207B2837D721CC5B6FEB5566E560FFC5055BC020DDD58AB
SHA-512:	AFC3AA017DA81D9F2E07980C7D1A9EA0060D234B759955181A87F96331C81AD835F5A6EE7812D04774CA33EA7C83F0122A7F74E30FCED0180999E096E76D6713
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ojPjfd,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var v7a=!!(_.Te[2]&8192);var x7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new w7a(a.na(),1E3_.uh(c,1),a.H(),1E3_.uh(d,1),b)},y7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},FL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},w7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=y7a(this)}};var z7a=function(a,b,c,d){return c.then(e=>e,e=>{if(v7a)if(e instanceof _.Ed){if(!e.status\|\|!FL(d,e.status.H()))throw e;}else{if("function"==typeof _.Bp&&e instanceof _.Bp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!FL(d,e.status.H()))throw e;return _.zd(d.O).then(()=>{if(!FL(d))throw Error("vc`"+d.ha);++d.H;d.O=y7a(d);b=_.zi(b,_.Bha,d.H);return z7a(a,b,a.O(b),d)})},a)},A7a=class extends _.cq{static Ja(){return{service:{sM:_.t7a,metadata:_.u7a,pZ:_.s7a}}}constru

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (554)
Category:	downloaded
Size (bytes):	510578
Entropy (8bit):	5.695280300193632
Encrypted:	false
SSDEEP:	6144:/LJaSgOPDcwWOTEmzYSU9F0Gx95F+SiT1i7uiv5VQgDx212FC:IS4sGx97+SihiSrFIC
MD5:	E9CCB3DBDE79BA5FFDF9CAD4B32D59FD
SHA1:	3A8CD67ADC7C885BDF683F1E7F491E6A4A50679F
SHA-256:	8F2C6777C7CCC01AB67290FA8ACD5A4C4866BE64129F39DFAEB9197DFA15E137
SHA-512:	5CA7C8439030C9B4B966760C660640A094B0D6E30E10DF85D7B900C6F9108B0E309298ED93C006634BB3F437BAB3CFF1B83A5D1B18C666C04346F0856294C461
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var y=function(){return[function(E,X,B,M,c,v,Y,I,h,J,F,a,C,R,P){return E+4>>3==(E-8<<2>=(R=[1,"F",22],E)&&(E+2&12)<E&&(M=u[32](4,B[R[1]]),P=A[16](32,0,X,B[R[1]],M)),R[0])&&(M=void 0===M?null:M,Y=[3,341,278],c=d[46](16,21,X,u[31](32,B)),J=e[48](7,Y[0],X,u[31](35,X),u[31](28,Y[R[0]])),I=g[27](77,15,u[31](29,X),X,u[31](33,438)),v=u[31](38,Y[2]),a=A[32](R[2],l[13](2,d[9](48,36),X),[u[7](24,v),u[31](34,X)]),C=[c,J,I,a],null!=M&&(h=A[8](73),F=A[8](72),C=[W[30](8,h,u[31](28,B),u[31](37,0))].concat(C,[W[30](8,.F,R[0],R[0]),h,e[39](12,M,X),F])),P=C),P}]}(),g=function(){return[function(E,X,B,M,c,v){return 3<=((((E^(v=[7,"W",2],19))&v[0]\|\|(this[v

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8956
Entropy (8bit):	7.972053517151453
Encrypted:	false
SSDEEP:	192:UlbCKATseTe8r8oy/zF7Ntufqluv4rPoxSYlOK5cbFBOmAq:UlbCKk3rg7haylKxSAOwcbFhl
MD5:	377CF0E1FE167DE18CBDAB4B67D2E326
SHA1:	ECA8A9C29E2AE14A1DED33160286057C424ABE70
SHA-256:	24566A4C7B24A46CB1B156E593AB4C98E40791CC5E4A49A410A2AC5860509A22
SHA-512:	A86583215D6A29E00068FEFA905B94FCCF8C53F95409849D23F88EEF0DAC463D2F130684ECA77917BFC27DA1D8336FDE7C817C825B4A228BE1835DC981F8D9CF
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw
Preview:	RIFF."..WEBPVP8 ."..P....(.(.>A .D..!.i5.(....p....C....}+....w..3...?`."..?r?C....._..a......~......{.........P.......I...............~@?......k...^.....1........./....p.R.V..v.....?.>C...../.O.<.t...D?.}..........x...]./..}A...[........(....../.?.?.}......C../........_.].......>>.j.......w......~......{..._........7.#.....................3.......bOk.G.m.G...k...vg..>.8...+.k.y...9...........\|?&........^x.."w.w...T.Y............"At..r.b.a...vr!.K.nFQK4.W,....Yc/#.c.R.....;1P.+"..>.3......'....A.......O.7...r.Ou..36,.o?IrE8.g.V......#1X.X.D....f%...O._....V..DMi...".n.L...ee...r..HW...R.....&..\|..{..U....p..,.rK..D....f....N8..n...c..v/....l.H#..mT..N..0&WG!.......~\.I.)P:.u...{#.Y.......I...#.J.2D.0..bD=`#UnZPgd..>w.?.....O.......#.t(f..Qs>[....[.L.W\..D..9-....H..W.U.%.....O9K...M..6.T*'PJ.C..9...;+5G..O.ITE%+.p....~..W..2.Z...7..F!.......s6.[<.p.`6..s.X.!...x..({.. ...L.m"..o.a..a....W..<.t.....c........E....K.P\|P.v2!GZ......S..U..N..(

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	40644
Entropy (8bit):	7.989683828799069
Encrypted:	false
SSDEEP:	768:9ALe12qaOKZw6Md4iF7CWrx7LZLKsjiCCvryGLKeoKGYVIoKIg:9ALtqaOKZwl4ivrlZOs2CAbWeoKGYVIH
MD5:	9D9A28DFE5CFE510C0E17D3990D8FE4A
SHA1:	969D7269198571814924D52DBEC15339A67E2908
SHA-256:	1C324A06CE457154BD370FFB15EB6F7F3A0258786138B75823BF6752594B2248
SHA-512:	6A680B135D11C9E223306F6397DBFFC22DDCD9D57E2431D883B657750B029F5739AFE42218246A8F7B7957C218A299A4911EBEAF99D37A10CB82D2BD4C3C91FD
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.MH.$Il.t..X..?..........._......WGe$9dA"....%..g.. .........wF.q...'.......HU.?.1R#.H9.3-dJ]i.h..\|R...f....$.Kl[@..... .s.l.WI../_.........Z.o..T........;.....l6.0..9.7.$,;p.].A...Z..`!..R..Jmy..H.C".LUZ.2u......a.Z..iX.U.: .d..r.".H.8_...FM.......:G..>.L.Yj...8..[...#u'.-oo......i.i..m)IL.z..E..o....S@.S..A..`}5...8.o<&...9...A..#.$$.$.9....'....oFX.[.q$I...MqE..=..b.h$... y-x_.U]..EH.m)..AP.q.\J....[.mA...9.m..2......o....[.....^....._U.$C.!dH..!.!..!IB.....1..H.i3..dF.u/_m.q6.l...2..$!$!.Y.0.$ic.F&0.....c.$A..$...I....}.$F.$.`..c.c."..I.....}Y.e.......nc6f.0..1.0.0.I.,..c&.......o..P.B..;...!.......h...i..d....S.,c....@.1qu.R.(.....Q:@~.@.n..B....2p.I.~.u.u.u.u.YQ.......?.E7.N....qR..:...!.gB....z..BPnN......PHHB...=@.PKL\_..g..........u.$.e..TS.$....(...+.Zf..4.... .0...6.`.X#.1..$......._...b.....c2KLar"1.1...a....oWH.0..I....T.`..!.......b4...H.NI..-...g...!..{.^....~.l?.Z C.DfIb*$&1&1.$......../~......8....8.

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	4004
Entropy (8bit):	7.921213566288204
Encrypted:	false
SSDEEP:	96:pkHiDU35dDOAfHekbrRE5D9/EfTKECuk/5s:2h5Ye+eeD9sbKAkBs
MD5:	708900440644413321CCD0376724277C
SHA1:	C4B13DEB7753B8CBBCE953086239EF7C2CFC8006
SHA-256:	6EE43498CE91D71E442C035FFC0E818E033857DA143558AFDB14943312098E0B
SHA-512:	668736001E2D34BAD8A361C82B602AC61119A48ED126C40AB19251FCD44EB2E34A13076FB1D278A2DDA1B804100CCD1533569690F99CCCE79CABD52FD9B5A0C4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..?....?.v..<B....O.{...r..9Gp..2s..........5.)..2J....9....Re.3MX.H.d[.Ui......3.>...@v$I.d....S.I..}.13.....H.L...m...m...m.m..y..$[U.s....e..(\.S../..O..%3]................@... y...f^..7....Qw.Q.LoD.d5..^.. By......a.+....EV.&b..7...E..v....);.A..1........S3iw...!.lo.y.+`E..:!.LAa.E..f....5.[..L...,.....@Rs...W...6......}A.jU.....v..i6..ZU.....aY6W! ....\2. 3....MYD.2...dV.r.H.e..Q.1.K...i.G.$#...>.wyD.n.......j.h..q.h7..n.r.....:.....G.MH......r..o_.XiU)($.......t......DP...k\+{.(!T.A..l...GKc.Av...(.....!Z..A.+..q.....q.:..X.@...C.k.l.H.v..B.b.M..b\2.... 6...B...7........Y.<..%sJ....]'L#..uo)..K...E#..j}.?Q...Y.h.f...(MJ...G......&....y...1s{..'.^...QE;3...aK"k.D..q"5.j.&....[w\|........n.....g...Y.......e.t.._...fUNY.3..s...F.....,4^..R/...... .Z.\2....e.j.....^.@...^E90IO.J.0...c./w .......r..D...F..]..z.........x.^.c....h......V=(.K.Cno..b5.p8....w.d(..-...."..r......Y V.".'.iW....r..C.....GH

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (800)
Category:	downloaded
Size (bytes):	115601
Entropy (8bit):	5.704801017453952
Encrypted:	false
SSDEEP:	1536:bvF1eT6vnYyTemNGVy+z6NBnDnWHA5JBNTS5nFFXqcZ:buTKnVTbYI+z6NBnDnWHA5Q5FFXqcZ
MD5:	E184AFF4E29D210E6E6AFA3D4BAA3791
SHA1:	3F9B4C3269C48F5026BCB9AB4133D7AC6337AAF7
SHA-256:	3AEA04C7A2D7C5C4618747CC00D14F778F76043D2C7DDB30C84FBF9D4758E1B3
SHA-512:	92C76644619D31B6E6D7B02FEE55329B909F8FEA9F84209167F1B4950FA8AE9F971DB3516637213DD790959B4E1DCC1C3DA7433DC8D975D42F762247A4A3C0A0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,Z5wzge"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.wX=function(a){return"Rated "+a+" stars out of five stars"};.var iKb,jKb;_.gZ=function(a,b){b=b\|\|{};_.fZ(a,_.oo({Ha:iKb(b)},b))};_.iZ=function(a,b){_.hZ(a,_.oo({Ha:iKb(b)},b))};iKb=function(a){a=a\|\|{};const b=a.Vg,c=a.Kh,d=a.De;a=a.Dv;let e;e=_.jZ();e=e+" "+(null!=b?b:a?"cKScvc":"IfEcue")+" "+(null!=c?c:"HPiPcc");return e+" "+(d??"")};_.fZ=function(a,b){b=b\|\|{};const c=b.content;a.open("button","J4hqjc");jKb(a,b);a.W();a.print(c??"");a.Ga()};._.hZ=function(a,b){const c=b.href,d=b.target,e=b.content;a.open("a","BDhSBd");jKb(a,b);a.ma("href",_.zo(c));d&&a.ma("target",d);a.W();a.print(e??"");a.Ga()};.jKb=function(a,b){b=b\|\|{};const c=b.Ha,d=b.Of,e=b.We,f=b.ariaLabel,g=b.jscontroller,h=b.jsaction,k=b.jsname,m=b.jsmodel,n=b.jslog,p=b.id,t=b.attributes,v=b.hidden,y=b.disabled;b=b.autofocus;f&&a.ma("aria-label",f);a.ma("class",(c?c:"")+(null!=e?" id-track-click":"")+(y?" hf6Ybc":""));null!=

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	6438
Entropy (8bit):	7.962532855941252
Encrypted:	false
SSDEEP:	192:uoIjRkriJCEqyo/J4/efNcy7NIPBQFn7ci2WGSOEqM8p:mjRkmQQo/fcy7NIPGcSOBM8p
MD5:	85DC87478C1A43485A97BE67420532E0
SHA1:	2946EA409D9E66A559F275E5A472470F9CB142F4
SHA-256:	9426C1CB54B6F8B4334CED56F6B4DF85E3D16AA52348A4022E5788C75F45FFB6
SHA-512:	A9ECAB0707DD44889EBE40CEB013B0FED713F7EF0ABB88C7213556CDC2CE52696C86B1C77CBEE006A32DFC4C825C4A3B3C87EF9F0BD249C823C95AC7E9DF5E00
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M0p.6n4..#.....f......c.<.B+G......?.`.(.$E..B-._..).....6.$'.....l...u..H......O.....u...z..V.W..&....Y.S<x$f1..y........s.M..[...E...Vk.....G.=...k.}91.;..+.^.....^.:D.9\.....>C....#"YlOw.h.....p..m.6~.m.9f....YffF<....c...[...$=..GdTVe..\S.c.m.Gk...m......Uf".....)7..=....A2q.w.zo.k.m.m.v...I.[#I.r...L....z=...F...0..?..x............z....~..xs.%.............9?.vHn.f.?.........\.!S..%.L.y...1.{........G...p..V..qv....sRnJ..23.z....{.........zS.?......^N..I{...^{..,_..=E..Y.{F.C...x.NDQ.8..Z.14....Pp.Q..o........../."..Q.\|S.Z...Y]..i.....n.....:..s.pY!y[.......'.%w.\z.Rr.P....F....%..........\_...g.......V.........b.....m.....u..s..=.. &.....c.'.$...n.rW.].................[....5.bg..%..+a.A.......5.t...8......O.:C..-@......m.'.....%.c.).$.ebb:^G.N<D<B\|`......}.z.p.2X..N...5.-o....r...7\|.i.VX.0i...6;.m.....EF.!..(@.(..`...%...'....B..K.G]^(X;........US.....(.U.A...T......Y/.6>..B./p.....K.{G.)&k..

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	122
Entropy (8bit):	6.193622167186358
Encrypted:	false
SSDEEP:	3:SPZrkgZKMHBDSJzFQ4lHIJ7iJ5aRe87X:SPZdIMHBDSJphlHI1iJEEqX
MD5:	FEB72E879CFBEBD89C09EC8C1726E60D
SHA1:	DE5262635E71D3ED4BD3E922E3697E7016AA785C
SHA-256:	662FEFAA5DBF93270D2AFCF8FB1AD9C789D600A17E3D3911CF366ADCB5F77D53
SHA-512:	E89213168D37DBD873AC806CAC400738BBCD81B1B89AB84914219FC2106BC767231CF6E8C0A195945CE45E839D730225E9F5182764666CD126F6ED6E6E30F626
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s24-rw
Preview:	RIFFr...WEBPVP8Le.../....'@&m.^5;.C&m.^.;.A&m.~.9.". m.f..O[...m.....HrT.M`!\ .>...U....O..u.....+,.?....$Y.M......

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10942
Entropy (8bit):	7.957006422703397
Encrypted:	false
SSDEEP:	192:YMY2AuhnJ2aKIHabY9G9uEpaoIEtSvrb467R4n6x9yQ6+xne3rQ/QzyPlj5XwhX9:aQhJiU9G97Czb46V4nkLne3GRPlxOt
MD5:	50D7B3BFBBBE0D627C40710B7A50B3B2
SHA1:	9ACBDF856DCB7814FE77D55C69AC51C403C33322
SHA-256:	CAF84F0C4AEE337CB0DC13903528C599C9090739FC0A25DC887CB0897A2D2350
SHA-512:	68F9EA5F32A12C3CA045317AE82F9CFC6DA928EBD0C2BD69AE949F87AB7CCC4C260A9C78937A4FA8ED1544B3D1D5FF3E6482E3E4DA9A9D8C0ED1DF95E7D2A665
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw
Preview:	RIFF...WEBPVP8L.../..?..Fn#IQU5=@.......O....d\0K.b.../ .L.E.JW.].-.....J{.!.C.m.u.8.$5M5...$.SM...............p......6l......rcs#.$N.}...3/.~.9.$E.....^\|W....S...@.$...&\....S...$I.$_..5.q.X........6R.9.Q...8CQ.0.1~..#\.`.Ku.7.>../?.T....`.......%I....p.Ps..z$...(....U.2...\)......!.........#C@4.Z..[...P..u!c.......H........s.Ps.s.\...U>y....^.Qw.7Z..1......f........S..w~.....R...-.p...w~8_X.....5Mza....%\...e.@...D..,.B...@+.....ilF..........i...'........z.+.2+......z....H.O.....t.{t\|. .3.....@...q...N......7u.........j..n...-...b....V.e...l..so...#.S.s...D....Y.....A.W....?"+3.E.I..#).+(.C".6.I...JjSk..h.K..+(...[(..2.Ljei.v...Z....]P..C.tC...NH...o.$.2...E........{..-......k..P. )..4.."I..<.Y-;=>..;....p.....n..........].*.........9..I"..k..I.!.vLL$:G.p...P.hb.!:.....+...T....:.......W..j.{{.F..}.2;.]v...m....z.....F...v...w.g.G..J.<....Q..A....3.{...m#E......'......@.....p1..P"...:..Pp....\DW.Y...jX.T.c.....Xd[.E9.

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	179240
Entropy (8bit):	7.988894279260863
Encrypted:	false
SSDEEP:	3072:bU0fv2bXl6ABM7Me/fBwILHrMIjcgEXe0Czq/hI1hagswlQ7N8WAVPu:AwIl6xaILHYIg7X4i2agswlQG3I
MD5:	47BB815C40A19EEFA2EAFDB66AA679A8
SHA1:	4D1B601F178A658E42A6B7F534D80CC0ADEE0181
SHA-256:	E3D077DCE75D0C3AA12A656FAB50252AE70E4C38E157C55171EACF714A01B979
SHA-512:	17AA1B0B7C908A991623AF3EA760ACED520B2F5D388EABC56AAB2C29ECB5668F1B172570E59EC0A15473C8B9271D0A6FFA8E149A2AEAA318201CBF1BFEE48F6F
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw
Preview:	RIFF ...WEBPVP8L..../..I.M@..6ls..b..?l;.....O.$%^%).Y.\|).......R...C^9....W..DN.....'...3.$.f.H.%R.O.'..;g).'....u..Q..d}.x..........Y..G...In-..(Kw.q..c)3..$Q.D.z."I...c..)i.$%..8..V.H.}7K.....B}K..G...].(.8.w..qhfv.....K...~..l.!Zn[.EY...$.).7.1..<0.m..@.m..0..I,9.n.g......O).tl'H..F.(..j}.$w....lk'VlI~..9+....k.-Fk+.\|Gz.?.eK.9OR.e0. H...8...${$I..f.vB..$.....C....ha..t..9..A.0.X.D..9.g...H...lGR..wr........v.<..;.m.N.8{.h{}"Ek"..H.........P../b...+...E.t..j.-Ws?..{E_. .. ..l.vi..@.@[...........v).........../......+..=.\J...\|..O.........^....\..-....$Y.$.....Z.{....E.g.......q }.....\...f.,0.......7....d..m.V,....O..4..B..h4..Fg.....-..Uks$G:$.H.B...E.z.......IS.b..$..~...m..$.{.....bf.....3..!....m.&....@.4...t.8.0...B.J...@.(...B'C............9..a8L.H%.BL H......p........A0J..I..U......@.t...:. .@...M.)..`..C..0$R.....1.Q.... ..A.....P.`.&......!.!..!}..b..0........S.......(i....9.)RP...)&.8..E#.@.RP.+.a.D..B1...Q..n......)... ..P... f...R.......

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/supports/supports-Siri@2x-24823d6579e391abe63d240af5ed42d2.png
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	185044
Entropy (8bit):	7.991321469571043
Encrypted:	true
SSDEEP:	3072:aEkU4FyMb0zgDkoisNMXlQ+dvfKnGEM0iZHQpQOTa6xSL8S8YOcyj6i2j3D2:acOIzTG+dvSjixQpQqQYS8YOrCzS
MD5:	E70DE46FCAAC21C65B893402F9A30C35
SHA1:	9FB4642A6896F3EE15626AADAE7357A4931DEAE7
SHA-256:	771C842FDB5385FBFB848C028BA13F35EDFD29A0A9136D58E14387434641D264
SHA-512:	82FB3828419E37B5DA06DBF2954675FF8A6DB7F3F217FEFD765BC6F7D68535EAD35E9D6E5EEB8B705832CE7961D30797841A9865C52747161F97C6601CBE08A5
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@..6l3p..t..l;.vAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R.o.'.&;{).'.....I.+K)..L.$i..S"MR.H......X..e.Ds..r....m.GRl."..g.lJ...7kf.3.-`.fS$...6h....o.V-G..dY.&\|.!.W.WdI.,I.,q;.....%#.Nd.0f..]..."A. Zt................o.g.;N....D:.3.p.o..l.d..J.(.J...IB.....H..3.E.DGY.$.bO.s..c:.F..'.U.`.%.D:../.%..d?.......oY.d.c!e..m.e..cK..Dvd9....%....A..@)'9...;N./.... &...$...;iR..&..........I.....\|~.......]}]..r...Y.....\|>........@[.-.j.....$...GO9........xu...Cp.....\|`......$.....bM......`.,X. ....(Z~Q.`.x...?..8.9....b.......\......j.nl.............t:.1.B.`"..F...E.....H.m.@$A.4I..6/..._.a.y..IS.".b!..(.j..m.RZG.bc. &....._1g.cvd.d.Dzk....m.t.;PL.v..-...N\. Jy...+.....f5...\|Z.1.b.A..(..Ln....B.X........X1.B..I`.A.0.f.Aq..R.*z/JQ..a.B1..5Cj.`..aU...V..#......b.J. .....BLL..[...RdB ..b...".f..B35.....D-. .D.j.`6.....Y.`..E.7..Z`..(.......SM.......Y. ..jT.R...[J...F.f.abb%.j X)....`.p..R-J.4..H.&..

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1670
Entropy (8bit):	7.8767527471024845
Encrypted:	false
SSDEEP:	24:ph192w/y3IssGoCogO+MaZfU9LHAPwUtxrRiEEe/i0GI9E0cApv7R:/FEIsMaVogYsRiEEYGI9EzAx9
MD5:	4261C35A4740D97B2EA62DC1E730DE55
SHA1:	220A025A6B18C577508B7374741A9A58C2240022
SHA-256:	604C0FD6A3EA399AA08158490E254D25C68B0A89D2944C8E7BB9E00F4AC389FD
SHA-512:	5F7A46303F14AB9AD32353BE06DA9147EDFF298F09E02FD24F52322586383EDB8A42BDC821F603F11401FCE48778E492B4D04231260AD6B735F63E62A3A2867A
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw
Preview:	RIFF~...WEBPVP8Lq.../?....Em.1..].?.E!....3...0v..\|...H...q./..."....AI#IR...0...=.Q$I.s.`......0..T.......@..j.P....{.....J.$..xx....<..\|.-.#........hv......;..\|.G...13333..Z..U...8.I..z..E..#..^.P)..l9....J.;.Ft.3;..wX.rh.6.g....m....6+;UR.m.Ie.......m[.........d..BF...p...H.]...=;..m.IJ....u..#..{...... .]..~...x.x.S..T...\@..Ep..Yr.J9\|..C:..0..[_....g.... .4X..~xd.z.K1V..65...!hs@....`....i;O=.U.Q.......q..V[u..6R..XM.....t:.5...hE....fX=......r.`....UN- .Y...U!....N.......3_z^...!.....(.J..................\.^.p.T/f....4...Y3.(.x9.s.+=.B..}...&z.-&..FQ........:.i.@.B.0z.=;.=..[.s_..St.(.+.....H....%....wF..&..C>.9..J..(l..E.I3.......B.<..+."~).....#.3Zn.%..J=P..hM...........q....NP.u.t.vo.{.Tg...`...v.A..j&E........f.^H.R...xRX..lB...CK....Fi[9.8w\|.".E.:T.E..`.........b.......jX.F^@.N.........z.4#...X..%..!...K.bc..,.(.2 ...)..U..XI.o...H=i&..+#.SF......F....`..%.!.[.....x].....a(.A.S.N.uRg:._.@.Z..>.n..N..BR'..$/...`TF...

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	532
Entropy (8bit):	7.283977070466249
Encrypted:	false
SSDEEP:	12:85sAWAvQ2Zb4GGt49trdImK9K9K9K9K9K9K9K9K9K9K9K9K9K9Cnt+dT5+rYI78v:86ArVZ0s9trdI99K9K9K9K9K9K9K9K9o
MD5:	22B41D7243F0BD9F96DFBE91BF838128
SHA1:	83E6CB1C51CAFB53A20C7CEFE6E731A380F98E19
SHA-256:	1BBED35B227E80E4532D92E8DA97B044311739957C2797D2B25017AC5567E849
SHA-512:	E9B94847AFC16F21E4E3D5911AF509007018E6763365BFFA23FCE253EEE0653BB3C5B3E346C37B61A380012B28D48B2B0AB1E506D601F6D429FA588598427826
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw
Preview:	RIFF....WEBPVP8L..../..?.?.*..Vs....C@x.......4...\|~:....n...c....ji.........l .....H...'>.O<~.:_...~p.%%%.H@(. p_......Y.2\...E.@.$J.......6.R.:...I.J....##.?.........o..>.r.l..c.R......n.X..9.V/c,...PK}..@..iu..D...S..5.f..".F..\...X2B-tS4B..b...O,.!....!....!....!....!....!....!....!....!....!....!....!....!....!....!....!.\....K...G......Yq..v..7.r.).r..X.mS,.yx.r.).r...r.M..aJ.....s....m.^..aJ......].......o..@...]......jw..[.^...6l..=.5K.]..okv.j..}......X..k..T....k...R.IJ..ZwM.y=.z.W..m.....\|D

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 97812, version 1.0
Category:	downloaded
Size (bytes):	97812
Entropy (8bit):	7.9978966269531435
Encrypted:	true
SSDEEP:	1536:MxlNoV+iuaRqgnUJ9gPxMZXFwme9Xvaw8aeyH17mP4bTJagZcXU4N/42Y/4g2H4O:MLNoVXuaogUQyZVPeB0yHB9bhoU4NrYc
MD5:	FCF85E1007388C2707C982FB27D09163
SHA1:	1329D694C10F4F8DC05AEF70257E93D0481ECCB5
SHA-256:	878C9752B9A516DDE472D30E4E5C57172B2E766CF21F336DF168E2302382CA0E
SHA-512:	B1ED620469C913144DEB20BA1984DAC483112554ACE2320ACFA0F17CD529D3A0CA2F9B06AE0F7F819136842C798F05DECB16A2DCA77D126428FB0FEA9401344E
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_regular.woff2
Preview:	wOF2......~....... ...}............................$..H.`H...X...`....6.$..$..(.. ?meta....X. 8.t[.,.......?...t.!.......F..R.~..CL-8..C.F4..UW..3.m..u..1..[9...........\|y...o.......b.Z.....D..1.EL%E..".....iS.Rb].y..j...YBX..R05%3%..$..ZF..Ok7.~......lSR......6.e.....yz...F<..FU....Q..H.)....p".m.+..".~..Y.......@#.........tQ.y~..q92.c..GO.`..x..p.\|RD....7.....T.......b.+u\@.W:....T.u.... .AB.$>. E1.A......?.,.!m..).~e......gd.....v.4..i......<......^e.3.R.J.V4;_..{....tV..Q.._.l....E..,F..\.b.. ..............{..(......C.".......z{...g...F...h+A^...<..\..c..MP.J*..... ....Q+v.5.9E\.q...h..D..%"...p......}Z._..#..8A..w....5[.<\|@v&..1C...m3?w...n...r\|0d{....d./...[.-A.Crre .Ds.T....F.5U.Ly....#rs..?...7%@......a2.B.b7L.....>.=.. ...~..2..o........mo. \C@5W.6....6.i....w...@s.ww+.F..D..h..0....k..........H...l......AR...l.X...n..d....1`T..b`$`...........i....?@s..#. .A0..c..e...6j.....="[T.B.......W?.......}...7.,...5...n..6...Z..

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.438918653095554
Encrypted:	false
SSDEEP:	384:iKVGASJ4sTu+Gs+fyJzwTggT2uYRorzONAXE+8b90CLpOIhchkwrJc7jEMCGY898:i8eu+Gs+6JzwsghIorzU+8GCLEIhchk2
MD5:	F7912A0DCA4CFF196DB4289CA94949AB
SHA1:	C77AA211EE365759DE06A41B24B3EB6199B2881D
SHA-256:	8903153FFD7DB2080F5500AE9BD462A8FBDA9B6F2288A94A2CC1FF420AE2A9F6
SHA-512:	F8724CFDA057CD8419C7FDA1F139971DDA538DC702E286FAC89A90DAF7E1A4C5D477A4E1EDED9B09CFE6FAFD1E6BAC806DC8300EFC0FE6F12A157842733EBF24
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fI4Vwc,fKUV3e,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ojPjfd,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,w9hDv,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appsdatasafetyview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.t8a=function(){const a=(void 0)?.Bx();return a?[a]:[]};_.lq.prototype.Bx=_.r(34,function(){return _.Xg(this,3)});._.u("RqjULd");.var i9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new h9a;isNaN(b.jsHeapSizeLimit)\|\|_.Ih(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Ih(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Ih(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,h9a,1,c)}}},m9a=function(a){if(j9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new k9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Fh(c,2,Math.round(b.startTime));d=_.Fh(d,3,Math.round(b.fetchStart));d=_.Fh(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.572699744443935
Encrypted:	false
SSDEEP:	96:kwyiJUDxTzDpl1Kkd6LptMdAWfQSjpBGK0C7j9l:IiJGRXNVf7BR53P
MD5:	8BA2EDD9F42179D4924B494E4E595753
SHA1:	CB4A1E1372AE8BC41AD0F107EBA242AF29B6D3F6
SHA-256:	8027C013D6F57FA6E6B96E8B553ABD2FB151F8A65B6D6FE29C790BC9A09278F9
SHA-512:	58B04364B0B13A54F0825CBAF993DFAC461E22B0C3357852E253EAAECAF85264717A84779FCD79CD6D4F064D03125233B006BE20F6CCC319FC74157181AC4223
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7s1K,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var z$a=class extends _.x{constructor(a){super(a,0,z$a.Ud)}vc(){return _.Tg(this,1)}af(a){return _.Dh(this,1,a)}};z$a.Ud="f.bo";var A$a=function(a){a.FG&&(window.clearTimeout(a.FG),a.FG=0)},B$a=function(a){const b=_.PL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.pF=""!==a.rD&&""===b;a.GM=a.rD!=b;a.rD=b},D$a=function(a){a.My=!0;const b=C$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.vH));_.Vj(b,(0,_.Ke)(a.O,a),"POST",c)},wM=function(a){if(a.LK\|\|a.My)A$a(a),a.FG=window.setTimeout((0,_.Ke)(a.H,a),1E3Math.max(3,a.zD))},C$a=function(a){const b=new _.An(a.GT);null!=a.tI&&_.Ln(b,"authuser",a.tI);return b},.E$a=function(a){a.pF\|\|(a.My=!0,a.zD=Math.min(2(a.zD\|\|3),60),wM(a))},F$a=class extends _.oj{Zc(){this.LK=!1;A$a(this);super.Zc()}H(){B$a(this);if(this.My)return D$a(this),!1;if(!this.GM)return wM(this),!0;this.dispatchEvent("p");if(!this.vH)return

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1219)
Category:	downloaded
Size (bytes):	147015
Entropy (8bit):	5.703092584621022
Encrypted:	false
SSDEEP:	3072:D5JaeJBu5HqHxueUSh0dU/kYmkUELrCGNUQTvZcRl3p66/DB:zJI5HqHxu1Sh0dU2kUkrZDAH7B
MD5:	53300B9163364FB2C8C04A4C6470A780
SHA1:	700393CCEA7509C29ECE8A8AB0481B6FDE29CBA7
SHA-256:	35781FC3D2BC46E1FF7ACA3D4862EABFBD36AA23643EED4F0A7F940424C6CB87
SHA-512:	F67EDF396BF20CCB7AC5911E4B68CBFB12E5A625B43BDDA851E901D6FFC1F1DB75B348FD61E788CEEDBF924021D3CD00028DEB2AFB87D3A3DCA01166E8344AEC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.RFseMhHCNio.2021.O/ck=boq-play.PlayStoreUi.9IQipBon8RQ.L.B1.O/am=07MNBn1ggYH_SN-DLQ/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,CvxVpd,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,M2Qezd,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RqjULd,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,bm51tf,byfTOb,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fPcQoe,gKWqec,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,rpbmN,s39S4,sJhETb,soHxf,t1sulf,t7vw0b,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appshomeview/ed=1/wt=2/ujg=1/rs=AB1caFWYtN90leZZo9JlihVO_H1nvMYtFQ/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,RjJvI"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{.var ypa;_.ln=function(a,b){if(!Number.isFinite(a))return String(a);a=String(a);let c=a.indexOf(".");-1===c&&(c=a.length);const d="-"===a[0]?"-":"";d&&(a=a.substring(1));return d+(0,_.Qf)("0",Math.max(0,b-c))+a};.ypa={eO:["BC","AD"],eU:["Before Christ","Anno Domini"],AU:"JFMAMJJASOND".split(""),TU:"JFMAMJJASOND".split(""),vO:"January February March April May June July August September October November December".split(" "),IO:"January February March April May June July August September October November December".split(" "),FO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),JO:"Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec".split(" "),PO:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),.WU:"Sunday Monday Tuesday Wednesday Thursday Friday Saturday".split(" "),HO:"Sun Mon Tue Wed Thu Fri Sat".split(" "),VU:"Sun Mon Tue Wed Thu Fri Sat".split(" "),BU:"SMTW

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2840
Entropy (8bit):	7.8803852518960795
Encrypted:	false
SSDEEP:	48:r724o8WCI7otjpJlgP8pMjdg8XgFxi5HyC+slXUutOVletFxksBuN/X+cy2FgVSv:mf8WdotjpJlgPcMgissf0V2F6N/6ZZY
MD5:	D1A7C5BDAE96E3CEF5D2EA33660454F5
SHA1:	A208B8BB9D376CDE199CC48D75EBC3E60CDEE75F
SHA-256:	83153E7F75101015D69EB7EF66BBA3500B6EC29A1DC6B889DB5D1A2E7F314956
SHA-512:	144E1D2FEB5B5203E7A39C7F41298009BAD98F4088DB823E2BE7F98D232052C89C58BB790E97A35C2BCF76F033F23753CB4E0CC3F6B7F8E68F25F6879E5EE2DD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M(n.6....t....".?.\|..`....b..t.u.....m+.^D.T@D.E.....6.$'..0.0/.....m#I..3..#bf6......Z8....9.3l.jL....{.g%: W%.....W.P.W$kU}......ke..>..,m.vL.t.....U.c.m......fi....m.m'#...{/2...X.....m..m.V...1.m..m.m.m..i{..V(.m..\..s..m.T.hQ...Q..#.H.m...{..k..........r.....Te1j........={..[L..<..8.4.}....1..>E......,.,..k......y..K..r('>M..=.i..jH..K...e.v.^q.?.;......f.....N.6..U.'........I.X.d2....6....8pc..=.....W.........`b$ ..b.,F..LmRKG....Em...}g....:.G>:...u..A.3.@.FJ...H..d.Rv.@R.f.u5.....~....v.'/[.."......I.38.,......@..3..nmy\z.y...m.y.y..A.`@.DY.L.S....p..h.. JLR.Rv._8{..'N..rN..o.g@D......nhd....(..B.....)-MP.......k..`..<p.:[P.(....!s..34b....if%(.A..PY.K%....W.s...._..wN"B-..\y.cM..!.......]. ...A.C. ......A..V...[...]ZA..E.Ht2..........v(..$.J..t.....f..!@bG.@. .0iNf.D.?T.......f.s..bi..o...Ken..9..D..b..I...p.....OC.......$..0s.e....j].VR..t.~w.._;..[E%.f....`b......5.Pg}z179E..0....

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10602
Entropy (8bit):	7.9529391117564465
Encrypted:	false
SSDEEP:	192:T0hh3kXnWQNYV6Q4MtjuGlPUBwc7k9GueRJvaWZRFrMcBs8U:whhUXWQNYYX2lPQ4UXtZRiJ
MD5:	27903BD5B9AA7C3ABAB807AB493ADBD3
SHA1:	8D19C7DEA760EB480A0508FDC22708C80223E7BE
SHA-256:	5FFD3C8D248CB815E2194F28C8D1A7E8031E3301FFC09BE727D9E42D6D470731
SHA-512:	7ED5DFB90E3C059B30D5EE4C41A7969A18A5E66EDBDE18499209F188AE1C8D92C38592346D61ACB7A7347609E9083AFCF9349AAED0BDB54BEDC20231717F2A74
Malicious:	false
Reputation:	low
URL:	https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw
Preview:	RIFFb)..WEBPVP8LU)../..?.M@r.H.... .....g.......:b.....-..dC.Gp.....m<;...~...+.v&...j.e.MK.....L[]..%....A...M...6z%......e.^z.l.5......+".......}.s...rd..F. ...m..?.2.SH.m.j...]^.:..K.....I.#.gz...d!........Us`../,.....3..Fe..=C..C.....">....-.N.....\.%.H...E.?.......zt."!Q]J....f........YW..~.@.....X.z. ..V.s..L.1...X.....i..t.v!.,e.....k..Y....@$..];."}i.]C>....A?)E.k..)H).kQ._......@".2u).K$.QTJ.i...(:..B.R..R'...ED......?....)}.....R.P.TSGx....+.m.EC...c..K.#".j>...\.......>...c..+..+.8....HRU.Qo.s...n/..3.w.=..D5+..$qr.......U.T6.b.A5.B.4...$YI....@Wv.B...v....,%.JW..>b.....R.R.....6..W.r..g...a...M.3"...!...k......h..'R.\.W...^....k ....^...NF....*8..F........y<.._..$)..K...g.1....K../..dV...............vswww.uw.....:.LOU..s..:......"V.].........~...'..$Z.....S!.".}.9.l.A;.$E..Q={.133.......j.xB03.s..LWR.m.$..>....2"r...m..3s.#......V..p..........".v2..e...~.zD......3..g&s.39Uuh.5.......Ui.V./."....^...J.2.Wf.

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	185044
Entropy (8bit):	7.991321469571043
Encrypted:	true
SSDEEP:	3072:aEkU4FyMb0zgDkoisNMXlQ+dvfKnGEM0iZHQpQOTa6xSL8S8YOcyj6i2j3D2:acOIzTG+dvSjixQpQqQYS8YOrCzS
MD5:	E70DE46FCAAC21C65B893402F9A30C35
SHA1:	9FB4642A6896F3EE15626AADAE7357A4931DEAE7
SHA-256:	771C842FDB5385FBFB848C028BA13F35EDFD29A0A9136D58E14387434641D264
SHA-512:	82FB3828419E37B5DA06DBF2954675FF8A6DB7F3F217FEFD765BC6F7D68535EAD35E9D6E5EEB8B705832CE7961D30797841A9865C52747161F97C6601CBE08A5
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8L..../..I.M@..6l3p..t..l;.vAD.'@....e.D.J"%..,-%..)v2e.G.5G...9..D.....K..;.<%Zf^H.%R.o.'.&;{).'.....I.+K)..L.$i..S"MR.H......X..e.Ds..r....m.GRl."..g.lJ...7kf.3.-`.fS$...6h....o.V-G..dY.&\|.!.W.WdI.,I.,q;.....%#.Nd.0f..]..."A. Zt................o.g.;N....D:.3.p.o..l.d..J.(.J...IB.....H..3.E.DGY.$.bO.s..c:.F..'.U.`.%.D:../.%..d?.......oY.d.c!e..m.e..cK..Dvd9....%....A..@)'9...;N./.... &...$...;iR..&..........I.....\|~.......]}]..r...Y.....\|>........@[.-.j.....$...GO9........xu...Cp.....\|`......$.....bM......`.,X. ....(Z~Q.`.x...?..8.9....b.......\......j.nl.............t:.1.B.`"..F...E.....H.m.@$A.4I..6/..._.a.y..IS.".b!..(.j..m.RZG.bc. &....._1g.cvd.d.Dzk....m.t.;PL.v..-...N\. Jy...+.....f5...\|Z.1.b.A..(..Ln....B.X........X1.B..I`.A.0.f.Aq..R.*z/JQ..a.B1..5Cj.`..aU...V..#......b.J. .....BLL..[...RdB ..b...".f..B35.....D-. .D.j.`6.....Y.`..E.7..Z`..(.......SM.......Y. ..jT.R...[J...F.f.abb%.j X)....`.p..R-J.4..H.&..

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 19, 2024 16:05:56.308598042 CEST	192.168.2.6	1.1.1.1	0xf78c	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:56.308760881 CEST	192.168.2.6	1.1.1.1	0x2ae2	Standard query (0)	aka.ms	65	IN (0x0001)	false
Apr 19, 2024 16:05:57.847594023 CEST	192.168.2.6	1.1.1.1	0x7b83	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.847873926 CEST	192.168.2.6	1.1.1.1	0xaa17	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:05:59.113804102 CEST	192.168.2.6	1.1.1.1	0xfdcd	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:59.122122049 CEST	192.168.2.6	1.1.1.1	0xef9f	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:05:59.688749075 CEST	192.168.2.6	1.1.1.1	0x4e3c	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:59.689506054 CEST	192.168.2.6	1.1.1.1	0x17fc	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:00.124208927 CEST	192.168.2.6	1.1.1.1	0x246f	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:00.124700069 CEST	192.168.2.6	1.1.1.1	0x2425	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:01.123419046 CEST	192.168.2.6	1.1.1.1	0x5aa5	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:01.124111891 CEST	192.168.2.6	1.1.1.1	0xc111	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:09.343560934 CEST	192.168.2.6	1.1.1.1	0x3f65	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:09.344213963 CEST	192.168.2.6	1.1.1.1	0xc38	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:10.870642900 CEST	192.168.2.6	1.1.1.1	0x73b7	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:10.870971918 CEST	192.168.2.6	1.1.1.1	0x601	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:15.558073044 CEST	192.168.2.6	1.1.1.1	0xa0aa	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.558283091 CEST	192.168.2.6	1.1.1.1	0x8b79	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 16:06:16.755325079 CEST	192.168.2.6	1.1.1.1	0x4b41	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.755542994 CEST	192.168.2.6	1.1.1.1	0xb71a	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 19, 2024 16:06:16.755918026 CEST	192.168.2.6	1.1.1.1	0x2055	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.756047964 CEST	192.168.2.6	1.1.1.1	0x2791	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:18.212403059 CEST	192.168.2.6	1.1.1.1	0x3b90	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:18.213378906 CEST	192.168.2.6	1.1.1.1	0x3b31	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:24.159037113 CEST	192.168.2.6	1.1.1.1	0x4312	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:24.159769058 CEST	192.168.2.6	1.1.1.1	0xb845	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:24.160686016 CEST	192.168.2.6	1.1.1.1	0xec44	Standard query (0)	is2-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:24.161175013 CEST	192.168.2.6	1.1.1.1	0x6b19	Standard query (0)	is2-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:24.285492897 CEST	192.168.2.6	1.1.1.1	0xf026	Standard query (0)	is5-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:24.285767078 CEST	192.168.2.6	1.1.1.1	0x7555	Standard query (0)	is5-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:24.452924967 CEST	192.168.2.6	1.1.1.1	0x3641	Standard query (0)	is4-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:24.453891993 CEST	192.168.2.6	1.1.1.1	0xa062	Standard query (0)	is4-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:24.454615116 CEST	192.168.2.6	1.1.1.1	0xd65c	Standard query (0)	is3-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:24.455559015 CEST	192.168.2.6	1.1.1.1	0xe23c	Standard query (0)	is3-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:25.033166885 CEST	192.168.2.6	1.1.1.1	0xc37a	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:25.033489943 CEST	192.168.2.6	1.1.1.1	0x464	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:41.549036980 CEST	192.168.2.6	1.1.1.1	0xb2f1	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.549228907 CEST	192.168.2.6	1.1.1.1	0x544	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 19, 2024 16:06:44.602042913 CEST	192.168.2.6	1.1.1.1	0x9c1b	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.602042913 CEST	192.168.2.6	1.1.1.1	0xcc38	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Apr 19, 2024 16:07:00.598218918 CEST	192.168.2.6	1.1.1.1	0xf3c5	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:00.598597050 CEST	192.168.2.6	1.1.1.1	0x4472	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 19, 2024 16:07:11.212867975 CEST	192.168.2.6	1.1.1.1	0x3790	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.213156939 CEST	192.168.2.6	1.1.1.1	0x5135	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 19, 2024 16:07:24.845953941 CEST	192.168.2.6	1.1.1.1	0x4ae0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.846218109 CEST	192.168.2.6	1.1.1.1	0xea7d	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 19, 2024 16:05:56.413697958 CEST	1.1.1.1	192.168.2.6	0xf78c	No error (0)	aka.ms		184.24.201.247	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.952300072 CEST	1.1.1.1	192.168.2.6	0xaa17	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 16:05:57.952352047 CEST	1.1.1.1	192.168.2.6	0x7b83	No error (0)	www.google.com		108.177.122.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.952352047 CEST	1.1.1.1	192.168.2.6	0x7b83	No error (0)	www.google.com		108.177.122.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.952352047 CEST	1.1.1.1	192.168.2.6	0x7b83	No error (0)	www.google.com		108.177.122.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.952352047 CEST	1.1.1.1	192.168.2.6	0x7b83	No error (0)	www.google.com		108.177.122.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.952352047 CEST	1.1.1.1	192.168.2.6	0x7b83	No error (0)	www.google.com		108.177.122.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:57.952352047 CEST	1.1.1.1	192.168.2.6	0x7b83	No error (0)	www.google.com		108.177.122.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:58.000147104 CEST	1.1.1.1	192.168.2.6	0x8fc	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:58.000147104 CEST	1.1.1.1	192.168.2.6	0x8fc	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:58.000147104 CEST	1.1.1.1	192.168.2.6	0x8fc	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:58.000147104 CEST	1.1.1.1	192.168.2.6	0x8fc	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:58.013607979 CEST	1.1.1.1	192.168.2.6	0xb8be	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:05:59.218285084 CEST	1.1.1.1	192.168.2.6	0xfdcd	No error (0)	play-lh.googleusercontent.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:05:59.794403076 CEST	1.1.1.1	192.168.2.6	0x4e3c	No error (0)	play-lh.googleusercontent.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:00.229751110 CEST	1.1.1.1	192.168.2.6	0x246f	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:00.230490923 CEST	1.1.1.1	192.168.2.6	0x2425	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:00.236063957 CEST	1.1.1.1	192.168.2.6	0x9822	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:00.236063957 CEST	1.1.1.1	192.168.2.6	0x9822	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:00.236063957 CEST	1.1.1.1	192.168.2.6	0x9822	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:00.236063957 CEST	1.1.1.1	192.168.2.6	0x9822	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:00.265712976 CEST	1.1.1.1	192.168.2.6	0xcbad	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:01.229541063 CEST	1.1.1.1	192.168.2.6	0x5aa5	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:01.229573011 CEST	1.1.1.1	192.168.2.6	0xc111	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:09.448559999 CEST	1.1.1.1	192.168.2.6	0x3f65	No error (0)	play.google.com		173.194.219.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:09.448559999 CEST	1.1.1.1	192.168.2.6	0x3f65	No error (0)	play.google.com		173.194.219.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:09.448559999 CEST	1.1.1.1	192.168.2.6	0x3f65	No error (0)	play.google.com		173.194.219.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:09.448559999 CEST	1.1.1.1	192.168.2.6	0x3f65	No error (0)	play.google.com		173.194.219.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:09.448559999 CEST	1.1.1.1	192.168.2.6	0x3f65	No error (0)	play.google.com		173.194.219.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:09.448559999 CEST	1.1.1.1	192.168.2.6	0x3f65	No error (0)	play.google.com		173.194.219.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:09.499228954 CEST	1.1.1.1	192.168.2.6	0x7288	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:09.499228954 CEST	1.1.1.1	192.168.2.6	0x7288	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:10.262691975 CEST	1.1.1.1	192.168.2.6	0x9cc7	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:10.262691975 CEST	1.1.1.1	192.168.2.6	0x9cc7	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:10.975460052 CEST	1.1.1.1	192.168.2.6	0x73b7	No error (0)	play-lh.googleusercontent.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.662734985 CEST	1.1.1.1	192.168.2.6	0xa0aa	No error (0)	stats.g.doubleclick.net		64.233.177.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.662734985 CEST	1.1.1.1	192.168.2.6	0xa0aa	No error (0)	stats.g.doubleclick.net		64.233.177.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.662734985 CEST	1.1.1.1	192.168.2.6	0xa0aa	No error (0)	stats.g.doubleclick.net		64.233.177.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:15.662734985 CEST	1.1.1.1	192.168.2.6	0xa0aa	No error (0)	stats.g.doubleclick.net		64.233.177.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.859858990 CEST	1.1.1.1	192.168.2.6	0x4b41	No error (0)	stats.g.doubleclick.net		74.125.136.156	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.859858990 CEST	1.1.1.1	192.168.2.6	0x4b41	No error (0)	stats.g.doubleclick.net		74.125.136.154	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.859858990 CEST	1.1.1.1	192.168.2.6	0x4b41	No error (0)	stats.g.doubleclick.net		74.125.136.157	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.859858990 CEST	1.1.1.1	192.168.2.6	0x4b41	No error (0)	stats.g.doubleclick.net		74.125.136.155	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.860621929 CEST	1.1.1.1	192.168.2.6	0x2055	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.860621929 CEST	1.1.1.1	192.168.2.6	0x2055	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.860621929 CEST	1.1.1.1	192.168.2.6	0x2055	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.860621929 CEST	1.1.1.1	192.168.2.6	0x2055	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.860621929 CEST	1.1.1.1	192.168.2.6	0x2055	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.860621929 CEST	1.1.1.1	192.168.2.6	0x2055	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:16.860635996 CEST	1.1.1.1	192.168.2.6	0x2791	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 19, 2024 16:06:18.318741083 CEST	1.1.1.1	192.168.2.6	0x3b90	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:18.318741083 CEST	1.1.1.1	192.168.2.6	0x3b90	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:18.318741083 CEST	1.1.1.1	192.168.2.6	0x3b90	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:18.318741083 CEST	1.1.1.1	192.168.2.6	0x3b90	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:18.318741083 CEST	1.1.1.1	192.168.2.6	0x3b90	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:18.318741083 CEST	1.1.1.1	192.168.2.6	0x3b90	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:24.263776064 CEST	1.1.1.1	192.168.2.6	0x4312	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.264005899 CEST	1.1.1.1	192.168.2.6	0xb845	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.265559912 CEST	1.1.1.1	192.168.2.6	0x6b19	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.265783072 CEST	1.1.1.1	192.168.2.6	0xec44	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.391364098 CEST	1.1.1.1	192.168.2.6	0x7555	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.391537905 CEST	1.1.1.1	192.168.2.6	0xf026	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.558362961 CEST	1.1.1.1	192.168.2.6	0xa062	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.558994055 CEST	1.1.1.1	192.168.2.6	0x3641	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.559798002 CEST	1.1.1.1	192.168.2.6	0xd65c	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:24.559901953 CEST	1.1.1.1	192.168.2.6	0xe23c	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:25.138739109 CEST	1.1.1.1	192.168.2.6	0x464	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:25.139508009 CEST	1.1.1.1	192.168.2.6	0xc37a	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:41.653740883 CEST	1.1.1.1	192.168.2.6	0xb2f1	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		64.233.185.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		142.251.15.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		64.233.177.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		74.125.138.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		142.250.9.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		172.253.124.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		64.233.176.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		74.125.136.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:06:44.706634998 CEST	1.1.1.1	192.168.2.6	0x9c1b	No error (0)	i.ytimg.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:00.703552008 CEST	1.1.1.1	192.168.2.6	0xf3c5	No error (0)	play-lh.googleusercontent.com		173.194.219.119	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:06.957978010 CEST	1.1.1.1	192.168.2.6	0xbbf6	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:06.957978010 CEST	1.1.1.1	192.168.2.6	0xbbf6	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.317750931 CEST	1.1.1.1	192.168.2.6	0x3790	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.317750931 CEST	1.1.1.1	192.168.2.6	0x3790	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.317750931 CEST	1.1.1.1	192.168.2.6	0x3790	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.317750931 CEST	1.1.1.1	192.168.2.6	0x3790	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.317750931 CEST	1.1.1.1	192.168.2.6	0x3790	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.317750931 CEST	1.1.1.1	192.168.2.6	0x3790	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.473395109 CEST	1.1.1.1	192.168.2.6	0xceb1	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:11.473395109 CEST	1.1.1.1	192.168.2.6	0xceb1	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.950368881 CEST	1.1.1.1	192.168.2.6	0x4ae0	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.950368881 CEST	1.1.1.1	192.168.2.6	0x4ae0	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.950368881 CEST	1.1.1.1	192.168.2.6	0x4ae0	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.950368881 CEST	1.1.1.1	192.168.2.6	0x4ae0	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.950368881 CEST	1.1.1.1	192.168.2.6	0x4ae0	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:24.950368881 CEST	1.1.1.1	192.168.2.6	0x4ae0	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:37.970587969 CEST	1.1.1.1	192.168.2.6	0x68bb	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 19, 2024 16:07:37.970587969 CEST	1.1.1.1	192.168.2.6	0x68bb	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49716	20.25.241.18	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:46 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 58 4c 42 69 43 79 6e 76 79 6b 53 47 41 44 72 41 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 65 38 32 61 66 38 31 39 61 32 34 62 63 32 30 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: XLBiCynvykSGADrA.1Context: ce82af819a24bc20
2024-04-19 14:05:46 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:05:46 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 58 4c 42 69 43 79 6e 76 79 6b 53 47 41 44 72 41 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 65 38 32 61 66 38 31 39 61 32 34 62 63 32 30 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 51 44 4d 49 53 30 2f 75 39 47 46 49 30 35 31 55 5a 55 74 55 73 74 77 67 6e 65 63 7a 7a 66 70 51 30 6d 6c 58 74 36 78 6b 56 6b 36 74 56 32 77 65 77 72 62 44 48 72 4c 42 4c 36 35 48 2f 6c 38 52 6e 34 72 30 73 45 56 6f 4c 68 46 35 73 50 6b 77 4a 53 58 7a 56 4a 34 31 69 58 43 54 48 70 45 79 33 71 77 4a 48 69 63 56 39 5a 50 6b Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: XLBiCynvykSGADrA.2Context: ce82af819a24bc20<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWQDMIS0/u9GFI051UZUtUstwgneczzfpQ0mlXt6xkVk6tV2wewrbDHrLBL65H/l8Rn4r0sEVoLhF5sPkwJSXzVJ41iXCTHpEy3qwJHicV9ZPk
2024-04-19 14:05:46 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 58 4c 42 69 43 79 6e 76 79 6b 53 47 41 44 72 41 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 65 38 32 61 66 38 31 39 61 32 34 62 63 32 30 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: XLBiCynvykSGADrA.3Context: ce82af819a24bc20<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:05:46 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:05:46 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 33 56 47 59 4b 71 4c 45 78 55 79 47 7a 34 4e 66 67 44 39 76 45 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: 3VGYKqLExUyGz4NfgD9vEg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.6	49717	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:54 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 79 38 54 70 32 55 78 57 2f 30 32 50 59 45 41 52 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 33 31 37 37 32 35 66 38 35 31 35 65 64 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: y8Tp2UxW/02PYEAR.1Context: f5317725f8515ed
2024-04-19 14:05:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:05:54 UTC	1063	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 30 0d 0a 4d 53 2d 43 56 3a 20 79 38 54 70 32 55 78 57 2f 30 32 50 59 45 41 52 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 33 31 37 37 32 35 66 38 35 31 35 65 64 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 51 44 4d 49 53 30 2f 75 39 47 46 49 30 35 31 55 5a 55 74 55 73 74 77 67 6e 65 63 7a 7a 66 70 51 30 6d 6c 58 74 36 78 6b 56 6b 36 74 56 32 77 65 77 72 62 44 48 72 4c 42 4c 36 35 48 2f 6c 38 52 6e 34 72 30 73 45 56 6f 4c 68 46 35 73 50 6b 77 4a 53 58 7a 56 4a 34 31 69 58 43 54 48 70 45 79 33 71 77 4a 48 69 63 56 39 5a 50 6b 7a Data Ascii: ATH 2 CON\DEVICE 1040MS-CV: y8Tp2UxW/02PYEAR.2Context: f5317725f8515ed<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWQDMIS0/u9GFI051UZUtUstwgneczzfpQ0mlXt6xkVk6tV2wewrbDHrLBL65H/l8Rn4r0sEVoLhF5sPkwJSXzVJ41iXCTHpEy3qwJHicV9ZPkz
2024-04-19 14:05:54 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 79 38 54 70 32 55 78 57 2f 30 32 50 59 45 41 52 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 35 33 31 37 37 32 35 66 38 35 31 35 65 64 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: y8Tp2UxW/02PYEAR.3Context: f5317725f8515ed<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:05:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:05:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 53 59 6b 4f 41 41 56 43 49 55 4f 6b 4c 63 72 74 39 6f 62 44 47 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: SYkOAAVCIUOkLcrt9obDGQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49723	184.24.201.247	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:57 UTC	656	OUT	GET /AAb9ysg HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:57 UTC	436	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://aka.ms/krs?id=lxDNVZKK Request-Context: appId=cid-v1:7d63747b-487e-492a-872d-762362f77974 X-Response-Cache-Status: True Expires: Fri, 19 Apr 2024 14:05:57 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 14:05:57 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49724	184.24.201.247	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:57 UTC	664	OUT	GET /krs?id=lxDNVZKK HTTP/1.1 Host: aka.ms Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:57 UTC	452	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://krs.microsoft.com/redirect?id=lxDNVZKK Request-Context: appId=cid-v1:26ef1154-5995-4d24-ad78-ef0b04f11587 X-Response-Cache-Status: True Expires: Fri, 19 Apr 2024 14:05:57 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Fri, 19 Apr 2024 14:05:57 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49728	13.107.246.41	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:58 UTC	680	OUT	GET /redirect?id=lxDNVZKK HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:58 UTC	596	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:58 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: TiPMix=5.216823125384784; path=/; HttpOnly; Domain=krs.microsoft.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=krs.microsoft.com; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140558Z-r1f585c6b654jmm77r44nb4c4w00000000g0000000005f7b X-Cache: CONFIG_NOCACHE
2024-04-19 14:05:58 UTC	1757	IN	Data Raw: 36 64 36 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 39 35 31 39 33 37 35 39 36 2c 20 61 70 70 2d 61 72 67 75 6d 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 6b 72 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 Data Ascii: 6d6<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://krs.microsoft.c
2024-04-19 14:05:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49729	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 14:05:59 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=147442 Date: Fri, 19 Apr 2024 14:05:59 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49730	13.107.246.41	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:59 UTC	625	OUT	GET /css/styles.css HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://krs.microsoft.com/redirect?id=lxDNVZKK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
2024-04-19 14:05:59 UTC	430	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:59 GMT Content-Type: text/css Content-Length: 555 Connection: close ETag: "1da8c5a0d5d162b" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140559Z-15497cdd9fdf95mbn5un4a9yqs00000001n000000000hwd1 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:59 UTC	555	IN	Data Raw: ef bb bf 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 65 67 6f 65 20 55 49 2c 53 65 67 6f 65 55 49 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 34 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6c 65 78 2d 72 6f 77 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: .container { font-family: Segoe UI,SegoeUI,"Helvetica Neue",Helvetica,Arial,sans-serif; margin-top: 64px; display: flex; flex-direction: column; text-align: center; align-items: center;}.flex-row { display: flex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49732	13.107.246.41	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:59 UTC	688	OUT	GET /images/GooglePlayStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=lxDNVZKK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
2024-04-19 14:05:59 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:59 GMT Content-Type: image/png Content-Length: 9371 Connection: close ETag: "1da8c5a0898449b" Last-Modified: Thu, 11 Apr 2024 21:48:48 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140559Z-15497cdd9fdtp976bg8q1vzk2g00000001w0000000004tz5 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:59 UTC	9371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 a8 08 03 00 00 00 c0 6e 84 20 00 00 00 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da 6d 50 d1 0d 43 21 08 fc 77 8a 8e a0 80 0a e3 d0 be d7 a4 1b 74 fc a2 60 f2 6c 7b 89 27 1e 78 22 e9 7c bf 9e e9 36 00 85 12 d5 ce 4d 5a cb 06 12 12 50 0b 38 3b 74 72 c9 34 79 02 29 43 a8 9b 9e 74 5d 02 93 70 54 fa 91 9b ef 65 e9 71 61 ed 45 2d aa 17 23 7e 44 e2 be 27 84 c2 9f bf 8c 20 3a 1b 1d 8d f8 08 23 09 23 04 4f 94 30 50 ff 56 6e c2 fd fa 85 fb 99 77 b0 af 34 88 78 6f fb e7 dc 6d 7a 47 b5 77 10 e0 c4 82 d9 18 91 bc 01 1c 0b 13 aa 05 75 b2 8c 42 2b 53 63 9e 4a 0f 33 1b c8 bf 39 2d a4 0f 31 ad 59 4f 0b 2b 4a 7e 00 00 01 84 69 43 43 50 49 43 43 20 70 72 6f 66 Data Ascii: PNGIHDR4n zTXtRaw profile type exifxmPC!wt`l{'x"\|6MZP8;tr4y)Ct]pTeqaE-#~D' :##O0PVnw4xomzGwuB+ScJ39-1YO+J~iCCPICC prof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49731	13.107.246.41	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:59 UTC	686	OUT	GET /images/AppleAppStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=lxDNVZKK Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
2024-04-19 14:05:59 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:05:59 GMT Content-Type: image/png Content-Length: 6391 Connection: close ETag: "1da8c5a0d5d0cf7" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140559Z-r1f585c6b65lt486hwtrgcedsg00000000ng0000000017kb X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:05:59 UTC	6391	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 a0 08 03 00 00 00 e3 25 4f 7f 00 00 01 53 50 4c 54 45 00 00 00 a7 a7 a7 a6 a6 a6 a8 a8 a8 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a5 a5 a5 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 00 00 00 ff ff ff a6 a6 a6 59 59 59 4d 4d 4d 1b 1b 1b cc cc cc 04 04 04 fd fd fd fa fa fa f0 f0 f0 a3 a3 a3 69 69 69 33 33 33 94 94 94 bb bb bb e3 e3 e3 aa aa aa 08 08 08 ee ee ee a0 a0 a0 81 81 81 0c 0c 0c f4 f4 f4 de de de 21 21 21 d9 d9 d9 16 16 16 88 88 88 65 65 65 10 10 10 7d 7d 7d f6 f6 f6 0f 0f 0f c8 c8 c8 49 49 49 d2 d2 d2 70 70 70 25 25 25 9a 9a 9a 77 77 77 1f 1f 1f fc fc fc e8 e8 e8 e6 e6 e6 6d 6d 6d 3c 3c 3c 42 42 42 98 98 98 2b 2b 2b 28 Data Ascii: PNGIHDR%OSPLTEYYYMMMiii333!!!eee}}}IIIppp%%%wwwmmm<<<BBB+++(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49734	64.233.177.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:59 UTC	747	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:05:59 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:52:01 GMT Expires: Sat, 20 Apr 2024 13:52:01 GMT Cache-Control: public, max-age=86400, no-transform Age: 838 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:05:59 UTC	723	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-19 14:05:59 UTC	1255	IN	Data Raw: 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 18 Data Ascii: i0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-19 14:05:59 UTC	1255	IN	Data Raw: b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a 20 Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-19 14:05:59 UTC	1255	IN	Data Raw: bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b 04 Data Ascii: yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-19 14:05:59 UTC	1255	IN	Data Raw: cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 cd Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-19 14:05:59 UTC	1255	IN	Data Raw: b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 68 Data Ascii: B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfCh
2024-04-19 14:05:59 UTC	1255	IN	Data Raw: ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 20 Data Ascii: wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-19 14:05:59 UTC	749	IN	Data Raw: 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 57 Data Ascii: @c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49735	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:05:59 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-19 14:05:59 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=147463 Date: Fri, 19 Apr 2024 14:05:59 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-19 14:05:59 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49736	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:00 UTC	510	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:00 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:05 GMT Expires: Sat, 20 Apr 2024 12:46:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 4795 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:00 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-19 14:06:00 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-19 14:06:00 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-19 14:06:00 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-19 14:06:00 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-19 14:06:00 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-19 14:06:00 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-19 14:06:00 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49738	13.107.213.40	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:00 UTC	430	OUT	GET /images/GooglePlayStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
2024-04-19 14:06:00 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:06:00 GMT Content-Type: image/png Content-Length: 9371 Connection: close ETag: "1da8c5a0898449b" Last-Modified: Thu, 11 Apr 2024 21:48:48 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140600Z-r1f585c6b65lt486hwtrgcedsg00000000kg0000000036ha X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:06:00 UTC	9371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 a8 08 03 00 00 00 c0 6e 84 20 00 00 00 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da 6d 50 d1 0d 43 21 08 fc 77 8a 8e a0 80 0a e3 d0 be d7 a4 1b 74 fc a2 60 f2 6c 7b 89 27 1e 78 22 e9 7c bf 9e e9 36 00 85 12 d5 ce 4d 5a cb 06 12 12 50 0b 38 3b 74 72 c9 34 79 02 29 43 a8 9b 9e 74 5d 02 93 70 54 fa 91 9b ef 65 e9 71 61 ed 45 2d aa 17 23 7e 44 e2 be 27 84 c2 9f bf 8c 20 3a 1b 1d 8d f8 08 23 09 23 04 4f 94 30 50 ff 56 6e c2 fd fa 85 fb 99 77 b0 af 34 88 78 6f fb e7 dc 6d 7a 47 b5 77 10 e0 c4 82 d9 18 91 bc 01 1c 0b 13 aa 05 75 b2 8c 42 2b 53 63 9e 4a 0f 33 1b c8 bf 39 2d a4 0f 31 ad 59 4f 0b 2b 4a 7e 00 00 01 84 69 43 43 50 49 43 43 20 70 72 6f 66 Data Ascii: PNGIHDR4n zTXtRaw profile type exifxmPC!wt`l{'x"\|6MZP8;tr4y)Ct]pTeqaE-#~D' :##O0PVnw4xomzGwuB+ScJ39-1YO+J~iCCPICC prof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49739	13.107.213.40	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:00 UTC	428	OUT	GET /images/AppleAppStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
2024-04-19 14:06:00 UTC	432	IN	HTTP/1.1 200 OK Date: Fri, 19 Apr 2024 14:06:00 GMT Content-Type: image/png Content-Length: 6391 Connection: close ETag: "1da8c5a0d5d0cf7" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140600Z-r1f585c6b65w5j7cea444uznq400000000kg0000000049a6 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-19 14:06:00 UTC	6391	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 a0 08 03 00 00 00 e3 25 4f 7f 00 00 01 53 50 4c 54 45 00 00 00 a7 a7 a7 a6 a6 a6 a8 a8 a8 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a5 a5 a5 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 00 00 00 ff ff ff a6 a6 a6 59 59 59 4d 4d 4d 1b 1b 1b cc cc cc 04 04 04 fd fd fd fa fa fa f0 f0 f0 a3 a3 a3 69 69 69 33 33 33 94 94 94 bb bb bb e3 e3 e3 aa aa aa 08 08 08 ee ee ee a0 a0 a0 81 81 81 0c 0c 0c f4 f4 f4 de de de 21 21 21 d9 d9 d9 16 16 16 88 88 88 65 65 65 10 10 10 7d 7d 7d f6 f6 f6 0f 0f 0f c8 c8 c8 49 49 49 d2 d2 d2 70 70 70 25 25 25 9a 9a 9a 77 77 77 1f 1f 1f fc fc fc e8 e8 e8 e6 e6 e6 6d 6d 6d 3c 3c 3c 42 42 42 98 98 98 2b 2b 2b 28 Data Ascii: PNGIHDR%OSPLTEYYYMMMiii333!!!eee}}}IIIppp%%%wwwmmm<<<BBB+++(

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.6	49742	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:06 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 48 6b 63 35 51 6c 77 71 55 6d 45 6f 6a 46 55 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 30 38 39 66 38 64 30 66 63 32 39 32 33 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: YHkc5QlwqUmEojFU.1Context: 31089f8d0fc29231
2024-04-19 14:06:06 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:06 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 59 48 6b 63 35 51 6c 77 71 55 6d 45 6f 6a 46 55 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 30 38 39 66 38 64 30 66 63 32 39 32 33 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 51 44 4d 49 53 30 2f 75 39 47 46 49 30 35 31 55 5a 55 74 55 73 74 77 67 6e 65 63 7a 7a 66 70 51 30 6d 6c 58 74 36 78 6b 56 6b 36 74 56 32 77 65 77 72 62 44 48 72 4c 42 4c 36 35 48 2f 6c 38 52 6e 34 72 30 73 45 56 6f 4c 68 46 35 73 50 6b 77 4a 53 58 7a 56 4a 34 31 69 58 43 54 48 70 45 79 33 71 77 4a 48 69 63 56 39 5a 50 6b Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: YHkc5QlwqUmEojFU.2Context: 31089f8d0fc29231<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWQDMIS0/u9GFI051UZUtUstwgneczzfpQ0mlXt6xkVk6tV2wewrbDHrLBL65H/l8Rn4r0sEVoLhF5sPkwJSXzVJ41iXCTHpEy3qwJHicV9ZPk
2024-04-19 14:06:06 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 48 6b 63 35 51 6c 77 71 55 6d 45 6f 6a 46 55 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 31 30 38 39 66 38 64 30 66 63 32 39 32 33 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: YHkc5QlwqUmEojFU.3Context: 31089f8d0fc29231<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:06:06 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:06 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 74 6f 69 53 33 67 68 38 6e 30 57 74 6d 6e 64 51 55 65 54 54 30 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: toiS3gh8n0WtmndQUeTT0w.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49745	13.107.246.41	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:09 UTC	795	OUT	GET /completeRedirect/lxDNVZKK?correlationId=39685ffc3e1858cc72ea29eff46b6f54&platformSelected=Android HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
2024-04-19 14:06:09 UTC	504	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 14:06:09 GMT Content-Length: 0 Connection: close Location: https://play.google.com/store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d054ca87a-c225-7607-d3e6-a03d7c136077%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140609Z-15497cdd9fdr7qjrsrzpfd6yqc00000002200000000002pm X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49756	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1085	OUT	GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10312 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:48:28 GMT Expires: Sat, 20 Apr 2024 12:48:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4663 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 40 28 00 00 57 45 42 50 56 50 38 20 34 28 00 00 10 95 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 11 aa 9d d4 28 04 04 b4 b7 70 b6 e0 8f 7c 30 c0 de 07 cc 97 e2 bf 00 3e 59 67 80 e7 71 fe bd fb 19 c0 81 ea 01 fb 1d ec 01 fa dd e9 a3 ec 7d fb 81 e8 97 ff ff 59 0b ce 3f d5 3b 5a fe d3 f8 e1 e7 6f e2 bf 1c fd 3b f1 93 fb bf ff 1f f3 bf 0b 1f be f8 44 ea ff b3 3f 72 7f 8a 7d 59 fa a7 f7 2f d8 1f ed ff b9 5f 7b 3f 9c ff 0b e1 6f c7 ff e3 7d 40 bf 1d fe 3d fd 33 fb 07 ec 8f f6 ff da 0e 39 9d 5b cc 17 d4 7f 98 ff 73 fe f1 fe 2f fc e7 f6 ef dd 7f 65 5f da 3f 2f bf b7 7c 21 f5 df fa f7 e5 3f f7 7f b0 0f e3 1f cc 3f b4 ff 71 fd 95 fe fd ff e7 ea ff f3 9f e9 3c 74 7e d9 fe 9b fc c7 f9 2f 80 2f e4 7f d2 7f c8 ff 65 ff 4f ff a3 fd 77 ff ff b6 8f e5 7f Data Ascii: RIFF@(WEBPVP8 4(*((>AD(p\|0>Ygq}Y?;Zo;D?r}Y/_{?o}@=39[s/e_?/\|!??q<t~//eOw
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 8d 54 66 c8 0d d6 2d 5f 30 52 22 5b db a6 d4 92 85 46 ef 0e 48 b0 53 43 b6 f8 a6 1a 39 54 82 68 a3 be 17 d5 3f 90 85 77 15 50 0e 0f fa ac f7 07 ac 0c 1f 30 04 d2 da ae 25 6f f6 f3 11 ad d9 ae f5 37 06 2d 63 7f a9 4b 26 34 08 0a fc 52 d2 79 42 16 3c 78 f0 e8 d8 6f c7 f1 d2 de e9 c4 94 70 b7 3e 16 36 20 08 f0 a3 d9 8d cb b0 62 79 5b 36 23 b2 3a 66 df a4 16 bc 23 a9 d6 9c 8e bc c7 09 fa a5 7b cd f3 e3 29 1f 11 85 d4 b6 dc fb 10 61 5b b1 13 b7 9f 09 9c 31 93 a2 d4 7a a8 cf 26 dc 8d 24 31 0d f0 b1 c2 90 18 9f 5b 06 53 f8 02 b1 eb 03 8d e2 9c 76 8d a2 6a f7 1c 8d ff 5b 3a ae 39 6e 33 91 b7 08 1e 13 c2 29 69 69 22 96 4e 0e cb 13 2b 41 c5 fc cc d0 c6 aa cb 7f 47 28 07 ef f4 0f 8f 6e 4c 5a b1 2d d5 ea df 55 58 97 40 c9 61 b5 99 7e 09 f6 c3 23 9e e0 d4 29 b6 11 8a Data Ascii: Tf-_0R"[FHSC9Th?wP0%o7-cK&4RyB<xop>6 by[6#:f#{)a[1z&$1[Svj[:9n3)ii"N+AG(nLZ-UX@a~#)
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: a3 cc 72 ca a4 f3 ec 7f 9b 1b 7e eb 75 28 34 a9 d9 fd 64 bb 7f ac ad 2c d4 8e 79 27 9b 30 c5 83 31 fe 57 55 44 a3 ef 4e 7a dc 31 c3 fa 2c 74 d9 33 d8 b7 a6 87 c4 92 4e 0d c8 a2 34 ab 58 45 77 f4 9b 44 ed fc 86 65 79 56 ce 21 a8 33 c7 79 64 83 b8 91 f7 af 62 e0 f1 ec e9 a4 9b 4d 55 79 4b 01 0d da 56 7a 19 a1 33 99 a6 e4 d3 05 a1 09 4d b6 8d f8 a5 96 41 f3 70 cc 8e c4 ed 90 37 7e 13 a6 86 5f 6b a8 e5 4b be d1 c1 13 ea b5 6f 36 3a 4d ab de 80 4f c0 ef c0 ff 31 1b a9 d9 7b d1 d8 9d 79 97 68 3c 43 42 56 98 f5 1a 8a 44 e6 37 28 af 56 5d bf 2a bc ba dd 00 1d b2 6b b1 0d 31 b3 76 13 e8 cd b3 3c 1b 7f c2 5d 51 23 8d 03 8b c5 32 25 5b fa d9 0d 99 e9 27 bb c7 ec d6 18 53 19 0e 0e 5f 0d ae 23 b0 02 d9 81 98 8f 89 20 4e b2 36 eb 80 c4 b6 a2 f0 00 fc 7f 66 72 1b 67 11 Data Ascii: r~u(4d,y'01WUDNz1,t3N4XEwDeyV!3ydbMUyKVz3MAp7~_kKo6:MO1{yh<CBVD7(V]*k1v<]Q#2%['S_# N6frg
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 83 88 af bf 35 6f f9 37 cb 92 1c a8 ad 4f e1 a0 e0 b2 7f cf da fd f0 6a ed 57 97 a9 d3 88 42 d5 d1 7b a5 25 56 e8 13 b3 01 74 c1 54 47 20 e1 51 68 b9 98 c4 be da be a2 03 ef b2 b3 17 5e ab 78 12 5c b9 19 9d 78 57 e3 19 51 29 d6 60 25 24 fe 7f b0 2f 08 49 a2 6e 90 bd 8a a2 0e b5 41 a7 71 1d ef e7 c3 45 e7 e4 63 d2 3e 7a 5d 4d 3a 39 3e 90 dd 4c fa 63 37 97 a0 ad 34 48 96 7b ec 49 15 cb 73 c7 54 87 7b 49 03 84 8a ec 01 c3 f4 a6 6a 01 69 0a 0c ca cc 82 73 ef d8 58 da f0 87 73 41 33 58 3b 8c 3b 5d bd dd 95 75 41 56 64 9b 57 0a 00 c0 55 1e be f0 77 ca a0 4d 50 03 0f 06 bd d9 fe e9 c6 d9 d9 0b 68 e6 d9 9d 4c 0c eb 87 9a 83 f6 77 d7 df 21 8a 6f 5f 34 ff cb a5 91 08 66 61 d1 4f 76 e6 41 91 1d 2e 1f 06 8f 08 f6 9b ff 3d 83 ad 5a 3c a8 b9 21 ad e2 a2 da ce f1 9c ad Data Ascii: 5o7OjWB{%VtTG Qh^x\xWQ)`%$/InAqEc>z]M:9>Lc74H{IsT{IjisXsA3X;;]uAVdWUwMPhLw!o_4faOvA.=Z<!
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: bf 2b 35 f9 2f 51 43 2a 11 9c ab 5a d0 70 45 37 12 01 5d 4f 71 aa c8 b5 77 33 1e 9d 22 23 ad 02 15 de 1c 59 71 76 39 58 fd 66 c3 0c ec 11 ea 2a 76 e8 dc 12 eb b2 56 06 9b 90 b7 ca d3 67 ee 1f aa a6 a6 cf f4 46 89 9a 86 dd 70 10 0c ff 72 6c b2 72 31 bb 1d 44 2c 27 6c 84 7e 76 cd 8a 9f 3c d7 af ad 61 87 57 e0 ed 54 f9 38 91 4f 00 c1 ee 51 10 da 08 f6 a0 ed cc d1 e6 e8 e2 fd 0a 90 7e 35 3a 7c 0e f1 e2 38 1d 5e dd a6 0f 02 66 fe b8 bd a4 ae 87 ea b6 af e1 ad 66 98 f7 0a 1a e6 99 72 93 09 dc 8a e9 50 80 77 31 4d 9b 89 13 d8 16 ad 65 cf 53 e6 09 b4 38 ec 99 9d 4d c7 a2 4f 60 34 25 15 dc 59 a7 3c b7 b3 db c8 bd 39 39 f1 fe f7 c3 c7 f3 b0 75 0f f1 b9 5e c6 a5 3e d0 dd b8 17 4e e8 ea 8b 3e 9c a9 da 7e 2f f7 ea bd c1 50 22 08 c2 7f 14 a4 61 75 13 fa 58 b6 c2 12 8d Data Ascii: +5/QCZpE7]Oqw3"#Yqv9XfvVgFprlr1D,'l~v<aWT8OQ~5:\|8^ffrPw1MeS8MO`4%Y<99u^>N>~/P"auX
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: a9 c9 de f0 bd 0d 1a 4f 56 c7 68 a3 ec ed d7 78 d4 1e 8a 6f 8d 62 8c 6a ec 79 14 1c 1b a5 26 25 87 57 38 b0 4c 00 dc 8d 22 e8 89 94 84 56 5b 5f 36 79 28 12 b5 85 3a 0a f9 8b 9a f4 99 0c 21 9a 21 40 ed 93 5e 71 87 a6 21 6c 57 4a e0 1e 04 42 73 04 96 9d 2c 67 f7 67 e0 67 ad ff 8b 05 ca 87 f5 dc 0b 36 63 2f 9d 24 01 21 e5 b8 85 14 1e 8c bf dc 4f 71 f1 5e c3 c5 91 10 c5 6b c3 11 5c 01 a7 0c 84 27 db 55 95 e5 63 84 96 c5 bf 4c 6a f5 d9 83 4f ff 92 a4 d2 25 99 4d fe 74 d9 cf 20 c5 53 83 ee 60 ef 0a 7d 57 60 0b db 2a 1a 5f 84 ca a6 18 11 7e 98 32 5e 3e c1 ab 39 c0 81 17 a8 4a 7a 04 04 4c 13 c7 9c 53 03 b0 40 7d c3 cd 24 0b cb 04 fb f1 75 98 6a e0 24 1a 9b 3d 2e 00 0b 79 28 c3 73 63 80 4b 26 70 19 9e 29 43 0b 26 1f 90 54 72 c0 e0 6b 04 d7 e4 43 56 10 b5 e8 cf 3f Data Ascii: OVhxobjy&%W8L"V[_6y(:!!@^q!lWJBs,ggg6c/$!Oq^k\'UcLjO%Mt S`}W`*_~2^>9JzLS@}$uj$=.y(scK&p)C&TrkCV?
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 17 cc 7b 1f cd 47 58 9f 81 ea 81 ee 6e 7d 21 4d 77 ae 42 b2 98 5e d0 1b 4e 41 6d 4a ba 49 51 6d b9 6c e1 62 22 32 2a 64 d4 ca 53 c0 b9 59 c2 73 d5 a7 39 d7 16 50 9b 92 6e fb b7 d2 25 18 4a ee fe 05 6a da 9f 75 61 21 ad 42 ea 56 1c fd 0c 53 3a 29 19 ae d2 f7 ae ae 74 ce bd 46 cf 27 21 8d 4a 7e d8 ff ea 3c 40 7f 9e b2 cd 30 0e d0 72 d3 56 51 f5 d6 5e 29 bb 1e 35 e3 24 40 18 aa 65 21 63 f0 08 1b 81 3b 1f 4c e9 77 4a 94 7c 84 64 4f a8 4b 2e a8 c3 f7 6f 48 4a 26 8a dd ca 22 73 f5 f0 be 94 32 06 8f e5 c6 0d 7e 84 05 ba 58 60 e2 23 db 57 05 1b 6a 2b ac 58 4f 2e 38 ca 86 9b a4 63 b7 24 86 01 09 4e 8f 54 20 cc e4 ff e6 cf 7c c6 b7 e4 5f 0f 06 b5 a6 23 f9 12 f6 93 aa 86 39 c4 1f f6 0d 39 1d 39 b5 10 d3 83 ff 0a 60 3d d7 30 75 de e7 d8 76 6b 6e 82 22 78 77 f2 c5 03 Data Ascii: {GXn}!MwB^NAmJIQmlb"2*dSYs9Pn%Jjua!BVS:)tF'!J~<@0rVQ^)5$@e!c;LwJ\|dOK.oHJ&"s2~X`#Wj+XO.8c$NT \|_#999`=0uvkn"xw
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: f8 59 b1 c0 bd 88 84 3f 30 81 9b 21 b9 97 5e ce 17 56 b7 b1 b1 99 63 e1 90 a5 7b 26 57 c1 f2 68 f7 23 e9 38 f6 f3 63 7e 9a 04 a9 00 0d 07 ce e0 6a 8b 54 32 35 15 f8 48 3a 13 08 6f 33 81 96 1a 3c b7 8b 81 d6 de 1c f6 b6 db 40 4f 3e 4c f3 f1 20 34 42 77 ef a2 71 cc 39 11 d5 df dd 84 2f a2 c0 eb c4 d9 4f be fe 3f 79 48 a2 f9 e4 88 25 2d 63 47 8f 81 28 4e 44 5b 0c 93 a9 85 17 9b cf ae eb 73 4d d9 da 5f 7d df 8f ba c1 b3 97 a5 8e 50 ab db 98 09 70 dc a1 40 70 04 aa c4 7e 61 25 12 9c 8e e7 d5 4e ee a3 22 43 90 ea 22 3c ce 29 9d de 31 c6 d5 f3 ea d2 80 20 9e df 7a ed 7c e6 81 73 48 64 91 11 7f 0a f1 06 82 52 36 e0 06 33 73 de ee e1 1e 92 f4 41 4a 3d ab 94 ce 66 a1 0f fe 1a 18 03 6d d7 e6 ab e3 6e bc bb 89 8f 6d 4e 47 00 cd 79 f3 d7 f3 8f d7 97 e9 dd a7 36 e0 8c Data Ascii: Y?0!^Vc{&Wh#8c~jT25H:o3<@O>L 4Bwq9/O?yH%-cG(ND[sM_}Pp@p~a%N"C"<)1 z\|sHdR63sAJ=fmnmNGy6
2024-04-19 14:06:11 UTC	806	IN	Data Raw: be 8c 0b 55 89 49 1d 63 a0 f5 d9 46 9f 06 24 6f c4 9b bd 30 f3 07 f8 e7 d0 cb 32 27 20 c2 10 0a 55 bc f7 de ae d3 c0 1c 5e 1d 20 f4 40 73 0f a5 8c 73 3c b3 49 a7 79 a5 84 27 68 47 40 a0 86 13 45 d8 91 07 a2 7e b8 eb 5c 1f 55 93 43 02 34 8d 71 31 65 cf 98 46 c6 92 3d 1b b7 d3 32 ea f4 e9 35 36 67 21 cd 87 e2 c4 a4 f1 cc 7c 5a 14 4e 2c c6 5d a3 05 8f 71 b7 b0 e6 aa 46 9c 9e ea 09 3a 9a af 15 06 6f 01 94 54 37 d8 10 93 e3 2f ee 08 38 59 c4 ad f9 ee d3 33 b1 b6 de b2 53 36 06 11 43 59 60 ac 4a a0 68 3a 16 29 49 8e 92 34 ea e7 42 be d5 71 21 b3 3c a2 15 df 2a 85 65 e8 49 95 23 cd 1d de 32 d7 d3 b9 02 66 75 a0 f5 05 67 1a d5 85 a1 f5 2e 45 38 cb 3f e3 64 14 3b cb 76 77 df ff fb 65 c0 5b a7 22 d3 c8 b8 af b6 7c ef 8b 5d ef 8a 6c e9 b3 c6 bc 1a 35 06 43 ad d3 13 Data Ascii: UIcF$o02' U^ @ss<Iy'hG@E~\UC4q1eF=256g!\|ZN,]qF:oT7/8Y3S6CY`Jh:)I4Bq!<*eI#2fug.E8?d;vwe["\|]l5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49753	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1085	OUT	GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33456 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:48:28 GMT Expires: Sat, 20 Apr 2024 12:48:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4663 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 a8 82 00 00 57 45 42 50 56 50 38 4c 9b 82 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 74 72 cd 53 1e f7 e4 1f 70 f7 f4 5e 08 11 fd 9f 00 db ee 2e db bd 3b b9 bb 6d bb bb 1f b7 bd f2 ca 93 bf ba 2c b5 d5 5e 3c ed b6 8f 23 4a 2a a9 85 3d b9 db fb 3d b5 7f 6d db 6c 26 4c cf f3 08 6a 75 41 02 3c 24 11 49 0a 40 1f 43 14 9b d1 71 1c cd 90 14 b4 d0 ad 3a ea 50 55 92 f0 3d 3e 24 a5 04 64 51 75 64 62 29 01 4c 07 49 18 d3 7a ba 93 40 36 46 55 f5 2d 69 0a 59 a9 ea f2 62 f0 3d 02 d8 92 c8 2f 45 04 a9 a2 d6 fa 90 c2 e6 42 d2 5f 76 c6 04 91 94 00 49 3e aa 22 25 7c 47 07 e2 1f 24 71 48 30 76 06 70 1d 23 d2 98 77 ba 15 08 80 a7 31 08 d2 06 50 74 de f7 92 a4 1d 21 dd fa 09 a2 73 ef 0f 48 92 f3 65 87 02 92 44 4b 28 40 02 49 b2 ef d5 77 82 ad 4b d2 b5 39 42 ce f3 bd Data Ascii: RIFFWEBPVP8L/IM@lHtrSp^.;m,^<#J*==ml&LjuA<$I@Cq:PU=>$dQudb)LIz@6FU-iYb=/EB_vI>"%\|G$qH0vp#w1Pt!sHeDK(@IwK9B
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 97 5b f8 5a 3b 0b 04 1e d1 d0 9c 36 a7 63 fd 00 70 bf 10 ec 3c 77 0a 02 8f 80 d6 58 3c 8c 71 06 70 6e a1 87 1e da 46 df ea 21 64 92 49 26 05 69 e7 81 70 19 00 e8 18 03 80 de 42 8b 75 8e be da ba ea 5a 00 00 5c d2 f9 6a 74 6c ac e3 1c 02 de 97 cf e5 6d 79 5b ab 3d 6c 3e 3b 3b a1 39 0d 97 26 00 86 4b 00 1a 7c 7d 89 f3 7c 71 cb e7 7a dc 37 00 04 4e 4e 00 02 3b c0 04 7c 0e 2c 9e 01 a4 cf d2 8d 74 2b 3d 0a d6 90 40 a4 90 90 e3 bf 76 d9 7a 74 0a 70 f9 e8 f3 5f 1f 11 53 c4 14 31 45 4c d9 f4 cf 94 4d 11 93 7d 3c 01 2c b1 2c 00 68 f0 eb d1 4c 6c 1e 60 a7 09 b0 c4 12 04 d0 5c 03 18 36 6c 58 b7 31 eb d6 ad 0f 00 03 10 c0 e7 3e 8e 3f 19 43 b7 6a cd 9a 6d 0c 60 d5 61 bb 03 f6 0b 4c 00 9c 01 e7 c4 7f 5c 6a 26 00 c0 8f 4b e5 e4 9c 50 8e 00 4c 07 18 0e e3 61 3f 40 7d 02 Data Ascii: [Z;6cp<wX<qpnF!dI&ipBuZ\jtlmy[=l>;;9&K\|}\|qz7NN;\|,t+=@vztp_S1ELM}<,,hLl`\6lX1>?Cjm`aL\j&KPLa?@}
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: b6 25 49 42 92 f3 b4 56 9d ff 8c 74 18 3a 85 ba d6 77 16 d3 92 24 c9 92 14 a9 45 71 5e 8e ce 27 ec 33 3d 26 80 ce b6 6d 6a e3 ea 1d 90 21 b6 cc 14 66 66 a6 3e 39 f4 07 4f 8b fd e9 c3 cc cc 6c 7b 49 66 ad d9 82 29 64 cd ee 64 e5 3e 22 26 e0 ff eb ff a1 0e 28 96 4a 77 42 85 74 a9 53 02 25 e9 4a 27 25 2a 75 4a 4a 77 91 e0 2e a4 53 81 4a 95 c2 51 4c 0a a9 54 2a 44 a9 22 00 01 09 00 ca 16 83 25 80 24 50 2a d5 40 a7 04 ba 98 a2 fb 54 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d a8 54 29 95 4a 17 4b a5 bb 90 02 fa 44 4a 1d a8 54 ba 13 aa 14 a2 a4 44 1d 25 92 44 85 54 aa 40 a7 a8 54 54 50 a9 53 28 29 a5 4e a5 22 91 4a a5 4e a1 54 71 c1 77 01 25 2a 95 4a d5 38 8d 19 e9 8a f5 e6 74 a4 d8 60 b5 53 8d 84 ac 0b 3a 3a aa 91 b9 05 41 e5 dc c2 a6 52 54 ab 18 29 aa 29 57 77 Data Ascii: %IBVt:w$Eq^'3=&mj!ff>9Ol{If)dd>"&(JwBtS%J'%uJJw.SJQLTD"%$P@TTDTDT)JKDJTD%DT@TTPS()N"JNTqw%*J8t`S::ART))Ww
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 21 04 44 62 15 0a 83 58 a0 58 96 50 21 70 a9 04 a8 14 c5 42 92 65 21 87 42 55 e3 0d d8 bd 94 69 09 dc 52 c6 64 ca 0b 69 74 4d a6 b3 9d 0e 4d 27 94 53 b6 29 55 ec 96 ed 76 ea 86 2b ec 74 ca 54 d0 75 04 ad 10 da e7 dc a8 52 8d 72 14 6f 48 e9 ea 3e d3 a5 bb dc 45 70 4b 0a c1 75 4a 8a 52 d4 c5 1a e9 1a 52 6e 47 8a ae 84 d6 82 94 3a d5 2d 57 13 46 e3 c8 e9 c8 94 4a d7 29 33 a5 a4 4e 39 37 4a ba 16 bc 82 14 4a 5a ab 6e 94 64 64 de a6 9a 8c 9c 73 50 2b a4 6e 9c 1b 2a 6d e4 9c 92 4d 06 d9 5b d6 94 ba e4 ca 39 51 da 06 78 81 a1 9c bb a8 c0 19 f0 5a c4 b9 c3 55 b7 98 f1 c6 ab 06 b4 5b 16 21 56 ad 45 3b 77 aa 52 75 bd 8c aa 44 8d 2b a5 18 46 2a 46 60 90 99 31 08 99 50 86 dc 21 ad 22 62 2c 86 c2 d5 46 67 21 69 4b 05 96 55 95 f1 66 07 0c 6e 23 e7 f1 f2 5a 8a 33 56 a9 Data Ascii: !DbXXP!pBe!BUiRditMM'S)Uv+tTuRroH>EpKuJRRnG:-WFJ)3N97JJZnddsP+nmM[9QxZU[!VE;wRuD+FF`1P!"b,Fg!iKUfn#Z3V
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: e7 a9 b5 6b 82 ce 37 be 6e 54 d3 bd aa bc f7 e9 cc 49 e0 1b b8 89 e5 3c 85 bd 28 a9 db 59 4f 74 7a 66 29 4f dc 4e 52 53 2f ce e9 8b 19 c6 8a aa 43 96 50 b7 8a a9 09 b8 8a 64 12 e3 19 57 c2 95 4b 46 ab 4f 9d a5 62 15 bd 29 13 96 d3 42 02 a5 c9 2d 46 aa c4 b5 4b 25 04 3b 6b 0a 39 76 3a a3 1a 15 0b d9 99 c8 62 f3 b2 82 07 ca 95 13 4b c8 42 d5 2d a9 cf 9b e5 ad 60 79 63 8c 83 96 34 60 59 36 ad 25 96 31 d1 aa 55 08 45 ab 40 38 99 95 60 aa bc 20 18 06 b1 a0 6a c6 92 19 98 ad 24 58 82 d9 f4 28 92 55 19 19 75 b5 a1 a1 0a e7 8b 62 2d 8d aa 8c ba 62 28 0a 5d 23 18 d2 d2 24 a7 47 49 14 bc 0b 8c b9 60 aa d2 40 22 15 53 90 02 ec 56 75 d3 51 54 63 3a 64 2c 06 b7 5c 13 8a f4 b0 35 34 5d 63 b4 a4 08 ea 94 8c 19 20 2d 82 36 95 6a 84 6e 54 a9 14 d5 8e 4c 25 4a 9b 5b 6f 8a Data Ascii: k7nTI<(YOtzf)ONRS/CPdWKFOb)B-FK%;k9v:bKB-`yc4`Y6%1UE@8` j$X(Uub-b(]#$GI`@"SVuQTc:d,\54]c -6jnTL%J[o
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 94 5d 64 4a 09 2e b6 54 05 c2 ae 41 01 5a 1f 97 52 12 09 89 70 d2 9b 5e a1 e1 3d 40 22 50 d0 a1 b8 66 28 11 22 8c 30 59 2b b0 91 02 9c c2 d0 92 81 17 e0 19 b3 63 4c b7 b2 96 4a 41 38 de 43 e9 3c 4a 00 42 4c 78 69 16 51 44 51 e9 15 b3 38 45 10 5e 47 92 8e 96 ce a2 8a 14 42 f0 1e 08 95 22 c1 72 da 00 8e 51 54 a2 0a 2c 81 cd 84 c8 2a a6 22 59 88 61 a6 2b 13 b6 2a b4 6d 64 50 a5 32 dd 12 32 28 5a db 18 51 c1 a7 46 c6 32 ce 6c 6b 54 00 52 21 a1 a0 76 41 5d 4a d2 e5 5c a9 d4 cd 32 6f c1 c0 8e f6 b6 a2 07 e9 d6 6b 71 0a 8d 65 5b f6 ca 34 48 ed c5 b9 f7 81 37 08 0d 73 45 96 9a d2 e7 7a 7b a3 9f ff 76 5d fe 97 dd b2 39 ec 8e 49 2c 41 33 2d 44 19 b1 aa 42 43 bc f0 9a ea 24 54 11 19 9f fa cf 37 72 6a b6 02 20 1e 5d e2 df bf ba 60 0b 8e 09 48 60 b4 a5 24 0b 20 65 56 Data Ascii: ]dJ.TAZRp^=@"Pf("0Y+cLJA8C<JBLxiQDQ8E^GB"rQT,"Ya+mdP22(ZQF2lkTR!vA]J\2okqe[4H7sEz{v]9I,A3-DBC$T7rj ]`H`$ eV
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 35 8d 6b 79 bc c5 e7 6f d8 d3 fb 72 56 cf ed 92 6d 9e 1c d8 36 2e cd b3 37 9c 0f ae 7f 3e b1 6b 8f 1f f1 94 d0 f3 a6 08 3c f1 c9 ff 7e 68 c3 5c d8 fd 74 e7 c6 bf 9e b8 fa ed 3b 97 74 fa f4 0f ed 3f ef 23 07 5a d7 55 3b fd 61 11 26 9e 47 6e c9 62 c0 fa 6c 51 c1 d4 94 a5 5b 78 2b 99 72 1f 8b 2c a6 66 33 ac f1 14 a5 7e 4a 6c 2e c6 f3 61 b6 da 18 ef 6a e6 55 48 89 ca b9 40 18 e9 ba 45 75 a9 b3 5d cc 94 a2 13 2a cd 62 2a 66 d1 9b 64 04 93 8f 46 61 8f 71 7a 36 29 db 98 26 75 d9 96 dc 50 5d fa 53 ff 73 ed 27 f3 4d 0f 5c 32 84 40 4e ed 95 b9 d9 77 ff d1 9a ff 7e df ec a3 51 d8 2e 19 51 22 30 66 46 0f a9 48 a0 29 74 b2 8b b8 8c 66 02 4c de ec 41 5c b0 10 85 02 a8 00 92 37 51 88 18 05 64 43 44 95 7a 73 ab 1f 3e e4 5b 2f 1f d1 2a f6 0f ae ba 6d f3 8a 9d 78 41 cf 9a Data Ascii: 5kyorVm6.7>k<~h\t;t?#ZU;a&GnblQ[x+r,f3~Jl.ajUH@Eu]bfdFaqz6)&uP]Ss'M\2@Nw~Q.Q"0fFH)tfLA\7QdCDzs>[/*mxA
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 52 a9 54 a0 08 61 22 00 15 a1 52 f0 b0 36 67 2d 21 86 f7 ee 6c a7 b5 36 26 eb 3f bb ae c4 d4 14 ef ee a3 68 95 75 9e 4f 37 6e 29 ca fa b1 77 59 72 b5 d6 bc 6b eb 60 85 7e fd 70 7c 93 49 a1 b8 51 4b 74 49 59 95 c1 ba fb 14 18 05 28 6b 97 ec 63 1b 84 8a a9 29 c5 48 62 ae 2a 59 db 93 55 5c 55 85 98 2b 0e f6 88 f4 86 53 d1 f2 00 3c c0 71 50 f8 64 1b 95 00 c4 05 5a 2a 22 3d 40 23 52 5d fa 12 10 a0 17 2e 15 38 40 3a 0a c6 12 80 86 2e 28 c0 c5 49 e2 82 c1 f5 0a bd 11 94 c9 2c 21 ce 27 71 78 9f a8 43 34 44 02 41 08 15 71 e1 90 0a 66 db 84 11 c5 a8 a1 53 84 11 85 60 a2 f0 53 a5 c3 fb c9 40 89 33 a9 74 6d 4f 1e 72 eb e6 a6 8b aa 5e 5b a1 b8 6c aa 1f d3 4d 9e 02 9f 4b cd 16 b3 76 72 15 39 6e d8 d4 22 a9 46 b0 6a 5d 6e 34 fd 72 cd 60 0f 4a 67 b6 9c 6f 47 ee 7d d6 f5 Data Ascii: RTa"R6g-!l6&?huO7n)wYrk`~p\|IQKtIY(kc)HbYU\U+S<qPdZ"=@#R].8@:.(I,!'qxC4DAqfS`S@3tmOr^[lMKvr9n"Fj]n4r`JgoG}
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 96 40 ce e4 2c 40 44 cc 3d ce 3f c6 6e 7a e9 fa d7 39 df ab cb 73 86 c4 a4 9e 13 6b dd 8e 8c 6a 29 a7 4e 65 50 d9 aa 6f 49 2e 26 d5 eb 67 ef a4 64 ca 79 74 cb e6 64 38 31 f3 3c 18 75 ac 4f 3d 5a 4b 65 52 b3 3e d5 93 34 ac 45 a3 2e cc aa db 09 51 e1 74 bd da 5e 47 a5 ab 9e a2 5d b9 92 bb cd 1d 53 4e b5 5e 57 3b 76 50 92 3e 36 b2 3c 6c 7b eb 37 9b 9d 59 1a b7 91 0f d9 a9 3e 75 29 2c f0 ea d7 c2 cb f0 9a f5 19 64 79 b3 fb 58 3f 1f c0 58 99 8f 24 36 8f f5 a1 a7 aa 36 eb c7 8d fb 50 5a 2a b4 fd 2f 45 c6 23 33 d3 9f 84 d8 e9 ce 56 1f 1f ec 4a 96 b6 ff ec ba 05 9b 42 b2 36 a5 07 19 96 25 8e ca 5a 9e 07 67 24 53 cb 29 81 5c 10 58 25 d6 86 4c 46 48 0c 21 d0 08 0a 54 4b 9b b0 f7 90 0b ec 76 a9 2b 13 cb 55 cd e6 c4 bc 61 c8 b1 db 12 16 81 22 6c 83 a1 ac 9b 22 6f 8a Data Ascii: @,@D=?nz9skj)NePoI.&gdytd81<uO=ZKeR>4E.Qt^G]SN^W;vP>6<l{7Y>u),dyX?X$66PZ*/E#3VJB6%Zg$S)\X%LFH!TKv+Ua"l"o
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 8f 74 c2 2d b7 bf a8 f5 b4 47 fb d7 7c 5d e5 a4 de 86 fd eb 60 e8 d0 7e 1b ba c9 4d e7 6f 4a 47 63 c9 a5 f2 05 2e 83 f2 ad ca 55 32 3c 2c be 52 4d 8e 16 5f 6c 43 50 f7 d5 f6 8e 94 d0 20 6e 9e 0c 87 9b f2 dc aa 7a 8b e5 3c 5a de ff 18 e5 d1 87 f2 14 12 6b 5b ae d2 be 4f 51 b2 49 5c ce 42 a4 cb 36 65 81 94 ad 56 e5 f2 71 38 9c 92 1e 55 85 02 d0 48 2a 51 16 36 6a b3 fd d8 48 91 e1 56 dd 12 e0 71 eb 6e a5 31 d3 d2 7d e8 e8 52 d5 d0 0e 8b 54 31 26 6d 8b 2d d5 ee da 47 a2 b6 55 e1 bf 69 b0 a2 5a a9 d9 48 85 67 f8 ac d9 07 76 f0 43 e3 58 50 9a da e9 72 18 e6 47 3d e5 98 ca a6 d9 94 dc 96 c2 27 c1 98 b5 36 37 0b 4f b5 c5 ad 4f 99 ca 5a e1 3f a7 ae 3a db 9a cd e8 03 db 2e b5 40 5e 41 83 90 d6 b8 46 55 ab d6 de 62 e6 63 41 45 a4 35 b0 d3 73 4a b9 9b bd 53 46 d7 48 Data Ascii: t-G\|]`~MoJGc.U2<,RM_lCP nz<Zk[OQI\B6eVq8UH*Q6jHVqn1}RT1&m-GUiZHgvCXPrG='67OOZ?:.@^AFUbcAE5sJSFH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49754	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1086	OUT	GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6842 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5373 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	722	IN	Data Raw: 52 49 46 46 b2 1a 00 00 57 45 42 50 56 50 38 20 a6 1a 00 00 90 6e 00 9d 01 2a 28 01 28 01 3e 3d 1c 8c 44 a2 21 a1 11 99 cc c4 20 03 c4 b4 b7 77 30 68 01 e8 a8 65 a0 f9 00 03 d0 03 a4 93 21 97 cb df e3 3b 3f fe b1 f8 f3 fb 8d eb 4f e2 7f 1a fd 43 fb 27 eb d7 f6 ef f8 9f ec 39 94 f4 af fb 3f 41 7f 8b 7d 80 fa 57 f6 3f d8 1f ec 7f b5 7f 79 7f 6e ff 45 e1 3f c2 5f e8 bf 25 3e 01 7f 18 fe 3f fc f3 f2 0f fb 77 ed 2f b9 7e cb ad 73 f6 2f d4 17 d3 5f 92 7f 5a fe f3 fb 41 fd af f7 5b d9 4b f6 bf cc ef 72 7e c6 ff 80 fc 80 fa 00 fe 2b fc 8b fb 47 f5 ff d9 cf ee 1f ff fe b1 ff 5b fd 3f c6 f3 ea 7f eb ff 62 fe 00 ff 8f ff 3b ff 2d fd fb fc b7 fc af f4 5f ff fe d9 ff 8d ff 57 fd ff fc 9f fe 9f f2 9e d9 7f 36 fe ef fe e7 fb e7 f9 df fc 1f de bf ff fe 02 ff 22 fe 75 fe Data Ascii: RIFFWEBPVP8 n*((>=D! w0he!;?OC'9?A}W?ynE?_%>?w/~s/_ZA[Kr~+G[?b;-_W6"u
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 8f 8b 8a ff eb 89 82 d5 8f b8 cd 57 aa 38 39 2d f7 4e 73 82 66 30 59 89 a0 c2 96 c2 25 5f 36 e7 b1 77 08 ef bc 32 5c f4 4b b7 82 39 68 5a af 86 b5 6c a9 2e 8f 25 53 05 78 98 9f 38 e2 87 7b 53 ff 52 09 9d 12 e5 3b d8 e8 10 f4 80 83 98 00 80 23 7a 93 7c 4b 52 cf 7c b1 49 f9 6c c5 5a ad 1a ef 81 1f f9 30 76 62 72 3d 1a 0b 4a ad 9b 6c 39 76 6e 7c db 93 b7 2c 1d 77 b8 26 7a 16 4e 6d f5 8a 3a 88 48 12 83 24 62 36 f7 7f 85 3c 13 b3 94 df fe 47 d7 00 4e 6e 4a 5e d7 75 3c 0f f0 b1 c4 5b 98 00 80 93 6b a0 70 36 22 ce a0 b1 3b e1 86 fa 09 b1 83 08 ca e1 b3 f3 0c 9c 48 fe b8 00 00 fe ff c1 6c 80 bf 97 78 b1 ad 22 28 c8 84 59 f3 a8 a5 5b c3 af 78 8c 59 4d 8a ac 1e 37 23 bf fc c2 51 28 ea af 84 15 21 c7 07 ff e2 cd 30 64 79 fd 1f d1 08 65 5c b2 24 bb f8 c9 b2 b4 8f af Data Ascii: W89-Nsf0Y%_6w2\K9hZl.%Sx8{SR;#z\|KR\|IlZ0vbr=Jl9vn\|,w&zNm:H$b6<GNnJ^u<[kp6";Hlx"(Y[xYM7#Q(!0dye\$
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 2d f6 9c f4 09 07 b0 88 91 a3 92 a1 23 00 3a ca 8b 94 67 20 43 41 79 68 71 03 6d 7b 3e 5a 21 86 f6 a2 1b a0 9f f9 a0 fc ab 9c be 80 62 08 e1 f7 f6 39 c2 ed cb 0e 45 03 41 b0 81 73 5d a5 13 c7 34 f8 1b c1 89 5c 76 7c 29 88 16 9a cf 3c 96 2f 55 65 15 3f 22 f6 bc bc f7 01 d5 df 8c 7a 0a 93 00 b2 3b b4 7d 2c a0 f0 85 27 ba ae 65 de 87 1e d5 13 dc 6b 5e d3 58 2b 60 30 d7 9a 5f c3 78 20 db dd 5a 35 a4 03 b2 1a e1 68 c9 67 7d a4 28 5c fc 7f f4 41 fc 2a 1a 16 2f 00 5f 83 5a d4 d3 06 30 8d 98 31 cf 79 3c ea 06 a1 d7 5a 13 55 88 ad 45 80 3e a5 e3 37 8b ac b7 5e 57 96 ff f9 da a6 4c 6d b6 11 d2 c9 3f f9 04 1e c3 3b 2c ac 8f 5f 8c df b7 ae 81 97 3c 91 15 54 94 d3 8c f0 8c 01 35 c2 59 9d 08 c3 c3 92 b1 8e b2 86 56 e8 be a5 df e1 5f 48 15 0e b4 39 dc 69 3f 5f 82 7b 04 Data Ascii: -#:g CAyhqm{>Z!b9EAs]4\v\|)</Ue?"z;},'ek^X+`0_x Z5hg}(\A*/_Z01y<ZUE>7^WLm?;,_<T5YV_H9i?_{
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 0d dc 78 0b 83 fc 35 63 08 a8 a5 b1 7d a9 f8 6c 1c bf c1 c9 d3 75 14 80 fd 22 c8 fd 07 5d 5c 84 45 7f d2 76 eb 1c 24 3d 12 01 27 9f 45 cc f7 ff 51 77 69 05 bf d2 d6 e5 24 71 da b3 ed 43 37 24 03 e7 c0 54 9d a6 36 c3 cd ff ec a7 ff f8 ca b5 f0 61 95 5f 9e c7 b6 80 0e ea c5 7c 67 a9 c7 9d 5f 8e c6 51 79 84 54 45 cc e5 b4 77 e5 0c 7f f0 06 4b e4 0a fa b2 e4 87 55 07 9e f0 f3 c6 72 44 1d d1 d0 86 6d 9f 45 2d de 18 17 ce 76 db 2e db a8 6b aa 55 56 dd 76 cb c9 4a 77 5c 84 0c b0 69 c5 7a 61 71 62 48 74 04 15 45 c9 4f f0 8d 30 1e 72 6f 4e 02 a5 32 fa fb 01 5f dc 97 9c 0c 70 3a ca 8f dd e8 2c 86 cf d5 cd 44 a3 09 42 c9 35 54 12 71 59 e4 5b 1f 81 b3 64 3a 2a 1d cd 89 94 56 20 4e 91 c7 0e 24 9d 32 78 c2 3e b1 bd a1 a2 99 4b 4b 96 5f 42 73 72 ad 5b ee 14 41 90 0c 42 Data Ascii: x5c}lu"]\Ev$='EQwi$qC7$T6a_\|g_QyTEwKUrDmE-v.kUVvJw\izaqbHtEO0roN2_p:,DB5TqY[d:*V N$2x>KK_Bsr[AB
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 57 36 49 d0 7e 64 00 8b 84 0b e3 4a 83 31 e9 78 13 c5 1c 1b 38 f7 5b 42 c5 06 20 3f 0d ed b6 32 52 a7 4c 92 45 0b 09 db 21 6a 8f 1f 33 ae af 15 b4 9e ac b6 ca 19 16 d4 fd b3 be 99 4e 18 95 87 f8 13 a9 e4 14 38 b6 e3 bf fa e9 d4 c8 a3 04 c0 e3 b0 22 0d bd 7c 86 2c 69 b5 e4 fd 38 af 70 6f c5 48 f3 e2 4e 30 a9 61 bf c2 07 4c 0d f5 a3 d4 9c 7f 35 f9 99 ad 31 23 05 de 0f 4f 05 70 f7 ba aa a7 57 18 34 f2 b0 5f d9 1f 9a f8 25 06 70 1f 16 1b 73 6f 14 65 08 fd 79 dc e8 58 c3 1e 84 6c f1 9e c7 ca be 27 b1 9d ef c1 ae 12 dd e4 63 4d 7a 08 32 0e ea ec 65 48 c9 53 10 38 75 a2 86 7e 28 43 34 c3 2e 64 fd 17 6c 64 16 fb 22 ac bf 1c 8d e3 60 11 bf cb 44 6a f1 75 02 88 99 b4 50 1d 50 63 38 c6 31 5e 4f ca 3b ec 17 c6 8c a4 67 8f 1f c9 09 7d 0d e4 17 62 d1 fd 8d ed 19 12 46 Data Ascii: W6I~dJ1x8[B ?2RLE!j3N8"\|,i8poHN0aL51#OpW4_%psoeyXl'cMz2eHS8u~(C4.dld"`DjuPPc81^O;g}bF
2024-04-19 14:06:11 UTC	1100	IN	Data Raw: d7 8e b4 96 52 4d 0c 18 80 39 33 02 db 32 bd 25 0b 8e b9 d7 31 d0 f5 d6 16 fd 79 6f a3 11 b5 ed 5b b9 24 a1 ef 51 a5 3f f6 ab 8d e2 78 db fa 21 ec e1 3c 0d 00 26 a3 0f e8 ab 09 a6 19 d9 34 f1 8e ab aa 52 cd e6 e1 6e 89 e2 b2 66 16 89 ce 58 1c d7 43 c7 47 7f c3 16 ef 81 32 e4 be 93 e9 83 d2 0d 56 ed c9 f6 1d 4a 38 d4 c7 b1 7b 14 7e 96 c2 1e cd 7e 4d a9 68 c6 68 ae af 6b 47 bf 0a 66 44 69 32 49 34 93 aa e4 b9 f3 85 d9 0b 45 bc f8 cc 4b 18 87 cb 20 6a 29 4a 14 1f e3 1f 4c c7 b5 cb f0 0d c4 ef 51 e7 82 d8 07 65 c1 17 b6 6a 87 98 6e f7 74 c3 5a e4 b7 09 3d 03 89 3f 3f 39 b1 48 2d 10 c4 80 dc a2 ba b9 be c1 64 37 a3 a0 43 64 1d 7e 57 5d 37 a2 ce 66 a6 7c 10 1b 1e 3b 81 e4 e5 05 f0 ab 31 98 d0 bd 24 2a 39 79 ff 7b dc 2a 17 d3 0e 2f d7 c7 c0 31 f7 c2 8a a5 a6 55 Data Ascii: RM932%1yo[$Q?x!<&4RnfXCG2VJ8{~~MhhkGfDi2I4EK j)JLQejntZ=??9H-d7Cd~W]7f\|;1$9y{/1U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49751	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1086	OUT	GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13388 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5373 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 44 34 00 00 57 45 42 50 56 50 38 20 38 34 00 00 d0 a2 00 9d 01 2a 28 01 28 01 3e 45 20 8d 44 a2 a2 21 12 1a 0d a4 28 04 44 b3 b7 70 b9 f8 88 57 cd 05 bd bb c5 cf 87 31 56 eb a7 f2 7f 74 de ec fd 40 79 80 7e 9f fe 9c 75 80 fe 67 e8 03 f9 17 f6 7f d8 cf 64 df f5 5f e9 3d c4 7e b3 7f 8e f7 00 fe 4d fe 1b ac 03 f5 77 d8 17 f9 97 f7 af 55 9f f6 ff b8 5f 04 9f b7 3f b7 ff 00 ff b2 5f fb 7a c0 3a 8f fa 35 fc fb f1 6b cc a7 e5 5f ce ff 19 3f bb ff d5 f5 7f f1 1f 92 7e 9d fd 97 f5 c3 fb 6f fc 5f f4 bf 0d 5f c3 f8 49 e5 ff f0 bf 99 7e e6 ff 0b fa 83 f4 af ec bf df ff bc ff 65 ff e1 fe af ef 37 ef bf e0 ff 28 bc e1 f8 27 fb 9f e5 17 f6 bf 90 2f c7 ff 8b ff 56 fe cb fb 0d fd c3 f6 bf dc 97 fa 1e d9 9d 3f fd 2f f8 0f 50 5f 4c be 55 fd eb fb 6f f9 6f f7 5f Data Ascii: RIFFD4WEBPVP8 84*((>E D!(DpW1Vt@y~ugd_=~MwU_?_z:5k_?~o__I~e7('/V?/P_LUoo_
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 83 1a 6f f6 df 24 a0 3b 6d 67 23 02 5f ed be 49 38 a6 39 0e 2a 92 ed 60 bd 74 35 f1 1f ff f4 42 f2 76 fb 08 b6 c6 ed 2d fd 38 48 93 f1 0d 93 7a 9c 2e 59 f1 37 e3 fe 3d 94 ba 20 b9 9c 2b 77 17 2a 16 d1 0e 14 c5 8f 4e c1 57 73 bc 0a 91 c0 39 f9 6b 04 4f 32 71 a3 14 c5 1f d8 a7 70 7c 9d 4b da f2 66 0d db 07 b2 0d fb f2 f6 7d a6 1e 1a df 5c cf b0 c4 d2 ee 74 7a bf 69 16 e4 04 c6 fb 71 da 7c 0b f5 61 a6 30 60 2f 4c 64 8e 76 89 a4 58 be a4 20 53 d9 d0 64 8b 92 c7 16 fa af 20 31 22 5d a4 39 a6 f0 1d ed 8e f7 43 4d 55 b4 3d 64 41 27 88 09 e7 cd 70 46 56 f3 8f 50 5a 3d 04 b2 70 8d 69 38 1e 22 2b ce 08 66 6c 58 3b 1b 0d 75 d5 b6 60 63 37 ee 85 b3 c7 1e 5c 44 1d 2f bd 37 ed 8f 30 3c 85 b1 9e 30 71 7f 05 fd 1f a0 c4 83 93 f6 57 ba 9d 5b 8f 1b d6 d8 4f d1 a4 74 18 af Data Ascii: o$;mg#_I89`t5Bv-8Hz.Y7= +wNWs9kO2qp\|Kf}\tziq\|a0`/LdvX Sd 1"]9CMU=dA'pFVPZ=pi8"+flX;u`c7\D/70<0qW[Ot
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 5f be 57 8b 7b df e4 0f b8 a0 df ef f4 f9 08 80 80 1d 20 84 21 b6 d0 40 25 d5 0f 8f 98 3e 63 77 05 49 70 c1 f1 84 07 7a 32 b0 06 dd 6e 04 35 b4 b9 ee fa 44 c2 91 ca 00 b9 2f d1 b7 5d 91 06 15 68 09 73 fc e5 11 63 b7 5d 0f 17 6f 50 08 a6 05 e3 16 36 56 fb dd 73 02 9c 23 c4 3c f3 a7 5a 64 17 c8 33 6c 87 72 bf d2 2f 29 1a 7c 7c 76 de 54 1c af 7f 8a a0 ea c2 bc dc c2 8f 62 aa f3 3b a6 96 4c 44 57 1f 2d 06 b8 8d 41 74 6a 8d 26 ff 51 d1 20 11 e7 af 6e 58 9a 41 07 83 1b 8e 3c f0 38 4c b5 33 b7 07 8e 6d be 0c 49 72 b6 1d cd 95 85 1f e9 82 e0 91 25 11 77 c1 fc 43 93 ad f4 22 82 91 67 95 06 f3 d3 4f 1c 18 a3 94 65 d8 cb a6 ab 97 cb b2 9b ef 31 ca 51 44 8b 4e 4f 60 d1 e1 89 33 33 17 e6 0b 6e a9 b3 39 89 38 a9 a8 e8 aa 24 dd 52 20 37 0a 6d 90 ce f4 39 17 81 be b4 9f Data Ascii: _W{ !@%>cwIpz2n5D/]hsc]oP6Vs#<Zd3lr/)\|\|vTb;LDW-Atj&Q nXA<8L3mIr%wC"gOe1QDNO`33n98$R 7m9
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 86 91 53 a7 44 66 f2 ad a1 df 18 9b 67 6c 39 5d e4 36 93 93 db c6 bf 3b 8e ac 0e 7c 74 32 ec 39 c6 2d ea 9a ee 28 fd 3d f9 cb d5 86 b3 71 c6 1b f6 42 ad ac bc 08 18 48 a0 3f 2c 61 4a 09 f8 78 6d c9 7a 19 2b 7c 9d 02 64 dc a5 de 92 cd 64 f0 87 4f 5a 49 e8 ea 1c f3 75 94 ea b3 64 cc 7e 74 65 0b 73 be 8c cb ba 6e 5f 61 57 cf 51 39 f3 b8 3a 29 bd d5 25 2e 59 8b 79 a1 19 0c 68 5e 98 a0 fe 5b 32 ff 64 21 0a 1b 1b a9 a2 f3 7d 23 6c 11 6c fd a6 e6 22 81 f9 e2 1d 4f e8 b6 11 2b 76 6d 05 66 11 6c 9c aa fb f1 80 e6 85 84 48 a7 ef be f7 75 01 f6 ed 7d 75 ff 55 a6 1c 34 de 3e 1e 87 1a f2 23 3f ac 3c 85 a3 33 a1 3f 6b 09 b1 64 41 82 e1 db be 8d 15 23 cb 99 47 19 4a 49 5f e1 06 ed ac 4a 40 7a ef ea 75 6f c8 ea f4 23 40 8c 13 fe df 46 f7 fa 2f 60 f2 b3 41 05 1e 00 84 40 Data Ascii: SDfgl9]6;\|t29-(=qBH?,aJxmz+\|ddOZIud~tesn_aWQ9:)%.Yyh^[2d!}#ll"O+vmflHu}uU4>#?<3?kdA#GJI_J@zuo#@F/`A@
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: f5 0f 7c 8e 3a 96 af a7 b8 9d e5 77 c8 c0 95 79 d4 41 4a f2 c3 b4 ad 7a 88 55 61 92 c6 70 97 4e f5 4a ed ff 43 70 fa 50 cb 41 02 42 2b d6 02 41 1b 58 61 9e e2 23 f8 56 20 40 8f 94 bc 56 30 7f 44 50 4a d5 7e be 18 3b 6b ba 94 17 92 73 d6 62 c0 d7 84 e6 1c 37 ab 72 ba e4 90 fa 17 22 f1 97 60 9c f9 f7 9f ee aa 3e ac 5a 92 26 0b f3 e9 43 85 93 6b 8a 81 47 50 2a 86 d4 75 a6 36 fb eb 75 97 c2 de 85 22 ee 8a ac f8 57 49 d1 47 16 85 ab be 7e 79 d2 97 94 4d 0b 1d d8 1d eb 0e 36 54 85 6b d5 46 03 cc 14 24 05 08 9a 0a 1c e6 65 c8 d5 26 c0 11 c7 a5 27 66 c0 57 96 27 d3 87 50 df a1 2f f7 e6 04 9b 7f 7a 24 5d b6 61 fc bf 8e f8 53 f3 67 cf e4 e6 f8 45 4f 47 70 77 dd ed 90 1b f0 2f 52 99 c7 8d 68 cf 5d a3 28 e3 8f f8 af 0f e0 af f4 be 44 94 3f 67 c8 d2 8b d3 24 dd 22 71 Data Ascii: \|:wyAJzUapNJCpPAB+AXa#V @V0DPJ~;ksb7r"`>Z&CkGP*u6u"WIG~yM6TkF$e&'fW'P/z$]aSgEOGpw/Rh](D?g$"q
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: dc 31 c1 f7 1b 4b 1e 78 38 60 f6 24 86 ad ef c5 be 4b ea f9 1d 92 22 14 d5 4f f2 66 c5 a2 bd 30 69 9e aa 06 c3 04 ca 1a 91 d2 8e e1 25 a1 28 28 3a 5b 27 fd 0f 79 3d 14 57 83 41 5b 2a 64 e8 71 ee 09 3c f7 6f d8 d1 30 5b f2 dc 04 32 31 84 0b f5 b3 65 b7 c7 2b ff 13 34 ae a0 e9 3f b2 1a b7 a6 de e8 2e 56 53 34 9f 1e c6 78 9f a1 e0 d2 8b d1 fa 82 ce 8d 37 9d eb 2b 03 86 f6 a1 ff 26 3c 5d ec 25 4b 65 99 41 cd cc e0 71 93 92 3e e0 66 ec 53 98 b9 62 3e 58 b2 13 2e d7 95 f3 a9 9a c6 42 06 c9 df 85 ce f7 68 46 4f 11 26 78 4e 73 fe 44 51 55 5a 5b 82 2c a1 17 95 4a 55 e2 d4 4b 00 10 ea e1 a3 4e d7 fe 93 e5 36 6c 76 72 78 a6 98 bf 2c cb 10 56 f8 9c 6a 06 1a b8 11 83 95 73 0d da d7 e9 6d b7 70 3e b4 f2 cc 85 45 c4 19 cd 79 a6 d2 d2 63 e6 b7 5b d0 f1 a1 da fc e5 1a f7 Data Ascii: 1Kx8`$K"Of0i%((:['y=WA[*dq<o0[21e+4?.VS4x7+&<]%KeAq>fSb>X.BhFO&xNsDQUZ[,JUKN6lvrx,Vjsmp>Eyc[
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: fb 67 ce e7 d3 63 db 7e 16 0c 13 bf 4f c4 f1 9e 2b fd 7b 80 b3 39 c1 c2 e8 e8 32 58 f6 de c3 1d ba 32 f6 90 7d 14 26 a1 7b b5 b9 4a 49 97 b1 f8 f6 51 d9 52 e4 30 a2 6a 58 fc 9b e2 74 ff 40 a8 95 3f cb 84 a2 8a 56 70 d7 82 a9 36 b6 f0 45 15 7c ed 86 15 d1 7f bb e0 92 bd 30 11 48 cf e3 64 66 8b 86 df 80 bd 35 f0 6e b5 bc 08 d3 3c 0d 4e bd f7 e2 9d c9 b9 ef f6 fe 64 7c 52 22 4a 68 3d be 61 5d 56 0f d0 d0 b8 c3 0a 56 a9 61 ba cb 45 49 a8 1e 4d b2 f4 42 70 df a3 47 0b 2a d6 a7 e7 88 76 82 bc 20 56 2c 0b d4 b2 82 43 9d 56 e7 35 c0 a8 60 89 20 1b 4c 1c 0d 96 b2 ae 26 66 fb e9 d8 e7 49 ba 55 14 53 b2 c8 d2 46 c3 aa 9d 97 95 b2 c8 9e 52 b9 f1 af 4b 15 23 b3 9f 46 59 40 ef 72 fc 8e c2 ad 6e 71 68 66 bd bc 20 72 58 93 99 52 be 48 93 4b f8 d5 3b f3 2f f2 68 1b f5 60 Data Ascii: gc~O+{92X2}&{JIQR0jXt@?Vp6E\|0Hdf5n<Nd\|R"Jh=a]VVaEIMBpG*v V,CV5` L&fIUSFRK#FY@rnqhf rXRHK;/h`
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: a0 22 c3 51 6d e0 1d 59 92 c4 09 27 0b 60 03 b8 bc fc e0 a5 3f 20 0e 19 f3 74 55 08 ed 1f 7f 9d 8a e5 c8 11 ef d5 e9 41 b5 7b a5 49 1c 4b 84 63 2f 90 b5 85 6a 01 ec 68 a7 99 d9 9c 72 3f d8 3f f6 07 ea 48 7f 5d 9a 25 f9 12 0f dd ab a5 4e 14 da e3 be 54 02 34 e5 66 54 e2 65 e4 eb 00 c8 7e e9 d8 da 93 53 fb f3 6d ab 1c 6a 73 16 3a 7f 2b 22 e5 39 f9 21 8e 4c b4 87 2b c5 34 67 0e 28 6f 12 02 32 62 28 05 b9 c5 a4 83 a1 40 29 e3 04 24 2e 36 c7 79 36 86 65 66 2f 35 58 e1 94 bc 65 d5 e4 44 53 b6 ea c3 a6 df 22 2e 71 d8 53 8b cd e9 f8 7f 33 75 60 20 5e 5e 7d 3b 5b 7f 83 09 31 bf f0 ce 65 6d 10 54 2b dd 7f 13 ef 88 37 6c c8 06 7b b8 83 63 47 6e 08 76 a7 22 c9 34 97 07 cc c7 7e ef f6 f0 71 a5 2f 47 7e 80 df 59 7b 9b 31 8e dd 31 92 2c d4 cf b5 76 71 de 08 2c 3e a0 53 Data Ascii: "QmY'`? tUA{IKc/jhr??H]%NT4fTe~Smjs:+"9!L+4g(o2b(@)$.6y6ef/5XeDS".qS3u` ^^};[1emT+7l{cGnv"4~q/G~Y{11,vq,>S
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 31 5f 00 d8 9c 17 42 c5 c4 b2 09 0b 24 17 8f c5 ac c4 e2 99 29 fd 12 7e 92 ce 09 1e c6 44 4b 74 c9 fd 40 3c 69 bd c8 22 1c 2f 05 9c 3a b8 e7 59 ef 4d 24 d0 e6 a5 6f 72 5b ac 7b a8 bb 64 af e4 3f c8 f6 08 f5 17 90 61 92 58 73 30 8e c0 4f 04 9c 9e bc f0 d0 52 a9 e3 d7 92 7e fd f0 c3 b6 a2 98 29 77 49 0f 79 52 a4 35 bc 25 14 e4 a2 a7 fe 89 03 d3 68 69 e8 f9 19 26 a2 26 6a 59 cc 4a a5 af ce 72 e5 cd 84 cb ff 3a be 51 2a b9 2d 02 29 2d 54 1a 72 86 f4 04 2c 12 1a 79 0c c9 c1 1e 33 21 4c 77 0e 4a f2 dd 81 34 e7 d1 6d ae c1 20 73 16 a6 dd ca 91 5f 21 c6 98 77 6e 76 1e 59 75 3f c4 e1 fd e0 03 54 c2 7c 8a fe 96 92 68 70 1e e8 5c 65 0e 25 e2 c5 fd 2d 89 ea c9 e5 89 c0 35 a6 26 c6 b6 b7 e6 d6 6e ac 05 24 1c 51 81 05 9a c9 d8 ab 25 4a 7d 9f 56 a6 6a ab ce 89 20 2e c7 Data Ascii: 1_B$)~DKt@<i"/:YM$or[{d?aXs0OR~)wIyR5%hi&&jYJr:Q*-)-Tr,y3!LwJ4m s_!wnvYu?T\|hp\e%-5&n$Q%J}Vj .
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: e5 38 99 89 88 73 80 4f c6 fb 8a 13 00 37 f7 0a 91 9b b3 ca e8 05 a3 ef dd dd ad cc 0a 12 73 14 65 a5 51 f5 5b 1b bf 26 97 61 88 b6 72 8f 3f a2 e7 38 1d 65 e4 17 35 86 91 67 50 ba 3a 4b 50 92 b8 c6 ac 41 0e 1e a4 c8 24 47 91 0e cb a2 e0 43 28 83 f7 dc 4d 56 e5 5a a2 94 96 c3 93 e6 e0 1c 37 4d d0 bc 04 9f e6 6d 0d 7d e0 aa b1 a3 70 31 dd 3e 21 d1 72 9c 2d 3a 77 a4 5b c7 7b 40 86 13 da 07 55 cd b7 d8 eb 6f e8 f4 dd e9 7a bb 81 9b ae 3e bc a7 37 24 5a 5e 51 3b f0 69 78 bd 23 58 25 57 33 90 77 e9 37 9e e8 a1 93 d0 89 a7 21 1e 71 de 8e 54 25 33 97 d5 d2 8c c7 e8 ff 3c 9d 1c 3a 4e f3 15 18 50 e8 02 9b b7 c1 10 86 ae 00 5b 51 f6 9f 8d 6a 9e c4 a4 dc df 5f 2b c8 2e e9 9f 65 6d 01 bd eb db 4c 65 8e 9c a1 19 c1 56 cb de a8 70 f7 ac 18 21 1b d1 99 53 af 79 10 37 9f Data Ascii: 8sO7seQ[&ar?8e5gP:KPA$GC(MVZ7Mm}p1>!r-:w[{@Uoz>7$Z^Q;ix#X%W3w7!qT%3<:NP[Qj_+.emLeVp!Sy7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49755	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1083	OUT	GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34202 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5373 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 92 85 00 00 57 45 42 50 56 50 38 4c 85 85 00 00 2f a5 c0 49 00 4d 40 8c 64 2b 6c 93 bb 8f 65 be 1e ee bf 60 90 26 25 44 f4 7f 02 ba bb e7 ac ee 9e 6f b7 9e 73 76 77 cf 39 ef 9e dd a7 3e f5 d6 a7 a9 76 b7 da b3 ed ee 7b f6 9c 0e 13 d5 24 e9 e3 9c dd 73 f6 fb b9 cd 7f e8 e6 65 c2 76 df b7 50 55 a8 17 24 c0 4d 32 54 80 2a e6 c3 92 73 12 88 63 0c 0f 05 79 ac 51 c3 2a d9 03 90 c4 37 52 1b 49 55 8d 9c 58 39 70 18 24 40 ad e0 8b 6f a2 7a 19 a8 cd aa f9 75 ff 23 72 dc ae 56 a1 48 c8 21 40 b7 de 43 4d 12 92 43 11 17 cb 3c fb 40 48 12 4c e2 41 e5 ef 8f e7 03 44 de 6f 55 71 59 58 4f 03 a9 c8 eb a5 ca 50 ed ee 59 6a eb 02 ae b1 12 48 f2 35 92 6c 73 9a f8 7a 11 54 47 40 73 ca ef 77 1d 46 f9 72 7d 3d 50 40 81 09 f1 73 52 17 7b f6 cf 8f 0d 78 22 89 47 a8 02 Data Ascii: RIFFWEBPVP8L/IM@d+le`&%Dosvw9>v{$sevPU$M2TscyQ7RIUX9p$@ozu#rVH!@CMC<@HLADoUqYXOPYjH5lszTG@swFr}=P@sR{x"G
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 0a 16 14 af f7 0b c5 e7 ea fd 98 01 47 e1 d3 7b 9f 3e 18 97 82 82 37 54 34 b7 82 b1 be 3b 04 02 83 1b 68 c3 ab 77 63 5e 8f c1 4d 01 40 c7 76 e2 c4 ea d8 51 3c dd 6d f3 76 e2 cd a9 a1 3a 17 4f 00 30 dc 4e c8 e3 6f de 1d fb 09 80 82 e6 74 84 d3 35 e0 21 0a 56 1f 8f 27 ff fe f3 e2 0c 67 61 c1 d2 00 50 01 50 fa 56 fa fe d6 f7 47 df 9d b9 de 58 20 ee 4e 42 07 ee d1 e6 11 3e 14 03 1f b0 03 76 34 9c b0 e1 c6 a7 27 79 da ef 91 9c bd 6b 00 d4 7d f7 7f 37 76 b9 c2 71 bc 08 ed c9 7d 17 a3 d2 0e 73 97 cb 09 f7 10 c0 d0 7b 34 90 f2 09 3d 00 a0 eb d6 ce 28 be f0 09 6d 68 68 c0 86 ed 04 db cc 87 16 b1 78 cd b8 d2 c6 70 19 c0 d2 87 16 cf 40 68 68 f1 bd 8d 61 1b 80 b3 2f df 05 d0 df 8d ca 15 48 4e b9 c9 36 31 a6 b2 4f ab 22 78 f8 b4 b6 4b 00 6c d7 e7 ee 07 7c d7 0c 9d 8e Data Ascii: G{>7T4;hwc^M@vQ<mv:O0Not5!V'gaPPVGX NB>v4'yk}7vq}s{4=(mhhxp@hha/HN61O"xKl\|
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 a6 74 a9 a6 33 2d 56 ae c1 d6 5d 29 8a a8 53 ce 94 4a 69 39 2d 4b 15 51 27 b6 31 84 5a 55 53 2a 6a ac d2 42 2a 39 d7 89 33 23 29 2d 33 05 ea da b9 ba 30 29 0e a6 b3 0d 48 d7 74 a6 85 96 24 57 2f 23 d9 b9 d2 19 95 81 a8 c8 a0 28 ae 34 ce 95 05 a2 b5 48 07 61 dc 92 44 87 66 57 8c 04 4e 65 d7 bb 42 c3 72 37 0b 4b c8 23 b5 85 a1 9c b0 47 58 11 96 89 90 64 e7 cc aa 91 ec a4 b8 62 86 25 65 cc c8 a1 24 a7 c7 a3 d1 c0 b8 92 3a 4a 92 73 da 59 08 67 b5 33 2a 16 cc 5a 04 76 aa b8 a2 77 76 08 27 7a 16 01 a9 1b ad 1a 10 64 95 4e 39 8a 24 f5 54 12 0a a9 2b 5a c0 88 4a cb a3 c2 29 b3 3c 23 84 e4 8a c6 52 74 14 a3 20 4c 18 85 a2 24 27 8d 72 b9 88 0e 20 8a 4e 55 09 42 a1 4c 50 25 0e 03 8e 62 14 85 08 47 85 d4 54 87 41 Data Ascii: XT\t3-V])SJi9-KQ'1ZUSjB93#)-30)Ht$W/#(4HaDfWNeBr7K#GXdb%e$:JsYg3*Zvwv'zdN9$T+ZJ)<#Rt L$'r NUBLP%bGTA
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 65 31 66 28 89 12 8a ff 72 aa 72 48 be e5 46 c8 85 8a 51 c1 62 09 69 29 9d e5 b2 bb ba 11 82 02 66 0a 75 c8 a4 5b 51 a1 04 a6 94 24 51 26 30 a6 a8 0d 4e 8a 24 ea 5c 5d 28 52 29 0d 6a 44 08 ae e9 94 54 0a 9a 64 4a 77 b9 cb a5 9a 3b 2a 5d 2a 95 22 29 25 35 50 d3 09 55 3a 55 0a 52 21 36 25 05 95 d2 91 25 22 36 43 a6 54 2a 95 32 52 12 1d d5 00 53 8a 2a 05 53 ca 54 48 72 51 23 34 9a a4 46 4e 2a a5 6a 33 43 2c 19 a3 a6 ac 58 4a ad 65 06 9c da 41 67 94 88 16 8c 98 b1 b1 58 8f 32 89 a9 35 d0 c4 94 d3 b0 31 d5 58 42 4d 94 44 19 a6 53 a6 b3 a8 e0 1c 81 3a 96 d2 cb 89 18 d5 51 31 12 a9 ec cc e9 98 88 52 6d 6c 8d 2a 75 28 8e d0 d4 f8 cc ee 50 4a 95 da 7d b6 21 35 6a 9f 69 64 aa 71 d0 12 ba 24 d5 38 da 28 04 89 74 28 75 92 d5 7d 44 a5 52 66 79 82 14 82 69 21 49 42 bd Data Ascii: e1f(rrHFQbi)fu[Q$Q&0N$\](R)jDTdJw;]")%5PU:UR!6%%"6CT2RSSTHrQ#4FNj3C,XJeAgX251XBMDS:Q1Rmlu(PJ}!5jidq$8(t(u}DRfyi!IB
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 25 69 8d e9 71 c2 04 9d 58 23 60 3a 17 6d 6c b1 4d e5 84 4a 86 ca 2e 98 a4 29 a7 55 1b 00 7a b3 9d 52 a6 06 73 0a 86 6c 70 62 4e 64 b1 94 ab 29 46 b3 54 c7 59 2d 75 61 56 9d 0d a5 8e 7d 95 af 94 5e 96 b4 b5 6a 67 32 89 bc 7d 4a 99 ce 82 37 cc 01 37 f9 ca ec 24 53 33 ca 47 aa 46 d2 f5 94 6b 10 3a a7 b0 63 21 16 d1 76 a1 44 95 9c 72 46 80 3a 65 e3 62 d9 7a aa 9d 65 85 80 8e ab 1a 09 dc 4c d1 82 20 9f b5 c7 92 54 ac 56 d5 41 4e 5d ef 8a 3d 90 96 2a 1e c1 10 60 ab 72 26 91 02 fa 4e 29 41 f0 55 d5 41 d5 76 ba 95 c7 94 54 44 7d ca ea a8 53 6d 2d 76 d0 d4 91 f9 46 49 a9 c8 b7 4a e7 4a a9 1e aa 36 2a 5f 00 11 00 51 d8 d9 81 d1 b1 ab 06 48 65 b9 0d 06 ac 20 0a 45 96 32 4b ba 64 f1 8c 99 b8 28 2a 11 26 a8 14 56 ed 10 72 44 a1 b8 b3 28 b5 51 81 49 38 17 04 a1 60 4e Data Ascii: %iqX#`:mlMJ.)UzRslpbNd)FTY-uaV}^jg2}J77$S3GFk:c!vDrF:ebzeL TVAN]=`r&N)AUAvTD}Sm-vFIJJ6_QHe E2Kd(*&VrD(QI8`N
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 0b 1b 36 5e 18 5d 00 54 85 2a 7a 0b 14 16 50 a9 b0 80 70 1d 83 af 6d f8 90 84 29 5c 00 9f fd dc 8d bf 3f 72 14 b0 c8 78 8b 44 c5 87 cc 24 02 03 50 65 92 b8 d8 88 04 01 c0 b9 8c 9b b3 8c 00 11 76 e2 08 83 2a 28 23 0a af be 67 3d d2 b7 b7 2e 01 6f 88 7a 8a 62 a1 ec 01 06 61 9e aa 9c 0e e9 7a a6 da 36 d5 10 b9 ed 2a 5a 6c b0 e7 b2 c7 9c dc c9 d1 76 51 11 d2 d9 ae d2 3d 57 6e 8f 16 a7 48 5b 5c b5 0f 95 b6 92 d3 64 c9 39 60 46 3a f7 4b 6f fb 76 b4 b5 8c 48 20 c5 ca 16 53 8e 06 31 a5 66 bf 72 f3 16 06 b5 68 1a 5d 34 a8 05 ea 03 ab 34 6c 63 0d 5b 37 12 4c ed 6a f7 f9 21 23 62 03 8e 6a 41 60 5c 14 11 2e b4 85 81 49 0a 39 e4 22 a6 30 a5 ae a8 d5 bd 47 e6 d6 5d c9 84 49 2c 43 34 62 04 98 c4 ca b8 8b 3d 18 62 0a c5 a6 dd 92 8e 63 54 ee 9a f4 05 e7 be 11 e4 ec ee ec Data Ascii: 6^]TzPpm)\?rxD$Pev(#g=.ozbaz6*ZlvQ=WnH[\d9`F:KovH S1frh]44lc[7Lj!#bjA`\.I9"0G]I,C4b=bcT
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 67 e4 1d ef 78 f5 b6 cb ae 4b c7 f6 12 09 31 5b ef d9 91 6f 3e b0 66 8a 63 5b a8 c7 5b c9 94 bb 2d b2 98 9a 8b 61 8d a7 28 f5 53 62 73 31 9e 9b d9 6a 63 bc ab 99 57 21 25 2a e7 00 61 a4 eb 14 d5 a5 ce 76 30 53 8a 4e a8 34 8b a9 18 c9 b8 04 83 18 1a e2 8f 3e f2 8f 82 8a c1 c4 bb 9e 68 46 d5 88 c7 af 7f f5 ed 1f 3f f9 bd d8 bc 6b d9 8f 3e fb a1 97 bb e7 ce aa d3 e6 7d cf 3b 17 02 20 25 00 b0 b2 20 01 90 b2 26 ed 13 40 4d 5c bf 5c 75 86 3e 62 25 d5 71 d8 b1 e3 39 64 5d e2 72 38 4f 4e 4a 70 de 73 a0 57 eb 43 f7 3f 7b 76 74 e7 83 b7 cf 3d 8f 87 7f f2 d5 81 ed 9d 3f 65 79 0c ca 93 aa af 10 4a dd f7 7c ea aa 2a 8a 02 d5 51 50 34 1d 9b ab 74 95 a6 3a 78 f5 c5 68 e2 c3 b8 0a 50 40 d1 e0 eb 00 f4 45 cf e1 eb 8c 53 5a af df a5 10 90 20 83 4f e2 fa b9 0d 15 08 a3 ce Data Ascii: gxK1[o>fc[[-a(Sbs1jcW!%av0SN4>hF?k>}; % &@M\\u>b%q9d]r8ONJpsWC?{vt=?eyJ\|QP4t:xhP@ESZ O
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 3c 89 1b 99 25 75 83 84 93 49 56 8a a9 20 45 08 5c 56 88 a3 5e 41 92 ac cf 4c ba 38 93 a0 26 2e ad 86 a6 4a 6c 57 cf db fd f1 de eb ef ff e6 a3 25 b3 ef 9f 3f f3 48 55 63 63 41 c1 05 11 f1 94 d4 86 b5 5c 11 9a 00 74 a7 65 c8 e7 45 a1 07 73 59 c3 56 89 db 88 b3 84 05 30 a6 9a 87 94 e3 04 28 e8 68 3a b6 4a 82 1c b0 3c b1 50 a3 a9 34 11 32 9e 11 d7 ea 39 de fc 18 ff f5 83 c7 5c e4 85 17 97 a5 ee 21 fb 38 67 7e 48 37 d1 46 8b 09 83 aa cd ba ab 78 4a e7 88 a8 86 ee 2a 45 52 55 bd b2 43 6e 15 c8 b2 55 a5 c4 d4 14 cf ba 5d 58 65 ed e7 ee c6 2d 45 59 2f 7b 96 25 57 6b cd b3 2e 6d ac d0 af 17 db 37 99 14 8a 1b b5 44 97 94 55 19 ac bb bb c0 28 40 59 57 c9 6e bb 10 c0 87 d6 99 98 10 4d 8c 69 20 00 d6 d0 11 08 d4 e4 32 c8 31 86 01 e4 72 83 04 08 92 aa 64 ca 06 b9 2c Data Ascii: <%uIV E\V^AL8&.JlW%?HUccA\teEsYV0(h:J<P429\!8g~H7FxJ*ERUCnU]Xe-EY/{%Wk.m7DU(@YWnMi 21rd,
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: fe f8 55 5d ba 78 65 d9 e2 5a de 7b 51 dd ad 1b 8b 8a 52 cf ae f8 2a 74 f6 b6 f2 ee a8 d6 ec aa fd 85 ae 5d 52 f2 51 b5 6f a9 52 ed 2a bf f1 76 2c 82 77 67 0e 1a 9d 8f 96 76 87 5a 51 dd 7d 84 b5 ec a8 ad d2 31 56 6e cf 32 8f b1 0d 23 5f 5f 57 69 62 c9 17 b2 33 8c fd 02 a7 3b 2d f9 c6 f9 d2 d6 74 c8 5b e4 64 bc e4 03 ed 61 32 f5 45 79 d3 7e 27 4d ea 0d 7c 98 6b ea 89 6f 9f bb 69 a7 1d 68 bf 4c 1d 6b c6 3e 1d f5 d5 30 3a e5 bc 3b a5 d5 a6 f6 2b 9d d3 1d 4b f7 91 f3 65 ea 30 9d f3 63 a4 25 94 37 ce 23 55 ea dd e7 bc 19 3b e9 a5 eb a7 73 3e 57 db e4 ad aa 5f eb 4c ac 75 db 32 aa a5 9c 3d 8b b0 38 ad 77 b7 8d 31 a9 5e af bd 9d 92 29 a7 7c 75 f7 01 2b 79 d6 6b 36 46 1d eb ae 6f ad a5 32 a9 59 77 f5 24 0d 6b d1 a8 0b b3 ea b6 43 54 38 5d cf ba bc 46 a5 ab 9e a2 Data Ascii: U]xeZ{QRt]RQoRv,wgvZQ}1Vn2#__Wib3;-t[da2Ey~'M\|koihLk>0:;+Ke0c%7#U;s>W_Lu2=8w1^)\|u+yk6Fo2Yw$kCT8]F
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: b9 a9 14 85 1e a0 6a 54 a2 02 df 14 b5 34 9a 4f 0a 1b 53 52 89 2f 75 24 51 74 da 14 05 c3 06 79 ba 11 4a 45 cb 4d 21 8e 4f 4a 27 a6 28 a8 8e 92 9e 2c cd 49 d3 51 01 4d b5 42 e5 42 ae 6a 2e 17 e5 2c 1b 5c c4 21 74 eb 22 55 10 ab 6b 0c 60 72 4e 4f f5 7e 06 86 48 5f 3f 53 b5 4f f9 72 ef ad ab 1e 49 dd 7a 16 9f 98 93 90 db c7 5d b6 8d d5 ed ab 7b fb c8 74 ce 5c f9 08 6b 69 4b fb 6e 57 3b 25 26 7b aa f7 c1 35 19 57 bd 37 95 31 6d f1 1e 77 d5 37 ca d8 ac ca bb 54 b3 36 8b 77 e9 0c 3b e6 dd 68 a3 49 ea 5b cb be d2 09 a7 dc de 51 eb 69 8f f6 d3 7c 1d e5 a4 9e 86 fd 74 30 74 68 bf 0d 9d e4 a6 f3 9e d2 d6 58 72 a8 7c 80 c3 a0 7c aa 72 94 0c 5f 16 1f a9 26 5b 8b 0f b6 21 a8 fb e8 f2 b6 94 70 54 de 7b ac d1 b8 c5 4f 57 d5 5b 2c e7 ab e5 fd 65 d4 54 af c5 5f 55 f5 ed Data Ascii: jT4OSR/u$QtyJEM!OJ'(,IQMBBj.,\!t"Uk`rNO~H_?SOrIz]{t\kiKnW;%&{5W71mw7T6w;hI[Qi\|t0thXr\|\|r_&[!pT{OW[,eT_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49752	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:11 UTC	1087	OUT	GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:11 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 37564 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5373 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:11 UTC	721	IN	Data Raw: 52 49 46 46 b4 92 00 00 57 45 42 50 56 50 38 4c a8 92 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 4e 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a ba bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd 54 b7 ea ed db 02 30 8e 5d 75 b5 54 92 14 92 b4 e9 c5 80 00 41 2c d5 d5 5d fd 6f 75 37 f7 cb fb be 02 ef 12 6c e0 c5 06 ed b8 98 e2 da ca cc 5a 64 03 26 40 91 91 8a f0 ca f9 20 18 17 23 22 d2 11 8a 11 22 62 64 3a 73 49 6c 5b b6 a4 21 49 cb d7 d6 18 01 91 0c c6 c8 88 a8 af f6 4b 40 a4 22 9e 96 04 f3 04 06 ba 25 81 38 2f 81 c5 bd 0e 36 60 40 27 69 c7 9c cc 03 58 5a 64 db 87 08 4b 5c 18 25 62 31 eb 41 12 29 71 3f 81 27 a7 7f 9f 4e dd 55 c9 00 be 31 92 6c 8e 02 f4 fb 3d 92 e4 2d 30 e7 44 5f ed 80 69 b0 01 7d 36 b6 0d 0c c0 c6 9f 1f 1b 16 02 30 b6 56 9b 00 24 90 70 f7 57 Data Ascii: RIFFWEBPVP8L/IM8lFFNn/Y_<BD'*nzwT0]uTA,]ou7lZd&@ #""bd:sIl[!IK@"%8/6`@'iXZdK\%b1A)q?'NU1l=-0D_i}60V$pW
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 71 75 bd f4 80 b3 32 b1 5e 6b 07 81 c0 80 8a ea a8 62 d9 5c 39 fb 9a 74 7e 98 e8 f3 8e 1f 3b 66 00 1c 80 fb 9b cb b5 9f f6 89 37 04 06 40 6d 4c ae 96 7e e8 e4 ab cd 62 fd 9d 0e b0 38 59 1c e9 eb a2 00 56 9c 6c c9 d6 27 02 81 00 40 c3 7a 00 00 e6 f5 56 df 71 87 23 eb 6e f1 07 3a 69 de 92 de a7 ad 21 1c 6f d6 7e 04 00 20 03 20 03 db d1 de 8c 6a 3f 1c 03 c0 e2 48 e6 9c b2 fb 1b dd 6e 3b 00 10 98 ed c1 ff 0c 4c 6e 65 64 40 e6 6b 83 7d 38 29 b3 31 60 98 01 a0 62 4f fe a7 e3 0c d8 35 60 80 d8 c8 80 0c b0 b2 19 bb dd 04 32 32 00 12 b0 9d fb 2e c8 00 80 be ba d9 d1 aa 07 40 06 8e 1b 60 cb e2 82 74 01 1c 75 40 c7 de b1 0c 00 78 3a 56 f6 fa 19 ca 0e 00 a8 9c 00 57 00 d4 89 b6 1c 83 32 82 0c f8 e2 88 6b 77 e1 ea d8 d9 1c 4a a5 0e 7d 53 3a 7c 91 00 8a 34 2f 57 20 a5 Data Ascii: qu2^kb\9t~;f7@mL~b8YVl'@zVq#n:i!o~ j?Hn;Lned@k}8)1`bO5`22.@`tu@x:VW2kwJ}S:\|4/W
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: f7 29 2a 25 52 14 25 05 4a 2a a5 80 a2 a4 d4 90 a2 24 8a a2 c3 28 ba 45 09 a2 4f 4a d4 90 a2 e8 26 29 09 10 91 52 23 52 2a a5 80 a2 44 34 95 a2 90 48 51 53 11 91 a8 29 0a 15 14 45 4d 45 94 58 e4 5b 04 29 45 51 94 96 ab 65 0d 3a 71 bd 73 75 89 b8 91 69 53 06 49 ae 83 ba 74 29 83 75 82 22 c5 75 82 9b 24 a4 29 0d 2a 65 e2 74 23 61 04 dd 54 83 a2 d3 8d 4c 93 94 c1 6a 54 89 02 03 1a 01 6a 67 8d 90 4e 84 6b 81 02 64 82 46 4e 2a a9 4c 9c 24 a1 ba ec 26 3a ca 34 ab 61 72 46 76 dd 8a 10 c8 89 6b a2 a8 1a 57 63 94 40 4e d9 8d 03 68 2a 13 85 8c ab 6a 40 91 39 a7 5c b3 84 aa b1 26 48 ad cd e9 e0 44 0c 4d b3 1b 81 ce 34 ab 81 85 70 7a 2c 61 73 d2 2c c5 42 a1 94 05 21 56 8c 39 19 24 35 4b 69 28 1a 5b 08 1a cc 56 1a 24 4c b1 f5 56 d2 62 dc 66 94 40 44 81 05 35 05 8c 5a Data Ascii: )%R%J$(EOJ&)R#RD4HQS)EMEX[)EQe:qsuiSIt)u"u$)et#aTLjTjgNkdFNL$&:4arFvkWc@Nhj@9\&HDM4pz,as,B!V9$5Ki([V$LVbf@D5Z
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 1a c9 bd 31 13 b5 d4 c1 b5 4b d5 6e 84 5e a1 51 99 5b 28 61 16 f2 2c c5 dc b0 6a 4b b3 bc e3 a9 85 b4 2d 17 80 a9 59 6a 73 53 8a 6a 3d 96 52 90 b1 22 61 b1 44 69 40 16 58 b3 2c 00 2b 2a 07 6e a0 29 05 96 61 11 ac 76 34 03 e2 42 41 c6 54 b2 bc b3 21 16 76 49 e6 e5 f1 2c 62 96 29 ca cd 94 8c f1 92 95 04 0b 44 b9 60 80 59 04 cb 18 2b 5c 52 14 c3 b2 46 85 54 40 fc 97 29 65 20 df b2 01 1c 28 0d 25 86 91 c4 22 cd 38 b6 ab 0d 80 4a 68 56 49 0d ac b4 55 0a a4 d0 44 95 4a a9 a6 d0 38 95 ba 91 2b a1 52 6a 4e 07 82 a2 6a 41 4b 8a 22 67 9a 2a 49 50 2b 35 d1 2d b7 1c 65 6e 24 2d 49 12 2a 51 25 23 32 4d 52 d2 94 04 25 51 dc 44 44 8a aa 4b 2e 25 c5 cd a2 26 8a a2 a8 06 55 4a 97 32 42 13 95 92 a0 89 6a 12 a5 72 c8 00 c3 54 32 b8 92 44 69 67 8d e2 52 e3 c8 c4 c4 25 ea 1a Data Ascii: 1Kn^Q[(a,jK-YjsSj=R"aDi@X,+n)av4BAT!vI,b)D`Y+\RFT@)e (%"8JhVIUDJ8+RjNjAK"gIP+5-en$-I*Q%#2MR%QDDK.%&UJ2BjrT2DigR%
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: c0 04 2b a6 84 84 14 96 25 a7 a4 46 de 94 71 81 28 99 04 4b 11 66 a2 04 39 8d 99 92 0a 0f 8a 2c 16 30 a8 32 cb c8 59 68 76 85 c4 48 ac 4b bd 54 c2 54 0d 96 5a ed 60 54 c1 7c 08 b3 18 2a 60 ac 59 ab 54 3a 03 1a a5 4b 27 5c bd 54 29 15 de 11 1a e7 a0 49 55 0b a5 44 69 82 12 84 3b a9 36 8d 90 96 d5 45 8d 8b 43 27 ce 14 a1 7a 71 8d 49 e2 16 45 26 2d 01 20 40 62 56 32 4b 24 0b ca 60 8d 1d 00 88 60 f6 06 24 12 c4 68 64 20 99 88 a2 7a b1 03 24 00 56 94 22 34 08 b0 97 80 58 02 b2 22 85 23 51 38 00 38 f0 45 9b 98 28 05 b2 97 49 1a 43 90 19 60 74 93 88 40 ac ae 4b ed d8 c5 6d 55 9d 22 a9 51 d5 0e 9a 4a a7 3a 5d 75 23 84 7a 67 77 a2 9a 8c ac 13 34 ca 0e 9d b2 4e c9 a9 92 aa 16 6b 32 a3 1c 33 8d 5a 34 53 d7 16 51 63 5f d5 83 aa c7 88 cd ca ae a9 a9 e0 dd 37 aa 69 06 Data Ascii: +%Fq(Kf9,02YhvHKTTZ`T\|*`YT:K'\T)IUDi;6EC'zqIE&- @bV2K$``$hd z$V"4X"#Q88E(IC`t@KmU"QJ:]u#zgw4Nk23Z4SQc_7i
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: f7 e0 a9 67 bd 45 a9 8f d8 f8 ba c4 65 72 81 ac df 99 2b 3f f2 c7 47 fd e1 0b 6c ca 09 cf bd e6 bf 8b ff fd 88 2d af 3d 67 ee 7f b6 77 f3 f1 a0 6f ff db 9e 40 a6 7b e5 f1 21 73 8e 0f fb d3 33 de ff 4b fe 89 4c 2a 9b 69 06 40 55 16 ae 65 97 02 55 bb 64 92 46 4d a9 a6 94 44 e5 6e 14 97 28 ae 76 aa 71 2a ea 14 49 54 3a 71 54 e2 24 0a 1a a1 24 27 57 f0 79 a5 93 26 a5 36 74 01 52 7b d5 1a 94 f6 7a 4a 6f b9 da b1 52 4f aa ba 61 93 d3 ea bc 42 a9 a3 ea be 31 23 d6 5c 6f ab ec 52 cd 19 34 f6 82 24 91 c8 b8 82 07 96 5e f2 be ab f6 b9 5a 7c e2 d1 d6 fd 9f 7b c6 eb ce 1d f7 f0 cb 7e 71 ca 85 29 53 09 90 32 3d f0 78 42 79 df bd 20 2f 6d 5a fe e2 72 c9 d9 0f ed fb d1 77 22 ca 14 b5 cd ec 29 d7 a8 7b ef ee a7 ae fc c8 77 3f f0 9c 03 d7 f8 bd 97 f4 d8 43 79 ff b1 fc f5 Data Ascii: gEer+?Gl-=gwo@{!s3KLi@UeUdFMDn(vqIT:qT$$'Wy&6tR{zJoROaB1#\oR4$^Z\|{~q)S2=xBy /mZrw"){w?Cy
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 4a c9 aa ac a2 ad 72 59 8e 59 85 aa 2c b3 3a 65 c5 42 76 64 39 3b 39 76 68 95 62 59 06 87 96 aa dc 74 8b a5 db 06 9b 49 d7 59 ae a7 d2 9b 9a ad dc b7 7c ba 84 ee 3d b5 ba d7 45 93 59 d5 fd 06 d7 68 87 fb a3 ca 09 4b 77 4f 96 de 26 6f 6e 69 f0 05 1d 30 5d 56 d1 8e 17 a4 c0 71 92 46 9e 18 ec ad 14 4d 38 b1 44 14 d3 1a 31 58 53 e4 76 92 06 81 54 c9 32 3a 5a 21 a8 ac 88 70 a2 84 98 25 91 15 4a 35 45 be e5 6c 51 58 88 53 87 1a 52 da 20 96 bd 64 a8 44 1d 6a 64 16 20 20 0b 91 9c 4a 06 58 66 29 70 25 96 90 81 09 4b 81 2b 0e 01 c2 70 a4 6d 90 a3 59 98 da c8 fa b8 62 50 54 bf 54 8e e4 54 cf ae dc 23 55 a7 77 ca af 9c d3 58 a9 87 72 2f 51 f2 f6 ad f3 34 d2 8c 74 f7 09 bc 51 5a 4f dc 7d 33 9d ca d8 0d 96 5c 49 99 6d 11 d5 1a 37 2c 32 cc c8 e3 5d 53 b0 8a b8 5e d7 0a Data Ascii: JrYY,:eBvd9;9vhbYtIY\|=EYhKwO&oni0]VqFM8D1XSvT2:Z!p%J5ElQXSR dDjd JXf)p%K+pmYbPTTT#UwXr/Q4tQZO}3\Im7,2]S^
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: c8 e6 38 87 64 2c 9d c9 79 1a 2c b6 fc e7 6f 2f eb 19 db 5d 36 be 7d e1 7f 5e 7f d1 dd 2f fe c9 3d 5f fe f8 b6 cd a5 0f ac 7e f3 97 97 5e fb d4 76 9d 78 6e d7 f6 8d 1b cf 9c f5 d3 47 be fd c4 3b ef be df ca 60 74 e1 8d d3 6f ee 79 ee 92 fb 5e fc ee 0b 8e e0 01 d7 6d 65 7e f1 83 d7 5e 2f 5d bb ee 91 f7 fe f7 df 3f 3d e7 05 51 e8 db ee f1 99 1f ff cb 23 fe 73 73 c5 f6 a1 90 e7 6f bf bd 76 cf bf 39 fa 93 f7 1f f5 c9 a7 a5 91 db 33 77 3e 75 f9 9f 8f 3e 72 af 3b 10 62 ca b8 de 8b 39 ea bb f7 1f ff 2d 5e d9 7e 1d 99 7d 58 d6 ed d2 19 ff fb a6 63 fe f3 ad e7 7d f7 d8 55 a5 8c 65 cf fb e8 fb bf f3 98 5b 3f ef 86 7f 2b 67 3a e7 9a 93 ee c1 11 61 79 e5 85 f5 fd 8f 96 ca e6 53 6e 7a e5 6d ff 7c c9 71 7f 7b fd a5 37 be fe 99 0d cf 3a f9 2f af 3d f3 13 2f e5 aa 4c c6 Data Ascii: 8d,y,o/]6}^/=_~^vxnG;`toy^me~^/]?=Q#ssov93w>u>r;b9-^~}Xc}Ue[?+g:aySnzm\|q{7:/=/L
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: d8 5d ce bb 65 d7 6e 28 59 17 d5 65 5d 52 96 1c 73 79 e3 52 69 d4 c1 d5 28 ba 1d ad b3 9d 13 d7 56 b5 c1 8d 03 aa 97 dd 71 55 10 61 d1 53 23 52 a6 65 4f 54 e4 f1 df fc 31 5f 0c 2d ff ff 7f 91 8c ae a9 2f 24 22 72 ef e4 e7 00 91 f2 e1 5f 1f 3d e7 52 d6 fe f3 ff 76 7e cb eb bf 7b 6c 0d 8e f8 f4 4d cc 3d f6 85 6b 6f ff 8f af 7c f6 4d 5f f8 c3 9f 7e f8 af 9f 47 5f 76 3e f7 87 fd 7f e5 e3 6f 3e 5f ff fb fe fe 99 3f f5 b5 ef 9f f0 c4 49 f7 9d df e5 54 8d 0e 7a fd 5d 9f 3c e7 54 8e bd a5 7e 79 96 1d 72 d1 b6 0c 3b b3 16 f7 0d 6b fb d1 75 77 51 88 4f 65 c2 72 e7 bd 2f 7f ed aa 9d 69 47 c9 0d a6 6d af 7c 67 ff 87 5f de f8 b5 b7 ff ea e7 16 1e f3 7b 2b 6e ff 92 a3 ce 7e 79 7b d7 e5 87 1f fa 86 a5 97 7c df f4 43 76 87 ef f8 d0 f1 17 f9 cd 67 ef b8 75 ed 66 c1 91 ab Data Ascii: ]en(Ye]RsyRi(VqUaS#ReOT1_-/$"r_=Rv~{lM=ko\|M_~G_v>o>_?ITz]<T~yr;kuwQOer/iGm\|g_{+n~y{\|Cvguf
2024-04-19 14:06:11 UTC	1255	IN	Data Raw: 89 c9 8e 1b 9b b8 9a c5 a2 a4 dd bf 10 2c 2f 9d 35 e3 49 13 3b b6 e3 6b cc 5b b6 c2 68 f7 97 3b b6 64 5b 54 ed b6 34 a1 46 cb a5 5c 8a 59 de c4 95 b2 56 37 aa a8 96 28 b4 22 ad 1d 58 35 b2 b4 01 1a 86 4c 0d 85 42 a9 cc 4e 49 52 92 08 a1 00 20 93 a4 3c 02 ce 1c 78 9c 4a c9 f0 88 50 2e 0f 5a 8a 94 cc 63 84 a1 97 47 82 cd da 49 a5 10 58 c5 44 cb ce 5b 01 ab 14 b0 43 00 10 87 04 c0 13 23 a7 c2 20 2f 0b 28 c9 ba 02 24 04 12 e1 44 0a 85 47 4a 82 c7 49 81 6c e9 50 c5 84 04 bb c4 81 87 01 88 1d b8 e0 f2 a0 15 4f 89 14 10 0b 46 62 49 81 20 27 42 d9 91 40 62 f0 8a a1 83 37 e5 d6 29 5a 29 37 95 52 d5 aa 6b 52 7f 54 50 19 14 e3 2d 3b 85 41 97 0e 5a 57 b3 aa e5 4a 25 ab 4e b1 db 15 74 9e 59 f5 2c a5 d3 53 ee 17 dd ba c9 ec fe 01 34 41 f5 99 e5 9d db b8 a9 1c 9a 27 70 Data Ascii: ,/5I;k[h;d[T4F\YV7("X5LBNIR <xJP.ZcGIXD[C# /($DGJIlPOFbI 'B@b7)Z)7RkRTP-;AZWJ%NtY,S4A'p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49764	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1086	OUT	GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32634 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5374 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	721	IN	Data Raw: 52 49 46 46 72 7f 00 00 57 45 42 50 56 50 38 4c 65 7f 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 ce 3e f1 7a af ff 82 67 76 ae 85 88 fe 4f 80 6d 77 97 ed de 9d dc dd b6 dd dd 8f db 5e 79 e5 c9 5f ad 96 0f d9 5e 3c ed b6 bb 22 29 89 16 f6 64 b7 f7 7b 6a ff db b6 d9 0c 8b e7 79 04 59 5d 90 00 0f 09 55 2b c7 5a bd 61 3b 3e 8e a3 79 35 d5 57 1d 75 a8 2a d3 f7 ab 95 38 24 69 a5 aa 3a 32 65 8c 91 5a 30 1d 24 20 55 55 cf 8b 3b 11 19 83 8c c1 18 41 55 7d 4b 8b 91 64 00 d3 e5 09 c2 77 00 7b b1 99 a9 c8 1f a8 4a 8b da 83 94 24 c4 c0 5e 44 cc 11 fb 53 55 34 20 40 00 a1 03 51 11 3f 36 35 73 48 ec bf c0 75 bc d9 cb d4 ad ff 82 24 5d 7b f9 fd ae 29 03 5e 91 31 34 86 6e 2d d8 7e 75 ae d6 2b 72 fe 98 80 97 7c 45 4b a8 82 00 82 d8 f7 ea 3b 60 eb 92 74 6d be 21 e7 f9 bb 16 Data Ascii: RIFFrWEBPVP8Le/IM8lFF>zgvOmw^y_^<")d{jyY]U+Za;>y5Wu*8$i:2eZ0$ UU;AU}Kdw{J$^DSU4 @Q?65sHu$]{)^14n-~u+r\|EK;`tm!
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 38 01 75 b6 c9 dd b2 2e c6 47 8f cb d9 4d b7 62 12 08 87 00 40 c3 7a 41 c0 3f 6e 7a 2f 4c c6 86 2b d6 b5 87 be a3 69 46 35 87 03 00 2c f6 00 06 bd a5 e4 f8 c2 9b b1 5d 00 10 98 4d bd bc f3 50 01 73 ea 03 37 04 8c cd 36 00 18 f4 72 1b 00 00 15 db 33 bc 66 a7 62 c3 06 e9 4c bb e3 df 45 87 ae 3a 70 71 5e e3 cd 1b 42 ff 3f 1a 6e 8e 6b d0 79 e4 0d b0 35 ce 18 ec 2d e5 c7 41 4e 5b 43 0e 06 d0 8f 1a 00 f5 bc b7 bb 03 9b 5c a1 6f 6b 49 3b 78 d2 43 ae b4 c1 da 64 db c1 06 80 96 f5 be 34 90 0c 67 84 c7 70 1f 1e 47 2f 20 09 4f d3 dd f3 f8 e4 01 c2 43 b8 1f 1f 01 a0 d1 f4 b9 cd c8 1f f5 9f 86 fb b5 a1 71 72 c5 7a 01 67 a9 9d 4a 93 4f 68 79 b1 2c c0 d2 3b 34 e9 14 3f 5a 5e 9c 17 c0 b0 ea 0e 0f 12 d0 1f e4 ca 15 48 36 bb 55 59 a0 5c 7a 53 4d 91 ac 62 5b 25 30 d2 2a 35 Data Ascii: 8u.GMb@zA?nz/L+iF5,]MPs76r3fbLE:pq^B?nky5-AN[C\okI;xCd4gpG/ OCqrzgJOhy,;4?Z^H6UY\zSMb[%0*5
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 2d 9d e5 b4 14 45 51 ca a2 2a 00 01 09 00 b2 ab f8 a8 ca a2 a8 a6 58 14 b5 d8 91 62 57 23 fc a3 08 55 28 8a 6a 14 d5 34 94 a2 a8 86 4e 28 aa 45 51 7c 2e 8a bf d2 12 7b d0 a2 13 8a e2 0f a8 96 b2 50 43 67 41 d3 50 8a a2 8a 1d a1 28 ab 50 74 c4 42 2d 3a 8a 32 15 45 d1 11 8b aa 2b f9 2b aa a1 28 8a ba 24 97 b0 e2 ab dd 2d b9 41 b5 25 ba 8e 5a 01 76 4b 6e 78 d4 2a 9c 92 42 25 a7 b4 ad 96 75 35 ac 08 b5 95 ba 9d 55 2d 6a 19 72 80 59 26 6c 40 ad c2 15 69 51 6a 25 8b 92 6b 61 11 be a2 5d 14 a5 ac 2d 59 52 4d 6b 6a 2b d5 6a 99 9b d8 16 1f b5 5d b8 72 f5 5b 62 b7 1b 55 95 75 2a d9 a2 c8 55 72 15 51 95 75 12 5b 53 ea 6a 6a 8b b2 d6 26 57 8a c2 a5 4e 92 1d 44 ae c2 96 d0 5d 97 ba a5 a1 3a d9 2e b6 28 be ed c2 95 7a 84 52 77 05 14 97 6a 17 a8 20 d5 d0 51 55 dd 68 5d Data Ascii: -EQXbW#U(j4N(EQ\|.{PCgAP(PtB-:2E++($-A%ZvKnxB%u5U-jrY&l@iQj%ka]-YRMkj+j]r[bUu*UrQu[Sjj&WND]:.(zRwj QUh]
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 46 6d 56 c9 fb d4 55 69 9d 24 27 56 db 2a 79 0b db 2c d8 b7 a2 2d ba e6 28 79 43 ae 2d f2 45 96 71 e9 aa 41 17 24 eb a1 2e 9d 6e ba 87 9d 6c 5e 33 c2 ee b1 4a b9 66 3d 5c 97 8e 1a 4d 77 57 a0 46 d6 ba 51 cb 71 d0 b0 92 a0 c2 4e 50 2a 94 31 95 4e b1 86 ca 89 1c 4b 37 9b 5d a4 d0 47 94 44 d1 54 27 5b 9c 38 ba 0f b8 4c 56 d6 a3 ba 10 8d c6 76 0d 51 94 c1 0d c8 51 68 ac 8a 94 eb 51 15 a2 28 54 1f 28 2a 72 c2 32 82 91 aa ff e3 a8 71 0a ef 71 2b 95 52 c3 6a 70 b9 00 3d 6a 17 a5 e2 3e dd 4a c9 20 3b 03 9d 0a ed 9e 50 aa 91 2d d2 34 64 23 6b 84 b6 24 2d d3 d0 a5 6e a9 8a 22 17 75 81 52 52 db 91 56 4b 2e cd 16 7f fd eb 47 ed 9f d5 ae d5 6a 99 16 69 2d d6 76 40 b5 a3 5a d2 2a b5 2d 54 28 72 83 35 50 db 31 5b 14 45 91 15 69 78 d4 22 5b 84 6a c9 16 d9 2a 4d 3f 6b a5 Data Ascii: FmVUi$'Vy,-(yC-EqA$.nl^3Jf=\MwWFQqNP1NK7]GDT'[8LVvQQhQ(T(r2qq+Rjp=j>J ;P-4d#k$-n"uRRVK.Gji-v@Z-T(r5P1[Eix"[j*M?k
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 6e 23 70 81 f3 e1 0e 41 d1 64 15 e8 66 53 cb 94 2e 9f e5 7a b4 9a 0a 74 c3 32 0c 7c 2b 59 da da 50 72 87 34 44 df 41 d6 52 b2 35 b9 48 83 86 2d 69 89 76 6a ba ed 2c eb 12 6e cc 5a 4d 4e a5 36 96 b9 e3 76 b1 f1 ad d9 9a a1 d0 91 4e 58 a4 ad 92 6b 14 b5 52 27 54 ab 65 5d 67 b6 1a 72 2d ed 6e 84 6a c9 2d 6b 8b 8e 76 8d 2c 54 6d 49 ae 01 1f c5 bb 49 56 4d db 25 dc 49 ca 46 9d 44 2b 71 6e 3e 5c 73 ab bd 4c 4e ac 66 99 bc 25 9b 36 72 da b4 45 e4 6e b1 53 64 6b 09 a7 64 e9 26 27 e1 04 ab b5 52 97 61 b5 8b 3a 2e ba a2 2b bb e6 bd 58 74 ee 4d fe 44 ee 8a d0 ab a7 de 6c 36 55 b6 df 22 db 45 f2 0f e7 a0 db fc 29 bc 69 b6 76 c8 af a8 0b e2 fb 56 6a 01 de 29 ed 58 a9 55 b6 b7 54 43 35 a7 92 95 a8 9b b1 75 b5 6e 77 a6 9d 15 95 a2 8e 9b 5a 81 6e 67 b8 92 82 17 bd 13 21 Data Ascii: n#pAdfS.zt2\|+YPr4DAR5H-ivj,nZMN6vNXkR'Te]gr-nj-kv,TmIIVM%IFD+qn>\sLNf%6rEnSdkd&'Ra:.+XtMDl6U"E)ivVj)XUTC5unwZng!
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 85 6f c9 e2 ce f6 6d c3 1d c5 2f 96 31 8a 4a ab cd ac 2b 5c 14 ed 4b 72 fe 49 1f 95 bc db a4 d1 c5 1d 5f 5d 6f ce f7 d5 cb d7 47 f3 94 1d 2a 40 b1 1c 2a b1 c0 18 ad d4 11 61 61 d6 f6 85 fc e9 67 3f 64 0a 00 05 a1 84 41 80 c0 20 8c 3e 00 aa aa 12 a9 62 b7 39 de 22 51 75 ee 40 a1 51 54 28 05 db 0f 5f fe d5 47 6b a3 aa 50 32 81 c5 4e b0 00 68 30 4c 9c c2 00 54 19 9d 25 a3 94 94 c0 47 8d 13 28 90 5a 0d 7f f6 c9 0e ce f6 ed 92 13 45 5e a6 4e a9 5a 19 fb 22 0b 84 6f 4d 4e a7 f8 be 33 ed 35 6a a9 d2 de 1a ae dc e4 9d 8f 7d 2d e9 1f ce f6 96 55 29 de eb 26 b7 2f d5 df 57 0f a7 cc b5 ba 69 bf 4c ae 8d d2 8e d5 12 22 51 53 ad be a2 bb ec 8c fd c3 5c d1 91 3f 1e 36 ac fa f6 6e 74 25 1f fc 74 2d da 90 13 8b fc f2 77 7f 95 73 ca 78 18 87 d2 b1 f8 16 a1 f7 43 dd 0e ba Data Ascii: om/1J+\KrI_]oG@aag?dA >b9"Qu@QT(_GkP2Nh0LT%G(ZE^NZ"oMN35j}-U)&/WiL"QS\?6nt%t-wsxC
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: c6 17 fc 82 9a e7 6f f8 99 af fd 3d ff f9 73 fe e9 96 df fe e2 e7 ff 7f e5 de ad 7f aa 14 49 1b 0e 2d 05 8a 2c cb c4 aa 51 11 29 4c e8 7a d3 e9 bc f1 ee d7 d7 5f c2 57 3e fd 52 48 30 8a 48 a4 2b 81 a8 af 9a 92 00 e9 ee cf aa 32 3e c3 79 26 15 1a 40 b2 6a 00 02 c1 98 a2 4b 25 c3 b9 14 7c 39 5e 71 5a a7 ce 08 88 1a 5d 55 40 90 a8 82 42 39 41 41 40 dd 04 00 be 1a 6f 7d 06 75 05 85 31 63 cc 9b 08 95 59 9a 59 2c 9c ec d4 a2 93 6c 11 f3 65 38 10 09 69 4d 31 55 89 b6 59 e6 9a 68 6f a6 bd 65 d5 15 d8 35 8a 8c 53 37 f5 c7 68 7b 74 fb f7 32 ed b7 6b 6e a7 9b fc 07 b9 d5 b1 fe 69 ea 9b a5 85 d1 76 47 12 9b 2c c9 bd 13 66 c9 54 76 19 dd 95 b5 ed 0c bf a4 28 94 ee ba 0b 9e fd a3 cf bf f2 99 eb e6 eb 6f e2 67 fe c1 af 3e ef 1b 77 cd df fc df cf 6f 5a 23 3e f7 0b be f2 Data Ascii: o=sI-,Q)Lz_W>RH0H+2>y&@jK%\|9^qZ]U@B9AA@o}u1cYY,le8iM1UYhoe5S7h{t2knivG,fTv(og>woZ#>
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 22 01 6a c2 28 2c 42 b8 69 4a 08 30 b5 42 95 10 6a 96 19 a5 82 04 9a 25 22 14 09 40 51 41 81 18 55 ca 20 55 4a 18 62 d3 9c 6b 8f 2f 44 94 d2 2a 05 88 03 50 e0 34 18 64 d8 48 32 9a 28 f7 e0 51 d2 a2 49 c3 c5 d2 5e 98 82 a4 62 d4 ff 30 7e f8 88 b4 0b 4d ac 4c e4 a9 4b e9 4b d3 b6 1e 9a 69 86 a6 2d 4a 1a 1b de fa ed 68 7f 90 9b dd fa 7e 3b 73 fe 45 c7 f7 4f 93 6f e9 6e bd 33 7d ff 2c b5 42 48 77 ce 94 aa aa 2f 67 17 2a 2a 96 5d f7 25 9a 20 de 97 1f 1d 61 eb bb 43 50 53 05 0f 1a 03 5a 53 80 a7 46 95 94 79 4e b9 28 dd 63 0f 9a 2b b0 0c 5b e9 59 b1 ea 5a d4 dd ba 15 9c 00 c2 0a 62 59 85 35 24 88 a8 42 0d 91 a9 94 40 59 41 19 0b 4d 20 88 12 82 52 53 f4 40 04 59 e7 8a 38 14 9c 13 2f 84 05 20 53 b1 12 ac 12 02 35 4e 53 70 42 20 e0 24 c2 c2 1a 08 14 56 d6 9f dc 62 Data Ascii: "j(,BiJ0Bj%"@QAU UJbk/DP4dH2(QI^b0~MLKKi-Jh~;sEOon3},BHw/g*]% aCPSZSFyN(c+[YZbY5$B@YAM RS@Y8/ S5NSpB $Vb
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 5c 6d 28 91 6c e2 1a f1 ac 89 84 a8 f3 23 e4 96 89 1a 31 5a ba 89 16 97 ae a1 32 29 d8 4e 2a 09 32 3a 0b f9 4c c1 9e ed f9 16 ab 21 4e 25 c2 b6 da 74 86 38 93 66 74 46 96 59 1e 6b 12 2a 7a 7c 59 92 8a 60 2d d1 42 0c 86 58 01 db 28 61 51 99 3a 94 ca aa 50 a1 4c 4e e1 7b 94 14 89 fb 14 dd 18 3c 6e 6a b7 01 73 4b c3 7d 88 8b 83 c8 c8 50 3e 26 89 5a 34 04 5e 16 5b de 69 6e fd e5 b7 08 0f b4 4d ec 9a 21 4d b2 8f 50 d4 f4 9d 46 b6 d1 92 8b 76 3b ac 50 bc 37 0f 4e 05 61 8b b0 57 25 1d 4e 98 24 0b a9 b2 cb 77 71 df 92 ce ba 9d 54 76 52 ac 34 f1 02 16 82 d2 04 7a b2 f4 fd 98 2c 4d 96 74 bc 2b 6b c9 92 e0 22 76 42 96 40 52 a9 b2 cc 70 1b a9 f8 fe d6 93 bf a1 6e dd a5 76 17 ee a2 83 13 7b 11 15 2a 21 db 32 6f de a5 65 6a 29 b7 e2 96 1d 47 bb 9b 84 51 32 b8 b6 65 1c Data Ascii: \m(l#1Z2)N2:L!N%t8ftFYkz\|Y`-BX(aQ:PLN{<njsK}P>&Z4^[inM!MPFv;P7NaW%N$wqTvR4z,Mt+k"vB@Rpnv{*!2oej)GQ2e
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: a5 10 4c f7 d4 29 90 4c 5a 74 96 40 c8 56 5d 23 c2 47 cd d8 5e 1e 5a 43 1a e4 56 66 d2 dd b4 26 34 f3 54 f9 9f bb 2b 6d 98 36 ba 7c 40 43 66 69 2b f7 11 71 64 21 90 44 32 da fa e4 56 e2 70 16 c5 a8 e3 68 9c e0 c3 28 ed 51 f9 49 09 82 2d 67 c6 90 d1 66 cc 6a 25 68 6c 15 ab 43 a7 9d 98 8d 93 6a 70 f3 32 57 5a b6 c2 a5 70 3b 6d 29 2d 2b db 33 72 9a 15 66 84 db 4a 90 c9 42 e6 26 de 28 01 57 ca d6 30 aa 2a 65 e9 50 d5 c7 0e 77 d1 69 37 4a 07 89 ce 6c 16 ad 82 3e eb a2 f4 2e 36 4a 32 a5 09 38 54 31 d7 3d 14 bb 7e 31 24 4c a0 cd 51 17 16 a8 ea b1 75 6a 15 27 19 43 a5 2a c8 28 e4 16 4f 4e 25 af 48 b5 36 f9 96 5c f1 97 7a 8b 19 c0 32 3d 92 7d d0 4e 16 de df df f0 a5 e1 1b 4d d2 5b b5 3c 29 d1 61 7c 5b 45 be e4 3b 50 65 b1 49 3a b8 ea 4a c7 74 43 85 0a 9c b1 c8 48 Data Ascii: L)LZt@V]#G^ZCVf&4T+m6\|@Cfi+qd!D2Vph(QI-gfj%hlCjp2WZp;m)-+3rfJB&(W0ePwi7Jl>.6J28T1=~1$LQuj'C(ON%H6\z2=}NM[<)a\|[E;PeI:JtCH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49765	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1086	OUT	GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9646 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5374 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 a6 25 00 00 57 45 42 50 56 50 38 20 9a 25 00 00 f0 8d 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 12 7a 7d 58 28 04 04 b2 b7 7c 2f dd 83 78 17 1b b8 97 db 96 8b d2 cb a2 fe c1 e6 ef 45 fe 8f af 1d 0e f9 27 f2 0f fc 8f b8 ef 78 df d8 3d 80 7e 43 ff 81 ee 01 fa 6b fe 77 f9 3f f8 0f 68 cf d0 0f 72 3f af 3f a3 be e0 3f 95 ff 6e fd 8c f6 22 ff 63 fd cb dc 6f eb 47 f5 ef e4 bf e0 3e 40 3f 94 ff 3d f4 18 f6 00 fe 55 fd 67 d8 03 f8 8f f2 ef bf ff 94 2f f0 5f b1 ff 02 ff b0 df b2 3f 00 9f ce 3f bd 7f f7 ff 67 ee 01 e8 01 d4 3f d9 3e c3 3f b1 7e 44 7f 6b ff 67 eb 9f e2 ff 23 fd 27 f1 ab fb 8f fd df f2 9f 21 ff d7 78 4e 89 07 c5 7e be fd 4b f1 ff fb 17 fe af f6 bf 79 ff 92 ff 7b f8 29 e6 ef c2 ef e9 ff 28 7e 00 bf 1f fe 4b fd 4b f2 63 fb bf ed 2f 1b Data Ascii: RIFF%WEBPVP8 %*((>ADz}X(\|/xE'x=~Ckw?hr???n"coG>@?=Ug/_??g?>?~Dkg#'!xN~Ky{)(~KKc/
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: af 5f de 8d 8e 61 28 c2 f8 6f 08 af 97 2a 86 83 d2 04 91 49 db 38 1f 55 6c 9a 88 0a c5 ed 2c c6 4a 33 4f 4b 65 99 d0 68 15 20 f2 02 eb 16 74 a5 db 09 8f a4 19 b2 d0 fd f4 14 67 b6 fb d7 ea 1b 92 90 b1 4d c0 3a 91 4a b0 39 f6 f2 be 67 59 80 7a bf 30 63 2c 70 bb 23 70 e8 83 87 a2 a9 84 df 39 e5 1a a6 46 5c f7 e2 eb 45 a3 e8 13 a8 88 85 38 e0 c7 90 1e a5 38 7f b4 85 4e 6a 90 d6 ea ce 52 20 c3 a1 f8 a5 b2 e9 9e 59 dd 65 82 e5 49 d3 4f bd 8c 7b 95 42 c7 5d 24 ee 41 f4 f1 67 4d f3 75 e7 70 9d 12 22 bf aa 93 4e 88 b8 7b 4f 55 25 48 3d aa ef 99 84 7d d6 a1 de 29 97 8c 09 a9 3b e2 85 5e 3e 9b 64 88 86 6c 82 70 57 da 9b 75 c4 0d 5b a3 9d 94 13 76 5a 90 c0 92 59 2e ed a9 12 64 1d 24 8f 6d f4 fe 07 44 31 77 8b f8 67 d9 88 1d dd 0b a5 97 e2 0c 96 e4 9a 3e 31 7e 1a 7f Data Ascii: _a(o*I8Ul,J3OKeh tgM:J9gYz0c,p#p9F\E88NjR YeIO{B]$AgMup"N{OU%H=});^>dlpWu[vZY.d$mD1wg>1~
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 29 6c 20 5e 0c 07 95 9c 33 a3 9a 8e a5 4d 5f 4d 05 8e ee 8c 2a 1d ef 19 51 14 22 4c fb dc cc f6 a2 29 2b 8b 23 cb a2 bc b3 f9 50 3d 1a 02 6e dc 3f 94 7a a3 2e 0e 80 2e 12 0c 18 ef a2 c2 fa 95 0e 7b c9 43 f3 3e d3 a6 97 24 8e 7b 8b 18 d5 55 1e 39 88 89 e1 e3 3b 10 f8 66 13 4f 9a e0 4a 58 1f d6 11 07 5d 02 b0 5b 44 d8 9b f7 8d de c1 f4 62 cf de 66 4e 67 b4 4d 23 db 01 f4 eb 96 ac e8 1d 91 70 72 d2 e1 99 06 50 87 ed 1f c9 61 f9 ff 66 d6 0c 6d ba c3 cb 5e 39 1a 57 05 5e bf 02 c7 03 c5 b0 eb 7f 20 29 b0 1f ea 05 cc 5b fb db 73 d8 d5 d2 9d 9c 50 30 03 9d 27 eb b3 56 1a 18 1e 40 ff 66 df f4 86 b2 70 4c a3 a5 67 9d 5d 04 f7 55 f5 f8 b3 14 46 a7 ad ce 91 2e 92 de da c1 39 e6 2f e8 98 ab 75 27 08 2b 84 d4 6c a8 8a 82 6e 49 4a a8 59 0c 6f e0 5f 9e 6e 4b 21 59 37 2f Data Ascii: )l ^3M_M*Q"L)+#P=n?z..{C>${U9;fOJX][DbfNgM#prPafm^9W^ )[sP0'V@fpLg]UF.9/u'+lnIJYo_nK!Y7/
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 78 cd 57 64 bc 74 80 fa 7d 8b 10 dc f4 15 0c 7f a3 72 5c ab ac 74 26 0c 25 66 e4 67 24 f6 3d 56 52 7d 43 6d fe ca 7b 3e 99 77 62 e2 ed 98 b1 f0 cc 41 2f f8 7e 57 4c 10 e7 50 b9 fa b3 0d 65 05 a9 41 2d ac 81 d8 18 2b 5f 2b 42 52 3b 86 d1 90 6e 89 b6 1f df 2a f2 4a 5d c6 6f dc 23 5b 61 bc 9d ee 26 00 83 5e c9 8e a5 db 98 06 8b fd 98 80 3f 59 22 4d 6d 45 80 eb 67 01 43 da a6 f0 4f 18 7c b5 92 29 8b 5e 06 8b 8b 40 de 6f 7e b9 53 35 5f 3b 3d 53 97 3f 75 3e e8 ab f6 60 ef af 80 41 c3 1f b4 3c d8 e9 e2 d3 23 6a f4 f4 8f bb ab 5b 9b 56 1e b3 98 f9 34 1f e3 ca 58 76 7a 4b 32 e3 28 ab c7 7c 18 4f 88 f5 77 32 c5 24 f1 6e ea bc 96 a7 37 33 55 11 9c 5a ba 80 58 64 23 bd 62 1c 89 5b 74 0c 79 b5 12 2c f8 06 03 4a b7 7c d0 99 04 24 b5 bd 1b ea e8 46 ed 52 34 3f 5c bf 95 Data Ascii: xWdt}r\t&%fg$=VR}Cm{>wbA/~WLPeA-+_+BR;n*J]o#[a&^?Y"MmEgCO\|)^@o~S5_;=S?u>`A<#j[V4XvzK2(\|Ow2$n73UZXd#b[ty,J\|$FR4?\
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: dc 95 85 3a c0 36 2a d4 e3 68 13 ca 23 be 2e fe c6 cd d3 b9 8a d2 24 93 8b 2c c1 1e 9f 03 39 e0 17 ab af eb 06 59 97 aa 31 df 5a 91 d9 d1 eb 31 23 6c c7 d2 e9 ac 48 8f 56 23 0e 61 d2 15 55 e0 88 2b 87 53 9e a4 58 fc 4e 29 06 c3 ad 28 55 95 d6 f9 37 26 0f 2c 9b ae 51 b7 ce 34 5c d8 e2 42 17 2a 11 a5 98 89 bb 7f 30 b5 79 8f eb c2 02 03 a7 4d 2d 6e ee 95 32 d1 e3 a1 6f 62 59 f3 08 d6 70 a3 fa 80 0f 86 72 85 1d 45 10 03 9b 2f 0b 20 66 99 81 ad 21 73 6e dd 4b 43 f5 06 15 7e 70 93 8b cd 28 7e 95 15 2e 66 30 24 4a be 28 7a 6a 7e 66 d7 3a 51 4a 2d 64 a4 22 ef 23 b9 24 4b a7 85 8e 21 1c 45 d6 46 ee 31 35 d9 f4 27 9f fd 53 3b 52 60 cf 17 44 c9 1c e2 11 93 51 12 08 84 6d 26 c5 76 bb 3b 67 17 21 d0 b4 16 d2 da 92 00 d8 e2 60 b5 e6 c9 f6 98 77 50 b9 ed 91 0f 06 51 c0 Data Ascii: :6h#.$,9Y1Z1#lHV#aU+SXN)(U7&,Q4\B0yM-n2obYprE/ f!snKC~p(~.f0$J(zj~f:QJ-d"#$K!EF15'S;R`DQm&v;g!`wPQ
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: d4 f0 4f c3 cd d2 6b 9c d3 62 2a 01 7d de 57 df 2a eb a2 1f 4b e1 f7 24 2a aa 3b 9c 01 0a d4 70 a9 94 b3 08 bb f2 41 a3 5d e8 7d 6d 5a d5 e2 7d 88 2c 78 4f c5 b9 7e 09 9e 93 c5 8b 1d de c1 43 06 bf 6d c9 4e 87 4f f9 aa e8 01 5d 88 e7 75 db b8 af cf 59 3c 6c a9 94 f7 ee 70 d2 b9 3f 94 79 51 89 76 f5 77 6d d1 8e 35 57 c3 c6 47 22 b6 db 3c 6f 50 65 43 4f 6f bd 38 76 7e 7c 06 9f f4 50 df 1c 16 7f 48 4f 0a 2d 18 68 42 c9 d2 b3 fb 11 09 f5 ea 5e 4e f4 42 9d cc 2a 8d c0 18 af 3f 47 99 f9 ff 37 7d f8 f2 2f 17 5c c7 10 8a d0 b4 c1 43 4b ed fc 35 b3 d7 65 37 de 6c da c7 9e 34 21 c5 ab 95 f9 c8 aa 7d 2e c3 f8 83 e8 09 fe d2 86 74 e4 7c a8 d6 82 9e bb e2 21 9a 61 6b c8 26 06 67 6f 60 9a 03 1b 4b 20 1b a9 eb 30 6f 6b a5 98 a7 db 5b e4 a6 04 85 1f 47 bb 97 90 b5 7c 2f Data Ascii: Okb}WK$;pA]}mZ},xO~CmNO]uY<lp?yQvwm5WG"<oPeCOo8v~\|PHO-hB^NB?G7}/\CK5e7l4!}.t\|!ak&go`K 0ok[G\|/
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: 14 df 0a d2 77 bf 13 4f 01 69 0b 2d 66 69 bc 7a 6f c3 ba f9 a5 73 a5 f8 c8 97 82 e8 01 c1 09 0a 4b 69 32 62 c5 c3 4c 52 03 75 97 a8 e4 40 a5 59 f0 2f 2e f1 cb 38 12 aa 1e 82 4c be c9 b3 4d 37 fb 60 bc 06 f7 1e 79 87 a1 29 6c 29 bf c3 57 01 58 fc 00 0d 6c c6 35 80 00 3a 1b 3a a8 49 38 71 9e 68 a3 cc 4f 9b d5 d1 e2 39 b7 03 6f 92 78 62 09 04 eb 7a 5a 55 b9 97 2c 1b d5 a0 f3 7e 20 16 ff 2d 4f 35 e7 b3 f0 0d 3c 5f 25 a8 81 69 87 fd d5 54 ed 25 58 ff ed 36 3f cb ea d3 e9 4e 10 f9 83 f3 15 18 07 27 e9 bb ed 0c 83 9c 82 0a cc cf d5 f3 5d 60 53 86 ae e5 76 73 8f 1a 4a 0e 59 a6 d0 cc 20 65 74 fc bb 0d e7 f5 0c 99 45 de 43 5a 96 e3 b5 6a 2e 84 fd ae 29 7a df ac a2 44 c4 ac 62 08 1c cf 0f 8a 5d e6 12 a7 20 9b bf 4f f7 25 68 19 f8 64 6c b3 22 65 bc da 1c 62 36 19 f8 Data Ascii: wOi-fizosKi2bLRu@Y/.8LM7`y)l)WXl5::I8qhO9oxbzZU,~ -O5<_%iT%X6?N']`SvsJY etECZj.)zDb] O%hdl"eb6
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: f9 76 4c d3 c2 d7 11 a1 ca 8e 00 82 32 14 c4 b4 df 25 34 53 34 a5 8b 05 1b c8 dd 9b 6b 26 d4 09 e6 3c f3 96 5f 89 20 40 c0 c9 80 2a 40 fd d2 fb 3e 0c 68 06 f8 c0 a9 cf 84 ff 70 53 0c 47 8a 03 4e a7 68 c0 e3 69 fd 84 9f ff b9 3d 70 0f 74 ef 7e d0 ae 1f cf 21 94 c9 c0 3b 62 0f f8 30 15 78 87 24 39 7a 16 3f 11 dd bd c4 12 1e 2e a0 82 27 46 19 8d 66 e5 11 2a 69 64 00 36 33 5b e3 09 08 df 8d 4a ba 0f 83 03 05 62 10 aa 14 a6 4c e8 d0 a0 4a 37 ba 07 03 53 02 d4 5e 46 0f 6b bd e3 fd f2 a7 4c ac 50 40 55 61 b8 0d 42 57 0c 38 22 c1 f3 18 4b 7f 9e df a5 6d 11 60 32 db 00 67 b3 ae 35 67 be 35 79 64 22 ba c0 02 c1 91 c9 c3 bd 3b f2 d5 3f 38 c9 5c 2d 89 c4 cf c9 27 f5 8d 69 fb e6 a1 37 77 ab 96 c7 58 ac f4 de 06 8d 14 e8 83 11 ef 9a 25 b0 66 5f 20 bf 03 c9 80 cf 5e 5b Data Ascii: vL2%4S4k&<_ @@>hpSGNhi=pt~!;b0x$9z?.'Ffid63[JbLJ7S^FkLP@UaBW8"Km`2g5g5yd";?8\-'i7wX%f_ ^[
2024-04-19 14:06:12 UTC	139	IN	Data Raw: 6a 36 4a 38 1e 85 7a 1f 1c 85 e4 8d a7 9f 70 0c d3 3e 10 b4 af 64 fc 6f a4 fd a8 66 e9 10 41 ab 87 d1 68 38 ad dc f8 f9 51 85 f1 39 ed be 34 f9 9d 3c cc 54 79 13 09 d6 e3 3a 14 40 1d eb 4d 4e d5 97 8b 85 13 e6 2d 51 8f 3f ee f9 13 48 06 96 ec c0 36 f6 3b 5c 4f a3 f5 c2 1b a1 14 0b 2c 01 5e 6c ff 91 b5 9d 95 61 4b c9 84 5a 66 9a f0 08 b4 e2 7e 44 00 ea 24 e9 4e 0e 7e b2 e1 96 19 00 95 b0 36 fa 3a c0 62 e6 66 00 00 Data Ascii: j6J8zp>dofAh8Q94<Ty:@MN-Q?H6;\O,^laKZf~D$N~6:bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49766	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1079	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2840 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:17:59 GMT Expires: Sat, 20 Apr 2024 13:17:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 2893 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 10 0b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c7 0a 00 00 2f 3f c0 0f 00 4d 28 6e db 36 82 94 f4 e5 74 ff 81 af 19 22 fa 3f 01 7c ae a0 60 e2 12 b2 e7 62 eb 0c 74 0b 75 90 2a de 0b b7 b5 6d 2b d1 5e 44 84 54 40 44 ff 45 b9 eb b8 fb d4 c0 36 92 24 27 fd c2 a4 30 bf 30 2f ff e8 d0 1a 8a 6d 23 49 8a ea 33 f9 fc 23 62 66 36 d9 e8 ff 04 e0 cf 5a 38 8a ee bf 18 00 39 de 33 6c f3 6a 4c 11 1b e0 ac 98 ce 7b 05 67 25 3a 20 57 25 ad da cf 95 ee d7 57 02 50 ee 57 24 6b 55 7d ad 0c 15 00 10 04 6b 65 ac 8c 3e be 1b 2c 6d db 76 4c 92 74 dd ef f7 85 13 55 d5 63 db b6 6d ef fa 98 bd f1 07 66 69 db f6 cc ca b6 6d 97 6d 27 23 11 11 df 7b 2f 32 aa fa 8b 58 f6 ea 09 0f b4 6d 9b b6 6d db 56 cc b5 cd e1 31 96 6d db b6 ad Data Ascii: RIFFWEBPVP8X??VP8L/?M(n6t"?\|`btu*m+^DT@DE6$'00/m#I3#bf6Z893ljL{g%: W%WPW$kU}ke>,mvLtUcmfimm'#{/2XmmV1m
2024-04-19 14:06:12 UTC	1255	IN	Data Raw: d6 3a 5b 50 00 28 85 84 82 cb 98 21 73 b5 14 33 34 62 18 82 03 84 69 66 25 28 13 41 8a dc 50 59 0c 4b 25 bb f2 f8 bf 57 ef 73 9a 97 98 c0 5f df d7 77 4e 22 42 2d 9a 89 5c 79 ae 63 4d ae 85 21 97 b2 87 f9 f8 16 d8 5d 1e 20 03 04 1c 41 10 43 94 20 a0 b2 e0 86 9a dd 41 90 ea 56 8b d3 fe 5b fe 00 f5 5d 5a 41 ff e3 45 13 48 74 32 1d 15 ff 1a e2 d0 d2 fc 96 e5 76 28 12 85 24 e4 a8 4a ed c7 74 db 87 e6 e8 fe e5 66 00 11 21 40 62 47 e1 40 83 20 06 30 69 4e 66 f6 44 0e 3f 54 87 1b a8 0b fe ef f3 66 8d 73 d5 1c 62 69 fa 9f 6f ed e8 1b 4b 65 6e 99 ee 39 2a 05 a7 44 82 82 62 b1 9b 49 cb e1 c4 70 d6 e7 9c f9 90 f6 4f 43 88 80 02 ec 08 10 07 24 d0 ec 30 73 0c 65 a6 ec b2 8e f6 ea a7 6a 5d 97 56 52 fd a3 74 06 7e 77 c8 eb 5f 3b e4 d9 5b 45 25 cd 66 05 15 ac a8 60 62 00 Data Ascii: :[P(!s34bif%(APYK%Ws_wN"B-\ycM!] AC AV[]ZAEHt2v($Jtf!@bG@ 0iNfD?TfsbioKen9*DbIpOC$0sej]VRt~w_;[E%f`b
2024-04-19 14:06:12 UTC	863	IN	Data Raw: 76 7c 87 c7 9f d9 01 a8 7b 7e 6e 7d ff 7b 8e d5 20 53 b8 b4 43 58 e1 ff 8d b9 d7 0a 89 00 cd b9 f8 dd 9b f4 85 d7 7a 4c af 71 f7 3e ef 70 c2 fa 16 8f 3d bf f3 b3 07 47 ff a0 5a a5 bc b5 e4 61 d0 f8 9c 93 4e 6a ed 39 ec fa f8 37 8b c8 00 b5 9b ff bc e2 f7 93 5f 1e 8b 02 44 84 45 28 ac d0 7e a5 d7 45 22 8b 30 dd 6a 4e ef 7f d4 c1 97 5e ff e3 8e 08 17 5b f3 d3 e6 ce 69 b0 c8 70 44 1e 09 a4 46 6b 9c ce 14 dd 69 12 c0 04 97 eb ef 6f 3e f7 ef ee 42 75 82 02 44 84 c2 16 f6 26 ba 9d 4c 20 22 ee b1 0b 1f 7f c4 de 5b 9f fc f9 eb 5f 74 89 02 98 de 6d d3 5f 96 ef 55 dd 4c 21 c6 16 f4 97 d2 5c 0b 61 07 c5 ed 76 d1 1f 5e 32 fd 5e ff 93 1f dc fd c8 0b 4e bd 29 57 6b b8 68 a8 2f 56 fd f7 bb 2f 4c 9d c5 0a 22 2c 22 4a fc 3b ec 1e 0b 43 0c 76 b6 77 81 45 9d 9d f7 40 79 e7 Data Ascii: v\|{~n}{ SCXzLq>p=GZaNj97_DE(~E"0jN^[ipDFkio>BuD&L "[_tm_UL!\av^2^N)Wkh/V/L","J;CvwE@y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49767	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1079	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:20:47 GMT Expires: Sat, 20 Apr 2024 12:20:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 6325 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 4c 44 07 00 00 2f 3f c0 0f 00 4d 28 6a db 48 92 3b cf 2e 7f c2 27 85 88 fe 4f 80 cf 6c 4d 42 ba bf a0 9d 83 59 27 2c 58 45 92 1d a5 2b 3a e2 5f d7 9d 70 83 02 3e c1 82 99 b6 6d cc 1f 5e cf 02 a8 76 0e 82 81 b4 6d b2 fd fe 35 4e 4a ff 13 5f 64 29 10 e0 80 25 57 f6 47 2e 5d 80 85 8b 01 3c 02 2c 0c 1e 18 63 c0 c2 0b 22 01 fc c3 43 8b da 3f 43 d2 53 dd 3d 58 7c 5e c4 b6 6d 5b 57 b6 6d e7 3a 27 57 b6 6d 5f da 36 3e db b1 b1 f6 56 5f ec ec a6 bf d9 bb f0 b7 27 ae ae 9c 09 fb 4c fa 4c e6 2e b6 f3 8f 93 9e 9c 54 9c 4c 6c dc da 4e 8e ec 48 92 14 c9 8a a8 ee 7b cc 4c 22 3c fd e5 a1 ff 63 9e ee 4a b9 d6 b6 29 92 f2 7e 55 d5 33 8b bb bb 6b 04 a1 66 ae f7 e0 ee a4 e4 dc 02 b9 bb 84 ae 19 c4 ee ee 30 33 2b 6d 55 7f 4c 80 09 Data Ascii: RIFFPWEBPVP8LD/?M(jH;.'OlMBY',XE+:_p>m^vm5NJ_d)%WG.]<,c"C?CS=X\|^m[Wm:'Wm_6>V_'LL.TLlNH{L"<cJ)~U3kf03+mUL
2024-04-19 14:06:12 UTC	1158	IN	Data Raw: 56 19 94 92 b6 a0 98 f3 8e 26 82 b5 c5 e4 f1 77 61 a5 f7 c7 f3 7b 78 43 ff 65 f8 3b 8d 01 99 b8 74 70 19 e8 d0 10 b2 d1 62 4f 4e 9e ca 90 33 7b 78 ba 7d 7d f9 35 8d fe 8d f0 df 58 64 62 44 5c 91 17 d4 a5 62 1c 49 ad 91 0a f4 4e 39 29 af d3 f7 2f 0a 6a fa 3e 0c c3 ef 41 eb 6b 00 a5 a1 7a f0 92 86 00 04 20 3b 96 a7 2b c4 86 a9 af 06 a4 e1 1a c0 4b 77 58 c4 81 e8 0a 99 df 9a f5 a9 1f c3 80 6a 9b a6 b5 d4 cd dd cc 49 d2 06 a3 68 c4 60 33 51 53 99 18 43 77 30 a8 ea d7 32 a0 4f 48 b8 d9 80 3b 60 b1 24 47 d1 df 39 49 79 51 05 a2 fa 12 40 15 90 03 3a 32 a2 9c 44 43 23 9b 38 36 f9 1d 23 5e 1c e9 cb 46 7a 35 fc 7a a3 91 55 dc 52 6c f3 57 d3 19 23 19 03 f4 16 1f de 06 22 a7 bb 2e 8b 6e 2b 94 e2 42 94 26 eb df c6 e3 af fa a3 cd f7 41 4d 7b fd b0 e5 ba b7 06 ac 6b fd Data Ascii: V&wa{xCe;tpbON3{x}}5XdbD\bIN9)/j>Akz ;+KwXjIh`3QSCw02OH;`$G9IyQ@:2DC#86#^Fz5zURlW#".n+B&AM{k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49770	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1080	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:32:24 GMT Expires: Sat, 20 Apr 2024 13:32:24 GMT Cache-Control: public, max-age=86400, no-transform Age: 2028 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 f2 76 7e 5d fe 84 2f 0c 11 fd 9f 00 9f 61 90 96 a1 ca 3a b0 dd 8f 21 f1 5e b0 8d 24 c9 49 5b 88 d7 26 9a cb 3f 4f 88 81 71 23 49 8d 0a 13 00 22 ff 18 3d 67 5f 6a db 48 52 63 7e 88 f9 43 ec 7f 2a 1f df 44 a2 91 00 30 28 24 a9 f9 89 25 03 b6 17 b6 77 5d 6b 0c 7b 7b 01 05 44 13 23 23 01 a8 ae bf c4 a9 71 5a ac 76 9d 00 20 31 b1 b0 80 1f 0f 1d d8 d6 d6 48 8e a4 96 86 67 96 cd cc cc cc cc 8c 91 d7 d1 da 11 33 73 c6 cc cc cc cc cc cc cc 3c cc 33 2d f8 03 75 ab 5a da 6c a3 bb 9e 4c ea 2a 99 3d a5 ea da d0 ec 70 c1 cc f6 62 64 66 7b 29 34 43 e4 2a 39 b4 b6 1d 92 f4 7e ff 5f d5 e6 28 5a db b6 6d db de cc 66 ba 99 bd 91 6d db b6 cd b1 3d d5 7d ba 1a 7f 7d 72 64 db 56 6d 65 ae Data Ascii: RIFFWEBPVP8L/?EmIv~]/a:!^$I[&?Oq#I"=g_jHRc~CD0($%w]k{{D##qZv 1Hg3s<3-uZlL=pbdf{)4C*9~_(Zmfm=}}rdVme
2024-04-19 14:06:12 UTC	1246	IN	Data Raw: c5 3b 72 55 6b 97 f9 ed fb 6e a4 5a 11 0a 78 49 06 d8 05 21 48 96 50 8b ca 3c 6c c7 e6 de f3 7f 85 ff bf a1 d5 ba fe ef a1 82 5f 9b be d9 33 61 bb 11 0f d4 94 73 c2 3e 9d b7 ae 37 16 e6 11 10 3c 72 83 1c 94 36 c8 38 15 20 13 43 40 88 01 cd be bf 99 6d 5a db b5 db 3e 56 5b f5 e9 b7 46 ce 43 63 89 8c d3 0f 91 89 10 87 c2 52 03 f4 df 23 d9 b8 64 c6 91 51 86 40 96 24 42 9a e4 1f ea c0 22 5a f9 42 81 ca a1 8c 16 a7 39 59 10 0a 45 35 f8 d5 95 f2 42 b6 1c b8 61 18 f9 53 22 20 08 fd cf c0 c7 80 72 75 26 77 78 68 96 82 08 28 a6 74 55 2c 15 47 94 45 d8 7c 89 00 18 02 df 37 ae b3 5e 28 b9 71 c8 46 b5 c5 0f 41 0e 6d 00 81 8e 18 de ed e9 59 af 5b 24 83 00 99 42 05 d7 20 ae 31 aa 6c 2a 21 41 18 84 41 18 c8 1a 02 e5 ac 73 b8 d0 10 e6 9c 9d 31 b4 fe 3b 13 84 41 28 81 20 Data Ascii: ;rUknZxI!HP<l_3as>7<r68 C@mZ>V[FCcR#dQ@$B"ZB9YE5BaS" ru&wxh(tU,GE\|7^(qFAmY[$B 1l*!AAs1;A(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49771	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1079	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:12 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1552 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:35:17 GMT Expires: Sat, 20 Apr 2024 12:35:17 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5455 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:12 UTC	722	IN	Data Raw: 52 49 46 46 08 06 00 00 57 45 42 50 56 50 38 4c fc 05 00 00 2f 3f c0 0f 00 09 05 6d db 30 da bf fc 11 77 c3 10 d1 ff 09 a0 e7 ea 31 7c 54 15 a0 65 d0 bb 44 44 33 08 2e 14 b5 8d e4 78 f7 2a 7f b4 fb bf 82 41 71 db 36 6e 8a 69 d7 5e a7 a6 6d 24 c9 dd ee de 0f e1 f8 a3 3b 00 57 f4 7f 02 fc 8b 77 a7 73 fb e5 4d 8e 4d a7 90 ea 00 d0 cd 89 c6 f1 02 00 3f e5 74 ba 83 4f 0f 5d f7 ff 14 db cd cc ae 99 99 99 19 3b 07 9f c1 e9 f0 09 9c 2a 4a cf cc 79 04 e6 57 60 66 66 c6 cb 7c ed 0b 67 67 27 70 d6 d2 d9 ed 5c 7d c3 c9 6c 94 95 dc 79 65 9d 36 cc b8 92 cb 80 19 ee 54 ae ac 9c ca 15 bb 8d 24 0b 92 64 d3 b6 7a 36 ef 3a d7 f7 e8 da b6 9e 6d db e6 97 6d db b6 df 97 6d db b6 6d db 6f 63 20 47 92 a4 48 8a a8 39 66 7c 9d fe aa 2d d3 31 cc 5c 65 4c 80 06 ac 80 d8 fa 05 6d d2 Data Ascii: RIFFWEBPVP8L/?m0w1\|TeDD3.xAq6ni^m$;WwsMM?tO];JyW`ff\|gg'p\}lye6T$dz6:mmmmoc GH9f\|-1\eLm
2024-04-19 14:06:12 UTC	830	IN	Data Raw: 34 be 10 ac 93 41 4d a9 5d eb ab 0e c1 4e 83 35 31 c0 a6 38 8f fa c3 2d 8e 45 b7 14 b6 ba 66 27 d9 0e ad bb 4a b2 b1 93 61 c5 52 42 f0 b9 0f 53 f2 e7 90 b5 79 78 6a e6 be ba cf 67 97 18 5c 3b e6 57 2d 64 d5 67 89 e3 c7 d2 d1 8f ea 17 85 7b bf 83 c0 4d 04 be b0 7c 5f d1 f9 ad 33 70 a0 76 21 14 7e b5 18 0d 9d bc cf e6 5b 63 08 b4 ed 17 ef 30 d8 76 10 c4 ef b5 17 3f 2a 37 75 c3 80 57 e7 4f c9 30 85 0f a9 15 b6 32 b0 5b ee 77 e1 14 93 61 b0 18 f0 90 2c 08 06 34 3a ee d5 a7 1a 2f 8e 65 43 57 fa 88 9e 82 cf 0a 20 45 72 6f 28 9c 0f 3a 00 63 31 e4 00 cb 2d 15 1f fe f6 77 f1 a6 ff 19 51 c3 b1 ae d3 e1 da e0 d9 48 35 c2 a2 70 8a f3 47 6a c9 bb 7d b9 5e be 3f 5e dc 66 36 16 57 47 47 3e df fd 92 13 2e fd 9e 98 e9 f4 e0 41 48 91 82 c2 29 42 03 41 92 7f d3 da a0 d6 9f Data Ascii: 4AM]N518-Ef'JaRBSyxjg\;W-dg{M\|_3pv!~[c0v?*7uWO02[wa,4:/eCW Ero(:c1-wQH5pGj}^?^f6WGG>.AH)BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49772	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:12 UTC	1086	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:38:14 GMT Expires: Sat, 20 Apr 2024 13:38:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 1679 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-19 14:06:13 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49773	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1097	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:35:30 GMT Expires: Sat, 20 Apr 2024 12:35:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 5443 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49776	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1085	OUT	GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51228 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:48:28 GMT Expires: Sat, 20 Apr 2024 12:48:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4665 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 14 c8 00 00 57 45 42 50 56 50 38 4c 08 c8 00 00 2f a5 c0 49 00 4d 40 8c 24 39 6e 53 b3 b8 07 c4 82 f9 07 0c 50 76 08 11 fd 9f 00 fe 28 a9 d4 f1 0f ad 9e c8 78 48 b2 a5 b8 68 02 d8 18 db 92 6a b6 72 82 2c 24 6b 0c 90 32 05 cf b4 8d 4f 40 99 a9 c5 33 9f 47 11 61 03 18 03 54 3d 55 10 82 01 50 04 51 f9 3c 63 8c 90 10 88 06 18 63 44 55 09 71 8d 00 f1 1d 02 83 cd ef e6 aa 5f 0c e8 f2 c7 40 3b 82 f9 00 ba d9 b2 85 80 04 49 c5 69 23 3e 23 2a 00 83 f1 88 38 26 b0 c2 40 6f 10 3a ee 16 e0 e3 1e 07 60 ce 01 0c ae 7a de b2 6d 50 f2 ed 8d b9 5a e8 a3 eb b2 e6 2c 31 3e 36 97 bd 35 65 7f 78 6f cf b4 73 4a 82 71 a9 2a e7 de 7b 4b 2d 87 8e b7 ab 6c 78 7b 69 29 00 89 88 ee 7e 33 7b 6f 83 00 37 a0 ee 99 69 db 60 43 77 81 dd dd 8e 32 30 05 ab 4d c3 21 09 6c 0d f5 Data Ascii: RIFFWEBPVP8L/IM@$9nSPv(xHhjr,$k2O@3GaT=UPQ<ccDUq_@;Ii#>#8&@o:`zmPZ,1>65exosJq{K-lx{i)~3{o7i`Cw20M!l
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 30 44 a2 be 97 f9 d8 ff ec 0e 65 d4 4c fd 62 96 00 09 90 24 49 bc 11 6f 22 81 b8 cf b5 4e f7 f0 1a 1f 64 78 7b dd cd 09 6e 01 40 80 24 df 38 7a 43 00 d8 c7 11 81 de eb 63 87 d5 01 ee 25 49 14 6f 4a 82 0c 06 f1 60 b4 6d 2d 7f 5c fe e8 17 33 00 ef 78 0f 90 43 92 8a 8f d3 c6 62 86 2b 74 46 0a a1 dd dd cf 2f 33 7c e6 fd 8d f7 00 49 0e 49 02 a3 fc 1a c6 b2 0b 9d 8b 6e 0e fd 2c 3c 28 09 58 f5 38 a7 f7 b9 e9 d4 d4 52 53 b4 74 ea 23 fd 64 3e bd 6e 7e d4 01 10 79 56 d7 62 36 b7 f9 bf e8 54 b4 b5 35 fc 79 b1 8b cd 6d b9 6a 5e 59 03 c0 1b 51 97 a8 f4 5e 87 ce b9 cc a5 b5 2f 1a ad b2 ce fd 01 e3 d5 04 49 02 c4 4a ef 6d 4d af 55 2a bd 55 20 42 c1 89 ef 66 02 00 4c ab 24 ec eb 25 8b b7 7a ad d7 ba b8 74 89 63 19 31 f6 16 f7 f3 d1 f4 db c9 4f 3f 9c fd 26 a0 24 2b 0d 26 Data Ascii: 0DeLb$Io"Ndx{n@$8zCc%IoJ`m-\3xCb+tF/3\|IIn,<(X8RSt#d>n~yVb6T5ymj^YQ^/IJmMU*U BfL$%ztc1O?&$+&
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 30 67 02 60 0c ee 3d f7 ec d9 62 02 f8 bf ff bf de 72 23 e9 f3 f9 e2 a1 cb 54 b7 b8 5c 66 b6 43 4e 1c 70 b0 bb 43 cd 1c 98 66 66 e6 ee 34 c6 ed 4c 27 1d 68 ee 0e 33 74 da 31 87 13 33 c4 50 55 76 95 8b e9 56 5d be e7 dc 03 5f f8 7c 3e 3f d4 b5 dd f4 07 bc 67 54 6a 69 e0 6a a8 c1 9a 74 66 16 4b a3 a3 d5 99 89 ce 82 7f f8 2a 3b 5e b2 6a 19 bc 50 83 d1 d5 e8 0e 7c 17 4e 4b 74 16 06 2d 79 18 bc d1 69 28 45 b5 e0 1f ce 40 2d e7 2c 43 14 a5 87 a2 5a b8 9a 39 03 a5 11 7e 35 62 b0 86 67 32 50 6a b9 c1 3f 54 7e b8 6a d5 62 74 96 a1 b5 c3 63 c9 ea f5 ae ee 28 f2 42 69 75 06 bc 9c 5a 06 77 d4 e0 55 69 78 a6 06 6a 29 7b 96 b9 14 35 95 9a bb 4b 91 b3 7c 17 ee 72 ee 0f 1e 89 79 c6 1a 6a b0 26 db 50 8a 74 b7 55 d2 0a 03 b6 6d 87 25 49 7a df ef fb 23 e2 f8 a4 2a 2b cb 55 Data Ascii: 0g`=br#T\fCNpCff4L'h3t13PUvV]_\|>?gTjijtfK;^jP\|NKt-yi(E@-,CZ9~5bg2Pj?T~jbtc(BiuZwUixj){5K\|ryj&PtUm%Iz#+U
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: e1 b8 c1 8a 1d f3 16 20 dc 33 bc 3a 88 43 82 8c 7b 20 00 27 d8 9a 42 22 ca e6 75 02 ec 47 67 f3 90 80 00 5c 01 88 ec c2 09 0f 35 76 41 2c 05 64 29 7a 75 04 90 14 80 0d 0a 19 7b 92 ed 56 8d 9a 78 7a 52 33 d3 ab 5b f2 5a 80 41 6b b7 d6 46 aa d7 47 54 5f 94 74 b6 07 5b 53 48 49 f6 57 54 d8 35 d1 42 71 c2 39 6b 6c 49 49 61 f3 71 4a 0a b0 e3 90 02 0a a6 70 e0 74 0f b6 ab 31 ba 8c 8e 99 1b 90 ac 86 25 c7 1d ab 1b 54 37 cf 6c 56 47 28 37 a3 5b e6 04 60 9e 90 7b 52 00 62 ff 25 25 11 d4 00 c5 2b 21 9c 31 e5 b4 ad 01 34 08 b5 5d c2 06 5c 81 00 48 b2 0b 24 25 25 41 f2 14 61 f7 25 91 36 65 a3 ba e3 e6 ea 20 50 1d 92 0a 64 15 8e a3 4f 34 69 dc 42 05 47 47 f6 63 42 4a 4a dd 8d ec 03 27 05 92 ed e1 04 48 82 a4 50 77 54 f0 00 21 05 48 61 33 9c ab 0d 01 ae 38 a3 b0 79 65 Data Ascii: 3:C{ 'B"uGg\5vA,d)zu{VxzR3[ZAkFGT_t[SHIWT5Bq9klIIaqJpt1%T7lVG(7[`{Rb%%+!14]\H$%%Aa%6e PdO4iBGGcBJJ'HPwT!Ha38ye
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 3c d7 ab ff e0 73 5d b3 5d ee cf 7f d1 e5 6e ab 9d d0 0f bf f9 2e e7 5e 62 7d ad de fb b8 c6 16 87 fb 9d 21 67 9a 69 00 e4 29 45 64 0b b0 08 72 ba 4a fa c1 d9 27 13 9b a6 0c 60 ec fa 82 11 83 31 06 92 51 35 24 8b 93 bb c1 6e 3c 53 ce b2 1d b9 8f c6 c9 0b 36 72 6d 71 73 55 10 09 ea 33 f8 b3 43 7b bf ab 9e 5c e6 63 ef b9 e2 b7 bf 57 60 28 7c d9 db 7e ff 04 cd ac aa a5 dd a5 b3 71 97 f4 00 e7 f9 3e f0 07 10 f5 32 bf f6 39 2f f8 9e 3f 68 83 5e f2 07 3f ed 46 a7 1e e4 93 f3 60 5c c8 5a ff b4 50 11 81 9e 67 b6 56 87 c7 10 87 33 ec c1 10 70 4e d1 1e 37 3e 37 01 c3 e7 6c de 7c d3 b9 02 84 02 0e ec 2f 52 1b ad 04 1a 02 0a 3c 03 9e f6 62 1d 49 96 9c bf d9 38 86 a8 6f c6 36 6a e2 f5 d9 3a 5e 7d b4 55 94 a2 e0 99 67 5b 25 32 0e c3 1e 19 77 a6 82 ed 7c 14 40 07 67 55 Data Ascii: <s]]n.^b}!gi)EdrJ'`1Q5$n<S6rmqsU3C{\cW`(\|~q>29/?h^?F`\ZPgV3pN7>7l\|/R<bI8o6j:^}Ug[%2w\|@gU
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 11 b8 4a 1a 27 6f c6 33 90 7e 83 8b 3d 9a 09 f9 08 b5 cb 57 4e f4 78 74 72 03 b0 f1 80 60 1a 1a 6e e9 00 00 78 d3 e8 9c 26 1f fd fb 3f f8 58 3f f9 c1 e5 be fb 63 ef aa 09 00 91 46 80 16 e8 00 00 20 22 66 3c d3 2b fe ec d3 fc db 5f 7c 5a bc de 5b 7c 24 b8 cc a0 15 5c ac 80 4e 00 e8 04 23 64 c1 8a c8 54 00 5c 1c 86 7f e4 0c 11 0e 09 28 0e 1a 7b a8 fa b1 22 85 49 dd 85 cb dc f1 ba 73 b5 ac 86 35 a1 1d 25 26 85 46 55 c5 2e a5 83 df 58 6b 39 d7 85 91 46 f3 cb be bc bc ec 9c 27 67 6d 61 22 00 80 16 00 30 ef 9e 50 7f ba b7 fc fe bf 99 2f d6 04 98 34 06 93 76 00 04 9b 5e ec 9b 57 ca 74 a3 8f 04 80 72 13 b8 78 29 66 a6 41 c3 2e 30 a6 6a f3 20 db 60 20 4e 0d 20 26 15 27 4d d7 43 8a 54 79 ee 68 4f ed 81 9d d3 ab 64 55 59 ad a5 59 57 83 75 c6 43 fa 88 93 45 83 5d 19 Data Ascii: J'o3~=WNxtr`nx&?X?cF "f<+_\|Z[\|$\N#dT\({"Is5%&FU.Xk9F'gma"0P/4v^Wtrx)fA.0j ` N &'MCTyhOdUYYWuCE]
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: d9 be ee d3 60 d3 af f4 dc f5 67 98 ae 03 8f f3 e1 3f a3 02 97 f2 5c ff fe 47 46 50 eb 4f 75 fd cd e9 46 5f dd 0d 1c 4e b7 a0 de 18 00 82 30 10 b6 16 a0 23 04 98 50 0d bd be be 16 01 01 13 aa 69 75 a6 5a d5 52 8a eb 2a d7 f3 62 49 94 b2 c1 9b f2 9b 7c f2 29 a9 34 7e 8f 2b 4c 2f 9f 5d 52 02 ad c0 c6 e6 79 7d ba 54 23 db 3c ee 79 0f 74 1a 55 3d fb a1 db 8b 52 63 c9 e3 7d f1 57 54 53 23 c4 97 3b 7b ba d9 8f 7d 81 4c eb 8e da 10 18 46 bc 06 bc e8 03 7f f5 15 7f ec 37 af 0c 47 3d c4 09 3a 4f cf a6 6a 13 43 af 3f fe e7 5d 1d bc 6b 84 b2 dd f8 fe f3 cd 2f 67 49 ed 19 67 78 b5 fe 0b 3e 88 17 33 f1 73 76 f4 98 a2 db 4a 6e f0 85 95 a7 b7 8e 5c 30 5c 3f 7d 13 22 1e e5 d4 2d 1c ad 1c e8 66 df ff b1 8f e3 ba 70 e2 22 f9 f5 7e d0 f3 f7 b6 dc eb fa dc 27 00 88 00 a4 71 Data Ascii: `g?\GFPOuF_N0#PiuZR*bI\|)4~+L/]Ry}T#<ytU=Rc}WTS#;{}LF7G=:OjC?]k/gIgx>3svJn\0\?}"-fp"~'q
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: f9 2d de 9b 0a 1a dc 3c 9d 30 d4 cd 04 60 ee 80 86 73 61 5a 63 c2 f1 74 10 18 39 1d 10 05 41 68 58 23 11 48 9d 1e 32 22 99 a9 00 d0 79 0c 74 e8 02 40 10 20 b2 b4 23 04 c0 7f 0d 2b 10 ec d8 54 03 8a a0 40 01 ae b8 62 27 44 e6 11 aa 65 46 5a 00 b9 14 1c 12 d5 e4 7c 30 9c dc 77 a5 25 cc 52 27 8d 46 3d 46 c5 11 3d a0 60 c8 c0 82 37 3e f4 23 20 0d f1 c5 70 22 91 c1 bb 3b 9a 3a 00 00 d2 d0 60 b0 a1 06 0d 00 80 4c 10 00 a0 a5 03 82 00 00 c1 d8 62 80 14 80 d9 03 76 75 07 14 80 1d 50 00 84 cd ab 20 6b a5 1e ed 88 5f dd 90 74 15 66 98 a5 23 4c e1 11 59 eb 3c 7b 9a 32 0b e5 2a 1d 8e 7a d5 6a 26 c6 77 13 63 f1 a6 05 27 5a ad 1f 4b 19 0c 43 8c 48 3e e2 e4 39 1c dc 84 3c 66 2c 12 44 e4 75 01 22 60 ce 0c c2 a4 41 68 0e 4d 92 86 49 53 60 66 34 50 90 01 40 0d 04 b4 80 80 Data Ascii: -<0`saZct9AhX#H2"yt@ #+T@b'DeFZ\|0w%R'F=F=`7># p";:`LbvuP k_tf#LY<{2*zj&wc'ZKCH>9<f,Du"`AhMIS`f4P@
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: af 59 f5 ff fe 17 ab 6f b1 ea 3f b7 fa b6 cb ff 8c 15 ff c2 19 0f 79 06 ce 6a 13 f1 e4 ca fd d2 57 c7 d9 1a 9c de 11 f7 39 05 93 ea 50 5b 9c 22 06 98 66 08 26 15 bd e3 34 6d 76 cf 24 ed 8e af a1 b9 f0 b2 f7 3f 0f af 41 3b f5 e1 79 be d0 44 92 37 3d 6d b2 11 4e 77 80 04 4c 98 84 cd ba e3 4d 33 78 de 87 fa 79 de f2 09 2d df e4 61 4f 2b b6 b0 0b 82 d9 65 4f e1 8c bf f1 6b df c1 fb df f3 d1 5f 74 ce 1a 9c ae 66 8a e9 fd 98 34 05 00 10 82 06 43 46 08 fc a1 c4 3b 48 e3 38 7e f6 f8 8f 3c 6b f3 7e 84 31 47 46 b2 0b 04 e4 e8 40 8f 56 84 81 c1 02 30 03 ec a0 aa 55 ad 00 69 98 06 82 68 a7 0d ae fe 63 23 1f b8 6e 42 59 a1 d7 77 4a 2a d8 fd 1f 75 a1 17 ab 6e 83 fc fd fa 33 6e f7 d2 3a c7 9f 74 47 47 b6 39 6a 4e f3 2d ed ef db 3c 71 fe 69 b6 ab 05 77 ad 60 e8 7d 39 a3 Data Ascii: Yo?yjW9P["f&4mv$?A;yD7=mNwLM3xy-aO+eOk_tf4CF;H8~<k~1GF@V0Uihc#nBYwJ*un3n:tGG9jN-<qiw`}9
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 79 8b 4a fa f0 5c 78 db b7 f6 ba f6 e5 fe c7 1e f8 9d cd 36 d5 00 38 02 d7 bf f5 97 3e ae fb cb 7a cc 97 f1 fb 57 ac 62 ef 53 b0 58 ed 5b bd 31 4f f6 8a fd b6 ff b1 9c e3 fb e6 ed fe 61 7d dc e7 ec f6 fc f4 b2 d5 ef e2 00 81 d1 0e 01 bb 0f 00 f0 f0 0a a0 12 32 61 6a c2 b4 1e a1 d5 b6 c4 84 75 15 a9 83 e8 24 23 e3 f5 bd 64 62 9d 42 25 2e 80 b6 71 68 c8 38 bd 91 d3 78 6c 79 39 f5 22 48 a2 e6 c1 20 62 91 e1 27 a3 8e 70 78 31 15 b2 5c 79 37 a3 27 69 d3 ea 7f e2 92 20 00 a6 d4 80 53 dd ae 75 35 64 e3 ec 98 b9 70 bf eb 5f 5d f8 f6 37 fa bd f4 8f 73 5a 15 ac 95 88 10 c0 65 bf d2 37 be 9d e3 c7 39 6e cb e7 fb 12 af 60 a7 b7 e5 dc bf e8 17 7f d6 7c f9 af ff fc df fd 26 bf bf 9e f7 2f 6b f4 1d 39 c7 0f 4d 9f 74 bb 5b d6 e1 ff 41 60 b6 de a7 ed 1d 7f c2 58 68 10 c6 Data Ascii: yJ\x68>zWbSX[1Oa}2aju$#dbB%.qh8xly9"H b'px1\y7'i Su5dp_]7sZe79n`\|&/k9Mt[A`Xh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49778	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1086	OUT	GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 36974 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:48:28 GMT Expires: Sat, 20 Apr 2024 12:48:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4665 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 66 90 00 00 57 45 42 50 56 50 38 4c 5a 90 00 00 2f a5 c0 49 00 4d 48 6c db 48 90 24 d8 53 ae b2 ab 71 f9 07 3c 3d fb 1f 42 44 ff 27 a0 aa 22 cd 64 24 f9 ec 4a dd 52 f7 c5 96 7d b4 92 7d db 91 f4 a2 2d f9 91 ba b3 a3 48 12 f5 36 ee 23 d9 6b ee f6 ac bb 77 07 df 07 f7 da 9e 77 4b 18 4e 77 db 70 92 9e 19 48 bb dc dd 75 03 ec d8 33 91 ba 5f 01 80 62 d2 dd d1 4c 53 1a bd c0 7c bf 94 99 09 98 99 24 9b d1 a5 07 40 91 d3 c9 ee 36 47 d2 8e 01 30 f9 92 d6 33 04 00 f7 5e 86 6b 33 58 a0 0e fb 00 c0 39 07 d7 c5 bb a9 2b 29 49 9e 4b b5 50 96 e9 0b 00 02 f5 f0 8f b6 99 7c bc 8b 27 91 48 bd 96 17 e0 a0 6c 51 b2 0d 64 a7 80 da 75 2e ab c6 77 d6 34 bd 6d fc c2 1d 5a dd 92 1a 48 be 8e 39 73 bb 12 e4 1c 1c bc cf 47 e1 00 33 94 1d cd 07 70 50 bd 54 92 cc f3 22 00 Data Ascii: RIFFfWEBPVP8LZ/IMHlH$Sq<=BD'"d$JR}}-H6#kwwKNwpHu3_bLS\|$@6G03^k3X9+)IKP\|'HlQdu.w4mZH9sG3pPT"
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 15 8b 98 c0 56 e3 0b 0b e5 a6 06 e7 b9 bc 95 cf 27 20 86 61 b1 9a e8 21 fe fc e0 2b 00 0c 58 5c 5c 5c 3e af 19 00 58 2c 10 41 5b 57 f7 d0 3b 00 16 02 02 7f 6a e3 e2 45 b7 1b 00 01 24 fe fc d8 06 76 b7 9b 6b e1 9a 42 44 14 c0 08 80 cc 33 cf 9f 56 be 53 f1 6b 3d 3b 65 ed cf 36 d0 5c 0b 57 fc 1c b1 28 cf 1f d7 73 67 cf 1f 1f b2 93 4c be 57 d9 45 26 71 77 64 b3 5b 75 70 32 39 83 01 15 20 41 02 01 56 7c 5f ec cd e0 f7 14 f9 dc 33 57 ec 78 12 42 21 49 0f 62 cd bd ba 61 cd da de d8 07 b7 07 5f 1d be af 38 53 67 e5 c9 bc ac 79 e7 c9 bc 98 28 8a e2 f7 ee 74 67 e1 6e e1 61 ea 49 8a 61 60 ea 4c 9d b8 cb 48 3c 19 46 67 52 8c 8b 27 cd 11 62 22 a5 38 71 b7 70 97 99 b8 c6 ae a5 6b 38 7c eb d9 79 de 7d 67 bc f2 02 ea dc 48 23 3d c0 50 8c 7d 4f bb 5e 76 0d 38 c7 08 8c 50 Data Ascii: V' a!+X\\\>X,A[W;jE$vkBD3VSk=;e6\W(sgLWE&qwd[up29 AV\|_3WxB!Iba_8Sgy(tgnaIa`LH<FgR'b"8qpk8\|y}gH#=P}O^v8P
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 0a 81 63 0a b3 7c 9a 70 03 48 2b 9a 18 87 8e 4a d3 7a 72 13 40 23 80 e1 81 ab 0e 5b 66 95 10 0b 4c c5 ec d4 2c 4d 16 a0 d9 81 d5 6d 18 61 96 88 29 64 5b 00 8b 49 78 28 26 ad cc aa 41 30 0d 40 10 80 60 04 0e c4 51 16 41 d1 d2 07 07 22 64 c4 11 11 31 10 c7 21 23 62 1c 21 43 96 21 08 2c 47 07 30 10 5b a1 52 b6 0a ab 10 dd 5a ae 08 84 c8 48 62 a5 00 aa 32 a6 62 57 39 30 4a 19 02 4a 0b 15 4a 24 56 a5 50 8c 72 d0 2a 26 ac 00 7a 15 43 a2 8c 11 94 00 89 31 15 91 d2 28 65 83 48 33 82 00 30 1e 66 18 3c 46 03 6c ca 10 49 24 8f 21 03 05 08 20 20 01 00 51 46 60 44 c4 65 94 18 07 a4 11 40 40 a9 32 54 a3 24 8e 43 a5 f1 74 4a 65 b5 3a 0b b4 02 11 62 a7 83 34 40 c0 34 03 80 26 20 14 89 88 5a 8a 56 6d f9 b3 b1 c4 b1 1c 38 22 14 90 ad b0 9a 62 52 40 0b 31 12 c4 b6 02 80 00 Data Ascii: c\|pH+Jzr@#[fL,Mma)d[Ix(&A0@`QA"d1!#b!C!,G0[RZHb2bW90JJJ$VPr*&zC1(eH30f<FlI$! QF`De@@2T$CtJe:b4@4& ZVm8"bR@1
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 70 48 ad 04 44 a2 c1 08 01 06 ca 80 48 cc 24 4a 81 0c 95 ba 72 9a c0 59 f6 84 22 c7 cd 2a 22 90 0e 44 95 c0 42 dd 6a 45 44 60 8c 23 01 23 23 b4 6a 14 4b 91 08 2b 89 c4 12 88 81 63 89 b1 a2 03 28 51 56 d0 b1 95 52 71 84 12 04 50 22 54 13 2a 81 41 a0 0f 0e 03 37 00 64 a0 c1 21 28 62 10 41 55 e0 d2 a0 84 00 12 31 62 09 a0 50 6a 0c 00 14 12 40 1a 9f dd 50 73 4c 37 6d ec 84 41 b1 42 8b 94 ad 59 47 37 a6 c4 12 26 6e 02 63 80 11 33 a5 85 63 5c 4b d3 51 3b 96 6b 52 64 05 00 07 e2 56 49 71 a3 ca a8 d2 02 34 29 10 8a 9a 0a 45 42 85 2a 88 96 24 a9 88 0d 00 6c 62 19 07 cc c5 04 04 9b 63 01 04 40 09 1c 62 ca 10 09 8c 71 d9 14 a0 0c 88 10 09 6a 45 33 0c d4 67 28 b5 12 d7 56 49 94 60 95 2a 6d d7 95 d2 c5 8d a8 40 40 16 29 e3 12 c4 40 4a a4 88 bc 42 4d 93 da 1a 6e 58 04 Data Ascii: pHDH$JrY""DBjED`###jK+c(QVRqP"TA7d!(bAU1bPj@PsL7mABYG7&nc3c\KQ;kRdVIq4)EB$lbc@bqjE3g(VI`m@@)@JBMnX
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 20 8e 4c a7 20 0d 42 0b 21 b5 4a 55 cb 31 84 88 4a 85 ca 88 32 5a 22 b1 8c 03 40 34 72 98 21 80 11 23 82 30 cb 54 0d c4 d8 84 00 47 84 00 32 4a 80 74 41 1d a6 ab 5a 4d 2b 01 50 01 91 8e e9 56 c4 a3 d0 0e a2 28 48 f3 aa 11 d5 b8 91 c0 90 52 06 66 90 b1 08 a1 59 42 5d 56 58 9d 56 a7 d5 14 38 46 c4 88 a7 12 b0 6a 84 e1 b4 16 33 59 2f 2d 01 60 b5 40 80 ba 55 41 62 a0 44 31 e3 88 71 44 8c 10 e0 a5 98 28 05 65 20 a4 e0 22 80 94 e3 72 e0 22 12 81 02 41 b3 90 e8 32 2e 73 96 40 53 02 61 51 aa 39 00 04 c5 02 34 43 51 53 b7 3a a2 91 5d 81 88 30 a3 41 d9 9e 89 46 20 21 b2 76 53 55 af 54 3a a5 11 a6 4c 81 db c6 01 84 a2 0a b3 0c 2a 42 98 90 92 45 95 a8 08 65 90 95 a4 51 19 05 05 81 88 81 03 18 08 14 31 40 c1 4d 13 62 2e a6 c1 22 28 e3 28 18 08 2c 87 3a 84 a8 c6 17 2a Data Ascii: L B!JU1J2Z"@4r!#0TG2JtAZM+PV(HRfYB]VXV8Fj3Y/-`@UAbD1qD(e "r"A2.s@SaQ94CQS:]0AF !vSUT:LBEeQ1@Mb."((,:
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 00 58 02 0c 61 08 30 48 0a 4b 82 9c 42 33 d9 fa bf fc e6 37 ff b7 7d e6 11 66 48 1f db df f8 c5 47 fe 36 a7 2c 65 0c 20 98 25 26 48 50 30 aa b4 96 24 5c 02 17 fa b3 7f 34 95 77 6e c6 b4 20 56 2b 25 27 c4 d3 9e 44 a6 a4 6a 15 91 25 78 63 35 42 9e fa 3c c7 e6 d1 18 03 e2 14 f5 a4 08 86 91 68 19 40 4d 62 89 45 90 34 62 85 19 15 0c 20 8c 2a 4c 40 04 04 00 60 90 30 80 24 58 68 81 53 09 03 0c 31 02 82 31 e2 78 6c 9a 9e 6c fb cd 6f 7e b7 df 7c 6a f6 e4 06 ab 9b 0f 3e f2 6b 7e f1 31 d7 22 45 46 29 49 d4 12 4d b2 48 3c ea ae 64 2e 29 2a 88 df 75 4b 96 69 c4 34 6e 40 41 ad 58 05 ca a2 d6 1d ab 31 9a 99 c9 0c 5a e3 a1 11 34 82 b0 ae 56 32 a0 62 ea 6c 5a 2a 7b 15 16 55 9b 55 02 6d 6b 56 b0 4d 50 8a 5b 02 60 62 95 12 00 22 06 50 30 22 02 f1 08 14 41 2c 11 11 cd 18 28 Data Ascii: Xa0HKB37}fHG6,e %&HP0$\4wn V+%'Dj%xc5B<h@MbE4b L@`0$XhS11xllo~\|j>k~1"EF)IMH<d.)uKi4n@AX1Z4V2blZ*{UUmkVMP[`b"P0"A,(
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 25 d3 7f fe e5 1d 27 02 b8 2c 82 28 11 05 62 62 20 46 04 06 16 48 8c 51 8c 34 45 00 2c 01 20 46 c4 05 62 ca 08 81 51 91 29 2b b2 92 21 49 8d 5a 55 13 c5 4f ab 6a 1d 21 ad 6e 56 0c 2d 00 98 13 4a 82 dc b2 9c ca 03 59 ec 1e 94 19 37 2b 2c 56 33 3a 06 1a 89 05 18 31 ea 50 46 19 8a a9 b1 82 59 56 58 64 36 90 d4 eb be 9c ad fb 7a ee 4f c7 e7 fe ec f6 71 5f b0 bb f1 ea fe f8 7b a5 a3 b7 fa c7 9f 3a 5f 4e 00 2c bb 2c 81 47 04 0a 70 c4 00 24 8e 11 82 88 21 08 41 44 8c 88 88 81 80 20 ca 40 00 02 21 80 2a c4 2a 56 ad 30 d1 20 eb 6a ce d2 56 d5 44 b5 c9 94 86 d8 3a 49 cd 3b 24 ab 48 8d 42 a7 2d b0 5a 06 81 ad ea 16 19 0c 46 d9 56 8c 22 80 31 a8 8c 58 ca b6 15 c6 58 60 43 d8 08 6c b0 cd 07 78 f0 03 bc fa 72 cf fc d6 f8 d1 c7 3f d3 3c e9 6f 7d c9 76 e9 17 a3 0e 5e fe Data Ascii: %',(bb FHQ4E, FbQ)+!IZUOj!nV-JY7+,V3:1PFYVXd6zOq_{:_N,,Gp$!AD @!**V0 jVD:I;$HB-ZFV"1XX`Clxr?<o}v^
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 80 22 a9 85 64 21 ad 55 03 21 33 b1 35 84 09 26 b5 a9 58 a5 b3 38 28 9b 08 a1 92 0a 85 0f 52 81 43 a9 50 5a 95 a2 22 6a 4a 5c 22 ab 92 b2 01 40 62 cd ad 1d ba e5 99 27 b7 91 c5 b9 f1 ab 5b ce 51 42 48 cc 7e f1 f8 02 3b 10 24 48 81 18 18 88 01 00 03 8d 04 02 21 88 11 8f 88 18 12 c7 90 a6 8c 18 88 90 51 8c c0 88 91 51 e0 6d 60 00 2b 34 78 b5 00 28 15 22 48 2a 15 0b 93 88 aa 19 14 44 69 45 50 55 75 4c 91 62 75 88 8a 88 38 e4 50 37 11 37 37 ad 4a 09 c2 15 54 2a 00 80 ae 0e 3c b8 b6 5d ac f1 ab 5f 3d b5 fd 72 9d 29 0b 00 42 fa fd ef fc fa 3a 08 00 10 0e 09 60 00 40 a9 49 c8 a5 8c 81 31 80 08 00 23 22 80 28 b2 41 08 02 00 ca a6 c0 40 e0 75 04 02 00 a2 08 06 42 d3 98 08 54 0b 4b ac 32 a6 59 4b 09 a0 49 ae 64 ca 13 98 52 d3 d2 20 12 29 fa b6 74 33 10 ef ee 84 aa Data Ascii: "d!U!35&X8(RCPZ"jJ\"@b'[QBH~;$H!QQm`+4x("HDiEPUuLbu8P777JT<]_=r)B:`@I1#"(A@uBTK2YKIdR )t3
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 00 50 38 81 43 01 5c 67 04 00 b8 74 de 6d dc f9 9e 4f d8 1c 06 e4 12 4b b9 bc 19 40 60 a0 80 ae 44 70 09 1c 61 10 28 31 02 82 00 46 2c 21 80 a0 09 53 0a 42 8a 88 84 57 09 bc 46 53 22 80 08 b9 91 22 cb 22 4d 34 32 d5 ca f1 21 47 1c 61 a4 44 7c c4 74 30 3a 96 9b 8a aa 43 57 15 4c 1f cf 2a 46 cb 07 05 a1 00 40 e2 43 9f 3d db 67 dd 79 c8 de 73 b9 f2 9f ea 5e d7 ff 37 cd 0b c4 e3 ed bd 88 1b 7f 1f 05 00 15 40 00 66 2e de f0 f5 4f db bc 10 e3 88 08 d1 10 cd 88 52 96 61 62 c0 c4 18 11 32 04 02 44 00 8f 08 20 10 0b c4 14 44 0c 41 88 29 12 00 44 13 8c 80 00 42 88 20 a0 08 8d e1 e6 5a 2b 24 9d 5d 02 91 d5 b4 f3 e2 e3 90 48 91 12 90 ae 74 91 ce e8 a6 ac ee 09 e9 dd e8 a0 8c 00 2e a3 04 00 13 f9 aa 9f e8 d1 3f ad 0e 06 ef 40 fb 84 bd 8b d9 78 ac dd 53 23 bf 35 a7 5b Data Ascii: P8C\gtmOK@`Dpa(1F,!SBWFS"""M42!GaD\|t0:CWL*F@C=gys^7@f.ORab2D DA)DB Z+$]Ht.?@xS#5[
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: f1 e1 ba 02 10 52 c8 a3 1a 49 28 01 44 28 23 29 a3 b8 25 8d b4 30 aa b4 03 bc e8 5b 1f 2d 1b 06 80 40 08 80 81 c0 18 80 08 8e 88 06 80 19 88 28 82 26 36 01 34 58 40 56 52 12 01 01 00 82 26 6a cd 19 4e 45 55 92 45 a8 6b 25 6e 5b 97 be ed 2c 25 45 a9 12 a9 93 10 42 20 8e 11 81 e6 00 ba 9c 5c 25 06 08 bc 52 55 94 71 83 4c b3 a2 b5 42 86 97 d2 7c 92 b3 f0 20 20 80 26 70 00 01 60 8c 18 0f 88 60 20 42 80 40 2c 05 88 1e 89 40 29 00 35 00 18 28 15 05 10 89 28 4d dc 1c 87 2a 25 9a 2c 5a 47 43 0a 37 b8 22 3a 21 70 d4 65 e9 46 8e 23 99 22 87 d2 45 c5 22 55 81 11 91 c9 12 a1 a1 9d d4 76 12 1a f5 47 24 10 00 80 28 c0 ea 63 25 08 00 0c 91 30 e8 72 1c 47 c4 e8 82 01 2c 12 45 a2 08 30 20 90 01 40 a4 08 29 92 29 b8 45 37 ad 10 29 75 29 21 67 b8 c9 54 49 d9 11 1f 57 1f 52 Data Ascii: RI(D(#)%0[-@(&64X@VR&jNEUEk%n[,%EB \%RUqLB\| &p`` B@,@)5((M*%,ZGC7":!peF#"E"UvG$(c%0rG,E0 @))E7)u)!gTIWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49779	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1086	OUT	GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34150 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5375 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 5e 85 00 00 57 45 42 50 56 50 38 4c 52 85 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 22 67 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a bb bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd eb a5 2f 24 75 49 ea cd 5b 5d dd 03 39 6d 5b 9b ee a5 ab fa be 96 ea 7f ab bb 1b c0 00 66 2c ef fb 0a cc d9 06 5e ec 99 1e f9 cf 14 d7 d6 18 a3 98 12 08 09 10 ca 91 43 99 c9 b5 0f b2 e2 48 38 33 87 33 93 8c 30 52 cd 8e 58 06 36 30 39 2f 5f 5b 0c a6 15 fb cc ac af 24 1b 91 5c 3c 2d d9 c6 9c 0d 74 4b c4 f5 92 58 8c 18 63 6c 7e a1 83 15 41 1c 37 92 22 22 00 2e c0 9b cb 25 d3 b2 ee 06 22 2d e2 d2 21 49 0c 89 48 ce 63 02 cf 98 26 e4 8d 40 4b 95 4c 04 e7 98 18 49 b6 e2 98 68 fe 7e cf 12 11 c1 46 96 be da d8 5c 86 3e 27 03 11 11 76 f8 f3 63 c3 29 22 6c ad 36 71 54 84 bb bf Data Ascii: RIFF^WEBPVP8LR/IM8lF"gn/Y_<BD'*nzw/$uI[]9m[f,^CH8330RX609/_[$\<-tKXcl~A7"".%"-!IHc&@KLIh~F\>'vc)"l6qT
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 8f cf 00 8f 04 00 1a e6 23 56 97 56 97 00 7e 77 9d 15 a9 86 b0 dc 4c ab 61 b3 fa b3 07 00 cc 77 6d 83 35 77 6c 98 50 0d 61 31 03 50 cb 00 00 ee df 03 bc 2f 77 f3 fa fa 8e 9b e9 0b 2f ce da 1e 80 c0 e4 1c 9e 29 10 7e d9 f7 59 7f 46 18 36 a3 eb fd 01 13 a6 06 00 51 27 6f 7b 77 ba a3 b2 66 82 4b 80 6a 9a ff ef 95 61 35 87 db f5 31 2e 4e 2a f0 44 13 2c 6c 5e f3 d0 02 58 30 01 c0 05 f2 72 f8 cf 01 9c 2c e2 7c b9 8f 00 40 fc b6 bd 34 33 58 0a 00 75 db da df 99 2e 2a 8c 8b 67 8f ca e2 7e 0b bb 4a 0b 8c 2e 8a 27 9b b2 ac 59 93 c6 25 84 1d 97 c0 4e 6d bd 80 44 d1 77 b6 5e 93 cc f1 ef 65 b9 52 77 00 d0 b4 a9 0c 48 08 46 c9 ff fe a3 a2 a0 00 33 e6 05 4e 22 c1 e6 6f 6b b7 30 48 7d bd 50 76 dd d8 81 45 01 eb eb e3 fe 66 84 9d 82 72 f9 a1 ec ba 53 07 88 84 71 1f ec 80 Data Ascii: #VV~wLawm5wlPa1P/w/)~YF6Q'o{wfKja51.ND,l^X0r,\|@43Xu.g~J.'Y%NmDw^eRwHF3N"ok0H}PvEfrSq
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d 00 04 00 e3 01 dd 85 14 d0 27 52 ea 40 a5 d2 9d 50 a5 10 25 25 ea 28 91 24 2a a4 52 05 3a 45 a5 a2 82 4a 9d 42 49 29 75 2a 15 89 54 2a 75 0a a5 8a 0b be 0b 28 51 a9 54 aa c6 69 cc 48 57 ac 37 a7 23 c5 06 ab 9d 6a 24 64 5d d0 d1 51 8d cc 29 08 2a e7 14 36 95 a2 5a c5 48 81 65 b8 26 65 cb 5c 43 1b 60 ae c9 1a 05 9b a9 1b 14 80 46 30 20 68 33 03 e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 16 06 d6 a6 6e 3c cd 60 eb ae 14 45 d4 29 67 4a a5 b4 9c 96 a5 8a a8 13 db 18 42 ad aa 29 15 35 56 69 21 95 9c eb c4 99 91 94 96 99 02 75 ed 5c 5d 98 14 07 d3 d9 06 a4 6b 3a d3 42 4b 92 ab 97 91 ec 5c e9 8c ca 40 54 64 50 14 57 1a e7 ca 02 d1 5a a4 83 30 6e 49 a2 43 b3 2b 46 02 07 d3 ee ed 14 97 67 6c 0f 14 21 27 b6 82 81 Data Ascii: TDTD'R@P%%($R:EJBI)uTu(QTiHW7#j$d]Q)*6ZHe&e\C`F0 h3XT\n<`E)gJB)5Vi!u\]k:BK\@TdPWZ0nIC+Fgl!'
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: da c8 d9 25 9b 0c b2 b7 ac 29 75 c9 91 b3 a3 b4 0d f0 02 43 39 77 51 81 33 e0 b5 88 73 87 ab 6e 31 e3 8d 57 0d 68 b7 2c 42 ac 5a 8b 76 ee 54 a5 ea 7a 19 55 89 1a 57 4a 31 8c 54 8c c0 20 33 63 10 32 a1 0c b9 43 5a 45 c4 58 0c 85 ab 8d ce 42 d2 25 15 58 56 55 c6 9b 1d 30 b8 0b 39 8f 97 d7 52 9c b1 4a 65 b3 0a cb f2 c8 15 12 83 a4 b2 c8 42 ac a5 c8 58 96 89 2e 54 2a 8b 31 43 49 94 50 fc 97 53 95 43 f2 2d 37 42 2e 54 8c 0a 16 4b 48 4b e9 2c 97 dd d5 8d 10 14 30 53 a8 43 26 dd 8a 0a 25 30 a5 24 89 32 81 31 45 6d 70 52 24 51 e7 ea 42 91 4a 69 50 23 42 70 4d a7 a4 52 d0 24 53 ba cb 5d 2e d5 dc 51 e9 52 a9 14 49 29 a9 81 9a 4e a8 d2 a9 52 90 0a b1 29 29 a8 94 8e 2c 11 b1 19 32 a5 52 a9 94 91 92 e8 a8 06 98 52 54 29 98 52 a6 42 92 8b 1a a1 d1 24 35 72 52 29 55 9b Data Ascii: %)uC9wQ3sn1Wh,BZvTzUWJ1T 3c2CZEXB%XVU09RJeBX.T*1CIPSC-7B.TKHK,0SC&%0$21EmpR$QBJiP#BpMR$S].QRI)NR)),2RRT)RB$5rR)U
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 92 19 98 ad 24 58 82 b9 e8 51 24 ab 32 32 ea 6a 43 43 15 ce 17 c5 5a 1a 55 19 75 c5 50 14 ba 46 30 a4 a5 49 4e 8f 92 28 78 07 18 73 c1 54 a5 81 44 2a a6 20 05 d8 a9 ea a6 a3 a8 c6 74 c8 58 0c 4e b9 26 14 e9 61 6b 68 ba c6 68 49 11 d4 29 19 33 40 5a 04 6d 2a d5 08 9d a8 52 29 aa 1d 99 4a 94 36 b7 de 14 55 0a ba a8 29 75 6a 6d ca a0 8a 0d 4e 9b d0 a5 d2 e9 38 a3 24 ad 31 3d 4e 98 a0 13 6b 04 4c e7 a2 8d 2d b6 a9 9c 50 c9 50 d9 05 93 34 e5 b4 6a 03 40 6f b6 53 ca d4 60 4e c1 90 0d 4e cc 89 2c 96 72 35 c5 68 96 ea 38 ab a5 2e cc aa b3 a1 d4 b1 af f2 48 e9 65 49 5b ab 76 26 93 c8 db b7 94 e9 2c f8 c0 1c 70 93 47 66 27 99 9a 51 be 52 35 92 ae b7 5c 83 d0 39 85 1d 0b b1 88 b6 0b 25 aa e4 94 33 02 d4 29 1b 17 cb d6 53 ed 2c 2b 04 74 5c d5 48 e0 66 8a 16 04 f9 ac Data Ascii: $XQ$22jCCZUuPF0IN(xsTD* tXN&akhhI)3@Zm*R)J6U)ujmN8$1=NkL-PP4j@oS`NN,r5h8.HeI[v&,pGf'QR5\9%3)S,+t\Hf
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 90 0a 09 05 b5 03 ea 52 92 2e e7 48 a5 6e 96 79 0b 06 76 b4 b7 15 3d 48 b7 5e 8b 5d 68 2c db b2 57 a6 41 6a 2f ce b9 0f 72 86 ca bb 51 53 38 30 92 cd 0b 0f 6d ea 4f 06 09 84 17 2f f5 47 bf fc 2c 5a cd 6f de fc f1 b2 2b 53 84 46 12 68 24 2a 35 77 5d 1a ff 7f e7 6b 91 04 30 18 4a a0 05 10 a8 85 90 2a 00 b2 84 04 fa a1 50 b4 04 b2 a4 cc af 7e f1 f1 a5 6b 97 37 46 e7 5f fe cb ca 54 06 c3 04 98 28 24 47 98 3a f8 f8 09 07 3a 85 6a 14 a0 56 58 03 b4 65 ca bb fe f3 a7 91 24 85 29 49 21 38 6a a1 a6 40 d5 a8 78 e6 6a b3 e4 68 6f e7 9c 20 65 53 75 0a c5 42 d9 0b 0c c2 bc 55 39 1d d2 f5 4e b5 6d aa 21 72 db 55 b4 d8 60 cf 65 af 39 b9 93 a3 ed a2 22 a4 b3 5d a5 7b ae dc 5e 2d 4e 91 b6 b8 6a 5f 2a 6d a5 b1 67 dd 69 41 d7 d1 5d af d4 35 33 65 1f 48 0b 75 36 ab bd c8 c6 Data Ascii: R.Hnyv=H^]h,WAj/rQS80mO/G,Zo+SFh$5w]k0JP~k7F_T($G::jVXe$)I!8j@xjho eSuBU9Nm!rU`e9"]{^-Nj_*mgiA]53eHu6
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 82 f0 04 b0 f4 db ca 9c 86 11 5f 79 f2 3d 5f 3e f7 bd 89 a9 ba 9d b3 b2 23 12 df ff 97 57 f3 3f e8 62 07 48 10 82 a8 26 0c ad e3 b3 cf be e3 47 be fe ed 7f c4 8e 4a 5b 8d 8c 6c 0c a5 fa cc 80 56 18 0d c8 14 bf a8 1c 59 0e 5a 32 18 50 45 50 03 a0 89 56 a2 ec 0a af 86 f8 0e 09 a6 da 00 0d c0 68 29 23 7b 96 77 30 c9 a9 ca 29 4a 67 ba b2 ee 9c 29 85 bc 14 07 05 5a 55 47 24 35 54 3b 45 da 00 db a9 b6 8b ca d5 ac 6b 17 ec 13 57 f5 50 9a 3e 75 73 b7 a9 f6 ed 92 ee 70 95 3f 40 57 86 fa a8 ea cd 90 d2 54 fb c5 e9 cd cb f9 ed cc 29 4f f2 d5 e2 75 31 e0 05 d7 2a 9c 20 f3 e1 ff f5 fb cf 1c fe f8 a6 d7 fe bb 8a 11 89 fe ee ef e9 72 76 df 75 63 7d e6 bf 00 24 a7 53 4b 61 e3 9e 45 1b b2 36 2f bc 2b 45 fb e3 6f df fd df 93 be fc 47 62 8d d2 47 52 76 bd a3 c2 64 e6 f5 c7 Data Ascii: _y=_>#W?bH&GJ[lVYZ2PEPVh)#{w0)Jg)ZUG$5T;EkWP>usp?@WT)Ou1* rvuc}$SKaE6/+EoGbGRvd
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 9b 2e aa 7a 6d 85 e2 b2 a9 7e 4c 37 79 0a dc 97 9a 2d 66 5d c9 55 e4 b8 61 53 8b a4 1a c1 aa 75 b9 d1 f4 97 6b 06 7b 50 3a b3 e5 7c 3b 72 ee b3 8e f7 51 e5 2d 5c d7 9e ea 7d cc 35 92 94 d7 5d 1c 95 52 ef ba f8 4a d5 d5 6b 5d bf cb 3a 20 71 ea 4a f4 0e 15 6a 9b 53 48 8a 90 a2 15 11 11 d6 a5 11 0d 85 2c 99 78 9a d2 49 01 6b 18 af 2c 25 71 65 48 1a aa a4 ad 91 a4 a9 c0 57 59 85 eb e7 95 05 47 4d 40 e0 61 48 71 85 4d 98 6a 45 92 a4 0c 81 16 4c 88 ba 32 8c 0a 08 e1 e9 4b 1b 93 10 52 0c 13 60 9c d6 b2 86 18 1e 93 24 a8 ab 35 ec f8 92 c0 80 2f 6d 48 4a 09 9a ca 62 ef eb b2 5e 90 6e 4f e5 3b 54 33 e3 3c ae 88 44 ea 75 57 5e a9 66 6f 54 f9 2e d7 51 9c da 77 57 5b 3b 95 ea 5d 8b 6f c1 74 b3 99 8f b3 36 9e 4a d7 85 8c 4d 89 2e eb 01 e5 47 cb 4e 67 e1 2c 27 ee ee 5c Data Ascii: .zm~L7y-f]UaSuk{P:\|;rQ-\}5]RJk]: qJjSH,xIk,%qeHWYGM@aHqMjEL2KR`$5/mHJb^nO;T3<DuW^foT.QwW[;]ot6JM.GNg,'\
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 1c 95 b5 bc 29 27 31 ab 0d 55 ca 82 c0 2a b1 36 64 4a a2 a9 03 8a 11 a5 a8 96 2e c2 b5 87 5c 60 77 95 ba 32 b1 5c d5 6c 4e cc 1b 86 1c bb 4b c2 22 50 09 97 c1 50 ad 4d 91 37 45 9b 3b 8c 2d 37 df 06 d0 11 d8 c4 d6 46 94 c4 99 a3 a8 54 d5 3b 4d 99 a6 e6 34 58 77 b2 a0 e2 de 39 3a 89 42 eb d0 4b b9 d3 69 73 a6 94 14 9d af 86 bd c1 1d d5 9d 6b 3a 17 35 66 af a1 14 55 a5 a9 33 55 ff 47 5c 2a 97 38 de 45 2f cb e5 e8 82 75 5a 2b 8d 93 a4 56 4e d8 76 22 5d cf 5a 79 46 d5 d5 ab ec 57 ba eb 4e ce f6 5f 42 ad 48 f9 ac e5 9d bb b1 49 8c ea 08 37 77 5c 7a 77 8c d9 e5 d1 f5 59 8b 07 65 4c a2 3e 3e ea 18 2e d7 57 4e 47 2e 79 54 7a b7 d0 35 8f f3 91 6b 3a b9 c9 e3 6c 07 95 dd 2f b6 e3 93 32 4f ad fa a2 4a 4d 98 4f b7 34 4a 62 0f 4b ef 8c 8d 4e b7 f8 16 e9 69 43 5f 6c 6f Data Ascii: )'1U6dJ.\`w2\lNK"PPM7E;-7FT;M4Xw9:BKisk:5fU3UG\8E/uZ+VNv"]ZyFWN_BHI7w\zwYeL>>.WNG.yTz5k:l/2OJMO4JbKNiC_lo
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 1c 53 b9 68 2e 4a 6e 4b e1 4e 30 66 ad 8b 93 85 a7 da e2 d4 5d a6 b2 56 f8 cb a9 53 27 cd 56 2a 4f 2e 6e 09 eb 22 65 8b 4a d1 e2 36 6e a3 aa 55 6b 6f 31 73 5b b0 c6 e2 36 54 2f 97 03 b5 4d 7a 15 29 1c 8f 4d 6d 4c e0 31 ad c5 a4 8f 4e 77 dd 55 b7 ab 46 e9 ce 5a 83 2d 04 9f b9 4e dd f5 86 9c a3 4a c3 a8 02 69 b7 08 74 b9 7a a0 cd 60 67 ca b5 19 55 b4 6c 1c 1a d9 39 7b d0 28 51 76 29 dd e9 82 d3 39 1b 25 1a ab bc 05 2d dd b9 76 91 8d 6c f2 c6 f9 8e da c9 a0 f3 dc 15 2f 89 ae dd 9c b7 a5 cd 19 59 8f e9 9a 0a f0 e2 eb a0 8a f5 e6 bc e8 ca 35 8e bc a6 6a 05 9d bd 60 27 88 8a b2 5a 8a e5 89 26 5a 23 ae 6e dc c8 82 b2 8b 6d aa a9 eb d1 aa 53 0c 59 a2 56 ab d3 e9 a3 67 72 dc bc 10 dc 4e ce d2 3c 4d f3 e6 a4 b6 98 ea b4 33 97 fd 7a 30 26 fa 35 27 a9 86 e9 5e 5b c9 Data Ascii: Sh.JnKN0f]VS'V*O.n"eJ6nUko1s[6T/Mz)MmL1NwUFZ-NJitz`gUl9{(Qv)9%-vl/Y5j`'Z&Z#nmSYVgrN<M3z0&5'^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49777	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1087	OUT	GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:13 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 31756 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5375 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:13 UTC	721	IN	Data Raw: 52 49 46 46 04 7c 00 00 57 45 42 50 56 50 38 4c f8 7b 00 00 2f a5 c0 49 00 4d 38 8c 24 35 6c 72 87 e2 40 20 fd 17 2c d9 69 21 a2 ff 13 50 55 95 19 55 95 4f b7 ca cc aa aa cc fc 56 56 9d ea ae 9e 2f 6c e8 8e 53 56 a6 cf b7 aa 5c 72 f5 0a 04 88 2d 2b b3 b2 fe cd aa e2 f1 da be df af e0 dd 74 03 5f ba 49 5f af 97 80 7a 1a e9 06 6c 60 ac b5 56 32 f6 da 8e 63 ac 58 46 d8 0a 6e 31 5d 37 84 dc 4e 47 c4 ea 08 47 1b 04 da c3 a2 9b 50 ce a7 4f b7 13 36 c4 83 fc a8 af f0 78 77 95 4a 08 d0 c0 74 03 55 da 2a 6b b5 30 b3 05 2d 2d 7b 80 e3 1d 73 00 ba 0f ba 05 c4 36 6c d0 db 70 9e d9 22 0e 7d ea 6e 17 72 5a eb 40 b7 2a cb 2d 38 8f 03 5c 6b 1a 46 22 36 0f 99 76 2b b7 e3 d0 a8 12 6a c4 a6 fe 7e d7 41 b9 55 3f 1e ae b0 6f a6 7d 3f e0 6e 7c ff d8 78 e2 78 0b 01 08 08 56 7d Data Ascii: RIFF\|WEBPVP8L{/IM8$5lr@ ,i!PUUOVV/lSV\r-+t_I_zl`V2cXFn1]7NGGPO6xwJtUk0--{s6lp"}nrZ@-8\kF"6v+j~AU?o}?n\|xxV}
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 3a 81 40 00 20 31 de f0 c5 4c d6 4b bc 3d 96 31 12 61 ff 29 ad c1 17 13 7b 64 bd f6 15 2b 9a 75 b8 06 80 d5 1e 66 f7 88 cd 93 79 f1 93 5f 2c 75 00 02 69 0d 66 26 be 0f 9c 3d 1b ec 37 8f 33 2e f9 66 0f 98 f5 8d 97 0d 1a 60 81 69 00 40 da 4e 81 86 09 b0 c0 02 06 40 be 5c cf 01 68 c0 e7 1c 9b 4b be 4e fc 87 17 c0 0b 2e 31 01 00 2e f7 72 f5 f2 03 c9 94 7b 00 1c 02 d0 d6 e4 c7 8e 59 5e a6 00 e2 30 1c ee fd 18 e1 d0 e8 05 c6 2c cb d4 4e 58 ce 4e c3 69 00 07 6d f4 43 90 f2 d4 fe 23 4c 68 07 00 48 63 3d 5c a3 7a ec 29 d0 97 1a 0e 01 18 18 1b f8 af 34 07 da c1 21 a0 1d ba 4d 07 96 be 00 1c 12 22 44 f3 df 01 52 17 a4 0e 8c 10 8d 1b 90 6c d7 39 4b 4b ae b3 49 19 5d 71 ff c3 5e 1c 9b 00 53 0c 7f e9 17 1e 0d 42 23 71 4f d2 d6 43 0e 31 c4 50 e3 76 4c 62 52 93 a7 99 39 Data Ascii: :@ 1LK=1a){d+ufy_,uif&=73.f`i@N@\hKN.1.r{Y^0,NXNimC#LhHc=\z)4!M"DRl9KKI]q^SB#qOC1PvLbR9
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: d4 cd 53 35 ab b5 ed 09 d1 cc de a6 36 94 0d d2 ee 6d 8a cb 13 db 03 8d 90 89 ad c1 c0 24 d8 04 33 c4 93 6a 0c 49 8b f6 cc 45 d2 48 db d4 5e 1e d2 2b b5 89 84 44 f7 ca c5 c5 65 6d 9b 60 42 68 d1 6d 89 b1 25 b7 a5 c0 63 ed 79 aa e5 0d da a6 ee 2d cd d8 a8 7b 3d d5 32 d8 e6 61 cb 58 3d 93 43 84 08 b9 d7 a8 12 83 4d dd 58 5e d4 e8 26 17 d8 d0 9e 5c 1b 63 68 53 b7 12 c4 42 29 64 ec a8 14 12 21 51 9d 84 a0 58 96 11 0d 46 2d 0a 49 aa 05 55 e4 65 45 28 85 90 a2 22 30 38 08 05 b1 6e c5 31 08 28 0b 21 64 22 f0 a2 2c 45 2c 44 bc f3 2e 62 89 09 06 2c 09 84 50 26 68 19 b1 12 2a e5 41 5e 90 12 2f 0a 25 62 19 64 49 3a 65 28 19 2a 2f 2f 2b 61 4b 2c 24 92 f2 b2 2c 2b 45 12 05 76 64 ca 20 63 52 02 9e d4 14 58 16 4a a1 94 08 85 52 b0 bd ba 13 cf 3d 6c ad 3d 5e 17 68 7a cc Data Ascii: S56m$3jIEH^+Dem`Bhm%cy-{=2aX=CMX^&\chSB)d!QXF-IUeE("08n1(!d",E,D.b,P&hA^/%bdI:e(//+aK,$,+Evd cRXJR=l=^hz
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 7b a9 05 00 d0 06 55 2c d8 b2 16 04 c5 5a d0 d2 aa 3a b2 31 9b 55 d9 44 a5 c0 ed 52 5b ed aa ed 64 49 da 15 dc 4d 6a cb 86 3b c5 da 54 d4 8d b5 f1 da 6e bb 76 f7 42 ab 76 b8 5b d6 ad 76 e8 38 bb ed 60 bb 4a 56 a8 42 5b 6b 68 2d 91 56 74 62 61 1e 74 4f d4 78 c1 c9 d4 86 2a bd a5 8e 79 35 02 6f a5 bb 05 e5 d4 d4 89 59 b6 97 7a cd 14 28 af 97 6e ab 6c 6e 2f 75 8b 0e b6 59 37 14 43 60 9b 6e d3 6a 11 75 25 18 49 ae a7 00 d0 9e 5c 2d d2 6a a5 6e 0c 21 e6 9e 54 cb c8 3d a9 2d 64 7a 4b bd 37 8b 34 e8 58 ba ed 7a c1 c9 b0 01 d8 93 bc f1 0e 48 bb 7b a6 db 58 d8 bd 92 37 a6 29 ea 6d 03 60 d5 b1 87 0b 05 35 eb b5 50 28 eb bb ac 2d 53 ed 49 bd 78 41 af e4 bb 92 62 8c 67 a8 33 90 9a 6a 89 99 8a 5a c3 24 15 bc 0d 8c 21 53 61 cb 98 94 ac 19 c8 1d 85 a5 a0 05 24 05 c4 2b Data Ascii: {U,Z:1UDR[dIMj;TnvBv[v8`JVB[kh-VtbatOx*y5oYz(nln/uY7C`nju%I\-jn!T=-dzK74XzH{X7)m`5P(-SIxAbg3jZ$!Sa$+
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 71 e3 b6 2c eb de a5 3b a0 65 2b 75 b0 b6 7a 67 1d a5 8e e8 50 19 dd f2 5a f6 c0 69 c9 0d d6 da 33 eb 2d c1 bc 37 fa 0a ba 27 21 6f 1e 5e ad 56 4d ee 7e 82 d6 12 eb b7 f2 3a 65 5b 7d 25 f5 aa 5a f6 42 3f 03 b7 08 93 2c 83 2a 0c 12 c4 21 f7 73 f7 f6 8b 1b 57 74 a1 85 84 d9 45 6a 00 30 28 94 51 85 94 44 c0 19 75 99 5a 28 81 23 a5 2c 16 13 53 92 12 75 a0 02 21 6b 12 43 75 91 9a c2 b2 e4 22 0b d4 94 a4 04 0e 45 20 a0 12 38 cd 11 52 43 a3 4e 93 90 d8 28 64 39 cf 98 a2 01 f3 f3 4a 96 c4 3a 65 b5 40 85 ad ce 33 0c 95 46 7e 92 5c 61 f0 e6 d1 2b b3 9c a4 be 84 0a a8 2f e6 9c 41 ad 97 d1 b7 54 c6 b2 1a cb 52 c8 5b 9a 95 62 a5 8d b3 0c 24 71 5b 29 2b 69 51 53 88 ae a4 9e 30 74 ed 4b a5 56 41 a4 a2 52 2d 40 1e 27 24 24 8c a1 eb d5 5b ee 7d d9 99 4f bd f0 91 9f fd f1 Data Ascii: q,;e+uzgPZi3-7'!o^VM~:e[}%ZB?,*!sWtEj0(QDuZ(#,Su!kCu"E 8RCN(d9J:e@3F~\a+/ATR[b$q[)+iQS0tKVAR-@'$$[}O
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: e2 8e ef a0 09 68 77 f6 46 6b e6 ec 82 e1 d9 1c 5a 87 ad 5e 99 e9 ec ef 7c f5 55 dd be 90 aa e3 41 fb 9d 7e e6 8d 4f 79 f3 27 df 69 cf 75 31 51 f0 e9 3b ff 9b 0f de 33 fd 51 0d 09 a5 f3 4f 67 84 17 76 9b e6 79 fa 3e cc a2 c5 f4 bb 93 92 19 8b c3 1b be ff 91 d2 a2 31 9e aa 08 35 cc b6 37 7b e3 f8 0e 5d 51 a5 cc 62 17 a1 da 9d 4c dd 82 b2 cd 6a 88 20 31 e2 94 51 d0 76 ef 99 fa 2e b4 95 a3 0c 51 29 c8 72 3a 11 2a 43 2d 64 67 87 54 57 46 4e 27 05 36 84 3d d5 8e ce e4 ce 08 28 c4 76 ee b2 84 ca c4 5e d1 94 85 03 7c cc 16 30 c4 44 16 b2 2a 0b 29 5a 25 48 6b 92 ba 49 cc 88 41 16 d4 19 8a 0c e7 fd cc f1 d9 6f 9f fd 70 66 ea b3 f2 0d 4f 79 f7 bb df c1 8f e6 f3 ef f8 ff f7 de e3 b2 2b 9e 72 f8 f9 03 f7 41 b3 5c 97 01 a0 94 b3 45 1d 51 6a 31 a1 4d 19 9c 5d d2 5b 06 Data Ascii: hwFkZ^\|UA~Oy'iu1Q;3QOgvy>157{]QbLj 1Qv.Q)r:C-dgTWFN'6=(v^\|0D)Z%HkIAopfOy+rA\EQj1M][
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 57 2d ae 44 4b 5b c8 c4 31 95 c5 b4 29 49 e8 38 dd 02 55 c1 65 99 45 e8 92 ed 9a 8f dc 54 5b de 58 5d a2 e2 d0 14 0a 28 16 c0 6a b9 34 e2 51 28 1b 00 34 32 45 3c 90 82 76 19 71 b9 14 8e ba 62 4d ee 1a eb c0 10 92 11 eb 33 c5 32 43 20 d6 31 45 5d 0a 47 29 43 31 1e 0d 88 10 51 57 55 95 42 ac 9a 10 7a 53 6c 15 63 94 d5 ab 48 c7 c8 51 9c 3e 35 86 46 e4 2e 77 9e 8f 8b 4a 59 0f 7d 2b 19 1c 1b b3 ea 9c dc 4d 52 d3 3e bb 26 f1 b2 69 24 8e c6 30 c5 63 e2 a6 e2 68 3a b9 d9 06 dc d9 16 8f 13 54 10 9d b2 5a 1b 66 15 2b 0a 9d 6c 21 b2 10 9c c2 12 38 59 65 84 0a 01 14 59 91 8a 3a 84 32 12 12 72 42 c4 a7 64 48 1d 43 ca 60 21 21 11 24 00 00 19 a0 1a 06 ce c5 08 a0 84 18 00 c0 22 40 a0 2a b2 aa 96 15 50 55 2c c4 8c b2 0c 2d 31 40 a2 2c 80 52 a5 96 08 18 88 9a 51 10 30 55 Data Ascii: W-DK[1)I8UeET[X](j4Q(42E<vqbM32C 1E]G)C1QWUBzSlcHQ>5F.wJY}+MR>&i$0ch:TZf+l!8YeY:2rBdHC`!!$"@*PU,-1@,RQ0U
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 15 87 9f 9e f2 3e 3e 7e dc 73 67 a2 dc fc d2 55 37 4f 7b cf e1 f4 77 72 9b 33 70 fd e9 92 fd b1 7f 7a d7 13 ff fc 2e 17 9e ba 4d c4 dc 70 6d be 79 c6 ed 7e 40 6e 3d ee 08 6b fa b7 33 2e 7d e3 9f 77 7d e8 1d 2f 38 fe f8 73 d7 5f 75 58 77 95 97 7d fb 71 ff f8 e1 3f ae 7c c5 9f f3 70 fd f6 e4 9c fb 86 3f 3d eb 97 b7 e6 a6 3b 5f 74 9a a2 d1 9a 78 2a cd a7 77 e9 5c a5 5a 9b 8d 25 c1 d9 72 c6 6a 9a 48 45 bc 36 a6 2f b3 9a 42 71 f2 44 ab cc ac 04 2d ba 5e 44 20 84 25 b5 82 75 6b 30 c0 21 ed 06 ab af bf f4 a9 bd 39 f9 51 4f ff f8 bd b6 d9 9d 6f e8 d4 20 99 df 78 ef f2 b6 5b f9 da 57 2f be c1 5b 7d f2 c3 17 df d2 8c d3 f5 be b7 7c e3 c3 fb dd 19 1f ff e6 f7 dc 79 fb c4 27 bf 6f aa e7 9e ab 37 72 dd f0 eb 27 7e fa 4e 2f 7c e6 ad 0e 5f fb e5 cd 57 bf f0 a1 8f dc ee Data Ascii: >>~sgU7O{wr3pz.Mpmy~@n=k3.}w}/8s_uXw}q?\|p?=;_tx*w\Z%rjHE6/BqD-^D %uk0!9QOo x[W/[}\|y'o7r'~N/\|_W
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: bf b9 fb da 4b 1f b8 cb 4b 5e 7b ca fb b7 fa c9 fb bf fa 88 b3 de e9 93 b7 7c d5 c2 f5 7c e0 eb eb 45 8f 3d 9a 5e de 7e f6 89 7f dc f7 c9 1f 7a fb af fe 55 9b 39 1d 6e be 2a b4 5e 41 6a 45 90 b4 3d 2b de e5 43 1e 71 f7 ec b5 b7 56 1d f7 9a 73 1e 9b 9b b6 dc f1 b9 af 6e 0f bc ff 5f de fc ef 8f 39 f9 c3 1f df b1 e7 bd fd cf f7 bd ff bf dd fe bf 0f 79 d5 eb bf ea 11 fb bf e4 cb ff 7a cf ad 97 4c d8 38 fd 8d bc fd a1 8f 1d e5 ac f8 d0 fb ed 73 cf b3 83 f1 e9 9f 8e bd f7 63 77 79 ec 9f 4f 7e 28 8d f7 cf bf dd 0b 56 6f bb 78 ec 3f cf 3e f1 96 d7 f6 3e a8 27 fc 7d fb ce 9f b7 a6 f5 c4 bf 38 9c f0 8f ff ef 7f d7 ff f3 1b 3a cb 2c 12 62 d1 42 76 2d 28 5c b3 ac 16 54 5a 89 36 4a b5 8a 2a 1b f2 9a 77 75 d6 c9 51 ee b0 02 4e e5 ee cc 66 49 59 c7 d6 33 e1 5a 39 57 b3 Data Ascii: KK^{\|\|E=^~zU9n^AjE=+CqVsn_9yzL8scwyO~(Vox?>>'}8:,bBv-(\TZ6JwuQNfIY3Z9W
2024-04-19 14:06:13 UTC	1255	IN	Data Raw: 29 09 32 59 2a 51 25 35 10 ad 54 c4 81 38 a6 3e c9 12 88 2a 83 61 91 68 0a f5 aa 20 d6 63 01 4a 1c 49 4e 64 5a e4 04 41 59 02 3b 59 f6 fd 98 2c 4b 96 3a de 95 f5 64 29 b8 88 9f 90 27 50 2a 55 9e 15 6e 33 25 5c e7 f2 9c 83 8a 8a 65 76 17 ee a2 83 93 7d 16 15 2a 21 fb 72 6f dd a5 65 8a 00 9b ac c4 20 2b 11 82 1a 02 24 84 72 32 8c 46 6c 22 00 03 8a 72 5a db 1e 8a 3a 0f 9a 26 09 a4 00 8b 42 0e 03 b6 26 42 49 a8 e8 d2 61 d0 4f 32 f5 22 a6 b5 66 48 c5 90 ad 23 84 e2 82 6a 24 53 82 36 44 d6 a8 80 0f 46 74 a0 19 0d 29 d2 60 34 6d a0 46 69 c3 aa 9c 11 07 06 09 15 3d 1d 49 1f 13 cb 23 20 69 4f 46 d8 51 53 81 4a 46 a4 c7 88 02 1c d4 32 60 1a 71 84 44 24 c2 50 7a 46 a9 a9 d7 46 4d 45 99 1a 2d 40 31 59 28 74 85 d8 97 f6 62 38 dc 0e 3a 73 50 d9 9d ab db 2e 2a b7 92 b5 Data Ascii: )2YQ%5T8>ah cJINdZAY;Y,K:d)'PUn3%\ev}!roe +$r2Fl"rZ:&B&BIaO2"fH#j$S6DFt)`4mFi=I# iOFQSJF2`qD$PzFFME-@1Y(tb8:sP.*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.6	49780	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1086	OUT	GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8956 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:02:17 GMT Expires: Sat, 20 Apr 2024 12:02:17 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 7436 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 f4 22 00 00 57 45 42 50 56 50 38 20 e8 22 00 00 50 8b 00 9d 01 2a 28 01 28 01 3e 41 20 8d 44 a2 a2 21 12 69 35 18 28 04 04 b2 b7 70 b6 c8 fe bc 43 a2 f1 eb d2 91 7d 2b f2 a3 fa a7 ec 77 ca cd 33 f9 c7 e1 3f 60 1d 22 c5 a3 d5 3f 72 3f 43 fd d7 f1 ef dd 5f f8 ff 61 1f 9a 7f ca fb 82 7e 8b ff 84 fe f5 fb 7b fe 7f ff ff cb bf a8 0f d6 ff 50 7f d1 ff b3 ff cc ff 49 fb ff f2 d3 fd cb f5 c3 dc f7 fa af ec bf a7 7f e6 7e 40 3f a4 7f 93 eb 0b fd 6b f6 08 fd 5e f4 a7 fd b8 f8 31 fd 8e fd bd f8 11 fe 83 fe 2f fe cf e7 ff 70 07 52 7f 56 7f cb 76 b9 fd c3 f2 a3 d0 3f 0f 3e 43 f5 d7 fb 7f fe 2f 82 4f e3 3c 1d 74 c7 fc bf 44 3f 8f 7d 95 fb cf f7 bf da 8f f0 7f b6 ff 78 ff 98 ff 5d e1 2f c7 9f f2 7d 41 7f 1d fe 5b fd df f2 9b fb bf ee 7f 1e 28 00 fc b7 f9 df Data Ascii: RIFF"WEBPVP8 "P*((>A D!i5(pC}+w3?`"?r?C_a~{PI~@?k^1/pRVv?>C/O<tD?}x]/}A[(
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 23 18 59 94 f9 f3 a0 a0 1b ef bd ac de ea 49 03 ab 1d 2a 23 09 4a 0b 32 44 81 30 1a aa 62 44 3d 60 23 55 6e 5a 50 67 64 f0 dd 80 3e 77 0d 3f 83 c7 d6 e3 1d 4f 9e a7 d4 d0 f8 fe 14 23 94 74 28 66 7f ce 51 73 3e 5b 1e b4 fe df bd 5b ab 4c e3 b3 57 5c fd fd 44 80 90 39 2d c3 f9 05 1e 48 d5 e3 57 b2 55 08 25 f8 17 90 1b b4 4f 39 4b 84 a2 12 4d 0a c2 9f 36 ab 54 2a 27 50 4a f3 43 14 bf 39 ad 09 bc 3b 2b 35 47 1d 88 4f ee 49 54 45 25 2b da 70 b3 a9 dd df 7e cf e7 57 8c c6 32 f2 5a e8 0f 9d 37 9d bf 46 21 89 16 9c b7 85 ff f6 73 36 12 5b 3c e8 70 dd 60 36 d7 fc 73 a3 58 a3 21 cf de 94 b0 78 df 99 9a 28 7b 96 a1 20 fc 9a a9 4c 13 6d 22 16 b6 6f dd 61 a2 9b 61 c1 e6 f5 99 57 1d ee 8a 3c 85 74 16 ab f9 00 a4 63 00 b8 9c 80 91 09 f3 15 45 f9 c0 b7 dd 4b c8 50 7c 50 Data Ascii: #YI#J2D0bD=`#UnZPgd>w?O#t(fQs>[[LW\D9-HWU%O9KM6T'PJC9;+5GOITE%+p~W2Z7F!s6[<p`6sX!x({ Lm"oaaW<tcEKP\|P
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 5c fa 46 85 75 cc 3b 9f 41 fd 57 b0 ea 59 40 0e 66 0e 8d e1 fe 73 26 12 11 bf 6c 3d ca c9 ce 03 03 e1 89 5a f2 9e 1b fe 77 63 3f 4d ad b4 eb cb 21 df e5 f9 c5 45 96 5c 69 28 ff 0f 38 96 fc b5 54 04 f6 ff d3 56 3f d5 48 d0 4b 75 97 b8 5b 5e f4 d0 7a da 22 d5 80 82 82 d3 d9 74 ca 90 56 91 ab 89 dd 2b 7e ef fd 31 9d a2 c5 95 fe 62 5e 40 7c 04 bc 8b 5a c8 b3 80 eb a3 ab 27 8e 51 0e 9e af 66 d3 c0 80 26 79 ae 51 00 20 1d 80 cd 04 e2 0d a5 92 49 91 3a f5 ef 10 e5 99 bc e1 a0 f8 10 5b c9 a3 1c ee 8d bc aa 53 42 09 8c 8b c6 f1 e9 ce 81 3d 8f 84 86 25 d8 27 71 e4 13 5d 5d 18 66 4d 81 0b 86 d0 2d c2 45 25 97 26 46 c3 67 84 0d 09 6c 27 24 69 9b 41 81 00 2f 42 3e f0 f0 86 28 75 83 ee db 41 97 68 c4 9f 53 d0 bc 60 ca 12 70 3b 89 f1 f5 a4 2e 9e 2c 14 33 74 25 b8 2e 06 Data Ascii: \Fu;AWY@fs&l=Zwc?M!E\i(8TV?HKu[^z"tV+~1b^@\|Z'Qf&yQ I:[SB=%'q]]fM-E%&Fgl'$iA/B>(uAhS`p;.,3t%.
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: bd 23 f1 7c c0 15 f7 b9 f6 c4 8c 38 2f 1b 5c 5f d1 27 09 1d 05 a6 5c a8 6a 6a e0 5d d2 5d f5 4c 96 bc 1a 9a 44 e8 96 3f 21 30 c5 43 a1 5b 67 eb 11 b4 8c eb 6b de f9 b9 b0 26 e2 50 47 9d e4 b1 af 78 f9 41 2d bf 42 a5 ab 3c 32 6d 44 8f 21 74 fb e1 ac 6d cd 62 5e f4 59 38 e8 3a e3 d2 d1 43 20 39 6d fe ca f8 0d d2 13 83 84 f0 4f 73 5a d9 2b 73 9e 50 c5 70 2c 57 ae d2 27 54 1a 8b 77 89 db 56 f7 3c 07 4f 72 3c 42 c6 c7 fa 11 14 ac cd 32 c7 71 27 79 94 6c 54 5e d2 2f 94 97 62 4d 41 b4 83 3c 24 f8 07 b6 58 90 4c 10 2b 5d 17 b0 a5 33 8e 5d 97 ba fb 57 7b 7d 46 b3 a8 2c ae a7 1e 9e 5a 3c 69 da 35 d9 30 4f d9 bc c6 ab 0c 11 48 f3 df 2b af ec 79 c3 c4 f7 62 1f 0a 2c 16 c3 ef 23 5e 4e 7b 86 01 63 1e bb a6 c2 69 d6 2b 0a 51 cb 4e 8c 84 c5 f0 c3 f2 8c e5 a3 90 c5 ad 7b Data Ascii: #\|8/\_'\jj]]LD?!0C[gk&PGxA-B<2mD!tmb^Y8:C 9mOsZ+sPp,W'TwV<Or<B2q'ylT^/bMA<$XL+]3]W{}F,Z<i50OH+yb,#^N{ci+QN{
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 22 06 9a d7 96 99 d3 bf 5a 63 9c 1e 31 32 da 1c a8 d5 5c cb 69 7f ee 5f 53 29 dd 8a 15 a2 29 b0 58 f8 4f 1d e8 55 f3 dc 8b a2 41 e0 c6 1e 87 31 98 27 ec e4 7c 4b a6 00 1a 2a e3 3f 11 c7 4d 76 ef 44 3a 6e f7 68 c8 20 77 9d 22 0d 0f 5e a2 e2 d4 c3 89 2c 39 cc 3c ab 9d 6f c0 bc b4 b6 1d 33 7a 51 d7 55 e4 28 81 19 32 08 cc f1 91 c2 08 87 eb 6b 53 e4 00 a7 ac 93 b3 47 69 c2 43 7b d7 72 3a 30 db 10 b7 55 45 60 a8 76 8d 53 a4 1e 23 6c c8 38 03 3a be 59 3c 52 03 85 81 82 19 5f cb 72 ab f8 71 b2 1b 6e 38 fa 9f fb e0 85 7c da 00 af 0e f9 c5 7a 3f 21 64 bd ca 97 57 4a 8f 0e 81 6a 57 46 17 23 f8 ed a3 d0 b2 6d ea e3 e7 ea 5d f9 6d 85 f8 27 4f 53 a7 f1 f8 fe 6c ea be 49 bf c7 40 7b 85 a1 b6 94 30 ee 72 ff df 4c 58 20 88 ce de 86 ac a8 df b1 e4 98 9b 64 d5 63 77 ec bc Data Ascii: "Zc12\i_S))XOUA1'\|K*?MvD:nh w"^,9<o3zQU(2kSGiC{r:0UE`vS#l8:Y<R_rqn8\|z?!dWJjWF#m]m'OSlI@{0rLX dcw
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 0a 16 96 71 85 ca ec 2f b1 05 fd 8f d4 c4 28 f3 bd 0b 1c bb c3 c2 7e 80 df 3b 8d a8 7d b5 b1 f3 6e d1 18 1c 9b c4 18 e6 a1 8b e9 47 00 50 2d e1 00 50 0f 49 91 fc 61 bb a9 6f 9d 98 0d 9a 6f 4f 69 f5 5e 78 b8 cc b3 cf 88 c8 a0 4f db 25 18 95 32 52 3f c6 c6 0f 5a 39 8a 90 40 33 71 18 f9 d5 e8 2f 34 7d 30 37 8e d6 c9 94 0b 66 6d d8 3c 7d d8 ee d0 54 a0 9e f7 b0 af 25 e1 9a bb bb ea 07 70 39 f3 35 5b a6 77 ce 13 e5 0c d4 e3 b5 f9 7e 04 7c f3 7c e6 af 65 50 15 9f 23 ce 54 c7 b7 7b 34 61 58 90 3f b4 65 0e 12 e9 d9 44 b0 5e f1 a0 2e 8f 06 f6 d5 71 18 9b 01 2d 0c 62 0b ce 44 a8 56 f7 db e5 d1 fb 8f 4a d7 4e 5d 8c 8c 1f 95 63 7e 1b 00 7b 71 cc 65 82 c1 81 7f f3 06 47 72 72 eb 4e e2 f2 d1 d7 2e 9a 62 4a ff 99 96 d6 cd f6 50 a0 9c 9d 39 ba b3 c8 74 5e 92 d0 15 8b 30 Data Ascii: q/(~;}nGP-PIaooOi^xO%2R?Z9@3q/4}07fm<}T%p95[w~\|\|eP#T{4aX?eD^.q-bDVJN]c~{qeGrrN.bJP9t^0
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: a3 65 c2 fa 21 d4 bb 7b 57 31 bb 4c 6c 9a 59 f0 78 1c a4 9f 65 75 ab 3e 53 07 8e c6 21 71 ca bb ed c0 b6 e2 a6 11 88 fe 1b fb 6e ee e4 12 37 e2 d7 0a 9f f0 17 c2 b2 d6 26 a9 8c 0d 44 5f ad 11 46 4a 48 f8 1b 75 b3 04 bb f6 bc e2 3e 53 c9 8e b2 53 a8 e2 a4 ff 82 88 c3 88 5e 8e 13 c7 0b 02 10 74 d1 b0 c8 5a 4e 6c e4 7a a4 9d 3c aa e3 b6 ef 99 fb 1c c9 8b 68 9d 29 9f f1 00 3a e9 bc c1 8b 97 2d ef af 3b cb b1 7b 18 0e 02 44 04 36 00 a5 61 39 1c 74 c1 f6 7b 91 64 94 ea 8c 36 e8 5d d9 33 ec 37 12 23 e8 c6 54 a3 ce d1 dd c8 a0 2b e9 34 83 b5 11 b4 c6 8d 7c e0 f5 2e f3 53 6a 40 47 6c 4f da 20 99 ce be 39 de d2 a3 82 20 0b e7 e5 24 d6 5e 6f f4 36 71 1f 7b b0 20 87 21 c5 0a e6 1b e4 40 e4 f9 ea 7a fa cb 34 3c 76 3e 0b 28 08 3b fc 13 48 d4 14 d1 0b 88 ee 9f db e0 57 Data Ascii: e!{W1LlYxeu>S!qn7&D_FJHu>SS^tZNlz<h):-;{D6a9t{d6]37#T+4\|.Sj@GlO 9 $^o6q{ !@z4<v>(;HW
2024-04-19 14:06:14 UTC	704	IN	Data Raw: 06 a4 f2 50 f2 d8 53 60 bb fd 02 c9 45 92 93 e3 b4 01 95 7b 87 49 db 1f a3 6f 60 2c 0f 59 71 5a 83 7b 90 3d bd 73 6f cc 80 28 0e fa a5 8e 8b 91 79 b3 fb 03 1b 90 2f 78 b7 d7 30 18 00 7c 8f e9 80 34 9b a6 a6 82 6b 07 e9 f3 e5 05 87 ff 87 f9 fd d9 37 33 89 cf 1d 16 a0 e7 a2 50 c4 3c 55 d1 67 41 af 0c bb 9b 3b 16 d6 f5 73 62 47 21 4d c4 aa f9 af b7 00 2d a3 67 e7 52 65 cb 80 5f d7 87 e4 50 60 2d 1f 80 d5 51 e5 33 f9 85 35 c9 e6 ef c4 a6 fa 87 38 60 39 04 65 ab 73 3a 4b 14 63 e1 4b 61 84 3f fa 31 27 1b 92 4b 1f 01 35 4f 4f e1 ce e5 0b 6d 1a 60 3a 06 bb 60 b4 82 c7 09 81 f7 ff 2e 7f 79 40 f1 8a 5c b1 f1 42 96 7c 25 d6 61 ea 96 8f af 22 cb 46 0d 53 b1 42 58 5b 8e c3 0a ae f5 14 c5 87 3f a0 6d 66 b4 71 de aa 21 90 ff 9e 02 c2 db 63 40 5d 34 dc 08 b4 1f e7 03 48 Data Ascii: PS`E{Io`,YqZ{=so(y/x0\|4k73P<UgA;sbG!M-gRe_P`-Q358`9es:KcKa?1'K5OOm`:`.y@\B\|%a"FSBX[?mfq!c@]4H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49781	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1089	OUT	GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:45 GMT Expires: Sat, 20 Apr 2024 13:53:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 749 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	244	IN	Data Raw: 52 49 46 46 ec 00 00 00 57 45 42 50 56 50 38 4c df 00 00 00 2f 13 c0 04 10 35 b8 8d 00 46 6d 34 88 57 23 e9 ec 2e 30 44 ce 5d a0 e7 1d 98 4a 7f 17 ac 72 d9 c6 6c e9 32 81 14 e1 36 b6 6d 55 f9 91 0b 0e 35 b8 43 fc 28 e5 bf 18 0d b5 04 27 76 69 c7 aa b0 08 52 dd 0a dc 46 6d 02 74 97 f5 0c fd 83 e4 d5 5c 08 e8 5f 10 eb 9f 59 ee 92 d8 0c d5 ee 92 63 3b 20 f2 8a da b5 d3 8d 17 1c 1d 90 10 c2 7c 20 d6 c9 b1 15 12 70 6b e5 a9 d9 62 bc ce e3 cd bf 60 b9 a6 ab 81 96 8b f8 81 a4 07 70 bb fc 82 85 2f c2 82 37 32 3c e6 f9 ee fc b3 06 f1 f3 8c 98 cf 41 51 96 af e4 01 0b 9f cd 0d a7 59 c3 d5 40 cd 45 72 45 d2 03 f8 9a fd 64 1c e9 a5 5d 3a 9a ae 4b 47 92 5e 05 40 4c d6 53 8e 8f 67 9b e1 7a c4 f7 5e fb 67 c4 7a 67 81 b3 5c 98 4a 45 01 00 Data Ascii: RIFFWEBPVP8L/5Fm4W#.0D]Jrl26mU5C('viRFmt\_Yc; \| pkb`p/72<AQY@ErEd]:KG^@LSgz^gzg\JE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49782	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:13 UTC	1088	OUT	GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 332 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:34:31 GMT Expires: Sat, 20 Apr 2024 12:34:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 5503 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	332	IN	Data Raw: 52 49 46 46 44 01 00 00 57 45 42 50 56 50 38 4c 37 01 00 00 2f 13 c0 04 10 95 c0 ae 6d db d8 73 db fc 63 db f6 ab 6d db ce ab 5b 48 15 e9 c0 da b1 0b 58 d1 97 71 bf 7c 88 80 63 5b db f1 2a b6 6d 1b 23 b0 4a 77 99 45 3a bb 75 72 6f c7 0e 9d d5 7a 00 b6 6d 5b ef 04 f0 11 4a b2 98 6c 1d 6c 19 58 4e 48 fa 8c f5 44 3c 24 41 22 58 ef 6b 29 fb a4 be ba 97 bd 79 e1 84 13 57 f6 96 37 54 7d 82 e4 09 90 b7 c4 83 b9 cb 56 ea 47 0c a9 76 34 01 64 05 89 1d 90 25 01 5a bb 1e da 8a 7f 79 29 6f 10 e1 a7 dc bb fb 02 c8 b8 cd 5d 7e e0 30 6a 53 2f 8e 02 12 19 84 a1 a5 de 24 81 97 7c fb 4b ce a9 ad 9c 96 19 c8 38 4d f8 00 0c 3d fe cb 49 fc 71 9d 7f 83 aa 5b c8 39 73 1c f9 11 2f 0e 46 3a 01 6a 87 cf a2 05 7b 6e e8 00 32 c4 ff 64 1c 23 41 3c ac 54 ee 41 ce 69 c8 83 b3 8d 2f 09 Data Ascii: RIFFDWEBPVP8L7/mscm[HXq\|c[*m#JwE:urozm[JllXNHD<$A"Xk)yW7T}VGv4d%Zy)o]~0jS/$\|K8M=Iq[9s/F:j{n2d#A<TAi/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49786	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	509	OUT	GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10312 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 40 28 00 00 57 45 42 50 56 50 38 20 34 28 00 00 10 95 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 11 aa 9d d4 28 04 04 b4 b7 70 b6 e0 8f 7c 30 c0 de 07 cc 97 e2 bf 00 3e 59 67 80 e7 71 fe bd fb 19 c0 81 ea 01 fb 1d ec 01 fa dd e9 a3 ec 7d fb 81 e8 97 ff ff 59 0b ce 3f d5 3b 5a fe d3 f8 e1 e7 6f e2 bf 1c fd 3b f1 93 fb bf ff 1f f3 bf 0b 1f be f8 44 ea ff b3 3f 72 7f 8a 7d 59 fa a7 f7 2f d8 1f ed ff b9 5f 7b 3f 9c ff 0b e1 6f c7 ff e3 7d 40 bf 1d fe 3d fd 33 fb 07 ec 8f f6 ff da 0e 39 9d 5b cc 17 d4 7f 98 ff 73 fe f1 fe 2f fc e7 f6 ef dd 7f 65 5f da 3f 2f bf b7 7c 21 f5 df fa f7 e5 3f f7 7f b0 0f e3 1f cc 3f b4 ff 71 fd 95 fe fd ff e7 ea ff f3 9f e9 3c 74 7e d9 fe 9b fc c7 f9 2f 80 2f e4 7f d2 7f c8 ff 65 ff 4f ff a3 fd 77 ff ff b6 8f e5 7f Data Ascii: RIFF@(WEBPVP8 4(*((>AD(p\|0>Ygq}Y?;Zo;D?r}Y/_{?o}@=39[s/e_?/\|!??q<t~//eOw
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 8d 54 66 c8 0d d6 2d 5f 30 52 22 5b db a6 d4 92 85 46 ef 0e 48 b0 53 43 b6 f8 a6 1a 39 54 82 68 a3 be 17 d5 3f 90 85 77 15 50 0e 0f fa ac f7 07 ac 0c 1f 30 04 d2 da ae 25 6f f6 f3 11 ad d9 ae f5 37 06 2d 63 7f a9 4b 26 34 08 0a fc 52 d2 79 42 16 3c 78 f0 e8 d8 6f c7 f1 d2 de e9 c4 94 70 b7 3e 16 36 20 08 f0 a3 d9 8d cb b0 62 79 5b 36 23 b2 3a 66 df a4 16 bc 23 a9 d6 9c 8e bc c7 09 fa a5 7b cd f3 e3 29 1f 11 85 d4 b6 dc fb 10 61 5b b1 13 b7 9f 09 9c 31 93 a2 d4 7a a8 cf 26 dc 8d 24 31 0d f0 b1 c2 90 18 9f 5b 06 53 f8 02 b1 eb 03 8d e2 9c 76 8d a2 6a f7 1c 8d ff 5b 3a ae 39 6e 33 91 b7 08 1e 13 c2 29 69 69 22 96 4e 0e cb 13 2b 41 c5 fc cc d0 c6 aa cb 7f 47 28 07 ef f4 0f 8f 6e 4c 5a b1 2d d5 ea df 55 58 97 40 c9 61 b5 99 7e 09 f6 c3 23 9e e0 d4 29 b6 11 8a Data Ascii: Tf-_0R"[FHSC9Th?wP0%o7-cK&4RyB<xop>6 by[6#:f#{)a[1z&$1[Svj[:9n3)ii"N+AG(nLZ-UX@a~#)
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: a3 cc 72 ca a4 f3 ec 7f 9b 1b 7e eb 75 28 34 a9 d9 fd 64 bb 7f ac ad 2c d4 8e 79 27 9b 30 c5 83 31 fe 57 55 44 a3 ef 4e 7a dc 31 c3 fa 2c 74 d9 33 d8 b7 a6 87 c4 92 4e 0d c8 a2 34 ab 58 45 77 f4 9b 44 ed fc 86 65 79 56 ce 21 a8 33 c7 79 64 83 b8 91 f7 af 62 e0 f1 ec e9 a4 9b 4d 55 79 4b 01 0d da 56 7a 19 a1 33 99 a6 e4 d3 05 a1 09 4d b6 8d f8 a5 96 41 f3 70 cc 8e c4 ed 90 37 7e 13 a6 86 5f 6b a8 e5 4b be d1 c1 13 ea b5 6f 36 3a 4d ab de 80 4f c0 ef c0 ff 31 1b a9 d9 7b d1 d8 9d 79 97 68 3c 43 42 56 98 f5 1a 8a 44 e6 37 28 af 56 5d bf 2a bc ba dd 00 1d b2 6b b1 0d 31 b3 76 13 e8 cd b3 3c 1b 7f c2 5d 51 23 8d 03 8b c5 32 25 5b fa d9 0d 99 e9 27 bb c7 ec d6 18 53 19 0e 0e 5f 0d ae 23 b0 02 d9 81 98 8f 89 20 4e b2 36 eb 80 c4 b6 a2 f0 00 fc 7f 66 72 1b 67 11 Data Ascii: r~u(4d,y'01WUDNz1,t3N4XEwDeyV!3ydbMUyKVz3MAp7~_kKo6:MO1{yh<CBVD7(V]*k1v<]Q#2%['S_# N6frg
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 83 88 af bf 35 6f f9 37 cb 92 1c a8 ad 4f e1 a0 e0 b2 7f cf da fd f0 6a ed 57 97 a9 d3 88 42 d5 d1 7b a5 25 56 e8 13 b3 01 74 c1 54 47 20 e1 51 68 b9 98 c4 be da be a2 03 ef b2 b3 17 5e ab 78 12 5c b9 19 9d 78 57 e3 19 51 29 d6 60 25 24 fe 7f b0 2f 08 49 a2 6e 90 bd 8a a2 0e b5 41 a7 71 1d ef e7 c3 45 e7 e4 63 d2 3e 7a 5d 4d 3a 39 3e 90 dd 4c fa 63 37 97 a0 ad 34 48 96 7b ec 49 15 cb 73 c7 54 87 7b 49 03 84 8a ec 01 c3 f4 a6 6a 01 69 0a 0c ca cc 82 73 ef d8 58 da f0 87 73 41 33 58 3b 8c 3b 5d bd dd 95 75 41 56 64 9b 57 0a 00 c0 55 1e be f0 77 ca a0 4d 50 03 0f 06 bd d9 fe e9 c6 d9 d9 0b 68 e6 d9 9d 4c 0c eb 87 9a 83 f6 77 d7 df 21 8a 6f 5f 34 ff cb a5 91 08 66 61 d1 4f 76 e6 41 91 1d 2e 1f 06 8f 08 f6 9b ff 3d 83 ad 5a 3c a8 b9 21 ad e2 a2 da ce f1 9c ad Data Ascii: 5o7OjWB{%VtTG Qh^x\xWQ)`%$/InAqEc>z]M:9>Lc74H{IsT{IjisXsA3X;;]uAVdWUwMPhLw!o_4faOvA.=Z<!
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: bf 2b 35 f9 2f 51 43 2a 11 9c ab 5a d0 70 45 37 12 01 5d 4f 71 aa c8 b5 77 33 1e 9d 22 23 ad 02 15 de 1c 59 71 76 39 58 fd 66 c3 0c ec 11 ea 2a 76 e8 dc 12 eb b2 56 06 9b 90 b7 ca d3 67 ee 1f aa a6 a6 cf f4 46 89 9a 86 dd 70 10 0c ff 72 6c b2 72 31 bb 1d 44 2c 27 6c 84 7e 76 cd 8a 9f 3c d7 af ad 61 87 57 e0 ed 54 f9 38 91 4f 00 c1 ee 51 10 da 08 f6 a0 ed cc d1 e6 e8 e2 fd 0a 90 7e 35 3a 7c 0e f1 e2 38 1d 5e dd a6 0f 02 66 fe b8 bd a4 ae 87 ea b6 af e1 ad 66 98 f7 0a 1a e6 99 72 93 09 dc 8a e9 50 80 77 31 4d 9b 89 13 d8 16 ad 65 cf 53 e6 09 b4 38 ec 99 9d 4d c7 a2 4f 60 34 25 15 dc 59 a7 3c b7 b3 db c8 bd 39 39 f1 fe f7 c3 c7 f3 b0 75 0f f1 b9 5e c6 a5 3e d0 dd b8 17 4e e8 ea 8b 3e 9c a9 da 7e 2f f7 ea bd c1 50 22 08 c2 7f 14 a4 61 75 13 fa 58 b6 c2 12 8d Data Ascii: +5/QCZpE7]Oqw3"#Yqv9XfvVgFprlr1D,'l~v<aWT8OQ~5:\|8^ffrPw1MeS8MO`4%Y<99u^>N>~/P"auX
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: a9 c9 de f0 bd 0d 1a 4f 56 c7 68 a3 ec ed d7 78 d4 1e 8a 6f 8d 62 8c 6a ec 79 14 1c 1b a5 26 25 87 57 38 b0 4c 00 dc 8d 22 e8 89 94 84 56 5b 5f 36 79 28 12 b5 85 3a 0a f9 8b 9a f4 99 0c 21 9a 21 40 ed 93 5e 71 87 a6 21 6c 57 4a e0 1e 04 42 73 04 96 9d 2c 67 f7 67 e0 67 ad ff 8b 05 ca 87 f5 dc 0b 36 63 2f 9d 24 01 21 e5 b8 85 14 1e 8c bf dc 4f 71 f1 5e c3 c5 91 10 c5 6b c3 11 5c 01 a7 0c 84 27 db 55 95 e5 63 84 96 c5 bf 4c 6a f5 d9 83 4f ff 92 a4 d2 25 99 4d fe 74 d9 cf 20 c5 53 83 ee 60 ef 0a 7d 57 60 0b db 2a 1a 5f 84 ca a6 18 11 7e 98 32 5e 3e c1 ab 39 c0 81 17 a8 4a 7a 04 04 4c 13 c7 9c 53 03 b0 40 7d c3 cd 24 0b cb 04 fb f1 75 98 6a e0 24 1a 9b 3d 2e 00 0b 79 28 c3 73 63 80 4b 26 70 19 9e 29 43 0b 26 1f 90 54 72 c0 e0 6b 04 d7 e4 43 56 10 b5 e8 cf 3f Data Ascii: OVhxobjy&%W8L"V[_6y(:!!@^q!lWJBs,ggg6c/$!Oq^k\'UcLjO%Mt S`}W`*_~2^>9JzLS@}$uj$=.y(scK&p)C&TrkCV?
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 17 cc 7b 1f cd 47 58 9f 81 ea 81 ee 6e 7d 21 4d 77 ae 42 b2 98 5e d0 1b 4e 41 6d 4a ba 49 51 6d b9 6c e1 62 22 32 2a 64 d4 ca 53 c0 b9 59 c2 73 d5 a7 39 d7 16 50 9b 92 6e fb b7 d2 25 18 4a ee fe 05 6a da 9f 75 61 21 ad 42 ea 56 1c fd 0c 53 3a 29 19 ae d2 f7 ae ae 74 ce bd 46 cf 27 21 8d 4a 7e d8 ff ea 3c 40 7f 9e b2 cd 30 0e d0 72 d3 56 51 f5 d6 5e 29 bb 1e 35 e3 24 40 18 aa 65 21 63 f0 08 1b 81 3b 1f 4c e9 77 4a 94 7c 84 64 4f a8 4b 2e a8 c3 f7 6f 48 4a 26 8a dd ca 22 73 f5 f0 be 94 32 06 8f e5 c6 0d 7e 84 05 ba 58 60 e2 23 db 57 05 1b 6a 2b ac 58 4f 2e 38 ca 86 9b a4 63 b7 24 86 01 09 4e 8f 54 20 cc e4 ff e6 cf 7c c6 b7 e4 5f 0f 06 b5 a6 23 f9 12 f6 93 aa 86 39 c4 1f f6 0d 39 1d 39 b5 10 d3 83 ff 0a 60 3d d7 30 75 de e7 d8 76 6b 6e 82 22 78 77 f2 c5 03 Data Ascii: {GXn}!MwB^NAmJIQmlb"2*dSYs9Pn%Jjua!BVS:)tF'!J~<@0rVQ^)5$@e!c;LwJ\|dOK.oHJ&"s2~X`#Wj+XO.8c$NT \|_#999`=0uvkn"xw
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: f8 59 b1 c0 bd 88 84 3f 30 81 9b 21 b9 97 5e ce 17 56 b7 b1 b1 99 63 e1 90 a5 7b 26 57 c1 f2 68 f7 23 e9 38 f6 f3 63 7e 9a 04 a9 00 0d 07 ce e0 6a 8b 54 32 35 15 f8 48 3a 13 08 6f 33 81 96 1a 3c b7 8b 81 d6 de 1c f6 b6 db 40 4f 3e 4c f3 f1 20 34 42 77 ef a2 71 cc 39 11 d5 df dd 84 2f a2 c0 eb c4 d9 4f be fe 3f 79 48 a2 f9 e4 88 25 2d 63 47 8f 81 28 4e 44 5b 0c 93 a9 85 17 9b cf ae eb 73 4d d9 da 5f 7d df 8f ba c1 b3 97 a5 8e 50 ab db 98 09 70 dc a1 40 70 04 aa c4 7e 61 25 12 9c 8e e7 d5 4e ee a3 22 43 90 ea 22 3c ce 29 9d de 31 c6 d5 f3 ea d2 80 20 9e df 7a ed 7c e6 81 73 48 64 91 11 7f 0a f1 06 82 52 36 e0 06 33 73 de ee e1 1e 92 f4 41 4a 3d ab 94 ce 66 a1 0f fe 1a 18 03 6d d7 e6 ab e3 6e bc bb 89 8f 6d 4e 47 00 cd 79 f3 d7 f3 8f d7 97 e9 dd a7 36 e0 8c Data Ascii: Y?0!^Vc{&Wh#8c~jT25H:o3<@O>L 4Bwq9/O?yH%-cG(ND[sM_}Pp@p~a%N"C"<)1 z\|sHdR63sAJ=fmnmNGy6
2024-04-19 14:06:14 UTC	806	IN	Data Raw: be 8c 0b 55 89 49 1d 63 a0 f5 d9 46 9f 06 24 6f c4 9b bd 30 f3 07 f8 e7 d0 cb 32 27 20 c2 10 0a 55 bc f7 de ae d3 c0 1c 5e 1d 20 f4 40 73 0f a5 8c 73 3c b3 49 a7 79 a5 84 27 68 47 40 a0 86 13 45 d8 91 07 a2 7e b8 eb 5c 1f 55 93 43 02 34 8d 71 31 65 cf 98 46 c6 92 3d 1b b7 d3 32 ea f4 e9 35 36 67 21 cd 87 e2 c4 a4 f1 cc 7c 5a 14 4e 2c c6 5d a3 05 8f 71 b7 b0 e6 aa 46 9c 9e ea 09 3a 9a af 15 06 6f 01 94 54 37 d8 10 93 e3 2f ee 08 38 59 c4 ad f9 ee d3 33 b1 b6 de b2 53 36 06 11 43 59 60 ac 4a a0 68 3a 16 29 49 8e 92 34 ea e7 42 be d5 71 21 b3 3c a2 15 df 2a 85 65 e8 49 95 23 cd 1d de 32 d7 d3 b9 02 66 75 a0 f5 05 67 1a d5 85 a1 f5 2e 45 38 cb 3f e3 64 14 3b cb 76 77 df ff fb 65 c0 5b a7 22 d3 c8 b8 af b6 7c ef 8b 5d ef 8a 6c e9 b3 c6 bc 1a 35 06 43 ad d3 13 Data Ascii: UIcF$o02' U^ @ss<Iy'hG@E~\UC4q1eF=256g!\|ZN,]qF:oT7/8Y3S6CY`Jh:)I4Bq!<*eI#2fug.E8?d;vwe["\|]l5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49784	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	510	OUT	GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6842 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 b2 1a 00 00 57 45 42 50 56 50 38 20 a6 1a 00 00 90 6e 00 9d 01 2a 28 01 28 01 3e 3d 1c 8c 44 a2 21 a1 11 99 cc c4 20 03 c4 b4 b7 77 30 68 01 e8 a8 65 a0 f9 00 03 d0 03 a4 93 21 97 cb df e3 3b 3f fe b1 f8 f3 fb 8d eb 4f e2 7f 1a fd 43 fb 27 eb d7 f6 ef f8 9f ec 39 94 f4 af fb 3f 41 7f 8b 7d 80 fa 57 f6 3f d8 1f ec 7f b5 7f 79 7f 6e ff 45 e1 3f c2 5f e8 bf 25 3e 01 7f 18 fe 3f fc f3 f2 0f fb 77 ed 2f b9 7e cb ad 73 f6 2f d4 17 d3 5f 92 7f 5a fe f3 fb 41 fd af f7 5b d9 4b f6 bf cc ef 72 7e c6 ff 80 fc 80 fa 00 fe 2b fc 8b fb 47 f5 ff d9 cf ee 1f ff fe b1 ff 5b fd 3f c6 f3 ea 7f eb ff 62 fe 00 ff 8f ff 3b ff 2d fd fb fc b7 fc af f4 5f ff fe d9 ff 8d ff 57 fd ff fc 9f fe 9f f2 9e d9 7f 36 fe ef fe e7 fb e7 f9 df fc 1f de bf ff fe 02 ff 22 fe 75 fe Data Ascii: RIFFWEBPVP8 n*((>=D! w0he!;?OC'9?A}W?ynE?_%>?w/~s/_ZA[Kr~+G[?b;-_W6"u
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 8f 8b 8a ff eb 89 82 d5 8f b8 cd 57 aa 38 39 2d f7 4e 73 82 66 30 59 89 a0 c2 96 c2 25 5f 36 e7 b1 77 08 ef bc 32 5c f4 4b b7 82 39 68 5a af 86 b5 6c a9 2e 8f 25 53 05 78 98 9f 38 e2 87 7b 53 ff 52 09 9d 12 e5 3b d8 e8 10 f4 80 83 98 00 80 23 7a 93 7c 4b 52 cf 7c b1 49 f9 6c c5 5a ad 1a ef 81 1f f9 30 76 62 72 3d 1a 0b 4a ad 9b 6c 39 76 6e 7c db 93 b7 2c 1d 77 b8 26 7a 16 4e 6d f5 8a 3a 88 48 12 83 24 62 36 f7 7f 85 3c 13 b3 94 df fe 47 d7 00 4e 6e 4a 5e d7 75 3c 0f f0 b1 c4 5b 98 00 80 93 6b a0 70 36 22 ce a0 b1 3b e1 86 fa 09 b1 83 08 ca e1 b3 f3 0c 9c 48 fe b8 00 00 fe ff c1 6c 80 bf 97 78 b1 ad 22 28 c8 84 59 f3 a8 a5 5b c3 af 78 8c 59 4d 8a ac 1e 37 23 bf fc c2 51 28 ea af 84 15 21 c7 07 ff e2 cd 30 64 79 fd 1f d1 08 65 5c b2 24 bb f8 c9 b2 b4 8f af Data Ascii: W89-Nsf0Y%_6w2\K9hZl.%Sx8{SR;#z\|KR\|IlZ0vbr=Jl9vn\|,w&zNm:H$b6<GNnJ^u<[kp6";Hlx"(Y[xYM7#Q(!0dye\$
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 2d f6 9c f4 09 07 b0 88 91 a3 92 a1 23 00 3a ca 8b 94 67 20 43 41 79 68 71 03 6d 7b 3e 5a 21 86 f6 a2 1b a0 9f f9 a0 fc ab 9c be 80 62 08 e1 f7 f6 39 c2 ed cb 0e 45 03 41 b0 81 73 5d a5 13 c7 34 f8 1b c1 89 5c 76 7c 29 88 16 9a cf 3c 96 2f 55 65 15 3f 22 f6 bc bc f7 01 d5 df 8c 7a 0a 93 00 b2 3b b4 7d 2c a0 f0 85 27 ba ae 65 de 87 1e d5 13 dc 6b 5e d3 58 2b 60 30 d7 9a 5f c3 78 20 db dd 5a 35 a4 03 b2 1a e1 68 c9 67 7d a4 28 5c fc 7f f4 41 fc 2a 1a 16 2f 00 5f 83 5a d4 d3 06 30 8d 98 31 cf 79 3c ea 06 a1 d7 5a 13 55 88 ad 45 80 3e a5 e3 37 8b ac b7 5e 57 96 ff f9 da a6 4c 6d b6 11 d2 c9 3f f9 04 1e c3 3b 2c ac 8f 5f 8c df b7 ae 81 97 3c 91 15 54 94 d3 8c f0 8c 01 35 c2 59 9d 08 c3 c3 92 b1 8e b2 86 56 e8 be a5 df e1 5f 48 15 0e b4 39 dc 69 3f 5f 82 7b 04 Data Ascii: -#:g CAyhqm{>Z!b9EAs]4\v\|)</Ue?"z;},'ek^X+`0_x Z5hg}(\A*/_Z01y<ZUE>7^WLm?;,_<T5YV_H9i?_{
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 0d dc 78 0b 83 fc 35 63 08 a8 a5 b1 7d a9 f8 6c 1c bf c1 c9 d3 75 14 80 fd 22 c8 fd 07 5d 5c 84 45 7f d2 76 eb 1c 24 3d 12 01 27 9f 45 cc f7 ff 51 77 69 05 bf d2 d6 e5 24 71 da b3 ed 43 37 24 03 e7 c0 54 9d a6 36 c3 cd ff ec a7 ff f8 ca b5 f0 61 95 5f 9e c7 b6 80 0e ea c5 7c 67 a9 c7 9d 5f 8e c6 51 79 84 54 45 cc e5 b4 77 e5 0c 7f f0 06 4b e4 0a fa b2 e4 87 55 07 9e f0 f3 c6 72 44 1d d1 d0 86 6d 9f 45 2d de 18 17 ce 76 db 2e db a8 6b aa 55 56 dd 76 cb c9 4a 77 5c 84 0c b0 69 c5 7a 61 71 62 48 74 04 15 45 c9 4f f0 8d 30 1e 72 6f 4e 02 a5 32 fa fb 01 5f dc 97 9c 0c 70 3a ca 8f dd e8 2c 86 cf d5 cd 44 a3 09 42 c9 35 54 12 71 59 e4 5b 1f 81 b3 64 3a 2a 1d cd 89 94 56 20 4e 91 c7 0e 24 9d 32 78 c2 3e b1 bd a1 a2 99 4b 4b 96 5f 42 73 72 ad 5b ee 14 41 90 0c 42 Data Ascii: x5c}lu"]\Ev$='EQwi$qC7$T6a_\|g_QyTEwKUrDmE-v.kUVvJw\izaqbHtEO0roN2_p:,DB5TqY[d:*V N$2x>KK_Bsr[AB
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 57 36 49 d0 7e 64 00 8b 84 0b e3 4a 83 31 e9 78 13 c5 1c 1b 38 f7 5b 42 c5 06 20 3f 0d ed b6 32 52 a7 4c 92 45 0b 09 db 21 6a 8f 1f 33 ae af 15 b4 9e ac b6 ca 19 16 d4 fd b3 be 99 4e 18 95 87 f8 13 a9 e4 14 38 b6 e3 bf fa e9 d4 c8 a3 04 c0 e3 b0 22 0d bd 7c 86 2c 69 b5 e4 fd 38 af 70 6f c5 48 f3 e2 4e 30 a9 61 bf c2 07 4c 0d f5 a3 d4 9c 7f 35 f9 99 ad 31 23 05 de 0f 4f 05 70 f7 ba aa a7 57 18 34 f2 b0 5f d9 1f 9a f8 25 06 70 1f 16 1b 73 6f 14 65 08 fd 79 dc e8 58 c3 1e 84 6c f1 9e c7 ca be 27 b1 9d ef c1 ae 12 dd e4 63 4d 7a 08 32 0e ea ec 65 48 c9 53 10 38 75 a2 86 7e 28 43 34 c3 2e 64 fd 17 6c 64 16 fb 22 ac bf 1c 8d e3 60 11 bf cb 44 6a f1 75 02 88 99 b4 50 1d 50 63 38 c6 31 5e 4f ca 3b ec 17 c6 8c a4 67 8f 1f c9 09 7d 0d e4 17 62 d1 fd 8d ed 19 12 46 Data Ascii: W6I~dJ1x8[B ?2RLE!j3N8"\|,i8poHN0aL51#OpW4_%psoeyXl'cMz2eHS8u~(C4.dld"`DjuPPc81^O;g}bF
2024-04-19 14:06:14 UTC	1100	IN	Data Raw: d7 8e b4 96 52 4d 0c 18 80 39 33 02 db 32 bd 25 0b 8e b9 d7 31 d0 f5 d6 16 fd 79 6f a3 11 b5 ed 5b b9 24 a1 ef 51 a5 3f f6 ab 8d e2 78 db fa 21 ec e1 3c 0d 00 26 a3 0f e8 ab 09 a6 19 d9 34 f1 8e ab aa 52 cd e6 e1 6e 89 e2 b2 66 16 89 ce 58 1c d7 43 c7 47 7f c3 16 ef 81 32 e4 be 93 e9 83 d2 0d 56 ed c9 f6 1d 4a 38 d4 c7 b1 7b 14 7e 96 c2 1e cd 7e 4d a9 68 c6 68 ae af 6b 47 bf 0a 66 44 69 32 49 34 93 aa e4 b9 f3 85 d9 0b 45 bc f8 cc 4b 18 87 cb 20 6a 29 4a 14 1f e3 1f 4c c7 b5 cb f0 0d c4 ef 51 e7 82 d8 07 65 c1 17 b6 6a 87 98 6e f7 74 c3 5a e4 b7 09 3d 03 89 3f 3f 39 b1 48 2d 10 c4 80 dc a2 ba b9 be c1 64 37 a3 a0 43 64 1d 7e 57 5d 37 a2 ce 66 a6 7c 10 1b 1e 3b 81 e4 e5 05 f0 ab 31 98 d0 bd 24 2a 39 79 ff 7b dc 2a 17 d3 0e 2f d7 c7 c0 31 f7 c2 8a a5 a6 55 Data Ascii: RM932%1yo[$Q?x!<&4RnfXCG2VJ8{~~MhhkGfDi2I4EK j)JLQejntZ=??9H-d7Cd~W]7f\|;1$9y{/1U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49783	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	510	OUT	GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13388 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 44 34 00 00 57 45 42 50 56 50 38 20 38 34 00 00 d0 a2 00 9d 01 2a 28 01 28 01 3e 45 20 8d 44 a2 a2 21 12 1a 0d a4 28 04 44 b3 b7 70 b9 f8 88 57 cd 05 bd bb c5 cf 87 31 56 eb a7 f2 7f 74 de ec fd 40 79 80 7e 9f fe 9c 75 80 fe 67 e8 03 f9 17 f6 7f d8 cf 64 df f5 5f e9 3d c4 7e b3 7f 8e f7 00 fe 4d fe 1b ac 03 f5 77 d8 17 f9 97 f7 af 55 9f f6 ff b8 5f 04 9f b7 3f b7 ff 00 ff b2 5f fb 7a c0 3a 8f fa 35 fc fb f1 6b cc a7 e5 5f ce ff 19 3f bb ff d5 f5 7f f1 1f 92 7e 9d fd 97 f5 c3 fb 6f fc 5f f4 bf 0d 5f c3 f8 49 e5 ff f0 bf 99 7e e6 ff 0b fa 83 f4 af ec bf df ff bc ff 65 ff e1 fe af ef 37 ef bf e0 ff 28 bc e1 f8 27 fb 9f e5 17 f6 bf 90 2f c7 ff 8b ff 56 fe cb fb 0d fd c3 f6 bf dc 97 fa 1e d9 9d 3f fd 2f f8 0f 50 5f 4c be 55 fd eb fb 6f f9 6f f7 5f Data Ascii: RIFFD4WEBPVP8 84*((>E D!(DpW1Vt@y~ugd_=~MwU_?_z:5k_?~o__I~e7('/V?/P_LUoo_
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 83 1a 6f f6 df 24 a0 3b 6d 67 23 02 5f ed be 49 38 a6 39 0e 2a 92 ed 60 bd 74 35 f1 1f ff f4 42 f2 76 fb 08 b6 c6 ed 2d fd 38 48 93 f1 0d 93 7a 9c 2e 59 f1 37 e3 fe 3d 94 ba 20 b9 9c 2b 77 17 2a 16 d1 0e 14 c5 8f 4e c1 57 73 bc 0a 91 c0 39 f9 6b 04 4f 32 71 a3 14 c5 1f d8 a7 70 7c 9d 4b da f2 66 0d db 07 b2 0d fb f2 f6 7d a6 1e 1a df 5c cf b0 c4 d2 ee 74 7a bf 69 16 e4 04 c6 fb 71 da 7c 0b f5 61 a6 30 60 2f 4c 64 8e 76 89 a4 58 be a4 20 53 d9 d0 64 8b 92 c7 16 fa af 20 31 22 5d a4 39 a6 f0 1d ed 8e f7 43 4d 55 b4 3d 64 41 27 88 09 e7 cd 70 46 56 f3 8f 50 5a 3d 04 b2 70 8d 69 38 1e 22 2b ce 08 66 6c 58 3b 1b 0d 75 d5 b6 60 63 37 ee 85 b3 c7 1e 5c 44 1d 2f bd 37 ed 8f 30 3c 85 b1 9e 30 71 7f 05 fd 1f a0 c4 83 93 f6 57 ba 9d 5b 8f 1b d6 d8 4f d1 a4 74 18 af Data Ascii: o$;mg#_I89`t5Bv-8Hz.Y7= +wNWs9kO2qp\|Kf}\tziq\|a0`/LdvX Sd 1"]9CMU=dA'pFVPZ=pi8"+flX;u`c7\D/70<0qW[Ot
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 5f be 57 8b 7b df e4 0f b8 a0 df ef f4 f9 08 80 80 1d 20 84 21 b6 d0 40 25 d5 0f 8f 98 3e 63 77 05 49 70 c1 f1 84 07 7a 32 b0 06 dd 6e 04 35 b4 b9 ee fa 44 c2 91 ca 00 b9 2f d1 b7 5d 91 06 15 68 09 73 fc e5 11 63 b7 5d 0f 17 6f 50 08 a6 05 e3 16 36 56 fb dd 73 02 9c 23 c4 3c f3 a7 5a 64 17 c8 33 6c 87 72 bf d2 2f 29 1a 7c 7c 76 de 54 1c af 7f 8a a0 ea c2 bc dc c2 8f 62 aa f3 3b a6 96 4c 44 57 1f 2d 06 b8 8d 41 74 6a 8d 26 ff 51 d1 20 11 e7 af 6e 58 9a 41 07 83 1b 8e 3c f0 38 4c b5 33 b7 07 8e 6d be 0c 49 72 b6 1d cd 95 85 1f e9 82 e0 91 25 11 77 c1 fc 43 93 ad f4 22 82 91 67 95 06 f3 d3 4f 1c 18 a3 94 65 d8 cb a6 ab 97 cb b2 9b ef 31 ca 51 44 8b 4e 4f 60 d1 e1 89 33 33 17 e6 0b 6e a9 b3 39 89 38 a9 a8 e8 aa 24 dd 52 20 37 0a 6d 90 ce f4 39 17 81 be b4 9f Data Ascii: _W{ !@%>cwIpz2n5D/]hsc]oP6Vs#<Zd3lr/)\|\|vTb;LDW-Atj&Q nXA<8L3mIr%wC"gOe1QDNO`33n98$R 7m9
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 86 91 53 a7 44 66 f2 ad a1 df 18 9b 67 6c 39 5d e4 36 93 93 db c6 bf 3b 8e ac 0e 7c 74 32 ec 39 c6 2d ea 9a ee 28 fd 3d f9 cb d5 86 b3 71 c6 1b f6 42 ad ac bc 08 18 48 a0 3f 2c 61 4a 09 f8 78 6d c9 7a 19 2b 7c 9d 02 64 dc a5 de 92 cd 64 f0 87 4f 5a 49 e8 ea 1c f3 75 94 ea b3 64 cc 7e 74 65 0b 73 be 8c cb ba 6e 5f 61 57 cf 51 39 f3 b8 3a 29 bd d5 25 2e 59 8b 79 a1 19 0c 68 5e 98 a0 fe 5b 32 ff 64 21 0a 1b 1b a9 a2 f3 7d 23 6c 11 6c fd a6 e6 22 81 f9 e2 1d 4f e8 b6 11 2b 76 6d 05 66 11 6c 9c aa fb f1 80 e6 85 84 48 a7 ef be f7 75 01 f6 ed 7d 75 ff 55 a6 1c 34 de 3e 1e 87 1a f2 23 3f ac 3c 85 a3 33 a1 3f 6b 09 b1 64 41 82 e1 db be 8d 15 23 cb 99 47 19 4a 49 5f e1 06 ed ac 4a 40 7a ef ea 75 6f c8 ea f4 23 40 8c 13 fe df 46 f7 fa 2f 60 f2 b3 41 05 1e 00 84 40 Data Ascii: SDfgl9]6;\|t29-(=qBH?,aJxmz+\|ddOZIud~tesn_aWQ9:)%.Yyh^[2d!}#ll"O+vmflHu}uU4>#?<3?kdA#GJI_J@zuo#@F/`A@
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: f5 0f 7c 8e 3a 96 af a7 b8 9d e5 77 c8 c0 95 79 d4 41 4a f2 c3 b4 ad 7a 88 55 61 92 c6 70 97 4e f5 4a ed ff 43 70 fa 50 cb 41 02 42 2b d6 02 41 1b 58 61 9e e2 23 f8 56 20 40 8f 94 bc 56 30 7f 44 50 4a d5 7e be 18 3b 6b ba 94 17 92 73 d6 62 c0 d7 84 e6 1c 37 ab 72 ba e4 90 fa 17 22 f1 97 60 9c f9 f7 9f ee aa 3e ac 5a 92 26 0b f3 e9 43 85 93 6b 8a 81 47 50 2a 86 d4 75 a6 36 fb eb 75 97 c2 de 85 22 ee 8a ac f8 57 49 d1 47 16 85 ab be 7e 79 d2 97 94 4d 0b 1d d8 1d eb 0e 36 54 85 6b d5 46 03 cc 14 24 05 08 9a 0a 1c e6 65 c8 d5 26 c0 11 c7 a5 27 66 c0 57 96 27 d3 87 50 df a1 2f f7 e6 04 9b 7f 7a 24 5d b6 61 fc bf 8e f8 53 f3 67 cf e4 e6 f8 45 4f 47 70 77 dd ed 90 1b f0 2f 52 99 c7 8d 68 cf 5d a3 28 e3 8f f8 af 0f e0 af f4 be 44 94 3f 67 c8 d2 8b d3 24 dd 22 71 Data Ascii: \|:wyAJzUapNJCpPAB+AXa#V @V0DPJ~;ksb7r"`>Z&CkGP*u6u"WIG~yM6TkF$e&'fW'P/z$]aSgEOGpw/Rh](D?g$"q
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: dc 31 c1 f7 1b 4b 1e 78 38 60 f6 24 86 ad ef c5 be 4b ea f9 1d 92 22 14 d5 4f f2 66 c5 a2 bd 30 69 9e aa 06 c3 04 ca 1a 91 d2 8e e1 25 a1 28 28 3a 5b 27 fd 0f 79 3d 14 57 83 41 5b 2a 64 e8 71 ee 09 3c f7 6f d8 d1 30 5b f2 dc 04 32 31 84 0b f5 b3 65 b7 c7 2b ff 13 34 ae a0 e9 3f b2 1a b7 a6 de e8 2e 56 53 34 9f 1e c6 78 9f a1 e0 d2 8b d1 fa 82 ce 8d 37 9d eb 2b 03 86 f6 a1 ff 26 3c 5d ec 25 4b 65 99 41 cd cc e0 71 93 92 3e e0 66 ec 53 98 b9 62 3e 58 b2 13 2e d7 95 f3 a9 9a c6 42 06 c9 df 85 ce f7 68 46 4f 11 26 78 4e 73 fe 44 51 55 5a 5b 82 2c a1 17 95 4a 55 e2 d4 4b 00 10 ea e1 a3 4e d7 fe 93 e5 36 6c 76 72 78 a6 98 bf 2c cb 10 56 f8 9c 6a 06 1a b8 11 83 95 73 0d da d7 e9 6d b7 70 3e b4 f2 cc 85 45 c4 19 cd 79 a6 d2 d2 63 e6 b7 5b d0 f1 a1 da fc e5 1a f7 Data Ascii: 1Kx8`$K"Of0i%((:['y=WA[*dq<o0[21e+4?.VS4x7+&<]%KeAq>fSb>X.BhFO&xNsDQUZ[,JUKN6lvrx,Vjsmp>Eyc[
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: fb 67 ce e7 d3 63 db 7e 16 0c 13 bf 4f c4 f1 9e 2b fd 7b 80 b3 39 c1 c2 e8 e8 32 58 f6 de c3 1d ba 32 f6 90 7d 14 26 a1 7b b5 b9 4a 49 97 b1 f8 f6 51 d9 52 e4 30 a2 6a 58 fc 9b e2 74 ff 40 a8 95 3f cb 84 a2 8a 56 70 d7 82 a9 36 b6 f0 45 15 7c ed 86 15 d1 7f bb e0 92 bd 30 11 48 cf e3 64 66 8b 86 df 80 bd 35 f0 6e b5 bc 08 d3 3c 0d 4e bd f7 e2 9d c9 b9 ef f6 fe 64 7c 52 22 4a 68 3d be 61 5d 56 0f d0 d0 b8 c3 0a 56 a9 61 ba cb 45 49 a8 1e 4d b2 f4 42 70 df a3 47 0b 2a d6 a7 e7 88 76 82 bc 20 56 2c 0b d4 b2 82 43 9d 56 e7 35 c0 a8 60 89 20 1b 4c 1c 0d 96 b2 ae 26 66 fb e9 d8 e7 49 ba 55 14 53 b2 c8 d2 46 c3 aa 9d 97 95 b2 c8 9e 52 b9 f1 af 4b 15 23 b3 9f 46 59 40 ef 72 fc 8e c2 ad 6e 71 68 66 bd bc 20 72 58 93 99 52 be 48 93 4b f8 d5 3b f3 2f f2 68 1b f5 60 Data Ascii: gc~O+{92X2}&{JIQR0jXt@?Vp6E\|0Hdf5n<Nd\|R"Jh=a]VVaEIMBpG*v V,CV5` L&fIUSFRK#FY@rnqhf rXRHK;/h`
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: a0 22 c3 51 6d e0 1d 59 92 c4 09 27 0b 60 03 b8 bc fc e0 a5 3f 20 0e 19 f3 74 55 08 ed 1f 7f 9d 8a e5 c8 11 ef d5 e9 41 b5 7b a5 49 1c 4b 84 63 2f 90 b5 85 6a 01 ec 68 a7 99 d9 9c 72 3f d8 3f f6 07 ea 48 7f 5d 9a 25 f9 12 0f dd ab a5 4e 14 da e3 be 54 02 34 e5 66 54 e2 65 e4 eb 00 c8 7e e9 d8 da 93 53 fb f3 6d ab 1c 6a 73 16 3a 7f 2b 22 e5 39 f9 21 8e 4c b4 87 2b c5 34 67 0e 28 6f 12 02 32 62 28 05 b9 c5 a4 83 a1 40 29 e3 04 24 2e 36 c7 79 36 86 65 66 2f 35 58 e1 94 bc 65 d5 e4 44 53 b6 ea c3 a6 df 22 2e 71 d8 53 8b cd e9 f8 7f 33 75 60 20 5e 5e 7d 3b 5b 7f 83 09 31 bf f0 ce 65 6d 10 54 2b dd 7f 13 ef 88 37 6c c8 06 7b b8 83 63 47 6e 08 76 a7 22 c9 34 97 07 cc c7 7e ef f6 f0 71 a5 2f 47 7e 80 df 59 7b 9b 31 8e dd 31 92 2c d4 cf b5 76 71 de 08 2c 3e a0 53 Data Ascii: "QmY'`? tUA{IKc/jhr??H]%NT4fTe~Smjs:+"9!L+4g(o2b(@)$.6y6ef/5XeDS".qS3u` ^^};[1emT+7l{cGnv"4~q/G~Y{11,vq,>S
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 31 5f 00 d8 9c 17 42 c5 c4 b2 09 0b 24 17 8f c5 ac c4 e2 99 29 fd 12 7e 92 ce 09 1e c6 44 4b 74 c9 fd 40 3c 69 bd c8 22 1c 2f 05 9c 3a b8 e7 59 ef 4d 24 d0 e6 a5 6f 72 5b ac 7b a8 bb 64 af e4 3f c8 f6 08 f5 17 90 61 92 58 73 30 8e c0 4f 04 9c 9e bc f0 d0 52 a9 e3 d7 92 7e fd f0 c3 b6 a2 98 29 77 49 0f 79 52 a4 35 bc 25 14 e4 a2 a7 fe 89 03 d3 68 69 e8 f9 19 26 a2 26 6a 59 cc 4a a5 af ce 72 e5 cd 84 cb ff 3a be 51 2a b9 2d 02 29 2d 54 1a 72 86 f4 04 2c 12 1a 79 0c c9 c1 1e 33 21 4c 77 0e 4a f2 dd 81 34 e7 d1 6d ae c1 20 73 16 a6 dd ca 91 5f 21 c6 98 77 6e 76 1e 59 75 3f c4 e1 fd e0 03 54 c2 7c 8a fe 96 92 68 70 1e e8 5c 65 0e 25 e2 c5 fd 2d 89 ea c9 e5 89 c0 35 a6 26 c6 b6 b7 e6 d6 6e ac 05 24 1c 51 81 05 9a c9 d8 ab 25 4a 7d 9f 56 a6 6a ab ce 89 20 2e c7 Data Ascii: 1_B$)~DKt@<i"/:YM$or[{d?aXs0OR~)wIyR5%hi&&jYJr:Q*-)-Tr,y3!LwJ4m s_!wnvYu?T\|hp\e%-5&n$Q%J}Vj .
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: e5 38 99 89 88 73 80 4f c6 fb 8a 13 00 37 f7 0a 91 9b b3 ca e8 05 a3 ef dd dd ad cc 0a 12 73 14 65 a5 51 f5 5b 1b bf 26 97 61 88 b6 72 8f 3f a2 e7 38 1d 65 e4 17 35 86 91 67 50 ba 3a 4b 50 92 b8 c6 ac 41 0e 1e a4 c8 24 47 91 0e cb a2 e0 43 28 83 f7 dc 4d 56 e5 5a a2 94 96 c3 93 e6 e0 1c 37 4d d0 bc 04 9f e6 6d 0d 7d e0 aa b1 a3 70 31 dd 3e 21 d1 72 9c 2d 3a 77 a4 5b c7 7b 40 86 13 da 07 55 cd b7 d8 eb 6f e8 f4 dd e9 7a bb 81 9b ae 3e bc a7 37 24 5a 5e 51 3b f0 69 78 bd 23 58 25 57 33 90 77 e9 37 9e e8 a1 93 d0 89 a7 21 1e 71 de 8e 54 25 33 97 d5 d2 8c c7 e8 ff 3c 9d 1c 3a 4e f3 15 18 50 e8 02 9b b7 c1 10 86 ae 00 5b 51 f6 9f 8d 6a 9e c4 a4 dc df 5f 2b c8 2e e9 9f 65 6d 01 bd eb db 4c 65 8e 9c a1 19 c1 56 cb de a8 70 f7 ac 18 21 1b d1 99 53 af 79 10 37 9f Data Ascii: 8sO7seQ[&ar?8e5gP:KPA$GC(MVZ7Mm}p1>!r-:w[{@Uoz>7$Z^Q;ix#X%W3w7!qT%3<:NP[Qj_+.emLeVp!Sy7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49787	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	509	OUT	GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33456 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 a8 82 00 00 57 45 42 50 56 50 38 4c 9b 82 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 74 72 cd 53 1e f7 e4 1f 70 f7 f4 5e 08 11 fd 9f 00 db ee 2e db bd 3b b9 bb 6d bb bb 1f b7 bd f2 ca 93 bf ba 2c b5 d5 5e 3c ed b6 8f 23 4a 2a a9 85 3d b9 db fb 3d b5 7f 6d db 6c 26 4c cf f3 08 6a 75 41 02 3c 24 11 49 0a 40 1f 43 14 9b d1 71 1c cd 90 14 b4 d0 ad 3a ea 50 55 92 f0 3d 3e 24 a5 04 64 51 75 64 62 29 01 4c 07 49 18 d3 7a ba 93 40 36 46 55 f5 2d 69 0a 59 a9 ea f2 62 f0 3d 02 d8 92 c8 2f 45 04 a9 a2 d6 fa 90 c2 e6 42 d2 5f 76 c6 04 91 94 00 49 3e aa 22 25 7c 47 07 e2 1f 24 71 48 30 76 06 70 1d 23 d2 98 77 ba 15 08 80 a7 31 08 d2 06 50 74 de f7 92 a4 1d 21 dd fa 09 a2 73 ef 0f 48 92 f3 65 87 02 92 44 4b 28 40 02 49 b2 ef d5 77 82 ad 4b d2 b5 39 42 ce f3 bd Data Ascii: RIFFWEBPVP8L/IM@lHtrSp^.;m,^<#J*==ml&LjuA<$I@Cq:PU=>$dQudb)LIz@6FU-iYb=/EB_vI>"%\|G$qH0vp#w1Pt!sHeDK(@IwK9B
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 97 5b f8 5a 3b 0b 04 1e d1 d0 9c 36 a7 63 fd 00 70 bf 10 ec 3c 77 0a 02 8f 80 d6 58 3c 8c 71 06 70 6e a1 87 1e da 46 df ea 21 64 92 49 26 05 69 e7 81 70 19 00 e8 18 03 80 de 42 8b 75 8e be da ba ea 5a 00 00 5c d2 f9 6a 74 6c ac e3 1c 02 de 97 cf e5 6d 79 5b ab 3d 6c 3e 3b 3b a1 39 0d 97 26 00 86 4b 00 1a 7c 7d 89 f3 7c 71 cb e7 7a dc 37 00 04 4e 4e 00 02 3b c0 04 7c 0e 2c 9e 01 a4 cf d2 8d 74 2b 3d 0a d6 90 40 a4 90 90 e3 bf 76 d9 7a 74 0a 70 f9 e8 f3 5f 1f 11 53 c4 14 31 45 4c d9 f4 cf 94 4d 11 93 7d 3c 01 2c b1 2c 00 68 f0 eb d1 4c 6c 1e 60 a7 09 b0 c4 12 04 d0 5c 03 18 36 6c 58 b7 31 eb d6 ad 0f 00 03 10 c0 e7 3e 8e 3f 19 43 b7 6a cd 9a 6d 0c 60 d5 61 bb 03 f6 0b 4c 00 9c 01 e7 c4 7f 5c 6a 26 00 c0 8f 4b e5 e4 9c 50 8e 00 4c 07 18 0e e3 61 3f 40 7d 02 Data Ascii: [Z;6cp<wX<qpnF!dI&ipBuZ\jtlmy[=l>;;9&K\|}\|qz7NN;\|,t+=@vztp_S1ELM}<,,hLl`\6lX1>?Cjm`aL\j&KPLa?@}
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: b6 25 49 42 92 f3 b4 56 9d ff 8c 74 18 3a 85 ba d6 77 16 d3 92 24 c9 92 14 a9 45 71 5e 8e ce 27 ec 33 3d 26 80 ce b6 6d 6a e3 ea 1d 90 21 b6 cc 14 66 66 a6 3e 39 f4 07 4f 8b fd e9 c3 cc cc 6c 7b 49 66 ad d9 82 29 64 cd ee 64 e5 3e 22 26 e0 ff eb ff a1 0e 28 96 4a 77 42 85 74 a9 53 02 25 e9 4a 27 25 2a 75 4a 4a 77 91 e0 2e a4 53 81 4a 95 c2 51 4c 0a a9 54 2a 44 a9 22 00 01 09 00 ca 16 83 25 80 24 50 2a d5 40 a7 04 ba 98 a2 fb 54 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d a8 54 29 95 4a 17 4b a5 bb 90 02 fa 44 4a 1d a8 54 ba 13 aa 14 a2 a4 44 1d 25 92 44 85 54 aa 40 a7 a8 54 54 50 a9 53 28 29 a5 4e a5 22 91 4a a5 4e a1 54 71 c1 77 01 25 2a 95 4a d5 38 8d 19 e9 8a f5 e6 74 a4 d8 60 b5 53 8d 84 ac 0b 3a 3a aa 91 b9 05 41 e5 dc c2 a6 52 54 ab 18 29 aa 29 57 77 Data Ascii: %IBVt:w$Eq^'3=&mj!ff>9Ol{If)dd>"&(JwBtS%J'%uJJw.SJQLTD"%$P@TTDTDT)JKDJTD%DT@TTPS()N"JNTqw%*J8t`S::ART))Ww
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 21 04 44 62 15 0a 83 58 a0 58 96 50 21 70 a9 04 a8 14 c5 42 92 65 21 87 42 55 e3 0d d8 bd 94 69 09 dc 52 c6 64 ca 0b 69 74 4d a6 b3 9d 0e 4d 27 94 53 b6 29 55 ec 96 ed 76 ea 86 2b ec 74 ca 54 d0 75 04 ad 10 da e7 dc a8 52 8d 72 14 6f 48 e9 ea 3e d3 a5 bb dc 45 70 4b 0a c1 75 4a 8a 52 d4 c5 1a e9 1a 52 6e 47 8a ae 84 d6 82 94 3a d5 2d 57 13 46 e3 c8 e9 c8 94 4a d7 29 33 a5 a4 4e 39 37 4a ba 16 bc 82 14 4a 5a ab 6e 94 64 64 de a6 9a 8c 9c 73 50 2b a4 6e 9c 1b 2a 6d e4 9c 92 4d 06 d9 5b d6 94 ba e4 ca 39 51 da 06 78 81 a1 9c bb a8 c0 19 f0 5a c4 b9 c3 55 b7 98 f1 c6 ab 06 b4 5b 16 21 56 ad 45 3b 77 aa 52 75 bd 8c aa 44 8d 2b a5 18 46 2a 46 60 90 99 31 08 99 50 86 dc 21 ad 22 62 2c 86 c2 d5 46 67 21 69 4b 05 96 55 95 f1 66 07 0c 6e 23 e7 f1 f2 5a 8a 33 56 a9 Data Ascii: !DbXXP!pBe!BUiRditMM'S)Uv+tTuRroH>EpKuJRRnG:-WFJ)3N97JJZnddsP+nmM[9QxZU[!VE;wRuD+FF`1P!"b,Fg!iKUfn#Z3V
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: e7 a9 b5 6b 82 ce 37 be 6e 54 d3 bd aa bc f7 e9 cc 49 e0 1b b8 89 e5 3c 85 bd 28 a9 db 59 4f 74 7a 66 29 4f dc 4e 52 53 2f ce e9 8b 19 c6 8a aa 43 96 50 b7 8a a9 09 b8 8a 64 12 e3 19 57 c2 95 4b 46 ab 4f 9d a5 62 15 bd 29 13 96 d3 42 02 a5 c9 2d 46 aa c4 b5 4b 25 04 3b 6b 0a 39 76 3a a3 1a 15 0b d9 99 c8 62 f3 b2 82 07 ca 95 13 4b c8 42 d5 2d a9 cf 9b e5 ad 60 79 63 8c 83 96 34 60 59 36 ad 25 96 31 d1 aa 55 08 45 ab 40 38 99 95 60 aa bc 20 18 06 b1 a0 6a c6 92 19 98 ad 24 58 82 d9 f4 28 92 55 19 19 75 b5 a1 a1 0a e7 8b 62 2d 8d aa 8c ba 62 28 0a 5d 23 18 d2 d2 24 a7 47 49 14 bc 0b 8c b9 60 aa d2 40 22 15 53 90 02 ec 56 75 d3 51 54 63 3a 64 2c 06 b7 5c 13 8a f4 b0 35 34 5d 63 b4 a4 08 ea 94 8c 19 20 2d 82 36 95 6a 84 6e 54 a9 14 d5 8e 4c 25 4a 9b 5b 6f 8a Data Ascii: k7nTI<(YOtzf)ONRS/CPdWKFOb)B-FK%;k9v:bKB-`yc4`Y6%1UE@8` j$X(Uub-b(]#$GI`@"SVuQTc:d,\54]c -6jnTL%J[o
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 94 5d 64 4a 09 2e b6 54 05 c2 ae 41 01 5a 1f 97 52 12 09 89 70 d2 9b 5e a1 e1 3d 40 22 50 d0 a1 b8 66 28 11 22 8c 30 59 2b b0 91 02 9c c2 d0 92 81 17 e0 19 b3 63 4c b7 b2 96 4a 41 38 de 43 e9 3c 4a 00 42 4c 78 69 16 51 44 51 e9 15 b3 38 45 10 5e 47 92 8e 96 ce a2 8a 14 42 f0 1e 08 95 22 c1 72 da 00 8e 51 54 a2 0a 2c 81 cd 84 c8 2a a6 22 59 88 61 a6 2b 13 b6 2a b4 6d 64 50 a5 32 dd 12 32 28 5a db 18 51 c1 a7 46 c6 32 ce 6c 6b 54 00 52 21 a1 a0 76 41 5d 4a d2 e5 5c a9 d4 cd 32 6f c1 c0 8e f6 b6 a2 07 e9 d6 6b 71 0a 8d 65 5b f6 ca 34 48 ed c5 b9 f7 81 37 08 0d 73 45 96 9a d2 e7 7a 7b a3 9f ff 76 5d fe 97 dd b2 39 ec 8e 49 2c 41 33 2d 44 19 b1 aa 42 43 bc f0 9a ea 24 54 11 19 9f fa cf 37 72 6a b6 02 20 1e 5d e2 df bf ba 60 0b 8e 09 48 60 b4 a5 24 0b 20 65 56 Data Ascii: ]dJ.TAZRp^=@"Pf("0Y+cLJA8C<JBLxiQDQ8E^GB"rQT,"Ya+mdP22(ZQF2lkTR!vA]J\2okqe[4H7sEz{v]9I,A3-DBC$T7rj ]`H`$ eV
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 35 8d 6b 79 bc c5 e7 6f d8 d3 fb 72 56 cf ed 92 6d 9e 1c d8 36 2e cd b3 37 9c 0f ae 7f 3e b1 6b 8f 1f f1 94 d0 f3 a6 08 3c f1 c9 ff 7e 68 c3 5c d8 fd 74 e7 c6 bf 9e b8 fa ed 3b 97 74 fa f4 0f ed 3f ef 23 07 5a d7 55 3b fd 61 11 26 9e 47 6e c9 62 c0 fa 6c 51 c1 d4 94 a5 5b 78 2b 99 72 1f 8b 2c a6 66 33 ac f1 14 a5 7e 4a 6c 2e c6 f3 61 b6 da 18 ef 6a e6 55 48 89 ca b9 40 18 e9 ba 45 75 a9 b3 5d cc 94 a2 13 2a cd 62 2a 66 d1 9b 64 04 93 8f 46 61 8f 71 7a 36 29 db 98 26 75 d9 96 dc 50 5d fa 53 ff 73 ed 27 f3 4d 0f 5c 32 84 40 4e ed 95 b9 d9 77 ff d1 9a ff 7e df ec a3 51 d8 2e 19 51 22 30 66 46 0f a9 48 a0 29 74 b2 8b b8 8c 66 02 4c de ec 41 5c b0 10 85 02 a8 00 92 37 51 88 18 05 64 43 44 95 7a 73 ab 1f 3e e4 5b 2f 1f d1 2a f6 0f ae ba 6d f3 8a 9d 78 41 cf 9a Data Ascii: 5kyorVm6.7>k<~h\t;t?#ZU;a&GnblQ[x+r,f3~Jl.ajUH@Eu]bfdFaqz6)&uP]Ss'M\2@Nw~Q.Q"0fFH)tfLA\7QdCDzs>[/*mxA
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 52 a9 54 a0 08 61 22 00 15 a1 52 f0 b0 36 67 2d 21 86 f7 ee 6c a7 b5 36 26 eb 3f bb ae c4 d4 14 ef ee a3 68 95 75 9e 4f 37 6e 29 ca fa b1 77 59 72 b5 d6 bc 6b eb 60 85 7e fd 70 7c 93 49 a1 b8 51 4b 74 49 59 95 c1 ba fb 14 18 05 28 6b 97 ec 63 1b 84 8a a9 29 c5 48 62 ae 2a 59 db 93 55 5c 55 85 98 2b 0e f6 88 f4 86 53 d1 f2 00 3c c0 71 50 f8 64 1b 95 00 c4 05 5a 2a 22 3d 40 23 52 5d fa 12 10 a0 17 2e 15 38 40 3a 0a c6 12 80 86 2e 28 c0 c5 49 e2 82 c1 f5 0a bd 11 94 c9 2c 21 ce 27 71 78 9f a8 43 34 44 02 41 08 15 71 e1 90 0a 66 db 84 11 c5 a8 a1 53 84 11 85 60 a2 f0 53 a5 c3 fb c9 40 89 33 a9 74 6d 4f 1e 72 eb e6 a6 8b aa 5e 5b a1 b8 6c aa 1f d3 4d 9e 02 9f 4b cd 16 b3 76 72 15 39 6e d8 d4 22 a9 46 b0 6a 5d 6e 34 fd 72 cd 60 0f 4a 67 b6 9c 6f 47 ee 7d d6 f5 Data Ascii: RTa"R6g-!l6&?huO7n)wYrk`~p\|IQKtIY(kc)HbYU\U+S<qPdZ"=@#R].8@:.(I,!'qxC4DAqfS`S@3tmOr^[lMKvr9n"Fj]n4r`JgoG}
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 96 40 ce e4 2c 40 44 cc 3d ce 3f c6 6e 7a e9 fa d7 39 df ab cb 73 86 c4 a4 9e 13 6b dd 8e 8c 6a 29 a7 4e 65 50 d9 aa 6f 49 2e 26 d5 eb 67 ef a4 64 ca 79 74 cb e6 64 38 31 f3 3c 18 75 ac 4f 3d 5a 4b 65 52 b3 3e d5 93 34 ac 45 a3 2e cc aa db 09 51 e1 74 bd da 5e 47 a5 ab 9e a2 5d b9 92 bb cd 1d 53 4e b5 5e 57 3b 76 50 92 3e 36 b2 3c 6c 7b eb 37 9b 9d 59 1a b7 91 0f d9 a9 3e 75 29 2c f0 ea d7 c2 cb f0 9a f5 19 64 79 b3 fb 58 3f 1f c0 58 99 8f 24 36 8f f5 a1 a7 aa 36 eb c7 8d fb 50 5a 2a b4 fd 2f 45 c6 23 33 d3 9f 84 d8 e9 ce 56 1f 1f ec 4a 96 b6 ff ec ba 05 9b 42 b2 36 a5 07 19 96 25 8e ca 5a 9e 07 67 24 53 cb 29 81 5c 10 58 25 d6 86 4c 46 48 0c 21 d0 08 0a 54 4b 9b b0 f7 90 0b ec 76 a9 2b 13 cb 55 cd e6 c4 bc 61 c8 b1 db 12 16 81 22 6c 83 a1 ac 9b 22 6f 8a Data Ascii: @,@D=?nz9skj)NePoI.&gdytd81<uO=ZKeR>4E.Qt^G]SN^W;vP>6<l{7Y>u),dyX?X$66PZ*/E#3VJB6%Zg$S)\X%LFH!TKv+Ua"l"o
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 8f 74 c2 2d b7 bf a8 f5 b4 47 fb d7 7c 5d e5 a4 de 86 fd eb 60 e8 d0 7e 1b ba c9 4d e7 6f 4a 47 63 c9 a5 f2 05 2e 83 f2 ad ca 55 32 3c 2c be 52 4d 8e 16 5f 6c 43 50 f7 d5 f6 8e 94 d0 20 6e 9e 0c 87 9b f2 dc aa 7a 8b e5 3c 5a de ff 18 e5 d1 87 f2 14 12 6b 5b ae d2 be 4f 51 b2 49 5c ce 42 a4 cb 36 65 81 94 ad 56 e5 f2 71 38 9c 92 1e 55 85 02 d0 48 2a 51 16 36 6a b3 fd d8 48 91 e1 56 dd 12 e0 71 eb 6e a5 31 d3 d2 7d e8 e8 52 d5 d0 0e 8b 54 31 26 6d 8b 2d d5 ee da 47 a2 b6 55 e1 bf 69 b0 a2 5a a9 d9 48 85 67 f8 ac d9 07 76 f0 43 e3 58 50 9a da e9 72 18 e6 47 3d e5 98 ca a6 d9 94 dc 96 c2 27 c1 98 b5 36 37 0b 4f b5 c5 ad 4f 99 ca 5a e1 3f a7 ae 3a db 9a cd e8 03 db 2e b5 40 5e 41 83 90 d6 b8 46 55 ab d6 de 62 e6 63 41 45 a4 35 b0 d3 73 4a b9 9b bd 53 46 d7 48 Data Ascii: t-G\|]`~MoJGc.U2<,RM_lCP nz<Zk[OQI\B6eVq8UH*Q6jHVqn1}RT1&m-GUiZHgvCXPrG='67OOZ?:.@^AFUbcAE5sJSFH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49788	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	511	OUT	GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 37564 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 b4 92 00 00 57 45 42 50 56 50 38 4c a8 92 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 4e 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a ba bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd 54 b7 ea ed db 02 30 8e 5d 75 b5 54 92 14 92 b4 e9 c5 80 00 41 2c d5 d5 5d fd 6f 75 37 f7 cb fb be 02 ef 12 6c e0 c5 06 ed b8 98 e2 da ca cc 5a 64 03 26 40 91 91 8a f0 ca f9 20 18 17 23 22 d2 11 8a 11 22 62 64 3a 73 49 6c 5b b6 a4 21 49 cb d7 d6 18 01 91 0c c6 c8 88 a8 af f6 4b 40 a4 22 9e 96 04 f3 04 06 ba 25 81 38 2f 81 c5 bd 0e 36 60 40 27 69 c7 9c cc 03 58 5a 64 db 87 08 4b 5c 18 25 62 31 eb 41 12 29 71 3f 81 27 a7 7f 9f 4e dd 55 c9 00 be 31 92 6c 8e 02 f4 fb 3d 92 e4 2d 30 e7 44 5f ed 80 69 b0 01 7d 36 b6 0d 0c c0 c6 9f 1f 1b 16 02 30 b6 56 9b 00 24 90 70 f7 57 Data Ascii: RIFFWEBPVP8L/IM8lFFNn/Y_<BD'*nzwT0]uTA,]ou7lZd&@ #""bd:sIl[!IK@"%8/6`@'iXZdK\%b1A)q?'NU1l=-0D_i}60V$pW
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 71 75 bd f4 80 b3 32 b1 5e 6b 07 81 c0 80 8a ea a8 62 d9 5c 39 fb 9a 74 7e 98 e8 f3 8e 1f 3b 66 00 1c 80 fb 9b cb b5 9f f6 89 37 04 06 40 6d 4c ae 96 7e e8 e4 ab cd 62 fd 9d 0e b0 38 59 1c e9 eb a2 00 56 9c 6c c9 d6 27 02 81 00 40 c3 7a 00 00 e6 f5 56 df 71 87 23 eb 6e f1 07 3a 69 de 92 de a7 ad 21 1c 6f d6 7e 04 00 20 03 20 03 db d1 de 8c 6a 3f 1c 03 c0 e2 48 e6 9c b2 fb 1b dd 6e 3b 00 10 98 ed c1 ff 0c 4c 6e 65 64 40 e6 6b 83 7d 38 29 b3 31 60 98 01 a0 62 4f fe a7 e3 0c d8 35 60 80 d8 c8 80 0c b0 b2 19 bb dd 04 32 32 00 12 b0 9d fb 2e c8 00 80 be ba d9 d1 aa 07 40 06 8e 1b 60 cb e2 82 74 01 1c 75 40 c7 de b1 0c 00 78 3a 56 f6 fa 19 ca 0e 00 a8 9c 00 57 00 d4 89 b6 1c 83 32 82 0c f8 e2 88 6b 77 e1 ea d8 d9 1c 4a a5 0e 7d 53 3a 7c 91 00 8a 34 2f 57 20 a5 Data Ascii: qu2^kb\9t~;f7@mL~b8YVl'@zVq#n:i!o~ j?Hn;Lned@k}8)1`bO5`22.@`tu@x:VW2kwJ}S:\|4/W
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: f7 29 2a 25 52 14 25 05 4a 2a a5 80 a2 a4 d4 90 a2 24 8a a2 c3 28 ba 45 09 a2 4f 4a d4 90 a2 e8 26 29 09 10 91 52 23 52 2a a5 80 a2 44 34 95 a2 90 48 51 53 11 91 a8 29 0a 15 14 45 4d 45 94 58 e4 5b 04 29 45 51 94 96 ab 65 0d 3a 71 bd 73 75 89 b8 91 69 53 06 49 ae 83 ba 74 29 83 75 82 22 c5 75 82 9b 24 a4 29 0d 2a 65 e2 74 23 61 04 dd 54 83 a2 d3 8d 4c 93 94 c1 6a 54 89 02 03 1a 01 6a 67 8d 90 4e 84 6b 81 02 64 82 46 4e 2a a9 4c 9c 24 a1 ba ec 26 3a ca 34 ab 61 72 46 76 dd 8a 10 c8 89 6b a2 a8 1a 57 63 94 40 4e d9 8d 03 68 2a 13 85 8c ab 6a 40 91 39 a7 5c b3 84 aa b1 26 48 ad cd e9 e0 44 0c 4d b3 1b 81 ce 34 ab 81 85 70 7a 2c 61 73 d2 2c c5 42 a1 94 05 21 56 8c 39 19 24 35 4b 69 28 1a 5b 08 1a cc 56 1a 24 4c b1 f5 56 d2 62 dc 66 94 40 44 81 05 35 05 8c 5a Data Ascii: )%R%J$(EOJ&)R#RD4HQS)EMEX[)EQe:qsuiSIt)u"u$)et#aTLjTjgNkdFNL$&:4arFvkWc@Nhj@9\&HDM4pz,as,B!V9$5Ki([V$LVbf@D5Z
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 1a c9 bd 31 13 b5 d4 c1 b5 4b d5 6e 84 5e a1 51 99 5b 28 61 16 f2 2c c5 dc b0 6a 4b b3 bc e3 a9 85 b4 2d 17 80 a9 59 6a 73 53 8a 6a 3d 96 52 90 b1 22 61 b1 44 69 40 16 58 b3 2c 00 2b 2a 07 6e a0 29 05 96 61 11 ac 76 34 03 e2 42 41 c6 54 b2 bc b3 21 16 76 49 e6 e5 f1 2c 62 96 29 ca cd 94 8c f1 92 95 04 0b 44 b9 60 80 59 04 cb 18 2b 5c 52 14 c3 b2 46 85 54 40 fc 97 29 65 20 df b2 01 1c 28 0d 25 86 91 c4 22 cd 38 b6 ab 0d 80 4a 68 56 49 0d ac b4 55 0a a4 d0 44 95 4a a9 a6 d0 38 95 ba 91 2b a1 52 6a 4e 07 82 a2 6a 41 4b 8a 22 67 9a 2a 49 50 2b 35 d1 2d b7 1c 65 6e 24 2d 49 12 2a 51 25 23 32 4d 52 d2 94 04 25 51 dc 44 44 8a aa 4b 2e 25 c5 cd a2 26 8a a2 a8 06 55 4a 97 32 42 13 95 92 a0 89 6a 12 a5 72 c8 00 c3 54 32 b8 92 44 69 67 8d e2 52 e3 c8 c4 c4 25 ea 1a Data Ascii: 1Kn^Q[(a,jK-YjsSj=R"aDi@X,+n)av4BAT!vI,b)D`Y+\RFT@)e (%"8JhVIUDJ8+RjNjAK"gIP+5-en$-I*Q%#2MR%QDDK.%&UJ2BjrT2DigR%
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: c0 04 2b a6 84 84 14 96 25 a7 a4 46 de 94 71 81 28 99 04 4b 11 66 a2 04 39 8d 99 92 0a 0f 8a 2c 16 30 a8 32 cb c8 59 68 76 85 c4 48 ac 4b bd 54 c2 54 0d 96 5a ed 60 54 c1 7c 08 b3 18 2a 60 ac 59 ab 54 3a 03 1a a5 4b 27 5c bd 54 29 15 de 11 1a e7 a0 49 55 0b a5 44 69 82 12 84 3b a9 36 8d 90 96 d5 45 8d 8b 43 27 ce 14 a1 7a 71 8d 49 e2 16 45 26 2d 01 20 40 62 56 32 4b 24 0b ca 60 8d 1d 00 88 60 f6 06 24 12 c4 68 64 20 99 88 a2 7a b1 03 24 00 56 94 22 34 08 b0 97 80 58 02 b2 22 85 23 51 38 00 38 f0 45 9b 98 28 05 b2 97 49 1a 43 90 19 60 74 93 88 40 ac ae 4b ed d8 c5 6d 55 9d 22 a9 51 d5 0e 9a 4a a7 3a 5d 75 23 84 7a 67 77 a2 9a 8c ac 13 34 ca 0e 9d b2 4e c9 a9 92 aa 16 6b 32 a3 1c 33 8d 5a 34 53 d7 16 51 63 5f d5 83 aa c7 88 cd ca ae a9 a9 e0 dd 37 aa 69 06 Data Ascii: +%Fq(Kf9,02YhvHKTTZ`T\|*`YT:K'\T)IUDi;6EC'zqIE&- @bV2K$``$hd z$V"4X"#Q88E(IC`t@KmU"QJ:]u#zgw4Nk23Z4SQc_7i
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: f7 e0 a9 67 bd 45 a9 8f d8 f8 ba c4 65 72 81 ac df 99 2b 3f f2 c7 47 fd e1 0b 6c ca 09 cf bd e6 bf 8b ff fd 88 2d af 3d 67 ee 7f b6 77 f3 f1 a0 6f ff db 9e 40 a6 7b e5 f1 21 73 8e 0f fb d3 33 de ff 4b fe 89 4c 2a 9b 69 06 40 55 16 ae 65 97 02 55 bb 64 92 46 4d a9 a6 94 44 e5 6e 14 97 28 ae 76 aa 71 2a ea 14 49 54 3a 71 54 e2 24 0a 1a a1 24 27 57 f0 79 a5 93 26 a5 36 74 01 52 7b d5 1a 94 f6 7a 4a 6f b9 da b1 52 4f aa ba 61 93 d3 ea bc 42 a9 a3 ea be 31 23 d6 5c 6f ab ec 52 cd 19 34 f6 82 24 91 c8 b8 82 07 96 5e f2 be ab f6 b9 5a 7c e2 d1 d6 fd 9f 7b c6 eb ce 1d f7 f0 cb 7e 71 ca 85 29 53 09 90 32 3d f0 78 42 79 df bd 20 2f 6d 5a fe e2 72 c9 d9 0f ed fb d1 77 22 ca 14 b5 cd ec 29 d7 a8 7b ef ee a7 ae fc c8 77 3f f0 9c 03 d7 f8 bd 97 f4 d8 43 79 ff b1 fc f5 Data Ascii: gEer+?Gl-=gwo@{!s3KLi@UeUdFMDn(vqIT:qT$$'Wy&6tR{zJoROaB1#\oR4$^Z\|{~q)S2=xBy /mZrw"){w?Cy
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 4a c9 aa ac a2 ad 72 59 8e 59 85 aa 2c b3 3a 65 c5 42 76 64 39 3b 39 76 68 95 62 59 06 87 96 aa dc 74 8b a5 db 06 9b 49 d7 59 ae a7 d2 9b 9a ad dc b7 7c ba 84 ee 3d b5 ba d7 45 93 59 d5 fd 06 d7 68 87 fb a3 ca 09 4b 77 4f 96 de 26 6f 6e 69 f0 05 1d 30 5d 56 d1 8e 17 a4 c0 71 92 46 9e 18 ec ad 14 4d 38 b1 44 14 d3 1a 31 58 53 e4 76 92 06 81 54 c9 32 3a 5a 21 a8 ac 88 70 a2 84 98 25 91 15 4a 35 45 be e5 6c 51 58 88 53 87 1a 52 da 20 96 bd 64 a8 44 1d 6a 64 16 20 20 0b 91 9c 4a 06 58 66 29 70 25 96 90 81 09 4b 81 2b 0e 01 c2 70 a4 6d 90 a3 59 98 da c8 fa b8 62 50 54 bf 54 8e e4 54 cf ae dc 23 55 a7 77 ca af 9c d3 58 a9 87 72 2f 51 f2 f6 ad f3 34 d2 8c 74 f7 09 bc 51 5a 4f dc 7d 33 9d ca d8 0d 96 5c 49 99 6d 11 d5 1a 37 2c 32 cc c8 e3 5d 53 b0 8a b8 5e d7 0a Data Ascii: JrYY,:eBvd9;9vhbYtIY\|=EYhKwO&oni0]VqFM8D1XSvT2:Z!p%J5ElQXSR dDjd JXf)p%K+pmYbPTTT#UwXr/Q4tQZO}3\Im7,2]S^
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: c8 e6 38 87 64 2c 9d c9 79 1a 2c b6 fc e7 6f 2f eb 19 db 5d 36 be 7d e1 7f 5e 7f d1 dd 2f fe c9 3d 5f fe f8 b6 cd a5 0f ac 7e f3 97 97 5e fb d4 76 9d 78 6e d7 f6 8d 1b cf 9c f5 d3 47 be fd c4 3b ef be df ca 60 74 e1 8d d3 6f ee 79 ee 92 fb 5e fc ee 0b 8e e0 01 d7 6d 65 7e f1 83 d7 5e 2f 5d bb ee 91 f7 fe f7 df 3f 3d e7 05 51 e8 db ee f1 99 1f ff cb 23 fe 73 73 c5 f6 a1 90 e7 6f bf bd 76 cf bf 39 fa 93 f7 1f f5 c9 a7 a5 91 db 33 77 3e 75 f9 9f 8f 3e 72 af 3b 10 62 ca b8 de 8b 39 ea bb f7 1f ff 2d 5e d9 7e 1d 99 7d 58 d6 ed d2 19 ff fb a6 63 fe f3 ad e7 7d f7 d8 55 a5 8c 65 cf fb e8 fb bf f3 98 5b 3f ef 86 7f 2b 67 3a e7 9a 93 ee c1 11 61 79 e5 85 f5 fd 8f 96 ca e6 53 6e 7a e5 6d ff 7c c9 71 7f 7b fd a5 37 be fe 99 0d cf 3a f9 2f af 3d f3 13 2f e5 aa 4c c6 Data Ascii: 8d,y,o/]6}^/=_~^vxnG;`toy^me~^/]?=Q#ssov93w>u>r;b9-^~}Xc}Ue[?+g:aySnzm\|q{7:/=/L
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: d8 5d ce bb 65 d7 6e 28 59 17 d5 65 5d 52 96 1c 73 79 e3 52 69 d4 c1 d5 28 ba 1d ad b3 9d 13 d7 56 b5 c1 8d 03 aa 97 dd 71 55 10 61 d1 53 23 52 a6 65 4f 54 e4 f1 df fc 31 5f 0c 2d ff ff 7f 91 8c ae a9 2f 24 22 72 ef e4 e7 00 91 f2 e1 5f 1f 3d e7 52 d6 fe f3 ff 76 7e cb eb bf 7b 6c 0d 8e f8 f4 4d cc 3d f6 85 6b 6f ff 8f af 7c f6 4d 5f f8 c3 9f 7e f8 af 9f 47 5f 76 3e f7 87 fd 7f e5 e3 6f 3e 5f ff fb fe fe 99 3f f5 b5 ef 9f f0 c4 49 f7 9d df e5 54 8d 0e 7a fd 5d 9f 3c e7 54 8e bd a5 7e 79 96 1d 72 d1 b6 0c 3b b3 16 f7 0d 6b fb d1 75 77 51 88 4f 65 c2 72 e7 bd 2f 7f ed aa 9d 69 47 c9 0d a6 6d af 7c 67 ff 87 5f de f8 b5 b7 ff ea e7 16 1e f3 7b 2b 6e ff 92 a3 ce 7e 79 7b d7 e5 87 1f fa 86 a5 97 7c df f4 43 76 87 ef f8 d0 f1 17 f9 cd 67 ef b8 75 ed 66 c1 91 ab Data Ascii: ]en(Ye]RsyRi(VqUaS#ReOT1_-/$"r_=Rv~{lM=ko\|M_~G_v>o>_?ITz]<T~yr;kuwQOer/iGm\|g_{+n~y{\|Cvguf
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 89 c9 8e 1b 9b b8 9a c5 a2 a4 dd bf 10 2c 2f 9d 35 e3 49 13 3b b6 e3 6b cc 5b b6 c2 68 f7 97 3b b6 64 5b 54 ed b6 34 a1 46 cb a5 5c 8a 59 de c4 95 b2 56 37 aa a8 96 28 b4 22 ad 1d 58 35 b2 b4 01 1a 86 4c 0d 85 42 a9 cc 4e 49 52 92 08 a1 00 20 93 a4 3c 02 ce 1c 78 9c 4a c9 f0 88 50 2e 0f 5a 8a 94 cc 63 84 a1 97 47 82 cd da 49 a5 10 58 c5 44 cb ce 5b 01 ab 14 b0 43 00 10 87 04 c0 13 23 a7 c2 20 2f 0b 28 c9 ba 02 24 04 12 e1 44 0a 85 47 4a 82 c7 49 81 6c e9 50 c5 84 04 bb c4 81 87 01 88 1d b8 e0 f2 a0 15 4f 89 14 10 0b 46 62 49 81 20 27 42 d9 91 40 62 f0 8a a1 83 37 e5 d6 29 5a 29 37 95 52 d5 aa 6b 52 7f 54 50 19 14 e3 2d 3b 85 41 97 0e 5a 57 b3 aa e5 4a 25 ab 4e b1 db 15 74 9e 59 f5 2c a5 d3 53 ee 17 dd ba c9 ec fe 01 34 41 f5 99 e5 9d db b8 a9 1c 9a 27 70 Data Ascii: ,/5I;k[h;d[T4F\YV7("X5LBNIR <xJP.ZcGIXD[C# /($DGJIlPOFbI 'B@b7)Z)7RkRTP-;AZWJ%NtY,S4A'p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49785	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	507	OUT	GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34202 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 92 85 00 00 57 45 42 50 56 50 38 4c 85 85 00 00 2f a5 c0 49 00 4d 40 8c 64 2b 6c 93 bb 8f 65 be 1e ee bf 60 90 26 25 44 f4 7f 02 ba bb e7 ac ee 9e 6f b7 9e 73 76 77 cf 39 ef 9e dd a7 3e f5 d6 a7 a9 76 b7 da b3 ed ee 7b f6 9c 0e 13 d5 24 e9 e3 9c dd 73 f6 fb b9 cd 7f e8 e6 65 c2 76 df b7 50 55 a8 17 24 c0 4d 32 54 80 2a e6 c3 92 73 12 88 63 0c 0f 05 79 ac 51 c3 2a d9 03 90 c4 37 52 1b 49 55 8d 9c 58 39 70 18 24 40 ad e0 8b 6f a2 7a 19 a8 cd aa f9 75 ff 23 72 dc ae 56 a1 48 c8 21 40 b7 de 43 4d 12 92 43 11 17 cb 3c fb 40 48 12 4c e2 41 e5 ef 8f e7 03 44 de 6f 55 71 59 58 4f 03 a9 c8 eb a5 ca 50 ed ee 59 6a eb 02 ae b1 12 48 f2 35 92 6c 73 9a f8 7a 11 54 47 40 73 ca ef 77 1d 46 f9 72 7d 3d 50 40 81 09 f1 73 52 17 7b f6 cf 8f 0d 78 22 89 47 a8 02 Data Ascii: RIFFWEBPVP8L/IM@d+le`&%Dosvw9>v{$sevPU$M2TscyQ7RIUX9p$@ozu#rVH!@CMC<@HLADoUqYXOPYjH5lszTG@swFr}=P@sR{x"G
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 0a 16 14 af f7 0b c5 e7 ea fd 98 01 47 e1 d3 7b 9f 3e 18 97 82 82 37 54 34 b7 82 b1 be 3b 04 02 83 1b 68 c3 ab 77 63 5e 8f c1 4d 01 40 c7 76 e2 c4 ea d8 51 3c dd 6d f3 76 e2 cd a9 a1 3a 17 4f 00 30 dc 4e c8 e3 6f de 1d fb 09 80 82 e6 74 84 d3 35 e0 21 0a 56 1f 8f 27 ff fe f3 e2 0c 67 61 c1 d2 00 50 01 50 fa 56 fa fe d6 f7 47 df 9d b9 de 58 20 ee 4e 42 07 ee d1 e6 11 3e 14 03 1f b0 03 76 34 9c b0 e1 c6 a7 27 79 da ef 91 9c bd 6b 00 d4 7d f7 7f 37 76 b9 c2 71 bc 08 ed c9 7d 17 a3 d2 0e 73 97 cb 09 f7 10 c0 d0 7b 34 90 f2 09 3d 00 a0 eb d6 ce 28 be f0 09 6d 68 68 c0 86 ed 04 db cc 87 16 b1 78 cd b8 d2 c6 70 19 c0 d2 87 16 cf 40 68 68 f1 bd 8d 61 1b 80 b3 2f df 05 d0 df 8d ca 15 48 4e b9 c9 36 31 a6 b2 4f ab 22 78 f8 b4 b6 4b 00 6c d7 e7 ee 07 7c d7 0c 9d 8e Data Ascii: G{>7T4;hwc^M@vQ<mv:O0Not5!V'gaPPVGX NB>v4'yk}7vq}s{4=(mhhxp@hha/HN61O"xKl\|
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 a6 74 a9 a6 33 2d 56 ae c1 d6 5d 29 8a a8 53 ce 94 4a 69 39 2d 4b 15 51 27 b6 31 84 5a 55 53 2a 6a ac d2 42 2a 39 d7 89 33 23 29 2d 33 05 ea da b9 ba 30 29 0e a6 b3 0d 48 d7 74 a6 85 96 24 57 2f 23 d9 b9 d2 19 95 81 a8 c8 a0 28 ae 34 ce 95 05 a2 b5 48 07 61 dc 92 44 87 66 57 8c 04 4e 65 d7 bb 42 c3 72 37 0b 4b c8 23 b5 85 a1 9c b0 47 58 11 96 89 90 64 e7 cc aa 91 ec a4 b8 62 86 25 65 cc c8 a1 24 a7 c7 a3 d1 c0 b8 92 3a 4a 92 73 da 59 08 67 b5 33 2a 16 cc 5a 04 76 aa b8 a2 77 76 08 27 7a 16 01 a9 1b ad 1a 10 64 95 4e 39 8a 24 f5 54 12 0a a9 2b 5a c0 88 4a cb a3 c2 29 b3 3c 23 84 e4 8a c6 52 74 14 a3 20 4c 18 85 a2 24 27 8d 72 b9 88 0e 20 8a 4e 55 09 42 a1 4c 50 25 0e 03 8e 62 14 85 08 47 85 d4 54 87 41 Data Ascii: XT\t3-V])SJi9-KQ'1ZUSjB93#)-30)Ht$W/#(4HaDfWNeBr7K#GXdb%e$:JsYg3*Zvwv'zdN9$T+ZJ)<#Rt L$'r NUBLP%bGTA
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 65 31 66 28 89 12 8a ff 72 aa 72 48 be e5 46 c8 85 8a 51 c1 62 09 69 29 9d e5 b2 bb ba 11 82 02 66 0a 75 c8 a4 5b 51 a1 04 a6 94 24 51 26 30 a6 a8 0d 4e 8a 24 ea 5c 5d 28 52 29 0d 6a 44 08 ae e9 94 54 0a 9a 64 4a 77 b9 cb a5 9a 3b 2a 5d 2a 95 22 29 25 35 50 d3 09 55 3a 55 0a 52 21 36 25 05 95 d2 91 25 22 36 43 a6 54 2a 95 32 52 12 1d d5 00 53 8a 2a 05 53 ca 54 48 72 51 23 34 9a a4 46 4e 2a a5 6a 33 43 2c 19 a3 a6 ac 58 4a ad 65 06 9c da 41 67 94 88 16 8c 98 b1 b1 58 8f 32 89 a9 35 d0 c4 94 d3 b0 31 d5 58 42 4d 94 44 19 a6 53 a6 b3 a8 e0 1c 81 3a 96 d2 cb 89 18 d5 51 31 12 a9 ec cc e9 98 88 52 6d 6c 8d 2a 75 28 8e d0 d4 f8 cc ee 50 4a 95 da 7d b6 21 35 6a 9f 69 64 aa 71 d0 12 ba 24 d5 38 da 28 04 89 74 28 75 92 d5 7d 44 a5 52 66 79 82 14 82 69 21 49 42 bd Data Ascii: e1f(rrHFQbi)fu[Q$Q&0N$\](R)jDTdJw;]")%5PU:UR!6%%"6CT2RSSTHrQ#4FNj3C,XJeAgX251XBMDS:Q1Rmlu(PJ}!5jidq$8(t(u}DRfyi!IB
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 25 69 8d e9 71 c2 04 9d 58 23 60 3a 17 6d 6c b1 4d e5 84 4a 86 ca 2e 98 a4 29 a7 55 1b 00 7a b3 9d 52 a6 06 73 0a 86 6c 70 62 4e 64 b1 94 ab 29 46 b3 54 c7 59 2d 75 61 56 9d 0d a5 8e 7d 95 af 94 5e 96 b4 b5 6a 67 32 89 bc 7d 4a 99 ce 82 37 cc 01 37 f9 ca ec 24 53 33 ca 47 aa 46 d2 f5 94 6b 10 3a a7 b0 63 21 16 d1 76 a1 44 95 9c 72 46 80 3a 65 e3 62 d9 7a aa 9d 65 85 80 8e ab 1a 09 dc 4c d1 82 20 9f b5 c7 92 54 ac 56 d5 41 4e 5d ef 8a 3d 90 96 2a 1e c1 10 60 ab 72 26 91 02 fa 4e 29 41 f0 55 d5 41 d5 76 ba 95 c7 94 54 44 7d ca ea a8 53 6d 2d 76 d0 d4 91 f9 46 49 a9 c8 b7 4a e7 4a a9 1e aa 36 2a 5f 00 11 00 51 d8 d9 81 d1 b1 ab 06 48 65 b9 0d 06 ac 20 0a 45 96 32 4b ba 64 f1 8c 99 b8 28 2a 11 26 a8 14 56 ed 10 72 44 a1 b8 b3 28 b5 51 81 49 38 17 04 a1 60 4e Data Ascii: %iqX#`:mlMJ.)UzRslpbNd)FTY-uaV}^jg2}J77$S3GFk:c!vDrF:ebzeL TVAN]=`r&N)AUAvTD}Sm-vFIJJ6_QHe E2Kd(*&VrD(QI8`N
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 0b 1b 36 5e 18 5d 00 54 85 2a 7a 0b 14 16 50 a9 b0 80 70 1d 83 af 6d f8 90 84 29 5c 00 9f fd dc 8d bf 3f 72 14 b0 c8 78 8b 44 c5 87 cc 24 02 03 50 65 92 b8 d8 88 04 01 c0 b9 8c 9b b3 8c 00 11 76 e2 08 83 2a 28 23 0a af be 67 3d d2 b7 b7 2e 01 6f 88 7a 8a 62 a1 ec 01 06 61 9e aa 9c 0e e9 7a a6 da 36 d5 10 b9 ed 2a 5a 6c b0 e7 b2 c7 9c dc c9 d1 76 51 11 d2 d9 ae d2 3d 57 6e 8f 16 a7 48 5b 5c b5 0f 95 b6 92 d3 64 c9 39 60 46 3a f7 4b 6f fb 76 b4 b5 8c 48 20 c5 ca 16 53 8e 06 31 a5 66 bf 72 f3 16 06 b5 68 1a 5d 34 a8 05 ea 03 ab 34 6c 63 0d 5b 37 12 4c ed 6a f7 f9 21 23 62 03 8e 6a 41 60 5c 14 11 2e b4 85 81 49 0a 39 e4 22 a6 30 a5 ae a8 d5 bd 47 e6 d6 5d c9 84 49 2c 43 34 62 04 98 c4 ca b8 8b 3d 18 62 0a c5 a6 dd 92 8e 63 54 ee 9a f4 05 e7 be 11 e4 ec ee ec Data Ascii: 6^]TzPpm)\?rxD$Pev(#g=.ozbaz6*ZlvQ=WnH[\d9`F:KovH S1frh]44lc[7Lj!#bjA`\.I9"0G]I,C4b=bcT
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 67 e4 1d ef 78 f5 b6 cb ae 4b c7 f6 12 09 31 5b ef d9 91 6f 3e b0 66 8a 63 5b a8 c7 5b c9 94 bb 2d b2 98 9a 8b 61 8d a7 28 f5 53 62 73 31 9e 9b d9 6a 63 bc ab 99 57 21 25 2a e7 00 61 a4 eb 14 d5 a5 ce 76 30 53 8a 4e a8 34 8b a9 18 c9 b8 04 83 18 1a e2 8f 3e f2 8f 82 8a c1 c4 bb 9e 68 46 d5 88 c7 af 7f f5 ed 1f 3f f9 bd d8 bc 6b d9 8f 3e fb a1 97 bb e7 ce aa d3 e6 7d cf 3b 17 02 20 25 00 b0 b2 20 01 90 b2 26 ed 13 40 4d 5c bf 5c 75 86 3e 62 25 d5 71 d8 b1 e3 39 64 5d e2 72 38 4f 4e 4a 70 de 73 a0 57 eb 43 f7 3f 7b 76 74 e7 83 b7 cf 3d 8f 87 7f f2 d5 81 ed 9d 3f 65 79 0c ca 93 aa af 10 4a dd f7 7c ea aa 2a 8a 02 d5 51 50 34 1d 9b ab 74 95 a6 3a 78 f5 c5 68 e2 c3 b8 0a 50 40 d1 e0 eb 00 f4 45 cf e1 eb 8c 53 5a af df a5 10 90 20 83 4f e2 fa b9 0d 15 08 a3 ce Data Ascii: gxK1[o>fc[[-a(Sbs1jcW!%av0SN4>hF?k>}; % &@M\\u>b%q9d]r8ONJpsWC?{vt=?eyJ\|QP4t:xhP@ESZ O
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 3c 89 1b 99 25 75 83 84 93 49 56 8a a9 20 45 08 5c 56 88 a3 5e 41 92 ac cf 4c ba 38 93 a0 26 2e ad 86 a6 4a 6c 57 cf db fd f1 de eb ef ff e6 a3 25 b3 ef 9f 3f f3 48 55 63 63 41 c1 05 11 f1 94 d4 86 b5 5c 11 9a 00 74 a7 65 c8 e7 45 a1 07 73 59 c3 56 89 db 88 b3 84 05 30 a6 9a 87 94 e3 04 28 e8 68 3a b6 4a 82 1c b0 3c b1 50 a3 a9 34 11 32 9e 11 d7 ea 39 de fc 18 ff f5 83 c7 5c e4 85 17 97 a5 ee 21 fb 38 67 7e 48 37 d1 46 8b 09 83 aa cd ba ab 78 4a e7 88 a8 86 ee 2a 45 52 55 bd b2 43 6e 15 c8 b2 55 a5 c4 d4 14 cf ba 5d 58 65 ed e7 ee c6 2d 45 59 2f 7b 96 25 57 6b cd b3 2e 6d ac d0 af 17 db 37 99 14 8a 1b b5 44 97 94 55 19 ac bb bb c0 28 40 59 57 c9 6e bb 10 c0 87 d6 99 98 10 4d 8c 69 20 00 d6 d0 11 08 d4 e4 32 c8 31 86 01 e4 72 83 04 08 92 aa 64 ca 06 b9 2c Data Ascii: <%uIV E\V^AL8&.JlW%?HUccA\teEsYV0(h:J<P429\!8g~H7FxJ*ERUCnU]Xe-EY/{%Wk.m7DU(@YWnMi 21rd,
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: fe f8 55 5d ba 78 65 d9 e2 5a de 7b 51 dd ad 1b 8b 8a 52 cf ae f8 2a 74 f6 b6 f2 ee a8 d6 ec aa fd 85 ae 5d 52 f2 51 b5 6f a9 52 ed 2a bf f1 76 2c 82 77 67 0e 1a 9d 8f 96 76 87 5a 51 dd 7d 84 b5 ec a8 ad d2 31 56 6e cf 32 8f b1 0d 23 5f 5f 57 69 62 c9 17 b2 33 8c fd 02 a7 3b 2d f9 c6 f9 d2 d6 74 c8 5b e4 64 bc e4 03 ed 61 32 f5 45 79 d3 7e 27 4d ea 0d 7c 98 6b ea 89 6f 9f bb 69 a7 1d 68 bf 4c 1d 6b c6 3e 1d f5 d5 30 3a e5 bc 3b a5 d5 a6 f6 2b 9d d3 1d 4b f7 91 f3 65 ea 30 9d f3 63 a4 25 94 37 ce 23 55 ea dd e7 bc 19 3b e9 a5 eb a7 73 3e 57 db e4 ad aa 5f eb 4c ac 75 db 32 aa a5 9c 3d 8b b0 38 ad 77 b7 8d 31 a9 5e af bd 9d 92 29 a7 7c 75 f7 01 2b 79 d6 6b 36 46 1d eb ae 6f ad a5 32 a9 59 77 f5 24 0d 6b d1 a8 0b b3 ea b6 43 54 38 5d cf ba bc 46 a5 ab 9e a2 Data Ascii: U]xeZ{QRt]RQoRv,wgvZQ}1Vn2#__Wib3;-t[da2Ey~'M\|koihLk>0:;+Ke0c%7#U;s>W_Lu2=8w1^)\|u+yk6Fo2Yw$kCT8]F
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: b9 a9 14 85 1e a0 6a 54 a2 02 df 14 b5 34 9a 4f 0a 1b 53 52 89 2f 75 24 51 74 da 14 05 c3 06 79 ba 11 4a 45 cb 4d 21 8e 4f 4a 27 a6 28 a8 8e 92 9e 2c cd 49 d3 51 01 4d b5 42 e5 42 ae 6a 2e 17 e5 2c 1b 5c c4 21 74 eb 22 55 10 ab 6b 0c 60 72 4e 4f f5 7e 06 86 48 5f 3f 53 b5 4f f9 72 ef ad ab 1e 49 dd 7a 16 9f 98 93 90 db c7 5d b6 8d d5 ed ab 7b fb c8 74 ce 5c f9 08 6b 69 4b fb 6e 57 3b 25 26 7b aa f7 c1 35 19 57 bd 37 95 31 6d f1 1e 77 d5 37 ca d8 ac ca bb 54 b3 36 8b 77 e9 0c 3b e6 dd 68 a3 49 ea 5b cb be d2 09 a7 dc de 51 eb 69 8f f6 d3 7c 1d e5 a4 9e 86 fd 74 30 74 68 bf 0d 9d e4 a6 f3 9e d2 d6 58 72 a8 7c 80 c3 a0 7c aa 72 94 0c 5f 16 1f a9 26 5b 8b 0f b6 21 a8 fb e8 f2 b6 94 70 54 de 7b ac d1 b8 c5 4f 57 d5 5b 2c e7 ab e5 fd 65 d4 54 af c5 5f 55 f5 ed Data Ascii: jT4OSR/u$QtyJEM!OJ'(,IQMBBj.,\!t"Uk`rNO~H_?SOrIz]{t\kiKnW;%&{5W71mw7T6w;hI[Qi\|t0thXr\|\|r_&[!pT{OW[,eT_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49791	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1088	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 266 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:11:41 GMT Expires: Sat, 20 Apr 2024 13:11:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 3273 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	266	IN	Data Raw: 52 49 46 46 02 01 00 00 57 45 42 50 56 50 38 4c f6 00 00 00 2f 13 c0 04 10 07 a1 10 92 24 67 ae ce df ed 18 fe 11 72 5e 0d 45 8d 24 45 bd fe e5 e1 00 7e 38 d8 03 9a 41 db 48 8e cc 1f dc 41 38 1d 8c f2 25 6c 23 db 56 72 bf ff 1f b9 62 39 0d 50 03 fd b7 c0 10 d1 81 4e 00 00 5b 6e 1a 50 b4 02 09 14 81 82 ac ef b4 ef 36 5c e8 77 1c 2b e8 bc e7 fe fc 86 58 a3 fd f7 d3 55 27 cc dc 06 23 ef 7d b8 ef bd d3 59 db ae bb c8 00 41 02 78 64 42 04 fd 00 86 91 24 25 da 77 77 e3 f1 fc c3 74 c8 20 a2 ff 0a dc b6 51 7c cc f0 0c f8 a1 2c 11 0d 03 91 92 0c b1 c4 c4 71 08 16 89 44 14 40 21 48 d0 aa 4e 98 70 aa 35 a4 a2 bb b5 d3 2a 60 ee e9 d5 b4 6d 73 d1 7e f6 6c 9c 06 02 df 5c 2f ad 5b 2f d4 f4 75 3d 14 81 40 1f d7 ed 58 16 c7 1d 34 6a 3d c6 7d ff ff 65 64 69 dd 69 cb d2 fe Data Ascii: RIFFWEBPVP8L/$gr^E$E~8AHA8%l#Vrb9PN[nP6\w+XU'#}YAxdB$%wwt Q\|,qD@!HNp5*`ms~l\/[/u=@X4j=}edii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49792	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1088	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:13:25 GMT Expires: Sat, 20 Apr 2024 10:13:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 13969 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c db 00 00 00 2f 13 c0 04 10 ff a0 a0 8d 24 65 fc 1b bc 27 15 cc bf 36 94 46 92 14 75 fe 11 a2 f0 48 d4 0f ab a8 6d 24 27 fc f1 dd ef 50 f4 3e 3b 4c 02 00 4c 33 66 c5 53 0c fa fd 2b 51 85 07 00 a5 59 00 02 08 d0 00 02 08 10 10 c0 82 92 6a 9e 73 2e aa 18 29 fe ff d3 77 bf e2 7f 42 3f 86 56 d2 79 3f f0 bb 9f 8e 39 cd 8f ef dc cb f5 be a8 7e 60 01 12 43 01 8e 31 b3 62 00 86 91 24 29 59 ec f1 c3 e5 8d cd 3f 4f 1c 02 88 e8 ff 04 e0 ed 79 2b d2 e6 67 ca 69 1c 56 92 5c 87 71 2a f7 66 9e 9e f7 a0 35 0e b5 c6 a1 31 c8 8a 20 28 32 18 73 aa a3 52 ec ae 08 e3 98 f2 77 3d 95 62 7f ca 1a 84 29 90 86 30 f6 c8 f9 28 89 95 8a 93 c8 bb a3 65 e3 e1 b6 1c a1 a9 a5 12 a9 a4 6e f0 6e 00 Data Ascii: RIFFWEBPVP8L/$e'6FuHm$'P>;LL3fS+QYjs.)wB?Vy?9~`C1b$)Y?Oy+giV\q*f51 (2sRw=b)0(enn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49793	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1072	OUT	GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 622 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:48:28 GMT Expires: Sat, 20 Apr 2024 12:48:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v116" Content-Type: image/webp Vary: Origin Age: 4666 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	622	IN	Data Raw: 52 49 46 46 66 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 1f 00 00 1f 00 00 56 50 38 20 1e 02 00 00 d0 09 00 9d 01 2a 20 00 20 00 3e 6d 2a 90 46 a4 22 a1 a1 37 e8 00 80 0d 89 6c 00 9d 32 84 7e 27 81 a9 44 d2 65 98 26 dc 71 28 c8 32 47 ff 1a f0 16 c7 fa ce 93 d3 3e 8a fd 58 c6 df ed 12 e8 59 fb d1 46 f4 a3 81 58 2f be d9 e7 46 ba ec 19 a9 3a a6 70 e1 40 1e 10 00 fe e9 a7 35 27 db 81 7d 83 b0 d6 39 09 d9 12 01 d7 36 0a e0 11 59 29 f1 0d 86 e5 cd ec 37 9a 74 fb cb 64 fc 57 82 92 5d e3 67 84 5b 37 f6 e6 c4 1a 64 93 e5 a0 f7 84 6c 46 f2 e9 3e c3 30 b1 12 37 50 92 53 68 38 bd d2 a4 e8 6b 3f 58 1e 86 37 04 d2 39 3d e1 1a 9a a5 ff 1c 28 27 35 af 74 51 c8 df 7e fb f8 64 dd 8b 09 e8 08 79 bf 69 a9 23 38 ce 10 42 3f af b0 c0 7e 38 85 2a 67 34 e0 84 f8 Data Ascii: RIFFfWEBPVP8XVP8 * >mF"7l2~'De&q(2G>XYFX/F:p@5'}96Y)7tdW]g[7dlF>07PSh8k?X79=('5tQ~dyi#8B?~8g4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49794	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1081	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2196 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:09:17 GMT Expires: Sat, 20 Apr 2024 13:09:17 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3417 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 8c 08 00 00 57 45 42 50 56 50 38 4c 7f 08 00 00 2f 3f c0 0f 10 09 86 6d db 46 82 e3 be 27 ef bf 70 ae 3b 44 f4 7f 02 f4 a6 ab 64 e0 aa 84 13 28 b1 4d b3 f5 93 24 ed b9 50 d3 46 92 e3 ea ea 4f 00 96 3f cd 4f 14 d4 b4 6d 04 19 c4 f1 c7 f6 4e 37 1d 04 06 6d 23 39 ce f9 7a bf 7b 00 df ff 09 c0 2b 9d 1f 74 00 cb d7 7c d8 b3 9a 35 7c b9 bc a1 69 c9 22 6c 65 b0 99 0c ff 11 00 06 3e 45 76 dc ff 57 24 db 39 35 73 f9 5e 33 33 b3 33 66 b6 23 8a 5e ea 90 99 22 47 76 c4 b4 03 cb 19 33 33 33 33 33 b3 2f 43 77 95 b9 46 9d d9 d1 2f 7a 1b b0 8e fe 3a 49 ad a0 0d a5 ab 23 95 46 c7 9c 59 7a 30 2a 63 ef e0 f1 7b bf c8 3b f8 eb 6f 2c bd 05 54 76 55 99 77 60 3d c6 1d 98 71 0f 8f 12 c9 b1 6d ab 56 35 d7 3e f7 e2 2e c9 b8 5b 02 24 44 1e 04 40 8f b6 5b 2a b4 e1 bb de Data Ascii: RIFFWEBPVP8L/?mF'p;Dd(M$PFO?OmN7m#9z{+t\|5\|i"le>EvW$95s^333f#^"Gv33333/CwF/z:I#FYz0c{;o,TvUw`=qmV5>.[$D@[
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: ad ef 5c f6 7f 65 07 95 11 61 0c 72 d1 ed 36 1b de 65 7a ee 47 58 d9 2a f3 56 aa 2a 53 d8 83 9a 01 85 0a 08 35 4f 4f f3 e5 04 02 03 70 da 89 db 99 3c e8 f2 b1 b5 86 4d 54 72 25 47 c6 84 a5 71 64 e9 3c a9 dc 74 59 1e ff 35 2d a3 36 4f 2d 23 e4 1a a0 da b7 8a 02 78 a8 28 3d cd 73 01 3a 91 4e 8e 31 9b 2b 7c bc 85 cd a6 1f 77 b3 83 52 86 01 d8 7d 6d e4 5a 0b 93 c7 7d c3 ea 3e b4 59 64 27 04 95 9a a7 0a 3d 55 94 de 50 5e 28 c7 10 4c 67 1d ec 25 ff 7e 88 29 25 4d f8 d2 9c 70 26 e4 5c 0b 9d 37 bf db b2 0a 11 70 09 90 5e a1 e6 a9 a2 a0 8a 2e 80 df e3 ff 12 4d ec 61 5f 46 9f 70 d4 31 25 9d 7d 49 11 d9 63 94 70 09 c2 db bf c9 8a 42 a6 64 41 41 c0 1e a4 37 7a 7a 51 a8 41 a1 e5 36 4d 18 21 dd 29 69 64 ba fb d5 59 cb 08 07 75 b3 19 13 9a 08 40 4e 47 ed 83 b3 7f 6c 35 Data Ascii: \ear6ezGXVS5OOp<MTr%Gqd<tY5-6O-#x(=s:N1+\|wR}mZ}>Yd'=UP^(Lg%~)%Mp&\7p^.Ma_Fp1%}IcpBdAA7zzQA6M!)idYu@NGl5
2024-04-19 14:06:14 UTC	219	IN	Data Raw: e1 4b c7 0b 76 5d 76 70 31 19 b9 cc d4 90 0a 40 24 a4 8a 8c 04 24 8b 28 00 cc 95 66 1c ac 4e 46 0e fd 86 18 a2 55 40 64 d4 c3 2a 44 02 c8 b0 2e d2 a1 7e 07 db 93 31 72 6a ce 12 62 11 00 88 dc a3 8b 1c 32 41 48 15 19 09 c4 cf 0d 5f 9b 1d 1c 4e c6 16 ba c4 4a 1a 01 91 31 78 7c f9 c8 48 0c 3e 12 23 bb 84 83 8f c9 70 ca 98 49 15 03 e0 ff 41 00 31 fc 84 00 22 23 21 73 a9 60 32 c7 1a 62 90 0c e1 3f 14 91 7b 14 88 1f 10 19 cd 29 83 b4 8c 13 23 55 24 a4 8a 56 01 d1 5a 4a 85 7f 68 24 26 75 a5 73 77 5b eb 5f 89 02 a0 3a cc 57 7b 10 43 e5 34 54 02 a0 92 76 45 66 6f 27 c3 41 d0 41 e1 e7 0e fe b1 c0 7f 76 f0 f8 9d 1f 4f 02 1c 44 1d 44 16 ee 50 07 3f f8 da 25 00 Data Ascii: Kv]vp1@$$(fNFU@d*D.~1rjb2AH_NJ1x\|H>#pIA1"#!s`2b?{)#U$VZJh$&usw[_:W{C4TvEfo'AAvODDP?%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49795	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1080	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 984 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:38 GMT Expires: Sat, 20 Apr 2024 12:36:38 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5376 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	723	IN	Data Raw: 52 49 46 46 d0 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 88 03 00 00 2f 3f c0 0f 00 e7 04 a1 91 24 47 52 0e 7f c6 67 2a ce ff 43 70 d0 36 92 24 35 7f a6 87 60 ef ab d8 41 db 48 92 d4 fc 99 1e 82 bd af e2 f9 5f 07 0c 21 b8 e3 ce 36 10 00 14 80 e0 4e 70 27 ac 6c b3 12 56 b6 79 1f c0 1d 45 01 05 56 f6 ff 83 15 05 82 3b 8a f2 51 d9 26 28 ee 6c 13 94 fb 46 59 51 00 f6 ff 83 b0 b2 4d 00 d8 66 1b b0 01 77 0e 00 20 04 80 00 0a dc 37 95 00 e1 f6 fb b1 51 14 e5 fe fb a9 ec ff b7 62 73 7d 1e 07 ca ed 79 6c 53 b1 f1 ff ab c0 29 83 df 8f 52 b1 69 73 79 bd 84 10 82 12 de da 54 ce 9d 73 e7 7e c7 9d 7f 70 07 b4 6e 6d 4f db 58 df 30 33 33 33 33 33 33 33 cf 1c 3e c3 3c 6f 99 2b 47 76 ec 58 e6 fe db c8 ca 27 5f ce 55 44 ff 27 00 Data Ascii: RIFFWEBPVP8X??VP8L/?$GRg*Cp6$5`AH_!6Np'lVyEV;Q&(lFYQMfw 7Qbs}ylS)RisyTs~pnmOX03333333><o+GvX'_UD'
2024-04-19 14:06:14 UTC	261	IN	Data Raw: 24 47 77 a3 69 55 04 08 31 8e 67 5a d4 0d 44 ab 9a 1a dd 1c 50 ab 89 e8 81 44 5b b1 80 98 d7 a7 80 7c 40 44 ab 15 58 e5 53 22 4a 3a d0 38 4a ec b7 3d 74 24 44 f4 54 f2 a0 98 41 2b 14 c4 07 e2 1f 25 07 a0 56 d0 8c 02 cc f2 21 ed f7 91 2d b1 40 9b 15 fc fd f4 50 72 21 9f 7f cc ab bd 22 ab 9f 84 77 6c 7e 0e 76 f1 ee a0 a7 56 da d9 11 78 07 df 09 3e 38 9f 45 40 76 27 a6 fd 9f 1d d8 ec 77 fe b2 44 b5 ae 7e d8 15 5f 6c a9 76 d8 0e b7 d9 39 5e 87 fd ec 94 8d 3b 11 aa d8 f8 7f 0e d7 a2 9f 75 54 d3 29 2e 4e e2 98 f5 30 17 a8 6a 9b 97 df 5c d6 ca 9a e7 b9 44 95 db 64 e4 de d8 b5 78 ca 68 a2 b1 d3 96 ef 7d 18 aa 1a 2a df 27 03 95 64 79 96 26 ca 97 5d f8 7d 15 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 Data Ascii: $GwiU1gZDPD[\|@DXS"J:8J=t$DTA+%V!-@Pr!"wl~vVx>8E@v'wD~_lv9^;uT).N0j\Ddxh}'dy&]}EXIF"II1Pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49796	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1081	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2226 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:31 GMT Expires: Sat, 20 Apr 2024 13:53:31 GMT Cache-Control: public, max-age=86400, no-transform Age: 763 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	723	IN	Data Raw: 52 49 46 46 aa 08 00 00 57 45 42 50 56 50 38 4c 9e 08 00 00 2f 3f c0 0f 00 4d 30 68 24 49 51 06 ee ee a1 cf bf e0 07 0d 11 fd 9f 00 fd cc ed 4a f2 ba e1 94 d8 b7 40 ba f1 9a 96 ca 58 3b 7a c2 db 73 c1 b8 6d 23 47 da f8 dc fe cb 4b 97 a3 b1 af c3 15 b0 35 b0 8d 24 c9 49 d7 5b 6f 69 81 0c 00 9b fc 03 c3 a2 d8 46 92 d4 68 d0 2e f9 47 b7 26 f0 5a 4b a3 ff 09 46 0f 0e 3a 00 00 d8 fe 5f f7 91 29 d3 86 cd 0c c0 06 1c 97 7c 28 3f 65 02 00 6c d8 be d4 db c3 4e 4c 02 60 0a 22 2a 71 7d 6c 6a b3 7d 3f 00 80 ee fe 7b 56 b5 59 6d 04 03 0f 25 f8 ff 0c c9 d2 3f ab 7b 7a 3c b3 b6 6d db b6 8d bb 6d 7b 6f b6 6d db b6 bd cf b6 cd 79 af bb 2b 97 33 d5 3d b7 77 fa 45 bc 5b e6 c4 cb e5 43 45 ad b7 df 8b 5e 9c 1e 26 32 76 4f 4f db 7b dc cd c5 89 b5 3c d9 e8 08 49 b7 b6 19 92 f4 Data Ascii: RIFFWEBPVP8L/?M0h$IQJ@X;zsm#GK5$I[oiFh.G&ZKF:_)\|(?elNL`"*q}lj}?{VYm%?{z<mm{omy+3=wE[CE^&2vOO{<I
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 04 20 93 c2 4b 18 01 32 d4 ce b7 c2 66 62 d0 80 b9 0b 93 4c 9d 41 30 c6 f8 69 63 91 06 fa f1 40 12 70 c1 28 c4 fa 1a 09 2e 14 40 20 ce c8 ef aa f6 b5 69 ff 59 e7 6e 55 e4 e9 90 86 74 14 00 d5 2f 4d 92 41 06 5a 73 8e d6 16 94 48 c2 4d c9 04 60 04 60 86 66 e4 d9 fa 5e d5 ad 5f ce dd 65 ba a0 c1 f7 a1 00 10 99 ee 39 c8 b8 1c 19 aa 23 d1 31 12 08 2c c7 60 8c 26 61 84 4f 1c f8 02 44 81 b0 b8 2c cb c8 47 6b bb 8d 63 51 10 55 84 48 2f 01 01 65 e0 33 82 34 44 22 d5 2e 5c f4 76 61 9e bc 8c 17 35 c4 d5 e6 6d 35 5f 5a 79 75 2a 27 83 ee 19 30 c8 fa e8 99 32 c4 4a c0 70 82 be c1 15 cc c2 21 0e 2d 45 99 4a a9 1f 01 65 4c 7a 90 db 21 ac fd 75 f5 4e d4 cd fd 6d de 82 00 b8 b1 ea 35 1e 1c d9 66 67 92 99 62 10 f6 54 9e 2b 24 47 7d 01 01 b2 e1 0a 38 4d 0a 23 41 50 b9 80 82 Data Ascii: K2fbLA0ic@p(.@ iYnUt/MAZsHM``f^_e9#1,`&aOD,GkcQUH/e34D".\va5m5_Zyu*'02Jp!-EJeLz!uNm5fgbT+$G}8M#AP
2024-04-19 14:06:14 UTC	248	IN	Data Raw: aa 5c 18 a3 f6 e4 2e f9 79 04 ad 07 a3 12 46 69 9d 92 da eb 93 02 00 9b 6c 05 a7 73 6a ef cd cf 13 88 f9 48 a9 ff ac d9 e1 f5 82 92 ba e4 eb e5 8e df ba 0e af fb 26 8f 62 6b 0c 00 f8 04 fb 6a 8f 98 14 34 38 01 85 0e 30 53 b8 6b fe c2 54 e9 f3 88 cf fb 94 b7 82 90 91 71 6c 2e 9b 2d 7f 31 6a 2c 8f 32 b6 29 c3 20 17 26 bd 24 80 ae b0 0d d8 32 bb 9d 37 6f 01 71 3b f8 7a cf 0a 66 c8 d2 92 b1 fc c5 f2 1e e5 bf 01 30 49 e5 bd dd 12 2e 93 c0 fa c5 f3 88 eb 16 da 4b 9d a6 b9 48 48 d7 8b e5 e5 ef f5 48 82 a1 38 89 b2 57 26 20 b6 2d e8 10 f7 55 d1 5e 6c 53 1e 34 da 48 8f f7 00 22 18 2c 82 d8 34 a9 46 8e ef 50 1a 6f e6 f6 6a 7b c8 34 65 19 87 c1 86 61 f2 95 b5 9c 2c 9e da a2 94 76 46 dd 6b aa 02 a8 2b 20 30 01 32 b3 64 d1 a4 42 a9 b6 48 74 eb 0a Data Ascii: \.yFilsjH&bkj480SkTql.-1j,2) &$27oq;zf0I.KHHH8W& -U^lS4H",4FPoj{4ea,vFk+ 02dBHt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49800	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1201	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:14 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Fri, 19 Apr 2024 14:06:14 GMT Date: Fri, 19 Apr 2024 14:06:14 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:14 UTC	727	IN	Data Raw: 35 37 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 57e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-19 14:06:14 UTC	686	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 76 61 72 20 73 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 2c 74 74 3d 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 63 70 3d 74 74 26 26 74 74 2e 63 72 65 61 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var s='https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js',tt=w.trustedTypes,cp=tt&&tt.crea
2024-04-19 14:06:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49801	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	503	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2840 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:05:42 GMT Expires: Sat, 20 Apr 2024 12:05:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 7232 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 10 0b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c7 0a 00 00 2f 3f c0 0f 00 4d 28 6e db 36 82 94 f4 e5 74 ff 81 af 19 22 fa 3f 01 7c ae a0 60 e2 12 b2 e7 62 eb 0c 74 0b 75 90 2a de 0b b7 b5 6d 2b d1 5e 44 84 54 40 44 ff 45 b9 eb b8 fb d4 c0 36 92 24 27 fd c2 a4 30 bf 30 2f ff e8 d0 1a 8a 6d 23 49 8a ea 33 f9 fc 23 62 66 36 d9 e8 ff 04 e0 cf 5a 38 8a ee bf 18 00 39 de 33 6c f3 6a 4c 11 1b e0 ac 98 ce 7b 05 67 25 3a 20 57 25 ad da cf 95 ee d7 57 02 50 ee 57 24 6b 55 7d ad 0c 15 00 10 04 6b 65 ac 8c 3e be 1b 2c 6d db 76 4c 92 74 dd ef f7 85 13 55 d5 63 db b6 6d ef fa 98 bd f1 07 66 69 db f6 cc ca b6 6d 97 6d 27 23 11 11 df 7b 2f 32 aa fa 8b 58 f6 ea 09 0f b4 6d 9b b6 6d db 56 cc b5 cd e1 31 96 6d db b6 ad Data Ascii: RIFFWEBPVP8X??VP8L/?M(n6t"?\|`btu*m+^DT@DE6$'00/m#I3#bf6Z893ljL{g%: W%WPW$kU}ke>,mvLtUcmfimm'#{/2XmmV1m
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: d6 3a 5b 50 00 28 85 84 82 cb 98 21 73 b5 14 33 34 62 18 82 03 84 69 66 25 28 13 41 8a dc 50 59 0c 4b 25 bb f2 f8 bf 57 ef 73 9a 97 98 c0 5f df d7 77 4e 22 42 2d 9a 89 5c 79 ae 63 4d ae 85 21 97 b2 87 f9 f8 16 d8 5d 1e 20 03 04 1c 41 10 43 94 20 a0 b2 e0 86 9a dd 41 90 ea 56 8b d3 fe 5b fe 00 f5 5d 5a 41 ff e3 45 13 48 74 32 1d 15 ff 1a e2 d0 d2 fc 96 e5 76 28 12 85 24 e4 a8 4a ed c7 74 db 87 e6 e8 fe e5 66 00 11 21 40 62 47 e1 40 83 20 06 30 69 4e 66 f6 44 0e 3f 54 87 1b a8 0b fe ef f3 66 8d 73 d5 1c 62 69 fa 9f 6f ed e8 1b 4b 65 6e 99 ee 39 2a 05 a7 44 82 82 62 b1 9b 49 cb e1 c4 70 d6 e7 9c f9 90 f6 4f 43 88 80 02 ec 08 10 07 24 d0 ec 30 73 0c 65 a6 ec b2 8e f6 ea a7 6a 5d 97 56 52 fd a3 74 06 7e 77 c8 eb 5f 3b e4 d9 5b 45 25 cd 66 05 15 ac a8 60 62 00 Data Ascii: :[P(!s34bif%(APYK%Ws_wN"B-\ycM!] AC AV[]ZAEHt2v($Jtf!@bG@ 0iNfD?TfsbioKen9*DbIpOC$0sej]VRt~w_;[E%f`b
2024-04-19 14:06:14 UTC	863	IN	Data Raw: 76 7c 87 c7 9f d9 01 a8 7b 7e 6e 7d ff 7b 8e d5 20 53 b8 b4 43 58 e1 ff 8d b9 d7 0a 89 00 cd b9 f8 dd 9b f4 85 d7 7a 4c af 71 f7 3e ef 70 c2 fa 16 8f 3d bf f3 b3 07 47 ff a0 5a a5 bc b5 e4 61 d0 f8 9c 93 4e 6a ed 39 ec fa f8 37 8b c8 00 b5 9b ff bc e2 f7 93 5f 1e 8b 02 44 84 45 28 ac d0 7e a5 d7 45 22 8b 30 dd 6a 4e ef 7f d4 c1 97 5e ff e3 8e 08 17 5b f3 d3 e6 ce 69 b0 c8 70 44 1e 09 a4 46 6b 9c ce 14 dd 69 12 c0 04 97 eb ef 6f 3e f7 ef ee 42 75 82 02 44 84 c2 16 f6 26 ba 9d 4c 20 22 ee b1 0b 1f 7f c4 de 5b 9f fc f9 eb 5f 74 89 02 98 de 6d d3 5f 96 ef 55 dd 4c 21 c6 16 f4 97 d2 5c 0b 61 07 c5 ed 76 d1 1f 5e 32 fd 5e ff 93 1f dc fd c8 0b 4e bd 29 57 6b b8 68 a8 2f 56 fd f7 bb 2f 4c 9d c5 0a 22 2c 22 4a fc 3b ec 1e 0b 43 0c 76 b6 77 81 45 9d 9d f7 40 79 e7 Data Ascii: v\|{~n}{ SCXzLq>p=GZaNj97_DE(~E"0jN^[ipDFkio>BuD&L "[_tm_UL!\av^2^N)Wkh/V/L","J;CvwE@y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49802	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	510	OUT	GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32634 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 72 7f 00 00 57 45 42 50 56 50 38 4c 65 7f 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 ce 3e f1 7a af ff 82 67 76 ae 85 88 fe 4f 80 6d 77 97 ed de 9d dc dd b6 dd dd 8f db 5e 79 e5 c9 5f ad 96 0f d9 5e 3c ed b6 bb 22 29 89 16 f6 64 b7 f7 7b 6a ff db b6 d9 0c 8b e7 79 04 59 5d 90 00 0f 09 55 2b c7 5a bd 61 3b 3e 8e a3 79 35 d5 57 1d 75 a8 2a d3 f7 ab 95 38 24 69 a5 aa 3a 32 65 8c 91 5a 30 1d 24 20 55 55 cf 8b 3b 11 19 83 8c c1 18 41 55 7d 4b 8b 91 64 00 d3 e5 09 c2 77 00 7b b1 99 a9 c8 1f a8 4a 8b da 83 94 24 c4 c0 5e 44 cc 11 fb 53 55 34 20 40 00 a1 03 51 11 3f 36 35 73 48 ec bf c0 75 bc d9 cb d4 ad ff 82 24 5d 7b f9 fd ae 29 03 5e 91 31 34 86 6e 2d d8 7e 75 ae d6 2b 72 fe 98 80 97 7c 45 4b a8 82 00 82 d8 f7 ea 3b 60 eb 92 74 6d be 21 e7 f9 bb 16 Data Ascii: RIFFrWEBPVP8Le/IM8lFF>zgvOmw^y_^<")d{jyY]U+Za;>y5Wu*8$i:2eZ0$ UU;AU}Kdw{J$^DSU4 @Q?65sHu$]{)^14n-~u+r\|EK;`tm!
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 38 01 75 b6 c9 dd b2 2e c6 47 8f cb d9 4d b7 62 12 08 87 00 40 c3 7a 41 c0 3f 6e 7a 2f 4c c6 86 2b d6 b5 87 be a3 69 46 35 87 03 00 2c f6 00 06 bd a5 e4 f8 c2 9b b1 5d 00 10 98 4d bd bc f3 50 01 73 ea 03 37 04 8c cd 36 00 18 f4 72 1b 00 00 15 db 33 bc 66 a7 62 c3 06 e9 4c bb e3 df 45 87 ae 3a 70 71 5e e3 cd 1b 42 ff 3f 1a 6e 8e 6b d0 79 e4 0d b0 35 ce 18 ec 2d e5 c7 41 4e 5b 43 0e 06 d0 8f 1a 00 f5 bc b7 bb 03 9b 5c a1 6f 6b 49 3b 78 d2 43 ae b4 c1 da 64 db c1 06 80 96 f5 be 34 90 0c 67 84 c7 70 1f 1e 47 2f 20 09 4f d3 dd f3 f8 e4 01 c2 43 b8 1f 1f 01 a0 d1 f4 b9 cd c8 1f f5 9f 86 fb b5 a1 71 72 c5 7a 01 67 a9 9d 4a 93 4f 68 79 b1 2c c0 d2 3b 34 e9 14 3f 5a 5e 9c 17 c0 b0 ea 0e 0f 12 d0 1f e4 ca 15 48 36 bb 55 59 a0 5c 7a 53 4d 91 ac 62 5b 25 30 d2 2a 35 Data Ascii: 8u.GMb@zA?nz/L+iF5,]MPs76r3fbLE:pq^B?nky5-AN[C\okI;xCd4gpG/ OCqrzgJOhy,;4?Z^H6UY\zSMb[%0*5
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 2d 9d e5 b4 14 45 51 ca a2 2a 00 01 09 00 b2 ab f8 a8 ca a2 a8 a6 58 14 b5 d8 91 62 57 23 fc a3 08 55 28 8a 6a 14 d5 34 94 a2 a8 86 4e 28 aa 45 51 7c 2e 8a bf d2 12 7b d0 a2 13 8a e2 0f a8 96 b2 50 43 67 41 d3 50 8a a2 8a 1d a1 28 ab 50 74 c4 42 2d 3a 8a 32 15 45 d1 11 8b aa 2b f9 2b aa a1 28 8a ba 24 97 b0 e2 ab dd 2d b9 41 b5 25 ba 8e 5a 01 76 4b 6e 78 d4 2a 9c 92 42 25 a7 b4 ad 96 75 35 ac 08 b5 95 ba 9d 55 2d 6a 19 72 80 59 26 6c 40 ad c2 15 69 51 6a 25 8b 92 6b 61 11 be a2 5d 14 a5 ac 2d 59 52 4d 6b 6a 2b d5 6a 99 9b d8 16 1f b5 5d b8 72 f5 5b 62 b7 1b 55 95 75 2a d9 a2 c8 55 72 15 51 95 75 12 5b 53 ea 6a 6a 8b b2 d6 26 57 8a c2 a5 4e 92 1d 44 ae c2 96 d0 5d 97 ba a5 a1 3a d9 2e b6 28 be ed c2 95 7a 84 52 77 05 14 97 6a 17 a8 20 d5 d0 51 55 dd 68 5d Data Ascii: -EQXbW#U(j4N(EQ\|.{PCgAP(PtB-:2E++($-A%ZvKnxB%u5U-jrY&l@iQj%ka]-YRMkj+j]r[bUu*UrQu[Sjj&WND]:.(zRwj QUh]
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 46 6d 56 c9 fb d4 55 69 9d 24 27 56 db 2a 79 0b db 2c d8 b7 a2 2d ba e6 28 79 43 ae 2d f2 45 96 71 e9 aa 41 17 24 eb a1 2e 9d 6e ba 87 9d 6c 5e 33 c2 ee b1 4a b9 66 3d 5c 97 8e 1a 4d 77 57 a0 46 d6 ba 51 cb 71 d0 b0 92 a0 c2 4e 50 2a 94 31 95 4e b1 86 ca 89 1c 4b 37 9b 5d a4 d0 47 94 44 d1 54 27 5b 9c 38 ba 0f b8 4c 56 d6 a3 ba 10 8d c6 76 0d 51 94 c1 0d c8 51 68 ac 8a 94 eb 51 15 a2 28 54 1f 28 2a 72 c2 32 82 91 aa ff e3 a8 71 0a ef 71 2b 95 52 c3 6a 70 b9 00 3d 6a 17 a5 e2 3e dd 4a c9 20 3b 03 9d 0a ed 9e 50 aa 91 2d d2 34 64 23 6b 84 b6 24 2d d3 d0 a5 6e a9 8a 22 17 75 81 52 52 db 91 56 4b 2e cd 16 7f fd eb 47 ed 9f d5 ae d5 6a 99 16 69 2d d6 76 40 b5 a3 5a d2 2a b5 2d 54 28 72 83 35 50 db 31 5b 14 45 91 15 69 78 d4 22 5b 84 6a c9 16 d9 2a 4d 3f 6b a5 Data Ascii: FmVUi$'Vy,-(yC-EqA$.nl^3Jf=\MwWFQqNP1NK7]GDT'[8LVvQQhQ(T(r2qq+Rjp=j>J ;P-4d#k$-n"uRRVK.Gji-v@Z-T(r5P1[Eix"[j*M?k
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 6e 23 70 81 f3 e1 0e 41 d1 64 15 e8 66 53 cb 94 2e 9f e5 7a b4 9a 0a 74 c3 32 0c 7c 2b 59 da da 50 72 87 34 44 df 41 d6 52 b2 35 b9 48 83 86 2d 69 89 76 6a ba ed 2c eb 12 6e cc 5a 4d 4e a5 36 96 b9 e3 76 b1 f1 ad d9 9a a1 d0 91 4e 58 a4 ad 92 6b 14 b5 52 27 54 ab 65 5d 67 b6 1a 72 2d ed 6e 84 6a c9 2d 6b 8b 8e 76 8d 2c 54 6d 49 ae 01 1f c5 bb 49 56 4d db 25 dc 49 ca 46 9d 44 2b 71 6e 3e 5c 73 ab bd 4c 4e ac 66 99 bc 25 9b 36 72 da b4 45 e4 6e b1 53 64 6b 09 a7 64 e9 26 27 e1 04 ab b5 52 97 61 b5 8b 3a 2e ba a2 2b bb e6 bd 58 74 ee 4d fe 44 ee 8a d0 ab a7 de 6c 36 55 b6 df 22 db 45 f2 0f e7 a0 db fc 29 bc 69 b6 76 c8 af a8 0b e2 fb 56 6a 01 de 29 ed 58 a9 55 b6 b7 54 43 35 a7 92 95 a8 9b b1 75 b5 6e 77 a6 9d 15 95 a2 8e 9b 5a 81 6e 67 b8 92 82 17 bd 13 21 Data Ascii: n#pAdfS.zt2\|+YPr4DAR5H-ivj,nZMN6vNXkR'Te]gr-nj-kv,TmIIVM%IFD+qn>\sLNf%6rEnSdkd&'Ra:.+XtMDl6U"E)ivVj)XUTC5unwZng!
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 85 6f c9 e2 ce f6 6d c3 1d c5 2f 96 31 8a 4a ab cd ac 2b 5c 14 ed 4b 72 fe 49 1f 95 bc db a4 d1 c5 1d 5f 5d 6f ce f7 d5 cb d7 47 f3 94 1d 2a 40 b1 1c 2a b1 c0 18 ad d4 11 61 61 d6 f6 85 fc e9 67 3f 64 0a 00 05 a1 84 41 80 c0 20 8c 3e 00 aa aa 12 a9 62 b7 39 de 22 51 75 ee 40 a1 51 54 28 05 db 0f 5f fe d5 47 6b a3 aa 50 32 81 c5 4e b0 00 68 30 4c 9c c2 00 54 19 9d 25 a3 94 94 c0 47 8d 13 28 90 5a 0d 7f f6 c9 0e ce f6 ed 92 13 45 5e a6 4e a9 5a 19 fb 22 0b 84 6f 4d 4e a7 f8 be 33 ed 35 6a a9 d2 de 1a ae dc e4 9d 8f 7d 2d e9 1f ce f6 96 55 29 de eb 26 b7 2f d5 df 57 0f a7 cc b5 ba 69 bf 4c ae 8d d2 8e d5 12 22 51 53 ad be a2 bb ec 8c fd c3 5c d1 91 3f 1e 36 ac fa f6 6e 74 25 1f fc 74 2d da 90 13 8b fc f2 77 7f 95 73 ca 78 18 87 d2 b1 f8 16 a1 f7 43 dd 0e ba Data Ascii: om/1J+\KrI_]oG@aag?dA >b9"Qu@QT(_GkP2Nh0LT%G(ZE^NZ"oMN35j}-U)&/WiL"QS\?6nt%t-wsxC
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: c6 17 fc 82 9a e7 6f f8 99 af fd 3d ff f9 73 fe e9 96 df fe e2 e7 ff 7f e5 de ad 7f aa 14 49 1b 0e 2d 05 8a 2c cb c4 aa 51 11 29 4c e8 7a d3 e9 bc f1 ee d7 d7 5f c2 57 3e fd 52 48 30 8a 48 a4 2b 81 a8 af 9a 92 00 e9 ee cf aa 32 3e c3 79 26 15 1a 40 b2 6a 00 02 c1 98 a2 4b 25 c3 b9 14 7c 39 5e 71 5a a7 ce 08 88 1a 5d 55 40 90 a8 82 42 39 41 41 40 dd 04 00 be 1a 6f 7d 06 75 05 85 31 63 cc 9b 08 95 59 9a 59 2c 9c ec d4 a2 93 6c 11 f3 65 38 10 09 69 4d 31 55 89 b6 59 e6 9a 68 6f a6 bd 65 d5 15 d8 35 8a 8c 53 37 f5 c7 68 7b 74 fb f7 32 ed b7 6b 6e a7 9b fc 07 b9 d5 b1 fe 69 ea 9b a5 85 d1 76 47 12 9b 2c c9 bd 13 66 c9 54 76 19 dd 95 b5 ed 0c bf a4 28 94 ee ba 0b 9e fd a3 cf bf f2 99 eb e6 eb 6f e2 67 fe c1 af 3e ef 1b 77 cd df fc df cf 6f 5a 23 3e f7 0b be f2 Data Ascii: o=sI-,Q)Lz_W>RH0H+2>y&@jK%\|9^qZ]U@B9AA@o}u1cYY,le8iM1UYhoe5S7h{t2knivG,fTv(og>woZ#>
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 22 01 6a c2 28 2c 42 b8 69 4a 08 30 b5 42 95 10 6a 96 19 a5 82 04 9a 25 22 14 09 40 51 41 81 18 55 ca 20 55 4a 18 62 d3 9c 6b 8f 2f 44 94 d2 2a 05 88 03 50 e0 34 18 64 d8 48 32 9a 28 f7 e0 51 d2 a2 49 c3 c5 d2 5e 98 82 a4 62 d4 ff 30 7e f8 88 b4 0b 4d ac 4c e4 a9 4b e9 4b d3 b6 1e 9a 69 86 a6 2d 4a 1a 1b de fa ed 68 7f 90 9b dd fa 7e 3b 73 fe 45 c7 f7 4f 93 6f e9 6e bd 33 7d ff 2c b5 42 48 77 ce 94 aa aa 2f 67 17 2a 2a 96 5d f7 25 9a 20 de 97 1f 1d 61 eb bb 43 50 53 05 0f 1a 03 5a 53 80 a7 46 95 94 79 4e b9 28 dd 63 0f 9a 2b b0 0c 5b e9 59 b1 ea 5a d4 dd ba 15 9c 00 c2 0a 62 59 85 35 24 88 a8 42 0d 91 a9 94 40 59 41 19 0b 4d 20 88 12 82 52 53 f4 40 04 59 e7 8a 38 14 9c 13 2f 84 05 20 53 b1 12 ac 12 02 35 4e 53 70 42 20 e0 24 c2 c2 1a 08 14 56 d6 9f dc 62 Data Ascii: "j(,BiJ0Bj%"@QAU UJbk/DP4dH2(QI^b0~MLKKi-Jh~;sEOon3},BHw/g*]% aCPSZSFyN(c+[YZbY5$B@YAM RS@Y8/ S5NSpB $Vb
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 5c 6d 28 91 6c e2 1a f1 ac 89 84 a8 f3 23 e4 96 89 1a 31 5a ba 89 16 97 ae a1 32 29 d8 4e 2a 09 32 3a 0b f9 4c c1 9e ed f9 16 ab 21 4e 25 c2 b6 da 74 86 38 93 66 74 46 96 59 1e 6b 12 2a 7a 7c 59 92 8a 60 2d d1 42 0c 86 58 01 db 28 61 51 99 3a 94 ca aa 50 a1 4c 4e e1 7b 94 14 89 fb 14 dd 18 3c 6e 6a b7 01 73 4b c3 7d 88 8b 83 c8 c8 50 3e 26 89 5a 34 04 5e 16 5b de 69 6e fd e5 b7 08 0f b4 4d ec 9a 21 4d b2 8f 50 d4 f4 9d 46 b6 d1 92 8b 76 3b ac 50 bc 37 0f 4e 05 61 8b b0 57 25 1d 4e 98 24 0b a9 b2 cb 77 71 df 92 ce ba 9d 54 76 52 ac 34 f1 02 16 82 d2 04 7a b2 f4 fd 98 2c 4d 96 74 bc 2b 6b c9 92 e0 22 76 42 96 40 52 a9 b2 cc 70 1b a9 f8 fe d6 93 bf a1 6e dd a5 76 17 ee a2 83 13 7b 11 15 2a 21 db 32 6f de a5 65 6a 29 b7 e2 96 1d 47 bb 9b 84 51 32 b8 b6 65 1c Data Ascii: \m(l#1Z2)N2:L!N%t8ftFYkz\|Y`-BX(aQ:PLN{<njsK}P>&Z4^[inM!MPFv;P7NaW%N$wqTvR4z,Mt+k"vB@Rpnv{*!2oej)GQ2e
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: a5 10 4c f7 d4 29 90 4c 5a 74 96 40 c8 56 5d 23 c2 47 cd d8 5e 1e 5a 43 1a e4 56 66 d2 dd b4 26 34 f3 54 f9 9f bb 2b 6d 98 36 ba 7c 40 43 66 69 2b f7 11 71 64 21 90 44 32 da fa e4 56 e2 70 16 c5 a8 e3 68 9c e0 c3 28 ed 51 f9 49 09 82 2d 67 c6 90 d1 66 cc 6a 25 68 6c 15 ab 43 a7 9d 98 8d 93 6a 70 f3 32 57 5a b6 c2 a5 70 3b 6d 29 2d 2b db 33 72 9a 15 66 84 db 4a 90 c9 42 e6 26 de 28 01 57 ca d6 30 aa 2a 65 e9 50 d5 c7 0e 77 d1 69 37 4a 07 89 ce 6c 16 ad 82 3e eb a2 f4 2e 36 4a 32 a5 09 38 54 31 d7 3d 14 bb 7e 31 24 4c a0 cd 51 17 16 a8 ea b1 75 6a 15 27 19 43 a5 2a c8 28 e4 16 4f 4e 25 af 48 b5 36 f9 96 5c f1 97 7a 8b 19 c0 32 3d 92 7d d0 4e 16 de df df f0 a5 e1 1b 4d d2 5b b5 3c 29 d1 61 7c 5b 45 be e4 3b 50 65 b1 49 3a b8 ea 4a c7 74 43 85 0a 9c b1 c8 48 Data Ascii: L)LZt@V]#G^ZCVf&4T+m6\|@Cfi+qd!D2Vph(QI-gfj%hlCjp2WZp;m)-+3rfJB&(W0ePwi7Jl>.6J28T1=~1$LQuj'C(ON%H6\z2=}NM[<)a\|[E;PeI:JtCH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49803	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	510	OUT	GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9646 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3480 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 a6 25 00 00 57 45 42 50 56 50 38 20 9a 25 00 00 f0 8d 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 12 7a 7d 58 28 04 04 b2 b7 7c 2f dd 83 78 17 1b b8 97 db 96 8b d2 cb a2 fe c1 e6 ef 45 fe 8f af 1d 0e f9 27 f2 0f fc 8f b8 ef 78 df d8 3d 80 7e 43 ff 81 ee 01 fa 6b fe 77 f9 3f f8 0f 68 cf d0 0f 72 3f af 3f a3 be e0 3f 95 ff 6e fd 8c f6 22 ff 63 fd cb dc 6f eb 47 f5 ef e4 bf e0 3e 40 3f 94 ff 3d f4 18 f6 00 fe 55 fd 67 d8 03 f8 8f f2 ef bf ff 94 2f f0 5f b1 ff 02 ff b0 df b2 3f 00 9f ce 3f bd 7f f7 ff 67 ee 01 e8 01 d4 3f d9 3e c3 3f b1 7e 44 7f 6b ff 67 eb 9f e2 ff 23 fd 27 f1 ab fb 8f fd df f2 9f 21 ff d7 78 4e 89 07 c5 7e be fd 4b f1 ff fb 17 fe af f6 bf 79 ff 92 ff 7b f8 29 e6 ef c2 ef e9 ff 28 7e 00 bf 1f fe 4b fd 4b f2 63 fb bf ed 2f 1b Data Ascii: RIFF%WEBPVP8 %*((>ADz}X(\|/xE'x=~Ckw?hr???n"coG>@?=Ug/_??g?>?~Dkg#'!xN~Ky{)(~KKc/
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: af 5f de 8d 8e 61 28 c2 f8 6f 08 af 97 2a 86 83 d2 04 91 49 db 38 1f 55 6c 9a 88 0a c5 ed 2c c6 4a 33 4f 4b 65 99 d0 68 15 20 f2 02 eb 16 74 a5 db 09 8f a4 19 b2 d0 fd f4 14 67 b6 fb d7 ea 1b 92 90 b1 4d c0 3a 91 4a b0 39 f6 f2 be 67 59 80 7a bf 30 63 2c 70 bb 23 70 e8 83 87 a2 a9 84 df 39 e5 1a a6 46 5c f7 e2 eb 45 a3 e8 13 a8 88 85 38 e0 c7 90 1e a5 38 7f b4 85 4e 6a 90 d6 ea ce 52 20 c3 a1 f8 a5 b2 e9 9e 59 dd 65 82 e5 49 d3 4f bd 8c 7b 95 42 c7 5d 24 ee 41 f4 f1 67 4d f3 75 e7 70 9d 12 22 bf aa 93 4e 88 b8 7b 4f 55 25 48 3d aa ef 99 84 7d d6 a1 de 29 97 8c 09 a9 3b e2 85 5e 3e 9b 64 88 86 6c 82 70 57 da 9b 75 c4 0d 5b a3 9d 94 13 76 5a 90 c0 92 59 2e ed a9 12 64 1d 24 8f 6d f4 fe 07 44 31 77 8b f8 67 d9 88 1d dd 0b a5 97 e2 0c 96 e4 9a 3e 31 7e 1a 7f Data Ascii: _a(o*I8Ul,J3OKeh tgM:J9gYz0c,p#p9F\E88NjR YeIO{B]$AgMup"N{OU%H=});^>dlpWu[vZY.d$mD1wg>1~
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 29 6c 20 5e 0c 07 95 9c 33 a3 9a 8e a5 4d 5f 4d 05 8e ee 8c 2a 1d ef 19 51 14 22 4c fb dc cc f6 a2 29 2b 8b 23 cb a2 bc b3 f9 50 3d 1a 02 6e dc 3f 94 7a a3 2e 0e 80 2e 12 0c 18 ef a2 c2 fa 95 0e 7b c9 43 f3 3e d3 a6 97 24 8e 7b 8b 18 d5 55 1e 39 88 89 e1 e3 3b 10 f8 66 13 4f 9a e0 4a 58 1f d6 11 07 5d 02 b0 5b 44 d8 9b f7 8d de c1 f4 62 cf de 66 4e 67 b4 4d 23 db 01 f4 eb 96 ac e8 1d 91 70 72 d2 e1 99 06 50 87 ed 1f c9 61 f9 ff 66 d6 0c 6d ba c3 cb 5e 39 1a 57 05 5e bf 02 c7 03 c5 b0 eb 7f 20 29 b0 1f ea 05 cc 5b fb db 73 d8 d5 d2 9d 9c 50 30 03 9d 27 eb b3 56 1a 18 1e 40 ff 66 df f4 86 b2 70 4c a3 a5 67 9d 5d 04 f7 55 f5 f8 b3 14 46 a7 ad ce 91 2e 92 de da c1 39 e6 2f e8 98 ab 75 27 08 2b 84 d4 6c a8 8a 82 6e 49 4a a8 59 0c 6f e0 5f 9e 6e 4b 21 59 37 2f Data Ascii: )l ^3M_M*Q"L)+#P=n?z..{C>${U9;fOJX][DbfNgM#prPafm^9W^ )[sP0'V@fpLg]UF.9/u'+lnIJYo_nK!Y7/
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 78 cd 57 64 bc 74 80 fa 7d 8b 10 dc f4 15 0c 7f a3 72 5c ab ac 74 26 0c 25 66 e4 67 24 f6 3d 56 52 7d 43 6d fe ca 7b 3e 99 77 62 e2 ed 98 b1 f0 cc 41 2f f8 7e 57 4c 10 e7 50 b9 fa b3 0d 65 05 a9 41 2d ac 81 d8 18 2b 5f 2b 42 52 3b 86 d1 90 6e 89 b6 1f df 2a f2 4a 5d c6 6f dc 23 5b 61 bc 9d ee 26 00 83 5e c9 8e a5 db 98 06 8b fd 98 80 3f 59 22 4d 6d 45 80 eb 67 01 43 da a6 f0 4f 18 7c b5 92 29 8b 5e 06 8b 8b 40 de 6f 7e b9 53 35 5f 3b 3d 53 97 3f 75 3e e8 ab f6 60 ef af 80 41 c3 1f b4 3c d8 e9 e2 d3 23 6a f4 f4 8f bb ab 5b 9b 56 1e b3 98 f9 34 1f e3 ca 58 76 7a 4b 32 e3 28 ab c7 7c 18 4f 88 f5 77 32 c5 24 f1 6e ea bc 96 a7 37 33 55 11 9c 5a ba 80 58 64 23 bd 62 1c 89 5b 74 0c 79 b5 12 2c f8 06 03 4a b7 7c d0 99 04 24 b5 bd 1b ea e8 46 ed 52 34 3f 5c bf 95 Data Ascii: xWdt}r\t&%fg$=VR}Cm{>wbA/~WLPeA-+_+BR;n*J]o#[a&^?Y"MmEgCO\|)^@o~S5_;=S?u>`A<#j[V4XvzK2(\|Ow2$n73UZXd#b[ty,J\|$FR4?\
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: dc 95 85 3a c0 36 2a d4 e3 68 13 ca 23 be 2e fe c6 cd d3 b9 8a d2 24 93 8b 2c c1 1e 9f 03 39 e0 17 ab af eb 06 59 97 aa 31 df 5a 91 d9 d1 eb 31 23 6c c7 d2 e9 ac 48 8f 56 23 0e 61 d2 15 55 e0 88 2b 87 53 9e a4 58 fc 4e 29 06 c3 ad 28 55 95 d6 f9 37 26 0f 2c 9b ae 51 b7 ce 34 5c d8 e2 42 17 2a 11 a5 98 89 bb 7f 30 b5 79 8f eb c2 02 03 a7 4d 2d 6e ee 95 32 d1 e3 a1 6f 62 59 f3 08 d6 70 a3 fa 80 0f 86 72 85 1d 45 10 03 9b 2f 0b 20 66 99 81 ad 21 73 6e dd 4b 43 f5 06 15 7e 70 93 8b cd 28 7e 95 15 2e 66 30 24 4a be 28 7a 6a 7e 66 d7 3a 51 4a 2d 64 a4 22 ef 23 b9 24 4b a7 85 8e 21 1c 45 d6 46 ee 31 35 d9 f4 27 9f fd 53 3b 52 60 cf 17 44 c9 1c e2 11 93 51 12 08 84 6d 26 c5 76 bb 3b 67 17 21 d0 b4 16 d2 da 92 00 d8 e2 60 b5 e6 c9 f6 98 77 50 b9 ed 91 0f 06 51 c0 Data Ascii: :6h#.$,9Y1Z1#lHV#aU+SXN)(U7&,Q4\B0yM-n2obYprE/ f!snKC~p(~.f0$J(zj~f:QJ-d"#$K!EF15'S;R`DQm&v;g!`wPQ
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: d4 f0 4f c3 cd d2 6b 9c d3 62 2a 01 7d de 57 df 2a eb a2 1f 4b e1 f7 24 2a aa 3b 9c 01 0a d4 70 a9 94 b3 08 bb f2 41 a3 5d e8 7d 6d 5a d5 e2 7d 88 2c 78 4f c5 b9 7e 09 9e 93 c5 8b 1d de c1 43 06 bf 6d c9 4e 87 4f f9 aa e8 01 5d 88 e7 75 db b8 af cf 59 3c 6c a9 94 f7 ee 70 d2 b9 3f 94 79 51 89 76 f5 77 6d d1 8e 35 57 c3 c6 47 22 b6 db 3c 6f 50 65 43 4f 6f bd 38 76 7e 7c 06 9f f4 50 df 1c 16 7f 48 4f 0a 2d 18 68 42 c9 d2 b3 fb 11 09 f5 ea 5e 4e f4 42 9d cc 2a 8d c0 18 af 3f 47 99 f9 ff 37 7d f8 f2 2f 17 5c c7 10 8a d0 b4 c1 43 4b ed fc 35 b3 d7 65 37 de 6c da c7 9e 34 21 c5 ab 95 f9 c8 aa 7d 2e c3 f8 83 e8 09 fe d2 86 74 e4 7c a8 d6 82 9e bb e2 21 9a 61 6b c8 26 06 67 6f 60 9a 03 1b 4b 20 1b a9 eb 30 6f 6b a5 98 a7 db 5b e4 a6 04 85 1f 47 bb 97 90 b5 7c 2f Data Ascii: Okb}WK$;pA]}mZ},xO~CmNO]uY<lp?yQvwm5WG"<oPeCOo8v~\|PHO-hB^NB?G7}/\CK5e7l4!}.t\|!ak&go`K 0ok[G\|/
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 14 df 0a d2 77 bf 13 4f 01 69 0b 2d 66 69 bc 7a 6f c3 ba f9 a5 73 a5 f8 c8 97 82 e8 01 c1 09 0a 4b 69 32 62 c5 c3 4c 52 03 75 97 a8 e4 40 a5 59 f0 2f 2e f1 cb 38 12 aa 1e 82 4c be c9 b3 4d 37 fb 60 bc 06 f7 1e 79 87 a1 29 6c 29 bf c3 57 01 58 fc 00 0d 6c c6 35 80 00 3a 1b 3a a8 49 38 71 9e 68 a3 cc 4f 9b d5 d1 e2 39 b7 03 6f 92 78 62 09 04 eb 7a 5a 55 b9 97 2c 1b d5 a0 f3 7e 20 16 ff 2d 4f 35 e7 b3 f0 0d 3c 5f 25 a8 81 69 87 fd d5 54 ed 25 58 ff ed 36 3f cb ea d3 e9 4e 10 f9 83 f3 15 18 07 27 e9 bb ed 0c 83 9c 82 0a cc cf d5 f3 5d 60 53 86 ae e5 76 73 8f 1a 4a 0e 59 a6 d0 cc 20 65 74 fc bb 0d e7 f5 0c 99 45 de 43 5a 96 e3 b5 6a 2e 84 fd ae 29 7a df ac a2 44 c4 ac 62 08 1c cf 0f 8a 5d e6 12 a7 20 9b bf 4f f7 25 68 19 f8 64 6c b3 22 65 bc da 1c 62 36 19 f8 Data Ascii: wOi-fizosKi2bLRu@Y/.8LM7`y)l)WXl5::I8qhO9oxbzZU,~ -O5<_%iT%X6?N']`SvsJY etECZj.)zDb] O%hdl"eb6
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: f9 76 4c d3 c2 d7 11 a1 ca 8e 00 82 32 14 c4 b4 df 25 34 53 34 a5 8b 05 1b c8 dd 9b 6b 26 d4 09 e6 3c f3 96 5f 89 20 40 c0 c9 80 2a 40 fd d2 fb 3e 0c 68 06 f8 c0 a9 cf 84 ff 70 53 0c 47 8a 03 4e a7 68 c0 e3 69 fd 84 9f ff b9 3d 70 0f 74 ef 7e d0 ae 1f cf 21 94 c9 c0 3b 62 0f f8 30 15 78 87 24 39 7a 16 3f 11 dd bd c4 12 1e 2e a0 82 27 46 19 8d 66 e5 11 2a 69 64 00 36 33 5b e3 09 08 df 8d 4a ba 0f 83 03 05 62 10 aa 14 a6 4c e8 d0 a0 4a 37 ba 07 03 53 02 d4 5e 46 0f 6b bd e3 fd f2 a7 4c ac 50 40 55 61 b8 0d 42 57 0c 38 22 c1 f3 18 4b 7f 9e df a5 6d 11 60 32 db 00 67 b3 ae 35 67 be 35 79 64 22 ba c0 02 c1 91 c9 c3 bd 3b f2 d5 3f 38 c9 5c 2d 89 c4 cf c9 27 f5 8d 69 fb e6 a1 37 77 ab 96 c7 58 ac f4 de 06 8d 14 e8 83 11 ef 9a 25 b0 66 5f 20 bf 03 c9 80 cf 5e 5b Data Ascii: vL2%4S4k&<_ @@>hpSGNhi=pt~!;b0x$9z?.'Ffid63[JbLJ7S^FkLP@UaBW8"Km`2g5g5yd";?8\-'i7wX%f_ ^[
2024-04-19 14:06:14 UTC	139	IN	Data Raw: 6a 36 4a 38 1e 85 7a 1f 1c 85 e4 8d a7 9f 70 0c d3 3e 10 b4 af 64 fc 6f a4 fd a8 66 e9 10 41 ab 87 d1 68 38 ad dc f8 f9 51 85 f1 39 ed be 34 f9 9d 3c cc 54 79 13 09 d6 e3 3a 14 40 1d eb 4d 4e d5 97 8b 85 13 e6 2d 51 8f 3f ee f9 13 48 06 96 ec c0 36 f6 3b 5c 4f a3 f5 c2 1b a1 14 0b 2c 01 5e 6c ff 91 b5 9d 95 61 4b c9 84 5a 66 9a f0 08 b4 e2 7e 44 00 ea 24 e9 4e 0e 7e b2 e1 96 19 00 95 b0 36 fa 3a c0 62 e6 66 00 00 Data Ascii: j6J8zp>dofAh8Q94<Ty:@MN-Q?H6;\O,^laKZf~D$N~6:bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49806	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1080	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1832 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:33:45 GMT Expires: Sat, 20 Apr 2024 12:33:45 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5549 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 20 07 00 00 57 45 42 50 56 50 38 4c 14 07 00 00 2f 3f c0 0f 00 09 45 6d db 40 ca be cd f8 03 be 30 44 f4 7f 02 78 aa 06 92 ab 36 5c d0 66 cc 0b 16 6c 1b 49 52 54 87 0f d6 ea 2d 86 fc f3 bc 1c d8 36 92 a4 a8 74 d6 ea ac 0b 00 f3 8f 0f 1e 0d 45 6d 23 b9 49 3f f7 7a 21 b0 c7 e0 fa 9f ca c3 28 03 d0 33 60 bf 7f 66 e5 05 5c e0 5e 56 66 76 10 02 10 66 d6 64 0b b5 ce f8 01 c2 cf 7f ec 7a a8 01 00 33 49 12 3f 18 45 74 e5 ff 53 64 2b 33 b3 72 0d 77 77 77 77 78 01 22 32 e7 05 34 75 32 77 77 88 c9 c8 29 22 77 77 d7 eb ee b2 bb d3 c8 de 5b 33 37 24 fa bd 03 f5 af 7f 61 1d e1 9c 6c ab ab 70 49 b7 0a 6d f4 bc 01 72 ed ff 04 64 53 93 75 88 67 5b 8b 9e 1c d7 f3 00 b8 47 16 3a d9 4d e4 d8 b6 6d da d6 98 7b 3f eb db b6 ad 1a 30 b3 19 fa 67 ca 6c c4 0a 55 01 db Data Ascii: RIFF WEBPVP8L/?Em@0Dx6\flIRT-6tEm#I?z!(3`f\^Vfvfdz3I?EtSd+3rwwwwx"24u2ww)"ww[37$alpImrdSug[G:Mm{?0glU
2024-04-19 14:06:14 UTC	1110	IN	Data Raw: f0 a9 d1 5c a9 37 b8 fb 2c 60 14 50 d5 0d a3 98 3a 3f c9 ee 43 3c eb 4a 03 cc c4 ac b6 77 66 39 f4 c6 e0 af 3e 05 5f c5 49 f3 7d ee a9 b4 aa c0 d4 6b 14 7e ae 02 9a 58 3a 3e ce da 2d 9f 8d c5 9a 88 2c b5 69 66 0a 3d 68 41 ef f6 c4 75 3b bc 3b ff d6 2c 63 8e e1 44 f6 5e 92 8a 00 00 ab 3f 5a a5 90 08 25 c5 57 b6 47 1d cb 8e ad 6a 1c d6 74 e3 d7 2a 9b 1b b0 fe 63 f7 9c 3d c7 23 3b 76 1a 65 70 9f d1 9a 9d 8f 0c 78 41 d6 be 00 92 20 12 60 20 10 67 bb fb 74 72 61 e5 75 05 00 cb 2e 6c 7d b1 27 9c 7b 63 96 b9 43 03 b0 0c 07 df d1 04 b0 ab 21 de f3 ef 9a 83 09 aa 67 cc 3a 5e a2 75 75 27 ad 93 6f db 3d 98 65 42 34 80 16 e8 fb b4 97 40 1d 1e a9 38 52 b2 98 45 c7 d1 e7 93 6e e2 21 0b 65 27 1a 8c 1b f8 8b 32 8a 34 01 30 80 66 cf 82 49 d7 5d 43 b6 1e 7b 2f dc 9e 71 e9 Data Ascii: \7,`P:?C<Jwf9>_I}k~X:>-,if=hAu;;,cD^?Z%WGjt*c=#;vepxA ` gtrau.l}'{cC!g:^uu'o=eB4@8REn!e'240fI]C{/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49808	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	503	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:15:12 GMT Expires: Sat, 20 Apr 2024 10:15:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 13862 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 4c 44 07 00 00 2f 3f c0 0f 00 4d 28 6a db 48 92 3b cf 2e 7f c2 27 85 88 fe 4f 80 cf 6c 4d 42 ba bf a0 9d 83 59 27 2c 58 45 92 1d a5 2b 3a e2 5f d7 9d 70 83 02 3e c1 82 99 b6 6d cc 1f 5e cf 02 a8 76 0e 82 81 b4 6d b2 fd fe 35 4e 4a ff 13 5f 64 29 10 e0 80 25 57 f6 47 2e 5d 80 85 8b 01 3c 02 2c 0c 1e 18 63 c0 c2 0b 22 01 fc c3 43 8b da 3f 43 d2 53 dd 3d 58 7c 5e c4 b6 6d 5b 57 b6 6d e7 3a 27 57 b6 6d 5f da 36 3e db b1 b1 f6 56 5f ec ec a6 bf d9 bb f0 b7 27 ae ae 9c 09 fb 4c fa 4c e6 2e b6 f3 8f 93 9e 9c 54 9c 4c 6c dc da 4e 8e ec 48 92 14 c9 8a a8 ee 7b cc 4c 22 3c fd e5 a1 ff 63 9e ee 4a b9 d6 b6 29 92 f2 7e 55 d5 33 8b bb bb 6b 04 a1 66 ae f7 e0 ee a4 e4 dc 02 b9 bb 84 ae 19 c4 ee ee 30 33 2b 6d 55 7f 4c 80 09 Data Ascii: RIFFPWEBPVP8LD/?M(jH;.'OlMBY',XE+:_p>m^vm5NJ_d)%WG.]<,c"C?CS=X\|^m[Wm:'Wm_6>V_'LL.TLlNH{L"<cJ)~U3kf03+mUL
2024-04-19 14:06:14 UTC	1159	IN	Data Raw: 38 56 19 94 92 b6 a0 98 f3 8e 26 82 b5 c5 e4 f1 77 61 a5 f7 c7 f3 7b 78 43 ff 65 f8 3b 8d 01 99 b8 74 70 19 e8 d0 10 b2 d1 62 4f 4e 9e ca 90 33 7b 78 ba 7d 7d f9 35 8d fe 8d f0 df 58 64 62 44 5c 91 17 d4 a5 62 1c 49 ad 91 0a f4 4e 39 29 af d3 f7 2f 0a 6a fa 3e 0c c3 ef 41 eb 6b 00 a5 a1 7a f0 92 86 00 04 20 3b 96 a7 2b c4 86 a9 af 06 a4 e1 1a c0 4b 77 58 c4 81 e8 0a 99 df 9a f5 a9 1f c3 80 6a 9b a6 b5 d4 cd dd cc 49 d2 06 a3 68 c4 60 33 51 53 99 18 43 77 30 a8 ea d7 32 a0 4f 48 b8 d9 80 3b 60 b1 24 47 d1 df 39 49 79 51 05 a2 fa 12 40 15 90 03 3a 32 a2 9c 44 43 23 9b 38 36 f9 1d 23 5e 1c e9 cb 46 7a 35 fc 7a a3 91 55 dc 52 6c f3 57 d3 19 23 19 03 f4 16 1f de 06 22 a7 bb 2e 8b 6e 2b 94 e2 42 94 26 eb df c6 e3 af fa a3 cd f7 41 4d 7b fd b0 e5 ba b7 06 ac 6b Data Ascii: 8V&wa{xCe;tpbON3{x}}5XdbD\bIN9)/j>Akz ;+KwXjIh`3QSCw02OH;`$G9IyQ@:2DC#86#^Fz5zURlW#".n+B&AM{k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49807	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	504	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:45 GMT Expires: Sat, 20 Apr 2024 11:12:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 10409 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 f2 76 7e 5d fe 84 2f 0c 11 fd 9f 00 9f 61 90 96 a1 ca 3a b0 dd 8f 21 f1 5e b0 8d 24 c9 49 5b 88 d7 26 9a cb 3f 4f 88 81 71 23 49 8d 0a 13 00 22 ff 18 3d 67 5f 6a db 48 52 63 7e 88 f9 43 ec 7f 2a 1f df 44 a2 91 00 30 28 24 a9 f9 89 25 03 b6 17 b6 77 5d 6b 0c 7b 7b 01 05 44 13 23 23 01 a8 ae bf c4 a9 71 5a ac 76 9d 00 20 31 b1 b0 80 1f 0f 1d d8 d6 d6 48 8e a4 96 86 67 96 cd cc cc cc cc 8c 91 d7 d1 da 11 33 73 c6 cc cc cc cc cc cc cc 3c cc 33 2d f8 03 75 ab 5a da 6c a3 bb 9e 4c ea 2a 99 3d a5 ea da d0 ec 70 c1 cc f6 62 64 66 7b 29 34 43 e4 2a 39 b4 b6 1d 92 f4 7e ff 5f d5 e6 28 5a db b6 6d db de cc 66 ba 99 bd 91 6d db b6 cd b1 3d d5 7d ba 1a 7f 7d 72 64 db 56 6d 65 ae Data Ascii: RIFFWEBPVP8L/?EmIv~]/a:!^$I[&?Oq#I"=g_jHRc~CD0($%w]k{{D##qZv 1Hg3s<3-uZlL=pbdf{)4C*9~_(Zmfm=}}rdVme
2024-04-19 14:06:14 UTC	1247	IN	Data Raw: ab c5 3b 72 55 6b 97 f9 ed fb 6e a4 5a 11 0a 78 49 06 d8 05 21 48 96 50 8b ca 3c 6c c7 e6 de f3 7f 85 ff bf a1 d5 ba fe ef a1 82 5f 9b be d9 33 61 bb 11 0f d4 94 73 c2 3e 9d b7 ae 37 16 e6 11 10 3c 72 83 1c 94 36 c8 38 15 20 13 43 40 88 01 cd be bf 99 6d 5a db b5 db 3e 56 5b f5 e9 b7 46 ce 43 63 89 8c d3 0f 91 89 10 87 c2 52 03 f4 df 23 d9 b8 64 c6 91 51 86 40 96 24 42 9a e4 1f ea c0 22 5a f9 42 81 ca a1 8c 16 a7 39 59 10 0a 45 35 f8 d5 95 f2 42 b6 1c b8 61 18 f9 53 22 20 08 fd cf c0 c7 80 72 75 26 77 78 68 96 82 08 28 a6 74 55 2c 15 47 94 45 d8 7c 89 00 18 02 df 37 ae b3 5e 28 b9 71 c8 46 b5 c5 0f 41 0e 6d 00 81 8e 18 de ed e9 59 af 5b 24 83 00 99 42 05 d7 20 ae 31 aa 6c 2a 21 41 18 84 41 18 c8 1a 02 e5 ac 73 b8 d0 10 e6 9c 9d 31 b4 fe 3b 13 84 41 28 81 Data Ascii: ;rUknZxI!HP<l_3as>7<r68 C@mZ>V[FCcR#dQ@$B"ZB9YE5BaS" ru&wxh(tU,GE\|7^(qFAmY[$B 1l*!AAs1;A(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49810	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1080	OUT	GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2620 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:38:28 GMT Expires: Sat, 20 Apr 2024 10:38:28 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 12466 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	721	IN	Data Raw: 52 49 46 46 34 0a 00 00 57 45 42 50 56 50 38 4c 28 0a 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 97 eb fd 2c 7f c4 3f 30 44 f4 7f 02 d8 a7 66 5b 36 68 34 03 e4 c3 1f 5a cb 5a 1a 3b c3 11 1a 1b 5b 68 2c cc b4 6d e3 b3 fc e1 ed 1a 97 90 50 d4 36 92 63 ed d5 e7 42 b9 c6 1f da 49 49 23 49 52 39 58 fe f8 b7 75 23 e1 f0 1d e9 7f 22 09 49 92 4f 00 c0 07 e1 20 42 00 40 14 00 a8 00 41 e0 09 82 0a 50 dd 1b b3 f7 fb d7 98 cb 05 60 d2 01 10 d9 91 b6 4d 91 6c 27 e7 9e cb cc cc cc cc d7 14 33 33 33 4b 2e 33 5b cc cc cc cc cc ac 83 97 99 99 51 d3 1d d1 9d 55 3d 67 56 f0 da 62 ca c8 68 a7 4c 59 ed 4c 4c 94 57 02 4b 1e 75 b4 a7 1d 30 7c 22 53 66 c6 ef 89 ec f6 26 4a b4 87 36 25 2d 62 56 22 47 0e 64 db a6 6d cd b9 0f be 6d db b6 ed 67 db 2f fb d1 8f 6c 1b 91 6d db b6 6d f3 d9 d6 Data Ascii: RIFF4WEBPVP8L(/?m9,?0Df[6h4ZZ;[h,mP6cBII#IR9Xu#"IO B@AP`Ml'333K.3[QU=gVbhLYLLWKu0\|"Sf&J6%-bV"Gdmmg/lmm
2024-04-19 14:06:14 UTC	1255	IN	Data Raw: 1e b0 8d 35 ab b3 58 71 6a 32 f7 fb 04 34 5c 62 4f 19 4f 25 23 63 b3 7a 58 01 af 38 ce b3 4f b0 42 15 16 2b ce cb e5 66 47 00 a3 ea 59 15 15 db 95 2c 33 45 cb 10 e0 39 bb 79 da 09 36 6c c0 62 c5 b1 1f b8 f5 49 80 1e ea 47 df c9 52 e6 7c ab 7b 55 1c 87 23 e8 4d 17 b9 f5 71 76 6b ce ca d5 99 70 9c 9d c1 27 af f1 34 97 cb af 01 08 2d 27 df c2 3c a7 6e 4f f4 13 5e be f1 12 b7 3e c6 ae cd 59 a5 3a 13 8a b3 d2 f9 d4 75 9e 26 5c 61 0d 00 d4 fd 38 18 04 93 25 63 20 68 9b 2a 56 16 23 7e be e9 12 b7 3c ce 6e cd 58 a5 0a 9d f5 c9 eb 3c 03 5c 7e 35 00 10 7b 31 11 a6 d4 76 95 44 db 40 1f 55 e4 e4 9b 2f 73 eb 6d ec 5c 8f cf e6 6b ee 6d fe 73 b9 95 90 cd 96 93 ef ca a6 cc b3 62 3f 8a 61 fe 7d e0 cd f7 b8 ed 36 76 ac c7 67 b3 9a 7f 97 a7 80 cb 2d 03 72 22 10 cc b7 29 24 Data Ascii: 5Xqj24\bOO%#czX8OB+fGY,3E9y6lbIGR\|{U#Mqvkp'4-'<nO^>Y:u&\a8%c h*V#~<nX<\~5{1vD@U/sm\kmsb?a}6vg-r")$
2024-04-19 14:06:14 UTC	644	IN	Data Raw: dc c0 9f c7 80 5d c0 6b ad 90 ae 3f e2 81 0b fd e8 12 bf 68 5c f1 06 c9 7a 2f e4 c6 1f 72 78 74 86 56 74 c7 3e f5 7e 23 6e dd 6c b0 af 15 d1 e2 34 8d 6b c0 a8 35 df 6a 08 98 67 c9 66 b4 63 65 5f 7f 53 66 f9 4a da a3 5b d6 35 86 9e bf fa f0 d3 d2 8b f5 fa 91 64 9c d0 85 25 c8 68 8e 88 37 bb b1 50 a1 13 dd b8 f3 c0 db c7 39 a1 05 f4 d3 ac 0e e9 51 4a 2f d0 42 da 7d f8 e1 67 3f 4d cd 83 13 9f 75 b4 be d8 4e e0 24 75 7d 43 f0 5c 32 63 36 46 bb 5a fe f0 db 02 a7 a8 f8 af f3 da 79 04 90 24 96 04 73 00 73 20 96 50 f0 3e 89 4b 0d 79 22 49 ba 56 bf 87 6e c0 8d d3 20 49 7a 9a d2 63 dd 8a 9b 39 2d 1f 39 5c 2e 2c 4b 63 c4 d1 65 6c 95 68 37 44 49 20 25 6d 56 dd f7 3e 6c 78 86 64 97 38 6d 6b 8f 1d 6e d2 fe 97 d2 0b 54 79 97 f0 08 ad ec eb 94 8f 32 af a6 f8 10 58 a4 25 Data Ascii: ]k?h\z/rxtVt>~#nl4k5jgfce_SfJ[5d%h7P9QJ/B}g?MuN$u}C\2c6FZy$ss P>Ky"IVn Izc9-9\.,Kcelh7DI %mV>lxd8mknTy2X%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49811	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1080	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1494 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:35:55 GMT Expires: Sat, 20 Apr 2024 12:35:55 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5419 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 ce 05 00 00 57 45 42 50 56 50 38 4c c1 05 00 00 2f 3f c0 0f 00 09 45 6d db 40 4a f7 cc f8 23 be 28 44 f4 7f 02 38 8a 48 94 1e 2a 0e 49 23 a0 3e e6 05 a3 36 92 1c 59 fb ca f9 00 2c 7f 9a a7 e5 60 b4 6d db a4 f1 d0 e0 d0 14 02 41 88 9e e0 ff 39 13 fa 3f 01 b6 78 cf 05 40 80 cb 3e 73 7c 00 80 78 1d 0e e0 82 78 32 19 00 08 c8 64 e7 07 05 80 86 b7 88 8e fc 7f 8a 6d a5 7b 8e 3e c7 dd 5d 72 52 77 77 77 0b 5f 84 86 ee 64 4e e8 ee 99 43 ea ee ee 0e d7 fd 74 a3 67 e4 e1 d1 2f 62 07 a7 fe e8 95 0c cb 6e 0d 3a 45 4a 7c 6b b2 b3 83 5b 4f 4e d5 7f 01 14 d9 54 67 bd 02 fc 5a ce 0e 6e bd 65 9c 5d 90 91 c8 c1 b6 ed d8 9b eb 79 df d8 b6 6d 8f d9 8d cd 9c 9c d5 a9 ed cd 76 77 b7 a3 dd cd 36 a6 d8 f8 1e d9 b5 b6 1d 7b 74 dd ef ff bf ff 17 db 4e ce ac 43 67 d4 c5 Data Ascii: RIFFWEBPVP8L/?Em@J#(D8H*I#>6Y,`mA9?x@>s\|xx2dm{>]rRwww_dNCtg/bn:EJ\|k[ONTgZne]ymvw6{tNCg
2024-04-19 14:06:14 UTC	772	IN	Data Raw: 3b bd 3e d9 01 17 8c d7 c1 71 d1 ea 7b 52 db 34 1f 71 c2 96 03 c4 66 c0 c0 08 ef ff 59 86 af b8 98 5b 24 3b 1c a3 3c 7d ad f6 d9 6f 01 2b d6 e7 9f e5 3a 92 01 05 6c 8c 44 c1 51 24 ed 48 61 18 50 2e 28 77 7a fb 6a cb ac 8e d4 67 d2 d5 98 27 91 39 c3 3a d4 54 29 45 cc 3c 50 c1 6b c9 0d 79 43 4c 4c 3c 40 f3 32 7e 5c 77 cd 9c 31 00 ab 1e 78 d9 cc db 08 64 92 0a 73 ca 21 ed 90 46 d2 e8 bf b4 6b 94 e0 42 08 19 32 4f ca 42 cc a4 14 82 51 2c 8f 0d 01 c0 2c 61 f9 56 de 80 b9 c2 86 a5 fa 6e 2f dd e3 a5 02 40 ba c6 d6 f7 4f 0a 06 17 33 9f 9e bd 20 c1 0b 32 bf 19 18 8c 3c cd d5 1d b6 9e c1 03 af 02 56 28 d3 bc e5 0d 85 e9 38 50 21 b6 7d 7d 59 55 16 04 fa ba 53 ba 16 e0 52 a2 31 d0 e9 05 2b c7 c6 30 f1 0b 33 27 f6 7a 79 fd 73 bd a6 b5 4a e6 5e fa 2f 4c be 78 e1 01 ee Data Ascii: ;>q{R4qfY[$;<}o+:lDQ$HaP.(wzjg'9:T)E<PkyCLL<@2~\w1xds!FkB2OBQ,,aVn/@O3 2<V(8P!}}YUSR1+03'zysJ^/Lx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49809	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	503	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1552 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:32 GMT Expires: Sat, 20 Apr 2024 11:26:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 9582 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 08 06 00 00 57 45 42 50 56 50 38 4c fc 05 00 00 2f 3f c0 0f 00 09 05 6d db 30 da bf fc 11 77 c3 10 d1 ff 09 a0 e7 ea 31 7c 54 15 a0 65 d0 bb 44 44 33 08 2e 14 b5 8d e4 78 f7 2a 7f b4 fb bf 82 41 71 db 36 6e 8a 69 d7 5e a7 a6 6d 24 c9 dd ee de 0f e1 f8 a3 3b 00 57 f4 7f 02 fc 8b 77 a7 73 fb e5 4d 8e 4d a7 90 ea 00 d0 cd 89 c6 f1 02 00 3f e5 74 ba 83 4f 0f 5d f7 ff 14 db cd cc ae 99 99 99 19 3b 07 9f c1 e9 f0 09 9c 2a 4a cf cc 79 04 e6 57 60 66 66 c6 cb 7c ed 0b 67 67 27 70 d6 d2 d9 ed 5c 7d c3 c9 6c 94 95 dc 79 65 9d 36 cc b8 92 cb 80 19 ee 54 ae ac 9c ca 15 bb 8d 24 0b 92 64 d3 b6 7a 36 ef 3a d7 f7 e8 da b6 9e 6d db e6 97 6d db b6 df 97 6d db b6 6d db 6f 63 20 47 92 a4 48 8a a8 39 66 7c 9d fe aa 2d d3 31 cc 5c 65 4c 80 06 ac 80 d8 fa 05 6d d2 Data Ascii: RIFFWEBPVP8L/?m0w1\|TeDD3.xAq6ni^m$;WwsMM?tO];JyW`ff\|gg'p\}lye6T$dz6:mmmmoc GH9f\|-1\eLm
2024-04-19 14:06:14 UTC	830	IN	Data Raw: 34 be 10 ac 93 41 4d a9 5d eb ab 0e c1 4e 83 35 31 c0 a6 38 8f fa c3 2d 8e 45 b7 14 b6 ba 66 27 d9 0e ad bb 4a b2 b1 93 61 c5 52 42 f0 b9 0f 53 f2 e7 90 b5 79 78 6a e6 be ba cf 67 97 18 5c 3b e6 57 2d 64 d5 67 89 e3 c7 d2 d1 8f ea 17 85 7b bf 83 c0 4d 04 be b0 7c 5f d1 f9 ad 33 70 a0 76 21 14 7e b5 18 0d 9d bc cf e6 5b 63 08 b4 ed 17 ef 30 d8 76 10 c4 ef b5 17 3f 2a 37 75 c3 80 57 e7 4f c9 30 85 0f a9 15 b6 32 b0 5b ee 77 e1 14 93 61 b0 18 f0 90 2c 08 06 34 3a ee d5 a7 1a 2f 8e 65 43 57 fa 88 9e 82 cf 0a 20 45 72 6f 28 9c 0f 3a 00 63 31 e4 00 cb 2d 15 1f fe f6 77 f1 a6 ff 19 51 c3 b1 ae d3 e1 da e0 d9 48 35 c2 a2 70 8a f3 47 6a c9 bb 7d b9 5e be 3f 5e dc 66 36 16 57 47 47 3e df fd 92 13 2e fd 9e 98 e9 f4 e0 41 48 91 82 c2 29 42 03 41 92 7f d3 da a0 d6 9f Data Ascii: 4AM]N518-Ef'JaRBSyxjg\;W-dg{M\|_3pv!~[c0v?*7uWO02[wa,4:/eCW Ero(:c1-wQH5pGj}^?^f6WGG>.AH)BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49812	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	1080	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:14 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1670 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:20:21 GMT Expires: Sat, 20 Apr 2024 12:20:21 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 6353 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:14 UTC	722	IN	Data Raw: 52 49 46 46 7e 06 00 00 57 45 42 50 56 50 38 4c 71 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 31 ea f8 5d 8f 3f e1 45 21 a2 ff 13 80 33 17 18 80 30 76 0d c4 98 7c 80 85 eb 48 b6 95 a8 71 d7 2f 97 fc a3 22 04 8a 18 d8 8d 41 49 23 49 52 c1 cd a2 95 30 fe 15 ee 3d 80 51 24 49 8a 73 a9 60 19 8f ff d7 ff 09 30 1f fe 54 ee f8 c8 c9 d1 c6 0f 40 0a d0 6a 9b 50 02 f5 a3 17 7b 89 d4 1b b9 1c 4a 97 24 0f 0b 78 78 99 f6 02 8f 3c 00 de 7c f8 2d a2 23 ff bf e2 c8 e9 d7 c3 cc 68 76 c4 ec 88 f1 02 be 04 3b f2 0d 7c 03 47 2e c7 8e 1d 31 33 33 33 33 ce 88 07 5a ea d7 55 d6 13 cc 38 c4 9f 49 d1 a6 ff 7a d5 06 45 1b 8e 23 97 aa 5e d0 97 50 29 db 1b 6c 39 fb 1f c0 a9 4a d9 3b c1 46 74 12 33 3b df dc 77 58 07 72 68 db 36 b5 67 9d 87 ff 8f 6d 9b 95 ad ca 36 2b 3b 55 52 da b6 6d db 49 Data Ascii: RIFF~WEBPVP8Lq/?Em1]?E!30v\|Hq/"AI#IR0=Q$Is`0T@jP{J$xx<\|-#hv;\|G.13333ZU8IzE#^P)l9J;Ft3;wXrh6gm6+;URmI
2024-04-19 14:06:14 UTC	948	IN	Data Raw: 08 df a4 b5 05 f2 a2 96 12 12 b7 a1 71 cb 03 d0 05 4e 50 9d 75 cb 74 07 76 6f 9b 7b b5 54 67 1e 95 c7 60 b1 91 99 76 f8 41 db 88 d9 6a 26 45 04 03 81 1a bc a3 96 90 66 89 5e 48 00 52 ec 0b fd 78 52 58 1f 08 6c 42 19 0e e9 91 43 4b c4 11 eb 86 e3 46 69 5b 39 9c 38 77 7c 01 22 1b 45 cd 3a 54 ad 45 0c cd 60 0d 87 f0 18 12 fc f1 c4 c2 62 dc 9f 9c f0 a7 ba 90 84 d0 c0 6a 58 04 46 5e 40 eb 4e 0e d4 be c2 2a 83 9d 07 90 fb ef 7a a0 34 23 1b 15 d7 98 58 1b f6 25 ba 84 21 fa b6 e4 84 4b 04 62 63 b5 01 2c 10 28 b0 32 20 0f 9d 15 29 dd f9 55 92 c5 58 49 00 6f 88 f8 1d 48 3d 69 26 c5 b6 ee 2b 23 16 53 46 83 8a ad c4 0c 0b 46 ae e0 08 16 60 18 90 25 f8 21 fa 5b fb f4 cb 2e c9 8b 78 5d 03 9b 14 7f a3 61 28 84 41 08 53 a9 4e db 75 52 67 3a 09 5f cc 80 40 cb 5a e7 0d 3e Data Ascii: qNPutvo{Tg`vAj&Ef^HRxRXlBCKFi[98w\|"E:TE`bjXF^@N*z4#X%!Kbc,(2 )UXIoH=i&+#SFF`%![.x]a(ASNuRg:_@Z>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49816	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:14 UTC	521	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:03:05 GMT Expires: Sat, 20 Apr 2024 14:03:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 190 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49818	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	509	OUT	GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51228 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3481 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	721	IN	Data Raw: 52 49 46 46 14 c8 00 00 57 45 42 50 56 50 38 4c 08 c8 00 00 2f a5 c0 49 00 4d 40 8c 24 39 6e 53 b3 b8 07 c4 82 f9 07 0c 50 76 08 11 fd 9f 00 fe 28 a9 d4 f1 0f ad 9e c8 78 48 b2 a5 b8 68 02 d8 18 db 92 6a b6 72 82 2c 24 6b 0c 90 32 05 cf b4 8d 4f 40 99 a9 c5 33 9f 47 11 61 03 18 03 54 3d 55 10 82 01 50 04 51 f9 3c 63 8c 90 10 88 06 18 63 44 55 09 71 8d 00 f1 1d 02 83 cd ef e6 aa 5f 0c e8 f2 c7 40 3b 82 f9 00 ba d9 b2 85 80 04 49 c5 69 23 3e 23 2a 00 83 f1 88 38 26 b0 c2 40 6f 10 3a ee 16 e0 e3 1e 07 60 ce 01 0c ae 7a de b2 6d 50 f2 ed 8d b9 5a e8 a3 eb b2 e6 2c 31 3e 36 97 bd 35 65 7f 78 6f cf b4 73 4a 82 71 a9 2a e7 de 7b 4b 2d 87 8e b7 ab 6c 78 7b 69 29 00 89 88 ee 7e 33 7b 6f 83 00 37 a0 ee 99 69 db 60 43 77 81 dd dd 8e 32 30 05 ab 4d c3 21 09 6c 0d f5 Data Ascii: RIFFWEBPVP8L/IM@$9nSPv(xHhjr,$k2O@3GaT=UPQ<ccDUq_@;Ii#>#8&@o:`zmPZ,1>65exosJq{K-lx{i)~3{o7i`Cw20M!l
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 30 44 a2 be 97 f9 d8 ff ec 0e 65 d4 4c fd 62 96 00 09 90 24 49 bc 11 6f 22 81 b8 cf b5 4e f7 f0 1a 1f 64 78 7b dd cd 09 6e 01 40 80 24 df 38 7a 43 00 d8 c7 11 81 de eb 63 87 d5 01 ee 25 49 14 6f 4a 82 0c 06 f1 60 b4 6d 2d 7f 5c fe e8 17 33 00 ef 78 0f 90 43 92 8a 8f d3 c6 62 86 2b 74 46 0a a1 dd dd cf 2f 33 7c e6 fd 8d f7 00 49 0e 49 02 a3 fc 1a c6 b2 0b 9d 8b 6e 0e fd 2c 3c 28 09 58 f5 38 a7 f7 b9 e9 d4 d4 52 53 b4 74 ea 23 fd 64 3e bd 6e 7e d4 01 10 79 56 d7 62 36 b7 f9 bf e8 54 b4 b5 35 fc 79 b1 8b cd 6d b9 6a 5e 59 03 c0 1b 51 97 a8 f4 5e 87 ce b9 cc a5 b5 2f 1a ad b2 ce fd 01 e3 d5 04 49 02 c4 4a ef 6d 4d af 55 2a bd 55 20 42 c1 89 ef 66 02 00 4c ab 24 ec eb 25 8b b7 7a ad d7 ba b8 74 89 63 19 31 f6 16 f7 f3 d1 f4 db c9 4f 3f 9c fd 26 a0 24 2b 0d 26 Data Ascii: 0DeLb$Io"Ndx{n@$8zCc%IoJ`m-\3xCb+tF/3\|IIn,<(X8RSt#d>n~yVb6T5ymj^YQ^/IJmMU*U BfL$%ztc1O?&$+&
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 30 67 02 60 0c ee 3d f7 ec d9 62 02 f8 bf ff bf de 72 23 e9 f3 f9 e2 a1 cb 54 b7 b8 5c 66 b6 43 4e 1c 70 b0 bb 43 cd 1c 98 66 66 e6 ee 34 c6 ed 4c 27 1d 68 ee 0e 33 74 da 31 87 13 33 c4 50 55 76 95 8b e9 56 5d be e7 dc 03 5f f8 7c 3e 3f d4 b5 dd f4 07 bc 67 54 6a 69 e0 6a a8 c1 9a 74 66 16 4b a3 a3 d5 99 89 ce 82 7f f8 2a 3b 5e b2 6a 19 bc 50 83 d1 d5 e8 0e 7c 17 4e 4b 74 16 06 2d 79 18 bc d1 69 28 45 b5 e0 1f ce 40 2d e7 2c 43 14 a5 87 a2 5a b8 9a 39 03 a5 11 7e 35 62 b0 86 67 32 50 6a b9 c1 3f 54 7e b8 6a d5 62 74 96 a1 b5 c3 63 c9 ea f5 ae ee 28 f2 42 69 75 06 bc 9c 5a 06 77 d4 e0 55 69 78 a6 06 6a 29 7b 96 b9 14 35 95 9a bb 4b 91 b3 7c 17 ee 72 ee 0f 1e 89 79 c6 1a 6a b0 26 db 50 8a 74 b7 55 d2 0a 03 b6 6d 87 25 49 7a df ef fb 23 e2 f8 a4 2a 2b cb 55 Data Ascii: 0g`=br#T\fCNpCff4L'h3t13PUvV]_\|>?gTjijtfK;^jP\|NKt-yi(E@-,CZ9~5bg2Pj?T~jbtc(BiuZwUixj){5K\|ryj&PtUm%Iz#+U
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: e1 b8 c1 8a 1d f3 16 20 dc 33 bc 3a 88 43 82 8c 7b 20 00 27 d8 9a 42 22 ca e6 75 02 ec 47 67 f3 90 80 00 5c 01 88 ec c2 09 0f 35 76 41 2c 05 64 29 7a 75 04 90 14 80 0d 0a 19 7b 92 ed 56 8d 9a 78 7a 52 33 d3 ab 5b f2 5a 80 41 6b b7 d6 46 aa d7 47 54 5f 94 74 b6 07 5b 53 48 49 f6 57 54 d8 35 d1 42 71 c2 39 6b 6c 49 49 61 f3 71 4a 0a b0 e3 90 02 0a a6 70 e0 74 0f b6 ab 31 ba 8c 8e 99 1b 90 ac 86 25 c7 1d ab 1b 54 37 cf 6c 56 47 28 37 a3 5b e6 04 60 9e 90 7b 52 00 62 ff 25 25 11 d4 00 c5 2b 21 9c 31 e5 b4 ad 01 34 08 b5 5d c2 06 5c 81 00 48 b2 0b 24 25 25 41 f2 14 61 f7 25 91 36 65 a3 ba e3 e6 ea 20 50 1d 92 0a 64 15 8e a3 4f 34 69 dc 42 05 47 47 f6 63 42 4a 4a dd 8d ec 03 27 05 92 ed e1 04 48 82 a4 50 77 54 f0 00 21 05 48 61 33 9c ab 0d 01 ae 38 a3 b0 79 65 Data Ascii: 3:C{ 'B"uGg\5vA,d)zu{VxzR3[ZAkFGT_t[SHIWT5Bq9klIIaqJpt1%T7lVG(7[`{Rb%%+!14]\H$%%Aa%6e PdO4iBGGcBJJ'HPwT!Ha38ye
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 3c d7 ab ff e0 73 5d b3 5d ee cf 7f d1 e5 6e ab 9d d0 0f bf f9 2e e7 5e 62 7d ad de fb b8 c6 16 87 fb 9d 21 67 9a 69 00 e4 29 45 64 0b b0 08 72 ba 4a fa c1 d9 27 13 9b a6 0c 60 ec fa 82 11 83 31 06 92 51 35 24 8b 93 bb c1 6e 3c 53 ce b2 1d b9 8f c6 c9 0b 36 72 6d 71 73 55 10 09 ea 33 f8 b3 43 7b bf ab 9e 5c e6 63 ef b9 e2 b7 bf 57 60 28 7c d9 db 7e ff 04 cd ac aa a5 dd a5 b3 71 97 f4 00 e7 f9 3e f0 07 10 f5 32 bf f6 39 2f f8 9e 3f 68 83 5e f2 07 3f ed 46 a7 1e e4 93 f3 60 5c c8 5a ff b4 50 11 81 9e 67 b6 56 87 c7 10 87 33 ec c1 10 70 4e d1 1e 37 3e 37 01 c3 e7 6c de 7c d3 b9 02 84 02 0e ec 2f 52 1b ad 04 1a 02 0a 3c 03 9e f6 62 1d 49 96 9c bf d9 38 86 a8 6f c6 36 6a e2 f5 d9 3a 5e 7d b4 55 94 a2 e0 99 67 5b 25 32 0e c3 1e 19 77 a6 82 ed 7c 14 40 07 67 55 Data Ascii: <s]]n.^b}!gi)EdrJ'`1Q5$n<S6rmqsU3C{\cW`(\|~q>29/?h^?F`\ZPgV3pN7>7l\|/R<bI8o6j:^}Ug[%2w\|@gU
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 11 b8 4a 1a 27 6f c6 33 90 7e 83 8b 3d 9a 09 f9 08 b5 cb 57 4e f4 78 74 72 03 b0 f1 80 60 1a 1a 6e e9 00 00 78 d3 e8 9c 26 1f fd fb 3f f8 58 3f f9 c1 e5 be fb 63 ef aa 09 00 91 46 80 16 e8 00 00 20 22 66 3c d3 2b fe ec d3 fc db 5f 7c 5a bc de 5b 7c 24 b8 cc a0 15 5c ac 80 4e 00 e8 04 23 64 c1 8a c8 54 00 5c 1c 86 7f e4 0c 11 0e 09 28 0e 1a 7b a8 fa b1 22 85 49 dd 85 cb dc f1 ba 73 b5 ac 86 35 a1 1d 25 26 85 46 55 c5 2e a5 83 df 58 6b 39 d7 85 91 46 f3 cb be bc bc ec 9c 27 67 6d 61 22 00 80 16 00 30 ef 9e 50 7f ba b7 fc fe bf 99 2f d6 04 98 34 06 93 76 00 04 9b 5e ec 9b 57 ca 74 a3 8f 04 80 72 13 b8 78 29 66 a6 41 c3 2e 30 a6 6a f3 20 db 60 20 4e 0d 20 26 15 27 4d d7 43 8a 54 79 ee 68 4f ed 81 9d d3 ab 64 55 59 ad a5 59 57 83 75 c6 43 fa 88 93 45 83 5d 19 Data Ascii: J'o3~=WNxtr`nx&?X?cF "f<+_\|Z[\|$\N#dT\({"Is5%&FU.Xk9F'gma"0P/4v^Wtrx)fA.0j ` N &'MCTyhOdUYYWuCE]
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: d9 be ee d3 60 d3 af f4 dc f5 67 98 ae 03 8f f3 e1 3f a3 02 97 f2 5c ff fe 47 46 50 eb 4f 75 fd cd e9 46 5f dd 0d 1c 4e b7 a0 de 18 00 82 30 10 b6 16 a0 23 04 98 50 0d bd be be 16 01 01 13 aa 69 75 a6 5a d5 52 8a eb 2a d7 f3 62 49 94 b2 c1 9b f2 9b 7c f2 29 a9 34 7e 8f 2b 4c 2f 9f 5d 52 02 ad c0 c6 e6 79 7d ba 54 23 db 3c ee 79 0f 74 1a 55 3d fb a1 db 8b 52 63 c9 e3 7d f1 57 54 53 23 c4 97 3b 7b ba d9 8f 7d 81 4c eb 8e da 10 18 46 bc 06 bc e8 03 7f f5 15 7f ec 37 af 0c 47 3d c4 09 3a 4f cf a6 6a 13 43 af 3f fe e7 5d 1d bc 6b 84 b2 dd f8 fe f3 cd 2f 67 49 ed 19 67 78 b5 fe 0b 3e 88 17 33 f1 73 76 f4 98 a2 db 4a 6e f0 85 95 a7 b7 8e 5c 30 5c 3f 7d 13 22 1e e5 d4 2d 1c ad 1c e8 66 df ff b1 8f e3 ba 70 e2 22 f9 f5 7e d0 f3 f7 b6 dc eb fa dc 27 00 88 00 a4 71 Data Ascii: `g?\GFPOuF_N0#PiuZR*bI\|)4~+L/]Ry}T#<ytU=Rc}WTS#;{}LF7G=:OjC?]k/gIgx>3svJn\0\?}"-fp"~'q
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: f9 2d de 9b 0a 1a dc 3c 9d 30 d4 cd 04 60 ee 80 86 73 61 5a 63 c2 f1 74 10 18 39 1d 10 05 41 68 58 23 11 48 9d 1e 32 22 99 a9 00 d0 79 0c 74 e8 02 40 10 20 b2 b4 23 04 c0 7f 0d 2b 10 ec d8 54 03 8a a0 40 01 ae b8 62 27 44 e6 11 aa 65 46 5a 00 b9 14 1c 12 d5 e4 7c 30 9c dc 77 a5 25 cc 52 27 8d 46 3d 46 c5 11 3d a0 60 c8 c0 82 37 3e f4 23 20 0d f1 c5 70 22 91 c1 bb 3b 9a 3a 00 00 d2 d0 60 b0 a1 06 0d 00 80 4c 10 00 a0 a5 03 82 00 00 c1 d8 62 80 14 80 d9 03 76 75 07 14 80 1d 50 00 84 cd ab 20 6b a5 1e ed 88 5f dd 90 74 15 66 98 a5 23 4c e1 11 59 eb 3c 7b 9a 32 0b e5 2a 1d 8e 7a d5 6a 26 c6 77 13 63 f1 a6 05 27 5a ad 1f 4b 19 0c 43 8c 48 3e e2 e4 39 1c dc 84 3c 66 2c 12 44 e4 75 01 22 60 ce 0c c2 a4 41 68 0e 4d 92 86 49 53 60 66 34 50 90 01 40 0d 04 b4 80 80 Data Ascii: -<0`saZct9AhX#H2"yt@ #+T@b'DeFZ\|0w%R'F=F=`7># p";:`LbvuP k_tf#LY<{2*zj&wc'ZKCH>9<f,Du"`AhMIS`f4P@
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: af 59 f5 ff fe 17 ab 6f b1 ea 3f b7 fa b6 cb ff 8c 15 ff c2 19 0f 79 06 ce 6a 13 f1 e4 ca fd d2 57 c7 d9 1a 9c de 11 f7 39 05 93 ea 50 5b 9c 22 06 98 66 08 26 15 bd e3 34 6d 76 cf 24 ed 8e af a1 b9 f0 b2 f7 3f 0f af 41 3b f5 e1 79 be d0 44 92 37 3d 6d b2 11 4e 77 80 04 4c 98 84 cd ba e3 4d 33 78 de 87 fa 79 de f2 09 2d df e4 61 4f 2b b6 b0 0b 82 d9 65 4f e1 8c bf f1 6b df c1 fb df f3 d1 5f 74 ce 1a 9c ae 66 8a e9 fd 98 34 05 00 10 82 06 43 46 08 fc a1 c4 3b 48 e3 38 7e f6 f8 8f 3c 6b f3 7e 84 31 47 46 b2 0b 04 e4 e8 40 8f 56 84 81 c1 02 30 03 ec a0 aa 55 ad 00 69 98 06 82 68 a7 0d ae fe 63 23 1f b8 6e 42 59 a1 d7 77 4a 2a d8 fd 1f 75 a1 17 ab 6e 83 fc fd fa 33 6e f7 d2 3a c7 9f 74 47 47 b6 39 6a 4e f3 2d ed ef db 3c 71 fe 69 b6 ab 05 77 ad 60 e8 7d 39 a3 Data Ascii: Yo?yjW9P["f&4mv$?A;yD7=mNwLM3xy-aO+eOk_tf4CF;H8~<k~1GF@V0Uihc#nBYwJ*un3n:tGG9jN-<qiw`}9
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 79 8b 4a fa f0 5c 78 db b7 f6 ba f6 e5 fe c7 1e f8 9d cd 36 d5 00 38 02 d7 bf f5 97 3e ae fb cb 7a cc 97 f1 fb 57 ac 62 ef 53 b0 58 ed 5b bd 31 4f f6 8a fd b6 ff b1 9c e3 fb e6 ed fe 61 7d dc e7 ec f6 fc f4 b2 d5 ef e2 00 81 d1 0e 01 bb 0f 00 f0 f0 0a a0 12 32 61 6a c2 b4 1e a1 d5 b6 c4 84 75 15 a9 83 e8 24 23 e3 f5 bd 64 62 9d 42 25 2e 80 b6 71 68 c8 38 bd 91 d3 78 6c 79 39 f5 22 48 a2 e6 c1 20 62 91 e1 27 a3 8e 70 78 31 15 b2 5c 79 37 a3 27 69 d3 ea 7f e2 92 20 00 a6 d4 80 53 dd ae 75 35 64 e3 ec 98 b9 70 bf eb 5f 5d f8 f6 37 fa bd f4 8f 73 5a 15 ac 95 88 10 c0 65 bf d2 37 be 9d e3 c7 39 6e cb e7 fb 12 af 60 a7 b7 e5 dc bf e8 17 7f d6 7c f9 af ff fc df fd 26 bf bf 9e f7 2f 6b f4 1d 39 c7 0f 4d 9f 74 bb 5b d6 e1 ff 41 60 b6 de a7 ed 1d 7f c2 58 68 10 c6 Data Ascii: yJ\x68>zWbSX[1Oa}2aju$#dbB%.qh8xly9"H b'px1\y7'i Su5dp_]7sZe79n`\|&/k9Mt[A`Xh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49820	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	510	OUT	GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8956 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3481 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	722	IN	Data Raw: 52 49 46 46 f4 22 00 00 57 45 42 50 56 50 38 20 e8 22 00 00 50 8b 00 9d 01 2a 28 01 28 01 3e 41 20 8d 44 a2 a2 21 12 69 35 18 28 04 04 b2 b7 70 b6 c8 fe bc 43 a2 f1 eb d2 91 7d 2b f2 a3 fa a7 ec 77 ca cd 33 f9 c7 e1 3f 60 1d 22 c5 a3 d5 3f 72 3f 43 fd d7 f1 ef dd 5f f8 ff 61 1f 9a 7f ca fb 82 7e 8b ff 84 fe f5 fb 7b fe 7f ff ff cb bf a8 0f d6 ff 50 7f d1 ff b3 ff cc ff 49 fb ff f2 d3 fd cb f5 c3 dc f7 fa af ec bf a7 7f e6 7e 40 3f a4 7f 93 eb 0b fd 6b f6 08 fd 5e f4 a7 fd b8 f8 31 fd 8e fd bd f8 11 fe 83 fe 2f fe cf e7 ff 70 07 52 7f 56 7f cb 76 b9 fd c3 f2 a3 d0 3f 0f 3e 43 f5 d7 fb 7f fe 2f 82 4f e3 3c 1d 74 c7 fc bf 44 3f 8f 7d 95 fb cf f7 bf da 8f f0 7f b6 ff 78 ff 98 ff 5d e1 2f c7 9f f2 7d 41 7f 1d fe 5b fd df f2 9b fb bf ee 7f 1e 28 00 fc b7 f9 df Data Ascii: RIFF"WEBPVP8 "P*((>A D!i5(pC}+w3?`"?r?C_a~{PI~@?k^1/pRVv?>C/O<tD?}x]/}A[(
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 23 18 59 94 f9 f3 a0 a0 1b ef bd ac de ea 49 03 ab 1d 2a 23 09 4a 0b 32 44 81 30 1a aa 62 44 3d 60 23 55 6e 5a 50 67 64 f0 dd 80 3e 77 0d 3f 83 c7 d6 e3 1d 4f 9e a7 d4 d0 f8 fe 14 23 94 74 28 66 7f ce 51 73 3e 5b 1e b4 fe df bd 5b ab 4c e3 b3 57 5c fd fd 44 80 90 39 2d c3 f9 05 1e 48 d5 e3 57 b2 55 08 25 f8 17 90 1b b4 4f 39 4b 84 a2 12 4d 0a c2 9f 36 ab 54 2a 27 50 4a f3 43 14 bf 39 ad 09 bc 3b 2b 35 47 1d 88 4f ee 49 54 45 25 2b da 70 b3 a9 dd df 7e cf e7 57 8c c6 32 f2 5a e8 0f 9d 37 9d bf 46 21 89 16 9c b7 85 ff f6 73 36 12 5b 3c e8 70 dd 60 36 d7 fc 73 a3 58 a3 21 cf de 94 b0 78 df 99 9a 28 7b 96 a1 20 fc 9a a9 4c 13 6d 22 16 b6 6f dd 61 a2 9b 61 c1 e6 f5 99 57 1d ee 8a 3c 85 74 16 ab f9 00 a4 63 00 b8 9c 80 91 09 f3 15 45 f9 c0 b7 dd 4b c8 50 7c 50 Data Ascii: #YI#J2D0bD=`#UnZPgd>w?O#t(fQs>[[LW\D9-HWU%O9KM6T'PJC9;+5GOITE%+p~W2Z7F!s6[<p`6sX!x({ Lm"oaaW<tcEKP\|P
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 5c fa 46 85 75 cc 3b 9f 41 fd 57 b0 ea 59 40 0e 66 0e 8d e1 fe 73 26 12 11 bf 6c 3d ca c9 ce 03 03 e1 89 5a f2 9e 1b fe 77 63 3f 4d ad b4 eb cb 21 df e5 f9 c5 45 96 5c 69 28 ff 0f 38 96 fc b5 54 04 f6 ff d3 56 3f d5 48 d0 4b 75 97 b8 5b 5e f4 d0 7a da 22 d5 80 82 82 d3 d9 74 ca 90 56 91 ab 89 dd 2b 7e ef fd 31 9d a2 c5 95 fe 62 5e 40 7c 04 bc 8b 5a c8 b3 80 eb a3 ab 27 8e 51 0e 9e af 66 d3 c0 80 26 79 ae 51 00 20 1d 80 cd 04 e2 0d a5 92 49 91 3a f5 ef 10 e5 99 bc e1 a0 f8 10 5b c9 a3 1c ee 8d bc aa 53 42 09 8c 8b c6 f1 e9 ce 81 3d 8f 84 86 25 d8 27 71 e4 13 5d 5d 18 66 4d 81 0b 86 d0 2d c2 45 25 97 26 46 c3 67 84 0d 09 6c 27 24 69 9b 41 81 00 2f 42 3e f0 f0 86 28 75 83 ee db 41 97 68 c4 9f 53 d0 bc 60 ca 12 70 3b 89 f1 f5 a4 2e 9e 2c 14 33 74 25 b8 2e 06 Data Ascii: \Fu;AWY@fs&l=Zwc?M!E\i(8TV?HKu[^z"tV+~1b^@\|Z'Qf&yQ I:[SB=%'q]]fM-E%&Fgl'$iA/B>(uAhS`p;.,3t%.
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: bd 23 f1 7c c0 15 f7 b9 f6 c4 8c 38 2f 1b 5c 5f d1 27 09 1d 05 a6 5c a8 6a 6a e0 5d d2 5d f5 4c 96 bc 1a 9a 44 e8 96 3f 21 30 c5 43 a1 5b 67 eb 11 b4 8c eb 6b de f9 b9 b0 26 e2 50 47 9d e4 b1 af 78 f9 41 2d bf 42 a5 ab 3c 32 6d 44 8f 21 74 fb e1 ac 6d cd 62 5e f4 59 38 e8 3a e3 d2 d1 43 20 39 6d fe ca f8 0d d2 13 83 84 f0 4f 73 5a d9 2b 73 9e 50 c5 70 2c 57 ae d2 27 54 1a 8b 77 89 db 56 f7 3c 07 4f 72 3c 42 c6 c7 fa 11 14 ac cd 32 c7 71 27 79 94 6c 54 5e d2 2f 94 97 62 4d 41 b4 83 3c 24 f8 07 b6 58 90 4c 10 2b 5d 17 b0 a5 33 8e 5d 97 ba fb 57 7b 7d 46 b3 a8 2c ae a7 1e 9e 5a 3c 69 da 35 d9 30 4f d9 bc c6 ab 0c 11 48 f3 df 2b af ec 79 c3 c4 f7 62 1f 0a 2c 16 c3 ef 23 5e 4e 7b 86 01 63 1e bb a6 c2 69 d6 2b 0a 51 cb 4e 8c 84 c5 f0 c3 f2 8c e5 a3 90 c5 ad 7b Data Ascii: #\|8/\_'\jj]]LD?!0C[gk&PGxA-B<2mD!tmb^Y8:C 9mOsZ+sPp,W'TwV<Or<B2q'ylT^/bMA<$XL+]3]W{}F,Z<i50OH+yb,#^N{ci+QN{
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 22 06 9a d7 96 99 d3 bf 5a 63 9c 1e 31 32 da 1c a8 d5 5c cb 69 7f ee 5f 53 29 dd 8a 15 a2 29 b0 58 f8 4f 1d e8 55 f3 dc 8b a2 41 e0 c6 1e 87 31 98 27 ec e4 7c 4b a6 00 1a 2a e3 3f 11 c7 4d 76 ef 44 3a 6e f7 68 c8 20 77 9d 22 0d 0f 5e a2 e2 d4 c3 89 2c 39 cc 3c ab 9d 6f c0 bc b4 b6 1d 33 7a 51 d7 55 e4 28 81 19 32 08 cc f1 91 c2 08 87 eb 6b 53 e4 00 a7 ac 93 b3 47 69 c2 43 7b d7 72 3a 30 db 10 b7 55 45 60 a8 76 8d 53 a4 1e 23 6c c8 38 03 3a be 59 3c 52 03 85 81 82 19 5f cb 72 ab f8 71 b2 1b 6e 38 fa 9f fb e0 85 7c da 00 af 0e f9 c5 7a 3f 21 64 bd ca 97 57 4a 8f 0e 81 6a 57 46 17 23 f8 ed a3 d0 b2 6d ea e3 e7 ea 5d f9 6d 85 f8 27 4f 53 a7 f1 f8 fe 6c ea be 49 bf c7 40 7b 85 a1 b6 94 30 ee 72 ff df 4c 58 20 88 ce de 86 ac a8 df b1 e4 98 9b 64 d5 63 77 ec bc Data Ascii: "Zc12\i_S))XOUA1'\|K*?MvD:nh w"^,9<o3zQU(2kSGiC{r:0UE`vS#l8:Y<R_rqn8\|z?!dWJjWF#m]m'OSlI@{0rLX dcw
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 0a 16 96 71 85 ca ec 2f b1 05 fd 8f d4 c4 28 f3 bd 0b 1c bb c3 c2 7e 80 df 3b 8d a8 7d b5 b1 f3 6e d1 18 1c 9b c4 18 e6 a1 8b e9 47 00 50 2d e1 00 50 0f 49 91 fc 61 bb a9 6f 9d 98 0d 9a 6f 4f 69 f5 5e 78 b8 cc b3 cf 88 c8 a0 4f db 25 18 95 32 52 3f c6 c6 0f 5a 39 8a 90 40 33 71 18 f9 d5 e8 2f 34 7d 30 37 8e d6 c9 94 0b 66 6d d8 3c 7d d8 ee d0 54 a0 9e f7 b0 af 25 e1 9a bb bb ea 07 70 39 f3 35 5b a6 77 ce 13 e5 0c d4 e3 b5 f9 7e 04 7c f3 7c e6 af 65 50 15 9f 23 ce 54 c7 b7 7b 34 61 58 90 3f b4 65 0e 12 e9 d9 44 b0 5e f1 a0 2e 8f 06 f6 d5 71 18 9b 01 2d 0c 62 0b ce 44 a8 56 f7 db e5 d1 fb 8f 4a d7 4e 5d 8c 8c 1f 95 63 7e 1b 00 7b 71 cc 65 82 c1 81 7f f3 06 47 72 72 eb 4e e2 f2 d1 d7 2e 9a 62 4a ff 99 96 d6 cd f6 50 a0 9c 9d 39 ba b3 c8 74 5e 92 d0 15 8b 30 Data Ascii: q/(~;}nGP-PIaooOi^xO%2R?Z9@3q/4}07fm<}T%p95[w~\|\|eP#T{4aX?eD^.q-bDVJN]c~{qeGrrN.bJP9t^0
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: a3 65 c2 fa 21 d4 bb 7b 57 31 bb 4c 6c 9a 59 f0 78 1c a4 9f 65 75 ab 3e 53 07 8e c6 21 71 ca bb ed c0 b6 e2 a6 11 88 fe 1b fb 6e ee e4 12 37 e2 d7 0a 9f f0 17 c2 b2 d6 26 a9 8c 0d 44 5f ad 11 46 4a 48 f8 1b 75 b3 04 bb f6 bc e2 3e 53 c9 8e b2 53 a8 e2 a4 ff 82 88 c3 88 5e 8e 13 c7 0b 02 10 74 d1 b0 c8 5a 4e 6c e4 7a a4 9d 3c aa e3 b6 ef 99 fb 1c c9 8b 68 9d 29 9f f1 00 3a e9 bc c1 8b 97 2d ef af 3b cb b1 7b 18 0e 02 44 04 36 00 a5 61 39 1c 74 c1 f6 7b 91 64 94 ea 8c 36 e8 5d d9 33 ec 37 12 23 e8 c6 54 a3 ce d1 dd c8 a0 2b e9 34 83 b5 11 b4 c6 8d 7c e0 f5 2e f3 53 6a 40 47 6c 4f da 20 99 ce be 39 de d2 a3 82 20 0b e7 e5 24 d6 5e 6f f4 36 71 1f 7b b0 20 87 21 c5 0a e6 1b e4 40 e4 f9 ea 7a fa cb 34 3c 76 3e 0b 28 08 3b fc 13 48 d4 14 d1 0b 88 ee 9f db e0 57 Data Ascii: e!{W1LlYxeu>S!qn7&D_FJHu>SS^tZNlz<h):-;{D6a9t{d6]37#T+4\|.Sj@GlO 9 $^o6q{ !@z4<v>(;HW
2024-04-19 14:06:15 UTC	704	IN	Data Raw: 06 a4 f2 50 f2 d8 53 60 bb fd 02 c9 45 92 93 e3 b4 01 95 7b 87 49 db 1f a3 6f 60 2c 0f 59 71 5a 83 7b 90 3d bd 73 6f cc 80 28 0e fa a5 8e 8b 91 79 b3 fb 03 1b 90 2f 78 b7 d7 30 18 00 7c 8f e9 80 34 9b a6 a6 82 6b 07 e9 f3 e5 05 87 ff 87 f9 fd d9 37 33 89 cf 1d 16 a0 e7 a2 50 c4 3c 55 d1 67 41 af 0c bb 9b 3b 16 d6 f5 73 62 47 21 4d c4 aa f9 af b7 00 2d a3 67 e7 52 65 cb 80 5f d7 87 e4 50 60 2d 1f 80 d5 51 e5 33 f9 85 35 c9 e6 ef c4 a6 fa 87 38 60 39 04 65 ab 73 3a 4b 14 63 e1 4b 61 84 3f fa 31 27 1b 92 4b 1f 01 35 4f 4f e1 ce e5 0b 6d 1a 60 3a 06 bb 60 b4 82 c7 09 81 f7 ff 2e 7f 79 40 f1 8a 5c b1 f1 42 96 7c 25 d6 61 ea 96 8f af 22 cb 46 0d 53 b1 42 58 5b 8e c3 0a ae f5 14 c5 87 3f a0 6d 66 b4 71 de aa 21 90 ff 9e 02 c2 db 63 40 5d 34 dc 08 b4 1f e7 03 48 Data Ascii: PS`E{Io`,YqZ{=so(y/x0\|4k73P<UgA;sbG!M-gRe_P`-Q358`9es:KcKa?1'K5OOm`:`.y@\B\|%a"FSBX[?mfq!c@]4H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49822	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	1146	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:15 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:15 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-NoIWSh1SRQOddcBQ3cPNvg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49819	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	511	OUT	GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 31756 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3481 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	721	IN	Data Raw: 52 49 46 46 04 7c 00 00 57 45 42 50 56 50 38 4c f8 7b 00 00 2f a5 c0 49 00 4d 38 8c 24 35 6c 72 87 e2 40 20 fd 17 2c d9 69 21 a2 ff 13 50 55 95 19 55 95 4f b7 ca cc aa aa cc fc 56 56 9d ea ae 9e 2f 6c e8 8e 53 56 a6 cf b7 aa 5c 72 f5 0a 04 88 2d 2b b3 b2 fe cd aa e2 f1 da be df af e0 dd 74 03 5f ba 49 5f af 97 80 7a 1a e9 06 6c 60 ac b5 56 32 f6 da 8e 63 ac 58 46 d8 0a 6e 31 5d 37 84 dc 4e 47 c4 ea 08 47 1b 04 da c3 a2 9b 50 ce a7 4f b7 13 36 c4 83 fc a8 af f0 78 77 95 4a 08 d0 c0 74 03 55 da 2a 6b b5 30 b3 05 2d 2d 7b 80 e3 1d 73 00 ba 0f ba 05 c4 36 6c d0 db 70 9e d9 22 0e 7d ea 6e 17 72 5a eb 40 b7 2a cb 2d 38 8f 03 5c 6b 1a 46 22 36 0f 99 76 2b b7 e3 d0 a8 12 6a c4 a6 fe 7e d7 41 b9 55 3f 1e ae b0 6f a6 7d 3f e0 6e 7c ff d8 78 e2 78 0b 01 08 08 56 7d Data Ascii: RIFF\|WEBPVP8L{/IM8$5lr@ ,i!PUUOVV/lSV\r-+t_I_zl`V2cXFn1]7NGGPO6xwJtUk0--{s6lp"}nrZ@-8\kF"6v+j~AU?o}?n\|xxV}
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 3a 81 40 00 20 31 de f0 c5 4c d6 4b bc 3d 96 31 12 61 ff 29 ad c1 17 13 7b 64 bd f6 15 2b 9a 75 b8 06 80 d5 1e 66 f7 88 cd 93 79 f1 93 5f 2c 75 00 02 69 0d 66 26 be 0f 9c 3d 1b ec 37 8f 33 2e f9 66 0f 98 f5 8d 97 0d 1a 60 81 69 00 40 da 4e 81 86 09 b0 c0 02 06 40 be 5c cf 01 68 c0 e7 1c 9b 4b be 4e fc 87 17 c0 0b 2e 31 01 00 2e f7 72 f5 f2 03 c9 94 7b 00 1c 02 d0 d6 e4 c7 8e 59 5e a6 00 e2 30 1c ee fd 18 e1 d0 e8 05 c6 2c cb d4 4e 58 ce 4e c3 69 00 07 6d f4 43 90 f2 d4 fe 23 4c 68 07 00 48 63 3d 5c a3 7a ec 29 d0 97 1a 0e 01 18 18 1b f8 af 34 07 da c1 21 a0 1d ba 4d 07 96 be 00 1c 12 22 44 f3 df 01 52 17 a4 0e 8c 10 8d 1b 90 6c d7 39 4b 4b ae b3 49 19 5d 71 ff c3 5e 1c 9b 00 53 0c 7f e9 17 1e 0d 42 23 71 4f d2 d6 43 0e 31 c4 50 e3 76 4c 62 52 93 a7 99 39 Data Ascii: :@ 1LK=1a){d+ufy_,uif&=73.f`i@N@\hKN.1.r{Y^0,NXNimC#LhHc=\z)4!M"DRl9KKI]q^SB#qOC1PvLbR9
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: d4 cd 53 35 ab b5 ed 09 d1 cc de a6 36 94 0d d2 ee 6d 8a cb 13 db 03 8d 90 89 ad c1 c0 24 d8 04 33 c4 93 6a 0c 49 8b f6 cc 45 d2 48 db d4 5e 1e d2 2b b5 89 84 44 f7 ca c5 c5 65 6d 9b 60 42 68 d1 6d 89 b1 25 b7 a5 c0 63 ed 79 aa e5 0d da a6 ee 2d cd d8 a8 7b 3d d5 32 d8 e6 61 cb 58 3d 93 43 84 08 b9 d7 a8 12 83 4d dd 58 5e d4 e8 26 17 d8 d0 9e 5c 1b 63 68 53 b7 12 c4 42 29 64 ec a8 14 12 21 51 9d 84 a0 58 96 11 0d 46 2d 0a 49 aa 05 55 e4 65 45 28 85 90 a2 22 30 38 08 05 b1 6e c5 31 08 28 0b 21 64 22 f0 a2 2c 45 2c 44 bc f3 2e 62 89 09 06 2c 09 84 50 26 68 19 b1 12 2a e5 41 5e 90 12 2f 0a 25 62 19 64 49 3a 65 28 19 2a 2f 2f 2b 61 4b 2c 24 92 f2 b2 2c 2b 45 12 05 76 64 ca 20 63 52 02 9e d4 14 58 16 4a a1 94 08 85 52 b0 bd ba 13 cf 3d 6c ad 3d 5e 17 68 7a cc Data Ascii: S56m$3jIEH^+Dem`Bhm%cy-{=2aX=CMX^&\chSB)d!QXF-IUeE("08n1(!d",E,D.b,P&hA^/%bdI:e(//+aK,$,+Evd cRXJR=l=^hz
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 7b a9 05 00 d0 06 55 2c d8 b2 16 04 c5 5a d0 d2 aa 3a b2 31 9b 55 d9 44 a5 c0 ed 52 5b ed aa ed 64 49 da 15 dc 4d 6a cb 86 3b c5 da 54 d4 8d b5 f1 da 6e bb 76 f7 42 ab 76 b8 5b d6 ad 76 e8 38 bb ed 60 bb 4a 56 a8 42 5b 6b 68 2d 91 56 74 62 61 1e 74 4f d4 78 c1 c9 d4 86 2a bd a5 8e 79 35 02 6f a5 bb 05 e5 d4 d4 89 59 b6 97 7a cd 14 28 af 97 6e ab 6c 6e 2f 75 8b 0e b6 59 37 14 43 60 9b 6e d3 6a 11 75 25 18 49 ae a7 00 d0 9e 5c 2d d2 6a a5 6e 0c 21 e6 9e 54 cb c8 3d a9 2d 64 7a 4b bd 37 8b 34 e8 58 ba ed 7a c1 c9 b0 01 d8 93 bc f1 0e 48 bb 7b a6 db 58 d8 bd 92 37 a6 29 ea 6d 03 60 d5 b1 87 0b 05 35 eb b5 50 28 eb bb ac 2d 53 ed 49 bd 78 41 af e4 bb 92 62 8c 67 a8 33 90 9a 6a 89 99 8a 5a c3 24 15 bc 0d 8c 21 53 61 cb 98 94 ac 19 c8 1d 85 a5 a0 05 24 05 c4 2b Data Ascii: {U,Z:1UDR[dIMj;TnvBv[v8`JVB[kh-VtbatOx*y5oYz(nln/uY7C`nju%I\-jn!T=-dzK74XzH{X7)m`5P(-SIxAbg3jZ$!Sa$+
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 71 e3 b6 2c eb de a5 3b a0 65 2b 75 b0 b6 7a 67 1d a5 8e e8 50 19 dd f2 5a f6 c0 69 c9 0d d6 da 33 eb 2d c1 bc 37 fa 0a ba 27 21 6f 1e 5e ad 56 4d ee 7e 82 d6 12 eb b7 f2 3a 65 5b 7d 25 f5 aa 5a f6 42 3f 03 b7 08 93 2c 83 2a 0c 12 c4 21 f7 73 f7 f6 8b 1b 57 74 a1 85 84 d9 45 6a 00 30 28 94 51 85 94 44 c0 19 75 99 5a 28 81 23 a5 2c 16 13 53 92 12 75 a0 02 21 6b 12 43 75 91 9a c2 b2 e4 22 0b d4 94 a4 04 0e 45 20 a0 12 38 cd 11 52 43 a3 4e 93 90 d8 28 64 39 cf 98 a2 01 f3 f3 4a 96 c4 3a 65 b5 40 85 ad ce 33 0c 95 46 7e 92 5c 61 f0 e6 d1 2b b3 9c a4 be 84 0a a8 2f e6 9c 41 ad 97 d1 b7 54 c6 b2 1a cb 52 c8 5b 9a 95 62 a5 8d b3 0c 24 71 5b 29 2b 69 51 53 88 ae a4 9e 30 74 ed 4b a5 56 41 a4 a2 52 2d 40 1e 27 24 24 8c a1 eb d5 5b ee 7d d9 99 4f bd f0 91 9f fd f1 Data Ascii: q,;e+uzgPZi3-7'!o^VM~:e[}%ZB?,*!sWtEj0(QDuZ(#,Su!kCu"E 8RCN(d9J:e@3F~\a+/ATR[b$q[)+iQS0tKVAR-@'$$[}O
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: e2 8e ef a0 09 68 77 f6 46 6b e6 ec 82 e1 d9 1c 5a 87 ad 5e 99 e9 ec ef 7c f5 55 dd be 90 aa e3 41 fb 9d 7e e6 8d 4f 79 f3 27 df 69 cf 75 31 51 f0 e9 3b ff 9b 0f de 33 fd 51 0d 09 a5 f3 4f 67 84 17 76 9b e6 79 fa 3e cc a2 c5 f4 bb 93 92 19 8b c3 1b be ff 91 d2 a2 31 9e aa 08 35 cc b6 37 7b e3 f8 0e 5d 51 a5 cc 62 17 a1 da 9d 4c dd 82 b2 cd 6a 88 20 31 e2 94 51 d0 76 ef 99 fa 2e b4 95 a3 0c 51 29 c8 72 3a 11 2a 43 2d 64 67 87 54 57 46 4e 27 05 36 84 3d d5 8e ce e4 ce 08 28 c4 76 ee b2 84 ca c4 5e d1 94 85 03 7c cc 16 30 c4 44 16 b2 2a 0b 29 5a 25 48 6b 92 ba 49 cc 88 41 16 d4 19 8a 0c e7 fd cc f1 d9 6f 9f fd 70 66 ea b3 f2 0d 4f 79 f7 bb df c1 8f e6 f3 ef f8 ff f7 de e3 b2 2b 9e 72 f8 f9 03 f7 41 b3 5c 97 01 a0 94 b3 45 1d 51 6a 31 a1 4d 19 9c 5d d2 5b 06 Data Ascii: hwFkZ^\|UA~Oy'iu1Q;3QOgvy>157{]QbLj 1Qv.Q)r:C-dgTWFN'6=(v^\|0D)Z%HkIAopfOy+rA\EQj1M][
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 57 2d ae 44 4b 5b c8 c4 31 95 c5 b4 29 49 e8 38 dd 02 55 c1 65 99 45 e8 92 ed 9a 8f dc 54 5b de 58 5d a2 e2 d0 14 0a 28 16 c0 6a b9 34 e2 51 28 1b 00 34 32 45 3c 90 82 76 19 71 b9 14 8e ba 62 4d ee 1a eb c0 10 92 11 eb 33 c5 32 43 20 d6 31 45 5d 0a 47 29 43 31 1e 0d 88 10 51 57 55 95 42 ac 9a 10 7a 53 6c 15 63 94 d5 ab 48 c7 c8 51 9c 3e 35 86 46 e4 2e 77 9e 8f 8b 4a 59 0f 7d 2b 19 1c 1b b3 ea 9c dc 4d 52 d3 3e bb 26 f1 b2 69 24 8e c6 30 c5 63 e2 a6 e2 68 3a b9 d9 06 dc d9 16 8f 13 54 10 9d b2 5a 1b 66 15 2b 0a 9d 6c 21 b2 10 9c c2 12 38 59 65 84 0a 01 14 59 91 8a 3a 84 32 12 12 72 42 c4 a7 64 48 1d 43 ca 60 21 21 11 24 00 00 19 a0 1a 06 ce c5 08 a0 84 18 00 c0 22 40 a0 2a b2 aa 96 15 50 55 2c c4 8c b2 0c 2d 31 40 a2 2c 80 52 a5 96 08 18 88 9a 51 10 30 55 Data Ascii: W-DK[1)I8UeET[X](j4Q(42E<vqbM32C 1E]G)C1QWUBzSlcHQ>5F.wJY}+MR>&i$0ch:TZf+l!8YeY:2rBdHC`!!$"@*PU,-1@,RQ0U
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 15 87 9f 9e f2 3e 3e 7e dc 73 67 a2 dc fc d2 55 37 4f 7b cf e1 f4 77 72 9b 33 70 fd e9 92 fd b1 7f 7a d7 13 ff fc 2e 17 9e ba 4d c4 dc 70 6d be 79 c6 ed 7e 40 6e 3d ee 08 6b fa b7 33 2e 7d e3 9f 77 7d e8 1d 2f 38 fe f8 73 d7 5f 75 58 77 95 97 7d fb 71 ff f8 e1 3f ae 7c c5 9f f3 70 fd f6 e4 9c fb 86 3f 3d eb 97 b7 e6 a6 3b 5f 74 9a a2 d1 9a 78 2a cd a7 77 e9 5c a5 5a 9b 8d 25 c1 d9 72 c6 6a 9a 48 45 bc 36 a6 2f b3 9a 42 71 f2 44 ab cc ac 04 2d ba 5e 44 20 84 25 b5 82 75 6b 30 c0 21 ed 06 ab af bf f4 a9 bd 39 f9 51 4f ff f8 bd b6 d9 9d 6f e8 d4 20 99 df 78 ef f2 b6 5b f9 da 57 2f be c1 5b 7d f2 c3 17 df d2 8c d3 f5 be b7 7c e3 c3 fb dd 19 1f ff e6 f7 dc 79 fb c4 27 bf 6f aa e7 9e ab 37 72 dd f0 eb 27 7e fa 4e 2f 7c e6 ad 0e 5f fb e5 cd 57 bf f0 a1 8f dc ee Data Ascii: >>~sgU7O{wr3pz.Mpmy~@n=k3.}w}/8s_uXw}q?\|p?=;_tx*w\Z%rjHE6/BqD-^D %uk0!9QOo x[W/[}\|y'o7r'~N/\|_W
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: bf b9 fb da 4b 1f b8 cb 4b 5e 7b ca fb b7 fa c9 fb bf fa 88 b3 de e9 93 b7 7c d5 c2 f5 7c e0 eb eb 45 8f 3d 9a 5e de 7e f6 89 7f dc f7 c9 1f 7a fb af fe 55 9b 39 1d 6e be 2a b4 5e 41 6a 45 90 b4 3d 2b de e5 43 1e 71 f7 ec b5 b7 56 1d f7 9a 73 1e 9b 9b b6 dc f1 b9 af 6e 0f bc ff 5f de fc ef 8f 39 f9 c3 1f df b1 e7 bd fd cf f7 bd ff bf dd fe bf 0f 79 d5 eb bf ea 11 fb bf e4 cb ff 7a cf ad 97 4c d8 38 fd 8d bc fd a1 8f 1d e5 ac f8 d0 fb ed 73 cf b3 83 f1 e9 9f 8e bd f7 63 77 79 ec 9f 4f 7e 28 8d f7 cf bf dd 0b 56 6f bb 78 ec 3f cf 3e f1 96 d7 f6 3e a8 27 fc 7d fb ce 9f b7 a6 f5 c4 bf 38 9c f0 8f ff ef 7f d7 ff f3 1b 3a cb 2c 12 62 d1 42 76 2d 28 5c b3 ac 16 54 5a 89 36 4a b5 8a 2a 1b f2 9a 77 75 d6 c9 51 ee b0 02 4e e5 ee cc 66 49 59 c7 d6 33 e1 5a 39 57 b3 Data Ascii: KK^{\|\|E=^~zU9n^AjE=+CqVsn_9yzL8scwyO~(Vox?>>'}8:,bBv-(\TZ6JwuQNfIY3Z9W
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 29 09 32 59 2a 51 25 35 10 ad 54 c4 81 38 a6 3e c9 12 88 2a 83 61 91 68 0a f5 aa 20 d6 63 01 4a 1c 49 4e 64 5a e4 04 41 59 02 3b 59 f6 fd 98 2c 4b 96 3a de 95 f5 64 29 b8 88 9f 90 27 50 2a 55 9e 15 6e 33 25 5c e7 f2 9c 83 8a 8a 65 76 17 ee a2 83 93 7d 16 15 2a 21 fb 72 6f dd a5 65 8a 00 9b ac c4 20 2b 11 82 1a 02 24 84 72 32 8c 46 6c 22 00 03 8a 72 5a db 1e 8a 3a 0f 9a 26 09 a4 00 8b 42 0e 03 b6 26 42 49 a8 e8 d2 61 d0 4f 32 f5 22 a6 b5 66 48 c5 90 ad 23 84 e2 82 6a 24 53 82 36 44 d6 a8 80 0f 46 74 a0 19 0d 29 d2 60 34 6d a0 46 69 c3 aa 9c 11 07 06 09 15 3d 1d 49 1f 13 cb 23 20 69 4f 46 d8 51 53 81 4a 46 a4 c7 88 02 1c d4 32 60 1a 71 84 44 24 c2 50 7a 46 a9 a9 d7 46 4d 45 99 1a 2d 40 31 59 28 74 85 d8 97 f6 62 38 dc 0e 3a 73 50 d9 9d ab db 2e 2a b7 92 b5 Data Ascii: )2YQ%5T8>ah cJINdZAY;Y,K:d)'PUn3%\ev}!roe +$r2Fl"rZ:&B&BIaO2"fH#j$S6DFt)`4mFi=I# iOFQSJF2`qD$PzFFME-@1Y(tb8:sP.*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49823	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	510	OUT	GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34150 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3481 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	721	IN	Data Raw: 52 49 46 46 5e 85 00 00 57 45 42 50 56 50 38 4c 52 85 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 22 67 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a bb bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd eb a5 2f 24 75 49 ea cd 5b 5d dd 03 39 6d 5b 9b ee a5 ab fa be 96 ea 7f ab bb 1b c0 00 66 2c ef fb 0a cc d9 06 5e ec 99 1e f9 cf 14 d7 d6 18 a3 98 12 08 09 10 ca 91 43 99 c9 b5 0f b2 e2 48 38 33 87 33 93 8c 30 52 cd 8e 58 06 36 30 39 2f 5f 5b 0c a6 15 fb cc ac af 24 1b 91 5c 3c 2d d9 c6 9c 0d 74 4b c4 f5 92 58 8c 18 63 6c 7e a1 83 15 41 1c 37 92 22 22 00 2e c0 9b cb 25 d3 b2 ee 06 22 2d e2 d2 21 49 0c 89 48 ce 63 02 cf 98 26 e4 8d 40 4b 95 4c 04 e7 98 18 49 b6 e2 98 68 fe 7e cf 12 11 c1 46 96 be da d8 5c 86 3e 27 03 11 11 76 f8 f3 63 c3 29 22 6c ad 36 71 54 84 bb bf Data Ascii: RIFF^WEBPVP8LR/IM8lF"gn/Y_<BD'*nzw/$uI[]9m[f,^CH8330RX609/_[$\<-tKXcl~A7"".%"-!IHc&@KLIh~F\>'vc)"l6qT
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 8f cf 00 8f 04 00 1a e6 23 56 97 56 97 00 7e 77 9d 15 a9 86 b0 dc 4c ab 61 b3 fa b3 07 00 cc 77 6d 83 35 77 6c 98 50 0d 61 31 03 50 cb 00 00 ee df 03 bc 2f 77 f3 fa fa 8e 9b e9 0b 2f ce da 1e 80 c0 e4 1c 9e 29 10 7e d9 f7 59 7f 46 18 36 a3 eb fd 01 13 a6 06 00 51 27 6f 7b 77 ba a3 b2 66 82 4b 80 6a 9a ff ef 95 61 35 87 db f5 31 2e 4e 2a f0 44 13 2c 6c 5e f3 d0 02 58 30 01 c0 05 f2 72 f8 cf 01 9c 2c e2 7c b9 8f 00 40 fc b6 bd 34 33 58 0a 00 75 db da df 99 2e 2a 8c 8b 67 8f ca e2 7e 0b bb 4a 0b 8c 2e 8a 27 9b b2 ac 59 93 c6 25 84 1d 97 c0 4e 6d bd 80 44 d1 77 b6 5e 93 cc f1 ef 65 b9 52 77 00 d0 b4 a9 0c 48 08 46 c9 ff fe a3 a2 a0 00 33 e6 05 4e 22 c1 e6 6f 6b b7 30 48 7d bd 50 76 dd d8 81 45 01 eb eb e3 fe 66 84 9d 82 72 f9 a1 ec ba 53 07 88 84 71 1f ec 80 Data Ascii: #VV~wLawm5wlPa1P/w/)~YF6Q'o{wfKja51.ND,l^X0r,\|@43Xu.g~J.'Y%NmDw^eRwHF3N"ok0H}PvEfrSq
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d 00 04 00 e3 01 dd 85 14 d0 27 52 ea 40 a5 d2 9d 50 a5 10 25 25 ea 28 91 24 2a a4 52 05 3a 45 a5 a2 82 4a 9d 42 49 29 75 2a 15 89 54 2a 75 0a a5 8a 0b be 0b 28 51 a9 54 aa c6 69 cc 48 57 ac 37 a7 23 c5 06 ab 9d 6a 24 64 5d d0 d1 51 8d cc 29 08 2a e7 14 36 95 a2 5a c5 48 81 65 b8 26 65 cb 5c 43 1b 60 ae c9 1a 05 9b a9 1b 14 80 46 30 20 68 33 03 e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 16 06 d6 a6 6e 3c cd 60 eb ae 14 45 d4 29 67 4a a5 b4 9c 96 a5 8a a8 13 db 18 42 ad aa 29 15 35 56 69 21 95 9c eb c4 99 91 94 96 99 02 75 ed 5c 5d 98 14 07 d3 d9 06 a4 6b 3a d3 42 4b 92 ab 97 91 ec 5c e9 8c ca 40 54 64 50 14 57 1a e7 ca 02 d1 5a a4 83 30 6e 49 a2 43 b3 2b 46 02 07 d3 ee ed 14 97 67 6c 0f 14 21 27 b6 82 81 Data Ascii: TDTD'R@P%%($R:EJBI)uTu(QTiHW7#j$d]Q)*6ZHe&e\C`F0 h3XT\n<`E)gJB)5Vi!u\]k:BK\@TdPWZ0nIC+Fgl!'
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: da c8 d9 25 9b 0c b2 b7 ac 29 75 c9 91 b3 a3 b4 0d f0 02 43 39 77 51 81 33 e0 b5 88 73 87 ab 6e 31 e3 8d 57 0d 68 b7 2c 42 ac 5a 8b 76 ee 54 a5 ea 7a 19 55 89 1a 57 4a 31 8c 54 8c c0 20 33 63 10 32 a1 0c b9 43 5a 45 c4 58 0c 85 ab 8d ce 42 d2 25 15 58 56 55 c6 9b 1d 30 b8 0b 39 8f 97 d7 52 9c b1 4a 65 b3 0a cb f2 c8 15 12 83 a4 b2 c8 42 ac a5 c8 58 96 89 2e 54 2a 8b 31 43 49 94 50 fc 97 53 95 43 f2 2d 37 42 2e 54 8c 0a 16 4b 48 4b e9 2c 97 dd d5 8d 10 14 30 53 a8 43 26 dd 8a 0a 25 30 a5 24 89 32 81 31 45 6d 70 52 24 51 e7 ea 42 91 4a 69 50 23 42 70 4d a7 a4 52 d0 24 53 ba cb 5d 2e d5 dc 51 e9 52 a9 14 49 29 a9 81 9a 4e a8 d2 a9 52 90 0a b1 29 29 a8 94 8e 2c 11 b1 19 32 a5 52 a9 94 91 92 e8 a8 06 98 52 54 29 98 52 a6 42 92 8b 1a a1 d1 24 35 72 52 29 55 9b Data Ascii: %)uC9wQ3sn1Wh,BZvTzUWJ1T 3c2CZEXB%XVU09RJeBX.T*1CIPSC-7B.TKHK,0SC&%0$21EmpR$QBJiP#BpMR$S].QRI)NR)),2RRT)RB$5rR)U
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 92 19 98 ad 24 58 82 b9 e8 51 24 ab 32 32 ea 6a 43 43 15 ce 17 c5 5a 1a 55 19 75 c5 50 14 ba 46 30 a4 a5 49 4e 8f 92 28 78 07 18 73 c1 54 a5 81 44 2a a6 20 05 d8 a9 ea a6 a3 a8 c6 74 c8 58 0c 4e b9 26 14 e9 61 6b 68 ba c6 68 49 11 d4 29 19 33 40 5a 04 6d 2a d5 08 9d a8 52 29 aa 1d 99 4a 94 36 b7 de 14 55 0a ba a8 29 75 6a 6d ca a0 8a 0d 4e 9b d0 a5 d2 e9 38 a3 24 ad 31 3d 4e 98 a0 13 6b 04 4c e7 a2 8d 2d b6 a9 9c 50 c9 50 d9 05 93 34 e5 b4 6a 03 40 6f b6 53 ca d4 60 4e c1 90 0d 4e cc 89 2c 96 72 35 c5 68 96 ea 38 ab a5 2e cc aa b3 a1 d4 b1 af f2 48 e9 65 49 5b ab 76 26 93 c8 db b7 94 e9 2c f8 c0 1c 70 93 47 66 27 99 9a 51 be 52 35 92 ae b7 5c 83 d0 39 85 1d 0b b1 88 b6 0b 25 aa e4 94 33 02 d4 29 1b 17 cb d6 53 ed 2c 2b 04 74 5c d5 48 e0 66 8a 16 04 f9 ac Data Ascii: $XQ$22jCCZUuPF0IN(xsTD* tXN&akhhI)3@Zm*R)J6U)ujmN8$1=NkL-PP4j@oS`NN,r5h8.HeI[v&,pGf'QR5\9%3)S,+t\Hf
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 90 0a 09 05 b5 03 ea 52 92 2e e7 48 a5 6e 96 79 0b 06 76 b4 b7 15 3d 48 b7 5e 8b 5d 68 2c db b2 57 a6 41 6a 2f ce b9 0f 72 86 ca bb 51 53 38 30 92 cd 0b 0f 6d ea 4f 06 09 84 17 2f f5 47 bf fc 2c 5a cd 6f de fc f1 b2 2b 53 84 46 12 68 24 2a 35 77 5d 1a ff 7f e7 6b 91 04 30 18 4a a0 05 10 a8 85 90 2a 00 b2 84 04 fa a1 50 b4 04 b2 a4 cc af 7e f1 f1 a5 6b 97 37 46 e7 5f fe cb ca 54 06 c3 04 98 28 24 47 98 3a f8 f8 09 07 3a 85 6a 14 a0 56 58 03 b4 65 ca bb fe f3 a7 91 24 85 29 49 21 38 6a a1 a6 40 d5 a8 78 e6 6a b3 e4 68 6f e7 9c 20 65 53 75 0a c5 42 d9 0b 0c c2 bc 55 39 1d d2 f5 4e b5 6d aa 21 72 db 55 b4 d8 60 cf 65 af 39 b9 93 a3 ed a2 22 a4 b3 5d a5 7b ae dc 5e 2d 4e 91 b6 b8 6a 5f 2a 6d a5 b1 67 dd 69 41 d7 d1 5d af d4 35 33 65 1f 48 0b 75 36 ab bd c8 c6 Data Ascii: R.Hnyv=H^]h,WAj/rQS80mO/G,Zo+SFh$5w]k0JP~k7F_T($G::jVXe$)I!8j@xjho eSuBU9Nm!rU`e9"]{^-Nj_*mgiA]53eHu6
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 82 f0 04 b0 f4 db ca 9c 86 11 5f 79 f2 3d 5f 3e f7 bd 89 a9 ba 9d b3 b2 23 12 df ff 97 57 f3 3f e8 62 07 48 10 82 a8 26 0c ad e3 b3 cf be e3 47 be fe ed 7f c4 8e 4a 5b 8d 8c 6c 0c a5 fa cc 80 56 18 0d c8 14 bf a8 1c 59 0e 5a 32 18 50 45 50 03 a0 89 56 a2 ec 0a af 86 f8 0e 09 a6 da 00 0d c0 68 29 23 7b 96 77 30 c9 a9 ca 29 4a 67 ba b2 ee 9c 29 85 bc 14 07 05 5a 55 47 24 35 54 3b 45 da 00 db a9 b6 8b ca d5 ac 6b 17 ec 13 57 f5 50 9a 3e 75 73 b7 a9 f6 ed 92 ee 70 95 3f 40 57 86 fa a8 ea cd 90 d2 54 fb c5 e9 cd cb f9 ed cc 29 4f f2 d5 e2 75 31 e0 05 d7 2a 9c 20 f3 e1 ff f5 fb cf 1c fe f8 a6 d7 fe bb 8a 11 89 fe ee ef e9 72 76 df 75 63 7d e6 bf 00 24 a7 53 4b 61 e3 9e 45 1b b2 36 2f bc 2b 45 fb e3 6f df fd df 93 be fc 47 62 8d d2 47 52 76 bd a3 c2 64 e6 f5 c7 Data Ascii: _y=_>#W?bH&GJ[lVYZ2PEPVh)#{w0)Jg)ZUG$5T;EkWP>usp?@WT)Ou1* rvuc}$SKaE6/+EoGbGRvd
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 9b 2e aa 7a 6d 85 e2 b2 a9 7e 4c 37 79 0a dc 97 9a 2d 66 5d c9 55 e4 b8 61 53 8b a4 1a c1 aa 75 b9 d1 f4 97 6b 06 7b 50 3a b3 e5 7c 3b 72 ee b3 8e f7 51 e5 2d 5c d7 9e ea 7d cc 35 92 94 d7 5d 1c 95 52 ef ba f8 4a d5 d5 6b 5d bf cb 3a 20 71 ea 4a f4 0e 15 6a 9b 53 48 8a 90 a2 15 11 11 d6 a5 11 0d 85 2c 99 78 9a d2 49 01 6b 18 af 2c 25 71 65 48 1a aa a4 ad 91 a4 a9 c0 57 59 85 eb e7 95 05 47 4d 40 e0 61 48 71 85 4d 98 6a 45 92 a4 0c 81 16 4c 88 ba 32 8c 0a 08 e1 e9 4b 1b 93 10 52 0c 13 60 9c d6 b2 86 18 1e 93 24 a8 ab 35 ec f8 92 c0 80 2f 6d 48 4a 09 9a ca 62 ef eb b2 5e 90 6e 4f e5 3b 54 33 e3 3c ae 88 44 ea 75 57 5e a9 66 6f 54 f9 2e d7 51 9c da 77 57 5b 3b 95 ea 5d 8b 6f c1 74 b3 99 8f b3 36 9e 4a d7 85 8c 4d 89 2e eb 01 e5 47 cb 4e 67 e1 2c 27 ee ee 5c Data Ascii: .zm~L7y-f]UaSuk{P:\|;rQ-\}5]RJk]: qJjSH,xIk,%qeHWYGM@aHqMjEL2KR`$5/mHJb^nO;T3<DuW^foT.QwW[;]ot6JM.GNg,'\
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 1c 95 b5 bc 29 27 31 ab 0d 55 ca 82 c0 2a b1 36 64 4a a2 a9 03 8a 11 a5 a8 96 2e c2 b5 87 5c 60 77 95 ba 32 b1 5c d5 6c 4e cc 1b 86 1c bb 4b c2 22 50 09 97 c1 50 ad 4d 91 37 45 9b 3b 8c 2d 37 df 06 d0 11 d8 c4 d6 46 94 c4 99 a3 a8 54 d5 3b 4d 99 a6 e6 34 58 77 b2 a0 e2 de 39 3a 89 42 eb d0 4b b9 d3 69 73 a6 94 14 9d af 86 bd c1 1d d5 9d 6b 3a 17 35 66 af a1 14 55 a5 a9 33 55 ff 47 5c 2a 97 38 de 45 2f cb e5 e8 82 75 5a 2b 8d 93 a4 56 4e d8 76 22 5d cf 5a 79 46 d5 d5 ab ec 57 ba eb 4e ce f6 5f 42 ad 48 f9 ac e5 9d bb b1 49 8c ea 08 37 77 5c 7a 77 8c d9 e5 d1 f5 59 8b 07 65 4c a2 3e 3e ea 18 2e d7 57 4e 47 2e 79 54 7a b7 d0 35 8f f3 91 6b 3a b9 c9 e3 6c 07 95 dd 2f b6 e3 93 32 4f ad fa a2 4a 4d 98 4f b7 34 4a 62 0f 4b ef 8c 8d 4e b7 f8 16 e9 69 43 5f 6c 6f Data Ascii: )'1U6dJ.\`w2\lNK"PPM7E;-7FT;M4Xw9:BKisk:5fU3UG\8E/uZ+VNv"]ZyFWN_BHI7w\zwYeL>>.WNG.yTz5k:l/2OJMO4JbKNiC_lo
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 1c 53 b9 68 2e 4a 6e 4b e1 4e 30 66 ad 8b 93 85 a7 da e2 d4 5d a6 b2 56 f8 cb a9 53 27 cd 56 2a 4f 2e 6e 09 eb 22 65 8b 4a d1 e2 36 6e a3 aa 55 6b 6f 31 73 5b b0 c6 e2 36 54 2f 97 03 b5 4d 7a 15 29 1c 8f 4d 6d 4c e0 31 ad c5 a4 8f 4e 77 dd 55 b7 ab 46 e9 ce 5a 83 2d 04 9f b9 4e dd f5 86 9c a3 4a c3 a8 02 69 b7 08 74 b9 7a a0 cd 60 67 ca b5 19 55 b4 6c 1c 1a d9 39 7b d0 28 51 76 29 dd e9 82 d3 39 1b 25 1a ab bc 05 2d dd b9 76 91 8d 6c f2 c6 f9 8e da c9 a0 f3 dc 15 2f 89 ae dd 9c b7 a5 cd 19 59 8f e9 9a 0a f0 e2 eb a0 8a f5 e6 bc e8 ca 35 8e bc a6 6a 05 9d bd 60 27 88 8a b2 5a 8a e5 89 26 5a 23 ae 6e dc c8 82 b2 8b 6d aa a9 eb d1 aa 53 0c 59 a2 56 ab d3 e9 a3 67 72 dc bc 10 dc 4e ce d2 3c 4d f3 e6 a4 b6 98 ea b4 33 97 fd 7a 30 26 fa 35 27 a9 86 e9 5e 5b c9 Data Ascii: Sh.JnKN0f]VS'V*O.n"eJ6nUko1s[6T/Mz)MmL1NwUFZ-NJitz`gUl9{(Qv)9%-vl/Y5j`'Z&Z#nmSYVgrN<M3z0&5'^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49824	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	510	OUT	GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 36974 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:14 GMT Expires: Sat, 20 Apr 2024 13:08:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 3481 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	721	IN	Data Raw: 52 49 46 46 66 90 00 00 57 45 42 50 56 50 38 4c 5a 90 00 00 2f a5 c0 49 00 4d 48 6c db 48 90 24 d8 53 ae b2 ab 71 f9 07 3c 3d fb 1f 42 44 ff 27 a0 aa 22 cd 64 24 f9 ec 4a dd 52 f7 c5 96 7d b4 92 7d db 91 f4 a2 2d f9 91 ba b3 a3 48 12 f5 36 ee 23 d9 6b ee f6 ac bb 77 07 df 07 f7 da 9e 77 4b 18 4e 77 db 70 92 9e 19 48 bb dc dd 75 03 ec d8 33 91 ba 5f 01 80 62 d2 dd d1 4c 53 1a bd c0 7c bf 94 99 09 98 99 24 9b d1 a5 07 40 91 d3 c9 ee 36 47 d2 8e 01 30 f9 92 d6 33 04 00 f7 5e 86 6b 33 58 a0 0e fb 00 c0 39 07 d7 c5 bb a9 2b 29 49 9e 4b b5 50 96 e9 0b 00 02 f5 f0 8f b6 99 7c bc 8b 27 91 48 bd 96 17 e0 a0 6c 51 b2 0d 64 a7 80 da 75 2e ab c6 77 d6 34 bd 6d fc c2 1d 5a dd 92 1a 48 be 8e 39 73 bb 12 e4 1c 1c bc cf 47 e1 00 33 94 1d cd 07 70 50 bd 54 92 cc f3 22 00 Data Ascii: RIFFfWEBPVP8LZ/IMHlH$Sq<=BD'"d$JR}}-H6#kwwKNwpHu3_bLS\|$@6G03^k3X9+)IKP\|'HlQdu.w4mZH9sG3pPT"
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 15 8b 98 c0 56 e3 0b 0b e5 a6 06 e7 b9 bc 95 cf 27 20 86 61 b1 9a e8 21 fe fc e0 2b 00 0c 58 5c 5c 5c 3e af 19 00 58 2c 10 41 5b 57 f7 d0 3b 00 16 02 02 7f 6a e3 e2 45 b7 1b 00 01 24 fe fc d8 06 76 b7 9b 6b e1 9a 42 44 14 c0 08 80 cc 33 cf 9f 56 be 53 f1 6b 3d 3b 65 ed cf 36 d0 5c 0b 57 fc 1c b1 28 cf 1f d7 73 67 cf 1f 1f b2 93 4c be 57 d9 45 26 71 77 64 b3 5b 75 70 32 39 83 01 15 20 41 02 01 56 7c 5f ec cd e0 f7 14 f9 dc 33 57 ec 78 12 42 21 49 0f 62 cd bd ba 61 cd da de d8 07 b7 07 5f 1d be af 38 53 67 e5 c9 bc ac 79 e7 c9 bc 98 28 8a e2 f7 ee 74 67 e1 6e e1 61 ea 49 8a 61 60 ea 4c 9d b8 cb 48 3c 19 46 67 52 8c 8b 27 cd 11 62 22 a5 38 71 b7 70 97 99 b8 c6 ae a5 6b 38 7c eb d9 79 de 7d 67 bc f2 02 ea dc 48 23 3d c0 50 8c 7d 4f bb 5e 76 0d 38 c7 08 8c 50 Data Ascii: V' a!+X\\\>X,A[W;jE$vkBD3VSk=;e6\W(sgLWE&qwd[up29 AV\|_3WxB!Iba_8Sgy(tgnaIa`LH<FgR'b"8qpk8\|y}gH#=P}O^v8P
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 0a 81 63 0a b3 7c 9a 70 03 48 2b 9a 18 87 8e 4a d3 7a 72 13 40 23 80 e1 81 ab 0e 5b 66 95 10 0b 4c c5 ec d4 2c 4d 16 a0 d9 81 d5 6d 18 61 96 88 29 64 5b 00 8b 49 78 28 26 ad cc aa 41 30 0d 40 10 80 60 04 0e c4 51 16 41 d1 d2 07 07 22 64 c4 11 11 31 10 c7 21 23 62 1c 21 43 96 21 08 2c 47 07 30 10 5b a1 52 b6 0a ab 10 dd 5a ae 08 84 c8 48 62 a5 00 aa 32 a6 62 57 39 30 4a 19 02 4a 0b 15 4a 24 56 a5 50 8c 72 d0 2a 26 ac 00 7a 15 43 a2 8c 11 94 00 89 31 15 91 d2 28 65 83 48 33 82 00 30 1e 66 18 3c 46 03 6c ca 10 49 24 8f 21 03 05 08 20 20 01 00 51 46 60 44 c4 65 94 18 07 a4 11 40 40 a9 32 54 a3 24 8e 43 a5 f1 74 4a 65 b5 3a 0b b4 02 11 62 a7 83 34 40 c0 34 03 80 26 20 14 89 88 5a 8a 56 6d f9 b3 b1 c4 b1 1c 38 22 14 90 ad b0 9a 62 52 40 0b 31 12 c4 b6 02 80 00 Data Ascii: c\|pH+Jzr@#[fL,Mma)d[Ix(&A0@`QA"d1!#b!C!,G0[RZHb2bW90JJJ$VPr*&zC1(eH30f<FlI$! QF`De@@2T$CtJe:b4@4& ZVm8"bR@1
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 70 48 ad 04 44 a2 c1 08 01 06 ca 80 48 cc 24 4a 81 0c 95 ba 72 9a c0 59 f6 84 22 c7 cd 2a 22 90 0e 44 95 c0 42 dd 6a 45 44 60 8c 23 01 23 23 b4 6a 14 4b 91 08 2b 89 c4 12 88 81 63 89 b1 a2 03 28 51 56 d0 b1 95 52 71 84 12 04 50 22 54 13 2a 81 41 a0 0f 0e 03 37 00 64 a0 c1 21 28 62 10 41 55 e0 d2 a0 84 00 12 31 62 09 a0 50 6a 0c 00 14 12 40 1a 9f dd 50 73 4c 37 6d ec 84 41 b1 42 8b 94 ad 59 47 37 a6 c4 12 26 6e 02 63 80 11 33 a5 85 63 5c 4b d3 51 3b 96 6b 52 64 05 00 07 e2 56 49 71 a3 ca a8 d2 02 34 29 10 8a 9a 0a 45 42 85 2a 88 96 24 a9 88 0d 00 6c 62 19 07 cc c5 04 04 9b 63 01 04 40 09 1c 62 ca 10 09 8c 71 d9 14 a0 0c 88 10 09 6a 45 33 0c d4 67 28 b5 12 d7 56 49 94 60 95 2a 6d d7 95 d2 c5 8d a8 40 40 16 29 e3 12 c4 40 4a a4 88 bc 42 4d 93 da 1a 6e 58 04 Data Ascii: pHDH$JrY""DBjED`###jK+c(QVRqP"TA7d!(bAU1bPj@PsL7mABYG7&nc3c\KQ;kRdVIq4)EB$lbc@bqjE3g(VI`m@@)@JBMnX
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 20 8e 4c a7 20 0d 42 0b 21 b5 4a 55 cb 31 84 88 4a 85 ca 88 32 5a 22 b1 8c 03 40 34 72 98 21 80 11 23 82 30 cb 54 0d c4 d8 84 00 47 84 00 32 4a 80 74 41 1d a6 ab 5a 4d 2b 01 50 01 91 8e e9 56 c4 a3 d0 0e a2 28 48 f3 aa 11 d5 b8 91 c0 90 52 06 66 90 b1 08 a1 59 42 5d 56 58 9d 56 a7 d5 14 38 46 c4 88 a7 12 b0 6a 84 e1 b4 16 33 59 2f 2d 01 60 b5 40 80 ba 55 41 62 a0 44 31 e3 88 71 44 8c 10 e0 a5 98 28 05 65 20 a4 e0 22 80 94 e3 72 e0 22 12 81 02 41 b3 90 e8 32 2e 73 96 40 53 02 61 51 aa 39 00 04 c5 02 34 43 51 53 b7 3a a2 91 5d 81 88 30 a3 41 d9 9e 89 46 20 21 b2 76 53 55 af 54 3a a5 11 a6 4c 81 db c6 01 84 a2 0a b3 0c 2a 42 98 90 92 45 95 a8 08 65 90 95 a4 51 19 05 05 81 88 81 03 18 08 14 31 40 c1 4d 13 62 2e a6 c1 22 28 e3 28 18 08 2c 87 3a 84 a8 c6 17 2a Data Ascii: L B!JU1J2Z"@4r!#0TG2JtAZM+PV(HRfYB]VXV8Fj3Y/-`@UAbD1qD(e "r"A2.s@SaQ94CQS:]0AF !vSUT:LBEeQ1@Mb."((,:
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 00 58 02 0c 61 08 30 48 0a 4b 82 9c 42 33 d9 fa bf fc e6 37 ff b7 7d e6 11 66 48 1f db df f8 c5 47 fe 36 a7 2c 65 0c 20 98 25 26 48 50 30 aa b4 96 24 5c 02 17 fa b3 7f 34 95 77 6e c6 b4 20 56 2b 25 27 c4 d3 9e 44 a6 a4 6a 15 91 25 78 63 35 42 9e fa 3c c7 e6 d1 18 03 e2 14 f5 a4 08 86 91 68 19 40 4d 62 89 45 90 34 62 85 19 15 0c 20 8c 2a 4c 40 04 04 00 60 90 30 80 24 58 68 81 53 09 03 0c 31 02 82 31 e2 78 6c 9a 9e 6c fb cd 6f 7e b7 df 7c 6a f6 e4 06 ab 9b 0f 3e f2 6b 7e f1 31 d7 22 45 46 29 49 d4 12 4d b2 48 3c ea ae 64 2e 29 2a 88 df 75 4b 96 69 c4 34 6e 40 41 ad 58 05 ca a2 d6 1d ab 31 9a 99 c9 0c 5a e3 a1 11 34 82 b0 ae 56 32 a0 62 ea 6c 5a 2a 7b 15 16 55 9b 55 02 6d 6b 56 b0 4d 50 8a 5b 02 60 62 95 12 00 22 06 50 30 22 02 f1 08 14 41 2c 11 11 cd 18 28 Data Ascii: Xa0HKB37}fHG6,e %&HP0$\4wn V+%'Dj%xc5B<h@MbE4b L@`0$XhS11xllo~\|j>k~1"EF)IMH<d.)uKi4n@AX1Z4V2blZ*{UUmkVMP[`b"P0"A,(
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 25 d3 7f fe e5 1d 27 02 b8 2c 82 28 11 05 62 62 20 46 04 06 16 48 8c 51 8c 34 45 00 2c 01 20 46 c4 05 62 ca 08 81 51 91 29 2b b2 92 21 49 8d 5a 55 13 c5 4f ab 6a 1d 21 ad 6e 56 0c 2d 00 98 13 4a 82 dc b2 9c ca 03 59 ec 1e 94 19 37 2b 2c 56 33 3a 06 1a 89 05 18 31 ea 50 46 19 8a a9 b1 82 59 56 58 64 36 90 d4 eb be 9c ad fb 7a ee 4f c7 e7 fe ec f6 71 5f b0 bb f1 ea fe f8 7b a5 a3 b7 fa c7 9f 3a 5f 4e 00 2c bb 2c 81 47 04 0a 70 c4 00 24 8e 11 82 88 21 08 41 44 8c 88 88 81 80 20 ca 40 00 02 21 80 2a c4 2a 56 ad 30 d1 20 eb 6a ce d2 56 d5 44 b5 c9 94 86 d8 3a 49 cd 3b 24 ab 48 8d 42 a7 2d b0 5a 06 81 ad ea 16 19 0c 46 d9 56 8c 22 80 31 a8 8c 58 ca b6 15 c6 58 60 43 d8 08 6c b0 cd 07 78 f0 03 bc fa 72 cf fc d6 f8 d1 c7 3f d3 3c e9 6f 7d c9 76 e9 17 a3 0e 5e fe Data Ascii: %',(bb FHQ4E, FbQ)+!IZUOj!nV-JY7+,V3:1PFYVXd6zOq_{:_N,,Gp$!AD @!**V0 jVD:I;$HB-ZFV"1XX`Clxr?<o}v^
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 80 22 a9 85 64 21 ad 55 03 21 33 b1 35 84 09 26 b5 a9 58 a5 b3 38 28 9b 08 a1 92 0a 85 0f 52 81 43 a9 50 5a 95 a2 22 6a 4a 5c 22 ab 92 b2 01 40 62 cd ad 1d ba e5 99 27 b7 91 c5 b9 f1 ab 5b ce 51 42 48 cc 7e f1 f8 02 3b 10 24 48 81 18 18 88 01 00 03 8d 04 02 21 88 11 8f 88 18 12 c7 90 a6 8c 18 88 90 51 8c c0 88 91 51 e0 6d 60 00 2b 34 78 b5 00 28 15 22 48 2a 15 0b 93 88 aa 19 14 44 69 45 50 55 75 4c 91 62 75 88 8a 88 38 e4 50 37 11 37 37 ad 4a 09 c2 15 54 2a 00 80 ae 0e 3c b8 b6 5d ac f1 ab 5f 3d b5 fd 72 9d 29 0b 00 42 fa fd ef fc fa 3a 08 00 10 0e 09 60 00 40 a9 49 c8 a5 8c 81 31 80 08 00 23 22 80 28 b2 41 08 02 00 ca a6 c0 40 e0 75 04 02 00 a2 08 06 42 d3 98 08 54 0b 4b ac 32 a6 59 4b 09 a0 49 ae 64 ca 13 98 52 d3 d2 20 12 29 fa b6 74 33 10 ef ee 84 aa Data Ascii: "d!U!35&X8(RCPZ"jJ\"@b'[QBH~;$H!QQm`+4x("HDiEPUuLbu8P777JT<]_=r)B:`@I1#"(A@uBTK2YKIdR )t3
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: 00 50 38 81 43 01 5c 67 04 00 b8 74 de 6d dc f9 9e 4f d8 1c 06 e4 12 4b b9 bc 19 40 60 a0 80 ae 44 70 09 1c 61 10 28 31 02 82 00 46 2c 21 80 a0 09 53 0a 42 8a 88 84 57 09 bc 46 53 22 80 08 b9 91 22 cb 22 4d 34 32 d5 ca f1 21 47 1c 61 a4 44 7c c4 74 30 3a 96 9b 8a aa 43 57 15 4c 1f cf 2a 46 cb 07 05 a1 00 40 e2 43 9f 3d db 67 dd 79 c8 de 73 b9 f2 9f ea 5e d7 ff 37 cd 0b c4 e3 ed bd 88 1b 7f 1f 05 00 15 40 00 66 2e de f0 f5 4f db bc 10 e3 88 08 d1 10 cd 88 52 96 61 62 c0 c4 18 11 32 04 02 44 00 8f 08 20 10 0b c4 14 44 0c 41 88 29 12 00 44 13 8c 80 00 42 88 20 a0 08 8d e1 e6 5a 2b 24 9d 5d 02 91 d5 b4 f3 e2 e3 90 48 91 12 90 ae 74 91 ce e8 a6 ac ee 09 e9 dd e8 a0 8c 00 2e a3 04 00 13 f9 aa 9f e8 d1 3f ad 0e 06 ef 40 fb 84 bd 8b d9 78 ac dd 53 23 bf 35 a7 5b Data Ascii: P8C\gtmOK@`Dpa(1F,!SBWFS"""M42!GaD\|t0:CWL*F@C=gys^7@f.ORab2D DA)DB Z+$]Ht.?@xS#5[
2024-04-19 14:06:15 UTC	1255	IN	Data Raw: f1 e1 ba 02 10 52 c8 a3 1a 49 28 01 44 28 23 29 a3 b8 25 8d b4 30 aa b4 03 bc e8 5b 1f 2d 1b 06 80 40 08 80 81 c0 18 80 08 8e 88 06 80 19 88 28 82 26 36 01 34 58 40 56 52 12 01 01 00 82 26 6a cd 19 4e 45 55 92 45 a8 6b 25 6e 5b 97 be ed 2c 25 45 a9 12 a9 93 10 42 20 8e 11 81 e6 00 ba 9c 5c 25 06 08 bc 52 55 94 71 83 4c b3 a2 b5 42 86 97 d2 7c 92 b3 f0 20 20 80 26 70 00 01 60 8c 18 0f 88 60 20 42 80 40 2c 05 88 1e 89 40 29 00 35 00 18 28 15 05 10 89 28 4d dc 1c 87 2a 25 9a 2c 5a 47 43 0a 37 b8 22 3a 21 70 d4 65 e9 46 8e 23 99 22 87 d2 45 c5 22 55 81 11 91 c9 12 a1 a1 9d d4 76 12 1a f5 47 24 10 00 80 28 c0 ea 63 25 08 00 0c 91 30 e8 72 1c 47 c4 e8 82 01 2c 12 45 a2 08 30 20 90 01 40 a4 08 29 92 29 b8 45 37 ad 10 29 75 29 21 67 b8 c9 54 49 d9 11 1f 57 1f 52 Data Ascii: RI(D(#)%0[-@(&64X@VR&jNEUEk%n[,%EB \%RUqLB\| &p`` B@,@)5((M*%,ZGC7":!peF#"E"UvG$(c%0rG,E0 @))E7)u)!gTIWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49827	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	513	OUT	GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:39:39 GMT Expires: Sat, 20 Apr 2024 12:39:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 5196 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	244	IN	Data Raw: 52 49 46 46 ec 00 00 00 57 45 42 50 56 50 38 4c df 00 00 00 2f 13 c0 04 10 35 b8 8d 00 46 6d 34 88 57 23 e9 ec 2e 30 44 ce 5d a0 e7 1d 98 4a 7f 17 ac 72 d9 c6 6c e9 32 81 14 e1 36 b6 6d 55 f9 91 0b 0e 35 b8 43 fc 28 e5 bf 18 0d b5 04 27 76 69 c7 aa b0 08 52 dd 0a dc 46 6d 02 74 97 f5 0c fd 83 e4 d5 5c 08 e8 5f 10 eb 9f 59 ee 92 d8 0c d5 ee 92 63 3b 20 f2 8a da b5 d3 8d 17 1c 1d 90 10 c2 7c 20 d6 c9 b1 15 12 70 6b e5 a9 d9 62 bc ce e3 cd bf 60 b9 a6 ab 81 96 8b f8 81 a4 07 70 bb fc 82 85 2f c2 82 37 32 3c e6 f9 ee fc b3 06 f1 f3 8c 98 cf 41 51 96 af e4 01 0b 9f cd 0d a7 59 c3 d5 40 cd 45 72 45 d2 03 f8 9a fd 64 1c e9 a5 5d 3a 9a ae 4b 47 92 5e 05 40 4c d6 53 8e 8f 67 9b e1 7a c4 f7 5e fb 67 c4 7a 67 81 b3 5c 98 4a 45 01 00 Data Ascii: RIFFWEBPVP8L/5Fm4W#.0D]Jrl26mU5C('viRFmt\_Yc; \| pkb`p/72<AQY@ErEd]:KG^@LSgz^gzg\JE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49828	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	512	OUT	GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 332 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:37:28 GMT Expires: Sat, 20 Apr 2024 10:37:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 12527 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	332	IN	Data Raw: 52 49 46 46 44 01 00 00 57 45 42 50 56 50 38 4c 37 01 00 00 2f 13 c0 04 10 95 c0 ae 6d db d8 73 db fc 63 db f6 ab 6d db ce ab 5b 48 15 e9 c0 da b1 0b 58 d1 97 71 bf 7c 88 80 63 5b db f1 2a b6 6d 1b 23 b0 4a 77 99 45 3a bb 75 72 6f c7 0e 9d d5 7a 00 b6 6d 5b ef 04 f0 11 4a b2 98 6c 1d 6c 19 58 4e 48 fa 8c f5 44 3c 24 41 22 58 ef 6b 29 fb a4 be ba 97 bd 79 e1 84 13 57 f6 96 37 54 7d 82 e4 09 90 b7 c4 83 b9 cb 56 ea 47 0c a9 76 34 01 64 05 89 1d 90 25 01 5a bb 1e da 8a 7f 79 29 6f 10 e1 a7 dc bb fb 02 c8 b8 cd 5d 7e e0 30 6a 53 2f 8e 02 12 19 84 a1 a5 de 24 81 97 7c fb 4b ce a9 ad 9c 96 19 c8 38 4d f8 00 0c 3d fe cb 49 fc 71 9d 7f 83 aa 5b c8 39 73 1c f9 11 2f 0e 46 3a 01 6a 87 cf a2 05 7b 6e e8 00 32 c4 ff 64 1c 23 41 3c ac 54 ee 41 ce 69 c8 83 b3 8d 2f 09 Data Ascii: RIFFDWEBPVP8L7/mscm[HXq\|c[*m#JwE:urozm[JllXNHD<$A"Xk)yW7T}VGv4d%Zy)o]~0jS/$\|K8M=Iq[9s/F:j{n2d#A<TAi/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49832	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	512	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:15 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 266 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:03:19 GMT Expires: Sat, 20 Apr 2024 12:03:19 GMT Cache-Control: public, max-age=86400, no-transform Age: 7376 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:15 UTC	266	IN	Data Raw: 52 49 46 46 02 01 00 00 57 45 42 50 56 50 38 4c f6 00 00 00 2f 13 c0 04 10 07 a1 10 92 24 67 ae ce df ed 18 fe 11 72 5e 0d 45 8d 24 45 bd fe e5 e1 00 7e 38 d8 03 9a 41 db 48 8e cc 1f dc 41 38 1d 8c f2 25 6c 23 db 56 72 bf ff 1f b9 62 39 0d 50 03 fd b7 c0 10 d1 81 4e 00 00 5b 6e 1a 50 b4 02 09 14 81 82 ac ef b4 ef 36 5c e8 77 1c 2b e8 bc e7 fe fc 86 58 a3 fd f7 d3 55 27 cc dc 06 23 ef 7d b8 ef bd d3 59 db ae bb c8 00 41 02 78 64 42 04 fd 00 86 91 24 25 da 77 77 e3 f1 fc c3 74 c8 20 a2 ff 0a dc b6 51 7c cc f0 0c f8 a1 2c 11 0d 03 91 92 0c b1 c4 c4 71 08 16 89 44 14 40 21 48 d0 aa 4e 98 70 aa 35 a4 a2 bb b5 d3 2a 60 ee e9 d5 b4 6d 73 d1 7e f6 6c 9c 06 02 df 5c 2f ad 5b 2f d4 f4 75 3d 14 81 40 1f d7 ed 58 16 c7 1d 34 6a 3d c6 7d ff ff 65 64 69 dd 69 cb d2 fe Data Ascii: RIFFWEBPVP8L/$gr^E$E~8AHA8%l#Vrb9PN[nP6\w+XU'#}YAxdB$%wwt Q\|,qD@!HNp5*`ms~l\/[/u=@X4j=}edii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49834	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	512	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:53:17 GMT Expires: Sat, 20 Apr 2024 12:53:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 4379 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c db 00 00 00 2f 13 c0 04 10 ff a0 a0 8d 24 65 fc 1b bc 27 15 cc bf 36 94 46 92 14 75 fe 11 a2 f0 48 d4 0f ab a8 6d 24 27 fc f1 dd ef 50 f4 3e 3b 4c 02 00 4c 33 66 c5 53 0c fa fd 2b 51 85 07 00 a5 59 00 02 08 d0 00 02 08 10 10 c0 82 92 6a 9e 73 2e aa 18 29 fe ff d3 77 bf e2 7f 42 3f 86 56 d2 79 3f f0 bb 9f 8e 39 cd 8f ef dc cb f5 be a8 7e 60 01 12 43 01 8e 31 b3 62 00 86 91 24 29 59 ec f1 c3 e5 8d cd 3f 4f 1c 02 88 e8 ff 04 e0 ed 79 2b d2 e6 67 ca 69 1c 56 92 5c 87 71 2a f7 66 9e 9e f7 a0 35 0e b5 c6 a1 31 c8 8a 20 28 32 18 73 aa a3 52 ec ae 08 e3 98 f2 77 3d 95 62 7f ca 1a 84 29 90 86 30 f6 c8 f9 28 89 95 8a 93 c8 bb a3 65 e3 e1 b6 1c a1 a9 a5 12 a9 a4 6e f0 6e 00 Data Ascii: RIFFWEBPVP8L/$e'6FuHm$'P>;LL3fS+QYjs.)wB?Vy?9~`C1b$)Y?Oy+giV\q*f51 (2sRw=b)0(enn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49835	64.233.177.156	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	1187	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&gjid=232704198&_gid=1292932856.1713535574&_u=YEBAAEAAAAAAACgDI~&z=189821880 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: text/plain sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	593	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 14:06:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49838	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	496	OUT	GET /a-/ALV-UjW0Qn-FchO3L2itsozl-5jlAo-XDHe-3cNzKaFh85vW7zvYkitC=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 622 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:15 GMT Expires: Sat, 20 Apr 2024 13:08:15 GMT Cache-Control: public, max-age=86400, no-transform Age: 3481 ETag: "v116" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	622	IN	Data Raw: 52 49 46 46 66 02 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 1f 00 00 1f 00 00 56 50 38 20 1e 02 00 00 d0 09 00 9d 01 2a 20 00 20 00 3e 6d 2a 90 46 a4 22 a1 a1 37 e8 00 80 0d 89 6c 00 9d 32 84 7e 27 81 a9 44 d2 65 98 26 dc 71 28 c8 32 47 ff 1a f0 16 c7 fa ce 93 d3 3e 8a fd 58 c6 df ed 12 e8 59 fb d1 46 f4 a3 81 58 2f be d9 e7 46 ba ec 19 a9 3a a6 70 e1 40 1e 10 00 fe e9 a7 35 27 db 81 7d 83 b0 d6 39 09 d9 12 01 d7 36 0a e0 11 59 29 f1 0d 86 e5 cd ec 37 9a 74 fb cb 64 fc 57 82 92 5d e3 67 84 5b 37 f6 e6 c4 1a 64 93 e5 a0 f7 84 6c 46 f2 e9 3e c3 30 b1 12 37 50 92 53 68 38 bd d2 a4 e8 6b 3f 58 1e 86 37 04 d2 39 3d e1 1a 9a a5 ff 1c 28 27 35 af 74 51 c8 df 7e fb f8 64 dd 8b 09 e8 08 79 bf 69 a9 23 38 ce 10 42 3f af b0 c0 7e 38 85 2a 67 34 e0 84 f8 Data Ascii: RIFFfWEBPVP8XVP8 * >mF"7l2~'De&q(2G>XYFX/F:p@5'}96Y)7tdW]g[7dlF>07PSh8k?X79=('5tQ~dyi#8B?~8g4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49837	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:15 UTC	505	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2196 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:05:29 GMT Expires: Sat, 20 Apr 2024 11:05:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 10847 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	721	IN	Data Raw: 52 49 46 46 8c 08 00 00 57 45 42 50 56 50 38 4c 7f 08 00 00 2f 3f c0 0f 10 09 86 6d db 46 82 e3 be 27 ef bf 70 ae 3b 44 f4 7f 02 f4 a6 ab 64 e0 aa 84 13 28 b1 4d b3 f5 93 24 ed b9 50 d3 46 92 e3 ea ea 4f 00 96 3f cd 4f 14 d4 b4 6d 04 19 c4 f1 c7 f6 4e 37 1d 04 06 6d 23 39 ce f9 7a bf 7b 00 df ff 09 c0 2b 9d 1f 74 00 cb d7 7c d8 b3 9a 35 7c b9 bc a1 69 c9 22 6c 65 b0 99 0c ff 11 00 06 3e 45 76 dc ff 57 24 db 39 35 73 f9 5e 33 33 b3 33 66 b6 23 8a 5e ea 90 99 22 47 76 c4 b4 03 cb 19 33 33 33 33 33 b3 2f 43 77 95 b9 46 9d d9 d1 2f 7a 1b b0 8e fe 3a 49 ad a0 0d a5 ab 23 95 46 c7 9c 59 7a 30 2a 63 ef e0 f1 7b bf c8 3b f8 eb 6f 2c bd 05 54 76 55 99 77 60 3d c6 1d 98 71 0f 8f 12 c9 b1 6d ab 56 35 d7 3e f7 e2 2e c9 b8 5b 02 24 44 1e 04 40 8f b6 5b 2a b4 e1 bb de Data Ascii: RIFFWEBPVP8L/?mF'p;Dd(M$PFO?OmN7m#9z{+t\|5\|i"le>EvW$95s^333f#^"Gv33333/CwF/z:I#FYz0c{;o,TvUw`=qmV5>.[$D@[
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: dc ad ef 5c f6 7f 65 07 95 11 61 0c 72 d1 ed 36 1b de 65 7a ee 47 58 d9 2a f3 56 aa 2a 53 d8 83 9a 01 85 0a 08 35 4f 4f f3 e5 04 02 03 70 da 89 db 99 3c e8 f2 b1 b5 86 4d 54 72 25 47 c6 84 a5 71 64 e9 3c a9 dc 74 59 1e ff 35 2d a3 36 4f 2d 23 e4 1a a0 da b7 8a 02 78 a8 28 3d cd 73 01 3a 91 4e 8e 31 9b 2b 7c bc 85 cd a6 1f 77 b3 83 52 86 01 d8 7d 6d e4 5a 0b 93 c7 7d c3 ea 3e b4 59 64 27 04 95 9a a7 0a 3d 55 94 de 50 5e 28 c7 10 4c 67 1d ec 25 ff 7e 88 29 25 4d f8 d2 9c 70 26 e4 5c 0b 9d 37 bf db b2 0a 11 70 09 90 5e a1 e6 a9 a2 a0 8a 2e 80 df e3 ff 12 4d ec 61 5f 46 9f 70 d4 31 25 9d 7d 49 11 d9 63 94 70 09 c2 db bf c9 8a 42 a6 64 41 41 c0 1e a4 37 7a 7a 51 a8 41 a1 e5 36 4d 18 21 dd 29 69 64 ba fb d5 59 cb 08 07 75 b3 19 13 9a 08 40 4e 47 ed 83 b3 7f 6c Data Ascii: \ear6ezGXVS5OOp<MTr%Gqd<tY5-6O-#x(=s:N1+\|wR}mZ}>Yd'=UP^(Lg%~)%Mp&\7p^.Ma_Fp1%}IcpBdAA7zzQA6M!)idYu@NGl
2024-04-19 14:06:16 UTC	220	IN	Data Raw: 9f e1 4b c7 0b 76 5d 76 70 31 19 b9 cc d4 90 0a 40 24 a4 8a 8c 04 24 8b 28 00 cc 95 66 1c ac 4e 46 0e fd 86 18 a2 55 40 64 d4 c3 2a 44 02 c8 b0 2e d2 a1 7e 07 db 93 31 72 6a ce 12 62 11 00 88 dc a3 8b 1c 32 41 48 15 19 09 c4 cf 0d 5f 9b 1d 1c 4e c6 16 ba c4 4a 1a 01 91 31 78 7c f9 c8 48 0c 3e 12 23 bb 84 83 8f c9 70 ca 98 49 15 03 e0 ff 41 00 31 fc 84 00 22 23 21 73 a9 60 32 c7 1a 62 90 0c e1 3f 14 91 7b 14 88 1f 10 19 cd 29 83 b4 8c 13 23 55 24 a4 8a 56 01 d1 5a 4a 85 7f 68 24 26 75 a5 73 77 5b eb 5f 89 02 a0 3a cc 57 7b 10 43 e5 34 54 02 a0 92 76 45 66 6f 27 c3 41 d0 41 e1 e7 0e fe b1 c0 7f 76 f0 f8 9d 1f 4f 02 1c 44 1d 44 16 ee 50 07 3f f8 da 25 00 Data Ascii: Kv]vp1@$$(fNFU@d*D.~1rjb2AH_NJ1x\|H>#pIA1"#!s`2b?{)#U$VZJh$&usw[_:W{C4TvEfo'AAvODDP?%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49839	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	504	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 984 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:05:42 GMT Expires: Sat, 20 Apr 2024 12:05:42 GMT Cache-Control: public, max-age=86400, no-transform Age: 7234 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	723	IN	Data Raw: 52 49 46 46 d0 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 88 03 00 00 2f 3f c0 0f 00 e7 04 a1 91 24 47 52 0e 7f c6 67 2a ce ff 43 70 d0 36 92 24 35 7f a6 87 60 ef ab d8 41 db 48 92 d4 fc 99 1e 82 bd af e2 f9 5f 07 0c 21 b8 e3 ce 36 10 00 14 80 e0 4e 70 27 ac 6c b3 12 56 b6 79 1f c0 1d 45 01 05 56 f6 ff 83 15 05 82 3b 8a f2 51 d9 26 28 ee 6c 13 94 fb 46 59 51 00 f6 ff 83 b0 b2 4d 00 d8 66 1b b0 01 77 0e 00 20 04 80 00 0a dc 37 95 00 e1 f6 fb b1 51 14 e5 fe fb a9 ec ff b7 62 73 7d 1e 07 ca ed 79 6c 53 b1 f1 ff ab c0 29 83 df 8f 52 b1 69 73 79 bd 84 10 82 12 de da 54 ce 9d 73 e7 7e c7 9d 7f 70 07 b4 6e 6d 4f db 58 df 30 33 33 33 33 33 33 33 cf 1c 3e c3 3c 6f 99 2b 47 76 ec 58 e6 fe db c8 ca 27 5f ce 55 44 ff 27 00 Data Ascii: RIFFWEBPVP8X??VP8L/?$GRg*Cp6$5`AH_!6Np'lVyEV;Q&(lFYQMfw 7Qbs}ylS)RisyTs~pnmOX03333333><o+GvX'_UD'
2024-04-19 14:06:16 UTC	261	IN	Data Raw: 24 47 77 a3 69 55 04 08 31 8e 67 5a d4 0d 44 ab 9a 1a dd 1c 50 ab 89 e8 81 44 5b b1 80 98 d7 a7 80 7c 40 44 ab 15 58 e5 53 22 4a 3a d0 38 4a ec b7 3d 74 24 44 f4 54 f2 a0 98 41 2b 14 c4 07 e2 1f 25 07 a0 56 d0 8c 02 cc f2 21 ed f7 91 2d b1 40 9b 15 fc fd f4 50 72 21 9f 7f cc ab bd 22 ab 9f 84 77 6c 7e 0e 76 f1 ee a0 a7 56 da d9 11 78 07 df 09 3e 38 9f 45 40 76 27 a6 fd 9f 1d d8 ec 77 fe b2 44 b5 ae 7e d8 15 5f 6c a9 76 d8 0e b7 d9 39 5e 87 fd ec 94 8d 3b 11 aa d8 f8 7f 0e d7 a2 9f 75 54 d3 29 2e 4e e2 98 f5 30 17 a8 6a 9b 97 df 5c d6 ca 9a e7 b9 44 95 db 64 e4 de d8 b5 78 ca 68 a2 b1 d3 96 ef 7d 18 aa 1a 2a df 27 03 95 64 79 96 26 ca 97 5d f8 7d 15 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 Data Ascii: $GwiU1gZDPD[\|@DXS"J:8J=t$DTA+%V!-@Pr!"wl~vVx>8E@v'wD~_lv9^;uT).N0j\Ddxh}'dy&]}EXIF"II1Pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49841	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	505	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2226 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:29:41 GMT Expires: Sat, 20 Apr 2024 12:29:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 5795 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	722	IN	Data Raw: 52 49 46 46 aa 08 00 00 57 45 42 50 56 50 38 4c 9e 08 00 00 2f 3f c0 0f 00 4d 30 68 24 49 51 06 ee ee a1 cf bf e0 07 0d 11 fd 9f 00 fd cc ed 4a f2 ba e1 94 d8 b7 40 ba f1 9a 96 ca 58 3b 7a c2 db 73 c1 b8 6d 23 47 da f8 dc fe cb 4b 97 a3 b1 af c3 15 b0 35 b0 8d 24 c9 49 d7 5b 6f 69 81 0c 00 9b fc 03 c3 a2 d8 46 92 d4 68 d0 2e f9 47 b7 26 f0 5a 4b a3 ff 09 46 0f 0e 3a 00 00 d8 fe 5f f7 91 29 d3 86 cd 0c c0 06 1c 97 7c 28 3f 65 02 00 6c d8 be d4 db c3 4e 4c 02 60 0a 22 2a 71 7d 6c 6a b3 7d 3f 00 80 ee fe 7b 56 b5 59 6d 04 03 0f 25 f8 ff 0c c9 d2 3f ab 7b 7a 3c b3 b6 6d db b6 8d bb 6d 7b 6f b6 6d db b6 bd cf b6 cd 79 af bb 2b 97 33 d5 3d b7 77 fa 45 bc 5b e6 c4 cb e5 43 45 ad b7 df 8b 5e 9c 1e 26 32 76 4f 4f db 7b dc cd c5 89 b5 3c d9 e8 08 49 b7 b6 19 92 f4 Data Ascii: RIFFWEBPVP8L/?M0h$IQJ@X;zsm#GK5$I[oiFh.G&ZKF:_)\|(?elNL`"*q}lj}?{VYm%?{z<mm{omy+3=wE[CE^&2vOO{<I
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: bc 04 20 93 c2 4b 18 01 32 d4 ce b7 c2 66 62 d0 80 b9 0b 93 4c 9d 41 30 c6 f8 69 63 91 06 fa f1 40 12 70 c1 28 c4 fa 1a 09 2e 14 40 20 ce c8 ef aa f6 b5 69 ff 59 e7 6e 55 e4 e9 90 86 74 14 00 d5 2f 4d 92 41 06 5a 73 8e d6 16 94 48 c2 4d c9 04 60 04 60 86 66 e4 d9 fa 5e d5 ad 5f ce dd 65 ba a0 c1 f7 a1 00 10 99 ee 39 c8 b8 1c 19 aa 23 d1 31 12 08 2c c7 60 8c 26 61 84 4f 1c f8 02 44 81 b0 b8 2c cb c8 47 6b bb 8d 63 51 10 55 84 48 2f 01 01 65 e0 33 82 34 44 22 d5 2e 5c f4 76 61 9e bc 8c 17 35 c4 d5 e6 6d 35 5f 5a 79 75 2a 27 83 ee 19 30 c8 fa e8 99 32 c4 4a c0 70 82 be c1 15 cc c2 21 0e 2d 45 99 4a a9 1f 01 65 4c 7a 90 db 21 ac fd 75 f5 4e d4 cd fd 6d de 82 00 b8 b1 ea 35 1e 1c d9 66 67 92 99 62 10 f6 54 9e 2b 24 47 7d 01 01 b2 e1 0a 38 4d 0a 23 41 50 b9 80 Data Ascii: K2fbLA0ic@p(.@ iYnUt/MAZsHM``f^_e9#1,`&aOD,GkcQUH/e34D".\va5m5_Zyu*'02Jp!-EJeLz!uNm5fgbT+$G}8M#AP
2024-04-19 14:06:16 UTC	249	IN	Data Raw: c7 aa 5c 18 a3 f6 e4 2e f9 79 04 ad 07 a3 12 46 69 9d 92 da eb 93 02 00 9b 6c 05 a7 73 6a ef cd cf 13 88 f9 48 a9 ff ac d9 e1 f5 82 92 ba e4 eb e5 8e df ba 0e af fb 26 8f 62 6b 0c 00 f8 04 fb 6a 8f 98 14 34 38 01 85 0e 30 53 b8 6b fe c2 54 e9 f3 88 cf fb 94 b7 82 90 91 71 6c 2e 9b 2d 7f 31 6a 2c 8f 32 b6 29 c3 20 17 26 bd 24 80 ae b0 0d d8 32 bb 9d 37 6f 01 71 3b f8 7a cf 0a 66 c8 d2 92 b1 fc c5 f2 1e e5 bf 01 30 49 e5 bd dd 12 2e 93 c0 fa c5 f3 88 eb 16 da 4b 9d a6 b9 48 48 d7 8b e5 e5 ef f5 48 82 a1 38 89 b2 57 26 20 b6 2d e8 10 f7 55 d1 5e 6c 53 1e 34 da 48 8f f7 00 22 18 2c 82 d8 34 a9 46 8e ef 50 1a 6f e6 f6 6a 7b c8 34 65 19 87 c1 86 61 f2 95 b5 9c 2c 9e da a2 94 76 46 dd 6b aa 02 a8 2b 20 30 01 32 b3 64 d1 a4 42 a9 b6 48 74 eb 0a Data Ascii: \.yFilsjH&bkj480SkTql.-1j,2) &$27oq;zf0I.KHHH8W& -U^lS4H",4FPoj{4ea,vFk+ 02dBHt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49843	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	504	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1832 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:48:51 GMT Expires: Sat, 20 Apr 2024 11:48:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 8245 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	722	IN	Data Raw: 52 49 46 46 20 07 00 00 57 45 42 50 56 50 38 4c 14 07 00 00 2f 3f c0 0f 00 09 45 6d db 40 ca be cd f8 03 be 30 44 f4 7f 02 78 aa 06 92 ab 36 5c d0 66 cc 0b 16 6c 1b 49 52 54 87 0f d6 ea 2d 86 fc f3 bc 1c d8 36 92 a4 a8 74 d6 ea ac 0b 00 f3 8f 0f 1e 0d 45 6d 23 b9 49 3f f7 7a 21 b0 c7 e0 fa 9f ca c3 28 03 d0 33 60 bf 7f 66 e5 05 5c e0 5e 56 66 76 10 02 10 66 d6 64 0b b5 ce f8 01 c2 cf 7f ec 7a a8 01 00 33 49 12 3f 18 45 74 e5 ff 53 64 2b 33 b3 72 0d 77 77 77 77 78 01 22 32 e7 05 34 75 32 77 77 88 c9 c8 29 22 77 77 d7 eb ee b2 bb d3 c8 de 5b 33 37 24 fa bd 03 f5 af 7f 61 1d e1 9c 6c ab ab 70 49 b7 0a 6d f4 bc 01 72 ed ff 04 64 53 93 75 88 67 5b 8b 9e 1c d7 f3 00 b8 47 16 3a d9 4d e4 d8 b6 6d da d6 98 7b 3f eb db b6 ad 1a 30 b3 19 fa 67 ca 6c c4 0a 55 01 db Data Ascii: RIFF WEBPVP8L/?Em@0Dx6\flIRT-6tEm#I?z!(3`f\^Vfvfdz3I?EtSd+3rwwwwx"24u2ww)"ww[37$alpImrdSug[G:Mm{?0glU
2024-04-19 14:06:16 UTC	1110	IN	Data Raw: f0 a9 d1 5c a9 37 b8 fb 2c 60 14 50 d5 0d a3 98 3a 3f c9 ee 43 3c eb 4a 03 cc c4 ac b6 77 66 39 f4 c6 e0 af 3e 05 5f c5 49 f3 7d ee a9 b4 aa c0 d4 6b 14 7e ae 02 9a 58 3a 3e ce da 2d 9f 8d c5 9a 88 2c b5 69 66 0a 3d 68 41 ef f6 c4 75 3b bc 3b ff d6 2c 63 8e e1 44 f6 5e 92 8a 00 00 ab 3f 5a a5 90 08 25 c5 57 b6 47 1d cb 8e ad 6a 1c d6 74 e3 d7 2a 9b 1b b0 fe 63 f7 9c 3d c7 23 3b 76 1a 65 70 9f d1 9a 9d 8f 0c 78 41 d6 be 00 92 20 12 60 20 10 67 bb fb 74 72 61 e5 75 05 00 cb 2e 6c 7d b1 27 9c 7b 63 96 b9 43 03 b0 0c 07 df d1 04 b0 ab 21 de f3 ef 9a 83 09 aa 67 cc 3a 5e a2 75 75 27 ad 93 6f db 3d 98 65 42 34 80 16 e8 fb b4 97 40 1d 1e a9 38 52 b2 98 45 c7 d1 e7 93 6e e2 21 0b 65 27 1a 8c 1b f8 8b 32 8a 34 01 30 80 66 cf 82 49 d7 5d 43 b6 1e 7b 2f dc 9e 71 e9 Data Ascii: \7,`P:?C<Jwf9>_I}k~X:>-,if=hAu;;,cD^?Z%WGjt*c=#;vepxA ` gtrau.l}'{cC!g:^uu'o=eB4@8REn!e'240fI]C{/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49844	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	1326	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&_u=YEBAAEAAAAAAACgDI~&z=1962904036 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:16 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 14:06:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49845	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	504	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1494 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:59:25 GMT Expires: Sat, 20 Apr 2024 12:59:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 4011 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	722	IN	Data Raw: 52 49 46 46 ce 05 00 00 57 45 42 50 56 50 38 4c c1 05 00 00 2f 3f c0 0f 00 09 45 6d db 40 4a f7 cc f8 23 be 28 44 f4 7f 02 38 8a 48 94 1e 2a 0e 49 23 a0 3e e6 05 a3 36 92 1c 59 fb ca f9 00 2c 7f 9a a7 e5 60 b4 6d db a4 f1 d0 e0 d0 14 02 41 88 9e e0 ff 39 13 fa 3f 01 b6 78 cf 05 40 80 cb 3e 73 7c 00 80 78 1d 0e e0 82 78 32 19 00 08 c8 64 e7 07 05 80 86 b7 88 8e fc 7f 8a 6d a5 7b 8e 3e c7 dd 5d 72 52 77 77 77 0b 5f 84 86 ee 64 4e e8 ee 99 43 ea ee ee 0e d7 fd 74 a3 67 e4 e1 d1 2f 62 07 a7 fe e8 95 0c cb 6e 0d 3a 45 4a 7c 6b b2 b3 83 5b 4f 4e d5 7f 01 14 d9 54 67 bd 02 fc 5a ce 0e 6e bd 65 9c 5d 90 91 c8 c1 b6 ed d8 9b eb 79 df d8 b6 6d 8f d9 8d cd 9c 9c d5 a9 ed cd 76 77 b7 a3 dd cd 36 a6 d8 f8 1e d9 b5 b6 1d 7b 74 dd ef ff bf ff 17 db 4e ce ac 43 67 d4 c5 Data Ascii: RIFFWEBPVP8L/?Em@J#(D8H*I#>6Y,`mA9?x@>s\|xx2dm{>]rRwww_dNCtg/bn:EJ\|k[ONTgZne]ymvw6{tNCg
2024-04-19 14:06:16 UTC	772	IN	Data Raw: 3b bd 3e d9 01 17 8c d7 c1 71 d1 ea 7b 52 db 34 1f 71 c2 96 03 c4 66 c0 c0 08 ef ff 59 86 af b8 98 5b 24 3b 1c a3 3c 7d ad f6 d9 6f 01 2b d6 e7 9f e5 3a 92 01 05 6c 8c 44 c1 51 24 ed 48 61 18 50 2e 28 77 7a fb 6a cb ac 8e d4 67 d2 d5 98 27 91 39 c3 3a d4 54 29 45 cc 3c 50 c1 6b c9 0d 79 43 4c 4c 3c 40 f3 32 7e 5c 77 cd 9c 31 00 ab 1e 78 d9 cc db 08 64 92 0a 73 ca 21 ed 90 46 d2 e8 bf b4 6b 94 e0 42 08 19 32 4f ca 42 cc a4 14 82 51 2c 8f 0d 01 c0 2c 61 f9 56 de 80 b9 c2 86 a5 fa 6e 2f dd e3 a5 02 40 ba c6 d6 f7 4f 0a 06 17 33 9f 9e bd 20 c1 0b 32 bf 19 18 8c 3c cd d5 1d b6 9e c1 03 af 02 56 28 d3 bc e5 0d 85 e9 38 50 21 b6 7d 7d 59 55 16 04 fa ba 53 ba 16 e0 52 a2 31 d0 e9 05 2b c7 c6 30 f1 0b 33 27 f6 7a 79 fd 73 bd a6 b5 4a e6 5e fa 2f 4c be 78 e1 01 ee Data Ascii: ;>q{R4qfY[$;<}o+:lDQ$HaP.(wzjg'9:T)E<PkyCLL<@2~\w1xds!FkB2OBQ,,aVn/@O3 2<V(8P!}}YUSR1+03'zysJ^/Lx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49847	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	504	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1670 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:53:00 GMT Expires: Sat, 20 Apr 2024 11:53:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 7996 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	722	IN	Data Raw: 52 49 46 46 7e 06 00 00 57 45 42 50 56 50 38 4c 71 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 31 ea f8 5d 8f 3f e1 45 21 a2 ff 13 80 33 17 18 80 30 76 0d c4 98 7c 80 85 eb 48 b6 95 a8 71 d7 2f 97 fc a3 22 04 8a 18 d8 8d 41 49 23 49 52 c1 cd a2 95 30 fe 15 ee 3d 80 51 24 49 8a 73 a9 60 19 8f ff d7 ff 09 30 1f fe 54 ee f8 c8 c9 d1 c6 0f 40 0a d0 6a 9b 50 02 f5 a3 17 7b 89 d4 1b b9 1c 4a 97 24 0f 0b 78 78 99 f6 02 8f 3c 00 de 7c f8 2d a2 23 ff bf e2 c8 e9 d7 c3 cc 68 76 c4 ec 88 f1 02 be 04 3b f2 0d 7c 03 47 2e c7 8e 1d 31 33 33 33 33 ce 88 07 5a ea d7 55 d6 13 cc 38 c4 9f 49 d1 a6 ff 7a d5 06 45 1b 8e 23 97 aa 5e d0 97 50 29 db 1b 6c 39 fb 1f c0 a9 4a d9 3b c1 46 74 12 33 3b df dc 77 58 07 72 68 db 36 b5 67 9d 87 ff 8f 6d 9b 95 ad ca 36 2b 3b 55 52 da b6 6d db 49 Data Ascii: RIFF~WEBPVP8Lq/?Em1]?E!30v\|Hq/"AI#IR0=Q$Is`0T@jP{J$xx<\|-#hv;\|G.13333ZU8IzE#^P)l9J;Ft3;wXrh6gm6+;URmI
2024-04-19 14:06:16 UTC	948	IN	Data Raw: 08 df a4 b5 05 f2 a2 96 12 12 b7 a1 71 cb 03 d0 05 4e 50 9d 75 cb 74 07 76 6f 9b 7b b5 54 67 1e 95 c7 60 b1 91 99 76 f8 41 db 88 d9 6a 26 45 04 03 81 1a bc a3 96 90 66 89 5e 48 00 52 ec 0b fd 78 52 58 1f 08 6c 42 19 0e e9 91 43 4b c4 11 eb 86 e3 46 69 5b 39 9c 38 77 7c 01 22 1b 45 cd 3a 54 ad 45 0c cd 60 0d 87 f0 18 12 fc f1 c4 c2 62 dc 9f 9c f0 a7 ba 90 84 d0 c0 6a 58 04 46 5e 40 eb 4e 0e d4 be c2 2a 83 9d 07 90 fb ef 7a a0 34 23 1b 15 d7 98 58 1b f6 25 ba 84 21 fa b6 e4 84 4b 04 62 63 b5 01 2c 10 28 b0 32 20 0f 9d 15 29 dd f9 55 92 c5 58 49 00 6f 88 f8 1d 48 3d 69 26 c5 b6 ee 2b 23 16 53 46 83 8a ad c4 0c 0b 46 ae e0 08 16 60 18 90 25 f8 21 fa 5b fb f4 cb 2e c9 8b 78 5d 03 9b 14 7f a3 61 28 84 41 08 53 a9 4e db 75 52 67 3a 09 5f cc 80 40 cb 5a e7 0d 3e Data Ascii: qNPutvo{Tg`vAj&Ef^HRxRXlBCKFi[98w\|"E:TE`bjXF^@N*z4#X%!Kbc,(2 )UXIoH=i&+#SFF`%![.x]a(ASNuRg:_@Z>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49848	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	504	OUT	GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2620 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:08:09 GMT Expires: Sat, 20 Apr 2024 13:08:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 3487 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:16 UTC	722	IN	Data Raw: 52 49 46 46 34 0a 00 00 57 45 42 50 56 50 38 4c 28 0a 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 97 eb fd 2c 7f c4 3f 30 44 f4 7f 02 d8 a7 66 5b 36 68 34 03 e4 c3 1f 5a cb 5a 1a 3b c3 11 1a 1b 5b 68 2c cc b4 6d e3 b3 fc e1 ed 1a 97 90 50 d4 36 92 63 ed d5 e7 42 b9 c6 1f da 49 49 23 49 52 39 58 fe f8 b7 75 23 e1 f0 1d e9 7f 22 09 49 92 4f 00 c0 07 e1 20 42 00 40 14 00 a8 00 41 e0 09 82 0a 50 dd 1b b3 f7 fb d7 98 cb 05 60 d2 01 10 d9 91 b6 4d 91 6c 27 e7 9e cb cc cc cc cc d7 14 33 33 33 4b 2e 33 5b cc cc cc cc cc ac 83 97 99 99 51 d3 1d d1 9d 55 3d 67 56 f0 da 62 ca c8 68 a7 4c 59 ed 4c 4c 94 57 02 4b 1e 75 b4 a7 1d 30 7c 22 53 66 c6 ef 89 ec f6 26 4a b4 87 36 25 2d 62 56 22 47 0e 64 db a6 6d cd b9 0f be 6d db b6 ed 67 db 2f fb d1 8f 6c 1b 91 6d db b6 6d f3 d9 d6 Data Ascii: RIFF4WEBPVP8L(/?m9,?0Df[6h4ZZ;[h,mP6cBII#IR9Xu#"IO B@AP`Ml'333K.3[QU=gVbhLYLLWKu0\|"Sf&J6%-bV"Gdmmg/lmm
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: b0 8d 35 ab b3 58 71 6a 32 f7 fb 04 34 5c 62 4f 19 4f 25 23 63 b3 7a 58 01 af 38 ce b3 4f b0 42 15 16 2b ce cb e5 66 47 00 a3 ea 59 15 15 db 95 2c 33 45 cb 10 e0 39 bb 79 da 09 36 6c c0 62 c5 b1 1f b8 f5 49 80 1e ea 47 df c9 52 e6 7c ab 7b 55 1c 87 23 e8 4d 17 b9 f5 71 76 6b ce ca d5 99 70 9c 9d c1 27 af f1 34 97 cb af 01 08 2d 27 df c2 3c a7 6e 4f f4 13 5e be f1 12 b7 3e c6 ae cd 59 a5 3a 13 8a b3 d2 f9 d4 75 9e 26 5c 61 0d 00 d4 fd 38 18 04 93 25 63 20 68 9b 2a 56 16 23 7e be e9 12 b7 3c ce 6e cd 58 a5 0a 9d f5 c9 eb 3c 03 5c 7e 35 00 10 7b 31 11 a6 d4 76 95 44 db 40 1f 55 e4 e4 9b 2f 73 eb 6d ec 5c 8f cf e6 6b ee 6d fe 73 b9 95 90 cd 96 93 ef ca a6 cc b3 62 3f 8a 61 fe 7d e0 cd f7 b8 ed 36 76 ac c7 67 b3 9a 7f 97 a7 80 cb 2d 03 72 22 10 cc b7 29 24 cf Data Ascii: 5Xqj24\bOO%#czX8OB+fGY,3E9y6lbIGR\|{U#Mqvkp'4-'<nO^>Y:u&\a8%c h*V#~<nX<\~5{1vD@U/sm\kmsb?a}6vg-r")$
2024-04-19 14:06:16 UTC	643	IN	Data Raw: c0 9f c7 80 5d c0 6b ad 90 ae 3f e2 81 0b fd e8 12 bf 68 5c f1 06 c9 7a 2f e4 c6 1f 72 78 74 86 56 74 c7 3e f5 7e 23 6e dd 6c b0 af 15 d1 e2 34 8d 6b c0 a8 35 df 6a 08 98 67 c9 66 b4 63 65 5f 7f 53 66 f9 4a da a3 5b d6 35 86 9e bf fa f0 d3 d2 8b f5 fa 91 64 9c d0 85 25 c8 68 8e 88 37 bb b1 50 a1 13 dd b8 f3 c0 db c7 39 a1 05 f4 d3 ac 0e e9 51 4a 2f d0 42 da 7d f8 e1 67 3f 4d cd 83 13 9f 75 b4 be d8 4e e0 24 75 7d 43 f0 5c 32 63 36 46 bb 5a fe f0 db 02 a7 a8 f8 af f3 da 79 04 90 24 96 04 73 00 73 20 96 50 f0 3e 89 4b 0d 79 22 49 ba 56 bf 87 6e c0 8d d3 20 49 7a 9a d2 63 dd 8a 9b 39 2d 1f 39 5c 2e 2c 4b 63 c4 d1 65 6c 95 68 37 44 49 20 25 6d 56 dd f7 3e 6c 78 86 64 97 38 6d 6b 8f 1d 6e d2 fe 97 d2 0b 54 79 97 f0 08 ad ec eb 94 8f 32 af a6 f8 10 58 a4 25 d7 Data Ascii: ]k?h\z/rxtVt>~#nl4k5jgfce_SfJ[5d%h7P9QJ/B}g?MuN$u}C\2c6FZy$ss P>Ky"IVn Izc9-9\.,Kcelh7DI %mV>lxd8mknTy2X%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49849	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:16 UTC	1475	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjiss HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:16 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:16 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-eb-dmwtcQnF-ADLZApMN5w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:16 UTC	364	IN	Data Raw: 32 62 30 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b0b<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 65 62 2d 64 6d 77 74 63 51 6e 46 2d 41 44 4c 5a 41 70 4d 4e 35 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="eb-dmwtcQnF-ADLZApMN5w" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 4e 6f 44 56 73 76 67 59 42 78 56 52 43 57 47 47 39 35 71 59 71 45 46 47 49 35 4d 4c 79 52 37 53 76 36 7a 75 56 48 50 45 72 4b 4d 4d 4e 72 56 55 7a 5f 41 58 44 65 6c 5a 5a 39 4e 6c 62 46 4d 36 50 68 54 6f 5a 6e 63 53 51 45 45 63 55 6f 46 74 31 79 5f 56 68 6f 62 41 48 30 62 4e 32 55 37 6f 37 6e 68 34 34 4c 47 69 61 58 45 79 55 72 5f 72 39 5a 7a 5f 52 42 52 79 32 63 49 70 4d 43 2d 4f 79 32 68 4c 32 78 63 57 55 56 63 6d 53 75 32 63 48 55 6a 42 39 39 37 49 79 77 42 70 4f 6f 79 52 4c 55 72 44 35 4c 5f 64 64 37 55 59 4e 45 30 65 39 74 53 76 2d 37 57 50 57 68 45 55 57 6e 38 58 5f 54 53 79 63 61 7a 69 6b 50 56 49 6f 51 4f 37 75 6a 77 54 48 57 41 4f 36 77 54 68 76 69 42 47 55 44 64 41 74 51 61 39 6c 36 78 2d 32 41 69 4b 6a 69 76 62 77 67 71 39 2d 4b 64 54 30 6e 46 Data Ascii: NoDVsvgYBxVRCWGG95qYqEFGI5MLyR7Sv6zuVHPErKMMNrVUz_AXDelZZ9NlbFM6PhToZncSQEEcUoFt1y_VhobAH0bN2U7o7nh44LGiaXEyUr_r9Zz_RBRy2cIpMC-Oy2hL2xcWUVcmSu2cHUjB997IywBpOoyRLUrD5L_dd7UYNE0e9tSv-7WPWhEUWn8X_TSycazikPVIoQO7ujwTHWAO6wThviBGUDdAtQa9l6x-2AiKjivbwgq9-KdT0nF
2024-04-19 14:06:16 UTC	1255	IN	Data Raw: 46 47 58 70 34 77 4a 32 45 39 52 4e 42 53 44 46 6d 36 75 69 2d 65 77 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 65 62 2d 64 6d 77 74 63 51 6e 46 2d 41 44 4c 5a 41 70 4d 4e 35 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: FGXp4wJ2E9RNBSDFm6ui-ew"><script type="text/javascript" nonce="eb-dmwtcQnF-ADLZApMN5w"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:06:16 UTC	623	IN	Data Raw: 52 75 61 47 35 75 61 55 52 35 52 47 74 61 59 55 4a 75 55 54 4a 75 52 58 46 76 53 32 77 72 65 45 5a 59 55 55 4e 58 64 47 31 46 4d 6a 4a 4e 64 6d 46 72 62 45 68 54 65 47 52 4f 54 6b 55 33 52 6c 4a 30 61 55 70 31 55 45 46 53 54 30 70 4c 63 6c 42 7a 4e 58 4e 46 52 6d 52 34 59 6d 70 72 54 47 4a 78 51 6a 42 78 4e 6e 4a 57 63 47 56 59 4e 58 68 31 4e 54 52 33 61 55 64 43 62 55 59 79 62 57 46 42 64 32 5a 57 63 32 78 54 55 6d 64 34 4b 30 39 51 62 30 4e 59 4f 57 64 46 64 47 4d 35 64 6b 45 7a 4d 58 55 32 4e 30 39 45 64 44 56 56 4e 57 73 72 64 6b 64 34 55 6b 6c 6f 63 6e 4e 30 53 6e 52 6f 51 6d 6c 57 4f 45 77 7a 61 47 4e 71 4d 44 5a 4d 4e 30 52 56 4f 48 52 34 62 31 5a 70 4d 6e 45 35 62 55 30 72 5a 57 30 78 63 47 56 69 59 54 5a 4c 61 58 52 58 4d 33 46 4a 61 58 6c 71 61 Data Ascii: RuaG5uaUR5RGtaYUJuUTJuRXFvS2wreEZYUUNXdG1FMjJNdmFrbEhTeGROTkU3RlJ0aUp1UEFST0pLclBzNXNFRmR4YmprTGJxQjBxNnJWcGVYNXh1NTR3aUdCbUYybWFBd2ZWc2xTUmd4K09Qb0NYOWdFdGM5dkEzMXU2N09EdDVVNWsrdkd4UklocnN0SnRoQmlWOEwzaGNqMDZMN0RVOHR4b1ZpMnE5bU0rZW0xcGViYTZLaXRXM3FJaXlqa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49855	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:17 UTC	751	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&_u=YEBAAEAAAAAAACgDI~&z=1962904036 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:17 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Fri, 19 Apr 2024 14:06:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:17 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49854	74.125.136.156	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:17 UTC	596	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1762860312.1713535574&jid=1521256512&gjid=232704198&_gid=1292932856.1713535574&_u=YEBAAEAAAAAAACgDI~&z=189821880 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:17 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Fri, 19 Apr 2024 14:06:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:17 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49858	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:18 UTC	1345	OUT	GET /js/bg/rIjZlM8ZNfOeVQTojtt5OPuY9YnE0CAT82tG0V-YUX0.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjiss Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:18 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18291 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 17 Apr 2024 11:53:37 GMT Expires: Thu, 17 Apr 2025 11:53:37 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 04 Apr 2024 18:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 180761 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:18 UTC	443	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 21 28 77 3d 28 7a 3d 6e 75 6c 6c 2c 61 2e 74 72 75 73 74 65 64 54 79 70 65 73 29 2c 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var a=this\|\|self,K=function(z,w){if(!(w=(z=null,a.trustedTypes),w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:m,createScript:m,creat
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 72 65 61 74 65 53 63 72 69 70 74 28 46 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 46 29 7b 72 65 74 75 72 6e 22 22 2b 46 7d 7d 28 61 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 69 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 28 28 77 2e 70 75 73 68 28 7a 5b 30 5d 3c 3c 32 34 7c 7a 5b 31 5d 3c 3c 31 36 7c 7a 5b 32 5d 3c 3c 38 7c 7a 5b 33 5d 29 2c 77 29 2e 70 75 73 68 28 7a 5b 34 5d 3c 3c 32 34 7c 7a 5b 35 5d 3c 3c 31 36 7c 7a 5b 36 5d 3c 3c 38 7c 7a 5b 37 5d 29 2c Data Ascii: reateScript(F)}:function(F){return""+F}}(a)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var is=function(z,w){((w.push(z[0]<<24\|z[1]<<16\|z[2]<<8\|z[3]),w).push(z[4]<<24\|z[5]<<16\|z[6]<<8\|z[7]),
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 35 35 2c 61 3e 3e 3e 32 34 26 32 35 35 2c 61 3e 3e 3e 31 36 26 32 35 35 2c 61 3e 3e 3e 38 26 32 35 35 2c 61 3e 3e 3e 30 26 32 35 35 5d 7d 2c 73 36 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 74 68 69 73 2e 43 3d 74 68 69 73 2e 50 3d 74 68 69 73 2e 6e 3d 30 7d 72 65 74 75 72 6e 20 77 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 68 3d 28 61 2e 70 72 6f 74 6f 74 79 70 65 2e 62 50 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 74 68 69 73 2e 6e 3f 30 3a 4d 61 74 68 2e 73 71 72 74 28 74 68 69 73 2e 43 2f 74 68 69 73 2e 6e 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 6d 2c 71 29 7b 28 74 68 69 73 2e 50 2b 3d 28 71 3d 6d 2d 74 68 69 73 2e 50 2c 74 68 69 73 2e 6e 2b 2b 2c 71 29 2f 74 68 69 73 2e 6e 2c 74 68 69 Data Ascii: 55,a>>>24&255,a>>>16&255,a>>>8&255,a>>>0&255]},s6=function(z,w){function a(){this.C=this.P=this.n=0}return w=(a.prototype.Nh=(a.prototype.bP=function(){return 0===this.n?0:Math.sqrt(this.C/this.n)},function(m,q){(this.P+=(q=m-this.P,this.n++,q)/this.n,thi
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 7a 29 2c 4d 29 2e 52 3d 5b 5d 2c 7a 2e 5a 3d 3d 7a 3f 28 76 28 7a 29 7c 30 29 2d 31 3a 31 29 2c 42 28 7a 29 29 2c 30 29 3b 71 3c 77 3b 71 2b 2b 29 4d 2e 52 2e 70 75 73 68 28 42 28 7a 29 29 3b 66 6f 72 28 3b 77 2d 2d 3b 29 4d 2e 52 5b 77 5d 3d 47 28 7a 2c 4d 2e 52 5b 77 5d 29 3b 72 65 74 75 72 6e 28 4d 2e 6b 74 3d 47 28 7a 2c 61 29 2c 4d 29 2e 4f 4f 3d 47 28 7a 2c 6d 29 2c 4d 7d 2c 47 63 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 29 7b 69 66 28 21 77 2e 44 29 7b 77 2e 4b 2b 2b 3b 74 72 79 7b 66 6f 72 28 71 3d 28 61 3d 28 4d 3d 76 6f 69 64 20 30 2c 77 2e 57 29 2c 30 29 3b 2d 2d 7a 3b 29 74 72 79 7b 69 66 28 6d 3d 76 6f 69 64 20 30 2c 77 2e 47 29 4d 3d 4b 49 28 77 2c 77 2e 47 29 3b 65 6c 73 65 7b 69 66 28 71 3d 47 28 77 2c 36 34 29 2c 71 Data Ascii: z),M).R=[],z.Z==z?(v(z)\|0)-1:1),B(z)),0);q<w;q++)M.R.push(B(z));for(;w--;)M.R[w]=G(z,M.R[w]);return(M.kt=G(z,a),M).OO=G(z,m),M},Gc=function(z,w,a,m,q,M){if(!w.D){w.K++;try{for(q=(a=(M=void 0,w.W),0);--z;)try{if(m=void 0,w.G)M=KI(w,w.G);else{if(q=G(w,64),q
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 7d 2c 66 61 6c 73 65 2c 7a 29 2c 61 7d 2c 50 3d 7b 70 61 73 73 69 76 65 3a 74 72 75 65 2c 63 61 70 74 75 72 65 3a 74 72 75 65 7d 2c 79 4d 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 29 7b 66 6f 72 28 3b 7a 2e 6c 2e 6c 65 6e 67 74 68 3b 29 7b 6d 3d 28 7a 2e 67 3d 6e 75 6c 6c 2c 7a 2e 6c 29 2e 70 6f 70 28 29 3b 74 72 79 7b 61 3d 62 73 28 7a 2c 6d 29 7d 63 61 74 63 68 28 71 29 7b 6e 28 7a 2c 71 29 7d 69 66 28 77 26 26 7a 2e 67 29 7b 77 3d 7a 2e 67 2c 77 28 66 75 6e 63 74 69 6f 6e 28 29 7b 4f 28 7a 2c 74 72 75 65 2c 74 72 75 65 29 7d 29 3b 62 72 65 61 6b 7d 7d 72 65 74 75 72 6e 20 61 7d 2c 78 34 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 29 7b 66 6f 72 28 4d 3d 28 7a 2e 64 31 3d 28 7a 2e 67 31 3d 61 57 28 7b 67 65 74 3a 66 75 Data Ascii: },false,z),a},P={passive:true,capture:true},yM=function(z,w,a,m){for(;z.l.length;){m=(z.g=null,z.l).pop();try{a=bs(z,m)}catch(q){n(z,q)}if(w&&z.g){w=z.g,w(function(){O(z,true,true)});break}}return a},x4=function(z,w,a,m,q,M,t){for(M=(z.d1=(z.g1=aW({get:fu
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 7d 29 29 2c 7a 29 2c 7a 29 2c 30 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 29 7b 28 4b 3d 47 28 28 79 3d 30 21 3d 47 28 46 2c 28 79 3d 42 28 46 29 2c 4b 3d 42 28 46 29 2c 79 29 29 2c 46 29 2c 4b 29 2c 79 29 26 26 41 28 36 34 2c 46 2c 4b 29 7d 29 29 2c 30 29 2c 30 5d 29 2c 67 29 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 21 44 28 74 72 75 65 2c 66 61 6c 73 65 2c 4b 2c 46 29 26 26 28 4b 3d 57 74 28 46 29 2c 79 3d 4b 2e 4f 4f 2c 62 3d 4b 2e 6b 74 2c 46 2e 5a 3d 3d 46 7c 7c 79 3d 3d 46 2e 48 5a 26 26 62 3d 3d 46 29 26 26 28 41 28 4b 2e 56 6f 2c 46 2c 79 2e 61 70 70 6c 79 28 62 2c 4b 2e 52 29 29 2c 46 2e 41 3d 46 2e 59 28 29 29 7d 29 2c 7a 29 2c 5b 5d 29 2c 66 75 6e 63 74 69 6f Data Ascii: })),z),z),0),z),function(){}),function(F,K,y){(K=G((y=0!=G(F,(y=B(F),K=B(F),y)),F),K),y)&&A(64,F,K)})),0),0]),g)),z),function(F,K,y,b){!D(true,false,K,F)&&(K=Wt(F),y=K.OO,b=K.kt,F.Z==F\|\|y==F.HZ&&b==F)&&(A(K.Vo,F,y.apply(b,K.R)),F.A=F.Y())}),z),[]),functio
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 47 28 46 2c 42 28 46 29 29 29 3b 49 28 62 2c 46 2c 66 75 6e 63 74 69 6f 6e 28 59 2c 5a 2c 78 2c 66 2c 72 29 7b 66 6f 72 28 72 3d 28 5a 3d 28 66 3d 5b 5d 2c 30 29 2c 5b 5d 29 3b 5a 3c 53 3b 5a 2b 2b 29 7b 69 66 28 21 28 78 3d 6c 5b 5a 5d 2c 57 5b 5a 5d 29 29 7b 66 6f 72 28 3b 78 3e 3d 66 2e 6c 65 6e 67 74 68 3b 29 66 2e 70 75 73 68 28 42 28 59 29 29 3b 78 3d 66 5b 78 5d 7d 72 2e 70 75 73 68 28 78 29 7d 59 2e 48 3d 55 36 28 28 59 2e 47 3d 55 36 28 64 2e 73 6c 69 63 65 28 29 2c 59 29 2c 72 29 2c 59 29 7d 29 7d 29 29 2c 7a 29 2e 50 5a 3d 30 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 29 7b 41 28 28 4b 3d 42 28 28 79 3d 28 62 3d 42 28 46 29 2c 42 29 28 46 29 2c 46 29 29 2c 4b 29 2c 46 2c 47 28 46 2c 62 29 7c 7c 47 28 46 2c 79 29 29 7d 29 29 2c 37 34 29 Data Ascii: G(F,B(F)));I(b,F,function(Y,Z,x,f,r){for(r=(Z=(f=[],0),[]);Z<S;Z++){if(!(x=l[Z],W[Z])){for(;x>=f.length;)f.push(B(Y));x=f[x]}r.push(x)}Y.H=U6((Y.G=U6(d.slice(),Y),r),Y)})})),z).PZ=0,function(F,K,y,b){A((K=B((y=(b=B(F),B)(F),F)),K),F,G(F,b)\|\|G(F,y))})),74)
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 6c 73 65 20 41 28 36 34 2c 46 2c 46 2e 57 29 7d 29 2c 7a 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 2c 79 2c 62 2c 57 2c 64 2c 6c 29 7b 66 6f 72 28 62 3d 28 6c 3d 28 57 3d 28 4b 3d 28 64 3d 42 28 46 29 2c 4d 78 28 46 29 29 2c 22 22 29 2c 47 28 46 2c 31 33 35 29 29 2c 6c 2e 6c 65 6e 67 74 68 29 2c 79 3d 30 3b 4b 2d 2d 3b 29 79 3d 28 28 79 7c 30 29 2b 28 4d 78 28 46 29 7c 30 29 29 25 62 2c 57 2b 3d 74 5b 6c 5b 79 5d 5d 3b 41 28 64 2c 46 2c 57 29 7d 29 2c 41 29 28 33 30 32 2c 7a 2c 30 29 2c 66 75 6e 63 74 69 6f 6e 28 46 29 7b 74 73 28 46 2c 31 29 7d 29 29 2c 7a 29 2c 7b 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 4b 29 7b 28 46 3d 28 4b 3d 42 28 46 29 2c 47 28 46 2e 5a 2c 4b 29 29 2c 46 29 5b 30 5d 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 Data Ascii: lse A(64,F,F.W)}),z),function(F,K,y,b,W,d,l){for(b=(l=(W=(K=(d=B(F),Mx(F)),""),G(F,135)),l.length),y=0;K--;)y=((y\|0)+(Mx(F)\|0))%b,W+=t[l[y]];A(d,F,W)}),A)(302,z,0),function(F){ts(F,1)})),z),{}),function(F,K){(F=(K=B(F),G(F.Z,K)),F)[0].removeEventListener(
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 28 7a 2e 42 3d 74 72 75 65 29 2c 77 5b 34 5d 26 26 28 7a 2e 69 3d 74 72 75 65 29 2c 77 5b 35 5d 26 26 28 7a 2e 49 3d 74 72 75 65 29 2c 77 5b 36 5d 26 26 28 7a 2e 54 3d 74 72 75 65 29 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 6b 34 29 7a 2e 42 3d 74 72 75 65 2c 7a 2e 6a 28 77 29 3b 65 6c 73 65 20 69 66 28 71 3d 3d 63 74 29 7b 7a 2e 49 3d 74 72 75 65 3b 74 72 79 7b 66 6f 72 28 6d 3d 30 3b 6d 3c 7a 2e 46 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 74 72 79 7b 61 3d 7a 2e 46 5b 6d 5d 2c 61 5b 30 5d 5b 61 5b 31 5d 5d 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 4d 29 7b 7d 7d 63 61 74 63 68 28 4d 29 7b 7d 28 30 2c 77 5b 31 5d 29 28 66 75 6e 63 74 69 6f 6e 28 4d 2c 74 29 7b 7a 2e 6f 73 28 4d 2c 74 72 75 65 2c 74 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 4d 29 7b 28 Data Ascii: (z.B=true),w[4]&&(z.i=true),w[5]&&(z.I=true),w[6]&&(z.T=true),z.j(w);else if(q==k4)z.B=true,z.j(w);else if(q==ct){z.I=true;try{for(m=0;m<z.F.length;m++)try{a=z.F[m],a[0][a[1]](a[2])}catch(M){}}catch(M){}(0,w[1])(function(M,t){z.os(M,true,t)},function(M){(
2024-04-19 14:06:18 UTC	1255	IN	Data Raw: 77 5b 6d 5d 29 7d 2c 41 73 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 29 7b 69 66 28 28 77 3d 67 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 7a 3d 6e 75 6c 6c 2c 21 77 29 7c 7c 21 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 7a 3b 74 72 79 7b 7a 3d 77 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 53 45 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 53 45 7d 29 7d 63 61 74 63 68 28 61 29 7b 67 2e 63 6f 6e 73 6f 6c 65 26 26 67 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 61 2e 6d 65 73 73 61 67 65 29 7d 72 65 74 75 72 6e 20 7a 7d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 7a 2c 77 2c 61 2c 6d 2c 71 2c 4d 2c 74 2c 46 2c 4b 29 7b 69 66 28 28 28 28 74 3d Data Ascii: w[m])},As=function(z,w){if((w=g.trustedTypes,z=null,!w)\|\|!w.createPolicy)return z;try{z=w.createPolicy("bg",{createHTML:SE,createScript:SE,createScriptURL:SE})}catch(a){g.console&&g.console.error(a.message)}return z},D=function(z,w,a,m,q,M,t,F,K){if((((t=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49859	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:18 UTC	1357	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=rz4DvU-cY2JYCwHSTck0_qm- HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjiss Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:18 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Fri, 19 Apr 2024 14:06:18 GMT Date: Fri, 19 Apr 2024 14:06:18 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:18 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/recaptcha__en.js');
2024-04-19 14:06:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49860	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:18 UTC	943	OUT	GET /_/PlayStoreUi/browserinfo?f.sid=-6586912540577714630&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=57977&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8; _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; _ga_6VGGZHMLM2=GS1.1.1713535576.1.0.1713535576.0.0.0; _ga=GA1.1.1762860312.1713535574
2024-04-19 14:06:18 UTC	1139	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:18 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:18 UTC	116	IN	Data Raw: 38 32 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 39 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 38 2c 22 31 36 37 39 32 34 31 36 38 39 39 32 37 38 33 38 35 33 36 22 2c 31 30 37 5d 2c 5b 22 65 22 2c Data Ascii: 82)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",9],["af.httprm",8,"1679241689927838536",107],["e",
2024-04-19 14:06:18 UTC	20	IN	Data Raw: 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 30 5d 5d 5d 0d 0a Data Ascii: 4,null,null,130]]]
2024-04-19 14:06:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49863	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:19 UTC	1449	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7814 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=mnlho6vmjiss Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:19 UTC	7814	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 37 79 4a 66 59 73 65 4e 4c 51 48 6e 35 39 73 6a 53 67 75 57 64 6e 56 70 49 6b 35 6b 77 4b 66 33 37 65 4c 50 4f 79 34 76 6d 43 70 4b 7a 32 42 38 6d 4e 58 78 39 43 56 33 4a 2d 55 45 47 57 68 37 32 4b 5f 53 57 4d 6b 7a 43 4c 76 48 47 73 51 45 42 5a 74 6d 44 30 73 35 35 45 36 70 50 4a 45 6d 66 4b 64 68 44 52 66 58 69 36 58 6e 4e 4c 58 47 72 75 52 4e 6f 57 6a 37 74 41 62 4d 78 74 44 75 76 38 74 59 50 41 47 59 38 66 5f 65 46 66 46 47 74 72 48 62 54 57 71 44 65 61 34 31 4e 73 52 57 62 56 64 42 49 35 4f 47 48 53 35 64 30 38 4d 4f 65 41 57 77 64 38 67 70 78 4a 6d 4a 70 63 34 51 64 42 50 66 56 36 38 6e 61 68 62 65 31 47 61 43 49 32 4a 45 38 73 64 68 76 33 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA7yJfYseNLQHn59sjSguWdnVpIk5kwKf37eLPOy4vmCpKz2B8mNXx9CV3J-UEGWh72K_SWMkzCLvHGsQEBZtmD0s55E6pPJEmfKdhDRfXi6XnNLXGruRNoWj7tAbMxtDuv8tYPAGY8f_eFfFGtrHbTWqDea41NsRWbVdBI5OGHS5d08MOeAWwd8gpxJmJpc4QdBPfV68nahbe1GaCI2JE8sdhv3
2024-04-19 14:06:19 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:06:19 GMT Expires: Fri, 19 Apr 2024 14:06:19 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOag9GFO29r7AyeurnkOhdxdHVeu20oxB3RJ5ERJ4QhZfuDpQadxPGWHpH3irRA4s-isqRliDi4zqx83B718;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:06:19 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:19 UTC	559	IN	Data Raw: 61 36 64 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 51 36 68 66 47 6b 69 38 6e 78 4d 6e 4b 7a 31 54 47 62 68 4d 55 68 59 73 2d 56 32 5a 79 56 6f 38 54 49 6a 44 5f 4e 77 62 30 4c 77 78 2d 30 75 58 68 64 63 52 65 59 53 41 41 71 43 66 48 48 59 38 5f 51 64 37 36 2d 33 4b 6f 71 4c 65 43 6a 57 79 34 37 78 52 37 48 35 48 52 6c 4c 59 47 65 59 46 34 7a 37 59 39 32 79 6c 34 6d 32 4b 47 69 6d 64 42 73 52 78 38 61 74 4f 43 49 34 68 78 66 39 50 49 75 49 58 6b 7a 52 4f 63 61 46 4a 42 57 36 38 4e 39 56 67 74 68 67 42 31 48 31 42 39 65 6e 31 67 71 6e 76 73 74 50 4f 67 68 52 42 72 7a 5a 4c 78 58 42 37 4e 4c 39 56 71 49 58 4e 56 54 45 71 61 56 53 5a 49 50 74 43 6c 70 78 48 38 46 67 47 45 54 2d 4f 77 58 6d 35 57 7a 61 5f 39 58 32 41 76 65 Data Ascii: a6d)]}'["rresp","03AFcWeA5Q6hfGki8nxMnKz1TGbhMUhYs-V2ZyVo8TIjD_Nwb0Lwx-0uXhdcReYSAAqCfHHY8_Qd76-3KoqLeCjWy47xR7H5HRlLYGeYF4z7Y92yl4m2KGimdBsRx8atOCI4hxf9PIuIXkzROcaFJBW68N9VgthgB1H1B9en1gqnvstPOghRBrzZLxXB7NL9VqIXNVTEqaVSZIPtClpxH8FgGET-OwXm5Wza_9X2Ave
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 4d 31 6b 78 72 43 44 37 58 47 72 2d 4a 2d 75 33 50 66 5f 5a 36 68 71 2d 39 55 69 6b 55 62 6a 57 77 37 5a 48 5f 54 57 4e 5f 39 4f 4e 6e 32 43 56 72 52 74 4b 79 37 49 45 4b 34 30 44 43 44 48 70 76 6e 69 66 74 66 55 47 41 6e 46 6f 6b 4d 44 4a 37 37 4c 46 55 62 58 4f 6f 39 57 62 34 35 72 4a 74 5f 6a 68 76 53 33 6f 52 73 63 72 62 62 69 64 54 7a 7a 48 4a 6c 7a 61 43 62 68 37 35 49 45 38 74 6f 75 38 71 4b 41 33 70 6e 4b 32 71 5a 44 37 6c 6d 54 51 61 55 7a 34 44 64 38 66 73 64 44 78 77 42 6e 7a 74 36 48 66 4f 73 34 37 30 42 57 36 4c 30 57 58 4f 38 33 5f 6e 56 72 6c 7a 58 69 35 67 41 54 79 58 51 53 4f 67 38 38 6f 36 6b 6f 4d 70 59 48 68 71 7a 6d 43 76 4d 50 78 63 67 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: M1kxrCD7XGr-J-u3Pf_Z6hq-9UikUbjWw7ZH_TWN_9ONn2CVrRtKy7IEK40DCDHpvniftfUGAnFokMDJ77LFUbXOo9Wb45rJt_jhvS3oRscrbbidTzzHJlzaCbh75IE8tou8qKA3pnK2qZD7lmTQaUz4Dd8fsdDxwBnzt6HfOs470BW6L0WXO83_nVrlzXi5gATyXQSOg88o6koMpYHhqzmCvMPxcg",null,120,null,null,null,["bgdat
2024-04-19 14:06:19 UTC	862	IN	Data Raw: 4e 4a 64 55 52 4b 56 33 64 77 56 56 67 31 52 33 4e 7a 63 6d 52 53 4f 47 31 69 56 58 51 79 55 6d 35 76 4d 47 74 6f 55 6a 68 4a 4d 79 74 76 52 6c 63 30 64 32 46 4d 54 46 67 35 59 6a 68 30 5a 6e 46 61 56 47 49 7a 63 6d 56 74 4d 54 5a 69 61 56 70 54 4e 54 4e 30 56 53 39 47 63 6c 4e 77 5a 32 4e 34 53 45 70 6c 4d 33 64 78 63 31 70 71 65 6e 63 34 51 58 4a 6a 55 31 70 6a 62 46 70 69 61 54 4e 47 57 6d 70 42 63 56 46 53 57 48 4a 30 4d 7a 6c 33 56 58 42 5a 52 30 78 79 4d 6a 51 34 63 57 31 53 4f 57 6c 4c 54 6e 55 76 4d 44 64 57 4d 6e 68 4a 64 30 5a 55 54 47 74 79 62 48 46 73 62 31 64 72 51 6b 64 75 65 47 68 35 51 55 64 6f 5a 57 70 52 4e 6d 31 56 52 54 4e 7a 61 6d 31 44 4d 58 5a 32 53 46 52 31 4d 32 38 35 5a 6b 68 35 51 54 4e 76 62 54 42 6e 54 56 4e 52 62 48 6c 68 53 Data Ascii: NJdURKV3dwVVg1R3NzcmRSOG1iVXQyUm5vMGtoUjhJMytvRlc0d2FMTFg5Yjh0ZnFaVGIzcmVtMTZiaVpTNTN0VS9GclNwZ2N4SEplM3dxc1pqenc4QXJjU1pjbFpiaTNGWmpBcVFSWHJ0Mzl3VXBZR0xyMjQ4cW1SOWlLTnUvMDdWMnhJd0ZUTGtybHFsb1drQkdueGh5QUdoZWpRNm1VRTNzam1DMXZ2SFR1M285Zkh5QTNvbTBnTVNRbHlhS
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 32 34 37 61 0d 0a 4a 77 51 58 6c 46 4d 54 63 35 5a 58 4d 32 54 7a 68 55 62 79 38 78 62 46 56 79 4b 31 52 54 56 57 74 6c 64 6b 39 52 61 47 74 68 64 55 46 6f 55 6c 46 51 65 54 6c 72 52 30 35 50 63 6d 78 53 5a 46 42 54 62 31 56 33 5a 54 4d 78 59 32 34 31 65 45 6c 73 63 48 46 55 4f 46 4a 68 54 48 42 70 51 69 38 32 4e 55 4e 68 61 79 39 5a 61 55 39 4c 57 6b 70 49 55 31 56 30 59 31 4e 33 4f 58 56 6e 4d 54 52 73 61 32 56 6a 56 33 4a 43 4d 44 59 72 4e 43 73 72 62 6b 78 34 61 46 56 5a 56 6c 4a 73 65 46 4e 75 56 6b 78 69 65 46 5a 31 53 46 41 35 57 44 42 4e 5a 7a 56 68 4e 6c 64 36 61 6b 56 34 65 47 6c 46 4d 46 56 6b 63 32 5a 45 61 56 68 72 52 31 67 76 54 33 68 43 53 6d 78 6a 64 54 5a 32 59 53 74 52 63 33 42 72 55 31 63 79 52 79 38 7a 62 7a 56 43 64 55 49 35 56 54 41 Data Ascii: 247aJwQXlFMTc5ZXM2TzhUby8xbFVyK1RTVWtldk9RaGthdUFoUlFQeTlrR05PcmxSZFBTb1V3ZTMxY241eElscHFUOFJhTHBpQi82NUNhay9ZaU9LWkpIU1V0Y1N3OXVnMTRsa2VjV3JCMDYrNCsrbkx4aFVZVlJseFNuVkxieFZ1SFA5WDBNZzVhNld6akV4eGlFMFVkc2ZEaVhrR1gvT3hCSmxjdTZ2YStRc3BrU1cyRy8zbzVCdUI5VTA
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 33 57 6d 52 54 62 32 6c 54 4d 69 74 50 4c 33 42 42 4d 44 4a 72 64 31 67 76 53 54 4a 43 55 56 45 77 51 6b 70 51 61 44 5a 6a 61 57 5a 6d 53 32 64 50 55 7a 42 7a 61 79 74 46 57 44 56 4c 53 6b 67 31 61 57 78 6b 63 45 56 36 63 6b 5a 76 4f 45 5a 35 64 7a 4e 56 57 48 55 35 56 32 52 4a 57 44 46 6b 4d 6b 46 78 54 32 45 77 52 30 74 49 59 55 5a 6a 61 30 70 54 56 45 73 33 62 46 4e 73 54 56 52 35 64 30 51 76 4e 6c 64 45 4f 44 4a 51 54 6c 5a 68 52 47 6c 6d 56 6c 4a 6d 55 45 38 32 52 44 67 35 52 7a 55 7a 55 6a 64 57 59 6b 52 7a 52 6d 74 45 5a 6a 4a 46 59 30 68 77 65 6e 5a 43 4f 47 5a 4d 4e 57 70 79 54 31 41 32 55 56 5a 30 63 6b 4a 34 65 46 46 4e 5a 47 46 42 56 45 70 6f 54 45 52 75 61 7a 6b 35 65 58 6c 59 59 6d 68 6f 53 56 4a 61 53 6b 74 44 64 31 64 4e 5a 7a 52 45 64 7a Data Ascii: 3WmRTb2lTMitPL3BBMDJrd1gvSTJCUVEwQkpQaDZjaWZmS2dPUzBzaytFWDVLSkg1aWxkcEV6ckZvOEZ5dzNVWHU5V2RJWDFkMkFxT2EwR0tIYUZja0pTVEs3bFNsTVR5d0QvNldEODJQTlZhRGlmVlJmUE82RDg5RzUzUjdWYkRzRmtEZjJFY0hwenZCOGZMNWpyT1A2UVZ0ckJ4eFFNZGFBVEpoTERuazk5eXlYYmhoSVJaSktDd1dNZzREdz
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 31 35 61 45 4a 6a 4e 6d 4d 34 5a 6b 5a 30 4e 6d 4e 43 55 55 78 54 4e 32 78 79 62 54 52 4f 57 6a 46 43 52 45 34 32 51 33 5a 7a 53 56 64 42 5a 32 31 51 5a 33 6b 33 4b 32 6c 4a 53 6d 56 69 57 56 6b 78 62 53 39 46 4e 33 6f 78 59 6d 52 5a 4f 45 52 45 4f 57 64 50 5a 44 52 6f 59 6a 6c 75 52 31 42 72 4c 31 5a 4a 65 55 39 68 55 32 70 59 64 57 68 73 65 45 6f 77 64 30 77 76 63 48 67 7a 4e 57 56 46 4b 30 59 79 64 33 52 6f 59 54 49 33 54 45 34 33 5a 57 67 7a 4c 32 6c 42 65 46 64 75 62 54 46 4e 56 7a 6c 61 64 32 5a 75 54 32 73 32 53 54 64 68 63 30 39 73 52 6c 42 49 55 6d 5a 49 63 30 70 35 53 45 34 7a 52 6e 6c 7a 64 7a 42 46 51 57 70 42 4d 55 51 7a 64 46 46 43 52 46 4e 44 56 6a 42 73 53 6c 6c 56 51 33 4a 6e 4f 47 68 61 4d 58 42 71 55 32 52 42 56 58 52 77 63 45 4e 4d 62 Data Ascii: 15aEJjNmM4ZkZ0NmNCUUxTN2xybTROWjFCRE42Q3ZzSVdBZ21QZ3k3K2lJSmViWVkxbS9FN3oxYmRZOEREOWdPZDRoYjluR1BrL1ZJeU9hU2pYdWhseEowd0wvcHgzNWVFK0Yyd3RoYTI3TE43ZWgzL2lBeFdubTFNVzlad2ZuT2s2STdhc09sRlBIUmZIc0p5SE4zRnlzdzBFQWpBMUQzdFFCRFNDVjBsSllVQ3JnOGhaMXBqU2RBVXRwcENMb
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 58 4d 78 61 47 68 52 62 6b 46 31 64 31 68 54 56 6b 74 31 57 6a 5a 32 59 33 4a 53 62 48 4a 59 57 58 64 71 4e 33 68 43 61 56 56 4c 5a 45 49 30 65 6e 56 77 63 47 52 74 57 58 5a 4c 63 47 68 79 62 6d 46 77 4f 45 46 77 64 48 46 57 56 6d 68 75 63 32 55 76 4d 46 52 6a 5a 47 78 79 62 58 5a 76 55 46 70 47 63 7a 68 45 63 32 70 54 4f 56 6c 56 56 54 4e 69 54 6d 6b 78 52 6e 46 43 55 30 4a 49 4e 47 74 54 53 45 30 78 55 44 49 76 65 6d 4a 69 53 47 70 79 62 33 59 34 62 56 5a 52 62 45 70 51 5a 6b 74 4f 52 55 64 78 63 6d 4a 4c 53 31 68 4c 51 56 4e 43 63 32 77 77 5a 6d 70 57 61 6c 52 7a 51 6b 64 51 65 44 52 46 56 6e 55 31 64 47 67 30 51 31 70 56 57 6d 6c 7a 64 6e 49 72 59 55 78 4f 64 7a 5a 76 55 6a 5a 48 51 6c 56 58 53 45 68 56 56 55 56 6d 62 6b 70 54 52 43 39 77 64 6b 39 76 Data Ascii: XMxaGhRbkF1d1hTVkt1WjZ2Y3JSbHJYWXdqN3hCaVVLZEI0enVwcGRtWXZLcGhybmFwOEFwdHFWVmhuc2UvMFRjZGxybXZvUFpGczhEc2pTOVlVVTNiTmkxRnFCU0JINGtTSE0xUDIvemJiSGpyb3Y4bVZRbEpQZktORUdxcmJLS1hLQVNCc2wwZmpWalRzQkdQeDRFVnU1dGg0Q1pVWmlzdnIrYUxOdzZvUjZHQlVXSEhVVUVmbkpTRC9wdk9v
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 56 57 68 33 55 6b 59 77 63 47 6c 70 55 79 39 69 63 48 68 72 64 57 35 42 5a 56 6c 42 4b 32 39 49 52 47 68 43 53 6b 56 71 53 48 6c 4b 5a 57 34 7a 63 44 5a 78 62 48 4a 32 54 58 64 4f 4d 31 64 49 4d 6d 74 68 56 33 56 77 55 56 46 4a 64 6c 46 47 52 6d 64 72 4c 7a 4e 33 63 32 4e 6e 4f 57 34 77 52 6a 42 70 56 32 39 59 59 6a 55 33 51 6b 56 72 5a 6e 70 6c 4f 58 42 61 64 6d 38 72 61 7a 6c 77 64 6e 42 55 61 6b 52 77 62 45 39 58 55 58 70 71 59 6c 68 36 65 54 68 4a 52 33 4e 52 59 6a 46 59 65 6b 56 34 64 57 64 47 63 6e 4a 6d 64 55 6c 55 59 56 56 34 56 56 51 31 51 54 68 58 59 6e 68 6f 5a 6c 56 35 53 30 46 33 53 48 6c 4d 59 55 5a 6b 53 54 4e 6e 64 47 74 4a 57 55 35 71 61 32 4d 30 61 56 52 6f 65 6a 42 44 62 54 64 30 65 57 4e 44 5a 31 4a 55 5a 56 56 70 57 56 64 6a 5a 44 42 Data Ascii: VWh3UkYwcGlpUy9icHhrdW5BZVlBK29IRGhCSkVqSHlKZW4zcDZxbHJ2TXdOM1dIMmthV3VwUVFJdlFGRmdrLzN3c2NnOW4wRjBpV29YYjU3QkVrZnplOXBadm8razlwdnBUakRwbE9XUXpqYlh6eThJR3NRYjFYekV4dWdGcnJmdUlUYVV4VVQ1QThXYnhoZlV5S0F3SHlMYUZkSTNndGtJWU5qa2M0aVRoejBDbTd0eWNDZ1JUZVVpWVdjZDB
2024-04-19 14:06:19 UTC	1255	IN	Data Raw: 58 62 58 46 5a 65 54 46 54 51 6c 4a 78 62 6b 63 7a 5a 55 74 4f 4f 55 31 71 53 31 52 78 52 32 56 6f 64 7a 51 76 51 6e 64 79 64 47 4e 35 64 46 67 7a 55 6e 52 78 53 58 4a 61 5a 45 64 6c 5a 47 78 4d 53 58 68 32 5a 48 68 73 64 6d 70 59 54 58 5a 53 52 45 78 77 53 6c 4a 47 51 30 5a 44 62 55 70 45 56 6e 68 71 56 6d 31 45 4c 33 46 49 62 56 64 71 4c 33 56 36 53 6d 6b 79 53 55 6c 32 62 6d 63 30 51 57 39 30 57 6e 68 71 65 57 6f 76 55 32 51 35 54 56 5a 76 62 56 68 70 63 58 45 35 4f 54 52 6a 5a 44 46 6b 54 30 46 48 4f 45 4a 71 55 31 46 4a 61 30 35 53 61 6c 45 30 4e 7a 56 57 53 45 4a 71 62 58 52 32 54 56 6c 32 63 30 35 54 55 45 56 55 5a 6e 4e 30 4f 47 52 78 54 57 39 31 54 45 31 79 51 6e 42 78 57 46 64 6b 59 57 68 48 5a 57 4a 31 4c 79 74 54 52 47 64 4f 51 31 6c 79 4e 45 Data Ascii: XbXFZeTFTQlJxbkczZUtOOU1qS1RxR2VodzQvQndydGN5dFgzUnRxSXJaZEdlZGxMSXh2ZHhsdmpYTXZSRExwSlJGQ0ZDbUpEVnhqVm1EL3FIbVdqL3V6SmkySUl2bmc0QW90WnhqeWovU2Q5TVZvbVhpcXE5OTRjZDFkT0FHOEJqU1FJa05SalE0NzVWSEJqbXR2TVl2c05TUEVUZnN0OGRxTW91TE1yQnBxWFdkYWhHZWJ1LytTRGdOQ1lyNE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49865	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:19 UTC	771	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOag9GFO29r7AyeurnkOhdxdHVeu20oxB3RJ5ERJ4QhZfuDpQadxPGWHpH3irRA4s-isqRliDi4zqx83B718; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:20 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:06:20 GMT Expires: Fri, 19 Apr 2024 14:06:20 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:20 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:06:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49867	13.107.246.41	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:20 UTC	791	OUT	GET /completeRedirect/lxDNVZKK?correlationId=39685ffc3e1858cc72ea29eff46b6f54&platformSelected=iOS HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: TiPMix=5.216823125384784; x-ms-routing-name=self
2024-04-19 14:06:21 UTC	471	IN	HTTP/1.1 302 Found Date: Fri, 19 Apr 2024 14:06:21 GMT Content-Length: 0 Connection: close Location: https://apps.apple.com/us/app/id951937596?referrer=kmas_id%253d1204d05d-0618-27aa-c5ce-34b1b850bb66%2526ocid%253dcmmu646idg6%2526rid%253dlxDNVZKK Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240419T140621Z-15497cdd9fdrqvh24s6x21e5vw00000001t000000000g60r X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.6	49870	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:23 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 52 6e 44 73 33 41 45 59 7a 30 36 4f 5a 34 35 47 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 62 38 61 31 64 62 32 38 36 61 31 33 33 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: RnDs3AEYz06OZ45G.1Context: 66b8a1db286a133b
2024-04-19 14:06:23 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:23 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 52 6e 44 73 33 41 45 59 7a 30 36 4f 5a 34 35 47 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 62 38 61 31 64 62 32 38 36 61 31 33 33 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 51 44 4d 49 53 30 2f 75 39 47 46 49 30 35 31 55 5a 55 74 55 73 74 77 67 6e 65 63 7a 7a 66 70 51 30 6d 6c 58 74 36 78 6b 56 6b 36 74 56 32 77 65 77 72 62 44 48 72 4c 42 4c 36 35 48 2f 6c 38 52 6e 34 72 30 73 45 56 6f 4c 68 46 35 73 50 6b 77 4a 53 58 7a 56 4a 34 31 69 58 43 54 48 70 45 79 33 71 77 4a 48 69 63 56 39 5a 50 6b Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: RnDs3AEYz06OZ45G.2Context: 66b8a1db286a133b<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWQDMIS0/u9GFI051UZUtUstwgneczzfpQ0mlXt6xkVk6tV2wewrbDHrLBL65H/l8Rn4r0sEVoLhF5sPkwJSXzVJ41iXCTHpEy3qwJHicV9ZPk
2024-04-19 14:06:23 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 52 6e 44 73 33 41 45 59 7a 30 36 4f 5a 34 35 47 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 62 38 61 31 64 62 32 38 36 61 31 33 33 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: RnDs3AEYz06OZ45G.3Context: 66b8a1db286a133b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:06:23 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:23 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 72 51 65 2f 69 64 68 4f 51 30 47 4f 61 68 31 46 51 57 6d 71 73 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: rQe/idhOQ0GOah1FQWmqsw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49952	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1079	OUT	GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8594 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:18:04 GMT Expires: Sat, 20 Apr 2024 13:18:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 2918 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	722	IN	Data Raw: 52 49 46 46 8a 21 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 41 21 00 00 2f 3f c0 0f 00 4d 28 8c 24 19 32 63 fd e4 1f b0 24 22 fa 1f 54 35 4c 96 0e 27 4c 33 54 66 a3 8e de 8f 1a c6 30 a6 fe 53 a0 90 77 38 07 ee c2 41 24 49 8a 54 c7 e8 5f 1d 33 33 df 4f bc 0e b6 91 6d 2b 39 1f 88 a8 80 fe eb 71 22 42 22 77 f7 3b 8c db 48 52 54 bb 77 f9 c7 58 af 63 66 be fe 87 8e 34 43 71 1c c9 30 45 47 99 38 c3 e0 0d b6 cf c1 bb c4 7b f3 2d 8d 32 b6 61 70 0d b6 e1 28 06 9a 9f aa b0 69 7d 4a a8 22 ea 48 cd f3 4d 4d 76 4e e9 01 0d b4 20 54 38 eb c2 ab e7 87 0c 7e 12 64 51 86 66 23 59 78 11 c0 41 f9 e7 91 21 97 e1 9f 70 41 8a 84 03 00 e0 81 05 2e e4 82 21 65 02 02 fa 39 e0 01 00 44 98 a6 ff 5f e4 48 ce ff 9f 50 59 a0 02 15 89 19 5b 6a Data Ascii: RIFF!WEBPVP8X??VP8LA!/?M($2c$"T5L'L3Tf0Sw8A$IT_33Om+9q"B"w;HRTwXcf4Cq0EG8{-2ap(i}J"HMMvN T8~dQf#YxA!pA.!e9D_HPY[j
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 4e 9b 5f 9b 65 a3 62 19 46 56 4d d6 87 b1 f9 0d ab d9 ed 7c 0e 54 9c 92 29 71 c2 e5 75 fd dd d5 90 9a 7f c8 b3 2c b1 ce 30 2a 39 58 e3 6c 1e 9b 15 0d 09 36 56 66 f1 a7 b4 be 41 48 08 91 a1 cd e6 7f 05 eb c3 21 8a b8 40 07 75 77 66 81 7b 40 30 25 77 10 1b 04 75 cb b0 b2 61 e6 65 74 55 e6 27 87 4e ad 14 14 b1 fd 6a 20 d9 34 fb 74 4e 5f 92 36 b9 7e 9e fb ba 7c df 34 ff f5 2b 43 df 7f 57 c4 87 6e 00 50 1d d7 58 41 89 93 1a fa ff bb a7 bd ba 78 87 47 4e 33 b5 44 4a 40 4a 19 9c 86 27 2c d7 5a 39 11 4a 96 86 19 95 0a 4f 1b e4 ba 30 5d b4 3d 1f 0c e6 6b dc d1 ad 97 b8 77 69 5c ee 89 12 05 9c ab 9b c2 95 26 7f 11 a1 c2 92 46 6c b1 69 cc 2b 92 0d 31 a8 fc ce a0 5b 96 9b 89 65 7a 30 0e 79 b3 56 3e 8d 1c fd f4 49 e2 34 f3 6c 2d bd 7f 63 e2 fa 44 c6 e4 0d 91 ea 80 aa Data Ascii: N_ebFVM\|T)qu,0*9Xl6VfAH!@uwf{@0%wuaetU'Nj 4tN_6~\|4+CWnPXAxGN3DJ@J',Z9JO0]=kwi\&Fli+1[ez0yV>I4l-cD
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 65 87 f9 d5 7e f7 4c 53 ff 1d 1d 97 85 0a 50 79 4b 5f cc e7 cd e7 02 a3 57 a5 59 53 d8 54 56 c2 64 14 0b 1a 15 8f f9 cb 3f 5c c3 28 94 bc 73 75 8f 80 d6 e4 f2 af be b4 5f 9d 46 bb ca 1b 46 d5 5f 70 4d ff e9 73 c7 1f 38 60 50 fe ac b4 f8 3c 98 52 5b 43 5d c2 a7 21 b8 1a e0 4b 33 fe f8 cd ca d1 83 72 5c a4 08 0d 41 22 a1 a6 99 60 76 bc 4f 3b c6 c8 ec 5c 7b 39 1a 41 92 08 14 61 0a 66 e8 10 a2 99 47 95 a1 32 85 b5 23 eb 3a 77 c8 3f 32 7b 7b 62 d2 76 39 a1 f7 25 9b c3 a6 75 d0 ce e7 aa dd d0 30 9b 69 da 48 34 d3 c4 8c 80 df 4f 13 bb ba 70 c7 7f a8 55 3e df a8 dd 12 b7 37 d3 7f 4c 25 91 8a 6b 42 f7 8e da d9 77 47 a6 2f 58 f9 d8 a4 e6 69 2d a8 5e fd 94 ff fc b1 ea f5 96 bf d9 50 b8 5c 99 54 ed 83 ba 10 12 a9 c6 cb 32 75 af 4b 7a 7a ac 8e 46 31 89 68 88 c0 44 87 Data Ascii: e~LSPyK_WYSTVd?\(su_FF_pMs8`P<R[C]!K3r\A"`vO;\{9AafG2#:w?2{{bv9%u0iH4OpU>7L%kBwG/Xi-^P\T2uKzzF1hD
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 5a fe 0c 0b f6 ea ce 3e b3 38 13 18 da 4a f0 7b c8 22 99 b3 3b 59 75 e7 8d 86 d9 be 85 31 7c fa 42 83 3d ea 77 1d 4f 1a 14 f1 9f 43 f8 75 c6 6a 8a 24 44 b1 b7 cd 0e c9 e1 20 ed 0f 86 13 9f fc 73 d3 ec cd 85 73 2c 98 f7 d3 f9 92 29 6e 79 e3 45 7f 3a 0f 1c ee 8a 8d a3 24 d5 05 a1 58 7e f7 f0 06 9d 21 64 4e b7 c1 e6 52 c3 c8 aa fc a8 0a dd 13 2a 91 52 90 82 dd 0b c6 cd b4 fe ba 20 de 15 4e c1 0e ff d5 54 07 8f 1a 55 42 cb 07 dc b1 e0 5d d7 0b b7 59 24 b3 bc 6c f2 ab ae 8f 99 6b c5 6c c4 ac e0 d5 22 0c 8a 0c 8a 18 9b ae cf 98 02 66 19 a6 59 f3 c3 d8 26 81 68 8e 07 03 bc 94 a9 5d 27 14 06 de 7f 24 06 eb a5 74 e6 8c 8f ef a9 ef 5f b5 60 b2 6c 6d 86 fb c6 af cc ff 08 14 ce 97 3a 71 ed ba 28 56 c5 25 2b 52 c3 65 f5 c4 6f ad d4 6a d2 d1 b3 67 e7 95 c2 2a 35 e3 3b Data Ascii: Z>8J{";Yu1\|B=wOCuj$D ss,)nyE:$X~!dNRR NTUB]Y$lkl"fY&h]'$t_`lm:q(V%+Reojg5;
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: f3 85 d9 ce da a6 e6 31 5c df 3c bb ca d2 cd d4 ca e1 6c 58 08 a1 86 a8 9d ec 06 f9 f4 ec d3 65 ef 80 50 13 6e 7c fc bd 3a c4 aa 08 15 dc a1 f5 3a 79 b1 28 50 8c 8f 6e 3f 6f 6d ba ef 39 75 ce 42 a7 c0 8e 89 9e ae 3c a9 6b 94 08 c9 43 60 0c 73 8a 27 52 84 12 09 04 49 04 90 24 90 81 80 f1 3e 4c ef 69 08 fb 55 cf 72 f2 07 fe 64 29 e7 3a 67 0f 94 84 7f 6d 79 d0 de f7 f1 8f 14 07 13 c7 c5 23 77 7a f3 0f 9f 59 58 d9 32 c6 71 b0 66 b0 04 30 80 32 06 44 08 43 14 cd 83 7c 07 67 a9 8f 3f 75 fa 05 cf 9e 7c c7 cc 83 96 47 5c 74 50 14 74 58 df 3a 7f 59 b8 ba ee 51 19 e6 b7 ad cd 3a 65 5d 9c 96 b3 eb 03 7e 4f 96 30 66 5c 73 6c 23 d4 9f 29 08 3e 93 10 92 84 e1 52 3f f4 13 18 40 97 8c 29 8a 6c 8c e3 f6 84 11 71 9e 75 58 56 3e 62 1e d7 f2 66 0f 9e bc 7a 73 41 78 42 1b e6 Data Ascii: 1\<lXePn\|::y(Pn?om9uB<kC`s'RI$>LiUrd):gmy#wzYX2qf02DC\|g?u\|G\tPtX:YQ:e]~O0f\sl#)>R?@)lquXV>bfzsAxB
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 21 90 e1 7d ed a1 a1 b0 6a 7d 43 95 64 75 f7 70 dd 5f fa 92 79 fc 30 1d a8 42 89 71 38 aa 4b a2 23 40 3c 8a 4d d0 15 aa 33 3e 18 05 bd b2 37 8e 49 ca a5 3d 5d d8 10 a6 14 62 5e d0 a2 4a 9c a0 70 96 5d 7d 3d d2 ac 0b 09 00 10 28 cb ef 2f d2 f0 c8 82 b6 7b d9 79 e3 f4 41 70 8a 02 80 04 92 04 b2 1c 80 b5 21 a8 0d 24 e4 4d 43 f0 bf b1 ff bc 2f dd 55 69 b7 ea e4 d5 0f 79 e5 df 3e f5 f8 58 c2 d4 4c 27 d6 3f 20 21 b2 1f a2 04 d0 a0 f3 21 3c 53 7c 78 0f 12 21 cb 94 9a f5 62 97 14 44 c8 9b dd c0 d4 50 36 b5 3e 72 ec 56 43 08 c4 06 00 39 2a 12 14 38 48 f5 18 35 19 20 a7 16 c7 50 65 bd 84 06 32 c8 00 2f 56 43 2e 86 10 b2 5f d9 de e3 b9 2f d6 9d a6 83 67 7c e1 9c fe 70 df f0 8e b0 fd a9 3c 4b eb d1 9f 46 ec 6c 00 e2 bd 14 ed c5 00 0c 53 88 29 0e bb 31 0c 49 c3 96 2c Data Ascii: !}j}Cdup_y0Bq8K#@<M3>7I=]b^Jp]}=(/{yAp!$MC/Uiy>XL'? !!<S\|x!bDP6>rVC9*8H5 Pe2/VC._/g\|p<KFlS)1I,
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 05 e1 c5 0c 90 0c 56 2a 92 bd d4 8e a2 49 30 84 01 6c a0 01 1e a1 74 9a 95 cc b3 f9 1e f3 44 08 38 01 78 36 00 a6 52 d0 c3 20 a1 48 cb 11 12 88 10 25 42 2a c0 06 92 f1 d1 7f 40 1b 08 0d 99 26 dd 73 20 c0 5a 72 1f df 20 dc 96 2c 0e b1 4b 80 5b 6f 82 25 42 a1 1e 71 fc 04 c5 a0 f4 97 87 99 7f df 9b f5 1b a7 b3 ff f6 6a e3 8d c5 0a 3d 68 07 79 98 20 66 af 12 82 c5 e3 14 19 a6 99 89 b0 a1 66 4b 00 5d 87 0b 32 b3 22 05 1a 14 7b 07 00 27 50 01 80 25 97 1d 7e 6a ba df ed dc 1b 43 d2 79 af ed 68 34 7b 08 0c b1 2a a3 d4 b9 83 ae f7 f8 d3 cf 5c 39 fa dc dc 80 08 5c 60 04 84 1e c2 2a 74 97 41 73 41 80 f4 80 a6 c4 12 87 b6 06 45 1d f9 c6 c3 66 d3 5f ab a5 ff 38 3f e2 ff 6e ae 17 f8 29 25 93 48 50 90 ca 68 84 da ac 56 12 4d d9 76 00 39 80 12 70 ad d8 06 d4 8f 80 5a 20 Data Ascii: VI0ltD8x6R H%B@&s Zr ,K[o%Bqj=hy ffK]2"{'P%~jCyh4{\9\`tAsAEf_8?n)%HPhVMv9pZ
2024-04-19 14:06:42 UTC	342	IN	Data Raw: de c1 9d 2c 29 e0 ad 4a 68 64 c4 5b 45 30 c1 20 0c e0 07 fc 26 47 6a 54 0a 50 01 30 d0 5b 29 20 4a 41 bc 80 f3 34 8d 7a 9e c9 1b b0 d0 59 83 3a 45 78 41 36 40 11 14 11 68 1a 78 33 75 99 da 58 fa a4 89 24 d7 94 a8 ed 03 4e 51 53 57 54 c8 d2 91 6f ef 8a 53 3f c6 d0 0c a8 02 0a f8 29 cb 72 c6 28 02 67 9d 7d ec 49 46 53 0f 31 88 c0 ee c4 83 58 ff fc d8 fe 4f 3b 0f f5 bd f2 88 16 a2 20 ba 42 c3 6e 5b 46 52 41 86 71 c5 40 45 84 de a3 24 c3 37 a2 7d e0 cf 32 c4 2b 31 85 40 44 fc f7 f7 68 55 66 30 28 3a a3 70 6a 05 37 ed d5 a1 22 b6 21 12 e8 5b 76 07 91 61 76 70 9a 72 83 59 02 03 e2 ae ba ac da 6b 39 f7 42 50 42 eb 7c 5d bd 1e aa fb 02 09 b1 08 0b be ec cb de c8 83 ad ae 97 ba 3d 14 0d 5d 44 51 3e f4 bd b9 18 50 3c 6f e9 d6 bb c5 33 ee 35 55 11 aa cc 8d 81 6a 65 Data Ascii: ,)Jhd[E0 &GjTP0[) JA4zY:ExA6@hx3uX$NQSWToS?)r(g}IFS1XO; Bn[FRAq@E$7}2+1@DhUf0(:pj7"![vavprYk9BPB\|]=]DQ>P<o35Uje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49951	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1094	OUT	GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19928 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:18:04 GMT Expires: Sat, 20 Apr 2024 13:18:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 2918 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	721	IN	Data Raw: 52 49 46 46 d0 4d 00 00 57 45 42 50 56 50 38 20 c4 4d 00 00 50 38 01 9d 01 2a 88 02 6c 01 3e 3d 1e 8c 44 a2 21 a4 92 59 5d 30 48 03 c4 b2 b7 7c 25 5d ba b3 57 be 7c 51 ae 84 70 7e 95 72 03 c8 fb c0 3d 67 ee cf c8 fe 59 f8 41 cc 7e f4 fc c7 e4 1f f7 0f d7 6f 9e fe 43 f1 57 d7 7d f9 fd de ff 25 f9 3f 82 0f 92 66 27 d3 9f e3 7f 30 ff c4 ff ff fa 9f ff 47 d5 b7 e9 6f fb 9e e0 1f a2 bf d8 bf ba ff 74 ff 43 fd cf ff ff ff ff bc 3f fa bf ce fb 8e fe a5 e8 63 f9 0f f6 2f f7 1f df 3f 7c fe 76 ff d2 7e 99 fb e8 ff 79 ea 05 fd 8b fa b7 fd 2f 5b 1f 63 8f 40 4f d9 6f 4c 4f fd 9f e9 7e 1b 7f ab ff 99 ff c9 fe 7b f7 ff e8 4f f9 e7 f5 6f fa 1f 9f 7f 20 1e 80 1e 80 1d 72 7e 93 fc 8b fc f7 e5 e7 a0 3e 72 7d e9 ed b7 c8 36 14 fe 2f fb ff 34 3f 9d 7e 40 fd b7 f8 af dd 6f 8a Data Ascii: RIFFMWEBPVP8 MP8*l>=D!Y]0H\|%]W\|Qp~r=gYA~oCW}%?f'0GotC?c/?\|v~y/[c@OoLO~{Oo r~>r}6/4?~@o
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 70 af 5c 55 e9 90 3f 71 f0 5a da 55 09 39 ee 9b df 4d ab 9c 4a 1e eb 68 c8 06 81 5f 6f 7c 29 94 16 79 ac 48 fb 2a 0d 76 07 fc e7 5e b9 c3 07 fd 13 66 4c f2 74 7e cc ec 4f f0 cb 79 f7 6b f2 54 75 a5 03 92 c5 ef 90 ba 69 dd b7 4b c3 ca 2e d8 e5 0f e3 24 18 8f 1d 4f c3 19 63 dc 52 d0 ec 72 6a 14 68 3c 93 3e 86 69 66 11 2f a5 91 74 a4 22 1f b6 7a cf 0e b1 37 c4 2b 3f f9 51 c8 3e d3 cf c5 d0 02 db 4b 9d a5 e2 27 bc 1a 1d c5 25 b8 65 01 8e 4c b8 c9 32 7f 7d 1c a0 55 7c 2c c6 ec 38 06 10 8f 4b fb fb 02 9c 76 1e d7 de 63 de d6 ec 48 b9 67 a4 e9 da 8a 1e 6e 99 3b c5 ab ef f0 7f ba d3 26 91 0e 12 d9 da 73 f1 e4 98 39 33 3f 96 7b 63 3c 31 3f 6c 0b 3d e2 69 c9 eb 76 77 7c 37 8e e5 33 c7 71 cc cc 16 8d 85 bf d5 7f f7 cf 31 0b c5 98 2e 16 9f 79 31 58 50 ba cc 6f 7a 8d Data Ascii: p\U?qZU9MJh_o\|)yH*v^fLt~OykTuiK.$OcRrjh<>if/t"z7+?Q>K'%eL2}U\|,8KvcHgn;&s93?{c<1?l=ivw\|73q1.y1XPoz
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: ff 73 e8 e2 e6 79 d3 67 72 20 c2 d1 19 e8 99 9c 3d c9 da 84 67 65 4b fd 1b 73 65 a8 e4 d6 98 70 30 9c 11 1b 99 ff bb 12 06 75 39 80 49 e5 0c b8 f3 07 4a bc d4 4e 3d 79 d4 3b 19 39 36 de 71 09 44 05 b7 8e ec d6 6d 66 66 61 e9 f5 4d 96 2d 5f f6 f1 2d 56 4a d5 a2 e4 ee aa 5e 2b c2 4c fc 1d a1 55 b8 64 8a 80 c8 fc a9 6f 7a 3d 4a 38 27 54 88 5f f4 53 d0 81 f0 90 d7 19 e3 6d 5a 61 42 93 8b a5 5d c2 37 11 9d aa 8f 1f 28 79 65 28 07 e6 76 c2 7c 94 df 51 f9 e0 27 1b f3 b2 9a 7f 0d b5 a9 38 84 e1 83 18 89 7c 81 78 83 2e 8c 8b 75 49 18 69 04 67 5a b3 e9 f4 e8 0c 9a b2 a2 7a 06 c1 f4 ba 89 46 1a a4 e4 18 49 4b 5e b7 5a d0 cd 5a 8f e4 4c 5d 66 c7 a3 3b f1 db 1a 97 04 c9 6e 53 ce af 0a 6e 24 11 61 af 30 6a 43 25 3b 4d 76 77 f2 aa e5 b6 f3 80 01 81 04 a7 1b 3c d4 3a 95 Data Ascii: sygr =geKsep0u9IJN=y;96qDmffaM-_-VJ^+LUdoz=J8'T_SmZaB]7(ye(v\|Q'8\|x.uIigZzFIK^ZZL]f;nSn$a0jC%;Mvw<:
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 84 01 52 84 e6 e6 78 7f 57 50 9e 9f 92 20 6d d5 f0 1f 78 d5 f8 bd 9e 48 6b 03 c3 1e 02 2d be 06 17 ee 9a c7 8e 72 ba d4 74 c7 3c 0b 2a fc ba ba 0d 96 93 9c 51 c8 7f 8e 61 65 27 bd 4d 3e 3d dc 95 63 87 fd 93 af 17 31 15 3c fa 39 9f fb 6a 93 e1 a7 b5 3b 3c 10 cf f8 80 00 9b 0c a0 f1 1d 03 c4 65 05 00 04 7c ba 98 ec 37 4e 61 1a 2a 41 00 02 e7 7b 47 35 c9 a2 8e 41 c7 92 3f c2 d3 c4 74 36 c0 7a 90 d1 47 71 74 db 09 c2 31 37 e4 33 e6 98 72 2b 4c 1b c2 75 21 e4 6d b3 28 00 ff ff 72 43 74 be 55 fb fe 74 d6 d6 c8 d6 8a 79 fd 18 96 18 77 e8 3d 57 6c 00 07 6d 84 bb 4a 94 d4 1d 3d 7b 45 da 2c c2 e1 fe 76 fe 2d f7 1a 11 27 0f a3 8e 21 d2 a2 d9 d1 c6 f3 ec 01 b5 48 7b c5 5f 73 76 01 b2 47 41 f2 b9 e0 7e 6e b1 62 b2 95 d3 c1 89 e4 9b 34 37 72 65 0c 0e 64 a8 c0 5f 06 fe Data Ascii: RxWP mxHk-rt<Qae'M>=c1<9j;<e\|7NaA{G5A?t6zGqt173r+Lu!m(rCtUtyw=WlmJ={E,v-'!H{_svGA~nb47red_
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: e8 50 ea 9e 71 c1 4b 12 01 df f1 8d ae af 71 0b ad e6 fe 04 ea 69 25 08 6c 19 f0 c8 33 64 58 6e 1d 2d e2 62 fd d8 41 55 2d 0e b9 22 fe d9 4e 3f 40 4e 50 98 44 cf bf 40 9c f4 99 30 b4 58 d2 0a f4 29 c3 26 e2 5c d9 3f 3c 62 57 67 9f 97 16 9b cb 9f 2c a2 2f f1 12 46 e2 98 24 11 cd 92 63 2e b7 87 d6 7b af e8 4b 86 75 c0 51 eb dc 24 bf 59 2c 53 e0 cd 61 91 ed 17 97 1d ae 2e a0 4e 81 de 14 04 b1 18 6f e5 74 1e 9f bb c1 14 fb a4 f7 f9 6a 29 ae 89 fd 8c 6c cc c2 83 29 84 b6 46 c7 2b 4c dd 7c 78 16 ec 3e f0 a0 0a 23 a2 51 96 dd 39 f1 39 3d 19 78 ae 9e 74 7b 8c 19 ba e9 5b 14 82 98 68 a6 bb f7 c1 be cc f0 e7 c5 0a 4d 8b 60 47 6e 2e 25 73 af 14 6a 5f 6a 68 7e 61 01 dc 47 c2 2e cf 25 99 d8 e2 5b 97 0d 48 7c 56 c6 fd a1 5a 1a 86 a2 27 4f 14 75 a3 ea ca 3f ce d1 b5 04 Data Ascii: PqKqi%l3dXn-bAU-"N?@NPD@0X)&\?<bWg,/F$c.{KuQ$Y,Sa.Notj)l)F+L\|x>#Q99=xt{[hM`Gn.%sj_jh~aG.%[H\|VZ'Ou?
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 30 b9 9e 70 48 dd fd 3b 89 51 a7 64 50 51 f9 78 fb c7 97 58 a7 ee 71 04 0d 76 86 a6 29 e1 45 ce da e7 63 4f fc 79 48 9a e2 5c 5e 81 69 79 05 e2 a7 cf 85 20 4f bb 5e 26 4b 3d 6c f7 ed 59 e0 d4 ff 57 33 8f 1c 8a e6 1d 00 02 08 5d 25 e1 7f bf 03 9c d6 d6 fe f8 8a 7f b9 43 19 c8 53 62 0c ad e2 bc 3f e6 1a c6 9c df cc 43 80 7a 60 d9 93 1d 1c 69 62 08 53 44 79 e3 91 b4 95 66 31 2f ae 72 92 2e c6 89 ce 8e 50 6a 13 0b d6 2f 05 0c 00 4c c3 28 97 a5 64 e0 61 41 cf cf d1 89 3e 08 47 17 9d b3 11 4e 50 84 b7 b1 30 39 ad 35 03 aa 16 15 59 32 b7 cd a3 d6 5f ff 4e c8 87 8a 29 61 82 13 71 dc 73 b1 ea 70 53 cc 3a ba 78 11 ac af fd 7d 7d 2e 93 24 26 18 f6 a9 93 6b 52 aa 7f 9e 2c d9 92 b2 ca 7f f6 5c 65 2c da bc 45 a2 f1 37 c2 2f d0 80 a9 2f 8c 56 48 07 46 6b 4f 30 d6 54 f4 Data Ascii: 0pH;QdPQxXqv)EcOyH\^iy O^&K=lYW3]%CSb?Cz`ibSDyf1/r.Pj/L(daA>GNP095Y2_N)aqspS:x}}.$&kR,\e,E7//VHFkO0T
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 92 13 01 14 34 7c e2 40 59 75 65 50 4b 9d 1b 86 47 44 a2 e4 0f 87 4c 9e 13 e6 98 cb 37 07 fb e3 0a 47 3d e1 34 5e 47 c1 1a 2f 4b c6 b9 2e 73 7c 05 43 2a 8d 41 58 f7 54 77 e5 a2 a2 36 99 71 59 dc ef 6a 24 96 6e bb a5 47 38 34 f9 ad a9 c8 d0 84 51 b0 35 71 45 fc b5 99 d1 48 b1 42 13 ab 48 75 9a da 94 a5 8c 9e 69 6a 14 18 2e 40 30 67 aa 57 87 c3 11 06 61 85 5c 8f 1b 4a 4e ff 57 37 35 9f 3f 8e 71 84 ca 77 94 75 40 d2 5c 25 be 5f d8 79 23 6a 06 dc 7b bc ce 0c eb 56 ed e6 36 e8 3e bd 00 f1 3d 98 5b 9a b5 18 c5 46 aa bc 15 83 6c 76 d2 68 26 b5 26 dc c8 c3 8a cc c9 8e af cf 0d 47 23 f3 b9 02 ca fa 6a 70 42 42 ce 17 46 6a ed df 99 11 c5 3f 6a ee ed b5 62 10 05 f6 eb 3d 77 af b2 af 0d 24 4d 29 d5 0a 9c 6d 46 54 42 b8 3b 79 72 ba fd 7d 33 ea 68 26 ce 3b 70 9c 83 43 Data Ascii: 4\|@YuePKGDL7G=4^G/K.s\|C*AXTw6qYj$nG84Q5qEHBHuij.@0gWa\JNW75?qwu@\%_y#j{V6>=[Flvh&&G#jpBBFj?jb=w$M)mFTB;yr}3h&;pC
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 10 44 02 d3 01 c4 b2 d6 07 77 80 4a 4d b9 65 30 60 7b c6 8c 34 81 d1 42 9b f3 d8 97 5d 38 54 49 a6 5e 34 90 ff 2a 02 79 05 2a 3c f0 b9 68 d4 f0 b3 32 3b 59 52 2a ae 79 ed 3e e9 d1 53 24 11 2f fa d0 a5 86 3a f5 d3 2b 90 91 03 07 e8 d1 90 7b 3f 07 d8 3d 7b 12 b6 70 9a 6c 6f d4 4d bf 2e a6 dc d1 03 c5 1d a0 82 7f a7 61 f4 ba 02 53 dc c4 4a 82 69 2e bd 26 42 6d 45 f8 52 73 45 3a b6 fe ab 63 db 52 70 65 ac 85 74 bb 63 a1 35 b8 f2 59 bc 68 b3 42 a4 51 54 44 97 e7 a9 78 04 e6 dc be 3b 84 00 59 a7 65 5a 0d c0 91 fd de 20 58 b7 16 3c 0b 10 9d dc 7d d9 34 60 e4 c0 bc bc 19 a8 e0 84 17 98 58 5e 4d a1 48 d7 f6 f2 57 ae 05 a8 01 8c 23 9e d5 8b e5 01 4a b6 b5 a4 11 60 99 7b 0c 0c 91 98 71 e6 4c cf 03 d0 1c 94 ae 36 aa cf 45 f1 af 11 42 12 b3 8b 30 01 7b 8a 72 f4 3f de Data Ascii: DwJMe0`{4B]8TI^4y<h2;YR*y>S$/:+{?={ploM.aSJi.&BmERsE:cRpetc5YhBQTDx;YeZ X<}4`X^MHW#J`{qL6EB0{r?
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 0f 17 70 58 f6 ed 23 bb 87 a8 b7 bd 68 ef a4 c4 43 ce d6 24 57 38 b7 0b 54 e8 6f 72 4e 5f d8 40 35 f3 0f b0 f7 1f 80 34 2e ad 1a 3b 3b 91 29 51 93 fd f3 7e 9b f4 77 31 ae 1f 91 9f 00 35 a9 0e 73 f1 a5 cb d9 65 c1 d8 27 04 c4 6f be f1 42 7e f5 31 0e c3 8a c6 17 e0 36 91 eb 5b 42 ef a0 e3 aa a5 4a b1 7d 6e c2 bd 3a 96 74 b0 28 d4 f5 16 f1 4b 8e 1d 32 84 76 62 73 2a 67 72 a8 07 b6 d8 a1 18 4b bd 68 dc e6 7b 46 af 63 25 39 b1 9f 14 7c 49 2e 27 b6 22 17 fe 6b 77 68 0a 4e de d4 32 ce ac 6b 48 0b 81 b8 b8 10 10 18 ea f8 0f 33 dd 28 d7 0e 68 2a e1 d9 40 3d de 1c 6a aa 0a 1a ca 5e ef 2f 3e 12 64 d0 be 88 70 b0 bf 37 d1 b4 d2 ba 00 20 eb ba 4a a0 24 86 e8 ea 32 f3 c9 77 64 10 39 95 52 4f 80 d9 28 8d 8a ab 70 d5 d7 3a f7 0e c3 86 be 6e 8f 85 82 e5 dc 9e b3 4a 33 77 Data Ascii: pX#hC$W8TorN_@54.;;)Q~w15se'oB~16[BJ}n:t(K2vbsgrKh{Fc%9\|I.'"kwhN2kH3(h@=j^/>dp7 J$2wd9RO(p:nJ3w
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 87 ea 57 7d f7 a1 87 1b 5c 32 20 97 38 68 eb e8 67 d7 02 9b ad 2c 8a 46 ab df fd 62 ed c0 ff 53 a1 ba 24 55 23 6d 0c 24 ac f4 d1 51 44 f7 f5 53 e9 ff 73 54 f2 47 58 6f 45 14 4e 8d 3d f9 7f f1 6c 13 db 2c d7 47 92 05 80 45 f4 2b e8 6e 12 b8 68 96 da eb a9 70 02 62 35 70 c8 6c 35 30 8c ab 67 ea f0 6c 66 9b 95 06 d7 bf ed b9 56 6c 18 6a 16 4a 10 9c 4c 58 ab 6b 7c e3 4c 5c fc d0 b7 49 3e 77 b5 b6 a9 0a 09 b6 88 35 f8 e1 68 bb c1 28 fc 2d a3 24 0e ed be 3d 50 3f 0b ff 9f 06 bd 17 95 85 ef 6c 8f 7c 3e bf c0 39 41 6c 77 b1 c4 a9 41 97 57 ff ed ad 10 19 5d 74 18 f8 4f eb 83 c7 e9 c7 41 70 e1 9a 51 a0 b5 40 2e 31 8f 82 d3 ae 42 00 a7 2f 49 14 38 c2 f1 df 6a 1e 21 1f f9 d9 b9 28 13 c5 4d 49 ec 4c fd 4d 0e 1f 60 9f 18 34 49 60 fb 25 93 af c1 f7 d7 dd 5c 88 60 4e e0 Data Ascii: W}\2 8hg,FbS$U#m$QDSsTGXoEN=l,GE+nhpb5pl50glfVljJLXk\|L\I>w5h(-$=P?l\|>9AlwAW]tOApQ@.1B/I8j!(MILM`4I`%\`N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49953	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1093	OUT	GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 21244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:43:51 GMT Expires: Sat, 20 Apr 2024 10:43:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 12171 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	720	IN	Data Raw: 52 49 46 46 f4 52 00 00 57 45 42 50 56 50 38 20 e8 52 00 00 f0 42 01 9d 01 2a 88 02 6c 01 3e 41 1e 8d 44 a2 a1 a1 12 8a 44 fc 28 04 04 a6 ee 17 48 e1 d1 9a 6c e9 fe 23 f2 93 bd 94 19 f8 ff c7 6f c9 af 99 0b 4b f7 af c0 9f bb 3f e4 ba 59 2d af 36 2f 36 fd 73 fc 7f f7 3f f1 9f ef 3f be ff ff ff e3 f6 cb fe 77 fd af 6a 3f ac 3f f3 7b 82 fe 9c 7f 80 fe d9 fe 23 fe 87 f8 ef ff ff fd fe b2 fd 7b 7e e7 ff aa fd 66 f8 19 fd 67 fb e7 fc 2f f1 5f be 5f 2d ff ef 3f 67 bd e1 ff 74 ff 5d fb 1b fd cb e4 03 f9 a7 f5 9f f8 7f 9d 7d e9 7f bb 1e c0 9f d1 3f c7 ff d1 f6 75 ff 85 ff 83 fd 17 fc 4f ff ff 48 df d3 7f d2 ff e3 ff 55 ff 0b ff ff d0 77 f3 cf ee 3f f5 ff 3f fe 40 3f f4 fa 80 7f ef f5 00 f4 c7 8a 2f 31 3f 61 f9 71 e7 df 9b 4f 81 fd 23 ff 37 fc 5f 32 d8 96 7c d7 f1 Data Ascii: RIFFRWEBPVP8 RB*l>ADD(Hl#oK?Y-6/6s??wj??{#{~fg/__-?gt]}?uOHUw??@?/1?aqO#7_2\|
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: ed 9c 4d de 18 50 94 85 ce 94 01 a8 fb 09 f6 35 13 a7 8e 7b 35 62 fa d5 03 3a 7c aa b1 07 24 fa d8 d4 7d 7c 2c 33 51 b1 8e b6 7b 84 bc 18 f1 b1 6e cb 9b fd 70 8d c7 e9 1d 19 66 45 7a b2 fc bc 31 f5 ea a8 0b 2e 2a 82 68 2b 0a d5 52 a1 99 05 96 e0 6c c3 7b 1e 7a ff 40 f5 6d fb 7a 88 dc 60 4d 08 83 9d 2c e8 a8 da 61 79 e4 f5 ec 6d 3b 4e 5f 8b 14 d8 37 f6 a4 92 3b 80 bf 88 21 26 4d ba 5d b1 a9 00 01 c7 13 71 69 52 97 a3 ac d5 a4 0f bb 62 03 e3 f4 bb 0b 24 4c be 91 c4 17 70 72 f4 0b 81 5e 15 14 73 90 c5 3b 51 01 18 0e f6 f0 6a 14 68 f4 7a ff cf 75 30 17 50 42 81 8c ea 4e a6 e4 3b f8 69 e4 cf ba 5e 39 f9 8a f6 35 52 95 bf ca 6d dd 0b 60 6a da 9f 3c f0 3a 71 16 61 a6 50 64 49 90 b3 8c b4 8e a3 8e 9b ea 96 d4 c3 04 49 11 96 ab 89 b8 b4 aa ab 55 c4 db 7b c2 f5 60 Data Ascii: MP5{5b:\|$}\|,3Q{npfEz1.*h+Rl{z@mz`M,aym;N_7;!&M]qiRb$Lpr^s;Qjhzu0PBN;i^95Rm`j<:qaPdIIU{`
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 29 44 a4 bd 74 9f 13 b8 af fc c4 47 15 dd ff 6c c4 f8 db 38 16 fb 6a 14 af 86 99 e8 c8 1c 30 ee 1d e2 49 b6 d2 b0 de d2 c0 84 2d 42 da 55 55 aa e2 6e 2d 22 b5 fe 5a 60 ad 31 5a 50 9a bd f4 59 e6 ec fb 07 c9 f6 cc 6c 80 b6 aa b3 c1 8e 70 37 98 f4 7a 9d a3 76 52 ba 7b b3 cb 2a 12 3d b4 26 76 6b f2 d7 06 4a 2b 6b 7e 9d fe c7 cb 99 c4 26 70 80 42 42 fa 5b c3 b3 0b 6f cb 05 48 57 46 83 04 54 46 47 fd c6 73 cf b3 ab 9c 1f ff e4 a3 53 bf e3 f3 7d 97 55 92 a9 e0 9e df ad 8d 48 00 0e 38 9b 89 94 a2 b7 4f ca 1d 29 bf e5 c4 36 66 06 90 56 9e fb b5 4c 9f 1c a6 4e 31 14 4c 13 4a e7 17 7b 50 fd e0 34 12 f3 a8 d9 7d c1 d5 cc 17 9c 6f 4a de e2 1c 8b 9c 45 08 b6 76 23 8b 82 da 2d 5a ff 05 ff 79 f1 5b 98 bc 06 6f 07 a7 8d 1c 90 a0 68 82 51 34 e5 38 e8 59 33 33 aa dc 44 33 Data Ascii: )DtGl8j0I-BUUn-"Z`1ZPYlp7zvR{*=&vkJ+k~&pBB[oHWFTFGsS}UH8O)6fVLN1LJ{P4}oJEv#-Zy[ohQ48Y33D3
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 3f d3 0c cf 5b 93 75 e7 3f c5 22 52 bf a1 bf 36 8f 20 28 31 97 be 85 fd 15 6e ec 40 27 a2 0e ef f1 c5 25 89 81 9d 42 5b 0e cf 79 0e 0b 3e 2a 3c c1 f2 e1 5c 7c 16 58 a2 fb 46 d3 3f 02 d1 b1 3b 5f e9 d0 84 3a 99 a0 13 12 48 f0 9e 39 23 51 a2 a6 06 71 6c af c1 5c d2 6c 78 51 9a 6d f4 d7 e1 76 18 bf 51 ff b0 1b cc 04 df 34 76 d0 d0 5f 02 63 d8 a1 29 5a 8c e7 42 39 d6 6b 76 8a e5 1c d8 8f 4d 36 da 05 fa c6 14 61 39 fa 41 2b 81 88 fb b7 17 ef b5 fc 65 2e d9 af b2 43 65 96 bf a6 9d a6 81 c8 07 3e 82 26 04 e8 fe e6 b5 74 3b 3f 14 e7 ee 59 95 92 df c1 a1 c6 71 e9 a3 b0 af 25 61 16 04 67 01 d5 b4 49 33 59 ad c8 d2 87 a2 e0 f4 36 af dc 83 38 34 35 81 df ec e5 3e a4 bb 81 1f 1c 0b 97 99 f7 12 98 2d c0 bc 99 72 6a b7 86 46 f2 6a b7 86 46 03 80 92 d4 e4 09 21 35 15 af Data Ascii: ?[u?"R6 (1n@'%B[y>*<\\|XF?;_:H9#Qql\lxQmvQ4v_c)ZB9kvM6a9A+e.Ce>&t;?Yq%agI3Y6845>-rjFjF!5
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: d8 88 28 51 34 cb 27 90 aa a1 69 9f 0b 3f d8 6c 0c ab 83 e7 02 df fc ec c0 7d 88 45 2f 36 42 60 2f 38 34 f7 9b 04 40 ad 7a d8 91 83 60 c1 41 06 b7 4e 4f f7 77 f3 6d 65 3c dd ce e4 ab aa fc ed 1e 58 0f 45 12 b7 0b 17 5c de 77 cf 14 b1 b8 6e a2 ee 70 05 68 02 10 12 e1 e8 1b 38 7b 37 bf 28 b3 60 de f8 ee 03 12 bb 09 4a bf a3 a0 a4 42 34 28 9c 31 f3 8d 50 35 0a 0a f1 de 86 fc be ae 30 d5 a6 6a a8 44 1d 56 a8 e0 8e 01 dd 42 df f3 3c 8e 9e f6 f5 46 aa d7 4e 4e 6b ff 2d ce 33 fa e8 4a 69 d7 3c b0 91 fd bd 1c 32 ec 01 b4 86 42 d5 94 5e 73 52 88 23 b1 93 aa 20 44 9f d7 6a d0 e7 59 25 5e 11 c0 4e dd a1 e8 02 55 6f aa 0b 6a 40 9f e7 31 e6 90 e9 9c 35 c9 bf a5 4a 15 36 94 fa 1b 56 65 83 cb ad 4f 96 40 11 fe 53 55 df e0 58 ed a7 49 3f fd 66 1d 24 a0 4b 00 a8 10 63 8c Data Ascii: (Q4'i?l}E/6B`/84@z`ANOwme<XE\wnph8{7(`JB4(1P50jDVB<FNNk-3Ji<2B^sR# DjY%^NUoj@15J6VeO@SUXI?f$Kc
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 65 0f a5 ae 86 68 38 19 a5 1f 0d 80 e9 20 ec bf f5 84 e0 07 a5 76 80 e4 1c 20 d7 43 4f 5b cf 0b ef 0f 50 34 c7 4d 94 93 28 17 13 35 ae 91 fb e3 5e 73 84 7c f7 10 73 d1 3d 90 06 e8 fe 03 15 21 86 3a a0 2c 03 02 41 9f 70 92 fd 83 9d 78 6d 59 e4 3a 3f c8 dd 6a 5c cf cf 15 2c f9 f4 f9 b8 e6 78 a2 b8 09 1b 93 ed 5e 59 19 b6 02 13 bd ae 5d 5a ce 47 87 86 d9 e3 90 0a e7 7f 15 c7 d2 53 09 41 ee c2 ae ea e5 38 8f 00 5e 19 fa e3 fb 36 cc 07 4c 3c 60 d5 44 ad e0 2f 41 e4 9b 01 a5 dc 31 fb 95 a4 56 c3 fb b0 93 60 38 85 19 1b d1 bf 16 17 65 6f 99 7d 2f cb 62 eb a0 a1 98 f5 53 19 13 e8 1f bd 9b f3 38 c6 37 85 d5 1b 58 42 c9 97 db 48 03 4b 30 37 dc fa df 58 9d 00 24 73 0c 50 67 7b 93 c1 d6 8a e0 9f 6b 38 f4 70 36 fa 5e 5a 4e bc a4 42 9d 71 5d 6b c1 9d 80 14 d7 12 a8 80 Data Ascii: eh8 v CO[P4M(5^s\|s=!:,ApxmY:?j\,x^Y]ZGSA8^6L<`D/A1V`8eo}/bS87XBHK07X$sPg{k8p6^ZNBq]k
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: a2 1b aa 59 b8 00 07 db de a9 ba ff 03 eb 52 f1 e0 db 1e 6d d9 92 61 9d a3 ca 73 7b bc bb 13 20 02 a5 71 0a 6a 44 af 98 a2 f6 81 51 df 30 0c c1 39 36 1d 2f 9f d1 cd cc 5c 61 b2 08 42 5c 98 7f 2b 99 2f de 35 13 33 72 b0 cb e5 aa dc 86 ff 27 ac ff 86 c8 01 9d 1a 76 05 f4 83 57 f1 b3 2b d2 1c 64 35 81 53 68 ae 31 e0 4b 1b 02 c5 ed 2d d4 fc 46 3b 43 a2 43 e3 70 4c 2d 18 76 37 40 90 dc e8 a5 30 52 b9 7d b3 78 ed 8e f2 d2 fa d9 27 76 26 f3 b5 cc 72 08 23 fa 9b 88 db f1 7c 62 bc 7a 45 ed 4e 25 d0 e4 c8 af 17 e7 df fc eb 91 7c f3 33 41 bd 05 7b 2e 91 f9 3e f7 63 41 38 6a 89 b3 2d 81 1b f7 c0 7b 6c df 78 bf 37 28 7f 44 a4 f6 10 f6 a4 83 3e a2 6a bb e1 eb 99 67 c9 6d ac 35 a5 57 2e ca 89 85 9d 2c be a5 42 78 a8 55 fc 3e 4a 28 96 5b f8 08 4e 26 5e 58 be 05 a4 99 d7 Data Ascii: YRmas{ qjDQ096/\aB\+/53r'vW+d5Sh1K-F;CCpL-v7@0R}x'v&r#\|bzEN%\|3A{.>cA8j-{lx7(D>jgm5W.,BxU>J([N&^X
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 36 6e 2c fa 4a a8 88 39 f0 99 4f e2 6d 37 9d f6 82 88 03 28 8f 91 92 a4 4d 4f 63 a9 02 48 fa df 6d 46 5d 14 95 d9 f2 59 0e 6b 10 d9 ba 66 63 f5 55 92 17 45 e7 04 01 a9 f8 40 51 66 53 2e 4e 66 bb 6e 43 c2 be b5 e3 38 30 5e 19 21 a5 2f 67 fd c6 ef 6b bc ea ce 39 14 6c 84 ae 62 5f 0c c0 5b 1a c3 5c 8d e7 04 2c e9 a0 0a 31 d0 9e 23 91 bb 33 f1 d7 ef 4e ce 31 44 9d 88 9c 5f d0 98 ad a4 0f 89 48 68 94 c9 77 5d 27 3a 32 08 72 15 c2 b5 de 94 1d 94 a6 8c 4c 19 1b 85 af 7e ea 8a 5f b3 31 0a c8 c6 ab 90 b9 1e 3f a9 b9 5f 37 57 e2 a5 46 b6 19 b0 1d db 7a e4 53 d8 fd ac 33 4c 2f c7 cb 68 11 45 a7 51 b6 69 40 0c 79 7f b9 8b a5 57 58 2b f6 b4 7c b0 f8 d4 e4 24 02 d9 44 4e 0d 4f 10 7f d6 7d f5 2b af 87 99 aa a9 fa 11 52 55 33 e2 82 80 97 69 25 80 6c e2 e1 8f 89 95 75 27 Data Ascii: 6n,J9Om7(MOcHmF]YkfcUE@QfS.NfnC80^!/gk9lb_[\,1#3N1D_Hhw]':2rL~_1?_7WFzS3L/hEQi@yWX+\|$DNO}+RU3i%lu'
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 68 f4 6b 99 2d 71 c0 7a a1 03 48 95 76 67 a6 9f 67 3b 83 86 a5 e5 be a5 78 79 73 6e 2c c3 fc d7 8f 39 93 45 88 93 24 01 18 84 1e 5b d6 a8 3d ef f7 43 7b fe 5f a6 56 0f 03 03 35 95 ae 2b 6a d3 ef 9b 05 d1 ca 67 ec 11 fc 03 40 d4 91 76 2f 68 e1 ba 1e 61 99 b2 1a de f3 06 d8 15 de 9c 98 da f3 3e 16 90 75 e6 3e 36 b9 ce fc 56 98 69 b6 49 18 18 8d 58 fb e1 7c ad 2a a7 e0 dc 19 c9 58 e3 d3 a5 d8 98 ff 59 33 72 43 bb 2c 02 17 d1 4a 54 33 61 12 23 e6 9b c5 19 01 09 c7 5a c7 3c 47 10 5b 84 b6 f4 4a b7 34 cd 6c 41 9d 31 e6 02 b1 fb b7 36 07 17 51 86 c9 d9 32 ef 6f 6c e1 69 53 5b 7b 37 4b 82 5c 70 e5 57 57 98 c9 e0 31 53 24 ea b4 bb 31 15 12 95 46 a7 3c 61 04 bd fe 2f 19 3d fc d3 3d 8c 2b 6e 13 2c 5c 25 b7 0b 71 34 de d4 bd f3 d8 05 ac e1 3c f9 59 e0 56 3b 92 d7 a8 Data Ascii: hk-qzHvgg;xysn,9E$[=C{_V5+jg@v/ha>u>6ViIX\|*XY3rC,JT3a#Z<G[J4lA16Q2oliS[{7K\pWW1S$1F<a/==+n,\%q4<YV;
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 63 34 15 80 e2 86 99 86 86 53 45 a4 03 40 6c 8f 52 58 93 b0 0d 7c ed ca ff 7b b5 95 4e 62 92 03 e1 0e af d8 af ff 1b 2b 56 b1 35 9a 08 7e ce 00 41 4c d1 9d cf 1d 2a 5f 98 1c f4 fa 32 b4 2b 40 5f a3 15 38 17 26 d9 5e 17 a0 74 1f 2e 45 94 1c 71 66 22 d4 17 d7 f8 14 72 4f 5f 77 71 c0 fe ff ff f3 5e 83 f0 dd 65 1c 4b b3 53 38 bd 16 4b 70 8a c7 c2 b6 3f 39 93 65 88 d6 30 09 fa 7d 43 5a ed 33 8a 62 3c 32 48 b1 11 ec 96 ca 23 66 df 8b 7d 29 22 6c dc 81 18 c5 bb 92 11 41 b1 ce 45 9f 39 85 83 21 6a 32 47 1a 23 00 20 a0 92 d9 64 59 c9 6f 19 1f 9e 43 74 99 e7 97 cc 47 5d f5 dd 4d de 39 4e 26 ae 9a 99 9b 15 ae 25 02 7d 85 ca bf e2 30 0e 7c dc 7a b0 3d 74 31 50 31 f6 a0 31 11 11 7d 31 9c cc 16 aa 96 56 37 e8 d9 b3 58 6e b7 f6 57 ea 04 bc a0 0b ef 82 70 ea 98 83 0f 09 Data Ascii: c4SE@lRX\|{Nb+V5~AL*_2+@_8&^t.Eqf"rO_wq^eKS8Kp?9e0}CZ3b<2H#f})"lAE9!j2G# dYoCtG]M9N&%}0\|z=t1P11}1V7XnWp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49954	74.125.136.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1016	OUT	GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	648	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 11258 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:55:37 GMT Expires: Fri, 19 Apr 2024 15:55:37 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 665 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	607	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 18 17 1a 1d 1d 1b 1f 1f 1d 20 1f 1f 1f 1d 25 1d 1d 1f 21 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2b 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2d 1b 1b 2d 57 3d 35 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 45 10 00 02 01 02 03 04 06 07 05 07 02 06 02 03 00 00 00 01 02 03 11 04 12 21 05 31 41 51 06 13 22 61 71 91 32 52 81 92 a1 d1 d2 14 16 53 b1 c1 15 23 Data Ascii: JFIF %!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W--W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"E!1AQ"aq2RS#
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 71 3e 30 03 2f d9 df 70 ea 1f 70 dc 67 a5 9f c6 20 65 ea 1f 71 1d 43 ee 1b 87 4f 2f 8c 60 c9 d4 be e1 d4 be e1 b8 9d 3c be 31 83 b5 80 e8 c6 23 11 42 78 88 4a 9a 84 73 7a 4e 49 ca ca ee da 1c a7 41 f7 0d c3 a7 97 c6 20 64 ea 5f 71 b2 b6 64 f2 67 bc 6d e2 ee fe 03 70 e9 e5 f1 a4 0d 97 82 92 e3 1f 88 a7 81 9c 9d 93 8f c7 e4 37 0e 4c be 35 81 bf fb 22 a7 38 79 bf 91 67 b1 6a de d7 87 9b f9 0d c4 e4 bf 1c e0 74 aa ec 4a b0 69 37 0b bd 77 bf 91 92 7d 1e ac 96 6b c1 ae e7 2f 90 dc 39 32 f8 e4 83 7d ec 8a 8b 8c 3c df c8 d8 8f 47 6b 38 e6 cf 4a df dd 2b fe 43 70 e4 cb e3 90 0e a3 d8 35 56 99 a9 f9 cb e4 45 5d 87 56 1b e5 0f 63 7f 21 b8 bc 99 7c 73 01 d7 a5 d1 da d3 57 52 a7 ed 72 f9 15 7d 1f ac 9d 9b 87 9c be 43 70 e4 cb e3 94 0e 9d 3d 87 56 52 ca a5 0b f8 bf 91 Data Ascii: q>0/ppg eqCO/`<1#BxJszNIA d_qdgmp7L5"8ygjtJi7w}k/92}<Gk8J+Cp5VE]Vc!\|sWRr}Cp=VR
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: f7 64 92 ff 00 d0 4b 1e 82 a6 cf 8d 08 b9 65 bc a8 55 93 ab 17 69 c5 d3 93 96 4b a7 a5 bb 1b ff 00 af c0 c6 b2 c2 96 16 6e 14 a4 e6 a4 e7 4f 23 cf 51 67 b2 f8 27 6d c7 1e 78 da b3 cf 9a 4d f5 8a 2a 7f d4 a3 6b 5f c3 2a f2 36 69 6d 3a b1 54 d2 50 6e 9a b4 24 e0 9c a2 ae de 8d f7 b6 47 4c 65 74 e9 d0 51 a6 a4 f2 4e 2f 0d d6 b8 38 2e b1 37 78 de 2d 25 a2 92 4e f7 d1 1d 1d a1 46 52 d9 d8 65 1b 5d 27 2b bb d9 76 1c bf 24 cf 33 47 19 59 4a 9c 93 6e 50 4a 30 e3 a6 bd 9f 0d 5f 99 e8 b6 fd 49 47 03 43 2c 5d 3d cb 2d ef 6b c1 a7 1f 27 63 96 7e 63 a7 79 67 fb ea b5 f0 51 ea f6 66 2a ba 77 9c aa 46 8b 92 e1 0d 2f 6f 1b 96 86 03 11 85 c6 d2 96 1a 19 e4 e8 d3 94 a0 a7 18 b9 5e 36 9a b3 7a ab a6 fc 8e 3e ce c6 52 86 78 57 a4 aa 53 a8 ac da 4b ad a6 f8 4a 0d fe 5c 4e 96 Data Ascii: dKeUiKnO#Qg'mxMk_6im:TPn$GLetQN/8.7x-%NFRe]'+v$3GYJnPJ0_IGC,]=-k'c~cygQf*wF/o^6z>RxWSKJ\N
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 42 64 ca ac d8 69 5a 4f be 13 5f 06 68 d5 d6 9c 8d 9b db 71 af 35 d8 97 81 1a 99 39 64 95 04 74 da 41 00 68 da 41 00 68 da 41 00 69 36 90 40 06 d2 08 2f 4e 0e 4d 25 c4 8d 4e ea 9b 14 30 d2 9b dd a7 33 72 96 12 9c 57 69 a6 cc 95 31 b4 e3 a2 d7 c0 e3 73 b7 b6 31 ea c3 83 24 de 75 6a 18 38 c7 7e af bf 81 b0 ce 64 f6 94 9f a2 92 35 a5 89 9b e2 63 a5 9e 5d ed 75 eb f0 f1 ed 8c 6b a1 62 41 ea 7c dd 22 c0 92 00 12 00 04 5d 14 2c 88 de 2c 91 3d 3f 4a df ee 30 9f da ff 00 24 79 78 f0 3d 37 4a e5 fb 9c 22 fe 86 ff 00 23 8e 5f b4 75 be bf df 4f 32 ca b2 cc a3 3a c6 72 a8 65 49 21 9a 71 a0 00 a8 83 3e 13 f8 91 f1 29 4e 94 a5 ba 2d f8 23 6f 0d 80 9e 65 27 d9 5f 13 37 29 3c b7 86 19 5b da 3d 46 c9 af 9a 9e 56 f5 8b f8 3d c6 8e d9 52 a9 46 74 de f8 d4 cd 0f ed bb 56 f8 Data Ascii: BdiZO_hq59dtAhAhAi6@/NM%N03rWi1s1$uj8~d5c]ukbA\|"],,=?J0$yx=7J"#_uO2:reI!q>)N-#oe'_7)<[=FV=RFtV
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 16 f9 34 97 8b 76 35 38 78 cf 4e 77 8f c4 bf e4 f6 1b 2b 09 95 d2 8c df 6a 4a 2d e6 e0 db f9 18 7a 4b 36 f1 ad 70 8c 52 ee 66 e6 3a 49 56 b7 f4 a6 8e 2e 36 a3 95 69 5d b7 a4 55 df b7 e6 74 c5 78 9f ae f6 c3 17 66 63 a9 a4 89 ab b8 ad 47 c4 57 91 d1 e8 ed 6c 98 ea 4f 84 f3 41 fb 62 ed f1 48 fa 02 8a 69 a6 93 5c 53 57 47 ce e9 61 1f d9 a3 8b a7 6c d4 6a ac ea fa d9 59 c5 f9 9d 6c 5f 48 65 d7 2a b8 59 4b 23 8c 73 42 6a f1 cd c6 dc b8 6e 31 66 cd 3b 18 ee 8e 61 ea ab c2 3d 54 b8 38 7a 3e d8 ee 3c ae 17 15 5b 03 89 9a 8c 52 97 a1 28 b5 75 2d 74 b7 13 ae ba 64 e2 bf 79 41 f8 c2 57 f8 33 4b 6b ed 1c 3e 3a 0a a5 17 d5 e2 21 b9 4a d1 94 97 2e f6 b8 09 2c 24 ae e6 03 a4 d4 aa 69 55 75 52 e7 7b c3 cf 81 bf b4 30 34 f1 54 72 b6 b5 d6 13 8d 9d 9f 34 72 30 90 a1 b4 70 Data Ascii: 4v58xNw+jJ-zK6pRf:IV.6i]UtxfcGWlOAbHi\SWGaljYl_He*YK#sBjn1f;a=T8z><[R(u-tdyAW3Kk>:!J.,$iUuR{04Tr4r0p
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: e7 70 52 9c 55 b8 36 b4 35 31 55 65 56 6e a4 ed 99 da f6 49 2d 15 b7 2f 02 db a7 a6 70 72 f0 c9 1a 16 d5 ab be 67 a0 c3 74 79 d4 a7 19 c6 a4 1c 65 14 d6 fe 27 32 58 8c d0 85 e9 e4 59 52 5f d5 6e 27 b2 e8 9d 04 f0 30 cc bf 9a a2 5e 19 9d 8d 47 2e 36 1c 98 f3 3c f4 29 e3 70 0f b1 3c d4 fd 59 37 28 78 73 46 f6 d0 c4 d5 c5 e1 5b 9c 63 4e 8a cd 3a 8d 4b 34 ad 1d d1 dd a3 6f f2 3a 9b 7a 93 50 8d 28 3b ce a4 ad 15 c6 cb 56 fc 0e 3f 48 70 51 c3 60 24 a3 7c f3 70 8c a5 77 cd 5d 19 ca 77 72 96 65 37 5e 5e 82 cd 63 7b 19 0c b8 5a 4b d7 9c e4 bc 15 a3 fa 33 57 09 1b 44 e8 ed 34 94 30 b0 e3 1a 4e 4f 4f 5a 6e 48 d3 36 f7 68 42 16 48 8a cb b2 fc 19 37 d4 55 f4 5f 83 35 a4 71 48 24 82 36 90 41 20 00 01 40 02 06 c2 48 04 54 92 00 69 22 c4 02 2a ca 37 19 48 26 e5 11 61 60 Data Ascii: pRU651UeVnI-/prgtye'2XYR_n'0^G.6<)p<Y7(xsF[cN:K4o:zP(;V?HpQ`$\|pw]wre7^^c{ZK3WD40NOOZnH6hBH7U_5qH$6A @HTi"*7H&a`
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 20 12 41 21 52 00 23 4b a4 49 22 c6 5e 8d 20 12 40 4a 86 41 6b 11 60 96 20 13 62 0a ca 19 7a ce f3 97 8b 2a 18 4d 20 00 11 0c ad 8b 10 ca cd 88 00 15 84 05 16 dd 96 f6 49 b5 b3 e9 de 4e 4f 87 e6 12 ba 29 12 45 c8 6c ae 6a d5 7a 58 c0 b7 a2 f5 27 a9 45 bc 2a f8 ad c6 24 65 c5 fa 3e c3 12 29 1b 18 4c 54 e8 54 8d 5a 6e d2 8f 93 5c 53 3e 85 b2 76 94 31 34 55 48 ef dd 28 f1 8c b8 a3 e6 e6 e6 c9 da 32 c2 d6 55 23 ac 5d 94 e3 eb 47 e7 c8 c6 58 ec d6 df 4a 06 1c 26 2a 15 a9 c6 a5 37 78 cb 77 c8 cc 73 60 06 3a 93 6b 72 35 a5 8e b7 f2 86 a6 36 f8 6e 83 45 6d 15 cb e0 cc f1 ae f4 bc 5a f6 05 b8 65 3c b3 82 13 d0 90 c0 01 cc db 3b 66 18 58 db 49 54 6b b3 0f d5 f7 02 4d af b6 76 bc 30 94 f3 3e d4 df a1 05 bd be 6f 92 3e 7b 88 af 2a b3 94 e4 db 94 9b 6d b2 d8 bc 64 eb Data Ascii: A!R#KI"^ @JAk` bzM INO)EljzX'E$e>)LTTZn\S>v14UH(2U#]GXJ&7xws`:kr56nEmZe<;fXITkMv0>o>{md
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: d1 95 4f e6 dd 15 ce 4f 71 e1 e9 53 72 6e 52 7c 5b 6c dd da fb 4e a5 59 65 ac a2 9c 24 fb 30 dc 9f 7b bb b9 cc ab 89 94 95 b7 2e e3 a6 31 ac f2 df 84 62 6b 66 76 5e 8f 03 1d 8a d8 b1 b6 12 a4 f9 99 23 5e 4b 73 31 00 ae ae cb 84 aa d4 ed eb 4e 29 ca 7c 3b 3f fb b1 85 61 21 2c 3d 7a cd 7a 33 4a 0e fb ee de 9f 91 bf 82 8f 57 80 af 55 e8 e7 96 11 ef b3 ff 00 26 0c 4f 67 67 50 4d 6b 2a b2 7f 0b 11 9f 6e 2b 20 f5 18 2e 8c 53 ad 42 15 5d 49 c6 53 8d ed 64 d2 35 b1 9d 14 ad 0d 69 b5 55 72 5d 99 79 3f 99 36 eb cb 5c 00 66 c4 61 a7 4e 59 67 17 19 2e 0d 58 c2 56 7c 04 90 00 90 88 24 09 20 02 34 90 00 02 48 24 2a 50 20 90 d4 7d b4 30 0f 9a f0 0e 2b 91 cf c4 ec 2c 2d 5f 4a 8c 53 e7 15 91 fc 0e 80 12 b5 8e 79 63 df 1b a7 96 c4 74 32 2d b7 4a b3 8a e1 19 43 37 c6 e7 9e Data Ascii: OOqSrnR\|[lNYe$0{.1bkfv^#^Ks1N)\|;?a!,=zz3JWU&OggPMkn+ .SB]ISd5iUr]y?6\faNYg.XV\|$ 4H$P }0+,-_JSyct2-JC7
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: ba 2b 9c 8f 2b 88 a4 fa ac 2c 25 2d 6b d4 75 6a 3e 0d b6 92 f2 bb 35 8c f6 e7 9e 5e 98 f6 9c e4 a8 c1 4f f8 95 a5 d6 d4 f0 dd 08 f8 23 96 74 36 f5 4b e2 aa 2b 59 42 d1 8a ee 49 58 e7 9d 58 9e 00 00 10 7b 8e 8e e1 55 3c 2c 1e b7 9a cc fd bb be 07 87 3e 8b b3 e1 96 85 28 f2 a7 05 ff 00 6a 31 9b 78 46 c5 89 24 58 e4 ea 80 4d 80 10 2e 48 02 01 26 86 d8 da 51 c3 d2 6d be db d2 31 e2 fb fc 0a 8e 67 49 f6 ae 44 f0 f4 df 6a 4b b6 f9 45 f0 ff 00 ce 67 91 66 5a d5 65 39 39 c9 de 4d dd b6 62 3a e3 34 e5 95 da 6e 08 06 9c d2 08 2f 4e 0e 52 49 2b b7 b9 05 44 62 db 49 26 db dc 96 f6 7a 1c 5b 58 5c 14 30 e9 fe f2 6f 35 4e 7a f0 fd 0a d3 a5 0c 04 14 e7 da c4 c9 3c b1 de a9 df 8b e6 46 1a 86 48 bc 66 31 b9 49 fa 10 96 f9 3e 1a 7e 85 62 f7 5d 45 e1 70 0e 4f 4a 95 9d ad c7 Data Ascii: ++,%-kuj>5^O#t6K+YBIXX{U<,>(j1xF$XM.H&Qm1gIDjKEgfZe99Mb:4n/NRI+DbI&z[X\0o5Nz<FHf1I>~b]EpOJ
2024-04-19 14:06:42 UTC	611	IN	Data Raw: 39 35 fa 45 5e 54 fa b8 a8 52 86 ec b4 d3 8d fc 6e d9 83 07 b5 a7 46 4e 71 85 39 4b 5b 4a 69 c9 af 0d 46 aa 75 23 bd 43 0a a9 ff 00 fb 78 e7 79 3d 63 4d fa 52 7c 1b 47 3b 1d 8c a9 88 a9 9a 57 7c 21 15 ba 2b 92 47 37 13 b4 6a 55 9b 9d 47 9a 4f 8b 10 c7 ce 32 52 56 4d 34 d3 d7 7a 77 46 b4 4e 26 2f 7d d1 fe 8e 3a 31 eb 6a af de b5 a4 7d 45 f3 3a ee 9b 5b d1 e2 e5 d3 fc 5b 49 75 78 7d 3f a2 7f 51 57 d3 dc 5b ff 00 4f 0f ee cf ea 39 5c 2b 78 f1 e4 7b 42 ca 93 6a e8 f0 d2 e9 c6 25 ef a5 87 f7 67 f5 16 87 4e f1 6b fd 3a 1e ec fe a2 74 eb 57 8f 8b df e1 68 eb 99 9b 47 ce 17 4f f1 7f 87 87 f7 27 f5 13 f7 ff 00 17 f8 78 7f 72 7f 50 e9 e4 e3 97 13 75 f4 60 7c e7 ef fe 2f f0 f0 fe e4 fe a1 f7 ff 00 17 f8 78 7f 72 7f 50 e4 a9 cf 1f 46 68 8c 8b 92 f2 3e 75 f7 ff 00 17 Data Ascii: 95E^TRnFNq9K[JiFu#Cxy=cMR\|G;W\|!+G7jUGO2RVM4zwFN&/}:1j}E:[[Iux}?QW[O9\+x{Bj%gNk:tWhGO'xrPu`\|/xrPFh>u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49957	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1081	OUT	GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6438 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:18:04 GMT Expires: Sat, 20 Apr 2024 13:18:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 2918 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	722	IN	Data Raw: 52 49 46 46 1e 19 00 00 57 45 42 50 56 50 38 4c 12 19 00 00 2f 3f c0 0f 00 4d 30 70 db 36 6e 34 92 bb 23 f0 16 d1 ff 00 66 f6 98 a4 dd 98 16 e6 63 bb 3c 8a 42 2b 47 bd aa a5 b9 9e ba 3f 1b 60 c1 28 92 24 45 15 f7 42 2d e7 5f ce c6 29 a0 85 c1 d5 c1 36 92 24 27 8d 96 01 90 7f 6c 14 d6 9b 02 75 06 db 48 92 9c 0c 1a 13 f2 4f ee e5 1e 85 ad 75 ff 03 00 7a 83 11 56 1f 57 ec 10 26 08 fa a4 f5 59 ea 53 3c 78 24 66 31 1b a8 79 a9 f9 0b 07 08 e2 d4 19 73 8d 4d e2 93 fc 5b fa 00 80 45 d8 ac b7 04 56 6b e9 7f 00 b1 0b 47 ad 3d 15 01 f1 82 6b d4 7d 39 31 89 3b 9e a2 2b a4 5e 0b e0 9e e4 ba ba b7 5e e2 97 3a 44 1e 39 5c c9 ce e0 7f db 3e 43 92 fc ff bb 23 22 59 6c 4f 77 d7 68 bb 07 cf ed f5 70 ad a7 6d db 36 7e b2 6d db b6 39 66 8f 8d b6 ab 59 66 66 46 3c 9e a8 ac aa Data Ascii: RIFFWEBPVP8L/?M0p6n4#fc<B+G?`($EB-_)6$'luHOuzVW&YS<x$f1ysM[EVkG=k}91;+^^:D9\>C#"YlOwhpm6~m9fYffF<
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 63 c4 27 c4 24 e2 fa 9c 6e ab 72 57 d1 5d 9b f6 8f 11 b7 ae e9 0a c7 d3 de e9 1d e9 d8 18 b2 5b c8 bb 11 1e 97 35 c3 62 67 a1 b5 25 cc b4 cb 2b 61 10 41 ba 09 87 1d a2 8d 91 35 d3 87 74 a8 ad 8d 38 b6 e1 d4 c8 2e bf 4f e8 3a 43 13 04 2d 40 00 02 92 ab a8 e3 2a 6d 84 27 10 10 9f 12 0f 25 d3 63 88 29 c4 24 e2 65 62 62 3a 5e 47 bc 4e 3c 44 3c 42 7c 60 d5 8a b4 da dc b9 97 1b 7d 94 7a 0d 70 d4 32 58 83 e0 4e ad ae 94 35 9f 2d 6f f4 b3 9d be 72 19 af ab 37 7c fc 69 ee b7 b3 56 58 0e 30 69 7f 1f d5 91 36 3b 02 6d d4 cf 8c cc b9 ba db 45 46 b1 21 a7 09 28 40 00 28 b5 c2 60 fc 16 2e 25 10 04 84 27 ee ac ea c6 a2 9b 42 b4 11 4b 88 47 5d 5e 28 58 3b f1 09 f1 05 f1 a4 ab b7 87 93 55 53 eb c3 c4 91 b4 87 28 0b 55 08 41 9e 8a 0a 54 05 f2 ed a2 9e d7 b8 11 db 59 2f 94 Data Ascii: c'$nrW][5bg%+aA5t8.O:C-@*m'%c)$ebb:^GN<D<B\|`}zp2XN5-or7\|iVX0i6;mEF!(@(`.%'BKG]^(X;US(UATY/
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 7b f4 73 3f 40 b0 51 2f 49 ad f4 53 5a b1 c9 ee 04 f0 4b 83 21 d7 f3 f3 fe 82 36 d8 f9 e4 19 58 4a 85 12 19 de 73 65 36 1b 57 6a 34 cd 2f e2 cf 7f 0f db 2a 83 25 73 b2 8d e8 44 41 d5 d6 a0 17 ef 4f 3b 4f d8 20 a1 04 82 a0 e1 67 f6 34 6f 1b 0c 03 58 a3 8d 49 73 81 fa 00 3a 2c ea 66 bc df e9 89 c2 ea 99 ca 62 75 f1 e6 18 6b 51 95 4b 92 03 d1 81 7d 07 8a 7e 14 5a 35 d5 98 92 f8 90 d7 c1 2d c9 9e 47 a2 b6 fd c5 e9 d0 ee c5 8b df 39 71 a5 af 87 40 d0 8c 20 08 6e 62 b2 cb 9f fe 04 a4 e2 2a ae f0 27 00 a5 eb e7 fe b2 f2 7e 60 40 0d c0 c9 dd fe 3a 3a b5 89 b5 90 2e 91 f2 e4 a5 a8 44 55 40 17 e7 6a 15 79 bf 88 4c 8e 29 fa 51 73 09 81 a6 ad e2 4a a5 a2 9f 52 5f 07 9b f9 10 2b c0 d7 56 1e 83 21 43 96 fb 6d 23 19 cc f9 b2 63 07 dd 41 33 97 4b 39 c2 45 08 c0 44 44 3f Data Ascii: {s?@Q/ISZK!6XJse6Wj4/%sDAO;O g4oXIs:,fbukQK}~Z5-G9q@ nb'~`@::.DU@jyL)QsJR_+V!Cm#cA3K9EDD?
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 10 22 39 e1 25 38 42 26 88 60 41 a5 58 35 86 76 a3 74 a6 9c 8a 97 da 78 d5 47 31 91 c8 c7 6d af dd 95 a4 6f a7 70 a8 46 d2 60 63 b6 1a 14 e2 2f 05 c4 21 52 f2 00 c0 de d0 c0 27 27 8f 8c 3f b7 aa ff c5 88 86 03 63 52 7b 27 25 19 44 a5 ae a3 99 b2 32 6f 88 e4 01 91 99 e5 81 14 81 52 09 2a 83 0b 6c d9 6a 44 ec 6c 14 23 e3 11 a7 33 6c 89 26 e6 b4 2c 41 95 83 3d 05 52 d2 c4 6c 0f 57 fa 4f 05 a8 ce c8 15 7a 00 82 f7 5f b4 f6 11 5f f9 6e 1a 4f ae d6 73 e8 36 91 da e8 fa ce b5 c9 49 a3 75 b3 ab 1d 9a 29 34 81 9c b0 48 04 50 14 69 60 50 44 40 66 ea 9f b1 ea 97 fe d3 64 3c 91 b6 2a 36 44 26 d1 f5 18 33 58 85 fd fd 44 03 dd df d7 84 2e d6 97 2c f1 27 e0 6a 4d 69 09 40 f0 ae bb 87 7f 79 5b b2 e6 60 9a 3b a9 05 69 ed 81 84 b2 65 d8 aa 5b 3e b6 b2 66 b7 a4 d5 ac e6 09 Data Ascii: "9%8B&`AX5vtxG1mopF`c/!R''?cR{'%D2oRljDl#3l&,A=RlWOz__nOs6Iu)4HPi`PD@fd<6D&3XD.,'jMi@y[`;ie[>f
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 1b d1 0a 47 11 c1 24 2c 02 d0 10 34 c1 90 6a 2e 30 13 df 3b fb 44 1d 13 e3 7f 9f 69 9d 6c bb 1d ff 5f 81 d0 5a a0 0a 96 4e 93 cf 26 19 3b 36 77 16 2d c5 d0 79 29 39 27 5c 5c db b2 b8 f3 f5 43 c3 7a 97 53 7f 4d 07 b8 4b e5 95 74 c5 ec 12 b1 6d 66 3a c6 d9 4a 32 fe d7 ea 72 05 19 61 7e 30 9e 30 5b 09 22 4d 1c c7 16 59 66 2a 20 33 61 81 28 c9 22 b9 a8 01 4d ca 31 ce c0 e2 b5 33 6f 89 78 1b b7 db 6b 3f d1 a7 f7 fd 78 72 fc 7e 4b 3b d5 54 07 09 93 f9 3f b0 4c f1 f1 59 dc 50 14 58 5d ba f4 a5 d0 7f 83 b6 7a 64 73 ed 53 45 fb f9 7f 0d fb f2 8f 97 b9 45 ed f7 17 c3 3e 97 54 cd 73 c7 8a f9 c5 e0 a8 c7 b5 9c 61 bd c4 ce 26 92 4f 82 f6 c4 c7 05 85 ea 01 71 2c 1c 74 c8 8c 1c 2a 48 11 ca c4 88 9e 99 30 2f 06 5e 77 b9 3d bb fd 75 df cf 46 5f 38 ec 93 cd 2f d7 5d f7 d7 Data Ascii: G$,4j.0;Dil_ZN&;6w-y)9'\\CzSMKtmf:J2ra~00["MYf* 3a("M13oxk?xr~K;T?LYPX]zdsSEE>Tsa&Oq,t*H0/^w=uF_8/]
2024-04-19 14:06:42 UTC	696	IN	Data Raw: bf 81 dc c8 91 3d 66 9e 33 22 cd 92 22 81 5d f3 dd a3 be 73 3c d6 6a 0d 5b 0f 6b bf a5 ef b5 4e b6 2a e0 80 d3 70 02 86 48 59 b8 a4 b5 5c d1 78 20 02 0a 20 24 0a 96 43 a8 72 50 09 16 40 32 04 02 99 08 22 19 4a 46 2e 38 66 08 ef 18 bd 82 6e 8b 93 1b 51 f5 de ac b0 e2 04 10 06 66 54 46 44 35 1c ab e2 e0 52 ad 3d 16 28 a0 44 92 4a 6f 08 96 ba 3c 05 46 d7 82 e9 d0 df 7b 8c e5 0e 46 00 77 c6 ae c2 ac aa d5 1b bb c3 e6 63 37 3e d5 e1 6b 52 20 0c 35 54 a0 1a e0 a8 00 0a a7 a1 ad e4 08 15 52 01 84 93 c5 e0 58 03 6e 9b 6e 1b 0c f1 12 d1 4a 90 03 02 49 20 04 10 86 4a a4 13 98 6b eb fc 36 dd fd 4f c1 3a 7d e0 b8 ff 9f ef cb 58 26 2c 12 22 0c 32 8a 95 71 7e 4d 44 29 3c 11 12 c8 41 89 d4 81 17 c1 26 6c 69 3a d6 cd 64 cd 5b e3 ec aa 55 19 86 1b 98 f3 a1 6a 60 77 fb 89 Data Ascii: =f3""]s<j[kN*pHY\x $CrP@2"JF.8fnQfTFD5R=(DJo<F{Fwc7>kR 5TRXnnJI Jk6O:}X&,"2q~MD)<A&li:d[Uj`w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49959	74.125.136.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1016	OUT	GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39997 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:56:03 GMT Expires: Fri, 19 Apr 2024 14:56:03 GMT Cache-Control: public, max-age=7200 Age: 4239 ETag: "1689932701" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0f 10 0e 0f 0f 10 10 10 0f 0e 0e 0e 10 0d 0f 0d 10 0e 0d 0e 0f 10 0d 0d 0d 0f 0d 0e 10 0d 0d 0f 10 10 0e 0f 0d 0f 0d 0d 0f 10 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 16 15 12 15 15 17 15 16 15 15 15 17 17 15 15 15 15 15 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 ff c4 00 55 10 00 02 01 02 03 04 07 03 09 05 04 07 06 05 03 05 01 02 11 00 03 04 12 21 05 06 31 41 07 13 22 51 61 71 91 32 81 a1 08 14 23 42 52 b1 c1 d1 Data Ascii: JFIFh"U!1A"Qaq2#BR
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 2a 4b fd 0e dd eb ea 7f 2a f4 36 23 f7 af a9 fc aa 1d 63 79 ab 3a 97 f2 51 74 54 c2 6e f5 c3 cd 7d 5b fa 6b 6a c6 e8 5d 3c 0a 7a b7 f4 d7 0c ac 1c 54 85 3c 87 82 5d a2 9c 2c f4 79 7c fd 6b 5f cc ff 00 d1 5b 2b d1 86 24 fd 6b 5f cd 73 fe 9d 40 d5 44 3f d8 29 8a 39 8f fa 94 8d 45 59 1b 33 a1 9c 65 c7 44 46 b2 ce ec 11 57 3d c0 4b 31 80 35 b6 00 f7 9a b2 ed 7c 8c b6 b1 00 f5 d8 00 63 d9 37 b1 32 3c 0c 61 88 9f 22 47 8d 0d a9 89 db 39 42 4a 79 23 fd 42 cb 9b 28 ab 87 6a fc 9d 36 8d a7 36 dd ac 07 5e 2b 9e f1 d3 91 04 59 82 a7 93 0d 2a 3e f7 41 d8 c1 c5 ec 7f 35 ef fa 35 59 af 80 63 50 56 8a 19 c8 b8 69 55 Data Ascii: ("((B(("((B(("((B(K6#cy:QtTn}[kj]<zT<],y\|k_[+$k_s@D?)9EY3eDFW=K15\|c72<a"G9BJy#B(j66^+Y*>A55YcPViU
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 96 60 12 5d e1 44 e6 2d 97 c3 d9 9e fd 38 eb a7 89 12 bd 2b 6c 4d 2d ba 67 cc d7 32 10 19 a2 5a 48 23 5e c9 9e 4b 13 af 75 46 63 36 0a 3a e5 17 5b ad 0b da 65 b8 c5 d5 88 fb 40 c7 74 80 66 20 1d 0c d7 92 aa 0e 13 38 38 7c fd 16 fd 2b 9a 21 6d 8f cb d5 45 e3 36 8a 96 50 33 7b 26 61 e5 a0 02 4b 48 2d 00 00 78 f3 cb ce 33 40 de da b6 43 43 b2 06 04 e8 f7 c1 24 0e 0a 99 bb 19 8f da 7c ab 1d f5 8f 68 6c 35 b4 ac 2e 5f 24 99 92 dd 6b 13 97 b8 c3 49 04 b7 09 8e 1a 6a 2a a6 db 38 69 3c 3c 75 1d fc 35 3f 78 f1 aa c6 53 d1 b6 fb 29 1d a7 8e 0d 70 b0 5c b2 64 ae 60 c2 58 99 82 24 15 83 c8 91 a0 8d 0d 60 bb 83 ca 73 28 ec 9f 81 d3 4f 2e ea 8e bb 33 03 90 d7 f0 f7 f3 f2 a6 ac 0e 1f b0 b3 dc 27 de 28 91 fa 2c 53 4c 6e a1 62 a3 6d da 9a 8b db 18 58 24 c6 9c fc 3f c0 91 Data Ascii: `]D-8+lM-g2ZH#^KuFc6:[e@tf 88\|+!mE6P3{&aKH-x3@CC$\|hl5._$kIj*8i<<u5?xS)p\d`X$`s(O.3'(,SLnbmX$?
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: a6 ea ad 85 03 22 95 80 33 01 a4 c6 a0 f3 e3 30 79 8f 78 09 3b 7b 75 6c bc 9c a1 4f 90 83 e6 3f 2a a2 69 a2 8d da 5f 0f ff 00 a3 7f 55 7c 1d 6c 8d b8 98 fa 0b 7a 29 dc 77 42 57 7e ae 22 db fe fd b7 b7 f1 0d 72 ab dd 8b b1 ec 3d c5 b2 d8 a1 6e e3 de ea 53 fd 9e e5 cb 4e c5 f2 5b 2b 74 32 e9 70 c4 16 55 89 13 14 f9 b9 3b cb 88 b1 86 c7 5b 76 7b 82 ce 1c dc c3 31 2c ec ae 66 de 4c c7 b4 57 3b db 2a a7 d9 86 03 48 01 2b a3 2d 95 76 e6 37 08 a6 cb 2d b5 bc b7 0b 38 c9 1d 40 37 84 03 04 eb 6c 08 00 f1 ab 1c d8 09 8f aa 66 1d b8 24 e3 36 e7 e2 a4 c9 27 0d 93 ad 7f e9 d8 80 33 8b f2 f0 4d 1b 47 e4 ff 00 79 c1 1f 3a b6 24 cf f6 4f 23 48 fb 74 bb b4 3e 4b 77 1f 4f 9f da 0d dd f3 66 27 d3 af 06 ba 75 5b 5a e0 ae 91 15 2f 63 f1 58 91 a5 c7 c4 dc 64 ba ba 38 0b 71 ba Data Ascii: "30yx;{ulO?i_U\|lz)wBW~"r=nSN[+t2pU;[v{1,fLW;H+-v7-8@7lf$6'3MGy:$O#Ht>KwOf'u[Z/cXd8q
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 65 6b dc ed 24 83 6f 7d ea ec 1f 24 4c 47 fd be cf fe 5a e7 dd d6 d7 a1 f2 43 ba 64 0d a5 68 b0 e2 3e 68 da 79 ff 00 b4 4f c2 ba cc b6 b5 f9 c3 d3 4e 10 d8 db 3b 40 db 66 b7 71 71 d7 ae ad c4 62 97 14 df 73 7a 56 e2 10 cb a5 d8 04 19 8d 2a f2 23 02 f6 48 45 34 d2 9b 6a f9 05 67 6f 07 c9 2f 68 20 9b 37 f0 b7 e0 4e 56 eb 6c 31 f0 59 5b 88 49 fd a7 51 54 3e f6 6c 0c 46 16 f3 58 c4 5a 7b 37 93 53 6d f4 30 66 19 58 12 ae 86 0c 5c 42 ca 60 c1 31 5d b5 f2 47 e9 46 e6 d0 c2 dd b3 88 6c f8 ac 19 40 d7 4c 03 76 c5 d0 dd 53 b4 00 3a c5 28 e8 c4 71 ca 8c 75 73 5b 3f 2b dd cc b7 8a d9 57 ef 10 3e 71 81 43 89 b5 76 3b 41 12 0d fb 64 f1 28 f6 81 39 78 67 5b 67 ea d0 58 d3 b2 1b 52 f0 ed 2f 5c c1 d1 7f 44 58 5d a4 fd 4e 1f 6a 28 c4 0b 7d 6b 58 bb 80 bd 6c e5 10 1f 23 f5 Data Ascii: ek$o}$LGZCdh>hyON;@fqqbszV*#HE4jgo/h 7NVl1Y[IQT>lFXZ{7Sm0fX\B`1]GFl@LvS:(qus[?+W>qCv;Ad(9xg[gXR/\DX]Nj(}kXl#
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 2a 6b 15 7c 03 94 70 5e c8 f2 02 05 79 d8 e4 b3 cb ce fc 3e fe fb d6 a4 ad 21 81 a3 8a d7 df 5d a0 53 0e f0 61 ae 45 a5 3d d9 fd a2 0f 78 b6 1c 83 de 05 2a ee 46 10 1b d6 c4 68 a7 37 96 41 23 e3 15 b9 d2 36 26 6d d9 ee eb 58 fb c2 40 f8 31 ac bd 17 db 96 76 fb 2a 07 bd 8c fd cb 5d d4 65 a8 63 4f 0f ed 59 13 7a ba 67 3b 9d ff 00 09 ab 78 9b b1 1a 76 88 10 75 d3 89 d3 c2 96 6e 58 03 8c 03 dd 95 41 ef 8e 72 74 f0 e0 69 9b 79 30 c4 db 62 32 68 a4 fd 22 e6 5e 1a 4e a2 35 a8 5c 26 1e d1 b5 6c bd 9b 41 9e da b3 00 ba 49 12 60 1d 72 93 a8 04 9e 22 66 99 af 65 df 72 78 61 2d 4d 26 96 f9 a5 fc 6e 25 09 d6 54 01 a8 2c 46 ba 44 e5 3a c1 83 1a f0 9e e3 5e ba 3c 6b 2f 89 66 41 da b7 68 c9 0a c0 4b 90 a0 c9 3c 48 cd c0 0e 1c f8 d7 dd fb c5 5a c3 d9 53 6f 0f 64 bd c6 20 Data Ascii: k\|p^y>!]SaE=xFh7A#6&mX@1v*]ecOYzg;xvunXArtiy0b2h"^N5\&lAI`r"ferxa-M&n%T,FD:^<k/fAhK<HZSod
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 0f 2d 76 17 19 70 fd 4e 1f c2 e0 3e a4 77 57 d0 b5 27 bc db 1a ee 1a f5 cc 3d f4 36 ef 5a 6c ae 87 d4 32 9e 0c 8c a4 32 b8 d1 94 83 51 2e f5 60 ba d0 c7 05 f6 6a 43 75 b1 59 31 38 67 ff 00 87 89 b1 73 f9 2f 23 71 f7 54 40 b9 58 31 af d9 6f dd 3f 75 49 ad 37 51 71 c2 fd 55 bd 73 53 e7 5c 03 f2 b1 b1 93 6e 63 b9 07 36 2e 2f 0d 43 61 2c 02 7f 9c 30 d7 ba bb a1 f1 d3 0d f6 94 30 fe 20 0e 9e b5 4c f4 f5 bf bb 17 0f 8a b7 6b 68 60 0e 2a fb 61 d2 ea de 5c 2e 16 ec 59 6b 97 6d aa 9b 97 2f 5b bb d9 6b 4e 72 00 40 9d 35 26 97 86 62 e7 96 ac e8 bf c6 41 55 cf c8 1e cb 1c 66 39 c7 f6 6b 85 b6 8e 79 75 97 2f 66 b7 ef cb 6e ef c6 ac ef 96 3f 48 d6 f0 bb 3e e6 0c 30 38 ac 72 75 62 df 12 98 62 d1 7a eb 8e 41 94 35 a4 9f 69 98 90 08 b6 f1 63 ee 4d 9c 1d bb 08 d8 2b 76 2d Data Ascii: -vpN>wW'=6Zl22Q.`jCuY18gs/#qT@X1o?uI7QqUsS\nc6./Ca,00 Lkh`*a\.Ykm/[kNr@5&bAUf9kyu/fn?H>08rubbzA5icM+v-
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 13 5e 1e f0 61 23 d2 b4 b6 dd cd 00 f1 9f 4d 7e f1 f1 a8 cc 13 b0 62 4b 69 a0 1c b5 13 3e a4 8f ba be 6d cc 49 ed 1e 61 42 8f 36 fd 2d 4a 5a 90 62 3c d5 11 d3 da 40 92 f7 cb 14 7a b6 20 c3 31 90 7c f8 7b b2 8a 9a bb b5 43 85 ba be cd c5 0e 3c 27 88 3e 2a d2 a7 b8 a9 ee a5 6d f3 bb ec af 74 9f c0 7e 34 b9 b3 f6 eb 58 2c 32 f5 96 58 c9 b6 0c 32 b7 36 b4 4e 92 79 db 68 0c 40 32 a6 49 c6 63 f2 42 da 7d 3e a6 02 38 27 8d ea 26 e6 1d a3 56 b4 c2 e8 03 89 50 0a b8 1e 4a d9 bf 82 99 7a 21 4f f6 72 ff 00 6e e1 f4 50 17 ef 06 90 36 5e f1 d9 62 3a bb ca ad f6 2e 1e a6 e4 f7 43 91 98 8e 32 85 87 8d 39 ee fe d8 36 d4 28 b6 55 64 9e c0 95 ed 31 62 40 e0 24 92 74 31 ae 90 29 ca 59 5b 1c ba de 92 a8 89 e6 22 c6 f3 ba 72 db 9f d9 38 cb 9a 54 8c ba 6b 3a 73 d2 93 b6 9e 34 Data Ascii: ^a#M~bKi>mIaB6-JZb<@z 1\|{C<'>*mt~4X,2X26Nyh@2IcB}>8'&VPJz!OrnP6^b:.C296(Ud1b@$t1)Y["r8Tk:s4
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: fb c3 63 30 8c 4e 18 90 78 0c 4d 8f eb aa 2b 1f 77 e3 92 ad 8c 0e 17 2b 8f b1 9b 66 f6 1b 68 dd c4 59 7c 97 ac 63 2f ba 3f 1d 7a eb 8a 43 0e 68 ea 4a b2 1d 19 59 87 3a ec be 8c ba 43 b5 b4 30 a3 11 6c 64 b8 a7 ab c4 58 99 36 af 44 90 0f d6 b4 e3 b5 6e e7 35 90 61 91 95 79 7f a5 1e 8d ef 2e 23 15 7e d5 dc 2d ec 3b dd bd 89 0f 6f 19 85 cc b6 ee 3b 5e ca d6 9e ea dc 67 40 d9 72 da 57 2c 47 64 19 02 96 fa 3d de 5b f8 0c 40 bf 64 83 a6 5b b6 5a 7a bb d6 a6 4a 5c ee ef 57 1a a3 41 13 aa b3 d3 31 b3 33 07 3e f0 aa dc dd 75 47 4e 1d 1d db da 76 41 05 6d e3 6c a9 16 2f 1d 15 d7 56 ea 2f 9d 4f 54 c4 92 af a9 b6 c4 91 21 9d 5f 8b 36 ce 0a ed 9b af 66 ea 35 bb b6 98 a5 cb 6e 21 95 87 23 c8 82 20 86 12 18 10 41 20 82 7b 0f 77 ba 56 d9 f7 d4 30 c4 a6 1d fe b5 9c 4b ad Data Ascii: c0NxM+w+fhY\|c/?zChJY:C0ldX6Dn5ay.#~-;o;^g@rW,Gd=[@d[ZzJ\WA13>uGNvAml/V/OT!_6f5n!# A {wV0K
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 69 d1 18 0c d2 67 3a 5c 07 53 cc 69 4e 41 53 25 38 ea e5 18 bd c1 48 f4 af fc 52 37 3c d5 d1 da f6 b1 68 d8 e7 87 7f 72 4e dc fd 9e 6f e2 2d 58 04 2b 5f bb 6e c8 62 09 0a 6e 30 40 48 1a 90 26 69 87 77 af 94 74 cc 21 ad dc ca e3 b8 a3 e5 71 ee 82 2a e0 dc ed c7 d9 f8 6b 89 7a d4 bd d4 d5 2e 5e c5 5b 6c 84 8e 39 10 5b 4c c0 1d 0b 29 89 91 04 48 a9 77 b1 93 e7 b8 dc 84 32 1c 55 d7 05 48 65 fa 47 2e 72 91 a4 06 66 1a 77 55 a6 46 cb 70 17 93 8e e1 d6 2a f1 dd 4c 44 31 f1 86 1e ee c9 f8 15 ab 06 74 9e 40 4f ba a9 bd cb c7 cf 54 d3 ed 0c a7 cc af f5 01 56 8d ed a1 d8 58 90 60 6b cb 4d 3d e3 bc 69 56 50 54 88 5a fd 4b 23 a6 e9 f5 69 77 92 93 c3 3c fa fc 3f 5f 78 ad 8e ae a2 b6 56 26 3b 4c 75 9d 7c 40 d7 4d 64 71 8d 47 0d 6a 56 ee 31 55 03 dc 21 41 d4 71 e1 c8 01 Data Ascii: ig:\SiNAS%8HR7<hrNo-X+_nbn0@H&iwt!qkz.^[l9[L)Hw2UHeG.rfwUFpLD1t@OTVX`kM=iVPTZK#iw<?_xV&;Lu\|@MdqGjV1U!Aq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.6	49955	74.125.136.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1016	OUT	GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39909 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:37:55 GMT Expires: Fri, 19 Apr 2024 14:37:55 GMT Cache-Control: public, max-age=7200 Age: 5327 ETag: "1706713936" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0f 10 10 10 10 0f 10 10 10 10 10 10 0d 10 10 10 10 10 0e 10 10 10 0d 0d 0d 0d 10 0e 0d 0e 0d 10 10 0f 10 10 0d 10 0d 0d 15 0d 0f 11 11 13 13 13 0d 0e 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 18 15 12 15 17 18 18 17 18 18 18 17 15 17 18 18 18 15 15 15 17 17 17 17 15 15 17 15 17 15 17 15 17 15 15 15 17 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 03 02 01 08 09 ff c4 00 4e 10 00 02 01 02 04 03 05 04 06 05 09 07 04 02 02 03 01 02 11 00 03 04 12 21 31 05 06 41 13 22 51 61 71 07 32 81 91 42 a1 b1 c1 d1 f0 08 14 23 Data Ascii: JFIFh"N!1A"Qaq2B#
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 6e eb fa 2d 71 0f e5 b0 5f de 5f ff 00 0b 5e 8f e8 af c4 66 3b 6c 10 ff 00 fe 97 ff 00 c2 d7 38 82 f6 c5 60 d4 57 e8 3c 3f e8 93 c4 9b 6b f8 0f ef 2f ff 00 84 ae ff 00 f0 7d c4 ff 00 97 c0 7f 7b 88 ff 00 07 51 9a 88 c6 44 af 70 15 f9 d6 8a fd 0c ff 00 a2 27 12 1f f5 b0 1f de 5f ff 00 09 51 f1 1f a2 7f 12 1f f5 70 47 d2 e5 ff 00 f0 b5 d3 66 63 b2 05 72 ee e8 b9 58 0d 15 b8 bf e8 c3 c4 06 f7 70 7f de 5e ff 00 0b 5e 57 f4 64 c7 ff 00 2d 83 fe f2 f7 f8 5a 9b 01 50 f6 f1 f1 58 85 15 bb d8 fd 16 b1 e7 fe be 04 7a dc bf fe 12 a6 db fd 11 f8 91 da fe 03 fb db ff 00 e1 2a 27 c8 d6 fd 45 4a d2 1d a2 fc f7 Data Ascii: BEPQE!QEEQBEPQE!QEEQBEPQE!QEEQBEn-q__^f;l8`W<?k/}{QDp'_QpGfcrXp^^Wd-ZPXz*'EJ
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: bd f7 e1 85 72 1f a3 76 3b f9 5c 27 f6 ef 7f 86 af 00 b8 b8 5c 19 1a 0d 8a c5 e8 ad b4 fe 8d 18 ef e5 b0 7f de 5e ff 00 0b 55 e7 f4 7e c6 4c 76 b8 5f ed dd ff 00 0f 5d 32 37 3f e9 0b 97 cf 1b 3e a2 bf 6b e1 ee 86 00 f4 3f 57 8f c8 d4 a4 3e 72 3a 7f a7 4f ce f4 b9 cb b8 bd 4a 9e a4 c7 af 5f 98 d7 e1 57 b5 e5 6c 06 29 0b 37 6e e8 bc a4 9b b4 65 cf 8f 55 67 83 c4 c5 5a e1 71 fe 34 bb 87 b9 f9 eb f1 f1 f8 eb 53 ad 3d 55 4d 08 29 d0 eb 68 af 2e df 59 0b 23 33 02 54 13 05 a3 7c a0 fb d1 a1 20 4c 0d 6a ab 8d e3 5a d3 2b 64 6b 96 9a 11 d5 04 dd b6 d3 dd 74 1f 4d 5a 72 b2 1f 04 2a 41 24 1e a7 2b 80 19 43 00 64 48 d8 8d 8a 9d d5 87 46 10 47 42 2b 81 bb 7c 5d 50 32 bd 93 d5 bd f5 11 f4 98 75 06 40 39 4c 88 cc 49 04 95 a3 8b bd 6c b2 07 5d fd 39 ae 9c e0 02 ef 72 c2 Data Ascii: rv;\'\^U~Lv_]27?>k?W>r:OJ_Wl)7neUgZq4S=UM)h.Y#3T\| LjZ+dktMZr*A$+CdHFGB+\|]P2u@9LIl]9r
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 62 48 c6 da 23 f7 88 3e 87 71 f2 af b8 fb a3 13 61 b1 0a 00 bd 6e 3f 5c b6 04 02 18 85 5c 4a 01 b2 b3 10 b7 14 7b ae c1 a3 2b e9 3f d8 97 0f cf 8a 07 a2 89 a4 4b 5c cc 8a 5a 52 30 b8 1c b8 ad 7b 88 62 b5 61 11 04 8f 3d 0c 54 32 d5 1e d5 e2 cc cd d1 99 88 f8 b1 35 e3 13 89 03 d6 bd 6d 3e 13 81 aa 8c d4 5d b8 8a f1 8f c7 46 82 3c ea a4 3e bf 1a eb 6e d1 62 00 dc 98 1e a7 4a 70 e1 1c ac a3 29 7d 4e e4 74 3f e9 4e 4b 3c 54 6d ef 6a 52 2c 8e 5a b7 65 b9 2d 25 c8 69 f3 fa e6 9c b0 98 d5 65 1d d8 27 66 5f 1e aa c9 d0 8f 15 df c2 60 32 9e 27 06 46 c4 11 f5 fc 7f d2 a7 f2 de 26 0e 53 b1 d4 7a f5 1f 1f c2 98 da 50 89 a2 c6 cd 5b f6 df fb 4c 50 c8 62 93 0b b4 3e c2 bf 56 ae c9 7a a1 63 4b 01 99 75 23 a1 d9 87 81 eb b6 c7 71 e9 20 f8 e1 d8 d0 e2 40 20 f5 07 a7 c7 af Data Ascii: bH#>qan?\\J{+?K\ZR0{ba=T25m>]F<>nbJp)}Nt?NK<TmjR,Ze-%ie'f_`2'F&SzP[LPb>VzcKu#q @
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: f2 a2 16 57 52 96 0d 08 b6 7b 8a 61 67 7b 6c 41 06 46 e0 d4 fc 2e 34 37 91 ac 9f 9c f8 83 df 2b 74 b3 0b 83 46 20 90 7d 56 35 13 d6 2a a6 d7 30 e2 13 6b ad fd 68 7f ad c3 1f ae be dd b2 df f3 94 cd 7b ed 8a d9 db 4b af 8d ed 0d 9f 2d 14 e6 3b e5 c0 fe d6 f1 35 f1 ee 85 04 93 00 02 49 f0 03 53 f5 56 15 7f da 36 2d 36 36 d8 0e a6 db 1f 9e 57 02 a8 b9 83 da 1e 32 ea 94 6b b9 51 81 56 54 b6 16 41 10 41 68 2f 04 48 8c d0 41 a9 cd 23 81 b5 d7 91 b1 ce d5 2f f1 be 22 59 8b 6b 2c 49 d7 52 01 d7 5f 3f f5 aa 46 ae ce 6b 91 14 d0 16 c9 3d 23 cb 8a 60 e4 de 06 2e 4b b0 95 53 00 74 2d 12 67 c8 08 31 d6 47 98 2c 78 97 23 41 a0 1a 08 1f 67 87 c0 55 8f b2 ab 6a f8 67 51 ef 2b b0 61 d7 bc 03 2b 7a 6e 27 f9 a7 c2 ab b8 c7 10 4b 4d ab 02 c0 fb a2 18 cf 98 98 1f d6 22 a0 37 Data Ascii: WR{ag{lAF.47+tF }V5*0kh{K-;5ISV6-66W2kQVTAAh/HA#/"Yk,IR_?Fk=#`.KSt-g1G,x#AgUjgQ+a+zn'KM"7
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: ec 0b 89 8b 8b 76 cb 66 c8 c9 9c 06 8f de 5b 6c 44 13 13 99 7e 2a 3c aa 95 f5 0f fe f3 96 fb 8b 7b e6 ad c5 23 5a 03 9b a8 cf 24 a1 c7 71 b8 cb d8 70 2e 0e c5 98 09 60 63 ba 65 22 e2 90 cf 68 b3 02 48 59 21 72 10 c4 36 b3 f9 4f 04 6d 1e cf 0e 62 e3 25 b7 00 14 6c ae bd 8a 5d 01 95 15 7b 22 5a e3 41 06 51 04 cc 95 15 bc f5 83 b8 1c fe d3 35 97 2c 6d 33 76 8a af 94 85 87 40 ac a7 29 d4 a1 49 d4 19 19 a0 57 f2 37 19 b9 87 72 6c ad bb 8c d3 6c b3 cf 73 67 63 95 18 0e f6 9a e6 20 64 23 ac d2 cd 8d ae 65 ae 03 6f 73 6d d6 3c 7c 15 99 24 77 80 24 e1 b0 be 86 fc 47 8e 7f b5 fa 23 25 22 71 2e 68 5b 0f 78 65 17 1a 66 55 c0 95 05 dc 08 0a da a8 7c a4 1c b0 41 dc 11 55 6b c4 f1 78 c3 96 d0 84 06 1a e7 bb 64 78 eb bb 91 fb ab 24 69 b6 f4 dd c1 39 26 ca 20 17 15 6e dc Data Ascii: vf[lD~*<{#Z$qp.`ce"hHY!r6Omb%l]{"ZAQ5,m3v@)IW7rllsgc d#eosm<\|$w$G#%"q.h[xefU\|AUkxdx$i9& n
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 49 68 24 66 30 59 a3 4d 72 80 00 99 85 50 14 0e 93 24 a5 d9 3b e6 03 f7 04 a6 d7 aa 8d b1 3a 0f ee 36 f2 d5 57 8b 75 2b 01 6a 59 44 4c 90 23 e3 5d 5f 0f f0 ae 9c 3a d1 cc 0f 81 9a 7d ef ee 12 38 2c a3 1b df 03 9a 79 c2 db 00 0a 83 8f c7 41 81 5e ec 62 34 26 a9 ee 9e f7 c6 b1 d1 43 89 e7 16 e5 b3 c7 dd 16 54 38 5e 12 6f 31 bb 88 1a 19 16 ad 6b 08 a7 ab 6d df 23 59 fc 00 11 b8 ee 06 dd 84 90 3b ad a6 59 92 5a 3a 4e a4 46 fe 10 3c 6a b7 07 c7 1e c8 2b 00 f7 a7 bd 33 fd 10 27 49 f2 ae b8 3b 8b 75 9b 11 7c 8c b6 fd db 73 f1 02 3a eb fd a6 df 41 15 ae 63 67 a6 97 11 fa 46 40 0d fc 00 1f 94 9b 99 1d 44 79 e8 a2 60 ec 1c 8a 72 90 66 57 e7 bf c7 4d 0c 53 06 9a 4c 4f e6 75 af 9c 1e cd c3 6c 3b 8d 18 96 0a 06 a8 84 ca ff 00 48 47 86 a0 46 fa c4 9b b8 32 cb 23 50 35 Data Ascii: Ih$f0YMrP$;:6Wu+jYDL#]_:}8,yA^b4&CT8^o1km#Y;YZ:NF<j+3'I;u\|s:AcgF@Dy`rfWMSLOul;HGF2#P5
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 7b 10 64 15 3a 88 ac 93 9b 38 03 2b 87 37 94 76 92 cc 81 74 06 75 86 2c 0f 94 95 e9 e5 ac 7c 3f 39 9c 21 b1 bb a8 c4 1c eb 9a 33 da b9 61 c5 c5 f0 04 5d b7 66 e2 9f de 51 e2 6a bb 67 d4 3d 8e 0d 68 b8 27 31 e1 bb 9e 83 82 b6 db 14 4c 99 a6 56 e4 e1 ea 16 d1 92 b9 62 6e 2a ab 3b b0 44 45 2d 71 d8 80 aa 8a 0b 3b 31 3a 00 aa 09 27 ca a6 70 5c 55 ab f6 d6 ed 96 cc 8d b7 42 a7 aa ba fd 16 1d 47 a1 12 08 35 91 7e 92 3c d8 a9 64 e1 94 76 88 c7 2e 35 93 bd d8 92 d6 ce 1e dd cc a6 50 de 6c cc bd 4f 62 46 92 66 e6 4e cd c2 e3 7f df c7 7f 25 9a 85 b2 17 59 2d f0 df 6c d9 b1 1d b5 eb 58 8e c8 e5 4b 4a 16 e2 da 55 d0 48 53 19 c9 d5 c9 90 c6 4c 6c 05 40 e2 be d4 9a e5 e7 b8 8c 8a 24 32 5a 0c e4 42 80 56 0d c8 74 61 b9 0a 40 cc 09 81 a8 a8 9c 3f da 75 82 f7 53 f5 54 b6 Data Ascii: {d:8+7vtu,\|?9!3a]fQjg=h'1LVbn*;DE-q;1:'p\UBG5~<dv.5PlObFfN%Y-lXKJUHSLl@$2ZBVta@?uST
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 9e ad a4 85 9f dd 00 fc 4d 63 5c f5 80 7b 96 fb 3b 7a 90 bd ab a8 52 5d bb c1 2d a0 8d 49 cb da 5d 88 d4 0f 4a ab ae a7 85 d0 87 38 61 2e 23 9d ff 00 bb 3f 2b f2 ca ea f3 67 3e 49 1f 7e 1f fe 77 f5 b7 3d ca 5e 3f 85 fe c2 de 3a fd c2 97 99 85 d1 76 de 52 c5 0a 15 4c 3d bd 42 82 2d 81 dd 30 55 c3 e8 c3 34 fa c6 fb 4c b2 14 58 4b 26 dc 15 52 e1 c3 88 4e ec 01 00 a0 31 30 24 0d 3a 6d c7 09 85 17 d6 d2 e2 9e e5 bb 20 2d d4 c8 01 4e d9 d4 c8 04 82 a3 f6 7d ad c6 50 ad df 2c cc 74 2a d4 fe d0 39 00 32 fe b1 86 6b 44 05 19 ed 8b 93 71 98 30 0c c3 74 ce 7b ce c0 3f 4e ad 35 4d 2c f1 c9 23 58 7b ba 7d 37 68 24 66 2f 9d 8f 4d 2f aa b7 6d 0b d8 c2 f2 31 66 72 39 d8 68 6d 97 bd cb 53 c1 e2 d8 05 b8 ba 06 1d e1 20 8f 10 4c 68 64 41 91 4d fc 07 8b db 23 2b 88 66 2a 09 Data Ascii: Mc\{;zR]-I]J8a.#?+g>I~w=^?:vRL=B-0U4LXK&RN10$:m -N}P,t92kDq0t{?N5M,#X{}7h$f/M/m1fr9hmS LhdAM#+f
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: d8 dc 3b 0c cf da a7 55 70 26 3c 88 1b f9 91 4d d6 fc 29 8c 62 64 97 3c c5 bd 73 f5 0b ba 1d ab 51 06 a0 58 ea 06 7f 7f c1 5f 39 a3 11 79 1c 9b 8b 70 f8 92 46 84 7e f1 2d 23 d2 92 78 d7 1f 67 61 ae 8b b7 5f af a9 fb 3e 75 ba 71 ae 68 c0 f1 25 cd 99 2c 5e 23 f6 81 cc 23 1f 16 d0 95 6f e7 8c c0 f5 8d eb 13 e3 bc 11 16 e3 2a 5d b7 70 29 12 6d b6 61 a8 07 43 00 1f 09 12 24 1a af 83 66 18 0e 6c 20 8e 3a 79 e8 ac a6 da 46 61 62 45 b8 05 b4 7e 8e dc db 16 ae d9 67 ec da e3 a1 b5 72 03 00 c9 ba b2 b1 03 2d c5 fd 99 79 05 66 65 62 47 0e 71 f6 85 6c 8b f6 5c 5a bc 2e 3e 6b d8 7c 99 59 dd 55 55 6e 35 d1 91 d6 6d a5 bc af de 75 ca 91 05 4d 65 7c 1f 1c 6d c6 5d 23 6a 81 c6 78 72 e2 2e dd 7e d9 6d b8 50 f6 54 a9 3d b3 b3 77 ad 86 04 64 82 5d cd c3 3b a8 00 ce 9e 55 d0 Data Ascii: ;Up&<M)bd<sQX_9ypF~-#xga_>uqh%,^##o*]p)maC$fl :yFabE~gr-yfebGql\Z.>k\|YUUn5muMe\|m]#jxr.~mPT=wd];U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.6	49956	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1085	OUT	GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19102 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:18:04 GMT Expires: Sat, 20 Apr 2024 13:18:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 2918 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	721	IN	Data Raw: 52 49 46 46 96 4a 00 00 57 45 42 50 56 50 38 20 8a 4a 00 00 10 f1 00 9d 01 2a a0 01 ea 00 3e 55 24 8e 45 a3 a2 21 24 28 78 ab 70 80 0a 89 63 6d a5 44 f8 49 72 74 30 38 58 94 79 37 e3 d9 e3 f5 8b b2 64 a5 ca 9e 7d 2f 9f ff 6b d7 3f f6 af 50 df eb 3e 98 7d 3d 79 8f fd c4 f5 83 f4 8f fe 07 d4 1f fb bf 53 57 a1 17 ed 8f a7 77 b3 8f f7 ff fc 3e 98 1e a0 1f ff f7 be 66 2d cd 9f c7 7e 47 fe eb fb 0b e4 db d2 fe d1 7f 7a ff bb fe d7 e4 cf 43 7e a9 fd d7 fd ff 44 bf 96 fd d7 fc 77 f7 af da 5f f0 9f b8 ff 74 ff aa ff 93 e3 4f cc df f4 fd 42 3f 29 fe 75 fe 07 f2 b3 fc 87 ee 9f 2b 95 bb f4 08 f6 c3 e9 ff ea 7f c0 7e ea ff 8a f8 07 fa 2f f7 9f e3 ff 6c 7d da fb 11 fe db fc 67 ee d7 f7 2f b0 0f e5 3f d1 ff ce 7f 7c fd bf ff 03 ff ff fe ef de df ee 3f ee 78 ec 7d f7 fe Data Ascii: RIFFJWEBPVP8 J*>U$E!$(xpcmDIrt08Xy7d}/k?P>}=ySWw>f-~GzC~Dw_tOB?)u+~/l}g/?\|?x}
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: cd d4 60 06 81 e3 ea 6e 4e 1f d0 ca 64 79 a9 f8 4b b7 98 e8 e1 10 30 e1 42 98 be fe d7 1b 7a 62 4a a1 56 81 85 0b 90 f3 1f ed a8 23 cd e4 66 f3 a2 9d 59 3c 51 69 21 af c1 13 09 6c f0 2b 1c 76 c4 82 d8 fb cc dc ed e2 a5 ce 29 1a d9 24 d0 76 22 9c 76 c7 86 e5 14 12 66 62 7f 15 e9 ec 65 24 7d ca c2 a2 64 50 ce 4e 0b 88 28 4f d0 14 29 0c 43 cb 97 81 02 ee 89 91 4d e8 59 5d cf 05 65 c0 07 d5 fb 9d 93 3b 4f 9d 64 17 d1 ea 38 dc 84 59 44 45 d4 db fd a3 57 16 dc 26 5d 06 9c 27 ca da fc 97 e2 1e 8e 72 b0 9b 06 48 7d f5 c7 88 9f db 60 30 8d a6 b7 e8 10 47 28 4a b8 89 64 d7 8d 45 55 c5 01 4f 93 f2 5b 06 3a 26 38 e1 a8 29 38 09 ed 1e 7a 98 0e ba 5b d4 3b 10 bc 2f 42 1c de 14 d6 44 fe 72 54 54 11 d8 34 e7 0a e4 d4 6c 8b d5 27 f1 7f a7 df ca 2d 7e 10 8b 6b c5 78 04 7c Data Ascii: `nNdyK0BzbJV#fY<Qi!l+v)$v"vfbe$}dPN(O)CMY]e;Od8YDEW&]'rH}`0G(JdEUO[:&8)8z[;/BDrTT4l'-~kx\|
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 4c e6 d9 c7 d0 dc 30 0d 3b f8 4e 78 5c df f6 a8 7c 13 3b 46 30 26 ca 73 55 45 f9 1b ca c3 ce 57 69 b7 38 63 2a 55 43 b2 f8 82 80 62 ac 7a ae 41 51 d5 ac ef cb 9f 17 89 9d 62 f2 1f 91 7e 77 fe 0d e4 15 41 03 51 98 b0 e2 eb 56 cf 40 3b 8b 2a 3b e8 21 1b 04 e6 de 2b 06 37 49 fe 36 f4 bf 23 32 ec fd 07 a2 5a 53 bc 1c 95 b3 7f 04 4d 72 30 0b b1 4e 35 6a c8 b2 58 c9 05 7a d4 d2 11 b7 73 db ad 07 3a d5 8f 7e 97 6d b3 5c 2d c6 c4 3f b6 25 8f 56 8b 29 be 88 c6 ff b8 17 2d a4 8f 5c de e4 b7 83 75 e4 2c 68 74 34 0e dd 69 e9 c8 61 1b b1 d3 27 4d 19 16 2d 9f b4 83 a0 b8 30 90 3a 95 4f 5a 05 d2 be d9 c6 d0 16 d5 2b 0d c9 f5 a8 d1 dc a7 d5 0b af d9 da 69 87 86 83 ea 26 94 d5 4d 81 f3 a4 b0 f5 d9 14 87 43 6a 4f a2 47 6c bd 52 03 fe 6c e0 a0 74 76 c9 1f 29 09 31 49 f4 b0 Data Ascii: L0;Nx\\|;F0&sUEWi8cUCbzAQb~wAQV@;;!+7I6#2ZSMr0N5jXzs:~m\-?%V)-\u,ht4ia'M-0:OZ+i&MCjOGlRltv)1I
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 3f df af f8 fa 92 5e 3b 6e 93 5b 43 2f bf 98 ff b6 80 2a a2 6b dc be 06 42 03 9f 6b 4b 9e 5c 6e 13 f1 2e 48 e0 75 d1 06 0b af fa 72 b1 19 e6 0f aa 06 a2 63 f4 45 01 3a 2c 0e 1a 7c 21 f4 67 5f f6 c8 1d c3 db 0b 60 5b 0b a4 c6 b8 5d f4 67 a9 71 e8 51 a7 df 5c 0a 42 2f 69 c1 4f ad a4 09 b4 a0 61 cd 96 53 18 23 15 c8 d8 bd 6e 23 5f cf 95 de 61 04 a7 65 f8 84 77 9d ed c3 ad 70 fb f1 3b 92 e4 99 df 45 cd 21 5a 67 64 54 5a d7 73 ab 1e 33 09 ee 0a d5 a5 72 74 76 64 a1 40 a7 0c 17 e1 42 5e 01 4e 97 bc 94 36 ed b5 6b 5f 38 23 03 ff b5 3c a1 0a 76 28 ba 57 08 b0 d1 55 14 37 33 d4 56 70 68 a1 ea 22 84 f0 8e 77 58 c2 04 9b f6 68 62 f8 18 21 24 f9 01 a2 38 9c 04 cc 7b ce c7 f3 58 24 25 ab 05 81 f8 24 e0 45 06 29 4d d3 79 9f 71 40 e7 42 37 39 9e 0d f9 77 b7 90 37 50 2c Data Ascii: ?^;n[C/*kBkK\n.HurcE:,\|!g_`[]gqQ\B/iOaS#n#_aewp;E!ZgdTZs3rtvd@B^N6k_8#<v(WU73Vph"wXhb!$8{X$%$E)Myq@B79w7P,
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 19 a6 fc 1a 3e 0a 5b 23 4d 5e a8 dd 4b ba a5 78 67 25 43 da e3 d8 5a d5 e5 48 1d 35 75 8f b5 9b 3f aa 7a ec 50 7f 91 b8 44 34 17 18 f2 12 35 08 68 89 9d 7c 31 3d 36 90 7c a8 d3 89 19 1c 7e 6a ff 98 39 d7 fa 65 db e9 59 da 02 e5 af 9b 86 2c b9 3f af 4f 61 22 d5 35 fd d0 20 c8 aa 45 3b ea a4 80 ea 97 83 d5 78 01 a7 82 6b d2 49 09 62 1d f6 16 fd 3b 40 e6 b2 39 5c c6 b3 62 e3 b0 c1 46 02 5c 62 ed c3 04 14 5c 21 fe 4e 51 f7 79 82 da b6 23 51 62 19 88 54 c5 61 1c 77 0e 8b 47 f3 7f 0d 97 aa 1e e3 2a fa bf e9 f1 d2 e2 dd fb 40 8f 1d b1 45 ed 98 16 54 bf 99 50 5b d5 b1 96 fd df 81 19 b5 e9 5c 97 50 24 ae eb c1 42 15 95 88 23 78 b7 e4 3e c2 cf 03 d7 8d 12 e2 74 57 b4 1d 35 22 00 71 f8 db 94 42 de 19 d7 14 4b d3 6f 71 3d 46 8c 7c 4a 36 c3 b6 e2 0e 2e b8 5c b4 50 d9 Data Ascii: >[#M^Kxg%CZH5u?zPD45h\|1=6\|~j9eY,?Oa"5 E;xkIb;@9\bF\b\!NQy#QbTawG*@ETP[\P$B#x>tW5"qBKoq=F\|J6.\P
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 6d 0e bd 40 a4 95 39 5f 1c ab 63 71 d4 46 28 41 91 19 e2 96 d4 9c a7 41 68 9d 6d 87 5a 13 04 c1 bd a3 b2 71 44 70 ec 8a bd 7f 9c b1 07 62 fb 00 33 b1 70 f1 1a 5a a4 d9 e0 2e 72 2c 41 f7 a1 b1 99 cc d4 d7 34 8c ff 08 3d 87 b9 ad e4 90 ff 86 91 f4 62 20 24 77 0b 66 01 28 8e a0 76 1e 46 d9 dd a7 95 16 16 36 9d 2b 0a 40 15 81 97 ca f1 c0 1d 18 c0 94 7a c3 9e 09 5a d1 a7 bf 3e 9b 8a 76 cd 20 d5 dd 5f f2 18 90 76 de aa 56 0d 24 ee 12 1e 9b 0c 69 0a 41 53 aa aa 4e 19 75 c2 fd 43 37 8b 5f 45 7f a6 cd df e1 36 ca 6f ff 9e e2 a4 79 9d e7 b3 bd c7 b2 7e e5 b7 db 06 f1 14 6e cb 48 30 c2 17 f9 b9 b1 bc 34 18 2a bd c8 2b 60 ce b0 35 a0 0c d2 3a df 38 76 66 c1 03 fc cf 4c 4f 56 8c 15 dd f6 b3 c9 1b 12 49 25 9e 28 81 bf d4 86 30 7c 2d c9 0b 7d 19 b8 91 44 c8 58 6e aa 7b Data Ascii: m@9_cqF(AAhmZqDpb3pZ.r,A4=b $wf(vF6+@zZ>v _vV$iASNuC7_E6oy~nH04*+`5:8vfLOVI%(0\|-}DXn{
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: e1 f1 30 4f f5 b6 05 78 4a 73 87 dc e8 86 fe 1c e2 38 fe 5b a9 7d 36 28 19 e1 86 19 7b a2 a1 04 f9 93 3a 93 d3 a9 c0 30 74 cd 10 19 d8 e3 ca 56 b0 47 e1 a7 6b de 8a 74 e3 ce 16 05 dd 82 42 42 eb f0 73 4e 0e 7e 30 0c 62 70 77 75 4d da b4 f7 fc e5 b9 2d b5 4a f7 85 e6 66 aa e0 ff 64 e3 bb b5 7d 96 d8 04 2f b7 64 c7 63 38 e2 28 15 e1 e4 12 7c cd 10 ba db 4a 00 05 4c f1 7a ff e2 9c f8 c2 91 1d 94 c0 15 bd c9 50 68 1e 52 96 63 3d 74 17 d7 a2 9b e4 ab 4a 13 bf bb 7b 3a 1a de fb 9d 0f ce 4e 5a 86 0d 5a 4c 06 04 aa ea 01 33 42 73 71 1a b5 72 8a df 7a 70 31 4f f8 b1 f5 f7 b7 08 ed cb 7b e6 98 74 1c f6 02 cc 2d 9e 95 8f 9f 56 08 04 46 8d be 8d 3e 20 bd 13 e9 59 87 34 dd c5 c3 e3 70 3a 24 4c 6f 6e 08 60 a8 f0 d9 c3 f2 5a 42 c4 d3 79 88 e5 74 65 21 85 07 b6 b0 99 10 Data Ascii: 0OxJs8[}6({:0tVGktBBsN~0bpwuM-Jfd}/dc8(\|JLzPhRc=tJ{:NZZL3Bsqrzp1O{t-VF> Y4p:$Lon`ZByte!
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: e0 f9 3a 87 02 5a 92 7f 96 a4 19 b6 30 29 5a f2 c3 81 61 25 84 81 57 a2 47 54 15 c4 76 9d 50 b4 fc c4 37 ca 06 d7 66 61 28 57 8a 95 21 a8 c9 4b b7 29 06 31 69 02 45 b0 0b d1 80 aa 52 ea 73 fb cb 78 be 54 4e be 0a ff da f0 2c 93 b4 8f 89 e1 c8 08 c8 e0 f5 c6 87 c2 c6 32 2a 52 fa 9b f6 53 aa 1d 36 53 9e 26 02 0b 18 66 cb 2e 7d 22 3a db e3 81 32 15 f4 81 ad 9f 52 af b1 37 6a 63 4f 86 ba 92 d7 49 2a 7d 14 a3 a7 0c 83 a3 da 12 08 90 6e 13 b2 91 56 4a 9e 7b 9b be 75 fb fe 89 34 bf c8 5d 1e 6e e5 7b 26 fa ae 4a d7 57 d3 af cd 04 1f e0 c7 22 cb 80 50 3f 19 73 d4 3a 95 f5 95 97 76 62 b5 10 56 e8 a3 68 ff 31 75 21 e6 95 af f1 e1 aa d2 94 50 d5 0f 7a f6 22 e1 6e c9 ae 82 ca 1e c1 a7 13 cf 25 1d 33 f3 5d 9d 73 1f 3c 38 66 07 d2 73 7b 2f dc 73 95 b9 16 ed 2d f8 01 56 Data Ascii: :Z0)Za%WGTvP7fa(W!K)1iERsxTN,2RS6S&f.}":2R7jcOI}nVJ{u4]n{&JW"P?s:vbVh1u!Pz"n%3]s<8fs{/s-V
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 85 ec 4a c5 51 be 67 7f 42 f7 d1 85 0f d3 ea dc 4b 9d 6f d3 11 0f 75 7b 53 6c 31 60 c7 3e 2c b6 bb 34 36 6f ad b6 d3 98 2a f4 78 0a 5c 0b dc 56 4e 64 13 b9 8a 31 a0 ea 04 60 ef 75 f5 bf 2a 82 46 51 35 4b d9 33 21 43 8f 37 59 92 25 fb 71 26 5d ad 28 50 6c 48 cf 6f ae 36 1c 29 33 9a af 82 b3 24 90 50 0c 33 8b 66 09 f4 96 54 84 3d 92 1a 58 5c 2d d2 93 8c d1 c2 07 28 43 05 55 b1 54 d9 47 0f f1 2f c6 cb b5 bc c8 69 49 9f b6 2a 9e b5 e6 de cc e7 e0 ec 2c f3 89 2d 60 ee 53 71 79 86 88 93 ff 1a ff cd 95 88 d2 0a b8 91 e5 c9 01 09 b7 e1 5e ab bc a7 09 7a 33 39 1c b6 28 2a 86 0f 60 f0 eb e0 f2 a7 b5 3a 18 b6 f8 0d 35 83 e2 30 ff e9 e9 cb 98 39 b7 bf 26 45 f7 c3 ad 25 2b 98 31 a7 1d aa 85 a7 f0 c3 db 9b b9 96 73 81 f4 c9 92 93 e4 8f f8 83 42 a3 c2 63 81 fd 78 0d 4e Data Ascii: JQgBKou{Sl1`>,46ox\VNd1`uFQ5K3!C7Y%q&](PlHo6)3$P3fT=X\-(CUTG/iI,-`Sqy^z39(`:509&E%+1sBcxN
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 68 07 77 55 9c d8 cd d0 e3 2a a2 81 fb e1 ae 6a 30 cf f0 c5 23 50 a9 54 74 21 87 9e f1 35 5f fa 99 65 b9 c2 22 d0 93 a4 46 0b d6 f6 86 ce 79 94 b5 af 74 2f 2a cd 9f 4b 76 5a 2a 21 0b 72 8f 71 27 5a ed de 1b 2f 32 33 7e 9e da 80 58 41 ca 63 5e 58 e0 f5 27 aa d8 a7 b6 6d f8 46 9f cf 10 4a 24 3d a5 fd 5d 65 ff 87 86 1d a1 a2 a0 d8 63 9f 35 c8 75 b8 6d e1 6d 73 46 c4 6a c0 2a 99 24 9c cc 4c 30 f5 57 72 c0 97 aa ff a7 cd 3c 4b 4d ae 6f db 7a 8a fc e1 88 21 12 4e ff d2 32 5d 16 5e 04 02 77 df ea 9c f6 e1 c5 6e db 55 a0 a1 f5 a7 c2 8b 34 bf c9 dc ff 6c 08 f2 52 14 38 1e 52 e3 ff 85 b4 9f cb a6 51 e3 df dc 39 87 de e8 68 8c 4a 20 57 7e ae db d0 8b b5 a2 86 9c 73 9c 17 a2 bb 32 3c 08 08 88 e5 cb 5d 24 cb ed 74 11 80 4e 32 78 95 fc b7 b4 16 5a aa ec a4 3b b3 d9 0f Data Ascii: hwUj0#PTt!5_e"Fyt/KvZ!rq'Z/23~XAc^X'mFJ$=]ec5ummsFj$L0Wr<KMoz!N2]^wnU4lR8RQ9hJ W~s2<]$tN2xZ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.6	49958	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1080	OUT	GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8990 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:18:04 GMT Expires: Sat, 20 Apr 2024 13:18:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 2918 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	722	IN	Data Raw: 52 49 46 46 16 23 00 00 57 45 42 50 56 50 38 4c 09 23 00 00 2f 3f c0 0f 00 4d 30 68 db 48 d2 26 ed bd c3 1f f1 90 88 e8 7f 9c 9c 00 24 81 29 aa 97 76 1d 5f ed 30 4a db 6b 69 87 bd 5b 74 e1 b8 91 24 45 8a 65 86 e7 fa 6f e2 31 94 c6 0e d6 91 24 2b 19 9c 2f 0d 80 fc 83 f3 e7 ef b1 45 b1 8d 24 c9 c9 3c 1a f2 0f 70 2c b4 a5 35 f4 3f 5e 12 42 26 22 22 19 49 bf 8a d2 93 9a 22 3c 28 92 64 dc 53 c2 1f 15 ae 24 2a c8 11 1f f2 e7 be e8 4e d8 c2 19 a0 74 c7 8f d3 1f 8c 11 16 ac 9e c0 c1 38 f7 f6 1c 9f f1 30 1e a0 f0 ff dc 2b d9 1f 93 67 ac cd 5e 9b b7 40 9f 9e 1e 5f 46 e9 3e b7 fa da 87 1a b8 aa 0d df 3a 79 33 c2 e3 ff ff ab d3 f6 ff 3f b4 c7 f3 58 72 4e 4e 3c 01 42 80 14 77 6a ac 1d 1d f5 f6 b5 32 eb 5e 97 cb 2a 73 77 7d b9 ce dd f5 35 77 77 77 a9 bb 60 a5 c5 9d 20 Data Ascii: RIFF#WEBPVP8L#/?M0hH&$)v_0Jki[t$Eeo1$+/E$<p,5?^B&""I"<(dS$Nt80+g^@_F>:y3?XrNN<Bwj2^sw}5www`
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: dc 6f 8d 53 d9 78 b5 63 22 b8 21 03 78 78 73 d8 60 7a 06 7f e1 f6 16 5e 2e cc 78 d7 ca d0 4c 6c a4 06 60 a0 18 8a bc f9 8f ec 8f cd 7b 9f 10 31 50 d7 b3 9b 0f 7e 9b 92 23 4a bd e3 02 52 88 0f bb ec 95 d5 5b ff b3 b9 f4 7d 0f 1a e0 b4 42 64 fc 80 7b 22 4d 1f cb 67 28 0f 82 47 98 1e 61 0a 63 09 fc 6b 7a 3f 79 8e 6c 02 44 10 00 c0 93 30 41 c0 10 af fe fd fb a5 6c d9 d7 fa ca 0f 1e 8f 71 cf b1 40 a1 be 48 c6 69 28 52 bc 96 6f 36 8b c5 21 d5 58 16 79 1b 1b b5 69 27 eb 06 5a 86 14 8d 84 25 1f bf 7e e7 dd a3 3f 2c be 2a 00 2f 63 6b 82 29 fb 86 bf 63 9e c1 f7 7f ac aa 8f 45 ac f3 f2 a9 6f 9e eb 1d 1e 7e 24 e4 bd 9d fc e9 1e 9d f9 81 fb 43 7a db f9 c5 54 02 c8 11 9a 86 8b f9 c7 18 86 06 1f b5 33 df 43 3c 4e bc 49 0e e3 00 ec 80 06 69 34 4d a5 02 00 dd f0 db 0f f5 Data Ascii: oSxc"!xxs`z^.xLl`{1P~#JR[}Bd{"Mg(Gackz?ylD0Alq@Hi(Ro6!Xyi'Z%~?,*/ck)cEo~$CzT3C<NIi4M
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: f3 97 9f f8 69 d3 c5 da f6 f8 a8 c7 55 41 11 71 30 4a 98 5d d0 63 74 aa 4a cb f9 de 6e 17 58 0c 6b b6 76 fa 75 6c 98 cd 02 1b 0c 1e 66 a5 06 7d 58 4d f7 d3 c0 35 ba 2d a9 5d 9e 48 de d0 e7 fc 69 fc 23 b6 90 c2 50 96 68 8a 53 26 5f 9f 78 94 31 02 43 00 0b 40 31 29 48 32 e1 18 23 8b 95 33 06 10 50 8f e2 a3 5a ac 40 43 98 e0 19 67 98 2e 65 cb 8d 12 14 0b 93 17 94 bf d0 1c 79 7a 24 30 4b 6a 97 7e e2 61 f1 cd 17 3f e0 67 86 b3 9b 3e e6 53 a4 fa b2 52 92 f9 58 2b 00 11 61 7f f0 53 7d f3 55 34 94 20 bf 33 22 86 58 a9 ba d5 78 3a cd bb 9a 43 3b 4d c7 ad 6b a5 70 e7 7d bb 35 97 4a f5 95 b4 ed c3 37 b1 66 65 13 f1 1a 1a e4 c1 e0 89 8d b4 51 db 8f 94 cd 8c 12 42 04 80 30 2c a5 a8 a4 0c a9 9f c1 20 4c c2 89 6c 68 56 27 04 05 4c c7 00 2c a5 6e 66 11 67 62 91 84 d7 53 Data Ascii: iUAq0J]ctJnXkvulf}XM5-]Hi#PhS&_x1C@1)H2#3PZ@Cg.eyz$0Kj~a?g>SRX+aS}U4 3"Xx:C;Mkp}5J7feQB0, LlhV'L,nfgbS
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 96 0a 99 e9 0d 46 19 64 24 10 e9 06 ec a4 00 7b 6c 9a 90 23 56 9e 24 77 85 e2 be ff d2 0f ef 35 66 56 68 1a 09 d4 15 61 75 3f a9 01 b4 50 51 48 1d 9b 2b 52 1e 20 f5 27 cc 35 9d ff 58 22 1b 16 2f 44 28 1b 32 25 43 24 9d 84 31 c4 09 ad 89 a2 5b f4 1e e3 ee ae 92 78 14 f4 42 3b 22 00 0d 00 10 18 80 8d fa 54 86 8d dc 3d cf e1 5b c8 49 4e d0 03 48 32 d8 fb bd ad 6d de d3 cf 84 b4 d3 0e 53 60 d4 88 35 b1 10 1c 74 23 83 6b ce 9c 31 13 22 fb c0 c6 66 32 f7 11 5e 27 ea 87 6b c2 ea 31 52 09 0d d5 06 e4 8c 98 c1 08 91 29 18 4a 52 b9 2f aa a6 ee 6b df fb 73 f2 61 f1 05 20 61 fd 1e 93 82 02 55 d7 a2 1e e9 90 cd 83 ed 89 89 cc be 24 6d c1 a2 c1 49 1f 8a 30 66 70 3b 42 90 80 85 38 80 34 15 28 0c 88 88 2a 86 11 ba 07 b9 b5 22 13 e8 9f 2b 52 a7 94 2c 23 4f 0d 4e 4b f2 d4 Data Ascii: Fd${l#V$w5fVhau?PQH+R '5X"/D(2%C$1[xB;"T=[INH2mS`5t#k1"f2^'k1R)JR/ksa aU$mI0fp;B84(*"+R,#ONK
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 06 37 9d 48 80 e6 f3 6c da e9 46 ae a9 eb b6 b7 0a bf fa 4b ba b8 26 63 01 a4 24 10 44 92 90 23 86 80 93 18 4f d2 08 12 56 d0 d1 b9 dd 7d b5 e5 23 59 b0 78 b1 41 99 25 a7 91 9b 58 3a 9a db 5b 88 de 47 6b ee be 75 e7 c5 8d 13 ef 78 01 c5 b0 ee 23 d7 27 7f 86 e7 75 c7 bf de b9 6d 46 63 5d ae 32 4b 86 90 44 ce 61 48 85 ee 7b db b1 a6 34 09 61 11 67 cc 9e 7c f6 ab 37 af eb ad f0 f8 8e 38 f7 b6 4f eb 6e fd 88 dd d6 8f ba ff f3 93 cf 58 07 19 d1 16 86 53 66 96 70 4a 59 98 37 a6 ab 1e d1 e7 7d 89 93 00 29 59 31 10 4b c0 0a 39 b1 b9 ae 18 91 10 03 02 f1 c8 81 49 b4 5c 46 00 31 32 0a a8 2e 19 ed 0e 64 56 f6 be 7f 5e 35 b1 62 2e e5 94 74 07 25 b3 8b 0f ff e7 68 ef 06 77 5e e0 cb 07 8f 81 fe c1 bf e3 15 a7 fa 86 0e 54 23 01 90 e3 80 44 99 f8 6b 82 0b 05 6a 20 89 58 Data Ascii: 7HlFK&c$D#OV}#YxA%X:[Gkux#'umFc]2KDaH{4ag\|78OnXSfpJY7})Y1K9I\F12.dV^5b.t%hw^T#Dkj X
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: cd 14 94 01 c1 7f 01 20 00 00 58 f8 ef fd bf 0a 00 00 a4 40 97 33 00 a4 e3 d0 24 bb 8f 4d 5e 57 55 8c 0f 09 5d da 6d 3b 53 d7 9e 76 91 b4 8e c9 06 0d 59 c9 12 c1 61 77 71 af 90 09 03 44 0a f8 57 4b b9 fe 86 07 24 38 91 e5 1d bd b2 b7 4d cf fc f0 23 d7 95 d5 03 df be f7 d0 57 ee a4 3e 7d 9f be 76 d1 dd 7e 46 af 61 8d 9d 5e 1a 13 65 64 b5 b0 91 39 06 43 d9 71 6d bc dd bb 4e a4 6d 30 1b 11 20 80 ff 31 00 80 20 40 00 01 2c 00 40 c1 ed 39 5b 4f 46 92 e9 c4 38 5a 45 fb d3 b0 b9 9a c2 28 4b ce b4 4d 1f 38 f4 f7 c5 12 0a 27 34 d9 64 ea a1 b5 b1 21 c9 24 26 a2 16 7f 2d ba f4 e6 72 7a b9 43 28 b5 e6 26 da 0b 9e 5e 8b 60 2a 1f 8b 3d a0 b3 c8 15 fe d9 f8 78 51 de 8c e9 d6 d5 6e cf 39 65 42 08 51 c4 17 ba f4 e4 bc 78 73 f7 aa 28 a6 5f df 6d 00 d6 56 40 00 40 02 46 88 Data Ascii: X@3$M^WU]m;SvYawqDWK$8M#W>}v~Fa^ed9CqmNm0 1 @,@9[OF8ZE(KM8'4d!$&-rzC(&^`*=xQn9eBQxs(_mV@@F
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 91 a6 bd f6 e4 07 df 6e ef 7e b5 7e b4 f0 b9 db c6 57 dd f9 f6 7a 5b 69 5e aa 0c 8f 22 bc 79 90 ef 1b 7b cb 77 f9 9b 0f dc 79 45 87 30 5c b2 24 6f 1d 7b 7a c9 73 2b 31 5d c0 9e 9b 02 c4 d0 1d 3d eb 8d a8 22 b1 25 75 df 2c fb 13 9e 39 ca 13 12 37 08 11 a6 5b 57 03 91 22 35 43 de 87 e6 89 3d fa 23 55 87 d6 9b 04 32 b7 58 32 d4 dd 8a 9c 45 d1 a4 46 c5 b9 ab 9c b9 52 f2 82 f9 45 89 74 f2 a8 77 06 f1 2f cc 4a df b5 57 1b e6 61 19 aa 99 95 87 7b a3 86 a9 a6 72 46 61 25 26 c4 8d 4c dd 15 e6 3f a7 83 32 48 38 80 32 9e 3b 39 f1 fd f0 70 f6 17 fc 93 7b b1 13 29 6f 0b 96 b7 7e be b7 2b 5d 4b 93 68 3d ae 01 44 44 ce a5 c4 33 1b 2c 29 7f 20 57 1c a6 c0 74 09 70 0c b1 23 82 00 72 21 72 c1 35 94 ad 10 db 20 6e 69 11 72 8e 4e a5 21 15 15 92 2e 52 8c e4 e1 0c ea 5e 9e af Data Ascii: n~~Wz[i^"y{wyE0\$o{zs+1]="%u,97[W"5C=#U2X2EFREtw/JWa{rFa%&L?2H82;9p{)o~+]Kh=DD3,) Wtp#r!r5 nirN!.R^
2024-04-19 14:06:42 UTC	738	IN	Data Raw: 08 8d db 75 d5 d6 1d cd e0 98 ca 31 a2 19 45 eb 74 11 b4 8c 88 29 25 21 25 73 a8 c2 11 3e de 5d 85 eb 04 40 09 05 43 15 9d 82 2f e3 2a 43 ab 31 0b fe d9 e7 d9 ac d4 9d dc cd 1b 37 6e 67 c8 e2 47 37 80 f0 ac 6b 0f 36 bd f7 63 de e8 9d 0e 9c 85 c5 68 0a b0 08 11 00 69 41 dc 25 2c 3e 98 98 db ab d0 91 13 80 b8 29 20 14 46 cc 86 67 2c 78 b7 8e 57 3e d0 04 5d cb 20 1c 18 df 2f 19 cb 8e 7a d6 ec ec d3 0a bb 77 2b a5 b1 a0 69 ae 86 d4 a4 63 b3 08 d5 a9 23 9e 00 dc 71 f5 9b c6 64 b2 77 a0 07 95 33 c4 a4 5a 7d eb 4a a5 20 7c 0f 69 0b 6d 92 45 14 20 26 9e ca f7 4f 30 cc 95 c6 01 90 16 b3 e6 59 27 21 9f ca da c3 f1 78 67 e9 c5 eb 93 64 5d e7 4b 08 50 e6 86 08 08 80 08 da 40 91 8f 02 a1 33 81 0f 7a 21 e1 18 8e 60 8a 46 af 6b d7 9c d5 27 5f 51 94 19 78 46 69 9e 88 96 Data Ascii: u1Et)%!%s>]@C/*C17ngG7k6chiA%,>) Fg,xW>] /zw+ic#qdw3Z}J \|imE &O0Y'!xgd]KP@3z!`Fk'_QxFi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.6	49960	74.125.136.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1016	OUT	GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 15512 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:20:45 GMT Expires: Fri, 19 Apr 2024 14:20:45 GMT Cache-Control: public, max-age=7200 Age: 6357 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 18 1a 1d 1d 1b 1f 22 25 20 20 20 1f 1f 25 25 25 25 26 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 30 57 42 38 3f 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 42 10 00 02 01 02 04 03 05 06 03 06 03 08 03 01 00 00 01 02 00 03 11 04 12 21 31 05 41 51 06 13 22 61 71 14 32 81 91 a1 b1 42 c1 d1 23 24 52 72 92 e1 Data Ascii: JFIF"% %%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W/0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"B!1AQ"aq2B#$Rr
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 93 b9 3e 50 ee 4f 94 58 23 84 93 b9 3e 51 7b 83 e5 16 08 a1 25 ee 0f 94 4e e4 f9 45 82 38 49 45 03 e5 17 d9 9b a8 8b 40 86 12 7f 65 6e a3 eb 0f 64 6e a3 eb 16 81 04 25 8f 63 6e a3 eb 0f 63 6e a3 eb 16 81 5e 12 73 84 6e a3 eb 1a 70 e7 ca 2d 02 28 49 45 03 e5 14 61 9b a8 8b 04 30 93 fb 2b 75 10 f6 46 ea 3e b1 68 10 42 58 f6 46 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 b1 ec 8d d4 7d 61 ec 8d d4 7d 62 d0 2b c2 58 f6 36 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 98 e1 9b a8 8d ee 4f 94 58 23 84 94 50 27 a4 5f 66 6e a2 2d 02 18 49 bd 99 ba 88 be ca dd 44 5a 04 10 93 fb 2b 75 10 f6 56 ea 22 d0 20 84 9b d9 cf 51 13 Data Ascii: >POX#>Q{%NE8IE@endn%cncn^snp-(IEa0+uF>hBXF>6>h'F>F>hBO}a}b }a}b+X6>6>h'F>F>hBO}a}b OX#P'_fn-IDZ+uV" Q
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 67 38 bf f5 18 9c 67 88 56 a0 10 d1 a5 de 13 7b e8 4d be 53 9b e2 1c 46 be 29 a9 51 af 48 53 bd 45 b6 84 13 cb 9f ac e9 78 8f 14 a7 86 0a 6a 66 f1 5e d9 45 f6 98 78 ae 29 4b 15 8b c2 77 79 bc 2f ae 61 6d c8 fd 26 b8 97 9a be f6 63 95 fc ff 00 43 ac 16 00 01 b0 16 98 9c 4b b4 e9 42 ab 52 14 d9 d9 74 26 e0 0b da 6c 03 3c db b4 05 bd ae b6 fe f9 9c e3 49 dc 8e b3 6f 4a 2c e8 b0 5c 7f bd c7 53 63 4f 2e 65 ee 86 b7 dd af 79 d6 66 9e 61 d9 f2 7d ae 8d ff 00 8d 7e f3 d2 73 4b 3a 71 4e 2a 89 c7 69 b4 dd 94 b8 5f 1b 18 9a 95 10 21 5c 9c c9 06 fa da 45 da 90 87 06 e5 86 aa 41 5f 5b cb 94 30 b4 e9 96 34 d0 29 6d c8 1b ce 7f b6 58 96 b5 2a 43 45 37 72 7a 9d 80 95 24 e6 a8 93 6d 41 d9 d3 e0 0f ec 69 7f 22 fd 84 e7 38 ab 7f fd 4a 3e b4 ff 00 ee 9b b8 06 fd 8d 2f e4 5f Data Ascii: g8gV{MSF)QHSExjf^Ex)Kwy/am&cCKBRt&l<IoJ,\ScO.eyfa}~sK:qNi_!\EA_[04)mXCE7rz$mAi"8J>/_
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 53 d4 1b 18 8f 58 b1 bb 12 4f 52 49 87 e9 de 4a 42 e7 58 b4 77 9c 03 1c 2b 61 d3 5f 12 00 ac 3d 36 33 4c 4f 30 4a a5 76 24 7a 1b 49 7d a9 ff 00 8d ff 00 a8 c3 f4 e5 b5 23 49 cd 2a 71 3d 23 17 8b 5a 34 d9 dc e8 07 cc f4 98 7d 97 ac 5e bd 76 3b b7 88 fc 49 9c a0 c4 75 2c de 44 e9 25 c1 e2 d9 2e 45 46 46 3b 91 7d 7e 52 2f 4d 5c 53 ec 8d cd d4 9a e8 ef f8 b3 5a 97 fa 97 ee 27 9f f0 23 6c 4a 1f 31 f7 12 d9 e2 63 76 a9 52 a3 6b 61 ad af 6f 39 9d 80 75 4a aa 58 90 bb 12 05 ed e7 39 bc 63 24 ae cd ee 69 ba 3d 4e 79 ef 6b 47 ed c7 fa ff 00 ee 97 5b 8a 51 23 c5 8a aa de 41 5b f3 98 fc 53 16 95 99 3b b5 60 a8 b6 f1 5a e4 dc 92 74 92 6a 29 3a 76 6a 32 94 9a b5 46 75 a2 11 24 22 d1 8d 38 24 76 3b de c9 9f dc c0 e8 ed f9 4d 3c 46 1d 2a ae 5a 8a 19 6f 7b 11 7d 67 9e 51 Data Ascii: SXORIJBXw+a_=63LO0Jv$zI}#Iq=#Z4}^v;Iu,D%.EFF;}~R/M\SZ'#lJ1cvRkao9uJX9c$i=NykG[Q#A[S;`Ztj):vj2Fu$"8$v;M<FZo{}gQ
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 3a da c3 e6 67 48 b5 d3 1b 8e a2 ca a7 2a 02 48 60 39 6d f5 22 74 c4 d8 44 a0 a3 da 33 16 e5 74 f4 70 03 b2 d8 b3 ff 00 2c 0f 57 5f d6 62 e2 30 e5 1d 91 b7 52 41 f5 13 d0 aa f6 9f 0a b7 b3 33 7f 2a 99 c4 f1 2a cb 56 bd 4a 8a 08 56 62 45 e4 94 1e 37 54 14 d6 49 27 66 71 5b 46 33 4b 25 64 55 29 ce 4a 47 64 44 a2 3f 2c 60 92 29 95 90 4c b1 8c d2 53 23 29 00 88 c5 02 0f 1a a6 0d 0a 56 02 2b 18 c0 61 90 75 a1 16 06 60 0d 22 34 c7 11 10 ac b4 5a 22 66 91 de 3d d6 44 66 91 00 98 08 de 71 e2 68 01 58 c2 24 80 c7 65 92 e8 0d b4 51 16 d0 98 03 80 8e b4 45 11 d0 51 2d 16 d1 61 04 00 21 68 a0 45 b4 10 14 4b 89 4c bb a8 d8 ed 22 a1 6d 74 d4 6a 25 bc 1a 96 71 51 ad bf 3e 73 71 8e b2 34 bd 8d 1a 38 53 dd b0 f0 a1 60 47 53 69 10 a6 45 2a c9 bb 01 a9 eb 2f d5 aa a4 aa 93 Data Ascii: :gHH`9m"tD3tp,W_b0RA3VJVbE7TI'fq[F3K%dU)JGdD?,`)LS#)V+au`"4Z"f=DfqhX$eQEQ-a!hEKL"mtj%qQ>sq48S`GSiE/
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 8a c6 e5 9a fb a5 e6 28 bf 6f ed 26 26 2f 89 62 71 0b 92 a1 ba de f6 0a 06 a2 3e 8f 18 c5 53 45 44 36 55 16 1e 01 b4 64 75 cc 7d cf fc 50 fb 7d dd b2 1a 95 6b bd 4e f9 98 f7 82 d6 3c f4 93 d5 e2 98 ba ba 1a 8c 07 f9 7c 3f 68 00 63 80 99 7f 56 fd 91 7e d9 7b b2 b5 16 ab 41 83 d3 62 1b 9d b5 f9 f5 97 57 8f 63 3f 8b ff 00 c0 91 da 16 91 7d 5b ff 00 e9 26 5f b7 5e 1d 12 9e 31 8b 6d ea 91 e8 00 90 bd 42 db b1 66 26 e5 98 93 17 2c 6e 59 1f d5 cb c2 48 d2 fa 75 e5 b6 6b 52 e2 f8 9d bb ca 67 d4 ac b0 bc 53 12 7f e6 51 1e ac bf ac c1 c9 0c b0 fe a5 7f b5 13 d0 7f ee 66 c5 6a ee d5 51 fb fa 6d 54 7b b6 22 c0 0f 3d b9 98 b8 8e 23 88 fc 58 9a 69 e4 a5 49 fa 4c 6c 91 ad 4e 3e e9 fb 22 7d bf fc 99 36 22 b2 b1 f1 d5 a9 54 fa 9b 7d 65 66 d4 de d6 f2 88 44 72 cc 72 73 4a Data Ascii: (o&&/bq>SED6Udu}P}kN<\|?hcV~{AbWc?}[&_^1mBf&,nYHukRgSQfjQmT{"=#XiILlN>"}6"T}efDrrsJ
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 30 c5 73 38 f1 b5 8b 79 9b 5a ff 00 20 24 57 d3 31 3e 86 c5 b4 55 d6 3c 2c d9 c4 8b 2c 70 11 58 5a 20 30 41 6d 20 c4 d4 ca 3d 65 a1 32 f1 95 6e f6 1c b4 9b e2 57 2b 24 de 88 71 35 ac 9e bf 69 4e 8b f8 87 ac b0 68 9a b5 32 83 65 51 e2 63 b0 12 45 a8 b4 09 c8 a0 ff 00 98 8f 14 f5 7a 6f 91 98 4d 45 1a 59 0d af 69 13 ca 15 38 83 34 89 6a b9 3c ec 76 9a 5f 46 bd cc fa 86 89 12 4a 75 ec 2c 76 90 50 62 c9 73 d6 d1 e4 cf 27 27 1d 3c 59 da 13 6b 68 65 6e 31 9f c1 49 09 d3 41 e9 22 c0 d1 ad 88 71 59 0a 02 87 67 bd 8c aa c4 51 ab 9d 5a d6 d4 5b 53 34 38 7d 42 94 c0 1a 0d fc fe 53 71 e3 84 76 8b 2e 59 4b 45 ce 2b 8b 7a 6a 9d e2 ae b7 b6 53 7e 93 16 be 34 b8 2a 14 eb a5 ed 2c e3 1c d4 6b b6 c0 58 09 15 3a 59 88 02 4e 48 46 ec b1 e4 92 54 68 70 7a 17 39 8f 29 ab 5a a8 Data Ascii: 0s8yZ $W1>U<,,pXZ 0Am =e2nW+$q5iNh2eQcEzoMEYi84j<v_FJu,vPbs''<Ykhen1IA"qYgQZ[S48}BSqv.YKE+zjS~4*,kX:YNHFThpz9)Z
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: f3 9c 5a aa 8f 51 01 bd 22 6e 3a 4f 27 17 13 bb 3d 2e 93 b2 bb 9b 92 62 89 79 56 8d 4e 76 32 ad 5a 79 58 8b dc 75 9e c4 cf 1c e0 d6 c4 11 e2 30 49 10 6b 29 cc 7a 5b 9e d1 dc 2a aa ab 97 3a f2 b7 94 8b 8a a1 44 05 07 84 d8 1f 59 4a 89 37 d3 e3 3d 70 e1 78 b4 fc 9e a8 41 c7 b3 76 a7 14 a6 1d 7b aa 5a 29 27 cf ce 15 68 52 a8 86 b5 2a 85 5a f7 64 2c 0e 97 da d2 0f 68 45 54 51 4d 4b 01 a9 65 06 47 5c 27 7a 0d 25 ca ac 05 c6 de 21 bc 43 85 a7 a4 d7 fe f2 76 a2 e2 88 f0 24 69 50 19 32 cf 24 b8 e5 1e d1 e3 97 1c a3 da 1c ab 1c 56 00 c5 13 2d 18 32 f1 d4 f2 56 4a a7 dd 3a 1f 2e 52 de 1b 00 ad 54 03 60 0f 39 66 a5 25 75 2a c2 e0 c8 57 0a ca a1 58 e6 03 63 ce dd 0c ea a5 94 6b c9 d7 8d ec d2 a5 c3 e9 2b 5c 72 e6 0c af c5 69 53 76 a2 97 20 66 df 9c 92 8e 20 e4 f1 d9 Data Ascii: ZQ"n:O'=.byVNv2ZyXu0Ik)z[:DYJ7=pxAv{Z)'hRZd,hETQMKeG\'z%!Cv$iP2$V-2VJ:.RT`9f%u*WXck+\riSv f
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 18 ff 00 27 49 f2 28 44 0e fa 5f e3 25 a4 84 e8 04 96 86 1a f6 cc 72 82 6c 3a 99 a8 70 8f 4c 68 ba 79 6b 3c 2f 67 86 af 65 2a 98 16 5a 5d e1 22 c3 de f2 13 26 b7 10 52 e0 72 63 61 79 b9 c5 2b 7e e6 c3 9f 3f 4f fc 33 89 35 07 7a a5 b6 5d 7e 32 c5 2d 96 f1 e8 bb 8f a6 c0 dc 31 b5 f5 d7 49 4d a9 5a 59 a9 8b 24 6c 08 95 da b8 d7 49 25 6c c3 64 03 30 37 1b f9 4d 3c 35 ea 53 62 db a9 17 f4 3b 19 63 86 61 81 0a 58 6a 75 fd 25 ee 3d 6a 38 75 a8 80 66 b8 52 3a 83 c8 cc f9 a6 7a 23 06 96 46 33 f8 41 3d 04 c9 0a 44 d5 0c 95 53 32 e9 7f c2 4c 88 a9 02 d9 7e 93 58 b4 56 d4 b6 41 45 ed 05 4b 9b cb 07 07 50 0c c5 48 1d 62 a5 3b 48 f4 58 a0 c2 a2 87 05 c5 c4 e9 f0 f5 14 a8 b5 ad d2 73 6a b2 e6 14 1b e8 6d 30 f6 77 8e 8d 6c 4f 09 a3 58 1b 8c ad d4 4c 3c 66 0e ae 18 80 fe Data Ascii: 'I(D_%rl:pLhyk</ge*Z]"&Rrcay+~?O35z]~2-1IMZY$lI%ld07M<5Sb;caXju%=j8ufR:z#F3A=DS2L~XVAEKPHb;HXsjm0wlOXL<f
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 03 f0 aa 9b ec 34 de 6f 15 14 72 53 c8 6f 0c a4 6a 9c 83 ce fe 51 ef 85 22 a8 43 cc 81 f3 9b 58 2c 22 d1 4c aa 35 e6 79 98 ca 78 42 6b 1a af 61 6b e5 5e 7d 01 3d 26 54 ad 99 51 72 7a 2d e1 69 dd ae 25 2e d6 d6 d2 95 2e 9e 33 f6 1f 9c d6 a2 ca a2 e7 61 ac e7 38 95 eb 16 7b 1b 9d 87 97 29 95 6d 9e 9e 67 8c 28 a5 c2 eb 8a 6f e3 17 53 a1 1e bc e6 b6 0f 83 a2 55 2f 9c b2 6e 8b ae 93 05 44 d8 e1 7c 43 2f 81 ce 9c 8f 48 9d ad a3 c7 66 f3 80 c0 83 b4 cf c4 60 f2 8b f2 96 c5 48 b5 2a 0c 8d 71 71 6b e9 bc cc 66 9e 99 d3 8e 78 b3 18 ac 7d 27 b1 8d 35 95 b6 3f 3d 21 2b 47 b5 3b 35 f0 f5 c4 d1 a1 88 02 73 94 01 be f3 4a 8e 9b b4 c1 be cb dc 4e 8d 3c 42 65 61 af 23 cc 4e 32 be 16 a6 19 f3 0b 8d 4d a7 59 52 aa 28 25 9a 66 71 26 4a 88 45 ed e6 79 4b 17 46 24 95 19 9c 0a Data Ascii: 4orSojQ"CX,"L5yxBkak^}=&TQrz-i%..3a8{)mg(oSU/nD\|C/Hf`H*qqkfx}'5?=!+G;5sJN<Bea#N2MYR(%fq&JEyKF$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.6	49961	74.125.136.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1016	OUT	GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16242 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:42:05 GMT Expires: Fri, 19 Apr 2024 15:42:05 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 1477 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1d 1d 1b 1f 1f 1d 1d 1e 1d 1f 1d 27 1f 1f 1f 1e 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 2f 57 3f 37 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 48 10 00 02 01 02 04 02 06 07 06 03 06 04 05 05 00 00 01 02 00 03 11 04 12 21 31 05 41 13 22 51 61 71 92 06 32 52 53 81 91 d2 16 23 42 a1 b1 d1 14 17 Data Ascii: JFIF'.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W//W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"H!1A"Qaq2RS#B
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: ec 4e 2b de 50 f3 3f d3 0f b1 38 af 79 43 cc ff 00 4c 35 61 f2 47 d9 cd c2 74 9f 62 71 5e f2 87 99 fe 98 7d 89 c5 7b ca 1e 67 fa 61 ab 0f 92 3e ce 6e 13 a4 fb 13 8a f7 94 3c cf f4 c3 ec 4e 2b db a3 e6 7f a6 1a 4b d0 7c 91 f6 73 70 9d 1f d8 ac 57 b7 47 cc df 4c 4f b1 98 af 6e 8f 99 be 98 69 2f 42 f9 61 ec e7 61 3a 2f b1 b8 9f 6e 8f 99 be 98 0f 43 31 3e f2 8f 99 fe 98 f4 97 a0 f9 61 ec e7 61 3a 41 e8 4e 24 ff 00 79 43 cc ff 00 4c 70 f4 1b 15 ef 28 79 9f e9 8b 56 3f 92 3e ce 66 13 a7 fb 0b 8b f7 94 3c cf f4 c3 ec 2e 2f de 50 f3 3f d3 0d 58 f7 8f b3 98 84 e9 4f a1 18 a1 fd e5 0f 33 fd 31 bf 62 f1 3e f2 8f 99 fe 98 69 2f 42 f9 23 ec e7 21 3a 3f b1 78 9f 79 47 cc ff 00 4c 3e c5 e2 7d ba 3e 67 fa 63 d2 5e 85 f2 c3 d9 ce 42 74 83 d0 ac 4f bc a1 e6 7f a6 3b ec 36 Data Ascii: N+P?8yCL5aGtbq^}{ga>n<N+K\|spWGLOni/Baa:/nC1>aa:AN$yCLp(yV?>f<./P?XO31b>i/B#!:?xyGL>}>gc^BtO;6
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 88 d5 11 88 6e 58 a1 64 a0 42 16 04 b4 8e 92 49 5e f1 ca d2 1a 2d 48 9e d0 8a 22 da 41 a8 d8 a0 45 85 a2 02 da ed 22 71 1f 41 ae 2d 1c eb 32 e9 9a be 55 95 a3 5c 69 26 2b 19 50 69 34 4c cd a2 b5 a5 9a 66 40 04 b5 45 23 97 44 45 72 4a 82 3e 00 44 73 a4 c0 ea 5c 22 35 3a c7 c8 90 eb 25 12 99 11 16 11 61 24 d4 48 42 2c 04 98 90 81 32 07 a9 1a 56 4c a7 a9 35 e1 2b 86 91 60 f8 92 d5 c9 65 70 1d 4b 21 60 2c c0 78 13 13 a5 d8 a3 3b 2e cc ee 3a 84 e1 cb 0d e9 bd 2a be 57 04 fe 53 4a 50 e2 18 c4 1d 25 26 57 6f ba 2c e5 40 b2 a1 b8 be a4 76 19 32 69 2e 4d 57 65 d0 41 00 8d 88 b8 f0 8b 28 70 4a f9 f0 ca 0f ac 97 a6 de 2b fe 96 97 8c 69 da b1 3e 02 11 21 78 c5 62 c6 98 b7 88 60 0c 48 c3 1e 63 4c 68 c8 8c c4 8e 31 ad 2c 45 6b 45 b4 58 4d 0c c2 d0 b4 58 b6 88 04 b4 20 Data Ascii: nXdBI^-H"AE"qA-2U\i&+Pi4Lf@E#DErJ>Ds\"5:%a$HB,2VL5+`epK!`,x;.:*WSJP%&Wo,@v2i.MWeA(pJ+i>!xb`HcLh1,EkEXMX
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 11 c5 a3 2f 11 e2 18 e2 f1 82 a6 b2 22 d6 8c cd ac b5 12 1c cb 80 c8 da 90 e9 05 4d 73 05 65 df 4b 12 0e df 08 aa d1 2b 36 92 28 bb a5 64 35 6a 5e 47 78 d2 62 4d 92 39 db b3 2b d2 7d 30 e8 d6 b8 4a a8 4f 86 a3 5f 98 f9 c6 f0 ca c9 57 14 a5 09 65 40 e6 e0 10 a0 9d 17 5d b6 cd f2 92 fa 45 7f e1 1e de d5 2f 97 48 b3 3b 05 5d a8 53 2c a4 66 71 87 41 71 9a c5 9a a1 d0 73 36 98 64 49 4a d9 ac 65 f8 33 b4 4d a7 3b e9 42 5b 11 84 a8 55 8a 0e 95 09 00 90 09 02 db 78 13 f0 95 69 d6 c4 d1 19 ff 00 88 19 98 f5 95 d4 ba 16 bf 79 ea ef 6d 23 f8 a7 12 fe 23 09 4d 88 c9 51 31 14 83 28 37 17 b1 d4 1e 60 89 84 33 43 25 ea 56 3c 91 97 45 cf 47 46 6a 95 6a 00 d9 72 22 2b 15 2a 09 cc d9 80 bf fd 33 7a f3 2b 80 35 a8 b2 df 51 55 ef f1 b1 fe b3 4e e2 6b 15 c1 6d f2 29 8d 85 e2 Data Ascii: /"MseK+6(d5j^GxbM9+}0JO_We@]E/H;]S,fqAqs6dIJe3M;B[Uxiym##MQ1(7`3C%V<EGFjjr"+*3z+5QUNkm)
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 5c d9 41 ed 12 5b 4e 77 1d c5 ea 0c 42 3d 10 a2 d4 d8 75 86 62 43 11 c8 1d 36 99 e5 9b 8c 7f 1e fe 8b c7 1d 9f 3d 17 29 63 b1 05 56 ae 54 c8 f6 cb 4c dd 5a de 3c 8e fb fe 53 27 19 56 9b 62 d9 f3 82 ac d4 da e0 82 2c 15 41 d7 6e 46 4a ac e8 b4 a9 f4 8c 10 d3 25 8f 50 b0 23 2f aa 4e de b4 b5 80 c3 53 74 00 d6 64 20 20 08 1f 28 03 22 9b eb de 4f 39 c0 b3 64 8d a9 f2 74 60 c0 db 77 d1 6b 84 e2 11 de a8 a6 ca c3 ee d8 90 6f 66 37 04 7f ed 1f 39 a5 33 78 7d 20 95 ea 28 62 f6 a7 4f ad 7b e6 eb 3e b3 4a 76 e0 95 e3 4c cb 3c 75 9b 40 c0 11 63 a8 8f a6 2e 64 03 3e 73 b6 4b 69 db 79 62 8e f3 6f a3 2a 25 7a 76 8c 93 d5 da 41 21 3b 09 76 24 22 c4 94 48 40 98 46 c0 0a dc 4e 8b d4 a1 51 50 d9 c8 ba eb 6d 41 bd af f0 99 38 3e 23 87 f5 99 c2 31 03 aa fd 52 3c 0f 31 7b c9 Data Ascii: \A[NwB=ubC6=)cVTLZ<S'Vb,AnFJ%P#/NStd ("O9dt`wkof793x} (bO{>JvL<u@c.d>sKiybo*%zvA!;v$"H@FNQPmA8>#1R<1{
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 20 07 36 d2 fb da 72 f8 be 42 b9 39 9b e7 c0 e4 d2 82 e8 38 be 1f a5 ae 89 7c ac 29 3b 23 76 36 75 df b4 4a 98 2c 7b 53 aa 51 97 2d 5d 03 a9 3a 55 e4 18 1d af 6d 8e c7 63 6e 56 28 e2 5a b6 20 b1 0a 85 68 ad b5 dc 33 13 cc 7f 86 33 1e 94 eb 26 ae 81 d6 f9 2a 66 04 0e e3 6e 46 44 fc 96 b3 3a e8 d6 3e 35 e2 49 f6 6d d1 ac ae 2e be 04 1d 08 3d 84 72 32 49 ce f0 ec 79 08 cc c4 67 a3 95 1f ac 0e 74 3e a8 b8 dc 8e 5f ea 66 e1 a8 57 a3 62 ca cb 50 d8 65 dd 0d af 63 da 39 5f b4 8e d9 e8 c7 2a 7d 9e 7c b1 35 d1 34 21 09 b1 90 d2 21 14 c0 46 31 c0 c6 98 c7 26 e2 d7 b5 f5 8f 27 9c 94 f9 02 b5 66 be 23 0e 96 e5 59 af dc 12 d6 ff 00 dc 3e 53 9c e2 0b f7 ab 72 47 dd 28 1a 5f 67 70 66 bd 3c 68 ab 5a 95 44 02 c2 9d 55 ca 5d 55 ae f9 6c 6c 74 e4 79 f3 90 63 f8 3d 6a cc 96 Data Ascii: 6rB98\|);#v6uJ,{SQ-]:UmcnV(Z h33&fnFD:>5Im.=r2Iygt>_fWbPec9_}\|54!!F1&'f#Y>SrG(_gpf<hZDU]Ulltyc=j
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 32 b0 25 18 0d ca 90 3c 6d a4 60 73 58 74 19 69 72 1d 4f e9 3b 0a 14 ad 73 69 cb 53 c3 54 53 49 1e 8b 10 4d 88 cc 87 40 2e 79 f6 4d 8a 9e 90 d2 a5 94 1a 75 45 d6 ea 2c bb 6d ed 4f 99 cf 87 23 74 93 3d b9 e5 8e bc 33 38 63 28 9a 34 91 d1 aa 65 5a 65 82 a9 61 4c e5 b6 a7 6b ea 45 86 ba ca 74 b8 68 ae 59 e9 00 56 ec 73 1a 95 12 cb 9d 82 d8 06 1c 96 2f 0d e2 6c aa a8 d4 ee f9 42 6e 32 90 36 f0 d2 37 04 cf 49 42 9a 6c ac ab 55 b3 2b 80 0a 82 cc 7e 57 9e 94 a5 92 5c 38 9c 3e 3b a9 cb 6e 8b 58 5e 1c 52 bd 31 53 37 e2 60 bd 35 46 53 96 c5 4d 8b 11 37 c1 98 b8 1a cf 52 ba 96 52 2c ae d7 67 0c 4e cb ca 6c 4e af 15 7f a6 67 e5 ff 00 12 89 d0 da 2b 54 90 e6 89 9a 74 51 cd 63 d8 c8 d8 47 13 1a d1 a1 11 98 08 18 4a 01 18 cc 0a e6 d5 1b c6 6f 19 9f 8a c0 67 6b 83 6b ef Data Ascii: 2%<m`sXtirO;siSTSIM@.yMuE,mO#t=38c(4eZeaLkEthYVs/lBn267IBlU+~W\8>;nX^R1S7`5FSM7RR,gNlNg+TtQcGJogkk
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 50 34 17 37 72 c3 4b f6 5c eb 38 5f f1 e5 7e 91 d5 1f e1 2a f6 54 a2 0a ba 90 57 42 0e f3 57 12 9e b0 06 ff 00 75 5f fe cf f5 13 20 e0 ab 73 4a 83 ff 00 4d bf a0 9a 98 5b 87 65 fb c7 73 41 c0 52 85 4d d8 8d af 6e c3 2e 4b 94 c5 17 c3 2c f0 b3 7a 9e 14 85 fe 2d a7 e8 66 ac c9 e0 e8 cb 56 a2 ba b2 9e 8e 9e 8c 08 bd 8b 5e df 39 ad 2b c5 55 89 21 79 4e f2 b0 89 16 21 9d 27 38 a2 0d 1b 16 f0 10 d3 1b 14 c4 80 09 1a 63 ed 28 63 b1 36 ea 8f 89 8c 46 a5 17 b8 11 d5 70 e1 bc 66 76 0a b9 b0 9a 88 d7 13 82 49 c2 56 8e d8 b5 25 4c a2 69 e5 36 31 1d 39 cb f5 69 06 1d f2 95 40 46 86 75 e2 ca a7 fd ce 79 c1 c5 91 09 22 09 18 8e 0d 37 33 2c 2b 47 5e 57 53 ac 7b 1b 19 14 31 ce 26 5e 2d 9b 3d 8e a2 6b 29 bc 90 51 56 dc 5e 17 40 63 e0 55 af dd 2f f4 46 48 69 80 d6 02 3f a2 Data Ascii: P47rK\8_~*TWBWu_ sJM[esARMn.K,z-fV^9+U!yN!'8c(c6FpfvIV%Li619i@Fuy"73,+G^WS{1&^-=k)QV^@cU/FHi?
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: a7 72 44 bc 29 90 35 b4 ac 54 ab 05 ec 3a 4b 26 8b 58 b3 19 94 d5 97 17 42 e5 b8 92 d3 d0 69 23 4d a4 8b 2a 09 24 29 36 d9 5f 17 8a 4a 76 2c 6d 7d 86 e4 f8 09 9f 5a a2 56 c4 d2 e8 d8 30 14 ea 06 b1 da fb 5f b3 63 2d 62 09 18 aa 64 29 7f bb a8 2c 2d 70 6e 35 17 d2 42 30 ce 2b e7 e8 5f 2f 47 6b 96 a7 72 6f 7f 6b b2 70 67 f2 aa 6f 13 e8 bc 51 96 ca 91 3e 0b 15 4c 61 e9 66 60 08 44 52 39 86 02 c7 4f 81 94 78 a6 2d 58 3a 83 72 c1 91 40 d8 9c a7 9e d2 33 46 aa 52 b1 5a c2 a0 73 a2 e6 23 25 89 b7 56 e3 7b 48 ea 50 aa 6a 21 c9 5d 90 3d ce 6a 6e 40 16 22 fb 5f ff 00 ec a7 e5 3d 78 af f2 6e b0 2b e6 cb 55 69 3a 0a 59 a9 b2 85 50 19 8e 5b 5d ac 06 a0 f6 c7 89 a1 c5 31 d4 ea 22 a2 e7 b9 74 3d 6a 4e 83 4d 77 23 ba 51 75 b1 8f c0 c9 2c 98 de ca b9 33 f2 62 94 95 16 29 Data Ascii: rD)5T:K&XBi#M*$)6_Jv,m}ZV0_c-bd),-pn5B0+_/GkrokpgoQ>Laf`DR9Ox-X:r@3FRZs#%V{HPj!]=jn@"_=xn+Ui:YP[]1"t=jNMw#Qu,3b)
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 39 b0 e5 9b 95 36 5e ae d5 0a 66 35 19 b2 32 b0 be 5e db 7b 3d 84 c9 98 5e 4b 8a e1 bd 1d 02 7a 46 3a d3 bd c2 eb d7 03 b2 31 86 b3 3f fc 6b 4e 12 6b d9 a7 99 4e 49 21 69 2c b4 82 42 04 99 4c ef 97 27 25 50 aa 77 8f 0d 1a 60 a3 59 91 46 67 18 e1 b5 6b d4 56 a6 50 00 b6 39 89 06 f7 ee 13 9d c5 53 a9 46 a3 52 70 b9 96 db 5e c4 11 b8 9d d8 b4 c5 f4 82 9d 25 7a 75 5d 41 07 ee ce 97 d7 71 fd 60 b9 74 6d 09 3e 8c 1c 36 03 13 5d 01 a5 48 90 7a b9 f3 28 0a 76 b9 d6 f3 4a a7 a3 d8 ac c4 2a 2b 2d ec 1b 3a 8b 8e db 4b de 8c e3 94 bd 6a 63 41 d5 75 f0 d8 ff 00 49 d0 f4 c2 67 29 34 e9 16 dd 33 1f ec 96 1e d6 cf 5b ce 3f 69 15 7f 44 28 e4 6c 95 2a 86 b1 b5 d8 11 7e 57 d2 6e 7f 10 04 69 c5 89 9d cc 5b 1c 4d 5e 09 89 a6 a5 9c d3 16 dc 02 4f f4 88 bc 3a a1 64 53 51 6e c7 Data Ascii: 96^f52^{=^KzF:1?kNkNI!i,BL'%Pw`YFgkVP9SFRp^%zu]Aq`tm>6]Hz(vJ+-:KjcAuIg)43[?iD(l~Wni[M^O:dSQn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.6	49962	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:42 UTC	1079	OUT	GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:42 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 7114 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:18:04 GMT Expires: Sat, 20 Apr 2024 13:18:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 2918 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:42 UTC	722	IN	Data Raw: 52 49 46 46 c2 1b 00 00 57 45 42 50 56 50 38 4c b6 1b 00 00 2f 3f c0 0f 00 4d 28 6c db b6 cd 41 76 77 ed 88 fe c7 90 c1 db de 85 b5 7d fd 77 d7 e8 bd 01 29 92 00 45 dd f0 a5 8e 06 dc 06 20 59 38 8c 24 59 a9 06 97 fc 03 1c 1c be bb 60 71 b0 8d 64 ab cd 82 6c a4 88 88 02 54 85 fa af c7 7b 33 6c 23 db 56 f2 70 77 0d 29 81 fe bb 20 22 75 77 77 e8 7f e8 d3 af 47 9f 3a 2d 7a 04 fa 84 5e 7e 75 ac 8b 5a a4 44 b4 7e c1 e7 f4 f6 b7 d0 a0 e2 27 68 99 02 b1 8c f7 8e c0 84 09 fb 8d ef 4b 9f 56 19 fb cc dd 9d b5 53 c5 0c 1d ef 7d be fb f9 9f 90 7f ce f8 77 de e8 e7 37 2b 57 27 be ed d5 f6 53 ad 2a ba 1f 2d 0e 5a 32 8d 40 9e 5f 79 60 98 e8 6b 5e 89 c4 93 c0 18 06 d2 b6 69 fc cb fe e7 21 22 26 a0 f4 ba 4f 91 dd d0 a0 81 3c d9 b6 ad 48 b2 6d 5b ad 8f 29 73 8a a8 1a 2c 66 Data Ascii: RIFFWEBPVP8L/?M(lAvw}w)E Y8$Y`qdlT{3l#Vpw) "uwwG:-z^~uZD~'hKVS}w7+W'S*-Z2@_y`k^i!"&O<Hm[)s,f
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 89 21 41 29 af 44 ba 22 d9 15 2a 63 0e c0 2d f6 9d 41 02 bd c0 ea 28 21 44 29 c0 52 67 7b 3b 27 a7 4d 55 91 95 00 52 26 48 4f e3 01 6e e7 ba c8 1e 96 d7 8e 5e 6b b3 c6 ff 3c fe 4b cf 7f 15 48 a9 57 80 80 57 40 00 e9 e3 79 aa fa 41 46 ca 24 ea 6c ee f8 f9 8f dd fa e4 03 7b 2f 5b 53 0f 26 bf 28 2d db a3 be 38 c9 d0 85 01 b3 04 90 01 db cd cb b4 3b bd 99 95 ba d3 d1 ba ca 06 15 19 00 26 15 bb 95 db 48 3b ab f1 ed ec c2 b9 9e fc d1 c3 2d 3f 3d db 69 81 cc 80 e1 28 d0 f0 ff 49 15 df 77 1f cf 7e 98 a1 e6 ca 33 ee fa cd b7 bc f3 a7 de 77 c0 b7 7e 67 b3 1f bc 3a ce 6c c1 4b ff f1 c8 fd c7 ef 7e fa f0 75 7b f2 b4 bb a4 52 41 72 20 43 94 63 d8 4c b7 ab 37 0c 9b f3 ad 09 0d e3 ac cd 6a 37 08 89 c2 82 80 74 14 c8 6b 8c a7 e1 ea e7 27 b3 38 9d de 5b 01 a1 40 02 8b 0a Data Ascii: !A)D"*c-A(!D)Rg{;'MUR&HOn^k<KHWW@yAF$l{/[S&(-8;&H;-?=i(Iw~3w~g:lK~u{RAr CcL7j7tk'8[@
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 6b ce 1b 36 c2 1d 99 c2 10 6d 68 93 1a 95 16 dc 12 18 c8 4a 5d 50 93 cc d6 2b dd 43 f2 bc 95 f2 86 6b 7e b7 ed 53 df 57 a7 bf 77 d9 79 af 81 ae 0f f9 f1 7d f9 0a da a3 fd cc 8f cb 4d af 20 dc e7 3a 12 94 40 12 01 b7 85 c2 90 41 d6 41 27 00 d8 79 f1 cc d1 bf 5e fd 9f ef fc 40 79 c8 0b 0f f8 49 ee 6f 63 8e cf 25 01 b1 13 94 83 b6 dd 68 a5 e7 b6 78 c0 e6 d0 34 16 cc 15 88 00 32 b3 f3 f5 da 55 e5 d0 41 ce 8f a0 79 95 32 bf c6 80 3b ba 7c f3 49 3e 39 d0 5c 3c ce 4d 0f 81 21 6a 82 ad 1b 12 c9 10 e6 16 8a 80 3c 29 15 89 24 19 81 20 f8 78 32 3a fe fb 3b 27 fd ea 2d ee 7f c1 ed 37 2f f7 bb e6 da 75 9f 89 85 36 19 14 c8 6c 1b c5 04 2a 58 b4 54 08 42 94 68 17 22 4c a6 12 09 86 9a 2b 8f 24 06 12 6c 6b e8 68 59 59 4b 9d b8 55 be f3 7a a2 e1 39 48 00 02 89 04 02 32 28 Data Ascii: k6mhJ]P+Ck~SWwy}M :@AA'y^@yIoc%hx42UAy2;\|I>9\<M!j<)$ x2:;'-7/u6l*XTBh"L+$lkhYYKUz9H2(
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 36 47 e5 45 ba fa 7d 5f fb 21 57 be 11 d7 ea fe b3 cf 58 f2 f0 b3 0f 8f 21 04 e6 f4 50 c8 d9 03 b2 09 51 01 39 15 39 34 8f 3c e9 4c 5e d5 6f 22 9f 73 90 6a d8 04 66 8e f9 02 af e5 19 08 00 10 d0 99 b1 d9 ca da d5 67 74 01 07 0b 80 11 10 91 6d 18 00 5b 27 22 02 24 6b 1b 0e eb 6b 6f 5f 9b 4f d5 9e 0c 9a 67 66 26 09 4a 30 80 10 ca aa 13 f5 57 8b 1d d5 11 e7 ff ed fc db 8d 9e 7b f1 3d 8e c1 40 34 d1 ad 2c 42 10 9e 64 c2 5d 4e 55 2a ea d0 34 b5 2f ef 8d 37 bb 01 98 53 6a 82 75 68 4e cc ed f5 fb bc 06 2c 80 00 53 15 6e fc f4 e8 ee e3 fa a7 9d 25 96 8c 87 2e ad 07 d7 7f 58 07 47 57 a1 cf c2 ea c8 e5 f4 48 0b 07 15 28 00 c1 e5 c3 7b ae fb c8 fb dc b8 fb 6b 47 36 c5 85 5c 6a 69 64 0a 72 c6 b8 3c 33 86 44 96 2d 84 cf 05 53 20 50 44 3d 79 e3 bf 59 7a e8 b5 3e 7f 54 Data Ascii: 6GE}_!WX!PQ994<L^o"sjfgtm['"$kko_Ogf&J0W{=@4,Bd]NU*4/7SjuhN,Sn%.XGWH({kG6\jidr<3D-S PD=yYz>T
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 12 d4 1e 14 1a fb 26 c8 58 57 79 11 52 d7 cf ee 3f 72 ee 23 cf 2b 9b 7f 3b 6d f2 57 17 d4 e3 e3 14 05 fd 66 9b a8 b4 10 1e ae bd fc b5 9f 3c 7a 71 dc 55 88 f6 ba af f8 93 ee 6d 3f bd ef 2f 67 3d 83 10 22 15 26 0f dd 18 e6 57 ff de d4 bf 3e 74 55 9a 8b 16 91 6d 29 11 a2 49 10 cd a0 69 00 85 b0 65 0c 6d 1b 4e 65 ca 0e 4c 0e 57 10 1d d4 01 29 a4 f9 db 91 a4 98 ea eb 5f c8 67 e6 13 4c 34 c1 83 00 82 1e 9b cb 9b d5 e1 fc d8 c5 37 3f 5c 8d bb ab 27 3f 53 9d fd bc 85 d1 b8 d4 ad d5 f6 b9 0b c7 a9 25 2c 94 fb cb 6d df 7c 3c 76 15 23 04 7f 77 fd a5 6f 75 75 f9 07 07 80 84 94 37 ba aa fa 85 e7 b4 5e 49 2c a2 65 02 b2 08 58 a8 96 30 59 80 42 14 84 99 d5 84 8f d0 7a d9 4d a0 9a dd 54 49 6f b6 45 34 c6 ee 98 bf 4b 6b 90 62 7c 77 14 7e 81 01 8a 34 28 30 68 7a 72 9a ea Data Ascii: &XWyR?r#+;mWf<zqUm?/g="&W>tUm)IiemNeLW)_gL47?\'?S%,m\|<v#wouu7^I,eX0YBzMTIoE4Kkb\|w~4(0hzr
2024-04-19 14:06:42 UTC	1255	IN	Data Raw: 74 13 d9 87 67 d4 c4 c2 28 17 21 47 20 81 40 e0 21 9e fa 24 48 14 49 40 20 02 22 90 cd 4a 49 06 08 04 60 01 05 08 11 72 55 54 e0 41 cd 68 a2 51 90 73 a4 50 02 a6 42 16 48 ed 75 bf d7 d5 a5 4f a3 4e dd 3e 36 ea 52 38 c8 ec bd 62 3a e3 ce 75 5b 73 56 cc 55 e6 51 f5 d0 38 df 14 6b 42 2a 51 50 13 7d 37 8d ca 38 04 33 6a cc 10 00 24 10 19 09 01 83 0e fc d4 a5 4c 40 0b 0a d1 a2 20 c9 54 4a 61 0d 09 20 28 24 59 a0 42 21 22 40 68 68 fc d0 a1 ce fc 68 30 45 82 cc 22 97 31 dd cf a4 d7 1d 36 f6 e9 f2 b8 6f 36 ea 2c 7a 00 c6 1c 53 47 9a 99 cc fb 57 62 32 68 7c 18 dd bd da d9 ed 29 71 70 2d 36 9f 85 8a 24 16 d1 96 b1 57 a5 85 69 4a 32 05 01 22 48 b2 84 24 ce 9d 79 52 35 48 28 48 11 41 22 0a c0 90 9d 82 60 01 10 92 60 49 c8 b2 ac 76 1c 6f 70 5a fd bc 73 01 4c 60 02 0d Data Ascii: tg(!G @!$HI@ "JI`rUTAhQsPBHuON>6R8b:u[sVUQ8kB*QP}783j$L@ TJa ($YB!"@hhh0E"16o6,zSGWb2h\|)qp-6$WiJ2"H$yR5H(HA"``IvopZsL`
2024-04-19 14:06:42 UTC	117	IN	Data Raw: 4a 42 8c 49 b1 09 90 aa 1c 4c 81 14 52 32 60 12 5c 51 06 16 20 03 09 86 8d 14 34 66 dc e1 cc 8e f9 3f 99 cc b2 60 01 91 01 0c 88 aa 24 33 29 92 5d a8 82 89 50 48 c9 48 4e 26 bb 64 24 c7 8c ec 22 30 cb 34 1b 4d b2 23 0d 92 5c e3 1e ab 0d 91 12 24 84 20 29 05 05 c4 98 fd c1 34 42 2d 44 30 0c 1d 99 47 52 31 32 31 31 50 1b 73 a5 43 2c 68 70 0e 9c a0 02 Data Ascii: JBILR2`\Q 4f?`$3)]PHHN&d$"04M#\$ )4B-D0GR1211PsC,hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.6	49969	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1081	OUT	GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:43 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8086 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:14:18 GMT Expires: Sat, 20 Apr 2024 13:14:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 3145 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:43 UTC	722	IN	Data Raw: 52 49 46 46 8e 1f 00 00 57 45 42 50 56 50 38 4c 82 1f 00 00 2f 3f c0 0f 00 4d 30 68 db 48 92 94 dd 7b 93 e1 0f 78 49 44 f4 3f a0 e0 1a 2c 8c 30 90 12 94 3c 4c 2e e0 08 9b c6 8f 36 b3 60 14 49 b6 93 29 14 70 c2 bf 28 04 0c f1 94 73 7a f5 75 b0 8d 24 c9 49 ff 23 2c f2 8f 8f c2 c4 d2 fa ea ca 75 24 db a6 b5 af ad 7f e6 9f 06 d3 98 8b 67 db af fa 1f 42 4b 75 aa 44 80 1e a0 e1 80 0b 69 a6 26 e5 c8 86 80 a4 08 92 bd b6 03 19 fa 61 19 6e 40 f3 e4 77 55 f3 c0 23 79 22 42 44 45 2a 41 84 bd e5 f2 ca 74 e3 02 20 95 e7 cb e6 6f f8 12 b6 00 7f 20 97 ed 1b df ab d7 07 9b e3 95 00 88 92 49 72 d2 cb 23 35 f2 97 01 67 83 f7 6d bb 55 bb 6d fe ef 1e 63 2e dc 6b ef 2d 69 8b 2c cb 1c 4e 0c 65 66 66 66 66 e6 f6 1d 3c cc cc cc cc 0c 65 6e c3 1c b3 1d a3 2c c9 e2 0d 0b e7 1c e3 Data Ascii: RIFFWEBPVP8L/?M0hH{xID?,0<L.6`I)p(szu$I#,u$gBKuDi&an@wU#y"BDE*At o Ir#5gmUmc.k-i,Neffff<en,
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: f8 fe 17 9e 0a fb 91 79 ae 61 28 a4 84 41 eb 3a 5b c5 42 9b c3 33 9c 39 c3 b2 ca a1 f2 fc 2e 5e f5 02 e1 59 f2 43 7b c2 6f 67 fa 77 39 ff a4 22 88 48 51 04 50 00 78 05 56 79 28 00 0f c1 fd 92 64 47 e8 f0 ff 9e 8b df 74 f2 e9 9f be b2 f3 db fe 79 d3 27 de 71 f1 6f 05 39 0c 64 40 41 04 1e 04 00 5c 50 a4 b7 cd 53 f7 c9 26 25 70 51 5a cd e1 95 4f 71 dd 35 4f 44 5f 43 cf 72 6d df a8 65 0c 01 36 64 cc b9 2b 38 e2 50 29 00 d1 40 17 e9 8d 04 7a 18 d5 9f dd 75 f2 fe ac fc aa 4a 30 62 08 24 02 90 8a 15 15 18 54 81 00 d8 86 82 43 cc ff f7 86 be eb 87 56 37 fd 4a ee ee 12 cf a4 d5 7b 92 f6 bb 2e f7 fe 2f b7 21 85 05 08 db 88 90 03 86 36 28 fc 0d d3 3e ad e1 98 b4 54 03 24 3a 6f fd f2 bc 4e ed cd bf 74 57 e7 01 78 af e3 8c 56 a7 0d 88 2c 97 86 82 f9 16 ce ad 31 3b 02 Data Ascii: ya(A:[B39.^YC{ogw9"HQPxVy(dGty'qo9d@A\PS&%pQZOq5OD_Crme6d+8P)@zuJ0b$TCV7J{./!6(>T$:oNtWxV,1;
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 88 06 64 41 5a a6 40 90 61 12 58 25 66 84 a6 d2 3a b6 75 90 07 0e f2 0c d8 fe 79 98 41 8c 01 0a 6a 20 a1 fc 02 88 3d 62 9b 59 c0 45 57 7f df e5 ff bf ef f0 9f 4f e4 af 7e a0 61 3e b6 f9 13 a2 f5 5d c6 4e e3 cf af 0d d6 39 18 ee f1 b9 ee 5e ff 60 7b 65 1d 37 41 1e b4 8b 5a 33 da d6 fd 17 31 71 3b db 78 9f 1b 14 00 d3 a0 cc e8 2c b6 e7 f8 ec f0 0b e2 8e fe e1 6b ef f9 07 67 5e fc 95 5f bf 25 18 d8 33 83 67 c3 c1 07 92 de 7b 5f 52 7a 65 77 3a ed 28 4d 59 58 80 d8 61 bc 20 42 81 18 2c 8e bd 67 18 6f 94 d3 4b 64 c4 75 02 00 02 ea 80 e1 59 a8 96 86 6e fa f2 60 ea 43 8e be f9 ff 1f e8 f9 dd e5 97 bd 7f fe db b3 74 3f f8 26 cc 8d 98 0b 97 96 eb 89 97 d1 6a 08 6b 98 10 02 78 cf 88 4c e4 45 ea 28 ef e8 0f 40 e7 85 84 74 63 e9 dc fe cd d9 ad 5f df f5 39 81 9b 0e 8f Data Ascii: dAZ@aX%f:uyAj =bYEWO~a>]N9^`{e7AZ31q;x,kg^_%3g{_Rzew:(MYXa B,goKduYn`Ct?&jkxLE(@tc_9
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 6f 57 c4 68 21 fe eb e3 a0 cf 41 80 12 14 20 17 a1 08 c0 38 be df ff 57 ff b4 eb fb 7f eb 61 bf b7 b8 74 e1 7b c9 c5 33 f7 fd f5 e7 1c 3b 35 3c fe 3e 89 2b b5 fd 8e 25 f6 25 d2 9c ba 41 04 b6 ae 5e c6 ae 94 da e5 fa 6d 19 db ea 28 75 5c 75 ec c6 0e 1d 55 00 68 40 5b a9 a7 86 d1 a3 6e 4b 2d 72 7e e8 82 c4 a3 65 2a 6a 1d 2c 04 c4 51 76 94 29 92 3c fc 64 36 b2 cb d5 46 22 eb 35 f3 ab 1b f1 be 75 a1 ac 7c 70 fd d8 a7 ee 44 ae 7d e5 b6 0b 33 8b eb 8c e5 d5 5c 2b 50 4d 1c 52 80 a2 06 1b df af fd ce 53 4e 7c e4 af 1f fa b6 c5 da 2f 8c 8d 2f 8f df 7c b7 da b4 73 d7 cd 27 3b eb 6e 3a 60 af 32 0a 50 5b ac 10 e0 41 16 aa f4 b8 a2 c0 32 b3 d1 bb 2e 4d 58 6f a1 aa b5 b0 35 fe ec 02 78 7a 00 48 19 ec 1b ea 1d 47 75 2f 4d b9 4c 57 a1 54 97 7b 27 93 60 82 fa 45 c6 fb 99 Data Ascii: oWh!A 8Wat{3;5<>+%%A^m(u\uUh@[nK-r~e*j,Qv)<d6F"5u\|pD}3\+PMRSN\|//\|s';n:`2P[A2.MXo5xzHGu/MLWT{'`E
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 85 25 33 61 99 63 47 bb 19 f0 40 e9 9a 5d c4 64 0c 8e 51 d7 63 96 c7 f6 08 ba 2f 5b 9f 6c 28 00 a0 05 8e 6b b7 3f 30 79 2f 9b 68 60 68 6e c6 f8 f4 e5 3b aa 8d a3 c3 56 0b 5b 3a 19 37 dd 8e e1 55 8b ed c8 93 6f ae 71 f0 f2 cb 8e 0f 0d 4d c3 19 af 2e 2d f1 84 e8 cd 45 0f 25 56 20 26 4d 02 8d 10 81 0a ce 10 00 90 22 01 76 e8 04 37 fe 92 d3 db 6f 1c 23 cc bc 5a 8c bb fd 44 90 cf c8 35 e6 e2 8c ef 7b ef 63 f1 b5 83 cd 88 30 20 77 6e cc f5 7c aa 65 6c 4e 34 38 af 7f 76 b3 94 76 80 c7 d9 f4 be 74 fd d0 5f fa f0 94 1c 94 51 97 9b ed 55 28 76 88 93 f3 12 c7 b9 34 27 0e 1c 14 56 f1 c6 cd 63 ae bc f5 d6 2f 5e bb 61 d3 ee f8 5a f6 5c e7 6c c6 e9 95 2e 76 c6 9d a6 11 48 68 90 43 80 06 58 25 0e 52 00 aa 90 a0 53 74 de 74 ed d8 e6 ff bf 7d a8 37 cc b2 52 f9 f1 2c 1d cd Data Ascii: %3acG@]dQc/[l(k?0y/h`hn;V[:7UoqM.-E%V &M"v7o#ZD5{c0 wn\|elN48vvt_QU(v4'Vc/^aZ\l.vHhCX%RStt}7R,
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: b0 21 c0 82 f5 4c 4e dc 37 bb f2 10 e5 8b f9 cf f5 e7 af 8c 2f 7d f6 b9 cf 3e f7 72 9b 9d 29 f1 9e 8d c7 99 57 92 38 f6 8a 1d 91 73 e8 88 9c a2 12 c5 64 7f f0 ad 3d f2 8e fd d6 38 5b a6 37 80 e5 e7 b1 ba 7c b7 bf 9f ad 71 4a a8 5d 95 b6 50 d3 e7 ff 3e 6a 3b 12 03 23 85 23 8e 76 c9 83 c4 4b 5d 66 25 76 88 42 59 78 9a d5 a3 3e be 6f 6f f9 e6 95 79 48 6f f8 9c 48 2c a2 58 63 51 a4 a8 c4 46 d4 50 85 14 89 18 c5 29 ea e0 33 47 5b 97 9e 1c f9 bb 3f 75 db d9 85 ae 5a 2d c5 f9 c5 f8 0a 28 a3 62 6f a3 0e 49 40 42 c7 a8 c4 d7 1f da a3 a4 47 59 cb 0e ee 4d bd 51 00 9c e1 02 9b 3a 9b 6d 99 9a b2 49 90 15 9c 57 e6 79 e4 13 3b c3 1c 0d c0 1c 89 32 e5 b0 90 78 e5 52 8b 30 42 a5 44 4c f1 82 5f c0 ce 27 3a c7 a7 3d 78 fe d4 2d 6f 78 32 5f 9c 8b 1a 95 48 14 59 91 6a 49 06 Data Ascii: !LN7/}>r)W8sd=8[7\|qJ]P>j;##vK]f%vBYx>ooyHoH,XcQFP)3G[?uZ-(boI@BGYMQ:mIWy;2xR0BDL_':=x-ox2_HYjI
2024-04-19 14:06:43 UTC	1089	IN	Data Raw: a3 c1 3c 03 5a d8 6c 5c c8 b4 14 46 22 ad 99 b1 36 fb 40 e9 69 1a d7 37 db 43 50 ae 23 1d 9a 54 7a 25 26 4d 7b 67 eb 94 07 3c 49 40 88 80 b0 07 62 4a 08 23 0d 40 0c 93 10 16 2c 93 02 04 22 2a 10 28 a3 56 ee 9a c2 b5 47 7d 12 4d 20 a1 84 08 fa a6 0b 2b da ca db b8 5b dc dd 3d 8e 8e 9b 4b 9b d5 5e 1e dc f5 b4 b3 a6 1b 18 00 4c 12 5f 19 1a e0 89 8f 79 7a 62 fc 0c 07 99 a2 99 dc 26 40 56 bb 36 39 7b b4 37 3b 57 a9 ab cc e7 52 3e 5e 0f 1b 4a 2f 55 75 68 1a 2c 36 70 7d 84 6b 54 e2 0a 7c 01 8c 11 20 5b 34 36 b5 18 29 25 cc 06 2e a4 66 91 8a 8c a0 02 8b a3 d0 0c 65 d3 96 40 ec 20 28 d5 27 43 5b 6b 55 65 df e5 de fa ed 8d 7c 27 f9 aa 72 b7 ca ab a8 67 ac ff b2 bf 7f 47 60 60 1e 80 9b d7 95 a3 60 88 3d 5e dd 4f 9d 79 f8 1c 1b 16 8a 16 26 a4 d5 38 0e 6c d9 c3 12 ad Data Ascii: <Zl\F"6@i7CP#Tz%&M{g<I@bJ#@,"*(VG}M +[=K^L_yzb&@V69{7;WR>^J/Uuh,6p}kT\| [46)%.fe@ ('C[kUe\|'rgG```=^Oy&8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.6	49968	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1081	OUT	GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:43 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:10:40 GMT Expires: Sat, 20 Apr 2024 11:10:40 GMT Cache-Control: public, max-age=86400, no-transform Age: 10563 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:43 UTC	721	IN	Data Raw: 52 49 46 46 3a 1f 00 00 57 45 42 50 56 50 38 4c 2d 1f 00 00 2f 3f c0 0f 10 4d 28 6c db b6 8d 21 ab 4b 6a 44 ff a3 0a b5 fb d6 f5 8d 79 b9 a4 66 66 b2 16 29 37 82 44 89 48 60 f2 7f ba 89 50 74 c1 a0 91 24 45 7d 77 ff ef 5f d8 8b 60 66 e6 d1 c1 b6 91 24 45 6d 9d 2e 80 7b b4 18 f2 b7 3f 98 d3 5b cc 8c 62 d8 36 92 a2 f9 fe 7b 7c 1d 33 d3 f3 ab ff 01 c0 83 cd de e8 7c 23 7e 60 24 c0 03 1e f0 cc c4 5d 15 23 cc 89 f7 12 4e 42 04 3c 90 5d 01 43 e3 b9 21 35 13 34 01 e0 09 bc 83 73 0d 10 48 43 4d c4 88 b8 11 1f cc ac 3c 3e b6 6f 35 13 24 7a f9 c2 cf 5a 23 fd 65 cc 0f 88 3d e3 5b 54 5e 6c 53 e1 a6 79 42 05 0a e4 f8 f9 24 e9 e1 de 11 e5 19 2b 3d 2e fe 8b d2 b0 8e 7b 69 56 e6 50 d0 b6 0d 13 f3 a7 bd 43 21 22 a2 a0 26 79 f2 69 36 82 6a b6 ff aa 2d e7 b7 86 99 19 dc c4 Data Ascii: RIFF:WEBPVP8L-/?M(l!KjDyff)7DH`Pt$E}w_`f$Em.{?[b6{\|3\|#~`$]#NB<]C!54sHCM<>o5$zZ#e=[T^lSyB$+=.{iVPC!"&yi6j-
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 7f 77 60 a0 bf db 1d 70 60 10 82 98 13 72 62 c3 20 1c 1e b4 df 6a 78 2c 7e 18 e1 b2 d1 bd 6c 34 36 59 95 dc b5 d2 d9 29 1d 65 49 cb c1 c9 c3 e1 aa 4e 2c 9d fa a4 75 49 d4 45 4f dd e9 1c b5 eb cf 6f 5e f4 4b af bd f4 b7 5e 00 0a b8 29 e4 fe 88 22 59 5c 04 91 39 5a 8e ec e3 c1 c1 c1 1f 20 06 32 07 04 58 dd 6e bf 90 4a d2 44 1c c0 ac ac 73 8d 8a 41 db 1e 1e 8c 95 84 bf 3e fd 89 e7 1b 36 e9 c7 c3 fc 25 cf cc 5e 9d b0 1b 8c 51 b8 e7 12 73 d1 d5 26 4c 3e 2d f3 c3 a8 44 38 d3 1b 77 fb f0 d7 6c f6 a0 fb 4e 3a f3 b0 3d 3e fd 9c fb 79 c1 29 6c 20 70 53 71 85 41 2f f7 7a bf 3b 42 09 9a a4 2a 24 01 9c a4 90 46 51 48 aa 54 46 47 73 73 db 7e f5 b7 8a a6 0c b6 0f 3b ae 7d d3 89 f6 e6 67 00 c1 a7 0a d0 91 a1 12 44 34 66 d3 67 73 82 03 a6 82 21 e9 a1 d6 53 15 57 04 3b 0b Data Ascii: w`p`rb jx,~l46Y)eIN,uIEOo^K^)"Y\9Z 2XnJDsA>6%^Qs&L>-D8wlN:=>y)l pSqA/z;B*$FQHTFGss~;}gD4fgs!SW;
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 07 58 43 23 ab d5 02 f7 73 d5 77 54 b4 09 04 d5 d3 c3 76 0d 42 65 5a fd 54 ad 20 75 bb cc 64 e3 d4 b3 19 25 76 3a 81 39 10 9c 40 4d 8c dd a9 8e d3 ba 9a 5c ab 0b 68 83 89 7c 0d 11 13 63 e4 4c 8d e3 56 67 9e f2 97 95 c4 88 18 88 54 27 b7 8b 5c fe 50 ce 3e b0 26 0c 48 07 a4 f1 af fb 69 84 8c 50 28 a7 83 7b 2f 07 38 02 13 90 58 02 e5 e6 48 0e a7 87 a3 06 d5 4a 21 38 1d 15 b6 bd de 8e 74 90 9f fa a1 b2 c7 00 dd e5 10 df d8 86 42 5b 34 db 0f 8f d6 a7 87 4b ea 18 85 44 52 35 50 89 e4 8d a7 0c 8f f7 17 ab a7 5c 74 e8 b2 c9 36 09 46 01 c6 11 67 2d e0 18 09 7d 40 53 c5 88 60 96 21 a6 7a 2d 80 8c 50 38 03 04 60 9c 7b 1c 61 c8 ad b8 8e 43 d4 74 7a 5d 1a a9 08 a4 61 bb bc 90 c2 ab db af fe ea b6 1d 95 e6 a5 be f0 1f 07 23 51 3b c5 b6 36 c6 8d 31 eb 44 17 3b 8a d9 f0 Data Ascii: XC#swTvBeZT ud%v:9@M\h\|cLVgT'\P>&HiP({/8XHJ!8tB[4KDR5P\t6Fg-}@S`!z-P8`{aCtz]a#Q;61D;
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 9a 80 9f 32 1a 35 97 d3 d1 e5 9e b1 d6 f3 0e 76 e4 ae ad e7 7b 37 d0 ac bb db 28 81 84 19 a1 5c e2 35 b2 c7 dd e7 1e ee 1e 9f 4a 7c f3 2f bb 3d e3 5b 7b fc 68 fe f1 b9 2b b8 41 a7 52 bd fa f8 c2 eb 5d fe 24 4b 47 dc 85 fe f6 1e eb 85 1e 01 64 26 95 41 62 10 bc 60 20 e8 bd 34 77 7f 79 af 16 03 2d f4 97 1f eb 5f 84 6b 71 c4 63 20 68 12 c9 9d f9 ed 54 89 48 84 ac 0e 1e 87 75 2f 5a c2 d1 be a2 eb ec 55 ba 5d 87 46 81 1d 8e ad 5d d6 b9 ec 4e 97 ef 6c ae 66 6a a7 b7 b5 ed c8 68 d3 ca d4 87 4e 05 2a 44 24 97 8d 3c 64 2a d3 89 ff da 78 c8 c1 1f a7 be eb 53 b7 1e 6e df e2 21 5f 2b 5d f6 60 33 e3 bc c9 62 b0 f0 8d 56 d7 a3 4d db 9d 46 ed 51 6f ca 43 d0 03 b3 6c 26 d9 11 34 6b 32 b8 c9 37 ef 94 51 34 f6 ef e6 af 2f 9b 95 7a 61 a4 a5 29 91 56 63 68 cf 04 dd c0 07 d4 Data Ascii: 25v{7(\5J\|/=[{h+AR]$KGd&Ab` 4wy-_kqc hTHu/ZU]F]NlfjhND$<dxSn!_+]`3bVMFQoCl&4k27Q4/za)Vch
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 94 60 4d b1 11 83 5d 8f 83 3f 08 c8 08 32 03 74 62 7b 02 97 ab e4 27 26 ca 3b 4a d3 0b 2f fc d4 6e c7 5c 2c 2a 49 ae 60 77 2d 7c a9 e9 6b 46 08 b4 0e 66 ee ea 37 e7 ce 5a 3b f9 b0 ea 7b 66 ae ab 73 b8 4c dc 4c 3d 19 16 e2 bb c7 3b 56 d7 28 a4 c6 0a af ae 3b 90 c5 67 99 d7 b0 65 d9 5d f6 bf 8f 38 8b 0b 9c a9 da 54 30 8b 5e a7 36 dd 59 08 8f 93 4d 62 f3 6f e2 6e 85 20 31 a0 7a c0 a5 45 7e 17 8d cc 54 0e 88 dd e1 aa ae 0a 9d 98 0e c4 c2 4f fa 10 5e b1 1b eb c0 8b 62 a8 c3 18 ce 09 17 af 18 0e ba d2 b0 d7 e2 8a c7 29 f7 f8 e3 e5 fb 24 dc d7 2d 9e cc b6 0a c8 83 bc a5 73 9e 2a fd c0 37 cf 8a e5 c0 a5 a4 d3 12 c3 a8 79 74 ac bc 68 88 6a 3a 0b ea a5 c8 e0 cc 52 2f 63 f9 33 bb f0 89 f3 fc fc 6e 28 4f 77 54 71 e3 e0 32 bd 01 98 93 52 89 fa 61 55 bc f0 54 27 f4 cd Data Ascii: `M]?2tb{'&;J/n\,I`w-\|kFf7Z;{fsLL=;V(;ge]8T0^6YMbon 1zE~TO^b)$-s7ythj:R/c3n(OwTq2RaUT'
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 02 e3 cc b9 c8 ea 77 b5 7c 0b c8 4c a0 a0 c8 53 5e d8 bc 8b 5b ec b0 40 10 3b f2 ae 2b cc 9a b0 0a 4f eb de 29 38 27 05 5c 2f 59 de 36 dd 01 9a 52 c9 54 5f ca 1a b2 38 91 4c 27 19 85 89 27 d1 89 82 11 0e 1b 35 55 68 e3 5c 11 a7 5c 24 74 f7 e5 4e 0f f4 17 cc 54 4e 14 e7 ac eb f2 ac d4 93 09 4b 8f 3a f1 06 0f 82 e6 5b 5c 74 c0 6b 86 4d c1 31 31 d3 43 24 ce 46 4f 1c dc f5 9a db f4 45 5d d8 cb 65 66 32 0b 2f 34 da 9a af 6c 5c ea 7b 81 1d 72 14 23 00 2c ef 94 a5 3b 73 a6 f6 cc b0 87 3a 45 63 77 3d 0d b4 64 44 bc 83 7e 35 c9 5c 31 24 9f 3d cd 48 0e e7 14 a4 27 39 69 5d 11 49 cc ae 07 cc 34 6f ac 3e df bc 68 fc 88 48 62 7f 54 dc 8a a3 c5 de d2 c8 bf ee e4 d6 c7 9f b4 db f4 39 ed a9 e7 b2 50 34 0b 05 ad 38 03 45 a5 bf cd bb 6f fb fb dc a1 4b 22 02 e1 a1 ba a9 bf Data Ascii: w\|LS^[@;+O)8'\/Y6RT_8L''5Uh\\$tNTNK:[\tkM11C$FOE]ef2/4l\{r#,;s:Ecw=dD~5\1$=H'9i]I4o>hHbT9P48EoK"
2024-04-19 14:06:43 UTC	1006	IN	Data Raw: 8e 5f e0 08 08 72 e7 4b 53 f2 af 06 be 0e e8 2b 87 07 3d f6 41 23 9c 5b 81 0f 1a 86 9e 23 21 6e 0c f8 3a 22 4e a8 00 41 cf 05 e6 c3 ad dd b0 d2 ee b9 09 56 c1 a7 b4 8b 2b 4a d2 2e 7e 4f d8 fe ec 46 40 0a 92 23 4c 22 ec e9 9b 1b 2c 1e 4a 3b a2 a8 6b 17 c3 53 9b 4d fb fd ef f1 6d c3 b6 54 0c fc 95 3a e8 c7 1e b9 0b 05 cd 02 58 93 2c d3 1b 50 e1 fa b3 6f 3e 40 88 31 a4 22 39 b4 1a 28 9a 6b 1f 23 ff ad cb ac 7d 78 c0 63 cb d3 f0 1c dd 6f 58 39 7f 69 64 08 81 75 92 00 04 72 c1 00 7a 66 0d b3 1e a3 9b 61 e3 d2 b8 b1 d6 eb a8 6d 82 a3 60 e1 45 bb 45 ff b8 03 6c dc b6 a6 03 42 e7 79 a6 21 8a c2 87 25 4f 6d f2 b8 50 77 73 ac cc 50 77 81 1b 6a 27 22 ec f4 58 bb 36 2c 50 fc 94 33 f2 85 19 41 0d ab 19 7c 94 05 66 d3 63 4c 5c 70 02 60 31 00 20 4e ee fe a6 d1 4a af 6e Data Ascii: _rKS+=A#[#!n:"NAV+J.~OF@#L",J;kSMmT:X,Po>@1"9(k#}xcoX9idurzfam`EElBy!%OmPwsPwj'"X6,P3A\|fcL\p`1 NJn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.6	49963	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1079	OUT	GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:43 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4790 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:53:20 GMT Expires: Sat, 20 Apr 2024 10:53:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 11603 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:43 UTC	721	IN	Data Raw: 52 49 46 46 ae 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 65 12 00 00 2f 3f c0 0f 10 4d 30 6a 1b 49 52 d2 f3 1a a5 f9 13 de 03 43 44 ff 27 40 fb 7b ce c3 e0 51 dc 42 b4 d9 84 98 45 95 d9 cf 85 9a 36 92 1c 43 78 fe b8 1e 46 ac 63 b5 20 d8 36 92 a4 a8 0e a3 80 ff fc 03 7b 7b cd 67 11 64 db d4 e1 fe 6e 33 79 ff 27 00 00 74 88 2a 55 ca 82 00 38 d4 31 b8 35 2d 11 b6 96 dc 47 d1 17 00 f8 a9 00 38 01 02 b2 9d 37 0c a4 6d 93 fa b7 bd 5f 43 44 4c 00 64 76 9c 55 68 3f 28 5f db d3 fe 1f 92 25 65 56 f3 78 6c db 5a db b6 6d db 57 b6 6d db b6 75 67 db de e3 33 9e c6 9c ae ca 8b 3e fa 13 de 8d 1c 4f af d5 f1 b9 f8 c5 d8 ac 88 5f 6c 7c c6 76 6d e4 da 56 4e d4 5a c3 13 21 c5 b6 b6 65 cb f6 85 bb 0f c0 32 dd 1a 8b 69 30 03 22 0d Data Ascii: RIFFWEBPVP8X??VP8Le/?M0jIRCD'@{QBE6CxFc 6{{gdn3y't*U815-G87m_CDLdvUh?(_%eVxlZmWmug3>O_l\|vmVNZ!e2i0"
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 28 63 0c 96 a1 8a 6e 60 cb 0e 32 23 c3 64 0c f0 cb 76 70 1b 00 e4 05 ce 91 40 42 42 80 98 aa 83 6c c0 18 63 cb 60 30 dc 00 2a 71 0d 4a 02 00 b0 20 f2 70 8e 19 6f 05 c0 80 e9 1f 6c 63 eb 6f 43 13 62 b2 65 01 43 2c 04 0d 09 ae 6d 09 a4 90 d3 eb e0 33 8e 1a c0 00 06 6c 63 fa 1f 07 c0 dd d7 b9 4c d5 4c 18 ab fa fe fb bf 71 c7 af 9c 63 ca c6 d3 27 1b c0 60 c0 d8 c0 71 00 b7 5a 46 93 37 e8 08 d5 4a b0 18 4c 87 41 00 c9 41 8e 47 c1 c1 cc d8 90 83 c1 15 60 c0 06 e1 a1 a8 1b 78 fc c8 ed 2f 9a d6 e7 bc 02 37 1c 92 06 1b c4 ea 6e 19 77 08 cc 41 22 ce 99 e1 3d d8 97 80 ed 01 81 c1 b2 3d 10 02 1c 72 52 51 db 55 db 1d cf ca 4f 2e d8 ec c9 2a b6 8d b4 56 17 6d ad 8a 9f ec 9c 78 d6 9f 35 67 3b c5 b2 30 44 0d d8 60 00 41 30 03 36 02 34 c1 1a 63 76 44 55 6a 83 33 fc ae d7 Data Ascii: (cn`2#dvp@BBlc`0qJ polcoCbeC,m3lcLLqc'`qZF7JLAAG`x/7nwA"==rRQUO.Vmx5g;0D`A064cvDUj3
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: 98 e4 8d 49 80 69 bc b5 45 45 98 f7 07 8f bb 16 bf c3 ef 8b 5d 95 67 5c 2f 3f e8 7b 77 d6 7b 93 86 b2 79 34 1b 46 b3 f1 85 80 95 e4 80 10 4c 32 29 7a fd f7 4b be fc ef 8c aa 41 f2 b4 67 7b c5 de 19 89 c1 cd 24 45 e2 6c 24 5b b2 36 89 24 25 a4 4c b6 d6 f2 fc 53 86 a7 13 67 11 bd 74 8f ed 9b 3a 8f 0a 4f 40 bb 7a cf e7 2d e7 fa f6 ee 98 0f 1f af c8 97 db a2 8b be 8f 5a 23 5a 0b 07 6c 9e f6 c5 94 c8 62 b1 68 60 82 f1 93 29 ce e2 b7 7d b8 ca 51 ab d7 3a 65 89 d6 8b af 3a 1b b6 ee ea a1 2b af 39 f8 ba 85 e3 4f 5f 6a 4e 25 d5 4b ca d5 c9 73 ba d8 34 ff 4f d4 5a 9c b5 a3 13 5d 4c 3f 36 ac 5a 7c 48 55 a7 20 b3 62 23 5a 41 46 c9 05 9e 30 27 4d 89 52 fe 1c e9 56 ba 27 5f 34 67 87 bf e6 cd 0d dc 8a 4e f5 d9 ef 6b de 72 be ea e1 eb 4b 44 c0 01 dc 18 fd 60 eb b4 8f 3b Data Ascii: IiEE]g\/?{w{y4FL2)zKAg{$El$[6$%LSgt:O@z-Z#Zlbh`)}Q:e:+9O_jN%Ks4OZ]L?6Z\|HU b#ZAF0'MRV'_4gNkrKD`;
2024-04-19 14:06:43 UTC	1255	IN	Data Raw: fa a8 b6 aa 89 1e 90 0c b3 ee fd aa 09 13 eb c2 2a df 11 e7 a4 90 c0 05 71 16 03 d9 3a a0 51 d1 0c a4 d8 74 d8 45 d3 a1 0d ab 16 15 27 2e e9 f3 fa 96 3a bf 6e 08 ef 1b c2 62 81 b6 6b 93 79 73 32 6f 02 6d c2 b2 86 9a 6a c4 28 49 18 fc f2 d2 3d 2e 58 77 c4 49 0b e5 d5 de 24 af f4 ce 33 e1 b5 bf e2 36 a5 1e 98 4a 41 54 df 56 52 1e 14 a2 48 08 fd 3e 73 1d bf 19 1e f4 fc a4 f8 f6 5e 65 91 c8 0a f1 08 c0 3a a8 24 2a 28 49 4a ba f4 67 f4 c5 3e ef ba 4a cf 24 c1 0b 24 fa 89 89 04 f4 31 9e 20 4c a5 0e a8 0b a8 27 0f e5 c8 d6 36 56 e7 d7 15 a1 83 c3 b0 29 1d 03 55 95 6a 50 12 fa 00 42 0a 4d 12 06 be 30 bb d1 f7 5b 2f 3a fb 87 bc 43 d3 c5 e0 19 5e 08 ee 49 5d 6f a0 58 55 76 f4 3d 9a fd d2 bb ce b3 43 ab 3c 33 29 ee 87 26 5b 15 12 41 c6 fc 10 fc a6 5e 43 86 06 c9 7f Data Ascii: q:QtE'.:nbkys2omj(I=.XwI$36JATVRH>s^e:$(IJg>J$$1 L'6V)UjPBM0[/:C^I]oXUv=C<3)&[A^C
2024-04-19 14:06:43 UTC	304	IN	Data Raw: 53 9a c6 04 90 83 48 c3 88 52 6f fc f8 c7 8d c6 a2 65 5d 7c 67 48 98 07 27 44 97 83 33 cb 68 bb 16 0a a5 ff c9 06 50 6c 36 8b 66 33 54 21 f2 62 d0 6d ad b2 91 85 21 ad ae 46 61 2c 1b b0 ac a4 1c 38 33 78 69 7c 14 cd 62 fb 75 82 72 e4 b2 0c 79 10 59 19 88 15 95 84 2c 43 da 2a fa 13 55 d0 50 70 6e 0e 6e 13 75 00 0b 03 c8 51 1d 98 19 9b 8d 18 72 c5 50 da 76 08 98 1f a8 55 25 42 07 48 52 a1 18 0b 2b 06 e7 18 08 18 cb 08 84 84 28 82 73 db 79 88 0e 36 01 83 33 4e 8b 41 3a 70 c7 28 21 c5 58 10 8b 88 1c ca dc c1 c8 12 51 08 11 1c 20 04 85 e0 60 6c cb b6 bf 9c e8 6e d1 97 10 76 ac 88 03 a3 a4 88 88 8a 45 34 a6 bf fb 03 12 21 28 58 86 3c b7 8d 91 8d fd ef a4 95 31 5b cc 2b 31 3a 49 ec 79 a0 14 11 91 28 22 31 4a 42 42 80 32 60 db 10 ac e0 10 82 03 36 18 d7 e4 a6 9a Data Ascii: SHRoe]\|gH'D3hPl6f3T!bm!Fa,83xi\|buryY,C*UPpnnuQrPvU%BHR+(sy63NA:p(!XQ `lnvE4!(X<1[+1:Iy("1JBB2`6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.6	49964	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:43 UTC	1093	OUT	GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:43 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 194 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:15:14 GMT Expires: Sat, 20 Apr 2024 10:15:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 13889 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:43 UTC	194	IN	Data Raw: 52 49 46 46 ba 00 00 00 57 45 42 50 56 50 38 4c ae 00 00 00 2f 0f c0 03 10 05 dc 6c db 8e 3d f7 10 d9 24 43 24 2d 57 60 97 de b6 ed d4 9e c0 b6 6d db f6 55 3c cf b7 43 c4 91 ff 27 00 f4 6f f7 8f bd 93 24 68 b7 b7 0f a9 aa cd 69 3f 4e ce aa 81 e6 a8 06 87 ed f8 9d 24 bd e4 23 df 93 7f 4d 5d 87 5c 5d 53 07 9b 8d 4e 44 55 d5 a4 86 8e ff d9 e4 0f ca 3d f5 b7 59 ef 64 dd 4f 72 f5 49 b2 7f f8 d2 e3 47 6e 4f 5c f6 ff f8 b4 aa e5 c9 c1 c5 33 9f d4 d0 2f d5 27 99 77 e2 4c 55 66 3c 1d d9 9c 26 53 2e 7f ac 19 4f 6b 69 d5 a6 eb 49 72 e9 cb 8e f3 27 6a cc de 17 69 41 b2 6f f2 f1 1f e9 03 Data Ascii: RIFFWEBPVP8L/l=$C$-W`mU<C'o$hi?N$#M]\]SNDU=YdOrIGnO\3/'wLUf<&S.OkiIr'jiAo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.6	49976	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	1146	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:44 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:44 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-4dEPW_xao3epwkiKeTa_7g' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.6	49979	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	1558	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=9qdt76iwqf9e HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOag9GFO29r7AyeurnkOhdxdHVeu20oxB3RJ5ERJ4QhZfuDpQadxPGWHpH3irRA4s-isqRliDi4zqx83B718; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:44 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:44 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-upceg64qQF76t7izwXelpw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:44 UTC	364	IN	Data Raw: 32 61 66 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af3<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 75 70 63 65 67 36 34 71 51 46 37 36 74 37 69 7a 77 58 65 6c 70 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="upceg64qQF76t7izwXelpw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 45 53 78 62 31 4a 57 4a 6d 44 4a 6b 65 6c 34 70 70 63 72 5a 66 47 72 69 72 4c 4b 6c 75 51 43 75 6f 73 2d 4e 55 53 77 4e 50 62 6d 43 6b 59 6d 49 38 71 75 48 36 5f 54 39 75 70 79 62 48 6d 4c 64 32 6b 6a 69 68 50 66 5a 49 77 72 44 79 46 77 54 6f 6c 42 33 37 6d 32 51 4c 74 64 72 76 65 5a 6e 5a 46 66 6b 6a 6a 74 72 56 68 58 59 53 37 75 76 61 74 68 4d 63 42 6d 58 43 73 43 69 48 31 49 56 72 75 73 56 36 43 45 57 53 75 55 65 2d 74 64 52 4c 7a 6d 56 33 53 34 36 32 61 49 71 4c 49 61 66 74 68 37 75 32 44 74 69 47 5f 57 49 52 72 76 45 67 4e 4c 30 6a 78 73 5f 38 65 58 65 62 71 65 5a 50 5a 58 47 73 32 51 55 4e 65 72 6e 6c 32 72 42 6d 43 73 61 65 63 66 2d 43 69 35 67 78 50 47 6b 65 62 65 49 56 78 70 33 31 65 74 4a 73 6f 66 6f 47 47 39 4f 6f 4d 36 71 6c 52 33 67 4e 38 70 Data Ascii: ESxb1JWJmDJkel4ppcrZfGrirLKluQCuos-NUSwNPbmCkYmI8quH6_T9upybHmLd2kjihPfZIwrDyFwTolB37m2QLtdrveZnZFfkjjtrVhXYS7uvathMcBmXCsCiH1IVrusV6CEWSuUe-tdRLzmV3S462aIqLIafth7u2DtiG_WIRrvEgNL0jxs_8eXebqeZPZXGs2QUNernl2rBmCsaecf-Ci5gxPGkebeIVxp31etJsofoGG9OoM6qlR3gN8p
2024-04-19 14:06:44 UTC	1255	IN	Data Raw: 2d 46 4e 45 65 53 75 39 7a 37 6c 34 68 50 35 63 65 38 44 42 4b 30 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 75 70 63 65 67 36 34 71 51 46 37 36 74 37 69 7a 77 58 65 6c 70 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: -FNEeSu9z7l4hP5ce8DBK0A"><script type="text/javascript" nonce="upceg64qQF76t7izwXelpw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:06:44 UTC	599	IN	Data Raw: 78 45 61 43 39 50 63 6e 70 34 64 55 74 6c 63 54 68 59 5a 6b 31 57 57 47 78 55 52 33 70 4a 55 46 52 6d 64 6d 77 31 62 55 5a 4a 54 6c 70 78 64 6b 4e 4d 52 6d 77 7a 64 47 5a 73 4c 30 68 56 51 6e 42 31 51 6e 63 32 62 44 46 47 4b 31 68 55 5a 7a 67 35 52 44 52 32 51 33 68 5a 57 6e 46 5a 4e 45 51 35 57 55 35 76 65 56 56 47 51 33 5a 30 52 47 68 5a 4d 6e 70 45 4d 6d 74 6e 64 31 6c 59 51 6a 4e 69 65 54 52 69 52 33 4a 59 63 46 52 34 4b 32 68 6c 52 6e 55 32 54 6b 39 53 53 32 6f 33 56 7a 4d 7a 52 33 52 44 52 6e 5a 6a 52 55 52 51 64 54 42 49 63 55 35 6e 63 44 4d 78 52 7a 68 30 63 45 70 35 65 58 5a 68 59 32 70 74 4e 6d 74 70 62 32 70 50 52 46 56 4f 57 47 64 48 65 6a 64 74 57 6b 64 46 4e 33 67 7a 51 56 42 79 4e 7a 4a 35 4d 7a 56 70 57 6e 68 79 53 44 55 78 59 30 46 79 5a Data Ascii: xEaC9Pcnp4dUtlcThYZk1WWGxUR3pJUFRmdmw1bUZJTlpxdkNMRmwzdGZsL0hVQnB1Qnc2bDFGK1hUZzg5RDR2Q3hZWnFZNEQ5WU5veVVGQ3Z0RGhZMnpEMmtnd1lYQjNieTRiR3JYcFR4K2hlRnU2Tk9SS2o3VzMzR3RDRnZjRURQdTBIcU5ncDMxRzh0cEp5eXZhY2ptNmtpb2pPRFVOWGdHejdtWkdFN3gzQVByNzJ5MzVpWnhySDUxY0FyZ

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.6	49977	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 65 38 53 39 6f 35 72 51 4e 55 53 30 6b 41 43 79 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 62 34 64 64 61 36 30 39 31 30 66 61 62 61 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: e8S9o5rQNUS0kACy.1Context: 5fb4dda60910faba
2024-04-19 14:06:44 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:06:44 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 65 38 53 39 6f 35 72 51 4e 55 53 30 6b 41 43 79 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 62 34 64 64 61 36 30 39 31 30 66 61 62 61 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 51 44 4d 49 53 30 2f 75 39 47 46 49 30 35 31 55 5a 55 74 55 73 74 77 67 6e 65 63 7a 7a 66 70 51 30 6d 6c 58 74 36 78 6b 56 6b 36 74 56 32 77 65 77 72 62 44 48 72 4c 42 4c 36 35 48 2f 6c 38 52 6e 34 72 30 73 45 56 6f 4c 68 46 35 73 50 6b 77 4a 53 58 7a 56 4a 34 31 69 58 43 54 48 70 45 79 33 71 77 4a 48 69 63 56 39 5a 50 6b Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: e8S9o5rQNUS0kACy.2Context: 5fb4dda60910faba<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWQDMIS0/u9GFI051UZUtUstwgneczzfpQ0mlXt6xkVk6tV2wewrbDHrLBL65H/l8Rn4r0sEVoLhF5sPkwJSXzVJ41iXCTHpEy3qwJHicV9ZPk
2024-04-19 14:06:44 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 65 38 53 39 6f 35 72 51 4e 55 53 30 6b 41 43 79 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 35 66 62 34 64 64 61 36 30 39 31 30 66 61 62 61 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: e8S9o5rQNUS0kACy.3Context: 5fb4dda60910faba<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:06:44 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:06:44 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 63 45 6b 45 6c 6d 6f 4e 64 55 53 34 76 39 56 55 44 30 67 56 49 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: cEkElmoNdUS4v9VUD0gVIA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.6	49980	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	503	OUT	GET /vTMochUbMqk9ehiZ7npCcwvhzOX8x0GlN1EHTW8sg58GBkcF48Vf6fwbvag5KwHxLA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8594 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:27:51 GMT Expires: Sat, 20 Apr 2024 11:27:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 9533 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	722	IN	Data Raw: 52 49 46 46 8a 21 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 41 21 00 00 2f 3f c0 0f 00 4d 28 8c 24 19 32 63 fd e4 1f b0 24 22 fa 1f 54 35 4c 96 0e 27 4c 33 54 66 a3 8e de 8f 1a c6 30 a6 fe 53 a0 90 77 38 07 ee c2 41 24 49 8a 54 c7 e8 5f 1d 33 33 df 4f bc 0e b6 91 6d 2b 39 1f 88 a8 80 fe eb 71 22 42 22 77 f7 3b 8c db 48 52 54 bb 77 f9 c7 58 af 63 66 be fe 87 8e 34 43 71 1c c9 30 45 47 99 38 c3 e0 0d b6 cf c1 bb c4 7b f3 2d 8d 32 b6 61 70 0d b6 e1 28 06 9a 9f aa b0 69 7d 4a a8 22 ea 48 cd f3 4d 4d 76 4e e9 01 0d b4 20 54 38 eb c2 ab e7 87 0c 7e 12 64 51 86 66 23 59 78 11 c0 41 f9 e7 91 21 97 e1 9f 70 41 8a 84 03 00 e0 81 05 2e e4 82 21 65 02 02 fa 39 e0 01 00 44 98 a6 ff 5f e4 48 ce ff 9f 50 59 a0 02 15 89 19 5b 6a Data Ascii: RIFF!WEBPVP8X??VP8LA!/?M($2c$"T5L'L3Tf0Sw8A$IT_33Om+9q"B"w;HRTwXcf4Cq0EG8{-2ap(i}J"HMMvN T8~dQf#YxA!pA.!e9D_HPY[j
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 4e 9b 5f 9b 65 a3 62 19 46 56 4d d6 87 b1 f9 0d ab d9 ed 7c 0e 54 9c 92 29 71 c2 e5 75 fd dd d5 90 9a 7f c8 b3 2c b1 ce 30 2a 39 58 e3 6c 1e 9b 15 0d 09 36 56 66 f1 a7 b4 be 41 48 08 91 a1 cd e6 7f 05 eb c3 21 8a b8 40 07 75 77 66 81 7b 40 30 25 77 10 1b 04 75 cb b0 b2 61 e6 65 74 55 e6 27 87 4e ad 14 14 b1 fd 6a 20 d9 34 fb 74 4e 5f 92 36 b9 7e 9e fb ba 7c df 34 ff f5 2b 43 df 7f 57 c4 87 6e 00 50 1d d7 58 41 89 93 1a fa ff bb a7 bd ba 78 87 47 4e 33 b5 44 4a 40 4a 19 9c 86 27 2c d7 5a 39 11 4a 96 86 19 95 0a 4f 1b e4 ba 30 5d b4 3d 1f 0c e6 6b dc d1 ad 97 b8 77 69 5c ee 89 12 05 9c ab 9b c2 95 26 7f 11 a1 c2 92 46 6c b1 69 cc 2b 92 0d 31 a8 fc ce a0 5b 96 9b 89 65 7a 30 0e 79 b3 56 3e 8d 1c fd f4 49 e2 34 f3 6c 2d bd 7f 63 e2 fa 44 c6 e4 0d 91 ea 80 aa Data Ascii: N_ebFVM\|T)qu,0*9Xl6VfAH!@uwf{@0%wuaetU'Nj 4tN_6~\|4+CWnPXAxGN3DJ@J',Z9JO0]=kwi\&Fli+1[ez0yV>I4l-cD
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 65 87 f9 d5 7e f7 4c 53 ff 1d 1d 97 85 0a 50 79 4b 5f cc e7 cd e7 02 a3 57 a5 59 53 d8 54 56 c2 64 14 0b 1a 15 8f f9 cb 3f 5c c3 28 94 bc 73 75 8f 80 d6 e4 f2 af be b4 5f 9d 46 bb ca 1b 46 d5 5f 70 4d ff e9 73 c7 1f 38 60 50 fe ac b4 f8 3c 98 52 5b 43 5d c2 a7 21 b8 1a e0 4b 33 fe f8 cd ca d1 83 72 5c a4 08 0d 41 22 a1 a6 99 60 76 bc 4f 3b c6 c8 ec 5c 7b 39 1a 41 92 08 14 61 0a 66 e8 10 a2 99 47 95 a1 32 85 b5 23 eb 3a 77 c8 3f 32 7b 7b 62 d2 76 39 a1 f7 25 9b c3 a6 75 d0 ce e7 aa dd d0 30 9b 69 da 48 34 d3 c4 8c 80 df 4f 13 bb ba 70 c7 7f a8 55 3e df a8 dd 12 b7 37 d3 7f 4c 25 91 8a 6b 42 f7 8e da d9 77 47 a6 2f 58 f9 d8 a4 e6 69 2d a8 5e fd 94 ff fc b1 ea f5 96 bf d9 50 b8 5c 99 54 ed 83 ba 10 12 a9 c6 cb 32 75 af 4b 7a 7a ac 8e 46 31 89 68 88 c0 44 87 Data Ascii: e~LSPyK_WYSTVd?\(su_FF_pMs8`P<R[C]!K3r\A"`vO;\{9AafG2#:w?2{{bv9%u0iH4OpU>7L%kBwG/Xi-^P\T2uKzzF1hD
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 5a fe 0c 0b f6 ea ce 3e b3 38 13 18 da 4a f0 7b c8 22 99 b3 3b 59 75 e7 8d 86 d9 be 85 31 7c fa 42 83 3d ea 77 1d 4f 1a 14 f1 9f 43 f8 75 c6 6a 8a 24 44 b1 b7 cd 0e c9 e1 20 ed 0f 86 13 9f fc 73 d3 ec cd 85 73 2c 98 f7 d3 f9 92 29 6e 79 e3 45 7f 3a 0f 1c ee 8a 8d a3 24 d5 05 a1 58 7e f7 f0 06 9d 21 64 4e b7 c1 e6 52 c3 c8 aa fc a8 0a dd 13 2a 91 52 90 82 dd 0b c6 cd b4 fe ba 20 de 15 4e c1 0e ff d5 54 07 8f 1a 55 42 cb 07 dc b1 e0 5d d7 0b b7 59 24 b3 bc 6c f2 ab ae 8f 99 6b c5 6c c4 ac e0 d5 22 0c 8a 0c 8a 18 9b ae cf 98 02 66 19 a6 59 f3 c3 d8 26 81 68 8e 07 03 bc 94 a9 5d 27 14 06 de 7f 24 06 eb a5 74 e6 8c 8f ef a9 ef 5f b5 60 b2 6c 6d 86 fb c6 af cc ff 08 14 ce 97 3a 71 ed ba 28 56 c5 25 2b 52 c3 65 f5 c4 6f ad d4 6a d2 d1 b3 67 e7 95 c2 2a 35 e3 3b Data Ascii: Z>8J{";Yu1\|B=wOCuj$D ss,)nyE:$X~!dNRR NTUB]Y$lkl"fY&h]'$t_`lm:q(V%+Reojg5;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: f3 85 d9 ce da a6 e6 31 5c df 3c bb ca d2 cd d4 ca e1 6c 58 08 a1 86 a8 9d ec 06 f9 f4 ec d3 65 ef 80 50 13 6e 7c fc bd 3a c4 aa 08 15 dc a1 f5 3a 79 b1 28 50 8c 8f 6e 3f 6f 6d ba ef 39 75 ce 42 a7 c0 8e 89 9e ae 3c a9 6b 94 08 c9 43 60 0c 73 8a 27 52 84 12 09 04 49 04 90 24 90 81 80 f1 3e 4c ef 69 08 fb 55 cf 72 f2 07 fe 64 29 e7 3a 67 0f 94 84 7f 6d 79 d0 de f7 f1 8f 14 07 13 c7 c5 23 77 7a f3 0f 9f 59 58 d9 32 c6 71 b0 66 b0 04 30 80 32 06 44 08 43 14 cd 83 7c 07 67 a9 8f 3f 75 fa 05 cf 9e 7c c7 cc 83 96 47 5c 74 50 14 74 58 df 3a 7f 59 b8 ba ee 51 19 e6 b7 ad cd 3a 65 5d 9c 96 b3 eb 03 7e 4f 96 30 66 5c 73 6c 23 d4 9f 29 08 3e 93 10 92 84 e1 52 3f f4 13 18 40 97 8c 29 8a 6c 8c e3 f6 84 11 71 9e 75 58 56 3e 62 1e d7 f2 66 0f 9e bc 7a 73 41 78 42 1b e6 Data Ascii: 1\<lXePn\|::y(Pn?om9uB<kC`s'RI$>LiUrd):gmy#wzYX2qf02DC\|g?u\|G\tPtX:YQ:e]~O0f\sl#)>R?@)lquXV>bfzsAxB
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 21 90 e1 7d ed a1 a1 b0 6a 7d 43 95 64 75 f7 70 dd 5f fa 92 79 fc 30 1d a8 42 89 71 38 aa 4b a2 23 40 3c 8a 4d d0 15 aa 33 3e 18 05 bd b2 37 8e 49 ca a5 3d 5d d8 10 a6 14 62 5e d0 a2 4a 9c a0 70 96 5d 7d 3d d2 ac 0b 09 00 10 28 cb ef 2f d2 f0 c8 82 b6 7b d9 79 e3 f4 41 70 8a 02 80 04 92 04 b2 1c 80 b5 21 a8 0d 24 e4 4d 43 f0 bf b1 ff bc 2f dd 55 69 b7 ea e4 d5 0f 79 e5 df 3e f5 f8 58 c2 d4 4c 27 d6 3f 20 21 b2 1f a2 04 d0 a0 f3 21 3c 53 7c 78 0f 12 21 cb 94 9a f5 62 97 14 44 c8 9b dd c0 d4 50 36 b5 3e 72 ec 56 43 08 c4 06 00 39 2a 12 14 38 48 f5 18 35 19 20 a7 16 c7 50 65 bd 84 06 32 c8 00 2f 56 43 2e 86 10 b2 5f d9 de e3 b9 2f d6 9d a6 83 67 7c e1 9c fe 70 df f0 8e b0 fd a9 3c 4b eb d1 9f 46 ec 6c 00 e2 bd 14 ed c5 00 0c 53 88 29 0e bb 31 0c 49 c3 96 2c Data Ascii: !}j}Cdup_y0Bq8K#@<M3>7I=]b^Jp]}=(/{yAp!$MC/Uiy>XL'? !!<S\|x!bDP6>rVC9*8H5 Pe2/VC._/g\|p<KFlS)1I,
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 05 e1 c5 0c 90 0c 56 2a 92 bd d4 8e a2 49 30 84 01 6c a0 01 1e a1 74 9a 95 cc b3 f9 1e f3 44 08 38 01 78 36 00 a6 52 d0 c3 20 a1 48 cb 11 12 88 10 25 42 2a c0 06 92 f1 d1 7f 40 1b 08 0d 99 26 dd 73 20 c0 5a 72 1f df 20 dc 96 2c 0e b1 4b 80 5b 6f 82 25 42 a1 1e 71 fc 04 c5 a0 f4 97 87 99 7f df 9b f5 1b a7 b3 ff f6 6a e3 8d c5 0a 3d 68 07 79 98 20 66 af 12 82 c5 e3 14 19 a6 99 89 b0 a1 66 4b 00 5d 87 0b 32 b3 22 05 1a 14 7b 07 00 27 50 01 80 25 97 1d 7e 6a ba df ed dc 1b 43 d2 79 af ed 68 34 7b 08 0c b1 2a a3 d4 b9 83 ae f7 f8 d3 cf 5c 39 fa dc dc 80 08 5c 60 04 84 1e c2 2a 74 97 41 73 41 80 f4 80 a6 c4 12 87 b6 06 45 1d f9 c6 c3 66 d3 5f ab a5 ff 38 3f e2 ff 6e ae 17 f8 29 25 93 48 50 90 ca 68 84 da ac 56 12 4d d9 76 00 39 80 12 70 ad d8 06 d4 8f 80 5a 20 Data Ascii: VI0ltD8x6R H%B@&s Zr ,K[o%Bqj=hy ffK]2"{'P%~jCyh4{\9\`tAsAEf_8?n)%HPhVMv9pZ
2024-04-19 14:06:45 UTC	342	IN	Data Raw: de c1 9d 2c 29 e0 ad 4a 68 64 c4 5b 45 30 c1 20 0c e0 07 fc 26 47 6a 54 0a 50 01 30 d0 5b 29 20 4a 41 bc 80 f3 34 8d 7a 9e c9 1b b0 d0 59 83 3a 45 78 41 36 40 11 14 11 68 1a 78 33 75 99 da 58 fa a4 89 24 d7 94 a8 ed 03 4e 51 53 57 54 c8 d2 91 6f ef 8a 53 3f c6 d0 0c a8 02 0a f8 29 cb 72 c6 28 02 67 9d 7d ec 49 46 53 0f 31 88 c0 ee c4 83 58 ff fc d8 fe 4f 3b 0f f5 bd f2 88 16 a2 20 ba 42 c3 6e 5b 46 52 41 86 71 c5 40 45 84 de a3 24 c3 37 a2 7d e0 cf 32 c4 2b 31 85 40 44 fc f7 f7 68 55 66 30 28 3a a3 70 6a 05 37 ed d5 a1 22 b6 21 12 e8 5b 76 07 91 61 76 70 9a 72 83 59 02 03 e2 ae ba ac da 6b 39 f7 42 50 42 eb 7c 5d bd 1e aa fb 02 09 b1 08 0b be ec cb de c8 83 ad ae 97 ba 3d 14 0d 5d 44 51 3e f4 bd b9 18 50 3c 6f e9 d6 bb c5 33 ee 35 55 11 aa cc 8d 81 6a 65 Data Ascii: ,)Jhd[E0 &GjTP0[) JA4zY:ExA6@hx3uX$NQSWToS?)r(g}IFS1XO; Bn[FRAq@E$7}2+1@DhUf0(:pj7"![vavprYk9BPB\|]=]DQ>P<o35Uje

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.6	49985	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	517	OUT	GET /fWeFmmqEhxgnidTfx0BGIy2ZNWKF1g4zLfnvy0GcQ0_bETqceP_VoB5O0YGAjwhI0osdHS5r4w=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 21244 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:42:11 GMT Expires: Sat, 20 Apr 2024 13:42:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 1473 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 f4 52 00 00 57 45 42 50 56 50 38 20 e8 52 00 00 f0 42 01 9d 01 2a 88 02 6c 01 3e 41 1e 8d 44 a2 a1 a1 12 8a 44 fc 28 04 04 a6 ee 17 48 e1 d1 9a 6c e9 fe 23 f2 93 bd 94 19 f8 ff c7 6f c9 af 99 0b 4b f7 af c0 9f bb 3f e4 ba 59 2d af 36 2f 36 fd 73 fc 7f f7 3f f1 9f ef 3f be ff ff ff e3 f6 cb fe 77 fd af 6a 3f ac 3f f3 7b 82 fe 9c 7f 80 fe d9 fe 23 fe 87 f8 ef ff ff fd fe b2 fd 7b 7e e7 ff aa fd 66 f8 19 fd 67 fb e7 fc 2f f1 5f be 5f 2d ff ef 3f 67 bd e1 ff 74 ff 5d fb 1b fd cb e4 03 f9 a7 f5 9f f8 7f 9d 7d e9 7f bb 1e c0 9f d1 3f c7 ff d1 f6 75 ff 85 ff 83 fd 17 fc 4f ff ff 48 df d3 7f d2 ff e3 ff 55 ff 0b ff ff d0 77 f3 cf ee 3f f5 ff 3f fe 40 3f f4 fa 80 7f ef f5 00 f4 c7 8a 2f 31 3f 61 f9 71 e7 df 9b 4f 81 fd 23 ff 37 fc 5f 32 d8 96 7c d7 f1 Data Ascii: RIFFRWEBPVP8 RB*l>ADD(Hl#oK?Y-6/6s??wj??{#{~fg/__-?gt]}?uOHUw??@?/1?aqO#7_2\|
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 9c 4d de 18 50 94 85 ce 94 01 a8 fb 09 f6 35 13 a7 8e 7b 35 62 fa d5 03 3a 7c aa b1 07 24 fa d8 d4 7d 7c 2c 33 51 b1 8e b6 7b 84 bc 18 f1 b1 6e cb 9b fd 70 8d c7 e9 1d 19 66 45 7a b2 fc bc 31 f5 ea a8 0b 2e 2a 82 68 2b 0a d5 52 a1 99 05 96 e0 6c c3 7b 1e 7a ff 40 f5 6d fb 7a 88 dc 60 4d 08 83 9d 2c e8 a8 da 61 79 e4 f5 ec 6d 3b 4e 5f 8b 14 d8 37 f6 a4 92 3b 80 bf 88 21 26 4d ba 5d b1 a9 00 01 c7 13 71 69 52 97 a3 ac d5 a4 0f bb 62 03 e3 f4 bb 0b 24 4c be 91 c4 17 70 72 f4 0b 81 5e 15 14 73 90 c5 3b 51 01 18 0e f6 f0 6a 14 68 f4 7a ff cf 75 30 17 50 42 81 8c ea 4e a6 e4 3b f8 69 e4 cf ba 5e 39 f9 8a f6 35 52 95 bf ca 6d dd 0b 60 6a da 9f 3c f0 3a 71 16 61 a6 50 64 49 90 b3 8c b4 8e a3 8e 9b ea 96 d4 c3 04 49 11 96 ab 89 b8 b4 aa ab 55 c4 db 7b c2 f5 60 2b Data Ascii: MP5{5b:\|$}\|,3Q{npfEz1.*h+Rl{z@mz`M,aym;N_7;!&M]qiRb$Lpr^s;Qjhzu0PBN;i^95Rm`j<:qaPdIIU{`+
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 44 a4 bd 74 9f 13 b8 af fc c4 47 15 dd ff 6c c4 f8 db 38 16 fb 6a 14 af 86 99 e8 c8 1c 30 ee 1d e2 49 b6 d2 b0 de d2 c0 84 2d 42 da 55 55 aa e2 6e 2d 22 b5 fe 5a 60 ad 31 5a 50 9a bd f4 59 e6 ec fb 07 c9 f6 cc 6c 80 b6 aa b3 c1 8e 70 37 98 f4 7a 9d a3 76 52 ba 7b b3 cb 2a 12 3d b4 26 76 6b f2 d7 06 4a 2b 6b 7e 9d fe c7 cb 99 c4 26 70 80 42 42 fa 5b c3 b3 0b 6f cb 05 48 57 46 83 04 54 46 47 fd c6 73 cf b3 ab 9c 1f ff e4 a3 53 bf e3 f3 7d 97 55 92 a9 e0 9e df ad 8d 48 00 0e 38 9b 89 94 a2 b7 4f ca 1d 29 bf e5 c4 36 66 06 90 56 9e fb b5 4c 9f 1c a6 4e 31 14 4c 13 4a e7 17 7b 50 fd e0 34 12 f3 a8 d9 7d c1 d5 cc 17 9c 6f 4a de e2 1c 8b 9c 45 08 b6 76 23 8b 82 da 2d 5a ff 05 ff 79 f1 5b 98 bc 06 6f 07 a7 8d 1c 90 a0 68 82 51 34 e5 38 e8 59 33 33 aa dc 44 33 73 Data Ascii: DtGl8j0I-BUUn-"Z`1ZPYlp7zvR{*=&vkJ+k~&pBB[oHWFTFGsS}UH8O)6fVLN1LJ{P4}oJEv#-Zy[ohQ48Y33D3s
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: d3 0c cf 5b 93 75 e7 3f c5 22 52 bf a1 bf 36 8f 20 28 31 97 be 85 fd 15 6e ec 40 27 a2 0e ef f1 c5 25 89 81 9d 42 5b 0e cf 79 0e 0b 3e 2a 3c c1 f2 e1 5c 7c 16 58 a2 fb 46 d3 3f 02 d1 b1 3b 5f e9 d0 84 3a 99 a0 13 12 48 f0 9e 39 23 51 a2 a6 06 71 6c af c1 5c d2 6c 78 51 9a 6d f4 d7 e1 76 18 bf 51 ff b0 1b cc 04 df 34 76 d0 d0 5f 02 63 d8 a1 29 5a 8c e7 42 39 d6 6b 76 8a e5 1c d8 8f 4d 36 da 05 fa c6 14 61 39 fa 41 2b 81 88 fb b7 17 ef b5 fc 65 2e d9 af b2 43 65 96 bf a6 9d a6 81 c8 07 3e 82 26 04 e8 fe e6 b5 74 3b 3f 14 e7 ee 59 95 92 df c1 a1 c6 71 e9 a3 b0 af 25 61 16 04 67 01 d5 b4 49 33 59 ad c8 d2 87 a2 e0 f4 36 af dc 83 38 34 35 81 df ec e5 3e a4 bb 81 1f 1c 0b 97 99 f7 12 98 2d c0 bc 99 72 6a b7 86 46 f2 6a b7 86 46 03 80 92 d4 e4 09 21 35 15 af 6b Data Ascii: [u?"R6 (1n@'%B[y>*<\\|XF?;_:H9#Qql\lxQmvQ4v_c)ZB9kvM6a9A+e.Ce>&t;?Yq%agI3Y6845>-rjFjF!5k
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 88 28 51 34 cb 27 90 aa a1 69 9f 0b 3f d8 6c 0c ab 83 e7 02 df fc ec c0 7d 88 45 2f 36 42 60 2f 38 34 f7 9b 04 40 ad 7a d8 91 83 60 c1 41 06 b7 4e 4f f7 77 f3 6d 65 3c dd ce e4 ab aa fc ed 1e 58 0f 45 12 b7 0b 17 5c de 77 cf 14 b1 b8 6e a2 ee 70 05 68 02 10 12 e1 e8 1b 38 7b 37 bf 28 b3 60 de f8 ee 03 12 bb 09 4a bf a3 a0 a4 42 34 28 9c 31 f3 8d 50 35 0a 0a f1 de 86 fc be ae 30 d5 a6 6a a8 44 1d 56 a8 e0 8e 01 dd 42 df f3 3c 8e 9e f6 f5 46 aa d7 4e 4e 6b ff 2d ce 33 fa e8 4a 69 d7 3c b0 91 fd bd 1c 32 ec 01 b4 86 42 d5 94 5e 73 52 88 23 b1 93 aa 20 44 9f d7 6a d0 e7 59 25 5e 11 c0 4e dd a1 e8 02 55 6f aa 0b 6a 40 9f e7 31 e6 90 e9 9c 35 c9 bf a5 4a 15 36 94 fa 1b 56 65 83 cb ad 4f 96 40 11 fe 53 55 df e0 58 ed a7 49 3f fd 66 1d 24 a0 4b 00 a8 10 63 8c 0b Data Ascii: (Q4'i?l}E/6B`/84@z`ANOwme<XE\wnph8{7(`JB4(1P50jDVB<FNNk-3Ji<2B^sR# DjY%^NUoj@15J6VeO@SUXI?f$Kc
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 0f a5 ae 86 68 38 19 a5 1f 0d 80 e9 20 ec bf f5 84 e0 07 a5 76 80 e4 1c 20 d7 43 4f 5b cf 0b ef 0f 50 34 c7 4d 94 93 28 17 13 35 ae 91 fb e3 5e 73 84 7c f7 10 73 d1 3d 90 06 e8 fe 03 15 21 86 3a a0 2c 03 02 41 9f 70 92 fd 83 9d 78 6d 59 e4 3a 3f c8 dd 6a 5c cf cf 15 2c f9 f4 f9 b8 e6 78 a2 b8 09 1b 93 ed 5e 59 19 b6 02 13 bd ae 5d 5a ce 47 87 86 d9 e3 90 0a e7 7f 15 c7 d2 53 09 41 ee c2 ae ea e5 38 8f 00 5e 19 fa e3 fb 36 cc 07 4c 3c 60 d5 44 ad e0 2f 41 e4 9b 01 a5 dc 31 fb 95 a4 56 c3 fb b0 93 60 38 85 19 1b d1 bf 16 17 65 6f 99 7d 2f cb 62 eb a0 a1 98 f5 53 19 13 e8 1f bd 9b f3 38 c6 37 85 d5 1b 58 42 c9 97 db 48 03 4b 30 37 dc fa df 58 9d 00 24 73 0c 50 67 7b 93 c1 d6 8a e0 9f 6b 38 f4 70 36 fa 5e 5a 4e bc a4 42 9d 71 5d 6b c1 9d 80 14 d7 12 a8 80 b6 Data Ascii: h8 v CO[P4M(5^s\|s=!:,ApxmY:?j\,x^Y]ZGSA8^6L<`D/A1V`8eo}/bS87XBHK07X$sPg{k8p6^ZNBq]k
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 1b aa 59 b8 00 07 db de a9 ba ff 03 eb 52 f1 e0 db 1e 6d d9 92 61 9d a3 ca 73 7b bc bb 13 20 02 a5 71 0a 6a 44 af 98 a2 f6 81 51 df 30 0c c1 39 36 1d 2f 9f d1 cd cc 5c 61 b2 08 42 5c 98 7f 2b 99 2f de 35 13 33 72 b0 cb e5 aa dc 86 ff 27 ac ff 86 c8 01 9d 1a 76 05 f4 83 57 f1 b3 2b d2 1c 64 35 81 53 68 ae 31 e0 4b 1b 02 c5 ed 2d d4 fc 46 3b 43 a2 43 e3 70 4c 2d 18 76 37 40 90 dc e8 a5 30 52 b9 7d b3 78 ed 8e f2 d2 fa d9 27 76 26 f3 b5 cc 72 08 23 fa 9b 88 db f1 7c 62 bc 7a 45 ed 4e 25 d0 e4 c8 af 17 e7 df fc eb 91 7c f3 33 41 bd 05 7b 2e 91 f9 3e f7 63 41 38 6a 89 b3 2d 81 1b f7 c0 7b 6c df 78 bf 37 28 7f 44 a4 f6 10 f6 a4 83 3e a2 6a bb e1 eb 99 67 c9 6d ac 35 a5 57 2e ca 89 85 9d 2c be a5 42 78 a8 55 fc 3e 4a 28 96 5b f8 08 4e 26 5e 58 be 05 a4 99 d7 e9 Data Ascii: YRmas{ qjDQ096/\aB\+/53r'vW+d5Sh1K-F;CCpL-v7@0R}x'v&r#\|bzEN%\|3A{.>cA8j-{lx7(D>jgm5W.,BxU>J([N&^X
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 6e 2c fa 4a a8 88 39 f0 99 4f e2 6d 37 9d f6 82 88 03 28 8f 91 92 a4 4d 4f 63 a9 02 48 fa df 6d 46 5d 14 95 d9 f2 59 0e 6b 10 d9 ba 66 63 f5 55 92 17 45 e7 04 01 a9 f8 40 51 66 53 2e 4e 66 bb 6e 43 c2 be b5 e3 38 30 5e 19 21 a5 2f 67 fd c6 ef 6b bc ea ce 39 14 6c 84 ae 62 5f 0c c0 5b 1a c3 5c 8d e7 04 2c e9 a0 0a 31 d0 9e 23 91 bb 33 f1 d7 ef 4e ce 31 44 9d 88 9c 5f d0 98 ad a4 0f 89 48 68 94 c9 77 5d 27 3a 32 08 72 15 c2 b5 de 94 1d 94 a6 8c 4c 19 1b 85 af 7e ea 8a 5f b3 31 0a c8 c6 ab 90 b9 1e 3f a9 b9 5f 37 57 e2 a5 46 b6 19 b0 1d db 7a e4 53 d8 fd ac 33 4c 2f c7 cb 68 11 45 a7 51 b6 69 40 0c 79 7f b9 8b a5 57 58 2b f6 b4 7c b0 f8 d4 e4 24 02 d9 44 4e 0d 4f 10 7f d6 7d f5 2b af 87 99 aa a9 fa 11 52 55 33 e2 82 80 97 69 25 80 6c e2 e1 8f 89 95 75 27 39 Data Ascii: n,J9Om7(MOcHmF]YkfcUE@QfS.NfnC80^!/gk9lb_[\,1#3N1D_Hhw]':2rL~_1?_7WFzS3L/hEQi@yWX+\|$DNO}+RU3i%lu'9
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: f4 6b 99 2d 71 c0 7a a1 03 48 95 76 67 a6 9f 67 3b 83 86 a5 e5 be a5 78 79 73 6e 2c c3 fc d7 8f 39 93 45 88 93 24 01 18 84 1e 5b d6 a8 3d ef f7 43 7b fe 5f a6 56 0f 03 03 35 95 ae 2b 6a d3 ef 9b 05 d1 ca 67 ec 11 fc 03 40 d4 91 76 2f 68 e1 ba 1e 61 99 b2 1a de f3 06 d8 15 de 9c 98 da f3 3e 16 90 75 e6 3e 36 b9 ce fc 56 98 69 b6 49 18 18 8d 58 fb e1 7c ad 2a a7 e0 dc 19 c9 58 e3 d3 a5 d8 98 ff 59 33 72 43 bb 2c 02 17 d1 4a 54 33 61 12 23 e6 9b c5 19 01 09 c7 5a c7 3c 47 10 5b 84 b6 f4 4a b7 34 cd 6c 41 9d 31 e6 02 b1 fb b7 36 07 17 51 86 c9 d9 32 ef 6f 6c e1 69 53 5b 7b 37 4b 82 5c 70 e5 57 57 98 c9 e0 31 53 24 ea b4 bb 31 15 12 95 46 a7 3c 61 04 bd fe 2f 19 3d fc d3 3d 8c 2b 6e 13 2c 5c 25 b7 0b 71 34 de d4 bd f3 d8 05 ac e1 3c f9 59 e0 56 3b 92 d7 a8 8c Data Ascii: k-qzHvgg;xysn,9E$[=C{_V5+jg@v/ha>u>6ViIX\|*XY3rC,JT3a#Z<G[J4lA16Q2oliS[{7K\pWW1S$1F<a/==+n,\%q4<YV;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 34 15 80 e2 86 99 86 86 53 45 a4 03 40 6c 8f 52 58 93 b0 0d 7c ed ca ff 7b b5 95 4e 62 92 03 e1 0e af d8 af ff 1b 2b 56 b1 35 9a 08 7e ce 00 41 4c d1 9d cf 1d 2a 5f 98 1c f4 fa 32 b4 2b 40 5f a3 15 38 17 26 d9 5e 17 a0 74 1f 2e 45 94 1c 71 66 22 d4 17 d7 f8 14 72 4f 5f 77 71 c0 fe ff ff f3 5e 83 f0 dd 65 1c 4b b3 53 38 bd 16 4b 70 8a c7 c2 b6 3f 39 93 65 88 d6 30 09 fa 7d 43 5a ed 33 8a 62 3c 32 48 b1 11 ec 96 ca 23 66 df 8b 7d 29 22 6c dc 81 18 c5 bb 92 11 41 b1 ce 45 9f 39 85 83 21 6a 32 47 1a 23 00 20 a0 92 d9 64 59 c9 6f 19 1f 9e 43 74 99 e7 97 cc 47 5d f5 dd 4d de 39 4e 26 ae 9a 99 9b 15 ae 25 02 7d 85 ca bf e2 30 0e 7c dc 7a b0 3d 74 31 50 31 f6 a0 31 11 11 7d 31 9c cc 16 aa 96 56 37 e8 d9 b3 58 6e b7 f6 57 ea 04 bc a0 0b ef 82 70 ea 98 83 0f 09 31 Data Ascii: 4SE@lRX\|{Nb+V5~AL*_2+@_8&^t.Eqf"rO_wq^eKS8Kp?9e0}CZ3b<2H#f})"lAE9!j2G# dYoCtG]M9N&%}0\|z=t1P11}1V7XnWp1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.6	49983	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	518	OUT	GET /JPdX1rz1Aerqh5grewz9YnmkGx2Lu8I9X5ilCz7gMePcLWuA-X1__2EpMtB6FvDb1UQ17pJN7i8=w648-h364-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19928 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6516 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 d0 4d 00 00 57 45 42 50 56 50 38 20 c4 4d 00 00 50 38 01 9d 01 2a 88 02 6c 01 3e 3d 1e 8c 44 a2 21 a4 92 59 5d 30 48 03 c4 b2 b7 7c 25 5d ba b3 57 be 7c 51 ae 84 70 7e 95 72 03 c8 fb c0 3d 67 ee cf c8 fe 59 f8 41 cc 7e f4 fc c7 e4 1f f7 0f d7 6f 9e fe 43 f1 57 d7 7d f9 fd de ff 25 f9 3f 82 0f 92 66 27 d3 9f e3 7f 30 ff c4 ff ff fa 9f ff 47 d5 b7 e9 6f fb 9e e0 1f a2 bf d8 bf ba ff 74 ff 43 fd cf ff ff ff ff bc 3f fa bf ce fb 8e fe a5 e8 63 f9 0f f6 2f f7 1f df 3f 7c fe 76 ff d2 7e 99 fb e8 ff 79 ea 05 fd 8b fa b7 fd 2f 5b 1f 63 8f 40 4f d9 6f 4c 4f fd 9f e9 7e 1b 7f ab ff 99 ff c9 fe 7b f7 ff e8 4f f9 e7 f5 6f fa 1f 9f 7f 20 1e 80 1e 80 1d 72 7e 93 fc 8b fc f7 e5 e7 a0 3e 72 7d e9 ed b7 c8 36 14 fe 2f fb ff 34 3f 9d 7e 40 fd b7 f8 af dd 6f 8a Data Ascii: RIFFMWEBPVP8 MP8*l>=D!Y]0H\|%]W\|Qp~r=gYA~oCW}%?f'0GotC?c/?\|v~y/[c@OoLO~{Oo r~>r}6/4?~@o
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 70 af 5c 55 e9 90 3f 71 f0 5a da 55 09 39 ee 9b df 4d ab 9c 4a 1e eb 68 c8 06 81 5f 6f 7c 29 94 16 79 ac 48 fb 2a 0d 76 07 fc e7 5e b9 c3 07 fd 13 66 4c f2 74 7e cc ec 4f f0 cb 79 f7 6b f2 54 75 a5 03 92 c5 ef 90 ba 69 dd b7 4b c3 ca 2e d8 e5 0f e3 24 18 8f 1d 4f c3 19 63 dc 52 d0 ec 72 6a 14 68 3c 93 3e 86 69 66 11 2f a5 91 74 a4 22 1f b6 7a cf 0e b1 37 c4 2b 3f f9 51 c8 3e d3 cf c5 d0 02 db 4b 9d a5 e2 27 bc 1a 1d c5 25 b8 65 01 8e 4c b8 c9 32 7f 7d 1c a0 55 7c 2c c6 ec 38 06 10 8f 4b fb fb 02 9c 76 1e d7 de 63 de d6 ec 48 b9 67 a4 e9 da 8a 1e 6e 99 3b c5 ab ef f0 7f ba d3 26 91 0e 12 d9 da 73 f1 e4 98 39 33 3f 96 7b 63 3c 31 3f 6c 0b 3d e2 69 c9 eb 76 77 7c 37 8e e5 33 c7 71 cc cc 16 8d 85 bf d5 7f f7 cf 31 0b c5 98 2e 16 9f 79 31 58 50 ba cc 6f 7a 8d Data Ascii: p\U?qZU9MJh_o\|)yH*v^fLt~OykTuiK.$OcRrjh<>if/t"z7+?Q>K'%eL2}U\|,8KvcHgn;&s93?{c<1?l=ivw\|73q1.y1XPoz
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: ff 73 e8 e2 e6 79 d3 67 72 20 c2 d1 19 e8 99 9c 3d c9 da 84 67 65 4b fd 1b 73 65 a8 e4 d6 98 70 30 9c 11 1b 99 ff bb 12 06 75 39 80 49 e5 0c b8 f3 07 4a bc d4 4e 3d 79 d4 3b 19 39 36 de 71 09 44 05 b7 8e ec d6 6d 66 66 61 e9 f5 4d 96 2d 5f f6 f1 2d 56 4a d5 a2 e4 ee aa 5e 2b c2 4c fc 1d a1 55 b8 64 8a 80 c8 fc a9 6f 7a 3d 4a 38 27 54 88 5f f4 53 d0 81 f0 90 d7 19 e3 6d 5a 61 42 93 8b a5 5d c2 37 11 9d aa 8f 1f 28 79 65 28 07 e6 76 c2 7c 94 df 51 f9 e0 27 1b f3 b2 9a 7f 0d b5 a9 38 84 e1 83 18 89 7c 81 78 83 2e 8c 8b 75 49 18 69 04 67 5a b3 e9 f4 e8 0c 9a b2 a2 7a 06 c1 f4 ba 89 46 1a a4 e4 18 49 4b 5e b7 5a d0 cd 5a 8f e4 4c 5d 66 c7 a3 3b f1 db 1a 97 04 c9 6e 53 ce af 0a 6e 24 11 61 af 30 6a 43 25 3b 4d 76 77 f2 aa e5 b6 f3 80 01 81 04 a7 1b 3c d4 3a 95 Data Ascii: sygr =geKsep0u9IJN=y;96qDmffaM-_-VJ^+LUdoz=J8'T_SmZaB]7(ye(v\|Q'8\|x.uIigZzFIK^ZZL]f;nSn$a0jC%;Mvw<:
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 84 01 52 84 e6 e6 78 7f 57 50 9e 9f 92 20 6d d5 f0 1f 78 d5 f8 bd 9e 48 6b 03 c3 1e 02 2d be 06 17 ee 9a c7 8e 72 ba d4 74 c7 3c 0b 2a fc ba ba 0d 96 93 9c 51 c8 7f 8e 61 65 27 bd 4d 3e 3d dc 95 63 87 fd 93 af 17 31 15 3c fa 39 9f fb 6a 93 e1 a7 b5 3b 3c 10 cf f8 80 00 9b 0c a0 f1 1d 03 c4 65 05 00 04 7c ba 98 ec 37 4e 61 1a 2a 41 00 02 e7 7b 47 35 c9 a2 8e 41 c7 92 3f c2 d3 c4 74 36 c0 7a 90 d1 47 71 74 db 09 c2 31 37 e4 33 e6 98 72 2b 4c 1b c2 75 21 e4 6d b3 28 00 ff ff 72 43 74 be 55 fb fe 74 d6 d6 c8 d6 8a 79 fd 18 96 18 77 e8 3d 57 6c 00 07 6d 84 bb 4a 94 d4 1d 3d 7b 45 da 2c c2 e1 fe 76 fe 2d f7 1a 11 27 0f a3 8e 21 d2 a2 d9 d1 c6 f3 ec 01 b5 48 7b c5 5f 73 76 01 b2 47 41 f2 b9 e0 7e 6e b1 62 b2 95 d3 c1 89 e4 9b 34 37 72 65 0c 0e 64 a8 c0 5f 06 fe Data Ascii: RxWP mxHk-rt<Qae'M>=c1<9j;<e\|7NaA{G5A?t6zGqt173r+Lu!m(rCtUtyw=WlmJ={E,v-'!H{_svGA~nb47red_
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e8 50 ea 9e 71 c1 4b 12 01 df f1 8d ae af 71 0b ad e6 fe 04 ea 69 25 08 6c 19 f0 c8 33 64 58 6e 1d 2d e2 62 fd d8 41 55 2d 0e b9 22 fe d9 4e 3f 40 4e 50 98 44 cf bf 40 9c f4 99 30 b4 58 d2 0a f4 29 c3 26 e2 5c d9 3f 3c 62 57 67 9f 97 16 9b cb 9f 2c a2 2f f1 12 46 e2 98 24 11 cd 92 63 2e b7 87 d6 7b af e8 4b 86 75 c0 51 eb dc 24 bf 59 2c 53 e0 cd 61 91 ed 17 97 1d ae 2e a0 4e 81 de 14 04 b1 18 6f e5 74 1e 9f bb c1 14 fb a4 f7 f9 6a 29 ae 89 fd 8c 6c cc c2 83 29 84 b6 46 c7 2b 4c dd 7c 78 16 ec 3e f0 a0 0a 23 a2 51 96 dd 39 f1 39 3d 19 78 ae 9e 74 7b 8c 19 ba e9 5b 14 82 98 68 a6 bb f7 c1 be cc f0 e7 c5 0a 4d 8b 60 47 6e 2e 25 73 af 14 6a 5f 6a 68 7e 61 01 dc 47 c2 2e cf 25 99 d8 e2 5b 97 0d 48 7c 56 c6 fd a1 5a 1a 86 a2 27 4f 14 75 a3 ea ca 3f ce d1 b5 04 Data Ascii: PqKqi%l3dXn-bAU-"N?@NPD@0X)&\?<bWg,/F$c.{KuQ$Y,Sa.Notj)l)F+L\|x>#Q99=xt{[hM`Gn.%sj_jh~aG.%[H\|VZ'Ou?
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 30 b9 9e 70 48 dd fd 3b 89 51 a7 64 50 51 f9 78 fb c7 97 58 a7 ee 71 04 0d 76 86 a6 29 e1 45 ce da e7 63 4f fc 79 48 9a e2 5c 5e 81 69 79 05 e2 a7 cf 85 20 4f bb 5e 26 4b 3d 6c f7 ed 59 e0 d4 ff 57 33 8f 1c 8a e6 1d 00 02 08 5d 25 e1 7f bf 03 9c d6 d6 fe f8 8a 7f b9 43 19 c8 53 62 0c ad e2 bc 3f e6 1a c6 9c df cc 43 80 7a 60 d9 93 1d 1c 69 62 08 53 44 79 e3 91 b4 95 66 31 2f ae 72 92 2e c6 89 ce 8e 50 6a 13 0b d6 2f 05 0c 00 4c c3 28 97 a5 64 e0 61 41 cf cf d1 89 3e 08 47 17 9d b3 11 4e 50 84 b7 b1 30 39 ad 35 03 aa 16 15 59 32 b7 cd a3 d6 5f ff 4e c8 87 8a 29 61 82 13 71 dc 73 b1 ea 70 53 cc 3a ba 78 11 ac af fd 7d 7d 2e 93 24 26 18 f6 a9 93 6b 52 aa 7f 9e 2c d9 92 b2 ca 7f f6 5c 65 2c da bc 45 a2 f1 37 c2 2f d0 80 a9 2f 8c 56 48 07 46 6b 4f 30 d6 54 f4 Data Ascii: 0pH;QdPQxXqv)EcOyH\^iy O^&K=lYW3]%CSb?Cz`ibSDyf1/r.Pj/L(daA>GNP095Y2_N)aqspS:x}}.$&kR,\e,E7//VHFkO0T
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 92 13 01 14 34 7c e2 40 59 75 65 50 4b 9d 1b 86 47 44 a2 e4 0f 87 4c 9e 13 e6 98 cb 37 07 fb e3 0a 47 3d e1 34 5e 47 c1 1a 2f 4b c6 b9 2e 73 7c 05 43 2a 8d 41 58 f7 54 77 e5 a2 a2 36 99 71 59 dc ef 6a 24 96 6e bb a5 47 38 34 f9 ad a9 c8 d0 84 51 b0 35 71 45 fc b5 99 d1 48 b1 42 13 ab 48 75 9a da 94 a5 8c 9e 69 6a 14 18 2e 40 30 67 aa 57 87 c3 11 06 61 85 5c 8f 1b 4a 4e ff 57 37 35 9f 3f 8e 71 84 ca 77 94 75 40 d2 5c 25 be 5f d8 79 23 6a 06 dc 7b bc ce 0c eb 56 ed e6 36 e8 3e bd 00 f1 3d 98 5b 9a b5 18 c5 46 aa bc 15 83 6c 76 d2 68 26 b5 26 dc c8 c3 8a cc c9 8e af cf 0d 47 23 f3 b9 02 ca fa 6a 70 42 42 ce 17 46 6a ed df 99 11 c5 3f 6a ee ed b5 62 10 05 f6 eb 3d 77 af b2 af 0d 24 4d 29 d5 0a 9c 6d 46 54 42 b8 3b 79 72 ba fd 7d 33 ea 68 26 ce 3b 70 9c 83 43 Data Ascii: 4\|@YuePKGDL7G=4^G/K.s\|C*AXTw6qYj$nG84Q5qEHBHuij.@0gWa\JNW75?qwu@\%_y#j{V6>=[Flvh&&G#jpBBFj?jb=w$M)mFTB;yr}3h&;pC
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 10 44 02 d3 01 c4 b2 d6 07 77 80 4a 4d b9 65 30 60 7b c6 8c 34 81 d1 42 9b f3 d8 97 5d 38 54 49 a6 5e 34 90 ff 2a 02 79 05 2a 3c f0 b9 68 d4 f0 b3 32 3b 59 52 2a ae 79 ed 3e e9 d1 53 24 11 2f fa d0 a5 86 3a f5 d3 2b 90 91 03 07 e8 d1 90 7b 3f 07 d8 3d 7b 12 b6 70 9a 6c 6f d4 4d bf 2e a6 dc d1 03 c5 1d a0 82 7f a7 61 f4 ba 02 53 dc c4 4a 82 69 2e bd 26 42 6d 45 f8 52 73 45 3a b6 fe ab 63 db 52 70 65 ac 85 74 bb 63 a1 35 b8 f2 59 bc 68 b3 42 a4 51 54 44 97 e7 a9 78 04 e6 dc be 3b 84 00 59 a7 65 5a 0d c0 91 fd de 20 58 b7 16 3c 0b 10 9d dc 7d d9 34 60 e4 c0 bc bc 19 a8 e0 84 17 98 58 5e 4d a1 48 d7 f6 f2 57 ae 05 a8 01 8c 23 9e d5 8b e5 01 4a b6 b5 a4 11 60 99 7b 0c 0c 91 98 71 e6 4c cf 03 d0 1c 94 ae 36 aa cf 45 f1 af 11 42 12 b3 8b 30 01 7b 8a 72 f4 3f de Data Ascii: DwJMe0`{4B]8TI^4y<h2;YR*y>S$/:+{?={ploM.aSJi.&BmERsE:cRpetc5YhBQTDx;YeZ X<}4`X^MHW#J`{qL6EB0{r?
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 0f 17 70 58 f6 ed 23 bb 87 a8 b7 bd 68 ef a4 c4 43 ce d6 24 57 38 b7 0b 54 e8 6f 72 4e 5f d8 40 35 f3 0f b0 f7 1f 80 34 2e ad 1a 3b 3b 91 29 51 93 fd f3 7e 9b f4 77 31 ae 1f 91 9f 00 35 a9 0e 73 f1 a5 cb d9 65 c1 d8 27 04 c4 6f be f1 42 7e f5 31 0e c3 8a c6 17 e0 36 91 eb 5b 42 ef a0 e3 aa a5 4a b1 7d 6e c2 bd 3a 96 74 b0 28 d4 f5 16 f1 4b 8e 1d 32 84 76 62 73 2a 67 72 a8 07 b6 d8 a1 18 4b bd 68 dc e6 7b 46 af 63 25 39 b1 9f 14 7c 49 2e 27 b6 22 17 fe 6b 77 68 0a 4e de d4 32 ce ac 6b 48 0b 81 b8 b8 10 10 18 ea f8 0f 33 dd 28 d7 0e 68 2a e1 d9 40 3d de 1c 6a aa 0a 1a ca 5e ef 2f 3e 12 64 d0 be 88 70 b0 bf 37 d1 b4 d2 ba 00 20 eb ba 4a a0 24 86 e8 ea 32 f3 c9 77 64 10 39 95 52 4f 80 d9 28 8d 8a ab 70 d5 d7 3a f7 0e c3 86 be 6e 8f 85 82 e5 dc 9e b3 4a 33 77 Data Ascii: pX#hC$W8TorN_@54.;;)Q~w15se'oB~16[BJ}n:t(K2vbsgrKh{Fc%9\|I.'"kwhN2kH3(h@=j^/>dp7 J$2wd9RO(p:nJ3w
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 87 ea 57 7d f7 a1 87 1b 5c 32 20 97 38 68 eb e8 67 d7 02 9b ad 2c 8a 46 ab df fd 62 ed c0 ff 53 a1 ba 24 55 23 6d 0c 24 ac f4 d1 51 44 f7 f5 53 e9 ff 73 54 f2 47 58 6f 45 14 4e 8d 3d f9 7f f1 6c 13 db 2c d7 47 92 05 80 45 f4 2b e8 6e 12 b8 68 96 da eb a9 70 02 62 35 70 c8 6c 35 30 8c ab 67 ea f0 6c 66 9b 95 06 d7 bf ed b9 56 6c 18 6a 16 4a 10 9c 4c 58 ab 6b 7c e3 4c 5c fc d0 b7 49 3e 77 b5 b6 a9 0a 09 b6 88 35 f8 e1 68 bb c1 28 fc 2d a3 24 0e ed be 3d 50 3f 0b ff 9f 06 bd 17 95 85 ef 6c 8f 7c 3e bf c0 39 41 6c 77 b1 c4 a9 41 97 57 ff ed ad 10 19 5d 74 18 f8 4f eb 83 c7 e9 c7 41 70 e1 9a 51 a0 b5 40 2e 31 8f 82 d3 ae 42 00 a7 2f 49 14 38 c2 f1 df 6a 1e 21 1f f9 d9 b9 28 13 c5 4d 49 ec 4c fd 4d 0e 1f 60 9f 18 34 49 60 fb 25 93 af c1 f7 d7 dd 5c 88 60 4e e0 Data Ascii: W}\2 8hg,FbS$U#m$QDSsTGXoEN=l,GE+nhpb5pl50glfVljJLXk\|L\I>w5h(-$=P?l\|>9AlwAW]tOApQ@.1B/I8j!(MILM`4I`%\`N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.6	49982	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	505	OUT	GET /OmRFgoSS-iZDwzkMpygYEjbBkpY-_fpE2CEiEgj2KG0yoj2DcP01fbGMutWEf8ip2tiv=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6438 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:56 GMT Expires: Sat, 20 Apr 2024 10:12:56 GMT Cache-Control: public, max-age=86400, no-transform Age: 14029 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 1e 19 00 00 57 45 42 50 56 50 38 4c 12 19 00 00 2f 3f c0 0f 00 4d 30 70 db 36 6e 34 92 bb 23 f0 16 d1 ff 00 66 f6 98 a4 dd 98 16 e6 63 bb 3c 8a 42 2b 47 bd aa a5 b9 9e ba 3f 1b 60 c1 28 92 24 45 15 f7 42 2d e7 5f ce c6 29 a0 85 c1 d5 c1 36 92 24 27 8d 96 01 90 7f 6c 14 d6 9b 02 75 06 db 48 92 9c 0c 1a 13 f2 4f ee e5 1e 85 ad 75 ff 03 00 7a 83 11 56 1f 57 ec 10 26 08 fa a4 f5 59 ea 53 3c 78 24 66 31 1b a8 79 a9 f9 0b 07 08 e2 d4 19 73 8d 4d e2 93 fc 5b fa 00 80 45 d8 ac b7 04 56 6b e9 7f 00 b1 0b 47 ad 3d 15 01 f1 82 6b d4 7d 39 31 89 3b 9e a2 2b a4 5e 0b e0 9e e4 ba ba b7 5e e2 97 3a 44 1e 39 5c c9 ce e0 7f db 3e 43 92 fc ff bb 23 22 59 6c 4f 77 d7 68 bb 07 cf ed f5 70 ad a7 6d db 36 7e b2 6d db b6 39 66 8f 8d b6 ab 59 66 66 46 3c 9e a8 ac aa Data Ascii: RIFFWEBPVP8L/?M0p6n4#fc<B+G?`($EB-_)6$'luHOuzVW&YS<x$f1ysM[EVkG=k}91;+^^:D9\>C#"YlOwhpm6~m9fYffF<
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e9 63 c4 27 c4 24 e2 fa 9c 6e ab 72 57 d1 5d 9b f6 8f 11 b7 ae e9 0a c7 d3 de e9 1d e9 d8 18 b2 5b c8 bb 11 1e 97 35 c3 62 67 a1 b5 25 cc b4 cb 2b 61 10 41 ba 09 87 1d a2 8d 91 35 d3 87 74 a8 ad 8d 38 b6 e1 d4 c8 2e bf 4f e8 3a 43 13 04 2d 40 00 02 92 ab a8 e3 2a 6d 84 27 10 10 9f 12 0f 25 d3 63 88 29 c4 24 e2 65 62 62 3a 5e 47 bc 4e 3c 44 3c 42 7c 60 d5 8a b4 da dc b9 97 1b 7d 94 7a 0d 70 d4 32 58 83 e0 4e ad ae 94 35 9f 2d 6f f4 b3 9d be 72 19 af ab 37 7c fc 69 ee b7 b3 56 58 0e 30 69 7f 1f d5 91 36 3b 02 6d d4 cf 8c cc b9 ba db 45 46 b1 21 a7 09 28 40 00 28 b5 c2 60 fc 16 2e 25 10 04 84 27 ee ac ea c6 a2 9b 42 b4 11 4b 88 47 5d 5e 28 58 3b f1 09 f1 05 f1 a4 ab b7 87 93 55 53 eb c3 c4 91 b4 87 28 0b 55 08 41 9e 8a 0a 54 05 f2 ed a2 9e d7 b8 11 db 59 2f Data Ascii: c'$nrW][5bg%+aA5t8.O:C-@*m'%c)$ebb:^GN<D<B\|`}zp2XN5-or7\|iVX0i6;mEF!(@(`.%'BKG]^(X;US(UATY/
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 65 7b f4 73 3f 40 b0 51 2f 49 ad f4 53 5a b1 c9 ee 04 f0 4b 83 21 d7 f3 f3 fe 82 36 d8 f9 e4 19 58 4a 85 12 19 de 73 65 36 1b 57 6a 34 cd 2f e2 cf 7f 0f db 2a 83 25 73 b2 8d e8 44 41 d5 d6 a0 17 ef 4f 3b 4f d8 20 a1 04 82 a0 e1 67 f6 34 6f 1b 0c 03 58 a3 8d 49 73 81 fa 00 3a 2c ea 66 bc df e9 89 c2 ea 99 ca 62 75 f1 e6 18 6b 51 95 4b 92 03 d1 81 7d 07 8a 7e 14 5a 35 d5 98 92 f8 90 d7 c1 2d c9 9e 47 a2 b6 fd c5 e9 d0 ee c5 8b df 39 71 a5 af 87 40 d0 8c 20 08 6e 62 b2 cb 9f fe 04 a4 e2 2a ae f0 27 00 a5 eb e7 fe b2 f2 7e 60 40 0d c0 c9 dd fe 3a 3a b5 89 b5 90 2e 91 f2 e4 a5 a8 44 55 40 17 e7 6a 15 79 bf 88 4c 8e 29 fa 51 73 09 81 a6 ad e2 4a a5 a2 9f 52 5f 07 9b f9 10 2b c0 d7 56 1e 83 21 43 96 fb 6d 23 19 cc f9 b2 63 07 dd 41 33 97 4b 39 c2 45 08 c0 44 44 Data Ascii: e{s?@Q/ISZK!6XJse6Wj4/%sDAO;O g4oXIs:,fbukQK}~Z5-G9q@ nb'~`@::.DU@jyL)QsJR_+V!Cm#cA3K9EDD
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 9e 10 22 39 e1 25 38 42 26 88 60 41 a5 58 35 86 76 a3 74 a6 9c 8a 97 da 78 d5 47 31 91 c8 c7 6d af dd 95 a4 6f a7 70 a8 46 d2 60 63 b6 1a 14 e2 2f 05 c4 21 52 f2 00 c0 de d0 c0 27 27 8f 8c 3f b7 aa ff c5 88 86 03 63 52 7b 27 25 19 44 a5 ae a3 99 b2 32 6f 88 e4 01 91 99 e5 81 14 81 52 09 2a 83 0b 6c d9 6a 44 ec 6c 14 23 e3 11 a7 33 6c 89 26 e6 b4 2c 41 95 83 3d 05 52 d2 c4 6c 0f 57 fa 4f 05 a8 ce c8 15 7a 00 82 f7 5f b4 f6 11 5f f9 6e 1a 4f ae d6 73 e8 36 91 da e8 fa ce b5 c9 49 a3 75 b3 ab 1d 9a 29 34 81 9c b0 48 04 50 14 69 60 50 44 40 66 ea 9f b1 ea 97 fe d3 64 3c 91 b6 2a 36 44 26 d1 f5 18 33 58 85 fd fd 44 03 dd df d7 84 2e d6 97 2c f1 27 e0 6a 4d 69 09 40 f0 ae bb 87 7f 79 5b b2 e6 60 9a 3b a9 05 69 ed 81 84 b2 65 d8 aa 5b 3e b6 b2 66 b7 a4 d5 ac e6 Data Ascii: "9%8B&`AX5vtxG1mopF`c/!R''?cR{'%D2oRljDl#3l&,A=RlWOz__nOs6Iu)4HPi`PD@fd<6D&3XD.,'jMi@y[`;ie[>f
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: cb 1b d1 0a 47 11 c1 24 2c 02 d0 10 34 c1 90 6a 2e 30 13 df 3b fb 44 1d 13 e3 7f 9f 69 9d 6c bb 1d ff 5f 81 d0 5a a0 0a 96 4e 93 cf 26 19 3b 36 77 16 2d c5 d0 79 29 39 27 5c 5c db b2 b8 f3 f5 43 c3 7a 97 53 7f 4d 07 b8 4b e5 95 74 c5 ec 12 b1 6d 66 3a c6 d9 4a 32 fe d7 ea 72 05 19 61 7e 30 9e 30 5b 09 22 4d 1c c7 16 59 66 2a 20 33 61 81 28 c9 22 b9 a8 01 4d ca 31 ce c0 e2 b5 33 6f 89 78 1b b7 db 6b 3f d1 a7 f7 fd 78 72 fc 7e 4b 3b d5 54 07 09 93 f9 3f b0 4c f1 f1 59 dc 50 14 58 5d ba f4 a5 d0 7f 83 b6 7a 64 73 ed 53 45 fb f9 7f 0d fb f2 8f 97 b9 45 ed f7 17 c3 3e 97 54 cd 73 c7 8a f9 c5 e0 a8 c7 b5 9c 61 bd c4 ce 26 92 4f 82 f6 c4 c7 05 85 ea 01 71 2c 1c 74 c8 8c 1c 2a 48 11 ca c4 88 9e 99 30 2f 06 5e 77 b9 3d bb fd 75 df cf 46 5f 38 ec 93 cd 2f d7 5d f7 Data Ascii: G$,4j.0;Dil_ZN&;6w-y)9'\\CzSMKtmf:J2ra~00["MYf* 3a("M13oxk?xr~K;T?LYPX]zdsSEE>Tsa&Oq,t*H0/^w=uF_8/]
2024-04-19 14:06:45 UTC	697	IN	Data Raw: 27 bf 81 dc c8 91 3d 66 9e 33 22 cd 92 22 81 5d f3 dd a3 be 73 3c d6 6a 0d 5b 0f 6b bf a5 ef b5 4e b6 2a e0 80 d3 70 02 86 48 59 b8 a4 b5 5c d1 78 20 02 0a 20 24 0a 96 43 a8 72 50 09 16 40 32 04 02 99 08 22 19 4a 46 2e 38 66 08 ef 18 bd 82 6e 8b 93 1b 51 f5 de ac b0 e2 04 10 06 66 54 46 44 35 1c ab e2 e0 52 ad 3d 16 28 a0 44 92 4a 6f 08 96 ba 3c 05 46 d7 82 e9 d0 df 7b 8c e5 0e 46 00 77 c6 ae c2 ac aa d5 1b bb c3 e6 63 37 3e d5 e1 6b 52 20 0c 35 54 a0 1a e0 a8 00 0a a7 a1 ad e4 08 15 52 01 84 93 c5 e0 58 03 6e 9b 6e 1b 0c f1 12 d1 4a 90 03 02 49 20 04 10 86 4a a4 13 98 6b eb fc 36 dd fd 4f c1 3a 7d e0 b8 ff 9f ef cb 58 26 2c 12 22 0c 32 8a 95 71 7e 4d 44 29 3c 11 12 c8 41 89 d4 81 17 c1 26 6c 69 3a d6 cd 64 cd 5b e3 ec aa 55 19 86 1b 98 f3 a1 6a 60 77 fb Data Ascii: '=f3""]s<j[kN*pHY\x $CrP@2"JF.8fnQfTFD5R=(DJo<F{Fwc7>kR 5TRXnnJI Jk6O:}X&,"2q~MD)<A&li:d[Uj`w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.6	49984	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	504	OUT	GET /D4DUUFQDCsH9NIEa8hjMjQSWdtNhGX1Fd_jT-23ogAb5uMMqttqQDUJcUt4K_u8RYOQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8990 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6516 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	722	IN	Data Raw: 52 49 46 46 16 23 00 00 57 45 42 50 56 50 38 4c 09 23 00 00 2f 3f c0 0f 00 4d 30 68 db 48 d2 26 ed bd c3 1f f1 90 88 e8 7f 9c 9c 00 24 81 29 aa 97 76 1d 5f ed 30 4a db 6b 69 87 bd 5b 74 e1 b8 91 24 45 8a 65 86 e7 fa 6f e2 31 94 c6 0e d6 91 24 2b 19 9c 2f 0d 80 fc 83 f3 e7 ef b1 45 b1 8d 24 c9 c9 3c 1a f2 0f 70 2c b4 a5 35 f4 3f 5e 12 42 26 22 22 19 49 bf 8a d2 93 9a 22 3c 28 92 64 dc 53 c2 1f 15 ae 24 2a c8 11 1f f2 e7 be e8 4e d8 c2 19 a0 74 c7 8f d3 1f 8c 11 16 ac 9e c0 c1 38 f7 f6 1c 9f f1 30 1e a0 f0 ff dc 2b d9 1f 93 67 ac cd 5e 9b b7 40 9f 9e 1e 5f 46 e9 3e b7 fa da 87 1a b8 aa 0d df 3a 79 33 c2 e3 ff ff ab d3 f6 ff 3f b4 c7 f3 58 72 4e 4e 3c 01 42 80 14 77 6a ac 1d 1d f5 f6 b5 32 eb 5e 97 cb 2a 73 77 7d b9 ce dd f5 35 77 77 77 a9 bb 60 a5 c5 9d 20 Data Ascii: RIFF#WEBPVP8L#/?M0hH&$)v_0Jki[t$Eeo1$+/E$<p,5?^B&""I"<(dS$Nt80+g^@_F>:y3?XrNN<Bwj2^sw}5www`
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: dc 6f 8d 53 d9 78 b5 63 22 b8 21 03 78 78 73 d8 60 7a 06 7f e1 f6 16 5e 2e cc 78 d7 ca d0 4c 6c a4 06 60 a0 18 8a bc f9 8f ec 8f cd 7b 9f 10 31 50 d7 b3 9b 0f 7e 9b 92 23 4a bd e3 02 52 88 0f bb ec 95 d5 5b ff b3 b9 f4 7d 0f 1a e0 b4 42 64 fc 80 7b 22 4d 1f cb 67 28 0f 82 47 98 1e 61 0a 63 09 fc 6b 7a 3f 79 8e 6c 02 44 10 00 c0 93 30 41 c0 10 af fe fd fb a5 6c d9 d7 fa ca 0f 1e 8f 71 cf b1 40 a1 be 48 c6 69 28 52 bc 96 6f 36 8b c5 21 d5 58 16 79 1b 1b b5 69 27 eb 06 5a 86 14 8d 84 25 1f bf 7e e7 dd a3 3f 2c be 2a 00 2f 63 6b 82 29 fb 86 bf 63 9e c1 f7 7f ac aa 8f 45 ac f3 f2 a9 6f 9e eb 1d 1e 7e 24 e4 bd 9d fc e9 1e 9d f9 81 fb 43 7a db f9 c5 54 02 c8 11 9a 86 8b f9 c7 18 86 06 1f b5 33 df 43 3c 4e bc 49 0e e3 00 ec 80 06 69 34 4d a5 02 00 dd f0 db 0f f5 Data Ascii: oSxc"!xxs`z^.xLl`{1P~#JR[}Bd{"Mg(Gackz?ylD0Alq@Hi(Ro6!Xyi'Z%~?,*/ck)cEo~$CzT3C<NIi4M
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: f3 97 9f f8 69 d3 c5 da f6 f8 a8 c7 55 41 11 71 30 4a 98 5d d0 63 74 aa 4a cb f9 de 6e 17 58 0c 6b b6 76 fa 75 6c 98 cd 02 1b 0c 1e 66 a5 06 7d 58 4d f7 d3 c0 35 ba 2d a9 5d 9e 48 de d0 e7 fc 69 fc 23 b6 90 c2 50 96 68 8a 53 26 5f 9f 78 94 31 02 43 00 0b 40 31 29 48 32 e1 18 23 8b 95 33 06 10 50 8f e2 a3 5a ac 40 43 98 e0 19 67 98 2e 65 cb 8d 12 14 0b 93 17 94 bf d0 1c 79 7a 24 30 4b 6a 97 7e e2 61 f1 cd 17 3f e0 67 86 b3 9b 3e e6 53 a4 fa b2 52 92 f9 58 2b 00 11 61 7f f0 53 7d f3 55 34 94 20 bf 33 22 86 58 a9 ba d5 78 3a cd bb 9a 43 3b 4d c7 ad 6b a5 70 e7 7d bb 35 97 4a f5 95 b4 ed c3 37 b1 66 65 13 f1 1a 1a e4 c1 e0 89 8d b4 51 db 8f 94 cd 8c 12 42 04 80 30 2c a5 a8 a4 0c a9 9f c1 20 4c c2 89 6c 68 56 27 04 05 4c c7 00 2c a5 6e 66 11 67 62 91 84 d7 53 Data Ascii: iUAq0J]ctJnXkvulf}XM5-]Hi#PhS&_x1C@1)H2#3PZ@Cg.eyz$0Kj~a?g>SRX+aS}U4 3"Xx:C;Mkp}5J7feQB0, LlhV'L,nfgbS
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 96 0a 99 e9 0d 46 19 64 24 10 e9 06 ec a4 00 7b 6c 9a 90 23 56 9e 24 77 85 e2 be ff d2 0f ef 35 66 56 68 1a 09 d4 15 61 75 3f a9 01 b4 50 51 48 1d 9b 2b 52 1e 20 f5 27 cc 35 9d ff 58 22 1b 16 2f 44 28 1b 32 25 43 24 9d 84 31 c4 09 ad 89 a2 5b f4 1e e3 ee ae 92 78 14 f4 42 3b 22 00 0d 00 10 18 80 8d fa 54 86 8d dc 3d cf e1 5b c8 49 4e d0 03 48 32 d8 fb bd ad 6d de d3 cf 84 b4 d3 0e 53 60 d4 88 35 b1 10 1c 74 23 83 6b ce 9c 31 13 22 fb c0 c6 66 32 f7 11 5e 27 ea 87 6b c2 ea 31 52 09 0d d5 06 e4 8c 98 c1 08 91 29 18 4a 52 b9 2f aa a6 ee 6b df fb 73 f2 61 f1 05 20 61 fd 1e 93 82 02 55 d7 a2 1e e9 90 cd 83 ed 89 89 cc be 24 6d c1 a2 c1 49 1f 8a 30 66 70 3b 42 90 80 85 38 80 34 15 28 0c 88 88 2a 86 11 ba 07 b9 b5 22 13 e8 9f 2b 52 a7 94 2c 23 4f 0d 4e 4b f2 d4 Data Ascii: Fd${l#V$w5fVhau?PQH+R '5X"/D(2%C$1[xB;"T=[INH2mS`5t#k1"f2^'k1R)JR/ksa aU$mI0fp;B84(*"+R,#ONK
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 06 37 9d 48 80 e6 f3 6c da e9 46 ae a9 eb b6 b7 0a bf fa 4b ba b8 26 63 01 a4 24 10 44 92 90 23 86 80 93 18 4f d2 08 12 56 d0 d1 b9 dd 7d b5 e5 23 59 b0 78 b1 41 99 25 a7 91 9b 58 3a 9a db 5b 88 de 47 6b ee be 75 e7 c5 8d 13 ef 78 01 c5 b0 ee 23 d7 27 7f 86 e7 75 c7 bf de b9 6d 46 63 5d ae 32 4b 86 90 44 ce 61 48 85 ee 7b db b1 a6 34 09 61 11 67 cc 9e 7c f6 ab 37 af eb ad f0 f8 8e 38 f7 b6 4f eb 6e fd 88 dd d6 8f ba ff f3 93 cf 58 07 19 d1 16 86 53 66 96 70 4a 59 98 37 a6 ab 1e d1 e7 7d 89 93 00 29 59 31 10 4b c0 0a 39 b1 b9 ae 18 91 10 03 02 f1 c8 81 49 b4 5c 46 00 31 32 0a a8 2e 19 ed 0e 64 56 f6 be 7f 5e 35 b1 62 2e e5 94 74 07 25 b3 8b 0f ff e7 68 ef 06 77 5e e0 cb 07 8f 81 fe c1 bf e3 15 a7 fa 86 0e 54 23 01 90 e3 80 44 99 f8 6b 82 0b 05 6a 20 89 58 Data Ascii: 7HlFK&c$D#OV}#YxA%X:[Gkux#'umFc]2KDaH{4ag\|78OnXSfpJY7})Y1K9I\F12.dV^5b.t%hw^T#Dkj X
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: cd 14 94 01 c1 7f 01 20 00 00 58 f8 ef fd bf 0a 00 00 a4 40 97 33 00 a4 e3 d0 24 bb 8f 4d 5e 57 55 8c 0f 09 5d da 6d 3b 53 d7 9e 76 91 b4 8e c9 06 0d 59 c9 12 c1 61 77 71 af 90 09 03 44 0a f8 57 4b b9 fe 86 07 24 38 91 e5 1d bd b2 b7 4d cf fc f0 23 d7 95 d5 03 df be f7 d0 57 ee a4 3e 7d 9f be 76 d1 dd 7e 46 af 61 8d 9d 5e 1a 13 65 64 b5 b0 91 39 06 43 d9 71 6d bc dd bb 4e a4 6d 30 1b 11 20 80 ff 31 00 80 20 40 00 01 2c 00 40 c1 ed 39 5b 4f 46 92 e9 c4 38 5a 45 fb d3 b0 b9 9a c2 28 4b ce b4 4d 1f 38 f4 f7 c5 12 0a 27 34 d9 64 ea a1 b5 b1 21 c9 24 26 a2 16 7f 2d ba f4 e6 72 7a b9 43 28 b5 e6 26 da 0b 9e 5e 8b 60 2a 1f 8b 3d a0 b3 c8 15 fe d9 f8 78 51 de 8c e9 d6 d5 6e cf 39 65 42 08 51 c4 17 ba f4 e4 bc 78 73 f7 aa 28 a6 5f df 6d 00 d6 56 40 00 40 02 46 88 Data Ascii: X@3$M^WU]m;SvYawqDWK$8M#W>}v~Fa^ed9CqmNm0 1 @,@9[OF8ZE(KM8'4d!$&-rzC(&^`*=xQn9eBQxs(_mV@@F
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 91 a6 bd f6 e4 07 df 6e ef 7e b5 7e b4 f0 b9 db c6 57 dd f9 f6 7a 5b 69 5e aa 0c 8f 22 bc 79 90 ef 1b 7b cb 77 f9 9b 0f dc 79 45 87 30 5c b2 24 6f 1d 7b 7a c9 73 2b 31 5d c0 9e 9b 02 c4 d0 1d 3d eb 8d a8 22 b1 25 75 df 2c fb 13 9e 39 ca 13 12 37 08 11 a6 5b 57 03 91 22 35 43 de 87 e6 89 3d fa 23 55 87 d6 9b 04 32 b7 58 32 d4 dd 8a 9c 45 d1 a4 46 c5 b9 ab 9c b9 52 f2 82 f9 45 89 74 f2 a8 77 06 f1 2f cc 4a df b5 57 1b e6 61 19 aa 99 95 87 7b a3 86 a9 a6 72 46 61 25 26 c4 8d 4c dd 15 e6 3f a7 83 32 48 38 80 32 9e 3b 39 f1 fd f0 70 f6 17 fc 93 7b b1 13 29 6f 0b 96 b7 7e be b7 2b 5d 4b 93 68 3d ae 01 44 44 ce a5 c4 33 1b 2c 29 7f 20 57 1c a6 c0 74 09 70 0c b1 23 82 00 72 21 72 c1 35 94 ad 10 db 20 6e 69 11 72 8e 4e a5 21 15 15 92 2e 52 8c e4 e1 0c ea 5e 9e af Data Ascii: n~~Wz[i^"y{wyE0\$o{zs+1]="%u,97[W"5C=#U2X2EFREtw/JWa{rFa%&L?2H82;9p{)o~+]Kh=DD3,) Wtp#r!r5 nirN!.R^
2024-04-19 14:06:45 UTC	738	IN	Data Raw: 08 8d db 75 d5 d6 1d cd e0 98 ca 31 a2 19 45 eb 74 11 b4 8c 88 29 25 21 25 73 a8 c2 11 3e de 5d 85 eb 04 40 09 05 43 15 9d 82 2f e3 2a 43 ab 31 0b fe d9 e7 d9 ac d4 9d dc cd 1b 37 6e 67 c8 e2 47 37 80 f0 ac 6b 0f 36 bd f7 63 de e8 9d 0e 9c 85 c5 68 0a b0 08 11 00 69 41 dc 25 2c 3e 98 98 db ab d0 91 13 80 b8 29 20 14 46 cc 86 67 2c 78 b7 8e 57 3e d0 04 5d cb 20 1c 18 df 2f 19 cb 8e 7a d6 ec ec d3 0a bb 77 2b a5 b1 a0 69 ae 86 d4 a4 63 b3 08 d5 a9 23 9e 00 dc 71 f5 9b c6 64 b2 77 a0 07 95 33 c4 a4 5a 7d eb 4a a5 20 7c 0f 69 0b 6d 92 45 14 20 26 9e ca f7 4f 30 cc 95 c6 01 90 16 b3 e6 59 27 21 9f ca da c3 f1 78 67 e9 c5 eb 93 64 5d e7 4b 08 50 e6 86 08 08 80 08 da 40 91 8f 02 a1 33 81 0f 7a 21 e1 18 8e 60 8a 46 af 6b d7 9c d5 27 5f 51 94 19 78 46 69 9e 88 96 Data Ascii: u1Et)%!%s>]@C/*C17ngG7k6chiA%,>) Fg,xW>] /zw+ic#qdw3Z}J \|imE &O0Y'!xgd]KP@3z!`Fk'_QxFi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.6	49981	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	509	OUT	GET /-n3IGe2RWAsevJY_bEJ5yJYrirfK1m3LjDw2c2mdBSG9XuYDea5QvtsdhSaOrbbp0w=w416-h235-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 19102 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:02:21 GMT Expires: Sat, 20 Apr 2024 12:02:21 GMT Cache-Control: public, max-age=86400, no-transform Age: 7464 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 96 4a 00 00 57 45 42 50 56 50 38 20 8a 4a 00 00 10 f1 00 9d 01 2a a0 01 ea 00 3e 55 24 8e 45 a3 a2 21 24 28 78 ab 70 80 0a 89 63 6d a5 44 f8 49 72 74 30 38 58 94 79 37 e3 d9 e3 f5 8b b2 64 a5 ca 9e 7d 2f 9f ff 6b d7 3f f6 af 50 df eb 3e 98 7d 3d 79 8f fd c4 f5 83 f4 8f fe 07 d4 1f fb bf 53 57 a1 17 ed 8f a7 77 b3 8f f7 ff fc 3e 98 1e a0 1f ff f7 be 66 2d cd 9f c7 7e 47 fe eb fb 0b e4 db d2 fe d1 7f 7a ff bb fe d7 e4 cf 43 7e a9 fd d7 fd ff 44 bf 96 fd d7 fc 77 f7 af da 5f f0 9f b8 ff 74 ff aa ff 93 e3 4f cc df f4 fd 42 3f 29 fe 75 fe 07 f2 b3 fc 87 ee 9f 2b 95 bb f4 08 f6 c3 e9 ff ea 7f c0 7e ea ff 8a f8 07 fa 2f f7 9f e3 ff 6c 7d da fb 11 fe db fc 67 ee d7 f7 2f b0 0f e5 3f d1 ff ce 7f 7c fd bf ff 03 ff ff fe ef de df ee 3f ee 78 ec 7d f7 fe Data Ascii: RIFFJWEBPVP8 J*>U$E!$(xpcmDIrt08Xy7d}/k?P>}=ySWw>f-~GzC~Dw_tOB?)u+~/l}g/?\|?x}
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: cd d4 60 06 81 e3 ea 6e 4e 1f d0 ca 64 79 a9 f8 4b b7 98 e8 e1 10 30 e1 42 98 be fe d7 1b 7a 62 4a a1 56 81 85 0b 90 f3 1f ed a8 23 cd e4 66 f3 a2 9d 59 3c 51 69 21 af c1 13 09 6c f0 2b 1c 76 c4 82 d8 fb cc dc ed e2 a5 ce 29 1a d9 24 d0 76 22 9c 76 c7 86 e5 14 12 66 62 7f 15 e9 ec 65 24 7d ca c2 a2 64 50 ce 4e 0b 88 28 4f d0 14 29 0c 43 cb 97 81 02 ee 89 91 4d e8 59 5d cf 05 65 c0 07 d5 fb 9d 93 3b 4f 9d 64 17 d1 ea 38 dc 84 59 44 45 d4 db fd a3 57 16 dc 26 5d 06 9c 27 ca da fc 97 e2 1e 8e 72 b0 9b 06 48 7d f5 c7 88 9f db 60 30 8d a6 b7 e8 10 47 28 4a b8 89 64 d7 8d 45 55 c5 01 4f 93 f2 5b 06 3a 26 38 e1 a8 29 38 09 ed 1e 7a 98 0e ba 5b d4 3b 10 bc 2f 42 1c de 14 d6 44 fe 72 54 54 11 d8 34 e7 0a e4 d4 6c 8b d5 27 f1 7f a7 df ca 2d 7e 10 8b 6b c5 78 04 7c Data Ascii: `nNdyK0BzbJV#fY<Qi!l+v)$v"vfbe$}dPN(O)CMY]e;Od8YDEW&]'rH}`0G(JdEUO[:&8)8z[;/BDrTT4l'-~kx\|
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 4c e6 d9 c7 d0 dc 30 0d 3b f8 4e 78 5c df f6 a8 7c 13 3b 46 30 26 ca 73 55 45 f9 1b ca c3 ce 57 69 b7 38 63 2a 55 43 b2 f8 82 80 62 ac 7a ae 41 51 d5 ac ef cb 9f 17 89 9d 62 f2 1f 91 7e 77 fe 0d e4 15 41 03 51 98 b0 e2 eb 56 cf 40 3b 8b 2a 3b e8 21 1b 04 e6 de 2b 06 37 49 fe 36 f4 bf 23 32 ec fd 07 a2 5a 53 bc 1c 95 b3 7f 04 4d 72 30 0b b1 4e 35 6a c8 b2 58 c9 05 7a d4 d2 11 b7 73 db ad 07 3a d5 8f 7e 97 6d b3 5c 2d c6 c4 3f b6 25 8f 56 8b 29 be 88 c6 ff b8 17 2d a4 8f 5c de e4 b7 83 75 e4 2c 68 74 34 0e dd 69 e9 c8 61 1b b1 d3 27 4d 19 16 2d 9f b4 83 a0 b8 30 90 3a 95 4f 5a 05 d2 be d9 c6 d0 16 d5 2b 0d c9 f5 a8 d1 dc a7 d5 0b af d9 da 69 87 86 83 ea 26 94 d5 4d 81 f3 a4 b0 f5 d9 14 87 43 6a 4f a2 47 6c bd 52 03 fe 6c e0 a0 74 76 c9 1f 29 09 31 49 f4 b0 Data Ascii: L0;Nx\\|;F0&sUEWi8cUCbzAQb~wAQV@;;!+7I6#2ZSMr0N5jXzs:~m\-?%V)-\u,ht4ia'M-0:OZ+i&MCjOGlRltv)1I
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 3f df af f8 fa 92 5e 3b 6e 93 5b 43 2f bf 98 ff b6 80 2a a2 6b dc be 06 42 03 9f 6b 4b 9e 5c 6e 13 f1 2e 48 e0 75 d1 06 0b af fa 72 b1 19 e6 0f aa 06 a2 63 f4 45 01 3a 2c 0e 1a 7c 21 f4 67 5f f6 c8 1d c3 db 0b 60 5b 0b a4 c6 b8 5d f4 67 a9 71 e8 51 a7 df 5c 0a 42 2f 69 c1 4f ad a4 09 b4 a0 61 cd 96 53 18 23 15 c8 d8 bd 6e 23 5f cf 95 de 61 04 a7 65 f8 84 77 9d ed c3 ad 70 fb f1 3b 92 e4 99 df 45 cd 21 5a 67 64 54 5a d7 73 ab 1e 33 09 ee 0a d5 a5 72 74 76 64 a1 40 a7 0c 17 e1 42 5e 01 4e 97 bc 94 36 ed b5 6b 5f 38 23 03 ff b5 3c a1 0a 76 28 ba 57 08 b0 d1 55 14 37 33 d4 56 70 68 a1 ea 22 84 f0 8e 77 58 c2 04 9b f6 68 62 f8 18 21 24 f9 01 a2 38 9c 04 cc 7b ce c7 f3 58 24 25 ab 05 81 f8 24 e0 45 06 29 4d d3 79 9f 71 40 e7 42 37 39 9e 0d f9 77 b7 90 37 50 2c Data Ascii: ?^;n[C/*kBkK\n.HurcE:,\|!g_`[]gqQ\B/iOaS#n#_aewp;E!ZgdTZs3rtvd@B^N6k_8#<v(WU73Vph"wXhb!$8{X$%$E)Myq@B79w7P,
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 19 a6 fc 1a 3e 0a 5b 23 4d 5e a8 dd 4b ba a5 78 67 25 43 da e3 d8 5a d5 e5 48 1d 35 75 8f b5 9b 3f aa 7a ec 50 7f 91 b8 44 34 17 18 f2 12 35 08 68 89 9d 7c 31 3d 36 90 7c a8 d3 89 19 1c 7e 6a ff 98 39 d7 fa 65 db e9 59 da 02 e5 af 9b 86 2c b9 3f af 4f 61 22 d5 35 fd d0 20 c8 aa 45 3b ea a4 80 ea 97 83 d5 78 01 a7 82 6b d2 49 09 62 1d f6 16 fd 3b 40 e6 b2 39 5c c6 b3 62 e3 b0 c1 46 02 5c 62 ed c3 04 14 5c 21 fe 4e 51 f7 79 82 da b6 23 51 62 19 88 54 c5 61 1c 77 0e 8b 47 f3 7f 0d 97 aa 1e e3 2a fa bf e9 f1 d2 e2 dd fb 40 8f 1d b1 45 ed 98 16 54 bf 99 50 5b d5 b1 96 fd df 81 19 b5 e9 5c 97 50 24 ae eb c1 42 15 95 88 23 78 b7 e4 3e c2 cf 03 d7 8d 12 e2 74 57 b4 1d 35 22 00 71 f8 db 94 42 de 19 d7 14 4b d3 6f 71 3d 46 8c 7c 4a 36 c3 b6 e2 0e 2e b8 5c b4 50 d9 Data Ascii: >[#M^Kxg%CZH5u?zPD45h\|1=6\|~j9eY,?Oa"5 E;xkIb;@9\bF\b\!NQy#QbTawG*@ETP[\P$B#x>tW5"qBKoq=F\|J6.\P
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 6d 0e bd 40 a4 95 39 5f 1c ab 63 71 d4 46 28 41 91 19 e2 96 d4 9c a7 41 68 9d 6d 87 5a 13 04 c1 bd a3 b2 71 44 70 ec 8a bd 7f 9c b1 07 62 fb 00 33 b1 70 f1 1a 5a a4 d9 e0 2e 72 2c 41 f7 a1 b1 99 cc d4 d7 34 8c ff 08 3d 87 b9 ad e4 90 ff 86 91 f4 62 20 24 77 0b 66 01 28 8e a0 76 1e 46 d9 dd a7 95 16 16 36 9d 2b 0a 40 15 81 97 ca f1 c0 1d 18 c0 94 7a c3 9e 09 5a d1 a7 bf 3e 9b 8a 76 cd 20 d5 dd 5f f2 18 90 76 de aa 56 0d 24 ee 12 1e 9b 0c 69 0a 41 53 aa aa 4e 19 75 c2 fd 43 37 8b 5f 45 7f a6 cd df e1 36 ca 6f ff 9e e2 a4 79 9d e7 b3 bd c7 b2 7e e5 b7 db 06 f1 14 6e cb 48 30 c2 17 f9 b9 b1 bc 34 18 2a bd c8 2b 60 ce b0 35 a0 0c d2 3a df 38 76 66 c1 03 fc cf 4c 4f 56 8c 15 dd f6 b3 c9 1b 12 49 25 9e 28 81 bf d4 86 30 7c 2d c9 0b 7d 19 b8 91 44 c8 58 6e aa 7b Data Ascii: m@9_cqF(AAhmZqDpb3pZ.r,A4=b $wf(vF6+@zZ>v _vV$iASNuC7_E6oy~nH04*+`5:8vfLOVI%(0\|-}DXn{
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e1 f1 30 4f f5 b6 05 78 4a 73 87 dc e8 86 fe 1c e2 38 fe 5b a9 7d 36 28 19 e1 86 19 7b a2 a1 04 f9 93 3a 93 d3 a9 c0 30 74 cd 10 19 d8 e3 ca 56 b0 47 e1 a7 6b de 8a 74 e3 ce 16 05 dd 82 42 42 eb f0 73 4e 0e 7e 30 0c 62 70 77 75 4d da b4 f7 fc e5 b9 2d b5 4a f7 85 e6 66 aa e0 ff 64 e3 bb b5 7d 96 d8 04 2f b7 64 c7 63 38 e2 28 15 e1 e4 12 7c cd 10 ba db 4a 00 05 4c f1 7a ff e2 9c f8 c2 91 1d 94 c0 15 bd c9 50 68 1e 52 96 63 3d 74 17 d7 a2 9b e4 ab 4a 13 bf bb 7b 3a 1a de fb 9d 0f ce 4e 5a 86 0d 5a 4c 06 04 aa ea 01 33 42 73 71 1a b5 72 8a df 7a 70 31 4f f8 b1 f5 f7 b7 08 ed cb 7b e6 98 74 1c f6 02 cc 2d 9e 95 8f 9f 56 08 04 46 8d be 8d 3e 20 bd 13 e9 59 87 34 dd c5 c3 e3 70 3a 24 4c 6f 6e 08 60 a8 f0 d9 c3 f2 5a 42 c4 d3 79 88 e5 74 65 21 85 07 b6 b0 99 10 Data Ascii: 0OxJs8[}6({:0tVGktBBsN~0bpwuM-Jfd}/dc8(\|JLzPhRc=tJ{:NZZL3Bsqrzp1O{t-VF> Y4p:$Lon`ZByte!
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e0 f9 3a 87 02 5a 92 7f 96 a4 19 b6 30 29 5a f2 c3 81 61 25 84 81 57 a2 47 54 15 c4 76 9d 50 b4 fc c4 37 ca 06 d7 66 61 28 57 8a 95 21 a8 c9 4b b7 29 06 31 69 02 45 b0 0b d1 80 aa 52 ea 73 fb cb 78 be 54 4e be 0a ff da f0 2c 93 b4 8f 89 e1 c8 08 c8 e0 f5 c6 87 c2 c6 32 2a 52 fa 9b f6 53 aa 1d 36 53 9e 26 02 0b 18 66 cb 2e 7d 22 3a db e3 81 32 15 f4 81 ad 9f 52 af b1 37 6a 63 4f 86 ba 92 d7 49 2a 7d 14 a3 a7 0c 83 a3 da 12 08 90 6e 13 b2 91 56 4a 9e 7b 9b be 75 fb fe 89 34 bf c8 5d 1e 6e e5 7b 26 fa ae 4a d7 57 d3 af cd 04 1f e0 c7 22 cb 80 50 3f 19 73 d4 3a 95 f5 95 97 76 62 b5 10 56 e8 a3 68 ff 31 75 21 e6 95 af f1 e1 aa d2 94 50 d5 0f 7a f6 22 e1 6e c9 ae 82 ca 1e c1 a7 13 cf 25 1d 33 f3 5d 9d 73 1f 3c 38 66 07 d2 73 7b 2f dc 73 95 b9 16 ed 2d f8 01 56 Data Ascii: :Z0)Za%WGTvP7fa(W!K)1iERsxTN,2RS6S&f.}":2R7jcOI}nVJ{u4]n{&JW"P?s:vbVh1u!Pz"n%3]s<8fs{/s-V
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 85 ec 4a c5 51 be 67 7f 42 f7 d1 85 0f d3 ea dc 4b 9d 6f d3 11 0f 75 7b 53 6c 31 60 c7 3e 2c b6 bb 34 36 6f ad b6 d3 98 2a f4 78 0a 5c 0b dc 56 4e 64 13 b9 8a 31 a0 ea 04 60 ef 75 f5 bf 2a 82 46 51 35 4b d9 33 21 43 8f 37 59 92 25 fb 71 26 5d ad 28 50 6c 48 cf 6f ae 36 1c 29 33 9a af 82 b3 24 90 50 0c 33 8b 66 09 f4 96 54 84 3d 92 1a 58 5c 2d d2 93 8c d1 c2 07 28 43 05 55 b1 54 d9 47 0f f1 2f c6 cb b5 bc c8 69 49 9f b6 2a 9e b5 e6 de cc e7 e0 ec 2c f3 89 2d 60 ee 53 71 79 86 88 93 ff 1a ff cd 95 88 d2 0a b8 91 e5 c9 01 09 b7 e1 5e ab bc a7 09 7a 33 39 1c b6 28 2a 86 0f 60 f0 eb e0 f2 a7 b5 3a 18 b6 f8 0d 35 83 e2 30 ff e9 e9 cb 98 39 b7 bf 26 45 f7 c3 ad 25 2b 98 31 a7 1d aa 85 a7 f0 c3 db 9b b9 96 73 81 f4 c9 92 93 e4 8f f8 83 42 a3 c2 63 81 fd 78 0d 4e Data Ascii: JQgBKou{Sl1`>,46ox\VNd1`uFQ5K3!C7Y%q&](PlHo6)3$P3fT=X\-(CUTG/iI,-`Sqy^z39(`:509&E%+1sBcxN
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 68 07 77 55 9c d8 cd d0 e3 2a a2 81 fb e1 ae 6a 30 cf f0 c5 23 50 a9 54 74 21 87 9e f1 35 5f fa 99 65 b9 c2 22 d0 93 a4 46 0b d6 f6 86 ce 79 94 b5 af 74 2f 2a cd 9f 4b 76 5a 2a 21 0b 72 8f 71 27 5a ed de 1b 2f 32 33 7e 9e da 80 58 41 ca 63 5e 58 e0 f5 27 aa d8 a7 b6 6d f8 46 9f cf 10 4a 24 3d a5 fd 5d 65 ff 87 86 1d a1 a2 a0 d8 63 9f 35 c8 75 b8 6d e1 6d 73 46 c4 6a c0 2a 99 24 9c cc 4c 30 f5 57 72 c0 97 aa ff a7 cd 3c 4b 4d ae 6f db 7a 8a fc e1 88 21 12 4e ff d2 32 5d 16 5e 04 02 77 df ea 9c f6 e1 c5 6e db 55 a0 a1 f5 a7 c2 8b 34 bf c9 dc ff 6c 08 f2 52 14 38 1e 52 e3 ff 85 b4 9f cb a6 51 e3 df dc 39 87 de e8 68 8c 4a 20 57 7e ae db d0 8b b5 a2 86 9c 73 9c 17 a2 bb 32 3c 08 08 88 e5 cb 5d 24 cb ed 74 11 80 4e 32 78 95 fc b7 b4 16 5a aa ec a4 3b b3 d9 0f Data Ascii: hwUj0#PTt!5_e"Fyt/KvZ!rq'Z/23~XAc^X'mFJ$=]ec5ummsFj$L0Wr<KMoz!N2]^wnU4lR8RQ9hJ W~s2<]$tN2xZ;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.6	49989	172.217.215.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	440	OUT	GET /vi/R3x88pl2rZI/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 11258 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:44:38 GMT Expires: Fri, 19 Apr 2024 14:44:38 GMT Cache-Control: public, max-age=7200 Age: 4927 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1b 18 17 1a 1d 1d 1b 1f 1f 1d 20 1f 1f 1f 1d 25 1d 1d 1f 21 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2b 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2d 1b 1b 2d 57 3d 35 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 45 10 00 02 01 02 03 04 06 07 05 07 02 06 02 03 00 00 00 01 02 03 11 04 12 21 05 31 41 51 06 13 22 61 71 91 32 52 81 92 a1 d1 d2 14 16 53 b1 c1 15 23 Data Ascii: JFIF %!.'10-'--5=PB58K9+-EaEKSV[\[2AemdXlPY[W--W=5=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"E!1AQ"aq2RS#
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e8 71 3e 30 03 2f d9 df 70 ea 1f 70 dc 67 a5 9f c6 20 65 ea 1f 71 1d 43 ee 1b 87 4f 2f 8c 60 c9 d4 be e1 d4 be e1 b8 9d 3c be 31 83 b5 80 e8 c6 23 11 42 78 88 4a 9a 84 73 7a 4e 49 ca ca ee da 1c a7 41 f7 0d c3 a7 97 c6 20 64 ea 5f 71 b2 b6 64 f2 67 bc 6d e2 ee fe 03 70 e9 e5 f1 a4 0d 97 82 92 e3 1f 88 a7 81 9c 9d 93 8f c7 e4 37 0e 4c be 35 81 bf fb 22 a7 38 79 bf 91 67 b1 6a de d7 87 9b f9 0d c4 e4 bf 1c e0 74 aa ec 4a b0 69 37 0b bd 77 bf 91 92 7d 1e ac 96 6b c1 ae e7 2f 90 dc 39 32 f8 e4 83 7d ec 8a 8b 8c 3c df c8 d8 8f 47 6b 38 e6 cf 4a df dd 2b fe 43 70 e4 cb e3 90 0e a3 d8 35 56 99 a9 f9 cb e4 45 5d 87 56 1b e5 0f 63 7f 21 b8 bc 99 7c 73 01 d7 a5 d1 da d3 57 52 a7 ed 72 f9 15 7d 1f ac 9d 9b 87 9c be 43 70 e4 cb e3 94 0e 9d 3d 87 56 52 ca a5 0b f8 bf Data Ascii: q>0/ppg eqCO/`<1#BxJszNIA d_qdgmp7L5"8ygjtJi7w}k/92}<Gk8J+Cp5VE]Vc!\|sWRr}Cp=VR
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: de f7 64 92 ff 00 d0 4b 1e 82 a6 cf 8d 08 b9 65 bc a8 55 93 ab 17 69 c5 d3 93 96 4b a7 a5 bb 1b ff 00 af c0 c6 b2 c2 96 16 6e 14 a4 e6 a4 e7 4f 23 cf 51 67 b2 f8 27 6d c7 1e 78 da b3 cf 9a 4d f5 8a 2a 7f d4 a3 6b 5f c3 2a f2 36 69 6d 3a b1 54 d2 50 6e 9a b4 24 e0 9c a2 ae de 8d f7 b6 47 4c 65 74 e9 d0 51 a6 a4 f2 4e 2f 0d d6 b8 38 2e b1 37 78 de 2d 25 a2 92 4e f7 d1 1d 1d a1 46 52 d9 d8 65 1b 5d 27 2b bb d9 76 1c bf 24 cf 33 47 19 59 4a 9c 93 6e 50 4a 30 e3 a6 bd 9f 0d 5f 99 e8 b6 fd 49 47 03 43 2c 5d 3d cb 2d ef 6b c1 a7 1f 27 63 96 7e 63 a7 79 67 fb ea b5 f0 51 ea f6 66 2a ba 77 9c aa 46 8b 92 e1 0d 2f 6f 1b 96 86 03 11 85 c6 d2 96 1a 19 e4 e8 d3 94 a0 a7 18 b9 5e 36 9a b3 7a ab a6 fc 8e 3e ce c6 52 86 78 57 a4 aa 53 a8 ac da 4b ad a6 f8 4a 0d fe 5c 4e Data Ascii: dKeUiKnO#Qg'mxMk_6im:TPn$GLetQN/8.7x-%NFRe]'+v$3GYJnPJ0_IGC,]=-k'c~cygQf*wF/o^6z>RxWSKJ\N
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 4f 42 64 ca ac d8 69 5a 4f be 13 5f 06 68 d5 d6 9c 8d 9b db 71 af 35 d8 97 81 1a 99 39 64 95 04 74 da 41 00 68 da 41 00 68 da 41 00 69 36 90 40 06 d2 08 2f 4e 0e 4d 25 c4 8d 4e ea 9b 14 30 d2 9b dd a7 33 72 96 12 9c 57 69 a6 cc 95 31 b4 e3 a2 d7 c0 e3 73 b7 b6 31 ea c3 83 24 de 75 6a 18 38 c7 7e af bf 81 b0 ce 64 f6 94 9f a2 92 35 a5 89 9b e2 63 a5 9e 5d ed 75 eb f0 f1 ed 8c 6b a1 62 41 ea 7c dd 22 c0 92 00 12 00 04 5d 14 2c 88 de 2c 91 3d 3f 4a df ee 30 9f da ff 00 24 79 78 f0 3d 37 4a e5 fb 9c 22 fe 86 ff 00 23 8e 5f b4 75 be bf df 4f 32 ca b2 cc a3 3a c6 72 a8 65 49 21 9a 71 a0 00 a8 83 3e 13 f8 91 f1 29 4e 94 a5 ba 2d f8 23 6f 0d 80 9e 65 27 d9 5f 13 37 29 3c b7 86 19 5b da 3d 46 c9 af 9a 9e 56 f5 8b f8 3d c6 8e d9 52 a9 46 74 de f8 d4 cd 0f ed bb 56 Data Ascii: OBdiZO_hq59dtAhAhAi6@/NM%N03rWi1s1$uj8~d5c]ukbA\|"],,=?J0$yx=7J"#_uO2:reI!q>)N-#oe'_7)<[=FV=RFtV
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 8c 16 f9 34 97 8b 76 35 38 78 cf 4e 77 8f c4 bf e4 f6 1b 2b 09 95 d2 8c df 6a 4a 2d e6 e0 db f9 18 7a 4b 36 f1 ad 70 8c 52 ee 66 e6 3a 49 56 b7 f4 a6 8e 2e 36 a3 95 69 5d b7 a4 55 df b7 e6 74 c5 78 9f ae f6 c3 17 66 63 a9 a4 89 ab b8 ad 47 c4 57 91 d1 e8 ed 6c 98 ea 4f 84 f3 41 fb 62 ed f1 48 fa 02 8a 69 a6 93 5c 53 57 47 ce e9 61 1f d9 a3 8b a7 6c d4 6a ac ea fa d9 59 c5 f9 9d 6c 5f 48 65 d7 2a b8 59 4b 23 8c 73 42 6a f1 cd c6 dc b8 6e 31 66 cd 3b 18 ee 8e 61 ea ab c2 3d 54 b8 38 7a 3e d8 ee 3c ae 17 15 5b 03 89 9a 8c 52 97 a1 28 b5 75 2d 74 b7 13 ae ba 64 e2 bf 79 41 f8 c2 57 f8 33 4b 6b ed 1c 3e 3a 0a a5 17 d5 e2 21 b9 4a d1 94 97 2e f6 b8 09 2c 24 ae e6 03 a4 d4 aa 69 55 75 52 e7 7b c3 cf 81 bf b4 30 34 f1 54 72 b6 b5 d6 13 8d 9d 9f 34 72 30 90 a1 b4 Data Ascii: 4v58xNw+jJ-zK6pRf:IV.6i]UtxfcGWlOAbHi\SWGaljYl_He*YK#sBjn1f;a=T8z><[R(u-tdyAW3Kk>:!J.,$iUuR{04Tr4r0
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 6d e7 70 52 9c 55 b8 36 b4 35 31 55 65 56 6e a4 ed 99 da f6 49 2d 15 b7 2f 02 db a7 a6 70 72 f0 c9 1a 16 d5 ab be 67 a0 c3 74 79 d4 a7 19 c6 a4 1c 65 14 d6 fe 27 32 58 8c d0 85 e9 e4 59 52 5f d5 6e 27 b2 e8 9d 04 f0 30 cc bf 9a a2 5e 19 9d 8d 47 2e 36 1c 98 f3 3c f4 29 e3 70 0f b1 3c d4 fd 59 37 28 78 73 46 f6 d0 c4 d5 c5 e1 5b 9c 63 4e 8a cd 3a 8d 4b 34 ad 1d d1 dd a3 6f f2 3a 9b 7a 93 50 8d 28 3b ce a4 ad 15 c6 cb 56 fc 0e 3f 48 70 51 c3 60 24 a3 7c f3 70 8c a5 77 cd 5d 19 ca 77 72 96 65 37 5e 5e 82 cd 63 7b 19 0c b8 5a 4b d7 9c e4 bc 15 a3 fa 33 57 09 1b 44 e8 ed 34 94 30 b0 e3 1a 4e 4f 4f 5a 6e 48 d3 36 f7 68 42 16 48 8a cb b2 fc 19 37 d4 55 f4 5f 83 35 a4 71 48 24 82 36 90 41 20 00 01 40 02 06 c2 48 04 54 92 00 69 22 c4 02 2a ca 37 19 48 26 e5 11 61 Data Ascii: mpRU651UeVnI-/prgtye'2XYR_n'0^G.6<)p<Y7(xsF[cN:K4o:zP(;V?HpQ`$\|pw]wre7^^c{ZK3WD40NOOZnH6hBH7U_5qH$6A @HTi"*7H&a
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 00 20 12 41 21 52 00 23 4b a4 49 22 c6 5e 8d 20 12 40 4a 86 41 6b 11 60 96 20 13 62 0a ca 19 7a ce f3 97 8b 2a 18 4d 20 00 11 0c ad 8b 10 ca cd 88 00 15 84 05 16 dd 96 f6 49 b5 b3 e9 de 4e 4f 87 e6 12 ba 29 12 45 c8 6c ae 6a d5 7a 58 c0 b7 a2 f5 27 a9 45 bc 2a f8 ad c6 24 65 c5 fa 3e c3 12 29 1b 18 4c 54 e8 54 8d 5a 6e d2 8f 93 5c 53 3e 85 b2 76 94 31 34 55 48 ef dd 28 f1 8c b8 a3 e6 e6 e6 c9 da 32 c2 d6 55 23 ac 5d 94 e3 eb 47 e7 c8 c6 58 ec d6 df 4a 06 1c 26 2a 15 a9 c6 a5 37 78 cb 77 c8 cc 73 60 06 3a 93 6b 72 35 a5 8e b7 f2 86 a6 36 f8 6e 83 45 6d 15 cb e0 cc f1 ae f4 bc 5a f6 05 b8 65 3c b3 82 13 d0 90 c0 01 cc db 3b 66 18 58 db 49 54 6b b3 0f d5 f7 02 4d af b6 76 bc 30 94 f3 3e d4 df a1 05 bd be 6f 92 3e 7b 88 af 2a b3 94 e4 db 94 9b 6d b2 d8 bc 64 Data Ascii: A!R#KI"^ @JAk` bzM INO)EljzX'E$e>)LTTZn\S>v14UH(2U#]GXJ&7xws`:kr56nEmZe<;fXITkMv0>o>{md
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: b3 d1 95 4f e6 dd 15 ce 4f 71 e1 e9 53 72 6e 52 7c 5b 6c dd da fb 4e a5 59 65 ac a2 9c 24 fb 30 dc 9f 7b bb b9 cc ab 89 94 95 b7 2e e3 a6 31 ac f2 df 84 62 6b 66 76 5e 8f 03 1d 8a d8 b1 b6 12 a4 f9 99 23 5e 4b 73 31 00 ae ae cb 84 aa d4 ed eb 4e 29 ca 7c 3b 3f fb b1 85 61 21 2c 3d 7a cd 7a 33 4a 0e fb ee de 9f 91 bf 82 8f 57 80 af 55 e8 e7 96 11 ef b3 ff 00 26 0c 4f 67 67 50 4d 6b 2a b2 7f 0b 11 9f 6e 2b 20 f5 18 2e 8c 53 ad 42 15 5d 49 c6 53 8d ed 64 d2 35 b1 9d 14 ad 0d 69 b5 55 72 5d 99 79 3f 99 36 eb cb 5c 00 66 c4 61 a7 4e 59 67 17 19 2e 0d 58 c2 56 7c 04 90 00 90 88 24 09 20 02 34 90 00 02 48 24 2a 50 20 90 d4 7d b4 30 0f 9a f0 0e 2b 91 cf c4 ec 2c 2d 5f 4a 8c 53 e7 15 91 fc 0e 80 12 b5 8e 79 63 df 1b a7 96 c4 74 32 2d b7 4a b3 8a e1 19 43 37 c6 e7 Data Ascii: OOqSrnR\|[lNYe$0{.1bkfv^#^Ks1N)\|;?a!,=zz3JWU&OggPMkn+ .SB]ISd5iUr]y?6\faNYg.XV\|$ 4H$P }0+,-_JSyct2-JC7
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: df ba 2b 9c 8f 2b 88 a4 fa ac 2c 25 2d 6b d4 75 6a 3e 0d b6 92 f2 bb 35 8c f6 e7 9e 5e 98 f6 9c e4 a8 c1 4f f8 95 a5 d6 d4 f0 dd 08 f8 23 96 74 36 f5 4b e2 aa 2b 59 42 d1 8a ee 49 58 e7 9d 58 9e 00 00 10 7b 8e 8e e1 55 3c 2c 1e b7 9a cc fd bb be 07 87 3e 8b b3 e1 96 85 28 f2 a7 05 ff 00 6a 31 9b 78 46 c5 89 24 58 e4 ea 80 4d 80 10 2e 48 02 01 26 86 d8 da 51 c3 d2 6d be db d2 31 e2 fb fc 0a 8e 67 49 f6 ae 44 f0 f4 df 6a 4b b6 f9 45 f0 ff 00 ce 67 91 66 5a d5 65 39 39 c9 de 4d dd b6 62 3a e3 34 e5 95 da 6e 08 06 9c d2 08 2f 4e 0e 52 49 2b b7 b9 05 44 62 db 49 26 db dc 96 f6 7a 1c 5b 58 5c 14 30 e9 fe f2 6f 35 4e 7a f0 fd 0a d3 a5 0c 04 14 e7 da c4 c9 3c b1 de a9 df 8b e6 46 1a 86 48 bc 66 31 b9 49 fa 10 96 f9 3e 1a 7e 85 62 f7 5d 45 e1 70 0e 4f 4a 95 9d ad Data Ascii: ++,%-kuj>5^O#t6K+YBIXX{U<,>(j1xF$XM.H&Qm1gIDjKEgfZe99Mb:4n/NRI+DbI&z[X\0o5Nz<FHf1I>~b]EpOJ
2024-04-19 14:06:45 UTC	612	IN	Data Raw: 9b 39 35 fa 45 5e 54 fa b8 a8 52 86 ec b4 d3 8d fc 6e d9 83 07 b5 a7 46 4e 71 85 39 4b 5b 4a 69 c9 af 0d 46 aa 75 23 bd 43 0a a9 ff 00 fb 78 e7 79 3d 63 4d fa 52 7c 1b 47 3b 1d 8c a9 88 a9 9a 57 7c 21 15 ba 2b 92 47 37 13 b4 6a 55 9b 9d 47 9a 4f 8b 10 c7 ce 32 52 56 4d 34 d3 d7 7a 77 46 b4 4e 26 2f 7d d1 fe 8e 3a 31 eb 6a af de b5 a4 7d 45 f3 3a ee 9b 5b d1 e2 e5 d3 fc 5b 49 75 78 7d 3f a2 7f 51 57 d3 dc 5b ff 00 4f 0f ee cf ea 39 5c 2b 78 f1 e4 7b 42 ca 93 6a e8 f0 d2 e9 c6 25 ef a5 87 f7 67 f5 16 87 4e f1 6b fd 3a 1e ec fe a2 74 eb 57 8f 8b df e1 68 eb 99 9b 47 ce 17 4f f1 7f 87 87 f7 27 f5 13 f7 ff 00 17 f8 78 7f 72 7f 50 e9 e4 e3 97 13 75 f4 60 7c e7 ef fe 2f f0 f0 fe e4 fe a1 f7 ff 00 17 f8 78 7f 72 7f 50 e4 a9 cf 1f 46 68 8c 8b 92 f2 3e 75 f7 ff 00 Data Ascii: 95E^TRnFNq9K[JiFu#Cxy=cMR\|G;W\|!+G7jUGO2RVM4zwFN&/}:1j}E:[[Iux}?QW[O9\+x{Bj%gNk:tWhGO'xrPu`\|/xrPFh>u

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.6	49986	172.217.215.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	440	OUT	GET /vi/dSg_iqQpKYA/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 16242 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:26:26 GMT Expires: Fri, 19 Apr 2024 15:26:26 GMT Cache-Control: public, max-age=7200 ETag: "0" Content-Type: image/jpeg Vary: Origin Age: 2419 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 19 1a 1d 1d 1b 1f 1f 1d 1d 1e 1d 1f 1d 27 1f 1f 1f 1e 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 2f 57 3f 37 3d 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 48 10 00 02 01 02 04 02 06 07 06 03 06 04 05 05 00 00 01 02 00 03 11 04 12 21 31 05 41 13 22 51 61 71 92 06 32 52 53 81 91 d2 16 23 42 a1 b1 d1 14 17 Data Ascii: JFIF'.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W//W?7=WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"H!1A"Qaq2RS#B
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: ec 4e 2b de 50 f3 3f d3 0f b1 38 af 79 43 cc ff 00 4c 35 61 f2 47 d9 cd c2 74 9f 62 71 5e f2 87 99 fe 98 7d 89 c5 7b ca 1e 67 fa 61 ab 0f 92 3e ce 6e 13 a4 fb 13 8a f7 94 3c cf f4 c3 ec 4e 2b db a3 e6 7f a6 1a 4b d0 7c 91 f6 73 70 9d 1f d8 ac 57 b7 47 cc df 4c 4f b1 98 af 6e 8f 99 be 98 69 2f 42 f9 61 ec e7 61 3a 2f b1 b8 9f 6e 8f 99 be 98 0f 43 31 3e f2 8f 99 fe 98 f4 97 a0 f9 61 ec e7 61 3a 41 e8 4e 24 ff 00 79 43 cc ff 00 4c 70 f4 1b 15 ef 28 79 9f e9 8b 56 3f 92 3e ce 66 13 a7 fb 0b 8b f7 94 3c cf f4 c3 ec 2e 2f de 50 f3 3f d3 0d 58 f7 8f b3 98 84 e9 4f a1 18 a1 fd e5 0f 33 fd 31 bf 62 f1 3e f2 8f 99 fe 98 69 2f 42 f9 23 ec e7 21 3a 3f b1 78 9f 79 47 cc ff 00 4c 3e c5 e2 7d ba 3e 67 fa 63 d2 5e 85 f2 c3 d9 ce 42 74 83 d0 ac 4f bc a1 e6 7f a6 3b ec 36 Data Ascii: N+P?8yCL5aGtbq^}{ga>n<N+K\|spWGLOni/Baa:/nC1>aa:AN$yCLp(yV?>f<./P?XO31b>i/B#!:?xyGL>}>gc^BtO;6
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 88 d5 11 88 6e 58 a1 64 a0 42 16 04 b4 8e 92 49 5e f1 ca d2 1a 2d 48 9e d0 8a 22 da 41 a8 d8 a0 45 85 a2 02 da ed 22 71 1f 41 ae 2d 1c eb 32 e9 9a be 55 95 a3 5c 69 26 2b 19 50 69 34 4c cd a2 b5 a5 9a 66 40 04 b5 45 23 97 44 45 72 4a 82 3e 00 44 73 a4 c0 ea 5c 22 35 3a c7 c8 90 eb 25 12 99 11 16 11 61 24 d4 48 42 2c 04 98 90 81 32 07 a9 1a 56 4c a7 a9 35 e1 2b 86 91 60 f8 92 d5 c9 65 70 1d 4b 21 60 2c c0 78 13 13 a5 d8 a3 3b 2e cc ee 3a 84 e1 cb 0d e9 bd 2a be 57 04 fe 53 4a 50 e2 18 c4 1d 25 26 57 6f ba 2c e5 40 b2 a1 b8 be a4 76 19 32 69 2e 4d 57 65 d0 41 00 8d 88 b8 f0 8b 28 70 4a f9 f0 ca 0f ac 97 a6 de 2b fe 96 97 8c 69 da b1 3e 02 11 21 78 c5 62 c6 98 b7 88 60 0c 48 c3 1e 63 4c 68 c8 8c c4 8e 31 ad 2c 45 6b 45 b4 58 4d 0c c2 d0 b4 58 b6 88 04 b4 20 Data Ascii: nXdBI^-H"AE"qA-2U\i&+Pi4Lf@E#DErJ>Ds\"5:%a$HB,2VL5+`epK!`,x;.:*WSJP%&Wo,@v2i.MWeA(pJ+i>!xb`HcLh1,EkEXMX
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 11 c5 a3 2f 11 e2 18 e2 f1 82 a6 b2 22 d6 8c cd ac b5 12 1c cb 80 c8 da 90 e9 05 4d 73 05 65 df 4b 12 0e df 08 aa d1 2b 36 92 28 bb a5 64 35 6a 5e 47 78 d2 62 4d 92 39 db b3 2b d2 7d 30 e8 d6 b8 4a a8 4f 86 a3 5f 98 f9 c6 f0 ca c9 57 14 a5 09 65 40 e6 e0 10 a0 9d 17 5d b6 cd f2 92 fa 45 7f e1 1e de d5 2f 97 48 b3 3b 05 5d a8 53 2c a4 66 71 87 41 71 9a c5 9a a1 d0 73 36 98 64 49 4a d9 ac 65 f8 33 b4 4d a7 3b e9 42 5b 11 84 a8 55 8a 0e 95 09 00 90 09 02 db 78 13 f0 95 69 d6 c4 d1 19 ff 00 88 19 98 f5 95 d4 ba 16 bf 79 ea ef 6d 23 f8 a7 12 fe 23 09 4d 88 c9 51 31 14 83 28 37 17 b1 d4 1e 60 89 84 33 43 25 ea 56 3c 91 97 45 cf 47 46 6a 95 6a 00 d9 72 22 2b 15 2a 09 cc d9 80 bf fd 33 7a f3 2b 80 35 a8 b2 df 51 55 ef f1 b1 fe b3 4e e2 6b 15 c1 6d f2 29 8d 85 e2 Data Ascii: /"MseK+6(d5j^GxbM9+}0JO_We@]E/H;]S,fqAqs6dIJe3M;B[Uxiym##MQ1(7`3C%V<EGFjjr"+*3z+5QUNkm)
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 5c d9 41 ed 12 5b 4e 77 1d c5 ea 0c 42 3d 10 a2 d4 d8 75 86 62 43 11 c8 1d 36 99 e5 9b 8c 7f 1e fe 8b c7 1d 9f 3d 17 29 63 b1 05 56 ae 54 c8 f6 cb 4c dd 5a de 3c 8e fb fe 53 27 19 56 9b 62 d9 f3 82 ac d4 da e0 82 2c 15 41 d7 6e 46 4a ac e8 b4 a9 f4 8c 10 d3 25 8f 50 b0 23 2f aa 4e de b4 b5 80 c3 53 74 00 d6 64 20 20 08 1f 28 03 22 9b eb de 4f 39 c0 b3 64 8d a9 f2 74 60 c0 db 77 d1 6b 84 e2 11 de a8 a6 ca c3 ee d8 90 6f 66 37 04 7f ed 1f 39 a5 33 78 7d 20 95 ea 28 62 f6 a7 4f ad 7b e6 eb 3e b3 4a 76 e0 95 e3 4c cb 3c 75 9b 40 c0 11 63 a8 8f a6 2e 64 03 3e 73 b6 4b 69 db 79 62 8e f3 6f a3 2a 25 7a 76 8c 93 d5 da 41 21 3b 09 76 24 22 c4 94 48 40 98 46 c0 0a dc 4e 8b d4 a1 51 50 d9 c8 ba eb 6d 41 bd af f0 99 38 3e 23 87 f5 99 c2 31 03 aa fd 52 3c 0f 31 7b c9 Data Ascii: \A[NwB=ubC6=)cVTLZ<S'Vb,AnFJ%P#/NStd ("O9dt`wkof793x} (bO{>JvL<u@c.d>sKiybo*%zvA!;v$"H@FNQPmA8>#1R<1{
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 20 07 36 d2 fb da 72 f8 be 42 b9 39 9b e7 c0 e4 d2 82 e8 38 be 1f a5 ae 89 7c ac 29 3b 23 76 36 75 df b4 4a 98 2c 7b 53 aa 51 97 2d 5d 03 a9 3a 55 e4 18 1d af 6d 8e c7 63 6e 56 28 e2 5a b6 20 b1 0a 85 68 ad b5 dc 33 13 cc 7f 86 33 1e 94 eb 26 ae 81 d6 f9 2a 66 04 0e e3 6e 46 44 fc 96 b3 3a e8 d6 3e 35 e2 49 f6 6d d1 ac ae 2e be 04 1d 08 3d 84 72 32 49 ce f0 ec 79 08 cc c4 67 a3 95 1f ac 0e 74 3e a8 b8 dc 8e 5f ea 66 e1 a8 57 a3 62 ca cb 50 d8 65 dd 0d af 63 da 39 5f b4 8e d9 e8 c7 2a 7d 9e 7c b1 35 d1 34 21 09 b1 90 d2 21 14 c0 46 31 c0 c6 98 c7 26 e2 d7 b5 f5 8f 27 9c 94 f9 02 b5 66 be 23 0e 96 e5 59 af dc 12 d6 ff 00 dc 3e 53 9c e2 0b f7 ab 72 47 dd 28 1a 5f 67 70 66 bd 3c 68 ab 5a 95 44 02 c2 9d 55 ca 5d 55 ae f9 6c 6c 74 e4 79 f3 90 63 f8 3d 6a cc 96 Data Ascii: 6rB98\|);#v6uJ,{SQ-]:UmcnV(Z h33&fnFD:>5Im.=r2Iygt>_fWbPec9_}\|54!!F1&'f#Y>SrG(_gpf<hZDU]Ulltyc=j
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 32 b0 25 18 0d ca 90 3c 6d a4 60 73 58 74 19 69 72 1d 4f e9 3b 0a 14 ad 73 69 cb 53 c3 54 53 49 1e 8b 10 4d 88 cc 87 40 2e 79 f6 4d 8a 9e 90 d2 a5 94 1a 75 45 d6 ea 2c bb 6d ed 4f 99 cf 87 23 74 93 3d b9 e5 8e bc 33 38 63 28 9a 34 91 d1 aa 65 5a 65 82 a9 61 4c e5 b6 a7 6b ea 45 86 ba ca 74 b8 68 ae 59 e9 00 56 ec 73 1a 95 12 cb 9d 82 d8 06 1c 96 2f 0d e2 6c aa a8 d4 ee f9 42 6e 32 90 36 f0 d2 37 04 cf 49 42 9a 6c ac ab 55 b3 2b 80 0a 82 cc 7e 57 9e 94 a5 92 5c 38 9c 3e 3b a9 cb 6e 8b 58 5e 1c 52 bd 31 53 37 e2 60 bd 35 46 53 96 c5 4d 8b 11 37 c1 98 b8 1a cf 52 ba 96 52 2c ae d7 67 0c 4e cb ca 6c 4e af 15 7f a6 67 e5 ff 00 12 89 d0 da 2b 54 90 e6 89 9a 74 51 cd 63 d8 c8 d8 47 13 1a d1 a1 11 98 08 18 4a 01 18 cc 0a e6 d5 1b c6 6f 19 9f 8a c0 67 6b 83 6b ef Data Ascii: 2%<m`sXtirO;siSTSIM@.yMuE,mO#t=38c(4eZeaLkEthYVs/lBn267IBlU+~W\8>;nX^R1S7`5FSM7RR,gNlNg+TtQcGJogkk
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 50 34 17 37 72 c3 4b f6 5c eb 38 5f f1 e5 7e 91 d5 1f e1 2a f6 54 a2 0a ba 90 57 42 0e f3 57 12 9e b0 06 ff 00 75 5f fe cf f5 13 20 e0 ab 73 4a 83 ff 00 4d bf a0 9a 98 5b 87 65 fb c7 73 41 c0 52 85 4d d8 8d af 6e c3 2e 4b 94 c5 17 c3 2c f0 b3 7a 9e 14 85 fe 2d a7 e8 66 ac c9 e0 e8 cb 56 a2 ba b2 9e 8e 9e 8c 08 bd 8b 5e df 39 ad 2b c5 55 89 21 79 4e f2 b0 89 16 21 9d 27 38 a2 0d 1b 16 f0 10 d3 1b 14 c4 80 09 1a 63 ed 28 63 b1 36 ea 8f 89 8c 46 a5 17 b8 11 d5 70 e1 bc 66 76 0a b9 b0 9a 88 d7 13 82 49 c2 56 8e d8 b5 25 4c a2 69 e5 36 31 1d 39 cb f5 69 06 1d f2 95 40 46 86 75 e2 ca a7 fd ce 79 c1 c5 91 09 22 09 18 8e 0d 37 33 2c 2b 47 5e 57 53 ac 7b 1b 19 14 31 ce 26 5e 2d 9b 3d 8e a2 6b 29 bc 90 51 56 dc 5e 17 40 63 e0 55 af dd 2f f4 46 48 69 80 d6 02 3f a2 Data Ascii: P47rK\8_~*TWBWu_ sJM[esARMn.K,z-fV^9+U!yN!'8c(c6FpfvIV%Li619i@Fuy"73,+G^WS{1&^-=k)QV^@cU/FHi?
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: a7 72 44 bc 29 90 35 b4 ac 54 ab 05 ec 3a 4b 26 8b 58 b3 19 94 d5 97 17 42 e5 b8 92 d3 d0 69 23 4d a4 8b 2a 09 24 29 36 d9 5f 17 8a 4a 76 2c 6d 7d 86 e4 f8 09 9f 5a a2 56 c4 d2 e8 d8 30 14 ea 06 b1 da fb 5f b3 63 2d 62 09 18 aa 64 29 7f bb a8 2c 2d 70 6e 35 17 d2 42 30 ce 2b e7 e8 5f 2f 47 6b 96 a7 72 6f 7f 6b b2 70 67 f2 aa 6f 13 e8 bc 51 96 ca 91 3e 0b 15 4c 61 e9 66 60 08 44 52 39 86 02 c7 4f 81 94 78 a6 2d 58 3a 83 72 c1 91 40 d8 9c a7 9e d2 33 46 aa 52 b1 5a c2 a0 73 a2 e6 23 25 89 b7 56 e3 7b 48 ea 50 aa 6a 21 c9 5d 90 3d ce 6a 6e 40 16 22 fb 5f ff 00 ec a7 e5 3d 78 af f2 6e b0 2b e6 cb 55 69 3a 0a 59 a9 b2 85 50 19 8e 5b 5d ac 06 a0 f6 c7 89 a1 c5 31 d4 ea 22 a2 e7 b9 74 3d 6a 4e 83 4d 77 23 ba 51 75 b1 8f c0 c9 2c 98 de ca b9 33 f2 62 94 95 16 29 Data Ascii: rD)5T:K&XBi#M*$)6_Jv,m}ZV0_c-bd),-pn5B0+_/GkrokpgoQ>Laf`DR9Ox-X:r@3FRZs#%V{HPj!]=jn@"_=xn+Ui:YP[]1"t=jNMw#Qu,3b)
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 39 b0 e5 9b 95 36 5e ae d5 0a 66 35 19 b2 32 b0 be 5e db 7b 3d 84 c9 98 5e 4b 8a e1 bd 1d 02 7a 46 3a d3 bd c2 eb d7 03 b2 31 86 b3 3f fc 6b 4e 12 6b d9 a7 99 4e 49 21 69 2c b4 82 42 04 99 4c ef 97 27 25 50 aa 77 8f 0d 1a 60 a3 59 91 46 67 18 e1 b5 6b d4 56 a6 50 00 b6 39 89 06 f7 ee 13 9d c5 53 a9 46 a3 52 70 b9 96 db 5e c4 11 b8 9d d8 b4 c5 f4 82 9d 25 7a 75 5d 41 07 ee ce 97 d7 71 fd 60 b9 74 6d 09 3e 8c 1c 36 03 13 5d 01 a5 48 90 7a b9 f3 28 0a 76 b9 d6 f3 4a a7 a3 d8 ac c4 2a 2b 2d ec 1b 3a 8b 8e db 4b de 8c e3 94 bd 6a 63 41 d5 75 f0 d8 ff 00 49 d0 f4 c2 67 29 34 e9 16 dd 33 1f ec 96 1e d6 cf 5b ce 3f 69 15 7f 44 28 e4 6c 95 2a 86 b1 b5 d8 11 7e 57 d2 6e 7f 10 04 69 c5 89 9d cc 5b 1c 4d 5e 09 89 a6 a5 9c d3 16 dc 02 4f f4 88 bc 3a a1 64 53 51 6e c7 Data Ascii: 96^f52^{=^KzF:1?kNkNI!i,BL'%Pw`YFgkVP9SFRp^%zu]Aq`tm>6]Hz(vJ+-:KjcAuIg)43[?iD(l~Wni[M^O:dSQn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.6	49988	172.217.215.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	440	OUT	GET /vi/C4uzmiVn8Og/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	649	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 15512 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:11:00 GMT Expires: Fri, 19 Apr 2024 14:11:00 GMT Cache-Control: public, max-age=7200 Age: 6945 ETag: "0" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	606	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 10 0b 0c 1a 18 16 1a 1a 18 1a 1d 1d 1b 1f 22 25 20 20 20 1f 1f 25 25 25 25 26 2e 27 31 30 2d 27 2d 2d 35 3d 50 42 35 38 4b 39 2d 2d 45 61 45 4b 53 56 5b 5c 5b 32 41 65 6d 64 58 6c 50 59 5b 57 01 11 12 12 19 16 19 2f 1b 1b 30 57 42 38 3f 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 57 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1b 00 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 ff c4 00 42 10 00 02 01 02 04 03 05 06 03 06 03 08 03 01 00 00 01 02 00 03 11 04 12 21 31 05 41 51 06 13 22 61 71 14 32 81 91 a1 b1 42 c1 d1 23 24 52 72 92 e1 Data Ascii: JFIF"% %%%%&.'10-'--5=PB58K9--EaEKSV[\[2AemdXlPY[W/0WB8?WWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWWh"B!1AQ"aq2B#$Rr
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 93 b9 3e 50 ee 4f 94 58 23 84 93 b9 3e 51 7b 83 e5 16 08 a1 25 ee 0f 94 4e e4 f9 45 82 38 49 45 03 e5 17 d9 9b a8 8b 40 86 12 7f 65 6e a3 eb 0f 64 6e a3 eb 16 81 04 25 8f 63 6e a3 eb 0f 63 6e a3 eb 16 81 5e 12 73 84 6e a3 eb 1a 70 e7 ca 2d 02 28 49 45 03 e5 14 61 9b a8 8b 04 30 93 fb 2b 75 10 f6 46 ea 3e b1 68 10 42 58 f6 46 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 b1 ec 8d d4 7d 61 ec 8d d4 7d 62 d0 2b c2 58 f6 36 ea 3e b0 f6 36 ea 3e b1 68 15 e1 27 f6 46 ea 3e b0 f6 46 ea 3e b1 68 10 42 4f ec 8d d4 7d 61 ec 8d d4 7d 62 d0 20 84 98 e1 9b a8 8d ee 4f 94 58 23 84 94 50 27 a4 5f 66 6e a2 2d 02 18 49 bd 99 ba 88 be ca dd 44 5a 04 10 93 fb 2b 75 10 f6 56 ea 22 d0 20 84 9b d9 cf 51 13 Data Ascii: >POX#>Q{%NE8IE@endn%cncn^snp-(IEa0+uF>hBXF>6>h'F>F>hBO}a}b }a}b+X6>6>h'F>F>hBO}a}b OX#P'_fn-IDZ+uV" Q
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 67 38 bf f5 18 9c 67 88 56 a0 10 d1 a5 de 13 7b e8 4d be 53 9b e2 1c 46 be 29 a9 51 af 48 53 bd 45 b6 84 13 cb 9f ac e9 78 8f 14 a7 86 0a 6a 66 f1 5e d9 45 f6 98 78 ae 29 4b 15 8b c2 77 79 bc 2f ae 61 6d c8 fd 26 b8 97 9a be f6 63 95 fc ff 00 43 ac 16 00 01 b0 16 98 9c 4b b4 e9 42 ab 52 14 d9 d9 74 26 e0 0b da 6c 03 3c db b4 05 bd ae b6 fe f9 9c e3 49 dc 8e b3 6f 4a 2c e8 b0 5c 7f bd c7 53 63 4f 2e 65 ee 86 b7 dd af 79 d6 66 9e 61 d9 f2 7d ae 8d ff 00 8d 7e f3 d2 73 4b 3a 71 4e 2a 89 c7 69 b4 dd 94 b8 5f 1b 18 9a 95 10 21 5c 9c c9 06 fa da 45 da 90 87 06 e5 86 aa 41 5f 5b cb 94 30 b4 e9 96 34 d0 29 6d c8 1b ce 7f b6 58 96 b5 2a 43 45 37 72 7a 9d 80 95 24 e6 a8 93 6d 41 d9 d3 e0 0f ec 69 7f 22 fd 84 e7 38 ab 7f fd 4a 3e b4 ff 00 ee 9b b8 06 fd 8d 2f e4 5f Data Ascii: g8gV{MSF)QHSExjf^Ex)Kwy/am&cCKBRt&l<IoJ,\ScO.eyfa}~sK:qNi_!\EA_[04)mXCE7rz$mAi"8J>/_
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 53 d4 1b 18 8f 58 b1 bb 12 4f 52 49 87 e9 de 4a 42 e7 58 b4 77 9c 03 1c 2b 61 d3 5f 12 00 ac 3d 36 33 4c 4f 30 4a a5 76 24 7a 1b 49 7d a9 ff 00 8d ff 00 a8 c3 f4 e5 b5 23 49 cd 2a 71 3d 23 17 8b 5a 34 d9 dc e8 07 cc f4 98 7d 97 ac 5e bd 76 3b b7 88 fc 49 9c a0 c4 75 2c de 44 e9 25 c1 e2 d9 2e 45 46 46 3b 91 7d 7e 52 2f 4d 5c 53 ec 8d cd d4 9a e8 ef f8 b3 5a 97 fa 97 ee 27 9f f0 23 6c 4a 1f 31 f7 12 d9 e2 63 76 a9 52 a3 6b 61 ad af 6f 39 9d 80 75 4a aa 58 90 bb 12 05 ed e7 39 bc 63 24 ae cd ee 69 ba 3d 4e 79 ef 6b 47 ed c7 fa ff 00 ee 97 5b 8a 51 23 c5 8a aa de 41 5b f3 98 fc 53 16 95 99 3b b5 60 a8 b6 f1 5a e4 dc 92 74 92 6a 29 3a 76 6a 32 94 9a b5 46 75 a2 11 24 22 d1 8d 38 24 76 3b de c9 9f dc c0 e8 ed f9 4d 3c 46 1d 2a ae 5a 8a 19 6f 7b 11 7d 67 9e 51 Data Ascii: SXORIJBXw+a_=63LO0Jv$zI}#Iq=#Z4}^v;Iu,D%.EFF;}~R/M\SZ'#lJ1cvRkao9uJX9c$i=NykG[Q#A[S;`Ztj):vj2Fu$"8$v;M<FZo{}gQ
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 3a da c3 e6 67 48 b5 d3 1b 8e a2 ca a7 2a 02 48 60 39 6d f5 22 74 c4 d8 44 a0 a3 da 33 16 e5 74 f4 70 03 b2 d8 b3 ff 00 2c 0f 57 5f d6 62 e2 30 e5 1d 91 b7 52 41 f5 13 d0 aa f6 9f 0a b7 b3 33 7f 2a 99 c4 f1 2a cb 56 bd 4a 8a 08 56 62 45 e4 94 1e 37 54 14 d6 49 27 66 71 5b 46 33 4b 25 64 55 29 ce 4a 47 64 44 a2 3f 2c 60 92 29 95 90 4c b1 8c d2 53 23 29 00 88 c5 02 0f 1a a6 0d 0a 56 02 2b 18 c0 61 90 75 a1 16 06 60 0d 22 34 c7 11 10 ac b4 5a 22 66 91 de 3d d6 44 66 91 00 98 08 de 71 e2 68 01 58 c2 24 80 c7 65 92 e8 0d b4 51 16 d0 98 03 80 8e b4 45 11 d0 51 2d 16 d1 61 04 00 21 68 a0 45 b4 10 14 4b 89 4c bb a8 d8 ed 22 a1 6d 74 d4 6a 25 bc 1a 96 71 51 ad bf 3e 73 71 8e b2 34 bd 8d 1a 38 53 dd b0 f0 a1 60 47 53 69 10 a6 45 2a c9 bb 01 a9 eb 2f d5 aa a4 aa 93 Data Ascii: :gHH`9m"tD3tp,W_b0RA3VJVbE7TI'fq[F3K%dU)JGdD?,`)LS#)V+au`"4Z"f=DfqhX$eQEQ-a!hEKL"mtj%qQ>sq48S`GSiE/
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 8a c6 e5 9a fb a5 e6 28 bf 6f ed 26 26 2f 89 62 71 0b 92 a1 ba de f6 0a 06 a2 3e 8f 18 c5 53 45 44 36 55 16 1e 01 b4 64 75 cc 7d cf fc 50 fb 7d dd b2 1a 95 6b bd 4e f9 98 f7 82 d6 3c f4 93 d5 e2 98 ba ba 1a 8c 07 f9 7c 3f 68 00 63 80 99 7f 56 fd 91 7e d9 7b b2 b5 16 ab 41 83 d3 62 1b 9d b5 f9 f5 97 57 8f 63 3f 8b ff 00 c0 91 da 16 91 7d 5b ff 00 e9 26 5f b7 5e 1d 12 9e 31 8b 6d ea 91 e8 00 90 bd 42 db b1 66 26 e5 98 93 17 2c 6e 59 1f d5 cb c2 48 d2 fa 75 e5 b6 6b 52 e2 f8 9d bb ca 67 d4 ac b0 bc 53 12 7f e6 51 1e ac bf ac c1 c9 0c b0 fe a5 7f b5 13 d0 7f ee 66 c5 6a ee d5 51 fb fa 6d 54 7b b6 22 c0 0f 3d b9 98 b8 8e 23 88 fc 58 9a 69 e4 a5 49 fa 4c 6c 91 ad 4e 3e e9 fb 22 7d bf fc 99 36 22 b2 b1 f1 d5 a9 54 fa 9b 7d 65 66 d4 de d6 f2 88 44 72 cc 72 73 4a Data Ascii: (o&&/bq>SED6Udu}P}kN<\|?hcV~{AbWc?}[&_^1mBf&,nYHukRgSQfjQmT{"=#XiILlN>"}6"T}efDrrsJ
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 30 c5 73 38 f1 b5 8b 79 9b 5a ff 00 20 24 57 d3 31 3e 86 c5 b4 55 d6 3c 2c d9 c4 8b 2c 70 11 58 5a 20 30 41 6d 20 c4 d4 ca 3d 65 a1 32 f1 95 6e f6 1c b4 9b e2 57 2b 24 de 88 71 35 ac 9e bf 69 4e 8b f8 87 ac b0 68 9a b5 32 83 65 51 e2 63 b0 12 45 a8 b4 09 c8 a0 ff 00 98 8f 14 f5 7a 6f 91 98 4d 45 1a 59 0d af 69 13 ca 15 38 83 34 89 6a b9 3c ec 76 9a 5f 46 bd cc fa 86 89 12 4a 75 ec 2c 76 90 50 62 c9 73 d6 d1 e4 cf 27 27 1d 3c 59 da 13 6b 68 65 6e 31 9f c1 49 09 d3 41 e9 22 c0 d1 ad 88 71 59 0a 02 87 67 bd 8c aa c4 51 ab 9d 5a d6 d4 5b 53 34 38 7d 42 94 c0 1a 0d fc fe 53 71 e3 84 76 8b 2e 59 4b 45 ce 2b 8b 7a 6a 9d e2 ae b7 b6 53 7e 93 16 be 34 b8 2a 14 eb a5 ed 2c e3 1c d4 6b b6 c0 58 09 15 3a 59 88 02 4e 48 46 ec b1 e4 92 54 68 70 7a 17 39 8f 29 ab 5a a8 Data Ascii: 0s8yZ $W1>U<,,pXZ 0Am =e2nW+$q5iNh2eQcEzoMEYi84j<v_FJu,vPbs''<Ykhen1IA"qYgQZ[S48}BSqv.YKE+zjS~4*,kX:YNHFThpz9)Z
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: f3 9c 5a aa 8f 51 01 bd 22 6e 3a 4f 27 17 13 bb 3d 2e 93 b2 bb 9b 92 62 89 79 56 8d 4e 76 32 ad 5a 79 58 8b dc 75 9e c4 cf 1c e0 d6 c4 11 e2 30 49 10 6b 29 cc 7a 5b 9e d1 dc 2a aa ab 97 3a f2 b7 94 8b 8a a1 44 05 07 84 d8 1f 59 4a 89 37 d3 e3 3d 70 e1 78 b4 fc 9e a8 41 c7 b3 76 a7 14 a6 1d 7b aa 5a 29 27 cf ce 15 68 52 a8 86 b5 2a 85 5a f7 64 2c 0e 97 da d2 0f 68 45 54 51 4d 4b 01 a9 65 06 47 5c 27 7a 0d 25 ca ac 05 c6 de 21 bc 43 85 a7 a4 d7 fe f2 76 a2 e2 88 f0 24 69 50 19 32 cf 24 b8 e5 1e d1 e3 97 1c a3 da 1c ab 1c 56 00 c5 13 2d 18 32 f1 d4 f2 56 4a a7 dd 3a 1f 2e 52 de 1b 00 ad 54 03 60 0f 39 66 a5 25 75 2a c2 e0 c8 57 0a ca a1 58 e6 03 63 ce dd 0c ea a5 94 6b c9 d7 8d ec d2 a5 c3 e9 2b 5c 72 e6 0c af c5 69 53 76 a2 97 20 66 df 9c 92 8e 20 e4 f1 d9 Data Ascii: ZQ"n:O'=.byVNv2ZyXu0Ik)z[:DYJ7=pxAv{Z)'hRZd,hETQMKeG\'z%!Cv$iP2$V-2VJ:.RT`9f%u*WXck+\riSv f
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 18 ff 00 27 49 f2 28 44 0e fa 5f e3 25 a4 84 e8 04 96 86 1a f6 cc 72 82 6c 3a 99 a8 70 8f 4c 68 ba 79 6b 3c 2f 67 86 af 65 2a 98 16 5a 5d e1 22 c3 de f2 13 26 b7 10 52 e0 72 63 61 79 b9 c5 2b 7e e6 c3 9f 3f 4f fc 33 89 35 07 7a a5 b6 5d 7e 32 c5 2d 96 f1 e8 bb 8f a6 c0 dc 31 b5 f5 d7 49 4d a9 5a 59 a9 8b 24 6c 08 95 da b8 d7 49 25 6c c3 64 03 30 37 1b f9 4d 3c 35 ea 53 62 db a9 17 f4 3b 19 63 86 61 81 0a 58 6a 75 fd 25 ee 3d 6a 38 75 a8 80 66 b8 52 3a 83 c8 cc f9 a6 7a 23 06 96 46 33 f8 41 3d 04 c9 0a 44 d5 0c 95 53 32 e9 7f c2 4c 88 a9 02 d9 7e 93 58 b4 56 d4 b6 41 45 ed 05 4b 9b cb 07 07 50 0c c5 48 1d 62 a5 3b 48 f4 58 a0 c2 a2 87 05 c5 c4 e9 f0 f5 14 a8 b5 ad d2 73 6a b2 e6 14 1b e8 6d 30 f6 77 8e 8d 6c 4f 09 a3 58 1b 8c ad d4 4c 3c 66 0e ae 18 80 fe Data Ascii: 'I(D_%rl:pLhyk</ge*Z]"&Rrcay+~?O35z]~2-1IMZY$lI%ld07M<5Sb;caXju%=j8ufR:z#F3A=DS2L~XVAEKPHb;HXsjm0wlOXL<f
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 03 f0 aa 9b ec 34 de 6f 15 14 72 53 c8 6f 0c a4 6a 9c 83 ce fe 51 ef 85 22 a8 43 cc 81 f3 9b 58 2c 22 d1 4c aa 35 e6 79 98 ca 78 42 6b 1a af 61 6b e5 5e 7d 01 3d 26 54 ad 99 51 72 7a 2d e1 69 dd ae 25 2e d6 d6 d2 95 2e 9e 33 f6 1f 9c d6 a2 ca a2 e7 61 ac e7 38 95 eb 16 7b 1b 9d 87 97 29 95 6d 9e 9e 67 8c 28 a5 c2 eb 8a 6f e3 17 53 a1 1e bc e6 b6 0f 83 a2 55 2f 9c b2 6e 8b ae 93 05 44 d8 e1 7c 43 2f 81 ce 9c 8f 48 9d ad a3 c7 66 f3 80 c0 83 b4 cf c4 60 f2 8b f2 96 c5 48 b5 2a 0c 8d 71 71 6b e9 bc cc 66 9e 99 d3 8e 78 b3 18 ac 7d 27 b1 8d 35 95 b6 3f 3d 21 2b 47 b5 3b 35 f0 f5 c4 d1 a1 88 02 73 94 01 be f3 4a 8e 9b b4 c1 be cb dc 4e 8d 3c 42 65 61 af 23 cc 4e 32 be 16 a6 19 f3 0b 8d 4d a7 59 52 aa 28 25 9a 66 71 26 4a 88 45 ed e6 79 4b 17 46 24 95 19 9c 0a Data Ascii: 4orSojQ"CX,"L5yxBkak^}=&TQrz-i%..3a8{)mg(oSU/nD\|C/Hf`H*qqkfx}'5?=!+G;5sJN<Bea#N2MYR(%fq&JEyKF$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.6	49987	172.217.215.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	440	OUT	GET /vi/5CBdVmCuDx4/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39997 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:32:23 GMT Expires: Fri, 19 Apr 2024 14:32:23 GMT Cache-Control: public, max-age=7200 ETag: "1689932701" Content-Type: image/jpeg Vary: Origin Age: 5662 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	597	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0f 10 0e 0f 0f 10 10 10 0f 0e 0e 0e 10 0d 0f 0d 10 0e 0d 0e 0f 10 0d 0d 0d 0f 0d 0e 10 0d 0d 0f 10 10 0e 0f 0d 0f 0d 0d 0f 10 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 16 15 12 15 15 17 15 16 15 15 15 17 17 15 15 15 15 15 15 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 06 05 07 03 04 08 02 01 09 ff c4 00 55 10 00 02 01 02 03 04 07 03 09 05 04 07 06 05 03 05 01 02 11 00 03 04 12 21 05 06 31 41 07 13 22 51 61 71 91 32 81 a1 08 14 23 42 52 b1 c1 d1 Data Ascii: JFIFh"U!1A"Qaq2#BR
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 28 a2 84 22 8a 28 a1 08 a2 8a 28 42 28 a2 8a 10 8a 2a 4b fd 0e dd eb ea 7f 2a f4 36 23 f7 af a9 fc aa 1d 63 79 ab 3a 97 f2 51 74 54 c2 6e f5 c3 cd 7d 5b fa 6b 6a c6 e8 5d 3c 0a 7a b7 f4 d7 0c ac 1c 54 85 3c 87 82 5d a2 9c 2c f4 79 7c fd 6b 5f cc ff 00 d1 5b 2b d1 86 24 fd 6b 5f cd 73 fe 9d 40 d5 44 3f d8 29 8a 39 8f fa 94 8d 45 59 1b 33 a1 9c 65 c7 44 46 b2 ce ec 11 57 3d c0 4b 31 80 35 b6 00 f7 9a b2 ed 7c 8c b6 b1 00 f5 d8 00 63 d9 37 b1 32 3c 0c 61 88 9f 22 47 8d 0d a9 89 db 39 42 4a 79 23 fd 42 cb 9b 28 ab 87 6a fc 9d 36 8d a7 36 dd ac 07 5e 2b 9e f1 d3 91 04 59 82 a7 93 0d 2a 3e f7 41 d8 c1 c5 ec 7f 35 ef fa 35 59 af 80 63 50 56 8a 19 c8 b8 69 55 Data Ascii: ("((B(("((B(("((B(K6#cy:QtTn}[kj]<zT<],y\|k_[+$k_s@D?)9EY3eDFW=K15\|c72<a"G9BJy#B(j66^+Y*>A55YcPViU
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 96 60 12 5d e1 44 e6 2d 97 c3 d9 9e fd 38 eb a7 89 12 bd 2b 6c 4d 2d ba 67 cc d7 32 10 19 a2 5a 48 23 5e c9 9e 4b 13 af 75 46 63 36 0a 3a e5 17 5b ad 0b da 65 b8 c5 d5 88 fb 40 c7 74 80 66 20 1d 0c d7 92 aa 0e 13 38 38 7c fd 16 fd 2b 9a 21 6d 8f cb d5 45 e3 36 8a 96 50 33 7b 26 61 e5 a0 02 4b 48 2d 00 00 78 f3 cb ce 33 40 de da b6 43 43 b2 06 04 e8 f7 c1 24 0e 0a 99 bb 19 8f da 7c ab 1d f5 8f 68 6c 35 b4 ac 2e 5f 24 99 92 dd 6b 13 97 b8 c3 49 04 b7 09 8e 1a 6a 2a a6 db 38 69 3c 3c 75 1d fc 35 3f 78 f1 aa c6 53 d1 b6 fb 29 1d a7 8e 0d 70 b0 5c b2 64 ae 60 c2 58 99 82 24 15 83 c8 91 a0 8d 0d 60 bb 83 ca 73 28 ec 9f 81 d3 4f 2e ea 8e bb 33 03 90 d7 f0 f7 f3 f2 a6 ac 0e 1f b0 b3 dc 27 de 28 91 fa 2c 53 4c 6e a1 62 a3 6d da 9a 8b db 18 58 24 c6 9c fc 3f c0 91 Data Ascii: `]D-8+lM-g2ZH#^KuFc6:[e@tf 88\|+!mE6P3{&aKH-x3@CC$\|hl5._$kIj*8i<<u5?xS)p\d`X$`s(O.3'(,SLnbmX$?
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: a6 ea ad 85 03 22 95 80 33 01 a4 c6 a0 f3 e3 30 79 8f 78 09 3b 7b 75 6c bc 9c a1 4f 90 83 e6 3f 2a a2 69 a2 8d da 5f 0f ff 00 a3 7f 55 7c 1d 6c 8d b8 98 fa 0b 7a 29 dc 77 42 57 7e ae 22 db fe fd b7 b7 f1 0d 72 ab dd 8b b1 ec 3d c5 b2 d8 a1 6e e3 de ea 53 fd 9e e5 cb 4e c5 f2 5b 2b 74 32 e9 70 c4 16 55 89 13 14 f9 b9 3b cb 88 b1 86 c7 5b 76 7b 82 ce 1c dc c3 31 2c ec ae 66 de 4c c7 b4 57 3b db 2a a7 d9 86 03 48 01 2b a3 2d 95 76 e6 37 08 a6 cb 2d b5 bc b7 0b 38 c9 1d 40 37 84 03 04 eb 6c 08 00 f1 ab 1c d8 09 8f aa 66 1d b8 24 e3 36 e7 e2 a4 c9 27 0d 93 ad 7f e9 d8 80 33 8b f2 f0 4d 1b 47 e4 ff 00 79 c1 1f 3a b6 24 cf f6 4f 23 48 fb 74 bb b4 3e 4b 77 1f 4f 9f da 0d dd f3 66 27 d3 af 06 ba 75 5b 5a e0 ae 91 15 2f 63 f1 58 91 a5 c7 c4 dc 64 ba ba 38 0b 71 ba Data Ascii: "30yx;{ulO?i_U\|lz)wBW~"r=nSN[+t2pU;[v{1,fLW;H+-v7-8@7lf$6'3MGy:$O#Ht>KwOf'u[Z/cXd8q
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 65 6b dc ed 24 83 6f 7d ea ec 1f 24 4c 47 fd be cf fe 5a e7 dd d6 d7 a1 f2 43 ba 64 0d a5 68 b0 e2 3e 68 da 79 ff 00 b4 4f c2 ba cc b6 b5 f9 c3 d3 4e 10 d8 db 3b 40 db 66 b7 71 71 d7 ae ad c4 62 97 14 df 73 7a 56 e2 10 cb a5 d8 04 19 8d 2a f2 23 02 f6 48 45 34 d2 9b 6a f9 05 67 6f 07 c9 2f 68 20 9b 37 f0 b7 e0 4e 56 eb 6c 31 f0 59 5b 88 49 fd a7 51 54 3e f6 6c 0c 46 16 f3 58 c4 5a 7b 37 93 53 6d f4 30 66 19 58 12 ae 86 0c 5c 42 ca 60 c1 31 5d b5 f2 47 e9 46 e6 d0 c2 dd b3 88 6c f8 ac 19 40 d7 4c 03 76 c5 d0 dd 53 b4 00 3a c5 28 e8 c4 71 ca 8c 75 73 5b 3f 2b dd cc b7 8a d9 57 ef 10 3e 71 81 43 89 b5 76 3b 41 12 0d fb 64 f1 28 f6 81 39 78 67 5b 67 ea d0 58 d3 b2 1b 52 f0 ed 2f 5c c1 d1 7f 44 58 5d a4 fd 4e 1f 6a 28 c4 0b 7d 6b 58 bb 80 bd 6c e5 10 1f 23 f5 Data Ascii: ek$o}$LGZCdh>hyON;@fqqbszV*#HE4jgo/h 7NVl1Y[IQT>lFXZ{7Sm0fX\B`1]GFl@LvS:(qus[?+W>qCv;Ad(9xg[gXR/\DX]Nj(}kXl#
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 2a 6b 15 7c 03 94 70 5e c8 f2 02 05 79 d8 e4 b3 cb ce fc 3e fe fb d6 a4 ad 21 81 a3 8a d7 df 5d a0 53 0e f0 61 ae 45 a5 3d d9 fd a2 0f 78 b6 1c 83 de 05 2a ee 46 10 1b d6 c4 68 a7 37 96 41 23 e3 15 b9 d2 36 26 6d d9 ee eb 58 fb c2 40 f8 31 ac bd 17 db 96 76 fb 2a 07 bd 8c fd cb 5d d4 65 a8 63 4f 0f ed 59 13 7a ba 67 3b 9d ff 00 09 ab 78 9b b1 1a 76 88 10 75 d3 89 d3 c2 96 6e 58 03 8c 03 dd 95 41 ef 8e 72 74 f0 e0 69 9b 79 30 c4 db 62 32 68 a4 fd 22 e6 5e 1a 4e a2 35 a8 5c 26 1e d1 b5 6c bd 9b 41 9e da b3 00 ba 49 12 60 1d 72 93 a8 04 9e 22 66 99 af 65 df 72 78 61 2d 4d 26 96 f9 a5 fc 6e 25 09 d6 54 01 a8 2c 46 ba 44 e5 3a c1 83 1a f0 9e e3 5e ba 3c 6b 2f 89 66 41 da b7 68 c9 0a c0 4b 90 a0 c9 3c 48 cd c0 0e 1c f8 d7 dd fb c5 5a c3 d9 53 6f 0f 64 bd c6 20 Data Ascii: k\|p^y>!]SaE=xFh7A#6&mX@1v*]ecOYzg;xvunXArtiy0b2h"^N5\&lAI`r"ferxa-M&n%T,FD:^<k/fAhK<HZSod
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 0f 2d 76 17 19 70 fd 4e 1f c2 e0 3e a4 77 57 d0 b5 27 bc db 1a ee 1a f5 cc 3d f4 36 ef 5a 6c ae 87 d4 32 9e 0c 8c a4 32 b8 d1 94 83 51 2e f5 60 ba d0 c7 05 f6 6a 43 75 b1 59 31 38 67 ff 00 87 89 b1 73 f9 2f 23 71 f7 54 40 b9 58 31 af d9 6f dd 3f 75 49 ad 37 51 71 c2 fd 55 bd 73 53 e7 5c 03 f2 b1 b1 93 6e 63 b9 07 36 2e 2f 0d 43 61 2c 02 7f 9c 30 d7 ba bb a1 f1 d3 0d f6 94 30 fe 20 0e 9e b5 4c f4 f5 bf bb 17 0f 8a b7 6b 68 60 0e 2a fb 61 d2 ea de 5c 2e 16 ec 59 6b 97 6d aa 9b 97 2f 5b bb d9 6b 4e 72 00 40 9d 35 26 97 86 62 e7 96 ac e8 bf c6 41 55 cf c8 1e cb 1c 66 39 c7 f6 6b 85 b6 8e 79 75 97 2f 66 b7 ef cb 6e ef c6 ac ef 96 3f 48 d6 f0 bb 3e e6 0c 30 38 ac 72 75 62 df 12 98 62 d1 7a eb 8e 41 94 35 a4 9f 69 98 90 08 b6 f1 63 ee 4d 9c 1d bb 08 d8 2b 76 2d Data Ascii: -vpN>wW'=6Zl22Q.`jCuY18gs/#qT@X1o?uI7QqUsS\nc6./Ca,00 Lkh`*a\.Ykm/[kNr@5&bAUf9kyu/fn?H>08rubbzA5icM+v-
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 13 5e 1e f0 61 23 d2 b4 b6 dd cd 00 f1 9f 4d 7e f1 f1 a8 cc 13 b0 62 4b 69 a0 1c b5 13 3e a4 8f ba be 6d cc 49 ed 1e 61 42 8f 36 fd 2d 4a 5a 90 62 3c d5 11 d3 da 40 92 f7 cb 14 7a b6 20 c3 31 90 7c f8 7b b2 8a 9a bb b5 43 85 ba be cd c5 0e 3c 27 88 3e 2a d2 a7 b8 a9 ee a5 6d f3 bb ec af 74 9f c0 7e 34 b9 b3 f6 eb 58 2c 32 f5 96 58 c9 b6 0c 32 b7 36 b4 4e 92 79 db 68 0c 40 32 a6 49 c6 63 f2 42 da 7d 3e a6 02 38 27 8d ea 26 e6 1d a3 56 b4 c2 e8 03 89 50 0a b8 1e 4a d9 bf 82 99 7a 21 4f f6 72 ff 00 6e e1 f4 50 17 ef 06 90 36 5e f1 d9 62 3a bb ca ad f6 2e 1e a6 e4 f7 43 91 98 8e 32 85 87 8d 39 ee fe d8 36 d4 28 b6 55 64 9e c0 95 ed 31 62 40 e0 24 92 74 31 ae 90 29 ca 59 5b 1c ba de 92 a8 89 e6 22 c6 f3 ba 72 db 9f d9 38 cb 9a 54 8c ba 6b 3a 73 d2 93 b6 9e 34 Data Ascii: ^a#M~bKi>mIaB6-JZb<@z 1\|{C<'>*mt~4X,2X26Nyh@2IcB}>8'&VPJz!OrnP6^b:.C296(Ud1b@$t1)Y["r8Tk:s4
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: fb c3 63 30 8c 4e 18 90 78 0c 4d 8f eb aa 2b 1f 77 e3 92 ad 8c 0e 17 2b 8f b1 9b 66 f6 1b 68 dd c4 59 7c 97 ac 63 2f ba 3f 1d 7a eb 8a 43 0e 68 ea 4a b2 1d 19 59 87 3a ec be 8c ba 43 b5 b4 30 a3 11 6c 64 b8 a7 ab c4 58 99 36 af 44 90 0f d6 b4 e3 b5 6e e7 35 90 61 91 95 79 7f a5 1e 8d ef 2e 23 15 7e d5 dc 2d ec 3b dd bd 89 0f 6f 19 85 cc b6 ee 3b 5e ca d6 9e ea dc 67 40 d9 72 da 57 2c 47 64 19 02 96 fa 3d de 5b f8 0c 40 bf 64 83 a6 5b b6 5a 7a bb d6 a6 4a 5c ee ef 57 1a a3 41 13 aa b3 d3 31 b3 33 07 3e f0 aa dc dd 75 47 4e 1d 1d db da 76 41 05 6d e3 6c a9 16 2f 1d 15 d7 56 ea 2f 9d 4f 54 c4 92 af a9 b6 c4 91 21 9d 5f 8b 36 ce 0a ed 9b af 66 ea 35 bb b6 98 a5 cb 6e 21 95 87 23 c8 82 20 86 12 18 10 41 20 82 7b 0f 77 ba 56 d9 f7 d4 30 c4 a6 1d fe b5 9c 4b ad Data Ascii: c0NxM+w+fhY\|c/?zChJY:C0ldX6Dn5ay.#~-;o;^g@rW,Gd=[@d[ZzJ\WA13>uGNvAml/V/OT!_6f5n!# A {wV0K
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 69 d1 18 0c d2 67 3a 5c 07 53 cc 69 4e 41 53 25 38 ea e5 18 bd c1 48 f4 af fc 52 37 3c d5 d1 da f6 b1 68 d8 e7 87 7f 72 4e dc fd 9e 6f e2 2d 58 04 2b 5f bb 6e c8 62 09 0a 6e 30 40 48 1a 90 26 69 87 77 af 94 74 cc 21 ad dc ca e3 b8 a3 e5 71 ee 82 2a e0 dc ed c7 d9 f8 6b 89 7a d4 bd d4 d5 2e 5e c5 5b 6c 84 8e 39 10 5b 4c c0 1d 0b 29 89 91 04 48 a9 77 b1 93 e7 b8 dc 84 32 1c 55 d7 05 48 65 fa 47 2e 72 91 a4 06 66 1a 77 55 a6 46 cb 70 17 93 8e e1 d6 2a f1 dd 4c 44 31 f1 86 1e ee c9 f8 15 ab 06 74 9e 40 4f ba a9 bd cb c7 cf 54 d3 ed 0c a7 cc af f5 01 56 8d ed a1 d8 58 90 60 6b cb 4d 3d e3 bc 69 56 50 54 88 5a fd 4b 23 a6 e9 f5 69 77 92 93 c3 3c fa fc 3f 5f 78 ad 8e ae a2 b6 56 26 3b 4c 75 9d 7c 40 d7 4d 64 71 8d 47 0d 6a 56 ee 31 55 03 dc 21 41 d4 71 e1 c8 01 Data Ascii: ig:\SiNAS%8HR7<hrNo-X+_nbn0@H&iwt!qkz.^[l9[L)Hw2UHeG.rfwUFpLD1t@OTVX`kM=iVPTZK#iw<?_xV&;Lu\|@MdqGjV1U!Aq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.6	49990	172.217.215.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:44 UTC	440	OUT	GET /vi/uWsQ5IWVilM/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 39909 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:00:56 GMT Expires: Fri, 19 Apr 2024 16:00:56 GMT Cache-Control: public, max-age=7200 ETag: "1706713936" Content-Type: image/jpeg Vary: Origin Age: 349 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	598	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 10 10 0f 10 10 10 10 0f 10 10 10 10 10 10 0d 10 10 10 10 10 0e 10 10 10 0d 0d 0d 0d 10 0e 0d 0e 0d 10 10 0f 10 10 0d 10 0d 0d 15 0d 0f 11 11 13 13 13 0d 0e 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 18 15 12 15 17 18 18 17 18 18 18 17 15 17 18 18 18 15 15 15 17 17 17 17 15 15 17 15 17 15 17 15 17 15 15 15 17 17 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 03 02 01 08 09 ff c4 00 4e 10 00 02 01 02 04 03 05 04 06 05 09 07 04 02 02 03 01 02 11 00 03 04 12 21 31 05 06 41 13 22 51 61 71 07 32 81 91 42 a1 b1 c1 d1 f0 08 14 23 Data Ascii: JFIFh"N!1A"Qaq2B#
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 14 50 84 51 45 14 21 14 51 45 08 45 14 51 42 11 45 6e eb fa 2d 71 0f e5 b0 5f de 5f ff 00 0b 5e 8f e8 af c4 66 3b 6c 10 ff 00 fe 97 ff 00 c2 d7 38 82 f6 c5 60 d4 57 e8 3c 3f e8 93 c4 9b 6b f8 0f ef 2f ff 00 84 ae ff 00 f0 7d c4 ff 00 97 c0 7f 7b 88 ff 00 07 51 9a 88 c6 44 af 70 15 f9 d6 8a fd 0c ff 00 a2 27 12 1f f5 b0 1f de 5f ff 00 09 51 f1 1f a2 7f 12 1f f5 70 47 d2 e5 ff 00 f0 b5 d3 66 63 b2 05 72 ee e8 b9 58 0d 15 b8 bf e8 c3 c4 06 f7 70 7f de 5e ff 00 0b 5e 57 f4 64 c7 ff 00 2d 83 fe f2 f7 f8 5a 9b 01 50 f6 f1 f1 58 85 15 bb d8 fd 16 b1 e7 fe be 04 7a dc bf fe 12 a6 db fd 11 f8 91 da fe 03 fb db ff 00 e1 2a 27 c8 d6 fd 45 4a d2 1d a2 fc f7 45 Data Ascii: EPQE!QEEQBEPQE!QEEQBEPQE!QEEQBEn-q__^f;l8`W<?k/}{QDp'_QpGfcrXp^^Wd-ZPXz*'EJE
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: f7 e1 85 72 1f a3 76 3b f9 5c 27 f6 ef 7f 86 af 00 b8 b8 5c 19 1a 0d 8a c5 e8 ad b4 fe 8d 18 ef e5 b0 7f de 5e ff 00 0b 55 e7 f4 7e c6 4c 76 b8 5f ed dd ff 00 0f 5d 32 37 3f e9 0b 97 cf 1b 3e a2 bf 6b e1 ee 86 00 f4 3f 57 8f c8 d4 a4 3e 72 3a 7f a7 4f ce f4 b9 cb b8 bd 4a 9e a4 c7 af 5f 98 d7 e1 57 b5 e5 6c 06 29 0b 37 6e e8 bc a4 9b b4 65 cf 8f 55 67 83 c4 c5 5a e1 71 fe 34 bb 87 b9 f9 eb f1 f1 f8 eb 53 ad 3d 55 4d 08 29 d0 eb 68 af 2e df 59 0b 23 33 02 54 13 05 a3 7c a0 fb d1 a1 20 4c 0d 6a ab 8d e3 5a d3 2b 64 6b 96 9a 11 d5 04 dd b6 d3 dd 74 1f 4d 5a 72 b2 1f 04 2a 41 24 1e a7 2b 80 19 43 00 64 48 d8 8d 8a 9d d5 87 46 10 47 42 2b 81 bb 7c 5d 50 32 bd 93 d5 bd f5 11 f4 98 75 06 40 39 4c 88 cc 49 04 95 a3 8b bd 6c b2 07 5d fd 39 ae 9c e0 02 ef 72 c2 5c Data Ascii: rv;\'\^U~Lv_]27?>k?W>r:OJ_Wl)7neUgZq4S=UM)h.Y#3T\| LjZ+dktMZr*A$+CdHFGB+\|]P2u@9LIl]9r\
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 48 c6 da 23 f7 88 3e 87 71 f2 af b8 fb a3 13 61 b1 0a 00 bd 6e 3f 5c b6 04 02 18 85 5c 4a 01 b2 b3 10 b7 14 7b ae c1 a3 2b e9 3f d8 97 0f cf 8a 07 a2 89 a4 4b 5c cc 8a 5a 52 30 b8 1c b8 ad 7b 88 62 b5 61 11 04 8f 3d 0c 54 32 d5 1e d5 e2 cc cd d1 99 88 f8 b1 35 e3 13 89 03 d6 bd 6d 3e 13 81 aa 8c d4 5d b8 8a f1 8f c7 46 82 3c ea a4 3e bf 1a eb 6e d1 62 00 dc 98 1e a7 4a 70 e1 1c ac a3 29 7d 4e e4 74 3f e9 4e 4b 3c 54 6d ef 6a 52 2c 8e 5a b7 65 b9 2d 25 c8 69 f3 fa e6 9c b0 98 d5 65 1d d8 27 66 5f 1e aa c9 d0 8f 15 df c2 60 32 9e 27 06 46 c4 11 f5 fc 7f d2 a7 f2 de 26 0e 53 b1 d4 7a f5 1f 1f c2 98 da 50 89 a2 c6 cd 5b f6 df fb 4c 50 c8 62 93 0b b4 3e c2 bf 56 ae c9 7a a1 63 4b 01 99 75 23 a1 d9 87 81 eb b6 c7 71 e9 20 f8 e1 d8 d0 e2 40 20 f5 07 a7 c7 af af Data Ascii: H#>qan?\\J{+?K\ZR0{ba=T25m>]F<>nbJp)}Nt?NK<TmjR,Ze-%ie'f_`2'F&SzP[LPb>VzcKu#q @
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: a2 16 57 52 96 0d 08 b6 7b 8a 61 67 7b 6c 41 06 46 e0 d4 fc 2e 34 37 91 ac 9f 9c f8 83 df 2b 74 b3 0b 83 46 20 90 7d 56 35 13 d6 2a a6 d7 30 e2 13 6b ad fd 68 7f ad c3 1f ae be dd b2 df f3 94 cd 7b ed 8a d9 db 4b af 8d ed 0d 9f 2d 14 e6 3b e5 c0 fe d6 f1 35 f1 ee 85 04 93 00 02 49 f0 03 53 f5 56 15 7f da 36 2d 36 36 d8 0e a6 db 1f 9e 57 02 a8 b9 83 da 1e 32 ea 94 6b b9 51 81 56 54 b6 16 41 10 41 68 2f 04 48 8c d0 41 a9 cd 23 81 b5 d7 91 b1 ce d5 2f f1 be 22 59 8b 6b 2c 49 d7 52 01 d7 5f 3f f5 aa 46 ae ce 6b 91 14 d0 16 c9 3d 23 cb 8a 60 e4 de 06 2e 4b b0 95 53 00 74 2d 12 67 c8 08 31 d6 47 98 2c 78 97 23 41 a0 1a 08 1f 67 87 c0 55 8f b2 ab 6a f8 67 51 ef 2b b0 61 d7 bc 03 2b 7a 6e 27 f9 a7 c2 ab b8 c7 10 4b 4d ab 02 c0 fb a2 18 cf 98 98 1f d6 22 a0 37 24 Data Ascii: WR{ag{lAF.47+tF }V5*0kh{K-;5ISV6-66W2kQVTAAh/HA#/"Yk,IR_?Fk=#`.KSt-g1G,x#AgUjgQ+a+zn'KM"7$
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 0b 89 8b 8b 76 cb 66 c8 c9 9c 06 8f de 5b 6c 44 13 13 99 7e 2a 3c aa 95 f5 0f fe f3 96 fb 8b 7b e6 ad c5 23 5a 03 9b a8 cf 24 a1 c7 71 b8 cb d8 70 2e 0e c5 98 09 60 63 ba 65 22 e2 90 cf 68 b3 02 48 59 21 72 10 c4 36 b3 f9 4f 04 6d 1e cf 0e 62 e3 25 b7 00 14 6c ae bd 8a 5d 01 95 15 7b 22 5a e3 41 06 51 04 cc 95 15 bc f5 83 b8 1c fe d3 35 97 2c 6d 33 76 8a af 94 85 87 40 ac a7 29 d4 a1 49 d4 19 19 a0 57 f2 37 19 b9 87 72 6c ad bb 8c d3 6c b3 cf 73 67 63 95 18 0e f6 9a e6 20 64 23 ac d2 cd 8d ae 65 ae 03 6f 73 6d d6 3c 7c 15 99 24 77 80 24 e1 b0 be 86 fc 47 8e 7f b5 fa 23 25 22 71 2e 68 5b 0f 78 65 17 1a 66 55 c0 95 05 dc 08 0a da a8 7c a4 1c b0 41 dc 11 55 6b c4 f1 78 c3 96 d0 84 06 1a e7 bb 64 78 eb bb 91 fb ab 24 69 b6 f4 dd c1 39 26 ca 20 17 15 6e dc 99 Data Ascii: vf[lD~*<{#Z$qp.`ce"hHY!r6Omb%l]{"ZAQ5,m3v@)IW7rllsgc d#eosm<\|$w$G#%"q.h[xefU\|AUkxdx$i9& n
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 68 24 66 30 59 a3 4d 72 80 00 99 85 50 14 0e 93 24 a5 d9 3b e6 03 f7 04 a6 d7 aa 8d b1 3a 0f ee 36 f2 d5 57 8b 75 2b 01 6a 59 44 4c 90 23 e3 5d 5f 0f f0 ae 9c 3a d1 cc 0f 81 9a 7d ef ee 12 38 2c a3 1b df 03 9a 79 c2 db 00 0a 83 8f c7 41 81 5e ec 62 34 26 a9 ee 9e f7 c6 b1 d1 43 89 e7 16 e5 b3 c7 dd 16 54 38 5e 12 6f 31 bb 88 1a 19 16 ad 6b 08 a7 ab 6d df 23 59 fc 00 11 b8 ee 06 dd 84 90 3b ad a6 59 92 5a 3a 4e a4 46 fe 10 3c 6a b7 07 c7 1e c8 2b 00 f7 a7 bd 33 fd 10 27 49 f2 ae b8 3b 8b 75 9b 11 7c 8c b6 fd db 73 f1 02 3a eb fd a6 df 41 15 ae 63 67 a6 97 11 fa 46 40 0d fc 00 1f 94 9b 99 1d 44 79 e8 a2 60 ec 1c 8a 72 90 66 57 e7 bf c7 4d 0c 53 06 9a 4c 4f e6 75 af 9c 1e cd c3 6c 3b 8d 18 96 0a 06 a8 84 ca ff 00 48 47 86 a0 46 fa c4 9b b8 32 cb 23 50 35 04 Data Ascii: h$f0YMrP$;:6Wu+jYDL#]_:}8,yA^b4&CT8^o1km#Y;YZ:NF<j+3'I;u\|s:AcgF@Dy`rfWMSLOul;HGF2#P5
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 10 64 15 3a 88 ac 93 9b 38 03 2b 87 37 94 76 92 cc 81 74 06 75 86 2c 0f 94 95 e9 e5 ac 7c 3f 39 9c 21 b1 bb a8 c4 1c eb 9a 33 da b9 61 c5 c5 f0 04 5d b7 66 e2 9f de 51 e2 6a bb 67 d4 3d 8e 0d 68 b8 27 31 e1 bb 9e 83 82 b6 db 14 4c 99 a6 56 e4 e1 ea 16 d1 92 b9 62 6e 2a ab 3b b0 44 45 2d 71 d8 80 aa 8a 0b 3b 31 3a 00 aa 09 27 ca a6 70 5c 55 ab f6 d6 ed 96 cc 8d b7 42 a7 aa ba fd 16 1d 47 a1 12 08 35 91 7e 92 3c d8 a9 64 e1 94 76 88 c7 2e 35 93 bd d8 92 d6 ce 1e dd cc a6 50 de 6c cc bd 4f 62 46 92 66 e6 4e cd c2 e3 7f df c7 7f 25 9a 85 b2 17 59 2d f0 df 6c d9 b1 1d b5 eb 58 8e c8 e5 4b 4a 16 e2 da 55 d0 48 53 19 c9 d5 c9 90 c6 4c 6c 05 40 e2 be d4 9a e5 e7 b8 8c 8a 24 32 5a 0c e4 42 80 56 0d c8 74 61 b9 0a 40 cc 09 81 a8 a8 9c 3f da 75 82 f7 53 f5 54 b6 f7 Data Ascii: d:8+7vtu,\|?9!3a]fQjg=h'1LVbn*;DE-q;1:'p\UBG5~<dv.5PlObFfN%Y-lXKJUHSLl@$2ZBVta@?uST
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: ad a4 85 9f dd 00 fc 4d 63 5c f5 80 7b 96 fb 3b 7a 90 bd ab a8 52 5d bb c1 2d a0 8d 49 cb da 5d 88 d4 0f 4a ab ae a7 85 d0 87 38 61 2e 23 9d ff 00 bb 3f 2b f2 ca ea f3 67 3e 49 1f 7e 1f fe 77 f5 b7 3d ca 5e 3f 85 fe c2 de 3a fd c2 97 99 85 d1 76 de 52 c5 0a 15 4c 3d bd 42 82 2d 81 dd 30 55 c3 e8 c3 34 fa c6 fb 4c b2 14 58 4b 26 dc 15 52 e1 c3 88 4e ec 01 00 a0 31 30 24 0d 3a 6d c7 09 85 17 d6 d2 e2 9e e5 bb 20 2d d4 c8 01 4e d9 d4 c8 04 82 a3 f6 7d ad c6 50 ad df 2c cc 74 2a d4 fe d0 39 00 32 fe b1 86 6b 44 05 19 ed 8b 93 71 98 30 0c c3 74 ce 7b ce c0 3f 4e ad 35 4d 2c f1 c9 23 58 7b ba 7d 37 68 24 66 2f 9d 8f 4d 2f aa b7 6d 0b d8 c2 f2 31 66 72 39 d8 68 6d 97 bd cb 53 c1 e2 d8 05 b8 ba 06 1d e1 20 8f 10 4c 68 64 41 91 4d fc 07 8b db 23 2b 88 66 2a 09 3e Data Ascii: Mc\{;zR]-I]J8a.#?+g>I~w=^?:vRL=B-0U4LXK&RN10$:m -N}P,t92kDq0t{?N5M,#X{}7h$f/M/m1fr9hmS LhdAM#+f>
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: dc 3b 0c cf da a7 55 70 26 3c 88 1b f9 91 4d d6 fc 29 8c 62 64 97 3c c5 bd 73 f5 0b ba 1d ab 51 06 a0 58 ea 06 7f 7f c1 5f 39 a3 11 79 1c 9b 8b 70 f8 92 46 84 7e f1 2d 23 d2 92 78 d7 1f 67 61 ae 8b b7 5f af a9 fb 3e 75 ba 71 ae 68 c0 f1 25 cd 99 2c 5e 23 f6 81 cc 23 1f 16 d0 95 6f e7 8c c0 f5 8d eb 13 e3 bc 11 16 e3 2a 5d b7 70 29 12 6d b6 61 a8 07 43 00 1f 09 12 24 1a af 83 66 18 0e 6c 20 8e 3a 79 e8 ac a6 da 46 61 62 45 b8 05 b4 7e 8e dc db 16 ae d9 67 ec da e3 a1 b5 72 03 00 c9 ba b2 b1 03 2d c5 fd 99 79 05 66 65 62 47 0e 71 f6 85 6c 8b f6 5c 5a bc 2e 3e 6b d8 7c 99 59 dd 55 55 6e 35 d1 91 d6 6d a5 bc af de 75 ca 91 05 4d 65 7c 1f 1c 6d c6 5d 23 6a 81 c6 78 72 e2 2e dd 7e d9 6d b8 50 f6 54 a9 3d b3 b3 77 ad 86 04 64 82 5d cd c3 3b a8 00 ce 9e 55 d0 42 Data Ascii: ;Up&<M)bd<sQX_9ypF~-#xga_>uqh%,^##o*]p)maC$fl :yFabE~gr-yfebGql\Z.>k\|YUUn5muMe\|m]#jxr.~mPT=wd];UB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.6	49997	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	503	OUT	GET /Y9BUoMIWfhZDUFZ_MxQmnsgSyb3O8s8Sds65E_j46-vdDSJi_0Xqmoa-fHaQa7fGlw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 7114 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6516 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	722	IN	Data Raw: 52 49 46 46 c2 1b 00 00 57 45 42 50 56 50 38 4c b6 1b 00 00 2f 3f c0 0f 00 4d 28 6c db b6 cd 41 76 77 ed 88 fe c7 90 c1 db de 85 b5 7d fd 77 d7 e8 bd 01 29 92 00 45 dd f0 a5 8e 06 dc 06 20 59 38 8c 24 59 a9 06 97 fc 03 1c 1c be bb 60 71 b0 8d 64 ab cd 82 6c a4 88 88 02 54 85 fa af c7 7b 33 6c 23 db 56 f2 70 77 0d 29 81 fe bb 20 22 75 77 77 e8 7f e8 d3 af 47 9f 3a 2d 7a 04 fa 84 5e 7e 75 ac 8b 5a a4 44 b4 7e c1 e7 f4 f6 b7 d0 a0 e2 27 68 99 02 b1 8c f7 8e c0 84 09 fb 8d ef 4b 9f 56 19 fb cc dd 9d b5 53 c5 0c 1d ef 7d be fb f9 9f 90 7f ce f8 77 de e8 e7 37 2b 57 27 be ed d5 f6 53 ad 2a ba 1f 2d 0e 5a 32 8d 40 9e 5f 79 60 98 e8 6b 5e 89 c4 93 c0 18 06 d2 b6 69 fc cb fe e7 21 22 26 a0 f4 ba 4f 91 dd d0 a0 81 3c d9 b6 ad 48 b2 6d 5b ad 8f 29 73 8a a8 1a 2c 66 Data Ascii: RIFFWEBPVP8L/?M(lAvw}w)E Y8$Y`qdlT{3l#Vpw) "uwwG:-z^~uZD~'hKVS}w7+W'S*-Z2@_y`k^i!"&O<Hm[)s,f
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 89 21 41 29 af 44 ba 22 d9 15 2a 63 0e c0 2d f6 9d 41 02 bd c0 ea 28 21 44 29 c0 52 67 7b 3b 27 a7 4d 55 91 95 00 52 26 48 4f e3 01 6e e7 ba c8 1e 96 d7 8e 5e 6b b3 c6 ff 3c fe 4b cf 7f 15 48 a9 57 80 80 57 40 00 e9 e3 79 aa fa 41 46 ca 24 ea 6c ee f8 f9 8f dd fa e4 03 7b 2f 5b 53 0f 26 bf 28 2d db a3 be 38 c9 d0 85 01 b3 04 90 01 db cd cb b4 3b bd 99 95 ba d3 d1 ba ca 06 15 19 00 26 15 bb 95 db 48 3b ab f1 ed ec c2 b9 9e fc d1 c3 2d 3f 3d db 69 81 cc 80 e1 28 d0 f0 ff 49 15 df 77 1f cf 7e 98 a1 e6 ca 33 ee fa cd b7 bc f3 a7 de 77 c0 b7 7e 67 b3 1f bc 3a ce 6c c1 4b ff f1 c8 fd c7 ef 7e fa f0 75 7b f2 b4 bb a4 52 41 72 20 43 94 63 d8 4c b7 ab 37 0c 9b f3 ad 09 0d e3 ac cd 6a 37 08 89 c2 82 80 74 14 c8 6b 8c a7 e1 ea e7 27 b3 38 9d de 5b 01 a1 40 02 8b 0a Data Ascii: !A)D"*c-A(!D)Rg{;'MUR&HOn^k<KHWW@yAF$l{/[S&(-8;&H;-?=i(Iw~3w~g:lK~u{RAr CcL7j7tk'8[@
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 6b ce 1b 36 c2 1d 99 c2 10 6d 68 93 1a 95 16 dc 12 18 c8 4a 5d 50 93 cc d6 2b dd 43 f2 bc 95 f2 86 6b 7e b7 ed 53 df 57 a7 bf 77 d9 79 af 81 ae 0f f9 f1 7d f9 0a da a3 fd cc 8f cb 4d af 20 dc e7 3a 12 94 40 12 01 b7 85 c2 90 41 d6 41 27 00 d8 79 f1 cc d1 bf 5e fd 9f ef fc 40 79 c8 0b 0f f8 49 ee 6f 63 8e cf 25 01 b1 13 94 83 b6 dd 68 a5 e7 b6 78 c0 e6 d0 34 16 cc 15 88 00 32 b3 f3 f5 da 55 e5 d0 41 ce 8f a0 79 95 32 bf c6 80 3b ba 7c f3 49 3e 39 d0 5c 3c ce 4d 0f 81 21 6a 82 ad 1b 12 c9 10 e6 16 8a 80 3c 29 15 89 24 19 81 20 f8 78 32 3a fe fb 3b 27 fd ea 2d ee 7f c1 ed 37 2f f7 bb e6 da 75 9f 89 85 36 19 14 c8 6c 1b c5 04 2a 58 b4 54 08 42 94 68 17 22 4c a6 12 09 86 9a 2b 8f 24 06 12 6c 6b e8 68 59 59 4b 9d b8 55 be f3 7a a2 e1 39 48 00 02 89 04 02 32 28 Data Ascii: k6mhJ]P+Ck~SWwy}M :@AA'y^@yIoc%hx42UAy2;\|I>9\<M!j<)$ x2:;'-7/u6l*XTBh"L+$lkhYYKUz9H2(
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 36 47 e5 45 ba fa 7d 5f fb 21 57 be 11 d7 ea fe b3 cf 58 f2 f0 b3 0f 8f 21 04 e6 f4 50 c8 d9 03 b2 09 51 01 39 15 39 34 8f 3c e9 4c 5e d5 6f 22 9f 73 90 6a d8 04 66 8e f9 02 af e5 19 08 00 10 d0 99 b1 d9 ca da d5 67 74 01 07 0b 80 11 10 91 6d 18 00 5b 27 22 02 24 6b 1b 0e eb 6b 6f 5f 9b 4f d5 9e 0c 9a 67 66 26 09 4a 30 80 10 ca aa 13 f5 57 8b 1d d5 11 e7 ff ed fc db 8d 9e 7b f1 3d 8e c1 40 34 d1 ad 2c 42 10 9e 64 c2 5d 4e 55 2a ea d0 34 b5 2f ef 8d 37 bb 01 98 53 6a 82 75 68 4e cc ed f5 fb bc 06 2c 80 00 53 15 6e fc f4 e8 ee e3 fa a7 9d 25 96 8c 87 2e ad 07 d7 7f 58 07 47 57 a1 cf c2 ea c8 e5 f4 48 0b 07 15 28 00 c1 e5 c3 7b ae fb c8 fb dc b8 fb 6b 47 36 c5 85 5c 6a 69 64 0a 72 c6 b8 3c 33 86 44 96 2d 84 cf 05 53 20 50 44 3d 79 e3 bf 59 7a e8 b5 3e 7f 54 Data Ascii: 6GE}_!WX!PQ994<L^o"sjfgtm['"$kko_Ogf&J0W{=@4,Bd]NU*4/7SjuhN,Sn%.XGWH({kG6\jidr<3D-S PD=yYz>T
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 12 d4 1e 14 1a fb 26 c8 58 57 79 11 52 d7 cf ee 3f 72 ee 23 cf 2b 9b 7f 3b 6d f2 57 17 d4 e3 e3 14 05 fd 66 9b a8 b4 10 1e ae bd fc b5 9f 3c 7a 71 dc 55 88 f6 ba af f8 93 ee 6d 3f bd ef 2f 67 3d 83 10 22 15 26 0f dd 18 e6 57 ff de d4 bf 3e 74 55 9a 8b 16 91 6d 29 11 a2 49 10 cd a0 69 00 85 b0 65 0c 6d 1b 4e 65 ca 0e 4c 0e 57 10 1d d4 01 29 a4 f9 db 91 a4 98 ea eb 5f c8 67 e6 13 4c 34 c1 83 00 82 1e 9b cb 9b d5 e1 fc d8 c5 37 3f 5c 8d bb ab 27 3f 53 9d fd bc 85 d1 b8 d4 ad d5 f6 b9 0b c7 a9 25 2c 94 fb cb 6d df 7c 3c 76 15 23 04 7f 77 fd a5 6f 75 75 f9 07 07 80 84 94 37 ba aa fa 85 e7 b4 5e 49 2c a2 65 02 b2 08 58 a8 96 30 59 80 42 14 84 99 d5 84 8f d0 7a d9 4d a0 9a dd 54 49 6f b6 45 34 c6 ee 98 bf 4b 6b 90 62 7c 77 14 7e 81 01 8a 34 28 30 68 7a 72 9a ea Data Ascii: &XWyR?r#+;mWf<zqUm?/g="&W>tUm)IiemNeLW)_gL47?\'?S%,m\|<v#wouu7^I,eX0YBzMTIoE4Kkb\|w~4(0hzr
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 74 13 d9 87 67 d4 c4 c2 28 17 21 47 20 81 40 e0 21 9e fa 24 48 14 49 40 20 02 22 90 cd 4a 49 06 08 04 60 01 05 08 11 72 55 54 e0 41 cd 68 a2 51 90 73 a4 50 02 a6 42 16 48 ed 75 bf d7 d5 a5 4f a3 4e dd 3e 36 ea 52 38 c8 ec bd 62 3a e3 ce 75 5b 73 56 cc 55 e6 51 f5 d0 38 df 14 6b 42 2a 51 50 13 7d 37 8d ca 38 04 33 6a cc 10 00 24 10 19 09 01 83 0e fc d4 a5 4c 40 0b 0a d1 a2 20 c9 54 4a 61 0d 09 20 28 24 59 a0 42 21 22 40 68 68 fc d0 a1 ce fc 68 30 45 82 cc 22 97 31 dd cf a4 d7 1d 36 f6 e9 f2 b8 6f 36 ea 2c 7a 00 c6 1c 53 47 9a 99 cc fb 57 62 32 68 7c 18 dd bd da d9 ed 29 71 70 2d 36 9f 85 8a 24 16 d1 96 b1 57 a5 85 69 4a 32 05 01 22 48 b2 84 24 ce 9d 79 52 35 48 28 48 11 41 22 0a c0 90 9d 82 60 01 10 92 60 49 c8 b2 ac 76 1c 6f 70 5a fd bc 73 01 4c 60 02 0d Data Ascii: tg(!G @!$HI@ "JI`rUTAhQsPBHuON>6R8b:u[sVUQ8kB*QP}783j$L@ TJa ($YB!"@hhh0E"16o6,zSGWb2h\|)qp-6$WiJ2"H$yR5H(HA"``IvopZsL`
2024-04-19 14:06:45 UTC	117	IN	Data Raw: 4a 42 8c 49 b1 09 90 aa 1c 4c 81 14 52 32 60 12 5c 51 06 16 20 03 09 86 8d 14 34 66 dc e1 cc 8e f9 3f 99 cc b2 60 01 91 01 0c 88 aa 24 33 29 92 5d a8 82 89 50 48 c9 48 4e 26 bb 64 24 c7 8c ec 22 30 cb 34 1b 4d b2 23 0d 92 5c e3 1e ab 0d 91 12 24 84 20 29 05 05 c4 98 fd c1 34 42 2d 44 30 0c 1d 99 47 52 31 32 31 31 50 1b 73 a5 43 2c 68 70 0e 9c a0 02 Data Ascii: JBILR2`\Q 4f?`$3)]PHHN&d$"04M#\$ )4B-D0GR1211PsC,hp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.6	49998	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	517	OUT	GET /csiz76udPjXmaJddU_1sanHGlQAAbKkvlprK3DSUNmwu1nY3U6qnXRrI2IDMaivooYK1x11oxz3PEO4z=s16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 194 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:04 GMT Expires: Sat, 20 Apr 2024 11:17:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 10181 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	194	IN	Data Raw: 52 49 46 46 ba 00 00 00 57 45 42 50 56 50 38 4c ae 00 00 00 2f 0f c0 03 10 05 dc 6c db 8e 3d f7 10 d9 24 43 24 2d 57 60 97 de b6 ed d4 9e c0 b6 6d db f6 55 3c cf b7 43 c4 91 ff 27 00 f4 6f f7 8f bd 93 24 68 b7 b7 0f a9 aa cd 69 3f 4e ce aa 81 e6 a8 06 87 ed f8 9d 24 bd e4 23 df 93 7f 4d 5d 87 5c 5d 53 07 9b 8d 4e 44 55 d5 a4 86 8e ff d9 e4 0f ca 3d f5 b7 59 ef 64 dd 4f 72 f5 49 b2 7f f8 d2 e3 47 6e 4f 5c f6 ff f8 b4 aa e5 c9 c1 c5 33 9f d4 d0 2f d5 27 99 77 e2 4c 55 66 3c 1d d9 9c 26 53 2e 7f ac 19 4f 6b 69 d5 a6 eb 49 72 e9 cb 8e f3 27 6a cc de 17 69 41 b2 6f f2 f1 1f e9 03 Data Ascii: RIFFWEBPVP8L/l=$C$-W`mU<C'o$hi?N$#M]\]SNDU=YdOrIGnO\3/'wLUf<&S.OkiIr'jiAo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.6	49999	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	505	OUT	GET /LByrur1mTmPeNr0ljI-uAUcct1rzmTve5Esau1SwoAzjBXQUby6uHIfHbF9TAT51mgHm=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8002 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:16 GMT Expires: Sat, 20 Apr 2024 11:17:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 10169 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 3a 1f 00 00 57 45 42 50 56 50 38 4c 2d 1f 00 00 2f 3f c0 0f 10 4d 28 6c db b6 8d 21 ab 4b 6a 44 ff a3 0a b5 fb d6 f5 8d 79 b9 a4 66 66 b2 16 29 37 82 44 89 48 60 f2 7f ba 89 50 74 c1 a0 91 24 45 7d 77 ff ef 5f d8 8b 60 66 e6 d1 c1 b6 91 24 45 6d 9d 2e 80 7b b4 18 f2 b7 3f 98 d3 5b cc 8c 62 d8 36 92 a2 f9 fe 7b 7c 1d 33 d3 f3 ab ff 01 c0 83 cd de e8 7c 23 7e 60 24 c0 03 1e f0 cc c4 5d 15 23 cc 89 f7 12 4e 42 04 3c 90 5d 01 43 e3 b9 21 35 13 34 01 e0 09 bc 83 73 0d 10 48 43 4d c4 88 b8 11 1f cc ac 3c 3e b6 6f 35 13 24 7a f9 c2 cf 5a 23 fd 65 cc 0f 88 3d e3 5b 54 5e 6c 53 e1 a6 79 42 05 0a e4 f8 f9 24 e9 e1 de 11 e5 19 2b 3d 2e fe 8b d2 b0 8e 7b 69 56 e6 50 d0 b6 0d 13 f3 a7 bd 43 21 22 a2 a0 26 79 f2 69 36 82 6a b6 ff aa 2d e7 b7 86 99 19 dc c4 Data Ascii: RIFF:WEBPVP8L-/?M(l!KjDyff)7DH`Pt$E}w_`f$Em.{?[b6{\|3\|#~`$]#NB<]C!54sHCM<>o5$zZ#e=[T^lSyB$+=.{iVPC!"&yi6j-
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 7f 77 60 a0 bf db 1d 70 60 10 82 98 13 72 62 c3 20 1c 1e b4 df 6a 78 2c 7e 18 e1 b2 d1 bd 6c 34 36 59 95 dc b5 d2 d9 29 1d 65 49 cb c1 c9 c3 e1 aa 4e 2c 9d fa a4 75 49 d4 45 4f dd e9 1c b5 eb cf 6f 5e f4 4b af bd f4 b7 5e 00 0a b8 29 e4 fe 88 22 59 5c 04 91 39 5a 8e ec e3 c1 c1 c1 1f 20 06 32 07 04 58 dd 6e bf 90 4a d2 44 1c c0 ac ac 73 8d 8a 41 db 1e 1e 8c 95 84 bf 3e fd 89 e7 1b 36 e9 c7 c3 fc 25 cf cc 5e 9d b0 1b 8c 51 b8 e7 12 73 d1 d5 26 4c 3e 2d f3 c3 a8 44 38 d3 1b 77 fb f0 d7 6c f6 a0 fb 4e 3a f3 b0 3d 3e fd 9c fb 79 c1 29 6c 20 70 53 71 85 41 2f f7 7a bf 3b 42 09 9a a4 2a 24 01 9c a4 90 46 51 48 aa 54 46 47 73 73 db 7e f5 b7 8a a6 0c b6 0f 3b ae 7d d3 89 f6 e6 67 00 c1 a7 0a d0 91 a1 12 44 34 66 d3 67 73 82 03 a6 82 21 e9 a1 d6 53 15 57 04 3b 0b Data Ascii: w`p`rb jx,~l46Y)eIN,uIEOo^K^)"Y\9Z 2XnJDsA>6%^Qs&L>-D8wlN:=>y)l pSqA/z;B*$FQHTFGss~;}gD4fgs!SW;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 07 58 43 23 ab d5 02 f7 73 d5 77 54 b4 09 04 d5 d3 c3 76 0d 42 65 5a fd 54 ad 20 75 bb cc 64 e3 d4 b3 19 25 76 3a 81 39 10 9c 40 4d 8c dd a9 8e d3 ba 9a 5c ab 0b 68 83 89 7c 0d 11 13 63 e4 4c 8d e3 56 67 9e f2 97 95 c4 88 18 88 54 27 b7 8b 5c fe 50 ce 3e b0 26 0c 48 07 a4 f1 af fb 69 84 8c 50 28 a7 83 7b 2f 07 38 02 13 90 58 02 e5 e6 48 0e a7 87 a3 06 d5 4a 21 38 1d 15 b6 bd de 8e 74 90 9f fa a1 b2 c7 00 dd e5 10 df d8 86 42 5b 34 db 0f 8f d6 a7 87 4b ea 18 85 44 52 35 50 89 e4 8d a7 0c 8f f7 17 ab a7 5c 74 e8 b2 c9 36 09 46 01 c6 11 67 2d e0 18 09 7d 40 53 c5 88 60 96 21 a6 7a 2d 80 8c 50 38 03 04 60 9c 7b 1c 61 c8 ad b8 8e 43 d4 74 7a 5d 1a a9 08 a4 61 bb bc 90 c2 ab db af fe ea b6 1d 95 e6 a5 be f0 1f 07 23 51 3b c5 b6 36 c6 8d 31 eb 44 17 3b 8a d9 f0 Data Ascii: XC#swTvBeZT ud%v:9@M\h\|cLVgT'\P>&HiP({/8XHJ!8tB[4KDR5P\t6Fg-}@S`!z-P8`{aCtz]a#Q;61D;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 9a 80 9f 32 1a 35 97 d3 d1 e5 9e b1 d6 f3 0e 76 e4 ae ad e7 7b 37 d0 ac bb db 28 81 84 19 a1 5c e2 35 b2 c7 dd e7 1e ee 1e 9f 4a 7c f3 2f bb 3d e3 5b 7b fc 68 fe f1 b9 2b b8 41 a7 52 bd fa f8 c2 eb 5d fe 24 4b 47 dc 85 fe f6 1e eb 85 1e 01 64 26 95 41 62 10 bc 60 20 e8 bd 34 77 7f 79 af 16 03 2d f4 97 1f eb 5f 84 6b 71 c4 63 20 68 12 c9 9d f9 ed 54 89 48 84 ac 0e 1e 87 75 2f 5a c2 d1 be a2 eb ec 55 ba 5d 87 46 81 1d 8e ad 5d d6 b9 ec 4e 97 ef 6c ae 66 6a a7 b7 b5 ed c8 68 d3 ca d4 87 4e 05 2a 44 24 97 8d 3c 64 2a d3 89 ff da 78 c8 c1 1f a7 be eb 53 b7 1e 6e df e2 21 5f 2b 5d f6 60 33 e3 bc c9 62 b0 f0 8d 56 d7 a3 4d db 9d 46 ed 51 6f ca 43 d0 03 b3 6c 26 d9 11 34 6b 32 b8 c9 37 ef 94 51 34 f6 ef e6 af 2f 9b 95 7a 61 a4 a5 29 91 56 63 68 cf 04 dd c0 07 d4 Data Ascii: 25v{7(\5J\|/=[{h+AR]$KGd&Ab` 4wy-_kqc hTHu/ZU]F]NlfjhND$<dxSn!_+]`3bVMFQoCl&4k27Q4/za)Vch
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 94 60 4d b1 11 83 5d 8f 83 3f 08 c8 08 32 03 74 62 7b 02 97 ab e4 27 26 ca 3b 4a d3 0b 2f fc d4 6e c7 5c 2c 2a 49 ae 60 77 2d 7c a9 e9 6b 46 08 b4 0e 66 ee ea 37 e7 ce 5a 3b f9 b0 ea 7b 66 ae ab 73 b8 4c dc 4c 3d 19 16 e2 bb c7 3b 56 d7 28 a4 c6 0a af ae 3b 90 c5 67 99 d7 b0 65 d9 5d f6 bf 8f 38 8b 0b 9c a9 da 54 30 8b 5e a7 36 dd 59 08 8f 93 4d 62 f3 6f e2 6e 85 20 31 a0 7a c0 a5 45 7e 17 8d cc 54 0e 88 dd e1 aa ae 0a 9d 98 0e c4 c2 4f fa 10 5e b1 1b eb c0 8b 62 a8 c3 18 ce 09 17 af 18 0e ba d2 b0 d7 e2 8a c7 29 f7 f8 e3 e5 fb 24 dc d7 2d 9e cc b6 0a c8 83 bc a5 73 9e 2a fd c0 37 cf 8a e5 c0 a5 a4 d3 12 c3 a8 79 74 ac bc 68 88 6a 3a 0b ea a5 c8 e0 cc 52 2f 63 f9 33 bb f0 89 f3 fc fc 6e 28 4f 77 54 71 e3 e0 32 bd 01 98 93 52 89 fa 61 55 bc f0 54 27 f4 cd Data Ascii: `M]?2tb{'&;J/n\,I`w-\|kFf7Z;{fsLL=;V(;ge]8T0^6YMbon 1zE~TO^b)$-s7ythj:R/c3n(OwTq2RaUT'
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 02 e3 cc b9 c8 ea 77 b5 7c 0b c8 4c a0 a0 c8 53 5e d8 bc 8b 5b ec b0 40 10 3b f2 ae 2b cc 9a b0 0a 4f eb de 29 38 27 05 5c 2f 59 de 36 dd 01 9a 52 c9 54 5f ca 1a b2 38 91 4c 27 19 85 89 27 d1 89 82 11 0e 1b 35 55 68 e3 5c 11 a7 5c 24 74 f7 e5 4e 0f f4 17 cc 54 4e 14 e7 ac eb f2 ac d4 93 09 4b 8f 3a f1 06 0f 82 e6 5b 5c 74 c0 6b 86 4d c1 31 31 d3 43 24 ce 46 4f 1c dc f5 9a db f4 45 5d d8 cb 65 66 32 0b 2f 34 da 9a af 6c 5c ea 7b 81 1d 72 14 23 00 2c ef 94 a5 3b 73 a6 f6 cc b0 87 3a 45 63 77 3d 0d b4 64 44 bc 83 7e 35 c9 5c 31 24 9f 3d cd 48 0e e7 14 a4 27 39 69 5d 11 49 cc ae 07 cc 34 6f ac 3e df bc 68 fc 88 48 62 7f 54 dc 8a a3 c5 de d2 c8 bf ee e4 d6 c7 9f b4 db f4 39 ed a9 e7 b2 50 34 0b 05 ad 38 03 45 a5 bf cd bb 6f fb fb dc a1 4b 22 02 e1 a1 ba a9 bf Data Ascii: w\|LS^[@;+O)8'\/Y6RT_8L''5Uh\\$tNTNK:[\tkM11C$FOE]ef2/4l\{r#,;s:Ecw=dD~5\1$=H'9i]I4o>hHbT9P48EoK"
2024-04-19 14:06:45 UTC	1006	IN	Data Raw: 8e 5f e0 08 08 72 e7 4b 53 f2 af 06 be 0e e8 2b 87 07 3d f6 41 23 9c 5b 81 0f 1a 86 9e 23 21 6e 0c f8 3a 22 4e a8 00 41 cf 05 e6 c3 ad dd b0 d2 ee b9 09 56 c1 a7 b4 8b 2b 4a d2 2e 7e 4f d8 fe ec 46 40 0a 92 23 4c 22 ec e9 9b 1b 2c 1e 4a 3b a2 a8 6b 17 c3 53 9b 4d fb fd ef f1 6d c3 b6 54 0c fc 95 3a e8 c7 1e b9 0b 05 cd 02 58 93 2c d3 1b 50 e1 fa b3 6f 3e 40 88 31 a4 22 39 b4 1a 28 9a 6b 1f 23 ff ad cb ac 7d 78 c0 63 cb d3 f0 1c dd 6f 58 39 7f 69 64 08 81 75 92 00 04 72 c1 00 7a 66 0d b3 1e a3 9b 61 e3 d2 b8 b1 d6 eb a8 6d 82 a3 60 e1 45 bb 45 ff b8 03 6c dc b6 a6 03 42 e7 79 a6 21 8a c2 87 25 4f 6d f2 b8 50 77 73 ac cc 50 77 81 1b 6a 27 22 ec f4 58 bb 36 2c 50 fc 94 33 f2 85 19 41 0d ab 19 7c 94 05 66 d3 63 4c 5c 70 02 60 31 00 20 4e ee fe a6 d1 4a af 6e Data Ascii: _rKS+=A#[#!n:"NAV+J.~OF@#L",J;kSMmT:X,Po>@1"9(k#}xcoX9idurzfam`EElBy!%OmPwsPwj'"X6,P3A\|fcL\p`1 NJn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.6	50000	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	503	OUT	GET /c15fVxquhZ_LO5jPc-f2nYpz-EHvphyniI4JCKG8hYd-yXkhq5k4WpSJMu-M9S3vIA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4790 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:18:09 GMT Expires: Sat, 20 Apr 2024 12:18:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 6516 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	722	IN	Data Raw: 52 49 46 46 ae 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 65 12 00 00 2f 3f c0 0f 10 4d 30 6a 1b 49 52 d2 f3 1a a5 f9 13 de 03 43 44 ff 27 40 fb 7b ce c3 e0 51 dc 42 b4 d9 84 98 45 95 d9 cf 85 9a 36 92 1c 43 78 fe b8 1e 46 ac 63 b5 20 d8 36 92 a4 a8 0e a3 80 ff fc 03 7b 7b cd 67 11 64 db d4 e1 fe 6e 33 79 ff 27 00 00 74 88 2a 55 ca 82 00 38 d4 31 b8 35 2d 11 b6 96 dc 47 d1 17 00 f8 a9 00 38 01 02 b2 9d 37 0c a4 6d 93 fa b7 bd 5f 43 44 4c 00 64 76 9c 55 68 3f 28 5f db d3 fe 1f 92 25 65 56 f3 78 6c db 5a db b6 6d db 57 b6 6d db b6 75 67 db de e3 33 9e c6 9c ae ca 8b 3e fa 13 de 8d 1c 4f af d5 f1 b9 f8 c5 d8 ac 88 5f 6c 7c c6 76 6d e4 da 56 4e d4 5a c3 13 21 c5 b6 b6 65 cb f6 85 bb 0f c0 32 dd 1a 8b 69 30 03 22 0d Data Ascii: RIFFWEBPVP8X??VP8Le/?M0jIRCD'@{QBE6CxFc 6{{gdn3y't*U815-G87m_CDLdvUh?(_%eVxlZmWmug3>O_l\|vmVNZ!e2i0"
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 63 0c 96 a1 8a 6e 60 cb 0e 32 23 c3 64 0c f0 cb 76 70 1b 00 e4 05 ce 91 40 42 42 80 98 aa 83 6c c0 18 63 cb 60 30 dc 00 2a 71 0d 4a 02 00 b0 20 f2 70 8e 19 6f 05 c0 80 e9 1f 6c 63 eb 6f 43 13 62 b2 65 01 43 2c 04 0d 09 ae 6d 09 a4 90 d3 eb e0 33 8e 1a c0 00 06 6c 63 fa 1f 07 c0 dd d7 b9 4c d5 4c 18 ab fa fe fb bf 71 c7 af 9c 63 ca c6 d3 27 1b c0 60 c0 d8 c0 71 00 b7 5a 46 93 37 e8 08 d5 4a b0 18 4c 87 41 00 c9 41 8e 47 c1 c1 cc d8 90 83 c1 15 60 c0 06 e1 a1 a8 1b 78 fc c8 ed 2f 9a d6 e7 bc 02 37 1c 92 06 1b c4 ea 6e 19 77 08 cc 41 22 ce 99 e1 3d d8 97 80 ed 01 81 c1 b2 3d 10 02 1c 72 52 51 db 55 db 1d cf ca 4f 2e d8 ec c9 2a b6 8d b4 56 17 6d ad 8a 9f ec 9c 78 d6 9f 35 67 3b c5 b2 30 44 0d d8 60 00 41 30 03 36 02 34 c1 1a 63 76 44 55 6a 83 33 fc ae d7 f8 Data Ascii: cn`2#dvp@BBlc`0qJ polcoCbeC,m3lcLLqc'`qZF7JLAAG`x/7nwA"==rRQUO.Vmx5g;0D`A064cvDUj3
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: e4 8d 49 80 69 bc b5 45 45 98 f7 07 8f bb 16 bf c3 ef 8b 5d 95 67 5c 2f 3f e8 7b 77 d6 7b 93 86 b2 79 34 1b 46 b3 f1 85 80 95 e4 80 10 4c 32 29 7a fd f7 4b be fc ef 8c aa 41 f2 b4 67 7b c5 de 19 89 c1 cd 24 45 e2 6c 24 5b b2 36 89 24 25 a4 4c b6 d6 f2 fc 53 86 a7 13 67 11 bd 74 8f ed 9b 3a 8f 0a 4f 40 bb 7a cf e7 2d e7 fa f6 ee 98 0f 1f af c8 97 db a2 8b be 8f 5a 23 5a 0b 07 6c 9e f6 c5 94 c8 62 b1 68 60 82 f1 93 29 ce e2 b7 7d b8 ca 51 ab d7 3a 65 89 d6 8b af 3a 1b b6 ee ea a1 2b af 39 f8 ba 85 e3 4f 5f 6a 4e 25 d5 4b ca d5 c9 73 ba d8 34 ff 4f d4 5a 9c b5 a3 13 5d 4c 3f 36 ac 5a 7c 48 55 a7 20 b3 62 23 5a 41 46 c9 05 9e 30 27 4d 89 52 fe 1c e9 56 ba 27 5f 34 67 87 bf e6 cd 0d dc 8a 4e f5 d9 ef 6b de 72 be ea e1 eb 4b 44 c0 01 dc 18 fd 60 eb b4 8f 3b 97 Data Ascii: IiEE]g\/?{w{y4FL2)zKAg{$El$[6$%LSgt:O@z-Z#Zlbh`)}Q:e:+9O_jN%Ks4OZ]L?6Z\|HU b#ZAF0'MRV'_4gNkrKD`;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: a8 b6 aa 89 1e 90 0c b3 ee fd aa 09 13 eb c2 2a df 11 e7 a4 90 c0 05 71 16 03 d9 3a a0 51 d1 0c a4 d8 74 d8 45 d3 a1 0d ab 16 15 27 2e e9 f3 fa 96 3a bf 6e 08 ef 1b c2 62 81 b6 6b 93 79 73 32 6f 02 6d c2 b2 86 9a 6a c4 28 49 18 fc f2 d2 3d 2e 58 77 c4 49 0b e5 d5 de 24 af f4 ce 33 e1 b5 bf e2 36 a5 1e 98 4a 41 54 df 56 52 1e 14 a2 48 08 fd 3e 73 1d bf 19 1e f4 fc a4 f8 f6 5e 65 91 c8 0a f1 08 c0 3a a8 24 2a 28 49 4a ba f4 67 f4 c5 3e ef ba 4a cf 24 c1 0b 24 fa 89 89 04 f4 31 9e 20 4c a5 0e a8 0b a8 27 0f e5 c8 d6 36 56 e7 d7 15 a1 83 c3 b0 29 1d 03 55 95 6a 50 12 fa 00 42 0a 4d 12 06 be 30 bb d1 f7 5b 2f 3a fb 87 bc 43 d3 c5 e0 19 5e 08 ee 49 5d 6f a0 58 55 76 f4 3d 9a fd d2 bb ce b3 43 ab 3c 33 29 ee 87 26 5b 15 12 41 c6 fc 10 fc a6 5e 43 86 06 c9 7f 7a Data Ascii: q:QtE'.:nbkys2omj(I=.XwI$36JATVRH>s^e:$(IJg>J$$1 L'6V)UjPBM0[/:C^I]oXUv=C<3)&[A^Cz
2024-04-19 14:06:45 UTC	303	IN	Data Raw: 9a c6 04 90 83 48 c3 88 52 6f fc f8 c7 8d c6 a2 65 5d 7c 67 48 98 07 27 44 97 83 33 cb 68 bb 16 0a a5 ff c9 06 50 6c 36 8b 66 33 54 21 f2 62 d0 6d ad b2 91 85 21 ad ae 46 61 2c 1b b0 ac a4 1c 38 33 78 69 7c 14 cd 62 fb 75 82 72 e4 b2 0c 79 10 59 19 88 15 95 84 2c 43 da 2a fa 13 55 d0 50 70 6e 0e 6e 13 75 00 0b 03 c8 51 1d 98 19 9b 8d 18 72 c5 50 da 76 08 98 1f a8 55 25 42 07 48 52 a1 18 0b 2b 06 e7 18 08 18 cb 08 84 84 28 82 73 db 79 88 0e 36 01 83 33 4e 8b 41 3a 70 c7 28 21 c5 58 10 8b 88 1c ca dc c1 c8 12 51 08 11 1c 20 04 85 e0 60 6c cb b6 bf 9c e8 6e d1 97 10 76 ac 88 03 a3 a4 88 88 8a 45 34 a6 bf fb 03 12 21 28 58 86 3c b7 8d 91 8d fd ef a4 95 31 5b cc 2b 31 3a 49 ec 79 a0 14 11 91 28 22 31 4a 42 42 80 32 60 db 10 ac e0 10 82 03 36 18 d7 e4 a6 9a 1a Data Ascii: HRoe]\|gH'D3hPl6f3T!bm!Fa,83xi\|buryY,C*UPpnnuQrPvU%BHR+(sy63NA:p(!XQ `lnvE4!(X<1[+1:Iy("1JBB2`6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.6	50001	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:45 UTC	505	OUT	GET /z950eFx-wowoAV2KgHast5YFcrxoGJtY18fYd_eMgvEDVn8_tsJwApy4Dbs1iqE2tAjX=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:45 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8086 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:04:21 GMT Expires: Sat, 20 Apr 2024 11:04:21 GMT Cache-Control: public, max-age=86400, no-transform Age: 10944 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:45 UTC	721	IN	Data Raw: 52 49 46 46 8e 1f 00 00 57 45 42 50 56 50 38 4c 82 1f 00 00 2f 3f c0 0f 00 4d 30 68 db 48 92 94 dd 7b 93 e1 0f 78 49 44 f4 3f a0 e0 1a 2c 8c 30 90 12 94 3c 4c 2e e0 08 9b c6 8f 36 b3 60 14 49 b6 93 29 14 70 c2 bf 28 04 0c f1 94 73 7a f5 75 b0 8d 24 c9 49 ff 23 2c f2 8f 8f c2 c4 d2 fa ea ca 75 24 db a6 b5 af ad 7f e6 9f 06 d3 98 8b 67 db af fa 1f 42 4b 75 aa 44 80 1e a0 e1 80 0b 69 a6 26 e5 c8 86 80 a4 08 92 bd b6 03 19 fa 61 19 6e 40 f3 e4 77 55 f3 c0 23 79 22 42 44 45 2a 41 84 bd e5 f2 ca 74 e3 02 20 95 e7 cb e6 6f f8 12 b6 00 7f 20 97 ed 1b df ab d7 07 9b e3 95 00 88 92 49 72 d2 cb 23 35 f2 97 01 67 83 f7 6d bb 55 bb 6d fe ef 1e 63 2e dc 6b ef 2d 69 8b 2c cb 1c 4e 0c 65 66 66 66 66 e6 f6 1d 3c cc cc cc cc 0c 65 6e c3 1c b3 1d a3 2c c9 e2 0d 0b e7 1c e3 Data Ascii: RIFFWEBPVP8L/?M0hH{xID?,0<L.6`I)p(szu$I#,u$gBKuDi&an@wU#y"BDE*At o Ir#5gmUmc.k-i,Neffff<en,
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: f3 f8 fe 17 9e 0a fb 91 79 ae 61 28 a4 84 41 eb 3a 5b c5 42 9b c3 33 9c 39 c3 b2 ca a1 f2 fc 2e 5e f5 02 e1 59 f2 43 7b c2 6f 67 fa 77 39 ff a4 22 88 48 51 04 50 00 78 05 56 79 28 00 0f c1 fd 92 64 47 e8 f0 ff 9e 8b df 74 f2 e9 9f be b2 f3 db fe 79 d3 27 de 71 f1 6f 05 39 0c 64 40 41 04 1e 04 00 5c 50 a4 b7 cd 53 f7 c9 26 25 70 51 5a cd e1 95 4f 71 dd 35 4f 44 5f 43 cf 72 6d df a8 65 0c 01 36 64 cc b9 2b 38 e2 50 29 00 d1 40 17 e9 8d 04 7a 18 d5 9f dd 75 f2 fe ac fc aa 4a 30 62 08 24 02 90 8a 15 15 18 54 81 00 d8 86 82 43 cc ff f7 86 be eb 87 56 37 fd 4a ee ee 12 cf a4 d5 7b 92 f6 bb 2e f7 fe 2f b7 21 85 05 08 db 88 90 03 86 36 28 fc 0d d3 3e ad e1 98 b4 54 03 24 3a 6f fd f2 bc 4e ed cd bf 74 57 e7 01 78 af e3 8c 56 a7 0d 88 2c 97 86 82 f9 16 ce ad 31 3b Data Ascii: ya(A:[B39.^YC{ogw9"HQPxVy(dGty'qo9d@A\PS&%pQZOq5OD_Crme6d+8P)@zuJ0b$TCV7J{./!6(>T$:oNtWxV,1;
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: a4 88 06 64 41 5a a6 40 90 61 12 58 25 66 84 a6 d2 3a b6 75 90 07 0e f2 0c d8 fe 79 98 41 8c 01 0a 6a 20 a1 fc 02 88 3d 62 9b 59 c0 45 57 7f df e5 ff bf ef f0 9f 4f e4 af 7e a0 61 3e b6 f9 13 a2 f5 5d c6 4e e3 cf af 0d d6 39 18 ee f1 b9 ee 5e ff 60 7b 65 1d 37 41 1e b4 8b 5a 33 da d6 fd 17 31 71 3b db 78 9f 1b 14 00 d3 a0 cc e8 2c b6 e7 f8 ec f0 0b e2 8e fe e1 6b ef f9 07 67 5e fc 95 5f bf 25 18 d8 33 83 67 c3 c1 07 92 de 7b 5f 52 7a 65 77 3a ed 28 4d 59 58 80 d8 61 bc 20 42 81 18 2c 8e bd 67 18 6f 94 d3 4b 64 c4 75 02 00 02 ea 80 e1 59 a8 96 86 6e fa f2 60 ea 43 8e be f9 ff 1f e8 f9 dd e5 97 bd 7f fe db b3 74 3f f8 26 cc 8d 98 0b 97 96 eb 89 97 d1 6a 08 6b 98 10 02 78 cf 88 4c e4 45 ea 28 ef e8 0f 40 e7 85 84 74 63 e9 dc fe cd d9 ad 5f df f5 39 81 9b 0e Data Ascii: dAZ@aX%f:uyAj =bYEWO~a>]N9^`{e7AZ31q;x,kg^_%3g{_Rzew:(MYXa B,goKduYn`Ct?&jkxLE(@tc_9
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: 7e 6f 57 c4 68 21 fe eb e3 a0 cf 41 80 12 14 20 17 a1 08 c0 38 be df ff 57 ff b4 eb fb 7f eb 61 bf b7 b8 74 e1 7b c9 c5 33 f7 fd f5 e7 1c 3b 35 3c fe 3e 89 2b b5 fd 8e 25 f6 25 d2 9c ba 41 04 b6 ae 5e c6 ae 94 da e5 fa 6d 19 db ea 28 75 5c 75 ec c6 0e 1d 55 00 68 40 5b a9 a7 86 d1 a3 6e 4b 2d 72 7e e8 82 c4 a3 65 2a 6a 1d 2c 04 c4 51 76 94 29 92 3c fc 64 36 b2 cb d5 46 22 eb 35 f3 ab 1b f1 be 75 a1 ac 7c 70 fd d8 a7 ee 44 ae 7d e5 b6 0b 33 8b eb 8c e5 d5 5c 2b 50 4d 1c 52 80 a2 06 1b df af fd ce 53 4e 7c e4 af 1f fa b6 c5 da 2f 8c 8d 2f 8f df 7c b7 da b4 73 d7 cd 27 3b eb 6e 3a 60 af 32 0a 50 5b ac 10 e0 41 16 aa f4 b8 a2 c0 32 b3 d1 bb 2e 4d 58 6f a1 aa b5 b0 35 fe ec 02 78 7a 00 48 19 ec 1b ea 1d 47 75 2f 4d b9 4c 57 a1 54 97 7b 27 93 60 82 fa 45 c6 fb Data Ascii: ~oWh!A 8Wat{3;5<>+%%A^m(u\uUh@[nK-r~e*j,Qv)<d6F"5u\|pD}3\+PMRSN\|//\|s';n:`2P[A2.MXo5xzHGu/MLWT{'`E
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: b9 85 25 33 61 99 63 47 bb 19 f0 40 e9 9a 5d c4 64 0c 8e 51 d7 63 96 c7 f6 08 ba 2f 5b 9f 6c 28 00 a0 05 8e 6b b7 3f 30 79 2f 9b 68 60 68 6e c6 f8 f4 e5 3b aa 8d a3 c3 56 0b 5b 3a 19 37 dd 8e e1 55 8b ed c8 93 6f ae 71 f0 f2 cb 8e 0f 0d 4d c3 19 af 2e 2d f1 84 e8 cd 45 0f 25 56 20 26 4d 02 8d 10 81 0a ce 10 00 90 22 01 76 e8 04 37 fe 92 d3 db 6f 1c 23 cc bc 5a 8c bb fd 44 90 cf c8 35 e6 e2 8c ef 7b ef 63 f1 b5 83 cd 88 30 20 77 6e cc f5 7c aa 65 6c 4e 34 38 af 7f 76 b3 94 76 80 c7 d9 f4 be 74 fd d0 5f fa f0 94 1c 94 51 97 9b ed 55 28 76 88 93 f3 12 c7 b9 34 27 0e 1c 14 56 f1 c6 cd 63 ae bc f5 d6 2f 5e bb 61 d3 ee f8 5a f6 5c e7 6c c6 e9 95 2e 76 c6 9d a6 11 48 68 90 43 80 06 58 25 0e 52 00 aa 90 a0 53 74 de 74 ed d8 e6 ff bf 7d a8 37 cc b2 52 f9 f1 2c 1d Data Ascii: %3acG@]dQc/[l(k?0y/h`hn;V[:7UoqM.-E%V &M"v7o#ZD5{c0 wn\|elN48vvt_QU(v4'Vc/^aZ\l.vHhCX%RStt}7R,
2024-04-19 14:06:45 UTC	1255	IN	Data Raw: a0 b0 21 c0 82 f5 4c 4e dc 37 bb f2 10 e5 8b f9 cf f5 e7 af 8c 2f 7d f6 b9 cf 3e f7 72 9b 9d 29 f1 9e 8d c7 99 57 92 38 f6 8a 1d 91 73 e8 88 9c a2 12 c5 64 7f f0 ad 3d f2 8e fd d6 38 5b a6 37 80 e5 e7 b1 ba 7c b7 bf 9f ad 71 4a a8 5d 95 b6 50 d3 e7 ff 3e 6a 3b 12 03 23 85 23 8e 76 c9 83 c4 4b 5d 66 25 76 88 42 59 78 9a d5 a3 3e be 6f 6f f9 e6 95 79 48 6f f8 9c 48 2c a2 58 63 51 a4 a8 c4 46 d4 50 85 14 89 18 c5 29 ea e0 33 47 5b 97 9e 1c f9 bb 3f 75 db d9 85 ae 5a 2d c5 f9 c5 f8 0a 28 a3 62 6f a3 0e 49 40 42 c7 a8 c4 d7 1f da a3 a4 47 59 cb 0e ee 4d bd 51 00 9c e1 02 9b 3a 9b 6d 99 9a b2 49 90 15 9c 57 e6 79 e4 13 3b c3 1c 0d c0 1c 89 32 e5 b0 90 78 e5 52 8b 30 42 a5 44 4c f1 82 5f c0 ce 27 3a c7 a7 3d 78 fe d4 2d 6f 78 32 5f 9c 8b 1a 95 48 14 59 91 6a 49 Data Ascii: !LN7/}>r)W8sd=8[7\|qJ]P>j;##vK]f%vBYx>ooyHoH,XcQFP)3G[?uZ-(boI@BGYMQ:mIWy;2xR0BDL_':=x-ox2_HYjI
2024-04-19 14:06:45 UTC	1090	IN	Data Raw: f8 a3 c1 3c 03 5a d8 6c 5c c8 b4 14 46 22 ad 99 b1 36 fb 40 e9 69 1a d7 37 db 43 50 ae 23 1d 9a 54 7a 25 26 4d 7b 67 eb 94 07 3c 49 40 88 80 b0 07 62 4a 08 23 0d 40 0c 93 10 16 2c 93 02 04 22 2a 10 28 a3 56 ee 9a c2 b5 47 7d 12 4d 20 a1 84 08 fa a6 0b 2b da ca db b8 5b dc dd 3d 8e 8e 9b 4b 9b d5 5e 1e dc f5 b4 b3 a6 1b 18 00 4c 12 5f 19 1a e0 89 8f 79 7a 62 fc 0c 07 99 a2 99 dc 26 40 56 bb 36 39 7b b4 37 3b 57 a9 ab cc e7 52 3e 5e 0f 1b 4a 2f 55 75 68 1a 2c 36 70 7d 84 6b 54 e2 0a 7c 01 8c 11 20 5b 34 36 b5 18 29 25 cc 06 2e a4 66 91 8a 8c a0 02 8b a3 d0 0c 65 d3 96 40 ec 20 28 d5 27 43 5b 6b 55 65 df e5 de fa ed 8d 7c 27 f9 aa 72 b7 ca ab a8 67 ac ff b2 bf 7f 47 60 60 1e 80 9b d7 95 a3 60 88 3d 5e dd 4f 9d 79 f8 1c 1b 16 8a 16 26 a4 d5 38 0e 6c d9 c3 12 Data Ascii: <Zl\F"6@i7CP#Tz%&M{g<I@bJ#@,"*(VG}M +[=K^L_yzb&@V69{7;WR>^J/Uuh,6p}kT\| [46)%.fe@ ('C[kUe\|'rgG```=^Oy&8l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.6	50003	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:46 UTC	1552	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7868 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=9qdt76iwqf9e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOag9GFO29r7AyeurnkOhdxdHVeu20oxB3RJ5ERJ4QhZfuDpQadxPGWHpH3irRA4s-isqRliDi4zqx83B718; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:46 UTC	7868	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 35 4e 62 6b 34 69 62 79 30 50 71 6f 55 4b 4f 73 4d 53 5f 2d 50 44 71 4d 35 69 2d 7a 4d 44 46 75 49 33 57 4e 39 75 64 62 54 68 48 57 62 6f 6a 62 79 65 65 5a 67 4b 71 68 74 6f 52 47 64 2d 33 6d 32 53 56 44 6c 4e 61 61 32 32 6f 30 51 46 37 79 6b 69 6c 63 35 33 64 49 45 35 76 79 32 68 73 76 2d 43 62 47 79 41 64 6e 47 73 79 6a 50 51 73 7a 7a 62 4e 2d 47 48 65 6a 52 4b 70 6a 62 58 75 39 34 74 4b 69 31 30 75 66 58 7a 44 44 73 6e 33 43 6e 51 62 7a 50 70 4e 39 53 2d 68 66 38 65 4e 72 5a 79 6f 7a 58 5a 65 4b 49 7a 42 31 37 45 6a 71 39 70 38 50 4a 75 63 46 77 6d 44 56 47 50 53 33 4f 73 77 75 50 51 62 44 75 41 59 64 67 54 53 61 6c 57 67 79 56 33 68 58 32 45 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA5Nbk4iby0PqoUKOsMS_-PDqM5i-zMDFuI3WN9udbThHWbojbyeeZgKqhtoRGd-3m2SVDlNaa22o0QF7ykilc53dIE5vy2hsv-CbGyAdnGsyjPQszzbN-GHejRKpjbXu94tKi10ufXzDDsn3CnQbzPpN9S-hf8eNrZyozXZeKIzB17Ejq9p8PJucFwmDVGPS3OswuPQbDuAYdgTSalWgyV3hX2E
2024-04-19 14:06:46 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:06:46 GMT Expires: Fri, 19 Apr 2024 14:06:46 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:06:46 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:46 UTC	559	IN	Data Raw: 61 36 63 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 37 74 63 52 76 45 4d 64 6c 53 78 34 4c 71 55 79 66 42 52 6d 75 77 48 56 56 56 4b 54 7a 36 75 31 4d 46 49 51 75 55 6f 70 6d 69 66 52 44 55 7a 62 5a 4b 2d 71 37 71 45 32 55 5f 32 47 6e 31 5a 2d 49 37 6e 42 79 38 73 5f 76 6d 49 6d 68 6b 63 59 4f 57 31 77 4b 54 72 2d 48 74 50 42 78 63 75 59 64 4e 4d 78 65 57 4a 35 48 73 62 4f 4b 6f 42 42 56 73 51 37 77 37 36 42 72 79 59 4c 6c 4e 5a 71 49 44 2d 50 44 38 42 32 61 59 48 4a 53 4f 53 41 73 6e 61 4e 4d 77 7a 50 41 6e 78 4e 35 48 74 64 4b 41 46 41 47 7a 5a 34 4d 4f 54 75 61 37 48 2d 52 6e 33 53 6f 35 5f 46 55 4f 45 37 5a 65 32 55 6e 6a 74 6d 30 37 2d 6d 6f 57 4e 2d 57 30 35 47 54 73 42 79 75 50 41 71 2d 49 5a 4f 48 6b 44 4b 66 45 Data Ascii: a6c)]}'["rresp","03AFcWeA57tcRvEMdlSx4LqUyfBRmuwHVVVKTz6u1MFIQuUopmifRDUzbZK-q7qE2U_2Gn1Z-I7nBy8s_vmImhkcYOW1wKTr-HtPBxcuYdNMxeWJ5HsbOKoBBVsQ7w76BryYLlNZqID-PD8B2aYHJSOSAsnaNMwzPAnxN5HtdKAFAGzZ4MOTua7H-Rn3So5_FUOE7Ze2Unjtm07-moWN-W05GTsByuPAq-IZOHkDKfE
2024-04-19 14:06:46 UTC	1255	IN	Data Raw: 6f 51 48 6b 59 49 42 62 75 75 33 64 47 34 52 42 65 79 58 53 71 56 45 41 56 43 66 59 59 31 7a 57 37 61 53 41 39 64 34 49 42 67 4e 64 7a 50 44 2d 55 78 76 6a 6d 4f 4d 71 4b 47 4d 72 4c 71 4c 4a 36 54 64 47 44 30 31 48 57 44 58 46 58 4c 5a 35 5f 31 39 4f 75 63 72 74 4a 51 77 45 37 76 6a 77 74 73 62 79 75 6b 33 79 41 32 5f 4e 74 43 45 45 58 5a 4f 4f 72 68 6b 6b 41 36 55 6a 32 52 71 4a 36 6c 54 49 53 44 2d 72 64 4a 33 59 6a 52 49 57 56 71 47 58 2d 5f 36 32 77 49 45 78 39 39 6e 59 2d 4e 4c 67 53 76 53 78 56 4e 34 66 75 70 6f 5f 6e 57 4a 2d 31 72 49 58 70 72 4d 52 57 6c 2d 73 75 47 71 46 4d 78 35 5f 33 51 47 55 59 70 73 58 48 70 56 48 35 61 4f 68 65 53 2d 73 70 59 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: oQHkYIBbuu3dG4RBeyXSqVEAVCfYY1zW7aSA9d4IBgNdzPD-UxvjmOMqKGMrLqLJ6TdGD01HWDXFXLZ5_19OucrtJQwE7vjwtsbyuk3yA2_NtCEEXZOOrhkkA6Uj2RqJ6lTISD-rdJ3YjRIWVqGX-_62wIEx99nY-NLgSvSxVN4fupo_nWJ-1rIXprMRWl-suGqFMx5_3QGUYpsXHpVH5aOheS-spY",null,120,null,null,null,["bgdat
2024-04-19 14:06:46 UTC	861	IN	Data Raw: 56 6b 54 6b 46 79 4b 32 4e 35 56 47 39 35 59 32 5a 58 51 54 4a 72 51 31 64 55 55 32 55 77 64 54 56 5a 51 57 78 32 64 69 39 59 5a 44 59 72 53 31 5a 61 51 6d 70 31 54 6c 70 77 4b 7a 5a 31 65 6b 46 53 4e 47 35 4b 53 57 64 30 55 31 63 76 5a 33 64 77 65 6b 59 32 4d 45 39 69 63 6b 34 7a 61 6d 70 48 54 32 63 7a 54 45 52 70 59 6c 42 4f 5a 55 52 4c 54 55 74 4d 59 6b 68 78 52 58 68 4f 64 6b 52 42 53 57 31 6a 54 55 4a 57 53 6a 59 7a 57 6b 56 4b 52 6c 70 76 4d 45 64 7a 52 6c 49 32 62 44 59 7a 55 33 52 34 5a 6c 56 35 53 79 38 76 51 6d 64 4d 61 31 70 59 54 56 52 79 61 31 6b 7a 54 6b 5a 30 53 45 68 76 65 48 59 7a 64 54 55 79 52 6b 70 4c 54 47 6c 71 62 6a 68 4b 4e 30 73 76 4e 44 49 79 63 6d 35 50 4d 30 4d 33 64 6e 55 30 64 57 78 53 51 6b 6c 4d 61 31 42 78 57 54 68 46 62 Data Ascii: VkTkFyK2N5VG95Y2ZXQTJrQ1dUU2UwdTVZQWx2di9YZDYrS1ZaQmp1TlpwKzZ1ekFSNG5KSWd0U1cvZ3dwekY2ME9ick4zampHT2czTERpYlBOZURLTUtMYkhxRXhOdkRBSW1jTUJWSjYzWkVKRlpvMEdzRlI2bDYzU3R4ZlV5Sy8vQmdMa1pYTVRya1kzTkZ0SEhveHYzdTUyRkpLTGlqbjhKN0svNDIycm5PM0M3dnU0dWxSQklMa1BxWThFb
2024-04-19 14:06:46 UTC	1255	IN	Data Raw: 32 35 39 34 0d 0a 6a 64 70 4e 31 52 78 53 54 4e 79 4e 57 67 33 55 33 45 79 61 54 41 77 56 56 4a 74 54 6c 56 33 65 54 6c 59 52 48 46 36 53 46 52 45 64 6c 52 6f 54 6c 64 69 62 6d 5a 57 52 47 35 77 64 47 68 51 61 6c 49 33 4e 6b 30 72 63 6d 39 4d 5a 33 6c 57 57 44 56 56 5a 6d 31 6b 55 45 5a 36 4e 6d 6c 71 56 54 6c 5a 61 6e 64 42 4d 6d 35 75 54 6d 39 36 54 6b 52 32 4e 45 39 75 62 79 74 34 5a 6b 39 4c 56 6e 70 4e 57 55 64 43 4b 7a 42 76 59 55 31 54 63 31 52 52 55 54 56 6f 64 6e 52 30 54 55 6c 4e 57 48 70 72 52 54 42 52 54 47 52 53 65 6a 4a 72 4d 30 46 74 61 6b 31 58 54 58 4e 34 64 56 4a 61 4f 57 77 31 4d 6c 4e 57 56 58 56 57 65 69 74 31 65 6d 56 56 62 6c 46 4d 4e 58 4e 36 64 30 77 7a 59 55 70 78 53 46 5a 55 63 44 5a 68 54 46 5a 56 62 30 56 57 4d 45 49 33 62 7a Data Ascii: 2594jdpN1RxSTNyNWg3U3EyaTAwVVJtTlV3eTlYRHF6SFREdlRoTldibmZWRG5wdGhQalI3Nk0rcm9MZ3lWWDVVZm1kUEZ6NmlqVTlZandBMm5uTm96TkR2NE9ubyt4Zk9LVnpNWUdCKzBvYU1Tc1RRUTVodnR0TUlNWHprRTBRTGRSejJrM0Ftak1XTXN4dVJaOWw1MlNWVXVWeit1emVVblFMNXN6d0wzYUpxSFZUcDZhTFZVb0VWMEI3bz
2024-04-19 14:06:46 UTC	1255	IN	Data Raw: 56 52 53 58 6c 71 54 31 42 61 56 6d 30 31 62 6d 39 5a 56 47 35 32 4d 6e 64 55 65 6b 74 73 62 57 46 68 64 6b 68 77 63 6a 52 7a 59 6b 56 32 59 30 31 45 4d 7a 59 31 54 6a 5a 56 54 33 4e 57 4d 7a 52 77 65 57 74 53 63 30 4e 32 4d 6c 6b 76 4e 44 56 4c 65 55 56 51 57 55 73 72 4d 47 4a 57 51 6b 70 49 4c 32 35 73 54 57 6c 43 52 54 64 6b 64 46 46 79 53 6a 46 6b 63 55 4e 35 65 56 46 79 63 45 64 42 62 55 70 34 53 6e 6b 30 56 33 4a 43 4f 47 63 7a 61 44 56 4f 63 33 51 77 4e 6b 34 33 54 33 5a 44 54 6d 46 49 64 7a 4e 50 5a 47 64 4f 54 46 56 4a 57 6e 52 6c 65 57 4e 47 56 58 41 72 64 6c 64 42 4e 47 4e 79 55 47 39 6a 4b 31 52 6d 57 48 64 4b 55 6a 4e 5a 54 47 4e 6c 52 33 52 54 62 46 5a 70 52 45 4e 47 4d 32 78 47 64 31 5a 47 54 6b 4e 61 55 30 52 57 55 79 39 49 56 6b 51 34 5a Data Ascii: VRSXlqT1BaVm01bm9ZVG52MndUektsbWFhdkhwcjRzYkV2Y01EMzY1TjZVT3NWMzRweWtSc0N2MlkvNDVLeUVQWUsrMGJWQkpIL25sTWlCRTdkdFFySjFkcUN5eVFycEdBbUp4Snk0V3JCOGczaDVOc3QwNk43T3ZDTmFIdzNPZGdOTFVJWnRleWNGVXArdldBNGNyUG9jK1RmWHdKUjNZTGNlR3RTbFZpRENGM2xGd1ZGTkNaU0RWUy9IVkQ4Z
2024-04-19 14:06:46 UTC	1255	IN	Data Raw: 56 59 72 53 6d 68 46 5a 47 64 42 62 6c 67 35 57 46 42 35 54 6d 4e 4c 54 46 4a 51 52 45 5a 58 53 55 63 76 61 58 42 56 4f 57 52 4d 59 6d 55 77 53 31 63 72 5a 6e 42 74 55 56 52 61 5a 57 45 7a 55 55 31 54 54 6d 74 4d 55 6a 52 4d 55 47 74 58 62 6b 56 30 51 6e 6f 33 61 56 4a 68 62 6d 31 6c 55 6d 70 56 55 48 70 69 4d 6b 34 78 54 45 39 55 5a 54 67 31 53 44 56 46 56 30 77 30 52 45 78 57 54 56 5a 78 56 6e 4e 50 55 57 31 4f 4e 30 59 33 4e 45 6f 30 5a 47 39 73 57 6e 4e 44 56 6b 56 32 4d 58 4a 51 53 47 64 35 62 6b 78 61 56 6d 6b 7a 61 46 70 4b 53 6c 6f 76 4d 6d 4a 49 54 32 64 75 53 45 64 59 57 6e 46 72 63 6d 56 55 61 7a 4a 42 64 30 35 6e 52 58 4e 7a 4d 6e 52 6f 4d 31 5a 55 54 31 52 31 63 6a 4a 4a 63 6c 46 4d 65 43 39 6a 5a 6b 52 4a 51 33 4d 31 54 45 78 4d 62 47 4a 74 Data Ascii: VYrSmhFZGdBblg5WFB5TmNLTFJQREZXSUcvaXBVOWRMYmUwS1crZnBtUVRaZWEzUU1TTmtMUjRMUGtXbkV0Qno3aVJhbm1lUmpVUHpiMk4xTE9UZTg1SDVFV0w0RExWTVZxVnNPUW1ON0Y3NEo0ZG9sWnNDVkV2MXJQSGd5bkxaVmkzaFpKSlovMmJIT2duSEdYWnFrcmVUazJBd05nRXNzMnRoM1ZUT1R1cjJJclFMeC9jZkRJQ3M1TExMbGJt
2024-04-19 14:06:46 UTC	1255	IN	Data Raw: 64 48 45 30 63 55 56 4e 52 47 52 4b 62 54 64 4c 56 33 64 69 4e 45 56 6d 65 6b 68 57 4e 46 5a 77 63 44 64 31 53 6c 68 58 56 6a 5a 5a 61 54 52 32 59 54 46 50 4d 55 52 47 64 57 56 42 4e 30 35 34 5a 31 70 72 53 6d 31 58 5a 6b 46 6c 56 6c 6c 72 4d 44 68 6e 53 6e 4d 76 59 6c 6c 36 63 32 78 6f 56 7a 68 77 63 54 4d 35 62 44 6c 45 51 6a 5a 6e 4e 58 70 48 56 33 70 72 53 46 52 44 63 6c 4e 76 52 6e 6c 4f 53 6a 45 78 53 48 6f 7a 59 57 78 47 51 30 46 57 4e 45 38 32 53 7a 46 6d 65 45 4a 70 64 57 52 34 4d 47 67 76 52 30 4e 48 4d 47 4e 42 62 55 6b 79 4c 7a 4a 54 65 44 56 70 4b 33 51 79 64 6c 4e 73 57 46 6b 35 53 53 73 35 4d 58 56 4d 56 57 31 6c 64 45 4a 42 56 6b 4e 74 62 48 4e 77 4f 44 4e 35 54 31 4e 4d 55 32 5a 35 4e 32 77 76 4b 32 6c 78 65 55 64 6c 51 31 68 72 4d 56 56 Data Ascii: dHE0cUVNRGRKbTdLV3diNEVmekhWNFZwcDd1SlhXVjZZaTR2YTFPMURGdWVBN054Z1prSm1XZkFlVllrMDhnSnMvYll6c2xoVzhwcTM5bDlEQjZnNXpHV3prSFRDclNvRnlOSjExSHozYWxGQ0FWNE82SzFmeEJpdWR4MGgvR0NHMGNBbUkyLzJTeDVpK3QydlNsWFk5SSs5MXVMVW1ldEJBVkNtbHNwODN5T1NMU2Z5N2wvK2lxeUdlQ1hrMVV
2024-04-19 14:06:46 UTC	1255	IN	Data Raw: 31 61 32 4e 35 62 32 31 56 55 57 64 57 4e 32 46 48 4e 47 74 6c 59 6c 42 36 55 47 31 7a 4e 6d 4a 31 55 33 4a 35 4c 32 78 6d 55 32 67 33 55 6b 64 30 61 6e 63 72 53 30 4a 54 59 33 5a 78 64 6a 4e 6b 55 58 70 49 55 7a 6c 44 65 57 52 75 4b 33 42 34 4f 57 6c 4e 4e 46 68 6d 63 6c 68 76 52 45 35 55 59 58 70 32 4f 45 5a 71 65 6e 4a 4e 65 47 78 6b 52 6b 73 33 59 6d 31 75 5a 30 5a 72 65 48 5a 57 53 58 52 57 62 45 70 74 51 32 52 33 5a 30 70 55 51 54 64 6c 54 54 52 36 55 57 6c 68 61 31 70 74 62 56 46 68 61 31 4e 72 61 6a 6c 57 63 58 52 49 54 45 6c 45 61 6e 6c 58 64 56 51 30 55 58 59 77 4d 30 52 35 63 57 52 49 55 31 70 74 4f 47 74 77 61 30 6f 79 4d 31 4a 44 64 44 4e 31 63 56 55 30 53 46 68 33 52 30 31 4c 4d 56 70 4d 65 47 70 52 54 46 4a 43 63 44 4e 4b 51 54 52 36 56 30 Data Ascii: 1a2N5b21VUWdWN2FHNGtlYlB6UG1zNmJ1U3J5L2xmU2g3Ukd0ancrS0JTY3ZxdjNkUXpIUzlDeWRuK3B4OWlNNFhmclhvRE5UYXp2OEZqenJNeGxkRks3Ym1uZ0ZreHZWSXRWbEptQ2R3Z0pUQTdlTTR6UWlha1ptbVFha1NrajlWcXRITElEanlXdVQ0UXYwM0R5cWRIU1ptOGtwa0oyM1JDdDN1cVU0SFh3R01LMVpMeGpRTFJCcDNKQTR6V0
2024-04-19 14:06:46 UTC	1255	IN	Data Raw: 34 7a 65 45 5a 6d 64 46 52 4a 64 56 64 78 61 6b 31 57 56 56 6c 45 53 47 4e 57 54 32 35 34 4f 47 5a 43 5a 30 52 58 55 55 35 74 4e 32 4e 4a 54 45 46 48 61 44 68 7a 4d 44 6c 55 59 6c 4e 72 62 7a 46 6f 63 57 68 46 63 31 6c 76 56 6c 70 47 56 55 64 6a 57 47 35 57 54 7a 68 75 4d 33 41 33 53 45 45 7a 63 55 39 54 4d 6c 5a 44 63 56 4e 4d 63 32 34 78 65 46 6c 6c 65 45 68 77 4e 58 52 69 62 6d 4e 6e 52 6d 70 73 59 53 74 68 57 44 63 76 63 6d 4a 57 59 32 46 4f 4e 30 70 45 64 6e 70 4d 57 6e 4a 77 53 6b 78 32 61 46 5a 73 56 48 52 45 61 55 74 47 51 32 5a 51 65 44 52 4c 62 33 70 4a 51 33 51 32 4d 6c 5a 4a 63 31 68 7a 5a 55 70 33 4e 47 39 68 4d 48 64 6e 4b 33 56 78 54 56 67 78 53 57 52 73 63 44 52 45 52 6b 35 4b 4b 31 4a 34 59 57 68 6a 53 45 6c 4b 56 56 46 6e 61 46 56 36 4d Data Ascii: 4zeEZmdFRJdVdxak1WVVlESGNWT254OGZCZ0RXUU5tN2NJTEFHaDhzMDlUYlNrbzFocWhFc1lvVlpGVUdjWG5WTzhuM3A3SEEzcU9TMlZDcVNMc24xeFlleEhwNXRibmNnRmpsYSthWDcvcmJWY2FON0pEdnpMWnJwSkx2aFZsVHREaUtGQ2ZQeDRLb3pJQ3Q2MlZJc1hzZUp3NG9hMHdnK3VxTVgxSWRscDRERk5KK1J4YWhjSElKVVFnaFV6M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.6	50004	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:46 UTC	1546	OUT	POST /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 2034 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/x-protobuf sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=9qdt76iwqf9e Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:46 UTC	2034	OUT	Data Raw: 0a 28 36 4c 63 41 32 74 45 5a 41 41 41 41 41 4a 6a 37 46 54 59 54 46 39 63 5a 34 4e 4c 33 53 68 67 42 43 42 66 6b 57 6f 76 30 12 a4 0f 30 33 41 46 63 57 65 41 35 4e 62 6b 34 69 62 79 30 50 71 6f 55 4b 4f 73 4d 53 5f 2d 50 44 71 4d 35 69 2d 7a 4d 44 46 75 49 33 57 4e 39 75 64 62 54 68 48 57 62 6f 6a 62 79 65 65 5a 67 4b 71 68 74 6f 52 47 64 2d 33 6d 32 53 56 44 6c 4e 61 61 32 32 6f 30 51 46 37 79 6b 69 6c 63 35 33 64 49 45 35 76 79 32 68 73 76 2d 43 62 47 79 41 64 6e 47 73 79 6a 50 51 73 7a 7a 62 4e 2d 47 48 65 6a 52 4b 70 6a 62 58 75 39 34 74 4b 69 31 30 75 66 58 7a 44 44 73 6e 33 43 6e 51 62 7a 50 70 4e 39 53 2d 68 66 38 65 4e 72 5a 79 6f 7a 58 5a 65 4b 49 7a 42 31 37 45 6a 71 39 70 38 50 4a 75 63 46 77 6d 44 56 47 50 53 33 4f 73 77 75 50 51 62 44 75 41 Data Ascii: (6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov003AFcWeA5Nbk4iby0PqoUKOsMS_-PDqM5i-zMDFuI3WN9udbThHWbojbyeeZgKqhtoRGd-3m2SVDlNaa22o0QF7ykilc53dIE5vy2hsv-CbGyAdnGsyjPQszzbN-GHejRKpjbXu94tKi10ufXzDDsn3CnQbzPpN9S-hf8eNrZyozXZeKIzB17Ejq9p8PJucFwmDVGPS3OswuPQbDuA
2024-04-19 14:06:47 UTC	417	IN	HTTP/1.1 200 OK Content-Type: application/binary Date: Fri, 19 Apr 2024 14:06:46 GMT Expires: Fri, 19 Apr 2024 14:06:46 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.6	50005	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:46 UTC	771	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:47 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:06:47 GMT Expires: Fri, 19 Apr 2024 14:06:47 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:47 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:06:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.6	50006	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	768	OUT	GET /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8
2024-04-19 14:06:47 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:47 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:47 UTC	782	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-04-19 14:06:47 UTC	879	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 Data Ascii: color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.c
2024-04-19 14:06:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.6	50008	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:47 UTC	978	OUT	GET /_/PlayStoreUi/browserinfo?f.sid=4786649840398366022&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58007&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=dXseEbgeRrktqct1SP1WSIc09DXP4IAcNknCdu6QEFSndoqRG0nLJrCqaAcuhrq8SynywK0XZxCKl-GoYLPMqVCnnODx0Ok41sPbmvrDZk5vDgVaBxloGv4NwLJB1Bn0Z5NVFLil3kGiyCICd4DBJYE8vIocT6KShME-RJxotc8; _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535604.0.0.0
2024-04-19 14:06:48 UTC	1139	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:48 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:48 UTC	116	IN	Data Raw: 38 32 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 39 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 38 2c 22 32 34 32 36 39 37 34 34 35 32 33 33 39 32 30 33 34 37 38 22 2c 31 30 35 5d 2c 5b 22 65 22 2c Data Ascii: 82)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",9],["af.httprm",8,"2426974452339203478",105],["e",
2024-04-19 14:06:48 UTC	20	IN	Data Raw: 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 30 5d 5d 5d 0d 0a Data Ascii: 4,null,null,130]]]
2024-04-19 14:06:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.6	50013	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1087	OUT	GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 189446 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	731	IN	Data Raw: 52 49 46 46 fe e3 02 00 57 45 42 50 56 50 38 4c f1 e3 02 00 2f 0d c2 49 00 4d 48 0c c0 36 6c 9b 00 12 0c 1b e8 fe 3f 58 b2 9a ee 82 88 fe 4f 80 24 25 5e 25 29 ca bb 12 79 28 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 97 1c 39 d6 1a bd c5 47 ab d6 44 4e 12 c9 d6 d6 9b 27 4e 2c 39 ab 9f 58 eb 92 68 9b 75 23 6d 94 48 51 7e eb 38 49 b4 d8 79 97 b2 71 92 58 d9 ad 67 4e 72 5b d9 4a 89 a5 33 c5 8b a4 05 8e bc 24 7a 4b 22 59 56 8a c3 16 40 db e2 56 2c e9 8a a2 64 a0 80 84 1b 29 9e 47 b8 8a 6b a3 3c 32 4f d6 39 da 96 39 91 d9 92 24 da 4e f2 21 58 26 37 44 49 22 31 cf 80 39 e7 64 56 3b db 89 4e 78 82 2d 48 4d b4 65 ee e7 06 6d 73 ed e7 33 de da f9 e1 2e 4e 94 3c f0 03 46 26 a1 3e 4a 24 c9 b4 9f 38 24 31 08 e0 60 4b 9f 3d 7e 42 d8 97 75 ea 7d 2e 12 df bc c9 28 b1 93 d8 Data Ascii: RIFFWEBPVP8L/IMH6l?XO$%^%)y(R9GDN'N,9Xhu#mHQ~8IyqXgNr[J3$zK"YV@V,d)Gk<2O99$N!X&7DI"19dV;Nx-HMems3.N<F&>J$8$1`K=~Bu}.(
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: e0 75 08 fb 3e 4b 1a a5 94 11 52 48 77 21 04 8f b6 6d ab 76 63 db 56 a9 b5 0f d9 4e 96 22 44 53 53 32 8f 60 66 e6 bf 5f cc bc 8c 55 f2 34 53 30 69 f4 d1 fa af b0 6d db 86 49 f7 bc 43 ad c0 50 15 a8 2a f6 74 95 a1 e2 2a 96 65 d2 de 03 4d ad 34 51 50 93 24 a8 88 06 b5 59 a9 43 c4 46 46 44 8c 81 da 24 b5 62 2b 85 6a d6 e0 61 b9 d8 88 88 21 a1 66 6c 30 a0 49 46 44 c6 b2 b1 5c 64 2c 79 45 68 d0 20 15 49 b2 5a 15 88 4d e3 d6 78 34 d2 a8 a2 49 12 42 ad 40 6b 34 09 9a 85 24 09 49 a2 8a 6a 63 89 48 32 92 45 71 b1 c4 61 0e 4b 10 11 69 42 08 23 63 23 a3 62 23 23 8b 0b b5 b8 16 0c 82 50 90 85 54 54 45 b2 6c 91 05 21 39 1a ad d9 64 b5 44 13 4d 7c 55 11 31 cd 36 cb c5 32 31 b5 09 c9 85 3a e5 69 0d 72 11 19 24 8e 56 05 b9 16 15 c9 36 4b 44 04 62 62 61 44 6c 30 d8 2c 59 Data Ascii: u>KRHw!mvcVN"DSS2`f_U4S0imICPteM4QP$YCFFD$b+ja!fl0IFD\d,yEh IZMx4IB@k4$IjcH2EqaKiB#c#b##PTTEl!9dDM\|U1621:ir$V6KDbbaDl0,Y
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 6c 00 2a 8e e3 4f b8 a0 0a b9 60 97 24 c3 45 b5 88 da 64 d9 53 9c a6 0e dc a1 c1 0e ff 29 6e 70 53 ad e2 ab a8 f2 30 77 f1 9f 72 13 3b fc 87 0f ec 62 87 48 92 3c 24 9b 46 6d 32 55 72 95 06 66 ea 39 27 32 5f 50 37 cb 92 4d 1a d4 1c 38 e0 ab 65 59 92 3c cd 09 90 1c 12 82 26 09 18 11 51 11 12 44 24 58 28 58 5d 28 92 88 24 35 21 51 25 2c 26 f0 b5 9e f6 70 ea 02 62 21 15 c9 92 60 98 da 0a 1e f2 18 ec d4 61 4f aa c8 d3 42 88 5a 6d b5 9a 24 d5 82 55 59 9a 24 64 6b 33 b2 40 6b b5 c8 b8 8a 3d f0 70 a1 8a 4c b3 91 c5 d3 a9 6b 5b 0c 6a 1e aa 22 8b ab c8 a8 56 ea 58 1f 36 f7 b1 31 8f 4d 8f 21 8f 93 7d d9 7d 9c 7e b4 8d 47 db e1 57 1b 4e dd fa c6 79 3e b5 8f 93 d4 76 eb c3 e3 dc da c7 c6 5b db ee 4e 1e 39 7d e4 c4 ac 1b 47 f0 38 f1 38 4e de cf cd 33 eb f7 9c f4 58 ab Data Ascii: l*O`$EdS)npS0wr;bH<$Fm2Urf9'2_P7M8eY<&QD$X(X]($5!Q%,&pb!`aOBZm$UY$dk3@k=pLk[j"VX61M!}}~GWNy>v[N9}G88N3X
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 2c 72 ef 79 f4 af b9 5c a1 df 27 bf 32 66 ee d7 b9 5f e1 3b dc af 71 bb c2 1d ee d7 90 3f e0 27 7c e5 d5 67 21 e1 49 cc 1f 42 fa 4c 93 2e 9c 09 09 79 95 55 56 69 f2 b1 ef 8b 76 eb 73 e7 2d 09 69 f2 f9 1f e1 de 2a 21 f7 9e 55 42 56 09 f9 e2 48 9b 69 f2 6e 1f 39 f3 03 5f 82 5c 98 fb 69 3e 7a f1 28 24 24 64 95 57 d9 46 62 e6 18 97 be 68 f9 a9 25 a4 49 48 c8 cc 5b 21 21 8b 31 24 fc 1c d2 10 f2 53 4b 48 48 25 f3 4c f6 7c d3 12 de 79 cb f9 9f 5a 42 be 38 3f 0c 59 bd 95 09 49 13 ce 84 34 d9 c7 18 3e bd b8 25 dc 7e f7 72 7c be ca ea 93 d9 6f 8f b9 0c 69 d2 67 16 17 43 42 42 fa cc ec 69 12 72 f6 8c 99 e6 bd 55 c2 3b e1 ab f7 b9 98 9f 7f 3a 13 12 f2 4c 5e 25 dc de 66 56 69 56 b7 91 90 70 79 cc 84 54 cf 77 67 3c bf 00 fc ed 87 af fe f7 0b be be e0 9e db ef 7e 6a 99 Data Ascii: ,ry\'2f_;q?'\|g!IBL.yUVivs-i*!UBVHin9_\i>z($$dWFbh%IH[!!1$SKHH%L\|yZB8?YI4>%~r\|oigCBBirU;:L^%fViVpyTwg<~j
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 6d db 72 6b 7d cc 39 d7 5e c6 b6 2e fb 0a d9 b6 ed e8 15 bb fe d5 75 c5 af 7f c0 a0 6d 6b e3 f8 9c a5 c9 d1 5b c8 82 6d 2b 6a a5 05 c4 a7 99 30 d2 89 01 1c d2 9f fe f0 ff 5f e5 34 fe bf c7 91 71 9f 39 71 81 10 42 b0 e0 ee 14 a7 58 d1 e2 35 ac 50 58 da 6d a1 5b 37 e8 16 2d b6 c5 5d 4a 81 50 08 5e dc 29 6e 11 68 12 42 08 21 19 77 39 72 bd 93 33 93 f4 9d f4 ff 88 80 45 db 56 d4 e6 00 1d 9c 7a df 2a 2b e2 f3 81 24 9f de 68 6b 5b 36 27 da b6 6d df 8f e3 38 cf cb af f2 aa 54 c5 dd 13 1c 82 bb 75 d3 06 ed 7a bb 8e f1 b8 bb bb df 2e 6d d0 2e 34 d0 78 37 10 22 10 24 09 81 b8 54 a4 dc eb d2 f3 3c 8f 63 df c7 13 b8 fb f1 e7 b7 06 fe bf 55 bb 6d ac ff 5a 1b ce be 20 06 5b b2 24 b3 e5 38 4e d2 34 49 a7 4d 9b a6 30 85 99 d7 e1 c7 cc cc 8c c3 cc f3 b0 83 8f 99 86 3a d8 Data Ascii: mrk}9^.umk[m+j0_4q9qBX5PXm[7-]JP^)nhB!w9r3EVz*+$hk[6'm8Tuz.m.4x7"$T<cUmZ [$8N4IM0:
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 23 6c 57 d9 a6 01 f3 40 09 76 b5 10 75 73 25 81 c4 df 67 5f 89 20 38 d1 c6 8d 8e ed b9 4f 06 90 b7 d2 8b ed a3 6f b9 e4 e2 6d 2b fc f0 33 f8 11 1b e9 c4 8a ee 31 34 6d 82 b6 c9 76 b5 46 9f 5f 80 1d e0 66 21 23 3a 1d 53 b7 0e 59 4a 8d 6b dc 6e ed cb 75 36 58 c7 f1 c6 b1 d0 e5 f1 4f f7 fb be fa ba a8 b8 b2 1b 1a 1e 1a 04 45 81 7b 9b 02 b0 e8 05 70 23 72 d3 99 dd dc 7a 1e 86 1c 40 05 2d b2 d5 5a d6 46 51 54 14 3c ac 8c c6 3f 01 d8 18 6a 59 60 a1 ef 55 7c 10 2e c8 b1 d5 ad 24 59 90 82 07 a9 5b 0e 3e f3 33 1a c2 a2 92 8b 37 95 99 a4 c4 30 3a b0 5d 3c 55 fb e2 3e 65 d3 2b 17 42 c7 14 96 7f 46 c6 a8 a8 24 de c8 73 e5 8a f7 fc 89 57 3e e2 d0 4d 0b 56 db 71 83 f0 a1 a9 88 44 fb 36 98 3f 44 55 6e 6c f4 c2 17 53 69 ce 25 62 ac ac 90 36 a5 9e 26 92 ab 5c 9d ad 94 47 Data Ascii: #lW@vus%g_ 8Oom+314mvF_f!#:SYJknu6XOE{p#rz@-ZFQT<?jY`U\|.$Y[>370:]<U>e+BF$sW>MVqD6?DUnlSi%b6&\G
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8d ec 81 29 61 a0 ae 6e ab 99 15 df 91 2d 23 07 4d f6 4a 96 a2 42 e3 9e c9 da b6 a3 e6 a3 e6 c5 50 13 e2 9e d3 31 bf fe f7 bf bd f8 d9 c7 bf b3 e7 4e db 00 85 11 77 da ab e4 7c f5 74 9e 5a dc 21 54 77 3f d6 a8 fb 41 cb 9e 6d 5c ee b2 28 8b ea d8 06 05 98 ae a6 80 d5 ec e0 c7 bb 78 7a c1 f9 e1 55 27 5e c7 ad e3 d6 4b 0a 6e cb 87 d1 46 69 d5 47 d6 2d 9a b4 6b 51 61 50 1e 0a 34 3b de fb 90 45 5c 75 33 ad 70 49 ae 75 e5 f9 9a cb 60 e3 dc 06 4f 45 46 07 0d 2f 0d 85 a3 cc 8d c9 25 1b 54 9c d1 fb 4b f6 71 a1 88 45 28 01 53 41 84 63 0b 6b df c4 a4 c2 38 79 29 15 85 48 cf f2 96 03 5c 6f 78 e9 a0 67 40 78 ef e6 73 9c b4 31 26 94 c3 11 87 09 06 d4 45 d5 8b 54 1b 6e c5 d1 03 ae 0a 17 6f c1 73 1e da e7 db 83 9f af bd 6f 82 2d c5 bc 29 99 d8 a4 9d 56 2b a7 db cb be de Data Ascii: )an-#MJBP1Nw\|tZ!Tw?Am\(xzU'^KnFiG-kQaP4;E\u3pIu`OEF/%TKqE(SAck8y)H\oxg@xs1&ETnoso-)V+
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 9a 39 9f ef 65 91 4c 14 b8 be 7c be 67 b7 ba cd da f5 ea 86 f1 6b bc 8d 47 1f 50 cb cb c6 6f 6f 75 60 db c0 24 99 da eb 7e 6f 47 76 d6 7c 39 7c b8 d1 76 77 bd 79 9d 19 ce fd 1f 7f 97 9f f0 7d 80 d7 db f5 b5 6f 25 c9 17 77 52 ec 3e 51 27 a8 7a bb 8f ef 98 22 1b 09 5a a5 f0 c9 9e b3 8a 6a 31 db 88 0a 9c 77 ef c6 5b 59 5a 2a 57 79 cb 78 75 6d 30 60 00 a7 af 16 6c 3a b9 3c 78 1d a7 cc be fd cd f6 0b 1b 65 c1 db 2e 16 3a 11 4b 23 53 42 55 ec 5a 21 dd 45 06 07 6c f7 a8 4d 98 52 e3 a4 4b 38 de 16 38 a5 e0 2a 95 f5 10 ba 40 74 a5 90 80 02 4b dd 9c 32 1a 71 62 a0 37 ef 17 3d 31 c7 dc d0 d2 99 5b 7c 18 f9 9c ba e1 70 49 64 23 db 3d 0e e5 67 d9 3b de ee 9b a1 54 6f ff 63 d5 50 d0 ee d1 35 d6 6f 33 2f 76 6e 15 99 b9 ba ea aa 8a 31 33 e4 d1 25 18 3f fc bd f5 33 e7 95 Data Ascii: 9eL\|gkGPoou`$~oGv\|9\|vwy}o%wR>Q'z"Zj1w[YZWyxum0`l:<xe.:K#SBUZ!ElMRK88@tK2qb7=1[\|pId#=g;TocP5o3/vn13%?3
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 87 2c 5f 84 93 e6 9e 9f 78 eb ce ef 6d be bd f5 33 ab 98 88 05 81 ce 19 1b b8 93 65 bb 1f 7f c7 ec 4c 09 36 74 26 37 bb b5 e5 26 e9 b7 b1 af 0f ee a3 86 c9 2c 92 43 02 d2 b1 69 2a cf 91 c0 aa e2 35 fa 7e dd 3d f5 e1 2d a5 17 db 5b 2d 40 4b 8f 45 50 ed de c7 8b f3 e8 5f fc b3 af 7c 24 87 01 80 d8 9a a6 1e 01 84 8a af 46 e3 ad 5d e1 71 dc db 90 1f b9 eb 6b 91 19 75 e0 95 ed af ff 5d be 1d ed 6a af ad 43 b8 f8 3d 7f 7d f7 df de e1 9f f1 4c 66 63 5e 7a 16 ed e7 ad 54 34 b6 18 0a 86 20 6d ec a6 d4 71 d4 24 93 7d 77 3b 26 9a 93 3d ca 9a d2 a0 45 bc 79 a1 42 e1 4a 0f 6a cb 3c b9 36 f1 16 b1 e7 f5 d2 94 8d 81 aa 5b 61 d7 eb 14 5f 7a 9a 91 48 fb f5 69 4a 13 9f d6 5f 9a e7 44 8d ab 6a 92 e4 a5 01 c2 16 6d f7 0e bc 6c 30 2c be 96 96 7d da 89 95 c9 82 3a 2b 28 28 ba Data Ascii: ,_xm3eL6t&7&,Ci*5~=-[-@KEP_\|$F]qku]jC=}Lfc^zT4 mq$}w;&=EyBJj<6[a_zHiJ_Djml0,}:+((
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 06 33 60 41 74 5c ed ad 56 03 14 61 cb 1e 65 58 a4 a2 41 0d 2a 5b 36 19 1d 35 95 ad a9 51 61 bb 5b 9f f5 b3 86 f7 7c a7 08 04 1e 8a 40 66 c8 a9 80 c5 ac f9 98 99 b7 e2 d5 26 6d 56 b7 02 0b 12 7b 1a cf a7 6b 59 92 69 15 fa 9d 37 6f b0 2e e1 08 af c1 60 8b 45 56 c1 46 57 dd 9b 0b 8c 85 90 05 e5 8c 36 97 e7 d8 72 b8 f4 b2 ad 75 7a 27 dd 2c 83 6b 7a ba f3 22 64 b0 4c c7 12 23 c0 33 88 84 28 3e d3 f1 14 bc 79 e4 99 c3 3f a9 c1 86 b4 a4 4d 81 db 9d 69 30 04 34 12 50 32 3e 35 0a 53 b0 e8 90 87 14 9a 40 e3 0c 7b 72 0a 5c 11 5f d3 68 d6 8f 70 ae 6b 95 69 8e c2 7c d0 c9 53 0a 42 c6 0f 95 13 85 11 93 05 0c 41 d3 65 c8 62 9a 62 e1 bd 9c ff 0f c0 e4 17 8f 13 83 65 51 d0 a3 86 81 53 1f 36 90 37 37 66 08 69 c3 81 63 e9 de 02 5a 8a 96 cd 9c 7b 6b 09 36 19 66 c8 2d 67 5b Data Ascii: 3`At\VaeXA*[65Qa[\|@f&mV{kYi7o.`EVFW6ruz',kz"dL#3(>y?Mi04P2>5S@{r\_hpki\|SBAebbeQS677ficZ{k6f-g[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.6	50014	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1086	OUT	GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 186166 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	731	IN	Data Raw: 52 49 46 46 2e d7 02 00 57 45 42 50 56 50 38 4c 22 d7 02 00 2f 0d c2 49 00 4d 48 0c 80 30 6c 9b 81 8c b1 21 ff 3f 2c c9 f6 7a 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 b7 8e 93 44 93 9d bd 94 85 93 29 d6 34 fb d5 75 5d 59 5a 92 f5 42 f1 a4 dc 78 dd 16 87 34 49 97 2c d9 f6 a5 44 d1 c4 24 a7 26 49 67 c2 37 c7 68 09 4a e7 42 b9 13 49 4a a6 28 fb 47 03 17 00 6e 30 4a 92 92 72 41 d4 9a 94 14 4b 3b 67 6d 2b 64 f9 6b 1f 74 37 70 5c a0 1d fb ac 0f 5d b1 6c 27 81 6c af 32 01 03 c0 d8 9d 00 40 de 2a d9 96 40 cb b6 20 d9 81 b2 85 9c 5d ce e9 4b ca 3a 30 48 b0 25 c9 16 20 c9 b2 24 ad c4 94 24 47 62 89 63 e0 18 00 81 01 10 e0 Data Ascii: RIFF.WEBPVP8L"/IMH0l!?,zAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%RD)4u]YZBx4I,D$&Ig7hJBIJ(Gn0JrAK;gm+dkt7p\]l'l2@*@ ]K:0H% $$Gbc
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 23 85 0d 95 5c 5d a0 66 66 e6 ff bf 76 f1 12 ed 76 5c cd cc dd d1 a9 b3 ff 0a dc b6 51 32 3c c6 57 a0 18 4a b9 a1 2e 33 d3 6e 9d c3 6e 86 61 45 79 89 14 14 2b c0 40 81 20 91 49 07 ea 85 8e 87 14 26 44 48 21 65 a7 5e 20 14 33 1d c3 87 d1 31 0c 9b 09 29 a4 14 40 21 4c 40 20 05 22 a4 10 61 98 30 6c 22 0c 71 05 a0 43 07 99 20 18 c5 0d 85 89 a2 5b d1 73 51 14 75 e9 10 04 00 8a a1 a3 e8 10 d0 61 00 41 00 82 d4 a5 6e c2 90 42 10 21 18 98 cd 90 86 35 0c 89 14 52 14 00 00 21 c2 84 08 99 09 11 a2 d9 f0 66 6f 10 00 05 06 0c 20 93 9b 60 98 26 1a 00 22 8b 8e c2 21 ba 21 1d d2 21 fd 2e 93 c2 3a cc 61 d8 0c 2b ac 5e 00 c4 86 a7 98 46 07 9b 14 1d a4 51 dc 80 bd c9 04 73 18 52 48 81 c2 0a 03 42 0a 13 10 70 18 a2 8b 86 01 80 02 48 81 02 b3 c2 30 0c 58 a8 5b 5d 28 05 86 01 Data Ascii: #\]ffvv\Q2<WJ.3nnaEy+@ I&DH!e^ 31)@!L@ "a0l"qC [sQuaAnB!5R!fo `&"!!!.:a+^FQsRHBpH0X[](
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: d7 03 05 34 3d 37 3d a2 d7 ad b6 e6 68 df bf 6a d7 9c f9 a0 f2 ce ac 5b d3 a9 49 53 34 bf 9c 7d ad 75 a9 fa 1d 5d 9a b4 7a 31 0b d2 74 a3 4e cd 2f 9b df 69 1a 4d 97 a6 27 a4 d1 f8 be e1 1d 37 f4 88 1e 61 48 21 18 82 04 61 b9 d0 d7 43 3d 9e f8 f7 13 fd 67 f8 fe e7 53 7d 7f ec e7 0d bf 9e de d7 99 ff 3c f1 9f a7 2b 7b fd 78 ba 0c fe f6 48 5f 1f 0b 86 82 0a 7c a5 cc d5 28 f5 72 5b a7 b9 cc 85 cb 6d bd aa 75 9d 7d aa 75 9d eb 8e ba d4 4b ad 6b ad bb 5a 57 ea 5a 79 67 ae f3 cc 57 53 99 f8 a8 f2 c1 e4 17 f5 52 eb 5c fd 6a e2 83 ca 5b 93 1b bc 83 e1 86 17 40 03 0d 08 2b a4 b0 f0 29 31 00 5c cd 1e 14 19 ea a6 bb ba 4c 26 14 d8 cd d5 ec 06 60 c8 bb 81 19 d0 cc 72 01 85 0d 75 c3 05 b3 01 60 16 86 37 19 5a 86 21 6f 52 17 0a 6f f1 39 b4 03 93 56 da 80 98 82 89 a2 5e Data Ascii: 4=7=hj[IS4}u]z1tN/iM'7aH!aC=gS}<+{xH_\|(r[mu}uKkZWZygWSR\j[@+)1\L&`ru`7Z!oRo9V^
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: bd da 25 2b dd 76 93 5e 89 ca 7d e6 f7 3d cd 3b 21 6f d2 25 7c be 56 ba 34 09 59 2b 5d ba b7 a2 f6 59 3f fc 76 bc 35 6a b5 f9 f8 be 1e 44 46 10 d6 71 fc fa c7 4b bf f4 82 20 08 be 34 7f 82 4f f8 2d 5c f8 03 de f9 97 dd 91 e9 92 b2 56 be 9f 2f fc 74 a4 4b 54 c2 ee b6 f6 cd d7 dd 4d 33 6e de ec f2 cb 23 21 5d 36 f1 cc 33 b6 4d ba 34 5f 9d 99 c7 0a f1 6a 97 26 e1 e3 90 ff 49 93 26 4d ee 6b bf c9 9b df 9b fd 3d ee fe a7 b2 61 b3 0c b9 c7 97 82 b0 c6 b1 f0 41 d6 f3 e9 c7 0d 0c df 47 25 7c 11 95 cd 3b cf 95 2e dd cd 2f 8f b7 ba 57 d3 b6 cb 91 69 d2 fc a5 c9 9f 7b 36 69 5e 7d df 6b 45 36 69 f2 d3 23 dd 71 cd 6c 12 f2 58 ef 35 69 b2 49 54 9a 77 6e eb 30 44 33 4d 8e 4c 7a 27 f0 9f ed 95 67 64 13 41 58 f3 ec 23 92 8f a4 9c eb eb 90 df f7 74 49 fb 4d a2 32 7c ba 56 Data Ascii: %+v^}=;!o%\|V4Y+]Y?v5jDFqK 4O-\V/tKTM3n#!]63M4_j&I&Mk=aAG%\|;./Wi{6i^}kE6i#qlX5iITwn0D3MLz'gdAX#tIM2\|V
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8a d5 36 36 7e 96 20 0d 24 ca cb 97 1f 25 0c 31 72 e0 c3 7b f7 ec d9 83 0d db 48 8a 7c fc 15 33 d6 fe b0 ed 5f 27 a7 fd bf fb 29 2f 9d 99 9d 59 d7 6c 92 8d 07 0d 12 25 10 68 71 27 a4 14 77 87 e2 4e 68 a1 86 cb 1b ab e0 b4 50 08 ee 14 d7 10 d7 0d 31 92 6c 92 75 1f 7d c9 53 8e e3 b5 52 e3 cd df 7a 25 db 56 6d db 76 4a a9 7d cc 39 d7 de 87 c4 cc cc cc 0c df 81 96 2c fd 00 33 bb ec c9 27 8b 99 c1 7c cc cc fc 24 9d 7b cf 5e 6b 8e d1 5b e5 6b db b6 6b 4b 92 9c 31 e6 da e7 be 67 66 ee e6 c1 0b 9c 73 ce a4 6c f8 09 7c 03 74 a8 10 39 f9 04 7c 49 89 90 21 73 ce 39 4d 47 78 98 b9 d9 7b f7 ec 3d 03 12 23 49 8e a2 18 2d c8 93 8d e0 bc fd f2 c3 ff 4f b5 a5 c6 de e7 fb ad aa b5 b6 ef e3 d2 e7 9c 76 83 6e dc 5d 1a 97 40 42 3c 99 90 d1 eb ee ee ee 32 92 3b 12 17 98 09 09 Data Ascii: 66~ $%1r{H\|3_')/Yl%hq'wNhP1lu}SRz%VmvJ}9,3'\|${^k[kkK1gfsl\|t9\|I!s9MGx{=#I-Ovn]@B<2;
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: e8 9e 0b 43 75 48 52 b8 f7 a5 77 65 9b ef da 1a e6 d2 42 cf 05 46 97 f2 d5 ee eb 7b ff f4 c2 7b 55 2b df 8c 9f ea 1c 3f 23 97 9d 5b 19 7c c1 cf b3 c8 bd a5 65 ad 87 c2 ea a2 2c 19 f4 da 3e 2e cc a1 29 a1 e8 6b f1 d2 ae 24 5b 26 20 44 5e 09 56 9b 6b d4 ce f0 dc d7 33 52 ad a7 9f dd 8a 34 8a a5 9c 70 64 5b 17 bd 7d 6f b5 52 9b b7 7a cf 51 2d 40 c5 23 e3 f7 ee dd 56 b5 06 23 0f ae 35 91 2e fa 5a de c2 bd 42 4c d5 2a db f6 f7 9b 76 73 5d e7 29 a9 37 62 05 82 c2 b8 67 21 83 33 ed 98 e5 ec 3d a1 cd e6 8b 69 cb 58 eb ef d1 c3 fc 31 73 cb a6 2a a4 c4 25 30 ac 17 7a eb be f7 f9 f8 d7 d3 de f5 2c 51 42 39 4d bd 3c d0 2b 11 96 db a0 f9 16 45 37 ef 9d ad 37 0f e0 22 70 3a 66 45 61 80 d5 ae 6a ee 3d 54 8c 8b 0c ae a3 59 5a 30 79 69 af 03 50 2d 95 86 6a 4a 14 05 ef 62 Data Ascii: CuHRweBF{{U+?#[\|e,>.)k$[& D^Vk3R4pd[}oRzQ-@#V#5.ZBLvs])7bg!3=iX1s%0z,QB9M<+E77"p:fEaj=TYZ0yiP-jJb
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 63 69 f3 cd df 75 fa 06 a1 90 09 e5 77 ed d7 01 38 3c cc 39 9f 91 7b c8 97 79 d7 7d c2 84 ce 1e 27 c4 f2 c8 d0 96 d4 77 5c d4 8a 61 7b 77 c9 b3 2c 9a bd ae dd 95 8d 3b b6 5c e3 48 8d b3 61 af 5c bd 2c f7 d9 8f 7f 70 fb d7 7f 37 37 84 34 c3 cb 0c 2c 59 da 8a af f5 9e e6 84 1f b6 be 78 bf 49 2a 5c 69 8b ee a3 79 06 55 0c a5 21 b1 4d ea 50 dc 76 63 92 ea 3c 39 de ad 06 9b 8c bc 6d 54 42 f3 71 af 44 ed b8 3f b8 05 9a 61 e6 a6 84 71 b5 2b 70 d5 82 0b b6 d6 3b 57 aa f6 d4 34 28 c1 ce 47 02 d2 c2 8f af fc 4a 19 40 b6 2f c3 1d 06 ce 1a d8 42 a4 dc a0 8e ee a8 a4 14 6d ad 8d 01 49 f3 9b 04 27 f4 58 19 d6 cf d6 6f e6 4a 9f bf 78 e3 4b 40 e0 54 4b 35 28 02 e4 dd 92 0f 6e 3a 1a 07 4f 80 8e 56 6b ca 54 89 16 66 6b bf d8 0e 35 38 2e b4 35 51 71 d6 9b 17 18 58 c5 29 84 Data Ascii: ciuw8<9{y}'w\a{w,;\Ha\,p774,YxI*\iyU!MPvc<9mTBqD?aq+p;W4(GJ@/BmI'XoJxK@TK5(n:OVkTfk58.5QqX)
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 5c da 2c 65 e6 32 b5 8c 5f d0 6c 7b 53 e2 c4 22 66 87 0e ca 2c d5 c7 7c b4 e4 5d f8 f6 40 36 1c b8 0b 8d 99 b6 2c 52 ec 81 2e 2e 55 30 ef 85 88 b1 41 42 49 d4 85 2e bb 38 a3 29 68 e8 de ba 81 c0 a3 5d 5b e3 96 8c 91 61 f7 26 dc b1 74 1f 9f 43 e3 90 c3 0f 99 19 06 97 37 9b 73 7b ed f1 73 ef 3d 7e 3f ba da 62 6c 9e 3e 5f bf 2f 07 e3 5b 4d dc 42 ba ba ad b2 a1 bc 6e a3 2d dc dd 14 2a ed 91 d3 cc 5b a2 73 b4 3d a1 9f 9b 2f 0c 46 f0 42 42 9d 9a e2 9b 88 9b 5f fe 06 ee 69 c6 da b5 1e 56 8e 0f f5 8e fd 18 90 8a 11 e5 a8 8a 43 06 44 a6 b1 ea 3b 0a 3b 6d 62 c0 dc b4 8c 64 bf fc f9 3d da 3e 63 bf da de 75 50 7a 2e f7 ed 98 5f cf fe e0 ed 5f a1 65 66 d6 08 3a cb db 21 02 78 d3 4d 61 14 b2 77 bf f2 d4 e3 17 1c fb 9a 99 0c ee 29 ed 98 c7 f4 1d 46 0a a8 b1 52 54 51 87 Data Ascii: \,e2_l{S"f,\|]@6,R..U0ABI.8)h][a&tC7s{s=~?bl>_/[MBn-*[s=/FBB_iVCD;;mbd=>cuPz.__ef:!xMaw)FRTQ
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: b3 c5 24 68 dd fc d0 80 99 38 66 5d 9c a6 d9 c2 76 fb fd 63 ef d6 e4 02 85 8a 07 07 44 c4 7d 09 72 73 d1 6d 95 05 9d e6 d6 e4 59 de 91 8b 9b b7 fb 6f f7 1b a6 96 44 48 3d 7f f3 a7 63 1f ec 0b 7f aa f2 bd c7 6d cf 2e ce e7 80 ef b3 5c ff ba 39 ab 09 6c 30 4b 9b 46 23 70 86 e0 f6 98 17 22 97 51 5b f6 91 fd a1 36 46 a5 6e 1a f6 0d bf 5f df bc d0 85 c1 6f 2d 8d 50 d1 d2 e7 2f 7d 2f 38 56 e3 2c 19 8a 90 c3 1b d0 b1 0c 69 b2 a5 89 da 54 ae 3c 64 d5 06 e2 16 62 13 5d 7a 4e 28 8a 29 d1 42 70 38 df d6 cd 1b 35 ca a1 e5 0a 3d 4e 31 4d 28 0e a5 e5 d2 c4 35 f5 e9 03 47 bf aa 15 11 e5 b6 c1 20 a7 4c dc cc ba e0 b0 d9 ea bd d8 18 53 53 6c 62 6f 6a 7c 2b 5b ef aa d5 fd de d7 7e 93 ea 5b c1 7f f8 9e 07 08 45 b9 74 56 72 62 39 75 6f 76 4c 82 dc 8f bf dd ca 0f 6a d3 3a 03 Data Ascii: $h8f]vcD}rsmYoDH=cm.\9l0KF#p"Q[6Fn_o-P/}/8V,iT<db]zN()Bp85=N1M(5G LSSlboj\|+[~[EtVrb9uovLj:
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: af b0 8d 29 6d b5 46 08 6d b4 2d 6b ee 31 50 d5 92 07 69 d3 4c c3 75 b8 e3 4a fc 45 cf e1 36 ea 98 f8 1b 19 f6 74 b8 77 e3 05 f0 54 04 66 6e d2 ab 71 9d f7 59 8c f6 5d bf 7b 77 c2 1c 00 4f d1 2e 6b 5a 5b 05 2f b7 22 63 c3 f0 bc 73 bc d0 72 bf c0 b2 7b 30 ae 44 b0 a1 b7 09 53 df 61 ec 68 3c aa d8 30 d3 c9 0b 72 6c 22 59 2e 74 f2 e1 ef fb 83 ba ec 9c d2 0c 59 3d c0 58 8f c6 6c 60 e3 2b 47 eb 21 60 df 98 be 6f b1 ad 28 14 21 14 b6 6d 6d b6 b8 1b 28 9d 21 e0 71 2a e7 c4 51 59 bd 34 2d c2 02 80 a6 4d fb 36 b3 99 d2 84 be 5d 8a 0f f0 7a fb e5 64 17 36 c1 75 ff 44 eb 5b 50 9c 2f b7 4d e1 ee 5e df ff be ad a1 f1 c7 80 58 84 61 86 c8 67 a9 c5 ba 6c 5c c2 66 62 52 6f 78 13 e8 46 9b 97 5b 1a bc f3 34 e6 36 56 68 7e 61 13 e6 9b 21 94 db 83 f3 06 c0 26 e9 91 d5 58 ed Data Ascii: )mFm-k1PiLuJE6twTfnqY]{wO.kZ[/"csr{0DSah<0rl"Y.tY=Xl`+G!`o(!mm(!q*QY4-M6]zd6uD[P/M^Xagl\fbRoxF[46Vh~a!&X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.6	50015	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1087	OUT	GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 24734 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	732	IN	Data Raw: 52 49 46 46 96 60 00 00 57 45 42 50 56 50 38 4c 89 60 00 00 2f 0d c2 49 00 09 49 92 24 c9 6d 64 91 59 6c a0 99 85 ff 3f 18 10 9a 8b 66 39 46 f4 7f 02 f8 af 1a ff 02 59 d0 37 ac 26 fe 26 e9 57 10 5f 6f 7f 9b 01 09 d0 d7 d8 02 1b a8 fa 0e fb 74 9c aa aa f5 59 05 b4 6d 6f 42 92 29 6f f2 42 8b 84 08 a2 dc d0 4f 4c 7c d9 13 29 33 8c 21 dd db a3 46 91 40 97 29 49 b9 23 f0 61 5b 42 bb 0a 6b a9 83 2e 3b 92 d0 b9 a5 1f a2 13 f3 aa f6 02 7b ce 85 18 08 11 24 19 02 43 f2 53 30 a0 40 04 55 80 ed 85 65 b3 ec 0b 73 f7 6d eb ca 85 6e 18 a8 a5 c2 ec ec 3b c5 14 fb 0a 12 94 6f d8 8f 31 d6 94 b3 24 45 09 5a 01 e2 1b ed 00 5a 50 74 19 b5 24 55 bd 02 a8 ba 12 8a f0 42 11 20 18 92 f0 c2 f6 69 54 5d 44 40 56 de 2f 3d ba 7b 2f 19 d8 46 01 b6 db 1f f5 dc 9e 39 6d 73 3e 1e 5b d5 Data Ascii: RIFF`WEBPVP8L`/II$mdYl?f9FY7&&W_otYmoB)oBOL\|)3!F@)I#a[Bk.;{$CS0@Uesmn;o1$EZZPt$UB iT]D@V/={/F9ms>[
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 87 88 04 a2 01 1d a1 43 44 0a 32 bf fc 19 42 30 ae 00 20 8c 1a 16 08 2d c7 4d 9d b1 40 84 c2 62 92 40 82 04 91 10 5a b2 f3 26 88 04 19 02 21 84 71 15 3a e6 15 88 3b ea 87 27 f7 ec 6f 91 ba b2 58 2d 12 84 20 32 25 00 d0 23 09 06 81 48 2d 88 29 c8 3c 06 3b 22 b5 aa 75 11 69 00 04 09 41 66 f7 88 48 5f 0d e2 83 48 cb 6b 37 cb 08 2a 32 f5 ea d9 de a3 1e 28 06 0f 94 9e 9c fe b7 0f 83 96 2e 52 a5 68 40 07 b4 3c 10 39 8b 4e 5a 00 60 0d 9d 16 8a 0d 69 d9 a8 25 c8 2a 05 62 a7 ff 99 ab 16 6b 88 2a 7b db 3c c8 38 68 b5 0a d3 49 58 d8 f8 30 33 12 01 59 a9 51 03 31 8a ad 62 83 b4 40 9a 26 4d 43 09 2a d0 94 b7 00 00 08 07 cf 44 60 b5 03 68 a7 f0 42 87 34 fd b3 b3 80 90 6a 1e 60 2f 97 00 90 7b a2 f4 a4 94 ab 32 ac ba 44 92 04 df 97 12 63 73 20 50 4d 03 c0 de 5b f1 ba 02 Data Ascii: CD2B0 -M@b@Z&!q:;'oX- 2%#H-)<;"uiAfH_Hk72(.Rh@<9NZ`i%bk{<8hIX03YQ1b@&MCD`hB4j`/{2Dcs PM[
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 55 87 6e 02 48 44 8d 91 27 ff 3f c0 45 92 d2 8d aa 3a 33 83 72 88 90 74 cb 22 49 ab 68 c9 e3 9d 80 dc 19 90 f4 9a 4f 8c aa 39 d2 0d 73 65 c1 23 9e 42 68 e3 4e 32 05 b4 14 a2 8f 27 55 75 18 69 74 2b 94 44 c5 75 82 8a 80 09 02 cd 22 e7 23 14 ad 9a 09 02 8c 52 f3 ba c8 79 5f c1 92 89 31 61 40 9e fb 33 35 0a b2 92 09 04 c7 84 7f 06 c0 21 c8 90 9e 40 20 5e e8 7c 58 0d 04 28 26 1c 2c 72 3d 44 a2 98 90 50 d4 19 e8 13 10 bc c5 15 5a 4c 9b 80 40 37 4e 30 fe 2d 23 2c 43 58 35 01 11 23 2c cb f2 53 3e da 4f 5b c2 09 58 09 ea 53 f5 4e 14 55 50 56 2a 1b 9d cc 58 3e d3 8f ea 0c 11 00 bf 51 3e 03 9f 51 7e 31 0f f2 f0 56 ea ac 0f b1 98 d5 c3 de ad d3 bd 5e 29 dd b3 a1 ed 4b 92 1b a7 c7 d0 6d 62 1f 50 1a b2 b8 70 8e 7c cc e0 3b ec 75 8c 81 6b cc a3 32 c1 03 c9 aa 25 2b 99 Data Ascii: UnHD'?E:3rt"IhO9se#BhN2'Uuit+Du"#Ry_1a@35!@ ^\|X(&,r=DPZL@7N0-#,CX5#,S>O[XSNUPV*X>Q>Q~1V^)KmbPp\|;uk2%+
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 5b 3c 69 ed 39 28 3b 3d 5a d3 a3 57 39 a3 a9 a4 b2 40 00 96 d8 7f e8 e2 3f 77 d1 75 a8 4f a5 a7 07 74 a1 d6 fc ef 23 d1 dc af c7 b8 03 6a 25 0c 70 b3 11 9f 73 f5 48 46 eb ab 10 a5 72 3b 98 ff 3e 4c ad 6d 78 94 cd 95 97 db 31 ea 98 cd 4d 67 5e ca a2 95 60 d5 9c 47 45 90 54 23 8b ed a1 bf 32 8a 25 2e 3e 6f b9 e4 fc b5 10 07 5f f7 2c 63 fa 9e ce ad 3d de 30 56 19 65 3d bf bb 94 92 03 5f b6 be 42 05 78 62 29 ce 36 80 49 27 8a 72 67 ba 59 7e 73 1d f5 e6 cc 49 b5 af 37 ad ce 8a 40 f3 b2 9f a4 43 7c 9d a1 ca c9 b2 85 fc 4c 3f 74 33 b9 6c d8 fd 31 da a0 12 b9 d9 45 fe e3 2a ea 8b 5e 78 e4 9f 5b 54 ec 20 66 49 fc c2 28 18 00 d7 51 97 27 71 7c 26 9f fb 21 ce 99 f3 e4 de b3 e6 6b 50 83 43 d1 2a 62 1e 88 b0 1e ae da f6 50 35 2e cb 7d 9a 0b ad e0 21 2a 6d 3b ad c5 a2 Data Ascii: [<i9(;=ZW9@?wuOt#j%psHFr;>Lmx1Mg^`GET#2%.>o_,c=0Ve=_Bxb)6I'rgY~sI7@C\|L?t3l1E^x[T fI(Q'q\|&!kPCbP5.}!*m;
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a8 f9 c5 ea 23 cc 9a 88 cc 6e 53 86 58 45 35 9a 3a 57 6f 80 73 ac 9b d3 23 35 de 9b 68 48 44 c6 72 63 35 3a 91 fd 02 4e 4a ff 0c 31 23 3c 02 ec 84 6f b5 2a ad 2a 09 4a 79 22 00 1c 24 d6 8a 57 e3 a1 c4 cb d8 2d 23 6d ea e3 b3 d9 fc 56 bc cf c9 2a c5 32 15 5c da 55 3f d1 3f 72 84 59 13 1e 5f b3 55 41 45 97 e8 b0 03 ac d4 a9 0b e8 f1 33 ab 7d 53 ce f6 8d 1d 9a 13 c0 08 58 c9 23 9d c4 22 b2 ba 9b 93 ce 57 5f 4a a5 09 5f f8 89 08 0f 57 98 aa f0 8b 00 0e 89 64 4c a7 a9 8b 2b 42 4f dc d3 9e 0e 03 5b 52 78 c2 c9 49 c2 f4 05 f0 66 e2 89 66 a9 6a 2e e3 ae de 98 09 22 bc 49 54 d0 5f de 39 bf 98 30 f2 09 ed 13 7c e3 cb bd 75 99 37 5e 96 e8 da 26 0b 24 b3 cc 20 1a c2 d2 75 0f ba 89 45 84 75 17 07 89 a2 a5 48 b7 03 89 64 80 49 04 03 41 d4 49 80 2d a9 dd 21 06 0a ee 15 Data Ascii: #nSXE5:Wos#5hHDrc5:NJ1#<o*Jy"$W-#mV2\U??rY_UAE3}SX#"W_J_WdL+BO[RxIffj."IT_90\|u7^&$ uEuHdIAI-!
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 94 ed 8f 5e aa 05 a3 f0 e2 ab eb 2c 6f 1d 80 4f ba d4 9f ec 88 02 da c6 d7 fc 0d 0d e2 1b 00 7f 08 42 fa 43 01 39 24 40 2d e4 67 73 3f c7 b7 7f 0d d0 18 eb 16 3e 70 d7 0b d9 f3 42 9e 2b 94 d9 1a dd 60 11 79 dd 23 ea 48 82 57 12 00 23 32 86 cc 6e 44 00 3f 8e 7c 86 a4 54 e3 c4 9e 89 ed cf 5a 83 1c 0a 63 d9 77 7e b6 5b a3 29 01 62 a2 cb a6 58 79 d1 5a bd 60 29 47 67 e0 b7 50 3a 60 be fa b4 b1 a8 51 c3 6e 8b aa b1 42 3a 70 c5 0e c2 0d 87 3e c8 44 72 e1 96 db 81 73 8c df 0f 54 9a b1 fa d8 bb b6 1c 61 ab 3d e7 27 e8 38 8f 4f cd 3d fb 84 5c 7a ca c9 e5 b2 7d 5c 2b c5 3a b6 e0 8a b3 06 ec 71 21 8f df c7 bd ee 8c a9 57 f3 fc c5 47 79 3d a3 9e a6 5b c5 5a 32 a5 c2 ea 31 cc 7b 5d 71 35 fc d1 5c 77 cd f9 26 e3 ca 47 1a 4f 3c eb 57 b9 e2 0f 57 b0 c6 04 5e 6f 19 64 c1 Data Ascii: ^,oOBC9$@-gs?>pB+`y#HW#2nD?\|TZcw~[)bXyZ`)GgP:`QnB:p>DrsTa='8O=\z}\+:q!WGy=[Z21{]q5\w&GO<WW^od
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: d1 e1 ff 57 07 a3 44 4c 13 71 2b 40 8c 48 70 cc 96 69 ba 94 6a f0 1b ae 96 f8 4b 7c f7 e3 b0 51 40 0a b7 e4 71 b6 7b 36 f7 c1 84 5b 56 59 a1 1b 48 3a c3 c9 46 41 4a ee 93 26 d8 2e ca e5 1c af 56 5b 6d 8d 1a a7 c1 80 4b cb 89 a2 22 3a f1 2c bd 16 d8 f2 af d9 cd 8b 2b 5e 80 a2 eb 75 99 c3 77 4b b4 84 0d 36 79 ed 01 a7 6c 82 75 42 b6 a7 28 c8 4b 41 11 82 90 b6 42 63 6e 54 f3 6c 43 d7 59 17 42 42 c2 f6 62 e2 12 7f d4 8a ad 96 8e 65 9b 72 19 ed de cf 7b df 74 a2 5f cf 14 b3 40 29 bd e6 84 15 6e f6 e3 76 20 01 58 78 64 60 78 16 d9 4c 42 d6 8d dc aa df 0f 59 4e ab cb 60 cc 4b 1a f7 67 73 2f f9 4b ba 95 af 6b 7f 3b 87 1e ac 64 44 dc 4e fd b6 be 02 85 3a 40 37 eb 3c ac bf b9 9b c2 0c 65 f8 85 52 23 71 24 4d 91 a3 04 91 d7 65 26 11 b5 c4 b9 3f 58 7c a1 a8 c1 69 38 Data Ascii: WDLq+@HpijK\|Q@q{6[VYH:FAJ&.V[mK":,+^uwK6yluB(KABcnTlCYBBber{t_@)nv Xxd`xLBYN`Kgs/Kk;dDN:@7<eR#q$Me&?X\|i8
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 0a ae 2b 28 5b e1 b4 cc 28 8e 24 60 04 14 19 a1 aa 97 50 94 01 01 a6 04 91 62 fa 2a f3 c8 a4 c2 e0 64 ad ff 9e 77 b6 1d fb f5 25 17 70 57 c7 19 81 43 11 8a 45 77 fe e4 b6 c7 fe 86 1c 1a 2b c4 57 ae 32 20 84 21 29 7f d5 dd f7 55 8a 0a d8 7a 1d 1d 1b ac 68 37 9f 91 23 09 5d 4a ad 31 f7 ee c2 5f 86 61 0f 28 06 b2 c9 fa 2b 76 58 be fd ba c4 30 4e b4 c0 ca c7 65 3f 64 a5 2e ab 92 07 6f fe d5 7f 92 43 32 5f 95 71 fe 85 8c 42 0b ac 62 68 5b c5 0b 7e 7e 22 4c 3f 06 7c 79 25 b7 5f e0 dd ec b8 dc d7 09 d3 db 24 71 ee f7 8f e5 80 ad 97 6f 23 9f ca 72 9d b2 4a 7f 18 f3 dc 6d 97 5d 52 41 b7 79 aa d1 3b ac d1 8f be 23 cf b7 b6 80 c4 e7 70 e1 54 ba 57 1e ec 7d 65 df 61 95 8d 34 ee fc ab 3f 07 2f 7a 85 91 39 fd 04 88 1e 78 a5 a9 eb 58 c1 f2 24 b2 e6 57 b1 4d a7 72 d8 7d Data Ascii: +([($`Pb*dw%pWCEw+W2 !)Uzh7#]J1_a(+vX0Ne?d.oC2_qBbh[~~"L?\|y%_$qo#rJm]RAy;#pTW}ea4?/z9xX$WMr}
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: b6 fc 19 7b 6e a1 f4 92 82 00 be b8 25 87 b2 5c ef 74 2a ed b1 1f 7e ff 13 6c 32 79 49 8a c7 1d 7f f3 ae 3a 2c aa 05 80 95 4f f5 ee b2 af 34 34 5d 13 2b c3 4d 41 9e 7b 5d dd 37 fa 98 43 7a 30 5f e4 f7 97 d6 09 7c 60 45 79 49 aa a1 81 d5 7e d8 17 aa ef 1b 2f 2d 64 e0 6d d6 ff e4 3f e5 17 70 64 9f 2f 3f fa 03 03 7e db 10 10 be 2c 5e c4 d8 6b bb 24 d7 5c 02 3c c3 13 4e bb cd 88 42 93 73 11 61 50 3f 32 4b d8 60 4d df 06 95 a7 d7 ad 30 d9 3e 29 d5 2e a6 fe 9e 4f e1 46 ab ef 9e 6c cc 65 9f a3 ba 49 08 9a fd b8 ca b7 f4 69 da 6d 63 f5 05 18 f2 c8 4d 57 ad 7b 6d 5f b2 99 3d 87 ed d9 25 c3 98 d3 26 e1 c8 8d 57 cc ce 75 b1 07 1d 19 d5 fb 1f c5 b9 e7 9d 4b 97 32 fd d4 b3 f7 21 fb 2b e5 80 30 ad 56 d5 59 7d 88 de 00 71 ca 61 dc 69 a9 04 32 e9 0c 69 0b 74 4b 82 fa ea Data Ascii: {n%\t*~l2yI:,O44]+MA{]7Cz0_\|`EyI~/-dm?pd/?~,^k$\<NBsaP?2K`M0>).OFleIimcMW{m_=%&WuK2!+0VY}qai2itK
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: df 45 1b 75 a7 b2 45 ec 0c cd 04 8c 74 7a 92 18 93 cd 1e 97 d8 64 5d 6f b7 6c 69 7c 2d a2 92 ad 11 7f 50 51 7e ac 9f ce a5 6a b7 63 95 1a 3b 35 cc 58 75 d2 bc ec c2 5e bd f7 12 f3 5b 9c 81 fa f4 b1 2e f1 47 de 64 3b 37 1e 7e 98 f7 5a 2a d7 04 e5 b9 7e 9b 4d b5 c9 b6 1a f5 1f 62 6c 94 78 fa 15 c7 e5 ec ef 8f 1e 55 fa fb ff 34 89 e4 cc 7f ae 30 8f f5 37 7a bd 91 ab 9f 54 aa 45 d3 6f 8b 59 6e 2c 7c d9 0c 3b 61 3d 63 e1 86 8e 49 59 6d 60 77 2e 5b df ff 1c 22 9d 76 9b 0e 7b c4 22 6f 3c 2a 26 95 69 b5 a3 b2 f8 11 1b cb 8b e5 29 61 66 39 49 32 16 7e c3 8b bd c9 fc d5 ea f0 39 94 e5 dd 3a 96 a1 6f af bb a8 59 79 36 75 e3 45 70 50 79 a9 5d 75 b8 6b bc 1d 8b b1 af f5 86 2f b5 e9 94 15 61 c0 82 32 9e d3 32 7f f5 54 9b 95 66 50 47 39 f5 e1 3e 37 a7 db 55 2b 7f 44 f3 Data Ascii: EuEtzd]oli\|-PQ~jc;5Xu^[.Gd;7~Z~MblxU407zTEoYn,\|;a=cIYm`w.["v{"o<&i)af9I2~9:oYy6uEpPy]uk/a22TfPG9>7U+D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.6	50016	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1088	OUT	GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 503752 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	731	IN	Data Raw: 52 49 46 46 c0 af 07 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 ff 0e 00 6f 08 00 56 50 38 20 cc ad 07 00 b0 92 22 9d 01 2a 00 0f 70 08 3e 3d 1e 8d 44 a2 21 a3 26 22 b3 69 30 c0 07 89 67 6e d4 b0 5f 9b eb 8b f8 82 5f d4 73 0f 91 46 8a b0 e3 ce cb b2 97 0d 1b 66 ff fd ff e7 d0 d1 37 fb bf fc ff f1 f3 67 c4 ea d9 fd df 97 1e ef ff 49 a3 fb 1f d9 3b f2 b2 6e 5f b0 4f f5 6f f2 7e 9e 3f dd f1 c1 ea 3f ff b7 cd 57 fe df 53 5f fb fd 13 7d bd 8e 67 b1 ff ce e6 79 8f 9e 9f ce 5f 73 0e 69 f4 83 ec 7e 5f ff 39 f3 77 ff 1f 1e be 07 ff 37 99 5f aa 7f 57 ff af fd 6f e5 d7 cc 9f fd 1f fd 7f e3 7c 03 fe a9 ff 03 ff 87 fb 2f df 4f a2 5f e8 df e2 ff ea 7f 9b ff 43 fb 77 f4 c7 ff b7 ee 37 c3 3f f1 df fb fd 60 7f 63 ff 9d fb 8f ff 3f e1 23 ff 7f ee 8f fd af 94 9f d5 Data Ascii: RIFFWEBPVP8XoVP8 "*p>=D!&"i0gn__sFf7gI;n_Oo~??WS_}gy_si~_9w7_Wo\|/O_Cw7?`c?#
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 0b 93 fa f6 10 05 2d 0c 31 69 93 31 3b 59 a1 7c 97 50 90 54 cf 56 23 01 da b2 36 e1 6f 43 18 54 ae b5 9a cb cf 92 e1 75 d6 2d b3 f7 a8 b7 fc 9b c7 d1 f6 48 12 95 ec 16 78 5f 36 01 a9 c3 32 07 de 17 23 df 84 49 6b 4d 49 25 6e 91 19 38 1a 5f ac c1 fb 26 de b5 10 15 96 7c 86 5e 7d c9 6f 71 35 e7 de 15 0b d7 70 5a b7 e5 6f 43 20 6a a2 21 bf 62 4b 25 4c b4 33 bd 57 9f 25 75 cc c7 f7 0c c8 1a b8 bc da cb a8 24 74 d1 0a e4 64 5c 85 41 81 a7 66 42 fb 87 86 9a 50 91 ab 09 a4 d7 0b a3 8a 09 9f 49 5c 7e c2 d5 75 c2 7a 11 02 56 b7 84 cb 70 dc f9 0c bc fb 92 d9 76 74 8e 5a de cb c2 1d fa a2 0a 7c 37 1b 72 1b 40 ca 60 0b 91 ff de 17 26 b1 4c f7 45 ed b4 03 74 42 0f d0 0f 6b c8 80 15 e3 b6 8b fc ed 97 9f 77 ec 83 9a eb e1 5d 08 1a be 5c d4 50 7f 4a 0e ee 26 6d e8 38 5b Data Ascii: -1i1;Y\|PTV#6oCTu-Hx_62#IkMI%n8_&\|^}oq5pZoC j!bK%L3W%u$td\AfBPI\~uzVpvtZ\|7r@`&LEtBkw]\PJ&m8[
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 7e f3 98 b2 0d 1a dc d3 7a 7f ff ea 57 2f 1f c7 66 e3 70 37 f6 eb 18 50 49 78 ed a0 15 9f 3b 1e 5e be 1a 85 9d 32 93 31 9f 69 fa b5 85 e2 ad d4 81 4c e5 8f 38 c0 44 3b ae 49 ec 78 9a ed 54 42 d5 5d ea 06 9d 07 60 ce 79 3c 0b 9d 76 5e 01 c8 f4 e5 3a 3c 4a d7 3a 20 42 b8 54 63 c9 6f 11 75 74 00 a3 29 54 94 75 51 45 57 30 c5 40 56 bd e4 c3 74 02 ee 96 31 7e 3b 06 19 a9 7f 95 fe a9 da 16 5d 3a 57 71 3c 10 69 83 14 ad 07 83 6a 67 18 5e c5 ec cd df 47 b9 35 15 ed 6c 57 e9 67 01 2e 04 7a 9f 53 49 c7 60 c7 51 30 45 e6 f2 79 be 82 65 a5 6d f9 49 f9 6f 63 74 f0 4f 93 ff 13 07 5b fe 0a a2 6f 71 96 fc ff 2b 00 cd 5b 93 e7 c4 0e a9 97 54 d7 2d 76 b2 1c fa cd 5c 11 8c eb 68 b9 d3 31 74 d6 28 cd 11 af ec ca 05 0f 6e fc 0e c3 56 25 e2 cf 51 6f 45 da f7 67 2c 25 b9 7c 95 Data Ascii: ~zW/fp7PIx;^21iL8D;IxTB]`y<v^:<J: BTcout)TuQEW0@Vt1~;]:Wq<ijg^G5lWg.zSI`Q0EyemIoctO[oq+[T-v\h1t(nV%QoEg,%\|
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: d6 53 15 d2 00 a3 4e 1f 30 d2 3f d5 e9 b4 75 7a 46 05 ec cc 10 2a 42 ab 57 93 f6 29 62 58 84 11 89 1b 4b 19 15 90 34 5d 9e 41 56 11 c0 75 26 17 1e 3d a7 40 0a ea d6 5e 77 a2 92 1e 0a d8 e1 eb 07 59 e6 9c 1b 0d 52 c3 ba c7 9b 29 1d 17 01 b4 ff 65 91 62 84 c0 96 8e 52 a8 5e e2 10 3a bc a7 75 9a 1c 25 45 46 12 4e a8 56 c5 c1 04 78 f4 60 17 35 4a 20 49 50 6b 3b 85 0a 35 44 ce 67 e4 1d de e8 b0 a5 05 da ec a1 77 e6 9f 5d 9e 72 8f 0d 1f 58 0a 94 97 10 6c bb 7b 48 e2 4b 0a cf d4 b0 fa 7f 71 6e e2 c0 a2 0e 86 80 1b b1 7b a6 f1 1f f5 e0 39 ef ba 1a 32 42 bc 34 e6 80 43 08 cb 78 69 49 27 86 8d ec ca 86 c0 54 04 60 5e 20 11 c5 3b 06 1a c0 08 c9 dc e3 cf ff dd e2 c8 69 91 59 b0 3e e8 5e 85 1a 8b e2 7a ff 7e 9a bd d4 75 af bf 92 2f 13 29 27 71 5f 63 b5 56 32 a9 14 93 Data Ascii: SN0?uzF*BW)bXK4]AVu&=@^wYR)ebR^:u%EFNVx`5J IPk;5Dgw]rXl{HKqn{92B4CxiI'T`^ ;iY>^z~u/)'q_cV2
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a7 38 33 21 76 e9 d7 95 df 46 24 bb f3 62 9a 8a 6b 6f 16 78 53 8c dc 30 58 45 f7 f0 cf 68 cc 19 e7 f7 f4 aa 94 11 f3 62 8f b3 b3 dc 5a eb ac 92 94 79 92 73 2b aa f7 cb cc 05 d1 c1 52 1d 92 d7 42 68 1c 82 fe e4 1e f1 07 34 c5 67 5c 5b a8 72 c8 b0 c6 ee b6 49 59 bb 1c 71 f8 ad c6 42 15 13 89 39 c3 a3 ac 48 5f 93 10 ac 28 b8 f9 a3 71 40 a8 8e cd cd 86 f6 ca 55 4f e5 f7 89 9c 76 88 0e c2 84 9a 9e 7d 8b 19 93 46 d5 f0 c1 62 4c 97 ec 58 aa 45 0e b1 96 cc de 8c 12 b7 6d 76 9d 1f 11 e0 5e 66 80 3e fb aa 91 a9 f8 76 28 73 4e 69 d7 c7 c5 db b5 13 ec 6d 60 62 53 d9 d5 4e 08 60 e4 0a c8 6d ff b7 0f 5d 74 d2 35 dd 0d 35 da 99 f5 fb 14 d6 c5 77 dc 31 f8 ac 68 9f 4f 2d 28 53 fa 49 65 79 22 7b ff 53 54 22 ce fa 0a f3 53 cf b6 76 58 b3 31 30 23 aa 5b bd 8f 87 d3 e5 d5 56 Data Ascii: 83!vF$bkoxS0XEhbZys+RBh4g\[rIYqB9H_(q@UOv}FbLXEmv^f>v(sNim`bSN`m]t55w1hO-(SIey"{ST"SvX10#[V
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: ed 64 19 78 5c 24 af 0e 5d f5 85 58 fb 3e b3 e3 a6 21 98 5e 4a c9 c5 99 df e8 c0 87 62 46 f6 a4 75 f9 e4 7c 41 c2 68 52 d4 8b 64 52 e9 ab 31 0a b5 f8 dd 53 71 22 c5 a3 31 3c 95 6d 28 1e e3 86 09 49 09 c6 20 4b 87 13 e1 94 84 43 be a3 eb 8c f0 5b f2 73 7e 67 09 5f 1f 9a c7 bf ca 87 ce 4e 78 47 6d c9 e0 c8 c2 b5 d5 ea 3a 09 4d fb 3c 64 cc 0d 94 68 9e a1 47 8c 39 af 27 c6 dd 52 61 28 e1 07 b0 e4 3f 1d 43 63 e0 76 97 9f ed ea 78 35 f8 ab 3c 00 5e ee 93 8e 4c 34 37 f0 2b 82 06 57 c6 ba 41 1e 32 6a 2b a7 5c 1b 8c ef 81 20 3e 26 93 5e 9b fb 02 0b 14 fb f5 e0 95 bc 5d ec 88 46 b7 c2 68 f5 fc 53 d9 c4 e8 5c 0d 6f 34 7d 22 b3 f1 18 73 4f d7 bb 18 03 99 8b a0 1a db 4f 8c 3d d2 d8 cb 82 22 48 93 87 2e 19 1c d4 dc 6d 5e 1b c6 2c 6a 41 ca 9a eb 50 cd 5b 0b b8 4b 85 ce Data Ascii: dx\$]X>!^JbFu\|AhRdR1Sq"1<m(I KC[s~g_NxGm:M<dhG9'Ra(?Ccvx5<^L47+WA2j+\ >&^]FhS\o4}"sOO="H.m^,jAP[K
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 91 c5 35 0b 69 85 19 10 51 bc 5f 34 8c d3 84 ac f0 d7 36 6d 82 bc e2 f2 62 6b 0d b2 aa 1a e3 43 03 20 46 01 86 ab d3 97 59 60 a8 f0 8e 6b 48 66 49 7c e2 f1 cf 1a 0c 85 76 04 e6 22 4f 37 ca d8 eb 62 53 dd c0 35 b0 79 40 70 09 ae bf ed 01 6d 56 ec 17 8f 91 db 5b 9e b4 61 06 d7 38 2e 62 73 0a 12 e0 5e 6f 9f a9 d6 c3 b4 a8 c4 6e ca ec ad 8d b0 1c 1f 3d 59 45 b9 9f d6 02 20 97 b7 fd 62 0b 2d 4b e5 79 88 a7 9a 80 52 b7 4d 81 c0 87 4a 42 aa 7f 00 27 9b 17 9d 1f f9 43 36 1e 0f 1c 72 da 5e c8 fc 4d a1 b3 2d f2 14 3e 0f 25 c7 3d 47 9a 6e 9d 12 55 f1 dc c5 6f 8f 0d c7 61 0f 3e f2 51 a7 23 52 43 37 15 85 3e 71 8b a8 e6 ac b0 8b 13 88 e0 ab 11 8d 2c 76 eb 20 cb 1a 9f 95 e6 5a 0a ac e0 df 27 20 bb 66 eb 64 16 55 90 77 45 fe 15 ab 33 84 58 55 10 1b 49 dc e5 7a db 4b 1c Data Ascii: 5iQ_46mbkC FY`kHfI\|v"O7bS5y@pmV[a8.bs^on=YE b-KyRMJB'C6r^M->%=GnUoa>Q#RC7>q,v Z' fdUwE3XUIzK
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a5 04 bc 69 33 db 83 cd f2 57 d8 a6 f3 a6 73 7b 6e 92 47 a2 5e 0b 9f ca f8 72 9f ca fe d5 33 87 f9 30 fc 90 6c bc 17 04 ad f7 b3 50 08 c4 77 af 58 2e 01 06 84 78 56 64 ed 92 ef 26 c8 07 05 be e2 f1 e2 25 47 10 8e aa 91 18 85 16 b9 12 d1 61 a8 a4 ce a8 cc 15 7e 58 9d 77 88 19 dd 87 c1 39 00 7c 84 f7 d5 a7 25 11 50 93 55 a7 57 49 1b 75 65 de 96 75 2f 38 a3 7b 10 1b dd 58 a1 a0 23 aa ac bd f3 07 db f6 29 fa 52 28 12 20 c5 9b 23 e9 f5 6e 23 68 d4 8c 84 72 46 09 6e ed 17 e7 6b 8b 8d 46 87 f0 ed 6e 3b bd 83 5e 1e 2a b8 b4 73 4f 47 6d 64 21 b6 d7 64 48 b3 d0 88 ac 92 a8 b7 ee a5 01 ca 73 9b 39 cc 9a 74 42 8a eb 8a 16 25 1d 58 ef 22 d9 29 75 f7 2b d4 9a 89 7a 22 ba 90 86 ef 67 00 54 66 6e 18 ab 18 0f 3a a8 56 5d 5d 88 d3 af fc 16 5b 11 a2 76 56 54 0d 20 02 3a dc Data Ascii: i3Ws{nG^r30lPwX.xVd&%Ga~Xw9\|%PUWIueu/8{X#)R( #n#hrFnkFn;^*sOGmd!dHs9tB%X")u+z"gTfn:V]][vVT :
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 31 a6 8a a6 1e 05 30 47 81 34 e9 fb da 99 dc 05 51 e2 42 c4 a1 1d 0c a1 57 b0 04 ed 86 a4 8d 49 ce e0 26 a7 b9 87 5f 4f 7b fa 19 f7 be 1a cb ce 58 b6 7b 34 53 42 46 77 f0 a2 8f 9b 2e 5e 83 1b 6e 18 a3 f3 cc ae 71 3a 7c 4b d3 cc bd e5 57 88 88 bb 3e fd d0 e2 27 c7 f4 bc 79 5b ff de 9a d6 c1 c9 83 01 42 ee c2 22 44 f5 6d 28 6b 75 0f 9b 66 48 e7 65 ab 16 4d cb b0 bf ba ba 1f 2c b7 db f9 24 4c b9 ee d7 35 d6 c1 c0 c7 32 e4 d3 fd 5e 68 3a 49 b6 f0 7f e9 af d3 42 26 cf 26 71 e9 ba 9f bf 14 68 d4 18 f4 96 91 3e 51 fd c4 0f db ce d1 05 aa 64 00 14 f0 84 8c 71 de 1a 1a 48 4d a9 0a 78 87 5f e2 6e 74 8b 0c 62 92 c0 33 fc 2d 83 a2 9d 6e 16 54 58 27 12 59 01 ee e1 94 03 78 8f da c6 73 60 b1 dd dc 14 c9 1b 52 e2 21 02 f0 d5 f5 7b 8f cc a7 30 95 65 d4 7a bb 3c bd 40 c5 Data Ascii: 10G4QBWI&_O{X{4SBFw.^nq:\|KW>'y[B"Dm(kufHeM,$L52^h:IB&&qh>QdqHMx_ntb3-nTX'Yxs`R!{0ez<@
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 24 e0 0f 58 b5 19 75 c5 3d d9 18 3c 40 3b c5 2d 4f 92 9f b4 81 d0 8c 8d 45 58 6d c1 39 65 54 6b 1d 5b d8 dc 3c 90 fb 0a 39 7f 32 cf d1 d0 de b9 9e 72 5d 72 43 8c c3 96 d1 3c c1 5c ed 87 0c dc 57 fb 3a 61 c1 fd d6 c8 79 e4 4b 47 1b ab 72 dc a9 45 05 71 ee 17 62 23 d9 98 1e 17 19 11 d5 fb 50 c7 87 58 70 58 22 5d f0 19 66 d5 c0 a3 e3 5b 55 9d a9 ec 75 d1 4c 67 b7 9d 47 91 05 eb a5 49 6c 34 5d 5b 9b 02 75 f0 76 c4 e7 bf 32 07 91 7d 1c d0 59 f6 06 c3 08 e2 4e 12 29 6c 34 e7 74 14 47 2d 08 dc 11 e1 a5 6a 5c a8 c2 7f 0d bf 6c 0e 0e b7 8c 63 07 2a 21 db 9b bd 26 df 04 84 cd db 7f f7 a5 10 b3 3b 9e 86 a5 1c 7a f5 4b db 74 48 4a 8b a1 33 40 b7 72 4e 4f 88 e5 d5 0a 10 2a 51 5f 11 99 28 b2 6d 28 20 db 53 ff 42 c8 97 c9 12 ca f4 7b 3e 74 1f f8 24 c2 05 8b 6e cb 8f 5e Data Ascii: $Xu=<@;-OEXm9eTk[<92r]rC<\W:ayKGrEqb#PXpX"]f[UuLgGIl4][uv2}YN)l4tG-j\lc!&;zKtHJ3@rNOQ_(m( SB{>t$n^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.6	50017	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1079	OUT	GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 370 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	370	IN	Data Raw: 52 49 46 46 6a 01 00 00 57 45 42 50 56 50 38 4c 5e 01 00 00 2f 5d 40 17 00 df e2 36 b6 6d 55 d9 e7 7e 97 d4 80 98 26 e8 80 da 29 85 dc e1 1e a4 09 46 91 24 49 c9 59 01 1c 56 f0 8b 32 4c f0 5a 6e da 4d 24 db 52 d5 ac 39 38 c0 08 fe 03 0c 60 83 e8 af e7 cc 7f 3a 4d 40 50 03 c3 c2 b0 08 85 e0 1d a8 4d f2 9d bc 4f 08 6e b4 19 11 aa a2 45 81 7d 21 28 08 01 61 aa 03 06 c7 e1 22 04 02 02 06 81 80 30 66 23 fc 03 81 43 1e 02 06 75 05 0a 7f 28 8e 81 53 a4 5e f7 47 ce 3f 97 7f f5 6a 37 0b d4 db 4b fa 41 9d 9f dd db 1f 59 a4 a8 2c 76 db 9b aa f2 0b 84 90 7f dd 8f 93 83 83 77 f2 2d c2 ba 2c 4e eb ec d5 21 f8 e7 7d e2 1f 7f e4 81 3f 0c b0 24 c9 36 6d ad 6b db b6 6d db 36 df fc e7 d2 b1 e2 fd 5e 45 f4 7f 02 e8 a5 b6 58 82 96 d2 57 a8 82 73 1a 1b cc 58 d3 2f 4b ab e7 0d Data Ascii: RIFFjWEBPVP8L^/]@6mU~&)F$IYV2LZnM$R98`:M@PMOnE}!(a"0f#Cu(S^G?j7KAY,vw-,N!}?$6mkm6^EXWsX/K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.6	50018	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1080	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 1420 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	733	IN	Data Raw: 52 49 46 46 84 05 00 00 57 45 42 50 56 50 38 4c 77 05 00 00 2f 33 c0 0c 00 09 33 6d db 28 7b 13 fe 88 3b 0e 11 fd 9f 00 fe 4a 90 71 0e 13 99 0f 2c 18 45 92 a4 28 17 8e f9 9e 7c fe 75 9d 95 f5 60 24 92 94 95 2f 09 c0 d0 3f 1b 01 50 08 c5 6d db c6 59 3e 93 f4 9c a0 c8 0e ed 7f aa 46 31 82 9e 1e 40 b4 f4 80 00 8e f3 b7 9d f5 ef 03 20 ff e2 db b1 1a 2b 00 f2 3c e0 d3 28 40 67 db b6 63 b6 73 dd df 60 ad d8 b6 6d bb b6 f3 13 8c 6e b7 31 5a a7 ca 91 3e 95 93 d6 e6 46 65 db d6 cc 7c ef 55 7c 6b 67 be 29 d3 d1 b1 b5 ed d8 f6 ec eb 7e 7f fb 8f 6d db 46 65 73 00 d6 30 b2 d2 3a a9 32 04 9b a5 93 ca 76 65 1b ef f3 5c 27 e5 da b6 55 db 4a 1f eb dc fb 0c 77 09 02 22 a0 e4 52 23 0f 62 21 0f 4a 0e 71 58 06 44 e0 f6 b8 77 c5 04 08 fc 3f 3e fb f9 5d f4 b2 ac 84 15 d1 62 b5 Data Ascii: RIFFWEBPVP8Lw/33m({;Jq,E(\|u`$/?PmY>F1@ +<(@gcs`mn1Z>Fe\|U\|kg)~mFes0:2ve\'UJw"R#b!JqXDw?>]b
2024-04-19 14:06:49 UTC	687	IN	Data Raw: 72 6a 69 eb d7 c2 19 87 06 00 70 d2 9e 23 db be 1b 00 80 9a 10 29 40 b1 56 e9 c0 11 41 4d 82 15 f6 7c 7b fa f1 c5 e3 ce 33 b4 93 31 30 fc 7f 1a f5 94 f4 d7 d4 28 02 80 a0 00 e8 62 11 80 85 54 6d db 5d 67 da f4 ed 71 fc 8e d7 56 4e d9 47 31 b3 1f d3 58 f0 fa c8 19 07 4e a3 00 08 50 ac 35 81 5e 6b 02 60 91 99 8c 5e f5 76 e7 ff 3b 68 f5 a4 3d bb f8 cc ff ff be df af 8f cc ad 97 07 f3 5f f3 c5 2d 1f 9f b1 f9 85 b3 0f af 51 84 02 c2 6a 62 21 11 09 95 02 ea da 1f 4e 74 7f 60 79 6d 07 5e 78 e2 9b 13 fd f1 d1 15 9f f4 dc 56 66 9f bf 4f f2 fa ac cf 3e 87 e6 2e ff 75 06 03 ab 89 05 62 cf f2 ae c8 92 9a e3 4d 06 12 6d 60 a0 e5 43 36 f5 46 3e 9b f5 ca 17 2b 3f 88 ee f4 83 5d 71 fa 09 66 dc ec bf 29 d7 52 05 2c a8 ca 6e fc ff a9 7a cc a9 b3 93 db 76 6b 86 20 86 0e d5 Data Ascii: rjip#)@VAM\|{310(bTm]gqVNG1XNP5^k`^v;h=_-Qjb!Nt`ym^xVfO>.ubMm`C6F>+?]qf)R,nzvk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.6	50020	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1080	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 15902 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:36:20 GMT Expires: Sat, 20 Apr 2024 12:36:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 5429 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	721	IN	Data Raw: 52 49 46 46 16 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c ce 3d 00 00 2f ff c0 3f 00 4d c0 92 64 37 6e 53 ef e1 01 02 0c ea fe 07 06 b5 64 fd 8e e8 ff 04 e0 3f 7d a0 27 00 be 63 7d 90 cd ad 5e 30 63 92 f4 63 43 e9 89 19 d9 c3 87 7b 89 4f 48 1e 24 99 d8 b9 ee 59 44 77 03 f1 19 3e 93 77 da 0c 0d 00 11 4a 92 c3 f3 0e ad 37 11 11 2a fa fc 24 1f 20 24 01 50 d5 c6 ef ac 3a 5c d3 6c 2d b1 ea 0d 4d 5b 66 26 9e 55 83 77 a8 59 c6 ad 6f b2 5e a8 8d 79 b9 7b d6 17 54 91 3c cd 1e 91 a4 c8 33 d0 dd bd 6e 21 f3 82 92 62 6d 5f d0 a0 90 f3 00 79 eb 1c 39 48 00 dd dd eb 16 8e a1 dc 6c cd ec 1e 36 ca bc b0 67 50 48 52 64 0f 7b 03 11 81 eb f5 0a 10 6b 8d b5 d6 5b 7f f4 42 92 6b db ca 16 ad 26 ce 17 5a 84 f9 0f 84 30 02 29 f7 d3 22 Data Ascii: RIFF>WEBPVP8XVP8L=/?Md7nSd?}'c}^0ccC{OH$YDw>wJ7*$ $P:\l-M[f&UwYo^y{T<3n!bm_y9Hl6gPHRd{k[Bk&Z0)"
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8d 41 de e6 e8 17 8a 47 fa ef 14 87 db b6 8d 04 49 b2 fa af fa f6 f7 2e fa 38 22 26 80 7f da e7 54 3f 72 bf f3 db dd a4 bc 75 d7 55 be f0 c5 aa 7c b9 75 dc d8 3a ec de aa ad dc b6 47 5e 77 bd 75 e2 f2 c4 a6 da cf 9b ac 01 53 d0 76 d8 05 35 60 09 60 ed e1 d5 00 9a c7 b6 d5 ae 3c f5 c0 56 cd 3b 80 95 80 3b 2a 1f 0c 01 75 ca bd 3d 36 18 e3 53 1f 0d d0 93 f7 e8 e1 e9 9c be 11 81 1a 97 f2 56 a1 f6 53 f9 50 a8 03 ca a7 3e 53 e5 9f b6 1b db b6 6b db ca fd 68 ad b5 8b 09 29 60 91 08 98 04 41 91 00 41 50 b8 b8 10 c2 37 d1 1a 32 d0 5a 73 cf 31 f6 d9 ea d5 3a fb 59 d4 eb a8 93 00 b5 6b 63 1d 0b ad bc 8e 5c 11 20 ac 1f c3 b7 96 37 22 20 84 ed a3 95 45 04 04 40 00 2a 19 3c a7 d5 b6 2d cb 8d bb d3 dc 49 d0 d8 82 21 18 81 c6 21 d1 dc 17 a0 33 01 0b 7c 99 25 a0 bb db e3 Data Ascii: AGI.8"&T?ruU\|u:G^wuSv5``<V;;u=6SVSP>Skh)`AAP72Zs1:Ykc\ 7" E@<-I!!3\|%
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 5d 30 d9 fa fe ad 0d cb 59 60 7f f1 35 bf 73 9d 5f 39 e6 db ba 7c dc 65 ce 74 35 65 d9 a4 95 9b 7b 1b e2 e6 b9 b0 62 28 2f a9 33 0d 1c 87 0b 17 af 39 78 e7 17 7d fc f3 91 4f 3f 1e 7f 79 0c 6c 57 91 35 38 91 bf 73 c3 5f 37 ed db 26 3e ee 26 ab 2b 1a 31 94 95 22 8a 2c 4e 87 08 2f 22 7e c0 cd d9 6c 11 e1 4c b6 f7 3d f8 30 a3 db 39 65 81 6f b5 cc db 57 47 11 f5 1b 27 7f e4 fe b7 f4 b6 39 df ee c5 01 ab a1 a0 86 a2 9d 4e 54 44 08 04 e2 e4 c6 20 97 fc 80 97 fc 00 03 10 b6 62 64 1e 9c 83 90 06 67 1e be b8 cd ca f9 8e 35 2e 92 72 4e 9e be 9a 1d 2f 87 db 25 ee 53 9c 6e a1 cb c9 75 d1 28 11 a7 e3 c6 f5 c4 4b 1c 25 b5 55 59 92 51 1a 52 24 06 d7 ed ac 44 ea 9c 75 c2 f9 6d 56 9e 0d ee c8 22 48 9f b7 9d 4d 77 84 db 12 3c 28 f8 2a 59 b8 c2 e5 e5 44 13 6b b9 31 c4 e9 60 Data Ascii: ]0Y`5s_9\|et5e{b(/39x}O?ylW58s_7&>&+1",N/"~lL=09eoWG'9NTD bdg5.rN/%Snu(K%UYQR$DumV"HMw<(*YDk1`
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 8b 88 71 14 cd 63 bd e2 a9 f7 ee 40 4e 67 c9 bd d9 9e 03 ab 74 2a ae 4c b4 f9 d9 65 86 26 02 c9 4c 66 a8 5a a6 5b ca 11 d8 9e 75 d3 8b f5 84 b3 54 18 39 23 95 58 a6 b2 49 08 51 77 a1 50 65 2b d4 63 d5 56 05 7d 69 84 88 9b 4b b6 78 4a e4 6c 61 9a 37 d8 63 c0 1a 86 d9 f9 86 60 cf 73 d7 4e 0c 8e 38 4b 41 67 14 95 a2 0e ea 08 cf 76 27 23 8b ba 2a b9 9c 9d ac 73 55 92 10 97 c0 1a 77 3a 50 58 0b 36 8d 10 00 48 93 a4 8d ab b8 38 d5 9b 62 5e a9 9c 26 2a f3 fb 35 1a 8d f9 2a 2f db 8d 8e ce 52 4f 93 e5 04 a8 d7 61 b8 b1 ba 16 39 8b e1 c6 c8 59 d5 63 62 55 ab 9c d5 22 9f c9 70 f2 08 6c 94 77 36 f5 4c 52 49 c9 4c 14 21 00 ea da 9b 42 c2 cc 80 46 c2 6c 3e f3 12 ce 1a fe 3a 6f f8 95 54 eb c3 33 8f df 5d 2f 45 00 a8 5f 51 aa 69 22 ac 34 7e 20 27 9d 4e 54 a5 a5 21 84 f5 Data Ascii: qc@NgtLe&LfZ[uT9#XIQwPe+cV}iKxJla7c`sN8KAgv'#sUw:PX6H8b^&5/ROa9YcbU"plw6LRIL!BFl>:oT3]/E_Qi"4~ 'NT!
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 24 69 35 99 81 dc 30 ff 9b 9f 8f 5f 7e 0c 71 54 0d b9 fd 00 28 14 b1 7c f9 9f 9f d8 8f 69 3e f0 9f db 17 e8 6f 5c 1f df 7e 7c 53 cb f1 e4 c8 96 8b aa 73 88 84 da c7 d5 6c 18 40 41 17 f7 d9 e9 61 ca f1 cd e9 21 ae e1 60 fa 0a fb b1 f1 85 c7 2c 4e f6 49 39 d8 56 df d9 c9 b5 a4 b7 00 0e 46 29 48 1b 07 99 95 02 fe 87 8d 13 4e 8e 73 75 54 96 9c 3c c7 31 c8 47 85 59 fc d5 dd bb 4f e1 cb ce ef 41 5d 75 2c ca 11 f2 d7 5b fc 8b b7 e4 cf bb 7e 9d fc e5 29 1e c6 03 7c a7 66 7b 59 cb b6 29 28 17 6a 28 30 80 11 98 01 a4 01 02 bc f9 0a 18 0e 75 d1 1c 34 d7 9a eb f2 fd af 19 3e 26 d7 1f 31 fe 98 78 aa ef e6 05 8f 5c 8c 75 94 23 08 02 b3 30 62 af 61 50 aa 8e 89 fa 33 cd ea 7a da c3 fb 2e ed dc 3d ab e9 46 2d 37 05 84 58 b7 62 a6 f3 c9 e6 e5 df f8 7c 38 c2 97 1c 43 b9 62 Data Ascii: $i50_~qT(\|i>o\~\|Ssl@Aa!`,NI9VF)HNsuT<1GYOA]u,[~)\|f{Y)(j(0u4>&1x\u#0baP3z.=F-7Xb\|8Cb
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: db c4 b6 55 b6 25 40 93 59 50 24 68 31 60 7c c5 d0 ce 47 7c c9 26 5d ca b6 ae 63 23 26 fb 02 36 65 56 41 c5 21 a5 50 5d 74 29 aa 39 66 27 4a ed 86 2b 45 79 39 38 9d e4 72 3d 92 73 5e 5f 93 77 47 80 67 69 ca dd 02 74 28 bd 6a 17 69 ef aa c4 0a 98 f6 3e 91 cd 80 9f e1 46 e1 0e 6b 95 66 b5 7b e6 be 55 2e 9d a6 92 ad 3b bb 5c 3a ee 7c 0b be f2 2f f0 d4 09 0b 97 83 68 33 a5 a6 98 6e d1 22 99 5d d4 91 9b a2 8d 51 4b e3 ac 48 e6 06 68 b1 c9 ac b3 80 75 31 5b 90 72 bb 68 0b ad da 92 8a 82 b2 33 c0 a5 74 94 71 bc b9 3d ec 3c bd bc cb 79 cb ad b0 a9 5a 0f 16 ab 72 20 af ad 8e 94 13 0d d0 21 4d 6b 6e b8 ce 4b 3a 00 12 04 6a 06 74 48 9e 60 1e dd 73 02 24 ca 81 bd 51 1d 9d 66 91 ac a4 76 fe d7 cb 4e 3b b8 e5 4b d7 cb 41 97 45 39 a9 16 75 eb 5b 4b eb af d9 ee 53 34 6f Data Ascii: U%@YP$h1`\|G\|&]c#&6eVA!P]t)9f'J+Ey98r=s^_wGgit(ji>Fkf{U.;\:\|/h3n"]QKHhu1[rh3tq=<yZr !MknK:jtH`s$QfvN;KAE9u[KS4o
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: f5 76 ae 16 d5 82 98 29 6a 9c 36 9b 04 35 f8 75 2c 35 d5 70 f9 7f 54 97 74 55 2f 02 4a 59 a6 bd b4 24 05 fa c1 a8 ec 6f b1 30 d2 62 7f 6d 11 8b 39 4a 49 1a 25 1f 21 9a b9 00 2a 78 4b 14 cf 0a 64 9b 73 b9 eb 83 c3 81 08 32 43 78 0a 07 5f 9c 9d 1e d5 41 cd 5a 58 b2 72 06 13 e8 24 06 73 61 73 b9 b5 14 c5 81 42 0e c4 97 44 e3 04 0e da 1b 0d f4 bd 50 b3 f3 a2 59 48 7d d3 0b ae 4d 41 9b b0 94 fc c2 dc 0c 29 88 09 52 81 21 b9 c2 74 65 6c 95 42 d1 52 5c c5 52 83 49 7b 69 14 d5 74 e5 b4 eb 8a d3 ce da 53 d7 73 92 f2 cf cb 5a ba 35 57 1c 67 e5 d2 60 62 65 e0 b5 f1 90 6f 95 a3 67 52 8b 40 28 10 12 da 48 ba c6 06 39 8b 23 f4 32 20 0b 7a 4c ce 01 18 4e 0b 18 33 84 64 5e ae 8c d8 b8 94 73 d7 2e 7c 8f 91 0e 57 ef d5 1d be 4f 88 2a 61 b8 9f 49 58 07 07 a4 38 41 ff 4f 8d Data Ascii: v)j65u,5pTtU/JY$o0bm9JI%!xKds2Cx_AZXr$sasBDPYH}MA)R!telBR\RI{itSsZ5Wg`beogR@(H9#2 zLN3d^s.\|WOaIX8AO
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 7a 37 79 74 46 f8 01 4e ad 75 30 81 00 08 02 9f d7 69 ee d5 39 67 2f 2c 34 68 72 b8 ec 42 41 c7 b5 ac 14 2a 2e 80 27 a2 00 ea 3a 59 eb 7a 0c be 25 29 cb d0 73 da fb 0e 2b 79 ab 5e 04 c5 5f d7 ee 41 a5 11 53 db 6f 4b f5 b5 15 75 1d 6b 7d 70 19 b7 99 fe 0b 7e 6a 33 0f bd c6 f0 0e 3b 6e 1a 4c 63 89 a2 46 fe 01 35 9c 36 62 6b e4 47 86 32 28 37 39 65 2d e5 72 7c ed 93 e5 24 39 18 20 39 b4 c2 2b e9 b5 77 fa 0c a5 28 80 2c 42 b1 6c 59 0a 25 0c cc 14 07 e0 42 a3 ba 12 ad e7 9c 39 fc bf d5 50 d4 b1 c3 aa 23 f7 0e 19 b5 62 53 b3 ee 73 76 d5 fd a5 9a d7 a3 ea 9a 72 75 55 c6 28 eb 6c 9f 3e 0a 6f 07 69 ad 4b 63 76 56 af 34 28 8a a2 46 c3 10 a1 5f 44 32 51 14 19 c2 6c 8f 57 37 b9 ec ae f1 4a 6c f7 df fa 7e ad f8 2a 73 25 7b 97 5d ad 9d fe 1e 09 53 35 66 21 86 0c 50 1c Data Ascii: z7ytFNu0i9g/,4hrBA.':Yz%)s+y^_ASoKuk}p~j3;nLcF56bkG2(79e-r\|$9 9+w(,BlY%B9P#bSsvruU(l>oiKcvV4(F_D2QlW7Jl~s%{]S5f!P
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 82 11 2c 70 68 45 18 e2 ae 77 55 0e 6a 81 3f e4 a1 90 92 1e c1 43 ad 5e db c3 7e 65 66 1c 2a 4c b4 40 8b 31 f2 19 4e ee c0 3a e4 2d f5 ee 79 13 c3 d7 dd 81 ae 2a 8b 8d da e7 c0 4e 01 90 89 7e bc dd 8f a2 6c 05 bd 62 01 c2 90 b8 e2 30 72 84 f7 e9 87 6c 0d 30 1b 92 6f e8 02 e3 40 f8 8a bd 47 2d bd 2a 50 35 c2 4a 85 17 23 17 1b 1c 92 5a 12 f6 c7 78 bf 6d b3 b5 09 58 ea 18 17 a5 0a 94 de 7d 50 7f 60 57 fa de 77 3a fd 4d 72 74 b6 2d 9e 22 58 1c 21 28 1c 48 90 b0 32 15 40 26 fa 71 86 e1 5e 57 a0 5d 05 25 25 e9 23 ec 9b 7d c6 7c 7c af 33 d9 77 46 1a b8 09 c3 40 00 0e 4f cf a0 c2 0a ee aa 3c c1 fa 5b f6 0e 05 52 d8 a3 98 2a 76 6a 9b 21 e5 32 a0 cc ec 3b f4 7c c8 7c da ba 3d 3f 67 38 50 1b a3 c2 11 2e 49 50 ac ec c7 54 24 22 f3 9d ba 75 15 ec 7d 36 2a 57 92 7d 1e Data Ascii: ,phEwUj?C^~efL@1N:-yN~lb0rl0o@G-P5J#ZxmX}P`Ww:Mrt-"X!(H2@&q^W]%%#}\|\|3wF@O<[Rvj!2;\|\|=?g8P.IPT$"u}6*W}
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 4d e0 19 b9 21 40 32 9d 7e a0 10 02 f8 23 e6 51 ee 45 5c 05 11 11 a6 5d 0d 47 ac 05 a1 0f 05 30 85 df a9 7e 31 cd 55 77 06 d8 6c ee 0e bf d6 89 78 a5 df 5d b3 8c 29 b8 ba 6b c5 4b a0 f3 cb 08 90 1c 01 4a 36 bc 2b 92 9d 64 a1 81 46 4f ea a6 04 bc f7 7d 0f 09 fd b0 02 56 d6 f0 3b a4 5c 0c 19 22 a2 e9 06 74 b4 7a c8 85 96 04 00 3b 35 56 c0 77 c9 67 72 6e 18 35 aa ab 7b 31 d0 07 dc 80 6f 1a af 67 ef 77 3c 79 ef 36 64 3a 2a 95 8a d6 5a 53 c0 6c e0 a4 67 82 95 68 52 58 48 23 4d bc c0 cd 15 9b 38 ed 6b 2c b0 1c 63 9f f2 81 0e 30 86 0c 61 da 15 2e 3a f4 e8 ff 79 28 00 f0 fd 7f 9f ea ef 83 96 ff e2 f1 da 45 46 54 1a 4a 29 70 2b 3e 47 f8 e8 83 de f4 b3 69 6d d2 06 a6 7c da 4d ab 92 23 6c c9 39 89 3d 11 49 7d a8 92 e4 41 36 d9 92 2d d9 92 ef 59 b3 7d 4f 15 a8 12 40 Data Ascii: M!@2~#QE\]G0~1Uwlx])kKJ6+dFO}V;\"tz;5Vwgrn5{1ogw<y6d:*ZSlghRXH#M8k,c0a.:y(EFTJ)p+>Gim\|M#l9=I}A6-Y}O@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.6	50019	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1081	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 13280 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	732	IN	Data Raw: 52 49 46 46 d8 33 00 00 57 45 42 50 56 50 38 4c cc 33 00 00 2f ff c0 3f 00 09 48 92 24 c7 6d a2 30 0b d0 43 e8 ff 0f 06 24 c0 eb 39 a2 ff 13 c0 7f d4 af 99 ed f0 4b b6 6b e0 7e cd e6 04 77 77 dd 78 16 b3 5d bb d1 5a 9b 73 ce c5 ec ca c3 e7 7e 64 c6 5b 6d f0 83 16 80 64 00 de 53 40 fb ec 61 bb 13 eb 41 cb 54 8f 57 2d b4 84 cc 13 d6 87 ed c3 fa 1c 0c c8 de 23 17 09 06 ed 42 76 5f ec 8e 24 65 67 9b 43 d2 98 9f d1 24 69 97 49 97 9a 9d 00 d8 e2 e4 00 e6 89 1b 65 aa ec 5d bd bb e2 65 27 38 d1 15 99 11 55 78 d8 05 57 65 64 45 64 65 da 05 dc ab 36 11 61 57 70 af aa b1 d8 25 f0 a8 aa 08 bb b7 9f 5f f6 d7 2e 24 b9 b6 d5 48 d2 29 87 10 42 e8 2b 55 be dd 6f df fb 5f 59 ef 01 94 30 aa b1 db 48 92 14 29 8f 47 1c f1 9e df 7f ab 5e 64 66 0c 37 8a 24 39 52 1c ac 96 b5 d2 Data Ascii: RIFF3WEBPVP8L3/?H$m0C$9Kk~wwx]Zs~d[mdS@aATW-#Bv_$egC$iIe]e'8UxWedEde6aWp%_.$H)B+Uo_Y0H)G^df7$9R
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 5f ea f6 b0 91 ee b7 6d 7b e6 6f db b6 6d db b6 6d 5b b3 bd d5 6e b7 22 69 d3 e4 fb be c7 8f 6d db ae 5d 49 b6 d5 da 98 6b 6d 60 03 67 03 c6 39 e7 39 e0 a6 7a f1 8c b8 e6 2e bb 44 93 60 ee b9 f1 54 b8 e8 e6 b2 8b c6 c1 d7 9a 73 f6 98 00 3d ae b6 bd b6 6d 2b 6b ee 7d bd f7 3e c3 7b 13 11 79 93 13 52 13 ca 40 4a 19 48 49 09 6d 4e 08 d9 f5 de 7b b3 cd 9a c1 18 73 ae 73 70 f1 83 ad c0 d5 a7 57 3d f9 4a d0 31 53 43 9f 34 83 53 82 29 0d dc 5f 03 bc 37 5f 1d 50 d7 8f ed 25 18 d8 a5 af 0c 44 1d d7 33 6c 8a f4 e3 a1 04 9e 9e c0 8e 64 5b b5 32 6b df f3 70 77 f7 3c 48 81 18 88 80 64 f8 25 8f 17 0a ee ee 0e a7 de 39 0b 5a 6d db aa 96 b5 ee 7b b8 3b 3f e9 42 36 08 a5 09 18 84 a0 80 c3 d3 7b 77 4c 80 05 38 dd ff a7 fb df d6 53 09 7b 06 7a 26 cd 40 7c 6a 12 ba 23 9e 55 Data Ascii: _m{omm[n"im]Ikm`g99z.D`Ts=m+k}>{yR@JHImN{sspW=J1SC4S)_7_P%D3ld[2kpw<Hd%9Zm{;?B6{wL8S{z&@\|j#U
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 99 5a 41 39 9b eb fe f6 c3 0c 06 72 1c 92 69 c8 a4 c0 30 ef da 70 1f 63 e6 0a 71 fa 75 7e 1d ce e6 45 27 fd dc 52 4b 8e 94 4e be 10 c3 7e 7d 4b 6f 61 e6 6a 52 55 7f 99 c3 bb a3 59 b6 f8 6e 0b fd 0e 39 9a 0e 0b e7 dc 61 04 2e 99 ff 70 eb 1c 85 b3 58 ce b2 6a 35 4e e6 3a 3f fd 34 09 90 db 16 ea f8 d9 b7 18 89 ec 6a 4f cf b7 cf 0d 26 d3 af f1 dd 74 32 af 72 e5 fd f4 58 cf 4d bc 61 be e6 73 24 e3 19 11 58 d3 b4 ad a4 ee 90 9b fa d8 78 f9 4b 9b 83 e9 58 72 a7 31 ce cb 89 9a c9 3c 71 ce 2d 46 e8 15 3e fc 65 3e 7b 6e ce 0b d3 97 2c d0 b9 5c ff cf 5f 9a 01 39 9d 52 ca ab 5e f1 1f 8c 54 2d e4 e5 af ed 0d 31 72 82 46 e6 a2 f9 dd b9 bc d9 85 77 75 b5 e4 a6 a3 cf d7 fe f3 cf 23 06 d7 fe a9 37 b0 9d 97 93 fa 1a de f0 ac cd b1 6c e9 18 ab 98 77 c8 49 b2 91 a7 be ee 79 Data Ascii: ZA9ri0pcqu~E'RKN~}KoajRUYn9a.pXj5N:?4jO&t2rXMas$XxKXr1<q-F>e>{n,\_9R^T-1rFwu#7lwIy
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 3d 7c b9 53 9c 4e eb b4 de 7a ac 44 6f a9 58 f6 90 d3 23 6d 0f 94 b4 1e 6b 63 bd be 1d 6b 4b ab 58 9b 48 cb 4c 79 a7 f5 58 a3 db 91 6a bd 75 5a 5e 97 43 d9 7a 4b d1 c8 e8 e1 bd ad d7 b7 e3 ed f7 9b 4f a1 fb 25 e7 d7 76 b7 a1 99 13 bf 58 3f 05 fe 50 c6 8a c4 e3 23 79 53 2b ce ca 39 8d e4 91 b1 72 ba 52 05 90 7c 44 23 01 ae 2b 6f 1c 1f 56 be 03 96 cf 79 b2 b7 95 f3 c8 42 98 f0 8a 24 4a 21 5c 8e 1c e1 20 70 b1 cf 0f 01 2e 97 53 f3 09 2e 97 0b 5c 80 0b 5c 48 20 74 e2 e8 81 0c 70 b9 c0 e5 c8 95 01 8e 1c e1 72 99 bf 66 cd 93 9d 75 f7 aa 93 cf 24 d0 0a 02 32 c8 80 0c 32 20 23 83 0c c8 20 23 83 47 97 91 41 36 ca 80 b2 95 f1 96 35 11 67 93 20 c7 42 9c 2b cb c8 80 de 48 22 19 46 12 6b b0 22 0f f5 f1 eb 57 ec f6 65 fa e8 48 65 95 a9 ac ac 6d 89 e4 98 5f e1 53 bb 27 Data Ascii: =\|SNzDoX#mkckKXHLyXjuZ^CzKO%vX?P#yS+9rR\|D#+oVyB$J!\ p.S.\\H tprfu$22 # #GA65g B+H"Fk"WeHem_S'
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 4e 94 d5 b6 55 49 da f0 99 5d b8 70 e1 c2 ca d8 99 29 db 05 b8 00 db e7 2a eb d1 6c 25 a7 cc 19 b6 b1 78 ee 1e 25 4a 14 40 4e 6f 72 ce cb 01 6e 07 e7 7b 03 e4 3c 3a 82 9b c2 0a 03 7c 3c 36 e3 5c 06 24 91 81 0b 10 a0 96 15 9b 12 e8 2e 0c d8 aa 36 ce ca e5 00 bd 65 70 da 1b c8 e9 4d ce 79 42 1d 1c ff db 66 1b d7 79 69 8f 13 e1 8b c8 70 65 53 b6 1e 19 19 24 41 46 12 19 09 0d 65 a3 13 19 90 01 14 16 eb 46 97 dd 18 9c e1 82 0c 1e 9b 01 19 19 9c f5 e1 f7 69 26 a3 86 9c 7a 62 12 28 03 32 c8 c8 a6 8c 0c 9c 1e 19 19 19 ae 6c ca d6 23 23 03 22 26 2e 77 0d b6 71 dd 37 68 8a 04 12 0f 8e 85 eb 0a f0 8a 38 94 45 02 72 e4 40 cd 2e e7 74 dc f6 5b f6 45 dd a6 59 0b 06 91 c1 d9 8c 33 19 3c 36 03 01 02 e8 78 0a 7b 3c 14 c4 34 4d 80 1c c6 cd 23 79 70 2c 3c 72 2c 5c 57 00 01 Data Ascii: NUI]p)*l%x%J@Norn{<:\|<6\$.6epMyBfyipeS$AFeFi&zb(2l##"&.wq7h8Er@.t[EY3<6x{<4M#yp,<r,\W
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: da 4e 0a 2b 43 0e 9b 5b 69 87 2a 28 ed 94 76 29 45 f2 a3 e2 d9 da c3 24 62 f9 c2 2b 43 19 60 05 2e 00 2b 96 61 bb 96 43 cb b0 c2 95 01 60 15 fa 07 e2 1f f6 ef a6 d9 5d cf b1 67 ab 79 37 a8 48 66 2f ab db 3b 72 61 bb 00 c5 ec 6c 17 b6 4b 45 42 41 d6 2c 57 de 3f 50 15 ab 85 01 b0 5e 01 2b 96 81 95 2b 03 ac c0 05 60 04 59 a6 ef b5 87 06 28 7a 01 69 cc 75 3e 32 32 a0 3b 41 46 ce d5 72 de d5 12 22 e1 ea bd 75 8f 04 5c 42 f0 51 3f fb 2c 7b 1e 58 39 7a 3b 90 0b 9f 0b ac 5c cb 21 9f 77 b9 d6 ab 73 af d8 21 57 0e fc f2 af 53 e5 c3 38 e4 a0 c6 ed e0 b6 13 19 dd 23 ff d8 f3 95 75 3e 32 32 a0 3b 41 86 f4 14 0c 2a 9e a3 3d c4 aa 23 02 92 92 8f b4 8b 37 74 62 15 e0 8e bc 38 3d 53 58 3c 47 12 19 09 44 32 96 61 39 0c 26 ec a5 92 30 aa 7b fc d3 17 38 5f 0e 58 02 80 80 15 Data Ascii: N+C[i(v)E$b+C`.+aC`]gy7Hf/;ralKEBA,W?P^++`Y(ziu>22;AFr"u\BQ?,{X9z;\!ws!WS8#u>22;A=#7tb8=SX<GD2a9&0{8_X
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: a9 63 de 8d 1e ec dd e3 a9 41 6f ca c6 3d ed 57 be bf 7c 5a 00 a2 4a 85 48 01 88 b3 eb 35 83 87 95 74 f1 a0 80 e5 db 0a d1 5c ec a2 bd a6 fd 89 00 7a 76 22 42 d0 7a a3 d3 fa b1 44 6f 29 f0 ab f7 70 52 ae d6 5b 46 6f f4 a6 d1 56 6a cd 68 c4 d1 1d 2b 22 5f e1 2d 6c 82 6c 4a 5a 8f a4 89 65 b8 c0 9f 82 3c 7a 90 1f 47 ff eb ff de be 35 ff 68 aa 3c c8 0d c8 0d 25 bd ab 07 19 64 24 ae d6 69 f4 ec 44 84 a0 f5 46 c7 17 66 8a b9 75 81 5d b6 15 ae ff 0d 21 a0 a2 3f 75 ce 96 c1 58 20 9e 2e 50 50 40 0d a0 a0 60 64 51 36 5d 2c 37 5a 29 c3 ca c2 bd e2 82 4d e4 4b f7 7a 99 46 06 45 c6 12 09 57 28 5b af 25 69 5a 95 6e 31 0b 92 0a e9 29 81 a2 10 54 41 19 94 51 56 56 06 50 d1 9f 3a 67 cb 10 21 99 86 c3 ce 8b 6d 4c 8b ad 29 54 50 a5 d2 a6 d2 3e b3 c3 ec 2a 2b e4 96 47 69 67 Data Ascii: cAo=W\|ZJH5t\zv"BzDo)pR[FoVjh+"_-llJZe<zG5h<%d$iDFfu]!?uX .PP@`dQ6],7Z)MKzFEW([%iZn1)TAQVVP:g!mL)TP>*+Gig
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: f2 9e a5 2a 6c e1 ac 15 d4 46 9d a5 aa 36 8a aa 2a a8 85 41 95 15 56 56 86 fa 9d bc 02 83 82 28 7f b5 49 7e d0 04 e1 69 aa ef df a3 ab 74 f0 35 ca 07 53 38 4d 83 02 a8 a2 aa 0a 19 55 90 55 b5 15 55 05 55 aa c2 16 28 c0 a0 87 76 ec 36 da cb 85 8e 59 fe 82 0e 35 54 4f f4 dc ea 69 da a8 52 d2 c9 95 5c 6b 3a a0 df 61 5e 77 c6 d6 9e 68 95 6a dd 83 ee cb 3c f6 f9 d2 17 77 e3 04 79 37 94 c7 2a c4 2a 1e f6 f1 bc 84 2f fd db 41 06 bd d1 63 dd c2 e9 90 9a aa d3 c7 e8 64 af 49 4c 55 9d 0e 35 54 4f d5 53 f5 f4 e1 57 0e a6 6b c5 d8 cb 21 3b 9e 7a e8 d0 7b 1f 05 04 09 64 ef 20 80 2b 88 b3 91 60 05 cc 05 91 9c cf ef c3 e0 bb 49 00 77 93 00 90 97 d8 d1 79 87 20 05 14 a7 5d a0 12 1d 04 02 a9 03 f4 de 47 01 01 c9 f7 e7 fa a8 ef 3c c1 5e 9b 2b 6a 2e cf 5e 7f 85 92 04 4a 01 Data Ascii: lF6AVV(I~it5S8MUUUU(v6Y5TOiR\k:a^whj<wy7**/AcdILU5TOSWk!;z{d +`Iwy ]G<^+j.^J
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: 05 60 65 50 60 85 41 41 4a 51 56 18 aa fb 31 0f f0 0f ff f2 63 3c 36 83 37 cc 78 e8 f4 5e 04 10 96 6d a6 ee f5 0e 3b c4 1d e7 11 60 87 02 0a 2b ce da 09 65 65 14 1c de d9 8f fb f0 2b 36 15 f2 78 ec 47 b7 64 1c 17 c5 01 ac 57 1c d9 b3 c2 a6 00 ac 1c 04 53 b8 c8 b3 5c fa 8d 63 34 f7 f7 d7 7f f8 07 ce 4f 71 42 62 03 32 1e 78 38 cf 30 05 80 45 65 0b ac f3 d2 ab 8a 28 15 aa aa fe e3 5e d9 84 8b 0c d6 ab 0b fc 36 20 db ad 8a d2 36 ea 21 0f 7f d1 a6 f0 90 27 9f af 67 f5 a9 7c 29 82 24 32 92 07 6d 64 64 30 11 13 a8 ff 6e 70 1c e2 af 31 bc 0d c0 14 27 1f d5 84 35 4e a6 e0 ac 9b 30 b3 11 4e b6 35 ea b2 df 47 01 8c 67 ce 5b 05 19 49 64 64 64 d0 ad b0 54 ff 50 9e f7 c5 57 60 d7 8d 25 3c f8 51 5b 6a 40 81 37 f4 57 c4 85 0b 97 23 ce be c7 7e 30 2d 5c 0c e1 62 f0 14 53 Data Ascii: `eP`AAJQV1c<67x^m;`+ee+6xGdWS\c4OqBb2x80Ee(^6 6!'g\|)$2mdd0np1'5N0N5Gg[IdddTPW`%<Q[j@7W#~0-\bS
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: f2 8f 4d e1 fe c4 31 af 2d 83 b5 a5 0f f3 0c 47 be 8e 3d 69 d9 f0 bc ae f2 ee b8 e7 de f0 35 12 4f b6 cb 35 9b 90 13 a7 42 cc 51 71 5d 9a d6 c8 6b 92 08 e5 b0 89 fd a4 bf 1f 9c c2 a9 ab f6 0e d0 0b 14 12 5a e7 7c 56 39 22 b2 4f a6 2c ac 59 19 c6 3e 9b 99 d1 54 1c 59 60 97 58 c0 01 ca e7 3d 0c 8e d9 1c b8 b0 1b 87 95 95 63 ec 46 5b 0a 6f 56 56 b4 1b 25 38 0f 5b 16 19 31 22 f0 48 6a a7 ae f6 f1 af 70 8c 57 7a ef 6e 1a 43 95 dd 9c ba 94 55 a8 66 3a 8e d4 62 52 d8 57 2f 39 dc 96 22 c9 8b a5 a5 a7 05 66 90 b4 99 b2 32 8c 35 f6 25 7c 79 21 83 65 2c 4b 18 80 e5 b1 44 71 76 19 0b 31 d1 18 8a 5f d2 89 1d ac 61 20 2f 10 e5 48 14 e5 d5 1f 7d 4a 0e e3 1c b4 90 4b de 36 eb b3 a7 97 8c 0c de 86 da b5 4d ed be 44 04 25 de 8a 69 bc f1 6d e7 bc f1 e6 16 c9 83 e1 c9 c3 42 Data Ascii: M1-G=i5O5BQq]kZ\|V9"O,Y>TY`X=cF[oVV%8[1"HjpWznCUf:bRW/9"f25%\|y!e,KDqv1_a /H}JK6MD%imB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.6	50021	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	1081	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:49 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:49 GMT Server: fife Content-Length: 4722 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	733	IN	Data Raw: 52 49 46 46 6a 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 21 12 00 00 2f ff c0 3f 00 2a bc f2 ff 2d ba 2d e5 72 67 06 c6 fd 59 eb 1d d7 6d 47 b6 8d fb ec 7d dc dd dd dd dd dd dd 2d d8 fb 7d fb 79 9e 7e 9e 5e d1 d4 59 27 22 f5 4c 8f 44 93 22 d1 8b 2f 24 1a cb 4e 8d ac 2b 78 6b 73 01 16 b9 6b b4 6b 1a 97 d0 dd 89 74 57 e3 84 2e 8b ec 64 38 ec 0b c0 5f dc dd dd 75 47 5d bc b8 c3 8a 88 a6 26 c2 e5 4d b1 95 e2 d7 40 35 ce 1d 90 b9 bb fb 26 ea 93 4d 4e 4c 4d 48 dc 17 70 62 dc dd d9 d5 b8 73 e4 06 70 c2 a9 fa 4f 4a 4d 86 86 4e 3e a4 0e 1d af 3b 20 e2 02 88 1a 89 08 5d 62 aa f6 44 54 75 32 12 e2 ee 90 0d d6 35 11 16 75 46 fe 9e 89 b0 7d ea 5f 45 e6 8d 84 96 e9 aa c2 dd 9b 22 3b 17 80 13 d9 8e 1b a9 92 00 d9 b6 69 47 2b Data Ascii: RIFFjWEBPVP8XVP8L!/?*--rgYmG}-}y~^Y'"LD"/$N+xkskktW.d8_uG]&M@5&MNLMHpbspOJMN>; ]bDTu25uF}_E";iG+
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: c7 fa cd cd 82 d9 18 11 b1 71 ac 6f df 52 2d 94 8e ab a9 39 be 86 c6 81 d7 ac c9 40 5c b4 6d cf d8 37 1c 68 d5 aa 31 be 7e 7d b5 6b 58 ab aa 4a 65 4b 27 25 cd ee e3 73 fc 21 2f 5d 6a 2b c4 5e c0 2f 7a b6 ed b7 91 92 1a fa da b5 19 bd bc 5a 8d 1f 5f 2d 27 a7 81 20 4d 09 54 2b 2a 66 84 e8 b6 be 2f 81 b4 ec db cf 39 d4 95 2b 33 ba b9 bd b2 3a 5e 7d fe 90 90 09 74 74 3a 4c 9f 5e 30 75 d7 a8 82 fe 51 46 08 00 88 aa 24 24 0c f7 99 40 8b d7 1a 7a 1c 8e fc ea d5 bc 41 41 bc ad 98 9b 3b b5 ad 6d e7 05 0b 3c 3f 20 10 65 84 a8 29 f6 4f fd 42 d7 f3 e7 7f 80 9f 15 b2 b3 4f f6 db 5e 99 40 46 88 9a 66 64 24 e6 48 2f 5e 2c 12 1d cd c3 da b5 b5 d3 39 3a b6 56 54 f4 dc 26 a8 99 56 52 f3 84 53 59 5a be 02 a3 a7 1c f2 ca 15 bb 1c 42 4d b6 4a 46 a6 5c 1c fa f6 ed a5 53 52 e8 Data Ascii: qoR-9@\m7h1~}kXJeK'%s!/]j+^/zZ_-' MT+*f/9+3:^}tt:L^0uQF$$@zAA;m<? e)OBO^@Ffd$H/^,9:VT&VRSYZBMJF\SR
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: f9 3b c4 b1 63 29 08 31 fd 25 fe fe 5f 17 93 b7 72 41 01 77 33 d8 d8 98 20 48 f3 36 b8 fb 76 4f 48 7d ef 12 79 5f a5 b8 d8 8e 44 11 d9 ab 94 94 f0 86 77 d9 57 44 e9 a8 ef de 71 b7 ff 5e bd 08 64 84 10 26 81 fb e4 6e d4 b7 6f 53 11 e9 b3 fb fa f2 36 c6 87 0f 65 10 68 f9 09 78 fb 69 5d 44 f1 4a b9 b9 9c f5 2a 82 50 8b bd 38 bb f3 58 40 a5 14 f9 de d8 ad e5 24 08 39 a9 75 37 e6 0b d3 92 78 ac 43 ee d9 c3 59 d7 2b 57 52 e0 b2 54 9c 48 47 a7 d5 d0 a1 01 1f 90 1a 9c 3d aa 25 1e 77 12 73 73 be e6 f6 f3 8b 81 4b 02 e6 22 b1 b1 d8 a3 cb a5 4b 26 1f 10 bf 18 5f bf e8 8a 27 d9 9c ab 3e 7e 89 0b b7 f5 b8 71 5b 23 22 4e 65 64 94 2f 71 51 f2 fb 70 b5 79 22 1e 73 3b ae 0e 7e e4 c8 9e 00 78 34 87 b8 7a 15 bb bf 58 42 82 49 80 07 30 8e c9 d5 76 a6 78 3c e4 79 66 27 27 13 Data Ascii: ;c)1%_rAw3 H6vOH}y_DwWDq^d&noS6ehxi]DJ*P8X@$9u7xCY+WRTHG=%wssK"K&_'>~q[#"Ned/qQpy"s;~x4zXBI0vx<yf''
2024-04-19 14:06:49 UTC	1255	IN	Data Raw: ca 12 51 25 a1 d4 4a 46 26 a4 42 a0 d5 e8 d1 28 de 39 bd bd 6d 3a e1 f7 53 4a 2a 22 02 73 f1 b8 38 2a 8b c5 c5 15 80 e6 4b f8 5b 0b 08 c7 fc f8 31 a1 02 85 cb a1 f2 d8 26 08 d9 9d dc d2 92 ca e5 19 54 f2 4b 24 27 a3 90 1f 21 a5 62 5c 1e 95 c9 2d 2c 5c 31 85 6d bb 74 a1 f1 45 36 d0 2c 4c 63 6a 8a 62 fe ca c3 bf 03 0d b0 bf 88 46 db ae 5d 43 31 81 bd 5a 49 09 85 c9 4d 4d 5d 1a ee 30 b7 6f a3 a8 57 2a 2a b2 23 1a ee 40 0a 2f 69 83 a0 cb d3 3b 3b 53 78 ce be 14 08 ec 07 50 dc b3 b9 b9 c5 34 fa 3e 27 85 e3 94 45 45 a0 fd f4 e9 ca 7a 99 19 21 94 67 54 55 bd 55 4b 4b 05 86 97 e2 52 00 b3 97 b2 1f 20 20 2a b0 57 2d 2e 56 34 c2 b3 67 29 05 6f 0e 4f 4f 14 fa 7e 65 64 08 50 48 4f 4d d1 6b d9 20 6c 77 a0 22 a7 a2 2c 18 e6 ce 1d 14 fb ca c5 c5 c5 48 59 c5 51 34 d0 15 Data Ascii: Q%JF&B(9m:SJ"s8K[1&TK$'!b\-,\1mtE6,LcjbF]C1ZIMM]0oW*#@/i;;SxP4>'EEz!gTUUKKR W-.V4g)oOO~edPHOMk lw",HYQ4
2024-04-19 14:06:49 UTC	224	IN	Data Raw: 4e 0e 6a 80 95 d4 37 bb 9e 3b f7 a3 6b 94 97 f3 b6 58 6c ec c4 86 86 e7 eb 95 43 a8 31 46 86 6e 7f c2 98 3f 7e cc 13 18 f8 92 bc 2c 11 17 37 9d b3 f3 c1 76 ec 30 1d b7 09 6a 9a cd 69 e2 59 d7 34 b5 83 c3 8d 1c 9b c9 2b bc ff ef 8e f9 fd 7b 5b 35 35 cf 29 5b 11 d4 50 4b 56 39 29 78 e7 fb 13 a3 bd 7b 37 8d 93 d3 39 cd 17 1c fc 38 6f 74 3b 5b 7d 25 22 36 de 52 bf 6f 5f 2a 29 e9 0f ce 7e 26 4f cf 89 0c 0c 86 ba 7c b9 fd e4 c9 a9 e7 e8 69 08 35 df 66 2b 2d eb 89 63 c6 9e 67 17 6d db 8b 0b a6 9f e8 c1 9e 80 40 7d 46 88 0d fd bf a1 ff 0f 37 37 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: Nj7;kXlC1Fn?~,7v0jiY4+{[55)[PKV9)x{798ot;[}%"6Ro_)~&O\|i5f+-cgm@}F77EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.6	50022	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	855	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535604.0.0.0; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:06:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 14:06:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 14:06:49 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.6	50023	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	504	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s52-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1420 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4099 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	722	IN	Data Raw: 52 49 46 46 84 05 00 00 57 45 42 50 56 50 38 4c 77 05 00 00 2f 33 c0 0c 00 09 33 6d db 28 7b 13 fe 88 3b 0e 11 fd 9f 00 fe 4a 90 71 0e 13 99 0f 2c 18 45 92 a4 28 17 8e f9 9e 7c fe 75 9d 95 f5 60 24 92 94 95 2f 09 c0 d0 3f 1b 01 50 08 c5 6d db c6 59 3e 93 f4 9c a0 c8 0e ed 7f aa 46 31 82 9e 1e 40 b4 f4 80 00 8e f3 b7 9d f5 ef 03 20 ff e2 db b1 1a 2b 00 f2 3c e0 d3 28 40 67 db b6 63 b6 73 dd df 60 ad d8 b6 6d bb b6 f3 13 8c 6e b7 31 5a a7 ca 91 3e 95 93 d6 e6 46 65 db d6 cc 7c ef 55 7c 6b 67 be 29 d3 d1 b1 b5 ed d8 f6 ec eb 7e 7f fb 8f 6d db 46 65 73 00 d6 30 b2 d2 3a a9 32 04 9b a5 93 ca 76 65 1b ef f3 5c 27 e5 da b6 55 db 4a 1f eb dc fb 0c 77 09 02 22 a0 e4 52 23 0f 62 21 0f 4a 0e 71 58 06 44 e0 f6 b8 77 c5 04 08 fc 3f 3e fb f9 5d f4 b2 ac 84 15 d1 62 b5 Data Ascii: RIFFWEBPVP8Lw/33m({;Jq,E(\|u`$/?PmY>F1@ +<(@gcs`mn1Z>Fe\|U\|kg)~mFes0:2ve\'UJw"R#b!JqXDw?>]b
2024-04-19 14:06:49 UTC	698	IN	Data Raw: 44 80 c5 40 b2 24 00 2c 32 5c a1 72 6a 69 eb d7 c2 19 87 06 00 70 d2 9e 23 db be 1b 00 80 9a 10 29 40 b1 56 e9 c0 11 41 4d 82 15 f6 7c 7b fa f1 c5 e3 ce 33 b4 93 31 30 fc 7f 1a f5 94 f4 d7 d4 28 02 80 a0 00 e8 62 11 80 85 54 6d db 5d 67 da f4 ed 71 fc 8e d7 56 4e d9 47 31 b3 1f d3 58 f0 fa c8 19 07 4e a3 00 08 50 ac 35 81 5e 6b 02 60 91 99 8c 5e f5 76 e7 ff 3b 68 f5 a4 3d bb f8 cc ff ff be df af 8f cc ad 97 07 f3 5f f3 c5 2d 1f 9f b1 f9 85 b3 0f af 51 84 02 c2 6a 62 21 11 09 95 02 ea da 1f 4e 74 7f 60 79 6d 07 5e 78 e2 9b 13 fd f1 d1 15 9f f4 dc 56 66 9f bf 4f f2 fa ac cf 3e 87 e6 2e ff 75 06 03 ab 89 05 62 cf f2 ae c8 92 9a e3 4d 06 12 6d 60 a0 e5 43 36 f5 46 3e 9b f5 ca 17 2b 3f 88 ee f4 83 5d 71 fa 09 66 dc ec bf 29 d7 52 05 2c a8 ca 6e fc ff a9 7a cc Data Ascii: D@$,2\rjip#)@VAM\|{310(bTm]gqVNG1XNP5^k`^v;h=_-Qjb!Nt`ym^xVfO>.ubMm`C6F>+?]qf)R,nz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.6	50024	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	503	OUT	GET /kHRf85euDvW-Kg7ThXK2vv-J-Yye9uxoo6GQvUcAwudNRz1sQvXubAl_m2bu6KJofA=s94-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:49 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 370 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4099 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:49 UTC	370	IN	Data Raw: 52 49 46 46 6a 01 00 00 57 45 42 50 56 50 38 4c 5e 01 00 00 2f 5d 40 17 00 df e2 36 b6 6d 55 d9 e7 7e 97 d4 80 98 26 e8 80 da 29 85 dc e1 1e a4 09 46 91 24 49 c9 59 01 1c 56 f0 8b 32 4c f0 5a 6e da 4d 24 db 52 d5 ac 39 38 c0 08 fe 03 0c 60 83 e8 af e7 cc 7f 3a 4d 40 50 03 c3 c2 b0 08 85 e0 1d a8 4d f2 9d bc 4f 08 6e b4 19 11 aa a2 45 81 7d 21 28 08 01 61 aa 03 06 c7 e1 22 04 02 02 06 81 80 30 66 23 fc 03 81 43 1e 02 06 75 05 0a 7f 28 8e 81 53 a4 5e f7 47 ce 3f 97 7f f5 6a 37 0b d4 db 4b fa 41 9d 9f dd db 1f 59 a4 a8 2c 76 db 9b aa f2 0b 84 90 7f dd 8f 93 83 83 77 f2 2d c2 ba 2c 4e eb ec d5 21 f8 e7 7d e2 1f 7f e4 81 3f 0c b0 24 c9 36 6d ad 6b db b6 6d db 36 df fc e7 d2 b1 e2 fd 5e 45 f4 7f 02 e8 a5 b6 58 82 96 d2 57 a8 82 73 1a 1b cc 58 d3 2f 4b ab e7 0d Data Ascii: RIFFjWEBPVP8L^/]@6mU~&)F$IYV2LZnM$R98`:M@PMOnE}!(a"0f#Cu(S^G?j7KAY,vw-,N!}?$6mkm6^EXWsX/K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.6	50025	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:49 UTC	511	OUT	GET /2aEAgE4cV-CTVzi83u9lnS7t1vH0EUdD03wVXPWISqrC-ah8Hsun00h0qftcqVRbmHPI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 24734 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4099 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	721	IN	Data Raw: 52 49 46 46 96 60 00 00 57 45 42 50 56 50 38 4c 89 60 00 00 2f 0d c2 49 00 09 49 92 24 c9 6d 64 91 59 6c a0 99 85 ff 3f 18 10 9a 8b 66 39 46 f4 7f 02 f8 af 1a ff 02 59 d0 37 ac 26 fe 26 e9 57 10 5f 6f 7f 9b 01 09 d0 d7 d8 02 1b a8 fa 0e fb 74 9c aa aa f5 59 05 b4 6d 6f 42 92 29 6f f2 42 8b 84 08 a2 dc d0 4f 4c 7c d9 13 29 33 8c 21 dd db a3 46 91 40 97 29 49 b9 23 f0 61 5b 42 bb 0a 6b a9 83 2e 3b 92 d0 b9 a5 1f a2 13 f3 aa f6 02 7b ce 85 18 08 11 24 19 02 43 f2 53 30 a0 40 04 55 80 ed 85 65 b3 ec 0b 73 f7 6d eb ca 85 6e 18 a8 a5 c2 ec ec 3b c5 14 fb 0a 12 94 6f d8 8f 31 d6 94 b3 24 45 09 5a 01 e2 1b ed 00 5a 50 74 19 b5 24 55 bd 02 a8 ba 12 8a f0 42 11 20 18 92 f0 c2 f6 69 54 5d 44 40 56 de 2f 3d ba 7b 2f 19 d8 46 01 b6 db 1f f5 dc 9e 39 6d 73 3e 1e 5b d5 Data Ascii: RIFF`WEBPVP8L`/II$mdYl?f9FY7&&W_otYmoB)oBOL\|)3!F@)I#a[Bk.;{$CS0@Uesmn;o1$EZZPt$UB iT]D@V/={/F9ms>[
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 0c 44 60 c5 4b 40 34 35 ae 60 7e 87 88 04 a2 01 1d a1 43 44 0a 32 bf fc 19 42 30 ae 00 20 8c 1a 16 08 2d c7 4d 9d b1 40 84 c2 62 92 40 82 04 91 10 5a b2 f3 26 88 04 19 02 21 84 71 15 3a e6 15 88 3b ea 87 27 f7 ec 6f 91 ba b2 58 2d 12 84 20 32 25 00 d0 23 09 06 81 48 2d 88 29 c8 3c 06 3b 22 b5 aa 75 11 69 00 04 09 41 66 f7 88 48 5f 0d e2 83 48 cb 6b 37 cb 08 2a 32 f5 ea d9 de a3 1e 28 06 0f 94 9e 9c fe b7 0f 83 96 2e 52 a5 68 40 07 b4 3c 10 39 8b 4e 5a 00 60 0d 9d 16 8a 0d 69 d9 a8 25 c8 2a 05 62 a7 ff 99 ab 16 6b 88 2a 7b db 3c c8 38 68 b5 0a d3 49 58 d8 f8 30 33 12 01 59 a9 51 03 31 8a ad 62 83 b4 40 9a 26 4d 43 09 2a d0 94 b7 00 00 08 07 cf 44 60 b5 03 68 a7 f0 42 87 34 fd b3 b3 80 90 6a 1e 60 2f 97 00 90 7b a2 f4 a4 94 ab 32 ac ba 44 92 04 df 97 12 63 Data Ascii: D`K@45`~CD2B0 -M@b@Z&!q:;'oX- 2%#H-)<;"uiAfH_Hk72(.Rh@<9NZ`i%bk{<8hIX03YQ1b@&MCD`hB4j`/{2Dc
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: f5 22 f9 d0 27 d7 2e 0e d9 bc 52 55 87 6e 02 48 44 8d 91 27 ff 3f c0 45 92 d2 8d aa 3a 33 83 72 88 90 74 cb 22 49 ab 68 c9 e3 9d 80 dc 19 90 f4 9a 4f 8c aa 39 d2 0d 73 65 c1 23 9e 42 68 e3 4e 32 05 b4 14 a2 8f 27 55 75 18 69 74 2b 94 44 c5 75 82 8a 80 09 02 cd 22 e7 23 14 ad 9a 09 02 8c 52 f3 ba c8 79 5f c1 92 89 31 61 40 9e fb 33 35 0a b2 92 09 04 c7 84 7f 06 c0 21 c8 90 9e 40 20 5e e8 7c 58 0d 04 28 26 1c 2c 72 3d 44 a2 98 90 50 d4 19 e8 13 10 bc c5 15 5a 4c 9b 80 40 37 4e 30 fe 2d 23 2c 43 58 35 01 11 23 2c cb f2 53 3e da 4f 5b c2 09 58 09 ea 53 f5 4e 14 55 50 56 2a 1b 9d cc 58 3e d3 8f ea 0c 11 00 bf 51 3e 03 9f 51 7e 31 0f f2 f0 56 ea ac 0f b1 98 d5 c3 de ad d3 bd 5e 29 dd b3 a1 ed 4b 92 1b a7 c7 d0 6d 62 1f 50 1a b2 b8 70 8e 7c cc e0 3b ec 75 8c 81 Data Ascii: "'.RUnHD'?E:3rt"IhO9se#BhN2'Uuit+Du"#Ry_1a@35!@ ^\|X(&,r=DPZL@7N0-#,CX5#,S>O[XSNUPV*X>Q>Q~1V^)KmbPp\|;u
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: b9 35 37 ff be ef 0c d6 7c dd 75 5b 3c 69 ed 39 28 3b 3d 5a d3 a3 57 39 a3 a9 a4 b2 40 00 96 d8 7f e8 e2 3f 77 d1 75 a8 4f a5 a7 07 74 a1 d6 fc ef 23 d1 dc af c7 b8 03 6a 25 0c 70 b3 11 9f 73 f5 48 46 eb ab 10 a5 72 3b 98 ff 3e 4c ad 6d 78 94 cd 95 97 db 31 ea 98 cd 4d 67 5e ca a2 95 60 d5 9c 47 45 90 54 23 8b ed a1 bf 32 8a 25 2e 3e 6f b9 e4 fc b5 10 07 5f f7 2c 63 fa 9e ce ad 3d de 30 56 19 65 3d bf bb 94 92 03 5f b6 be 42 05 78 62 29 ce 36 80 49 27 8a 72 67 ba 59 7e 73 1d f5 e6 cc 49 b5 af 37 ad ce 8a 40 f3 b2 9f a4 43 7c 9d a1 ca c9 b2 85 fc 4c 3f 74 33 b9 6c d8 fd 31 da a0 12 b9 d9 45 fe e3 2a ea 8b 5e 78 e4 9f 5b 54 ec 20 66 49 fc c2 28 18 00 d7 51 97 27 71 7c 26 9f fb 21 ce 99 f3 e4 de b3 e6 6b 50 83 43 d1 2a 62 1e 88 b0 1e ae da f6 50 35 2e cb 7d Data Ascii: 57\|u[<i9(;=ZW9@?wuOt#j%psHFr;>Lmx1Mg^`GET#2%.>o_,c=0Ve=_Bxb)6I'rgY~sI7@C\|L?t3l1E^x[T fI(Q'q\|&!kPCbP5.}
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 82 b9 d3 be b4 6f c0 52 09 2e e9 a8 f9 c5 ea 23 cc 9a 88 cc 6e 53 86 58 45 35 9a 3a 57 6f 80 73 ac 9b d3 23 35 de 9b 68 48 44 c6 72 63 35 3a 91 fd 02 4e 4a ff 0c 31 23 3c 02 ec 84 6f b5 2a ad 2a 09 4a 79 22 00 1c 24 d6 8a 57 e3 a1 c4 cb d8 2d 23 6d ea e3 b3 d9 fc 56 bc cf c9 2a c5 32 15 5c da 55 3f d1 3f 72 84 59 13 1e 5f b3 55 41 45 97 e8 b0 03 ac d4 a9 0b e8 f1 33 ab 7d 53 ce f6 8d 1d 9a 13 c0 08 58 c9 23 9d c4 22 b2 ba 9b 93 ce 57 5f 4a a5 09 5f f8 89 08 0f 57 98 aa f0 8b 00 0e 89 64 4c a7 a9 8b 2b 42 4f dc d3 9e 0e 03 5b 52 78 c2 c9 49 c2 f4 05 f0 66 e2 89 66 a9 6a 2e e3 ae de 98 09 22 bc 49 54 d0 5f de 39 bf 98 30 f2 09 ed 13 7c e3 cb bd 75 99 37 5e 96 e8 da 26 0b 24 b3 cc 20 1a c2 d2 75 0f ba 89 45 84 75 17 07 89 a2 a5 48 b7 03 89 64 80 49 04 03 41 Data Ascii: oR.#nSXE5:Wos#5hHDrc5:NJ1#<o*Jy"$W-#mV2\U??rY_UAE3}SX#"W_J_WdL+BO[RxIffj."IT_90\|u7^&$ uEuHdIA
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 58 f5 8d 3e 50 a9 b9 df 17 c9 8a 94 ed 8f 5e aa 05 a3 f0 e2 ab eb 2c 6f 1d 80 4f ba d4 9f ec 88 02 da c6 d7 fc 0d 0d e2 1b 00 7f 08 42 fa 43 01 39 24 40 2d e4 67 73 3f c7 b7 7f 0d d0 18 eb 16 3e 70 d7 0b d9 f3 42 9e 2b 94 d9 1a dd 60 11 79 dd 23 ea 48 82 57 12 00 23 32 86 cc 6e 44 00 3f 8e 7c 86 a4 54 e3 c4 9e 89 ed cf 5a 83 1c 0a 63 d9 77 7e b6 5b a3 29 01 62 a2 cb a6 58 79 d1 5a bd 60 29 47 67 e0 b7 50 3a 60 be fa b4 b1 a8 51 c3 6e 8b aa b1 42 3a 70 c5 0e c2 0d 87 3e c8 44 72 e1 96 db 81 73 8c df 0f 54 9a b1 fa d8 bb b6 1c 61 ab 3d e7 27 e8 38 8f 4f cd 3d fb 84 5c 7a ca c9 e5 b2 7d 5c 2b c5 3a b6 e0 8a b3 06 ec 71 21 8f df c7 bd ee 8c a9 57 f3 fc c5 47 79 3d a3 9e a6 5b c5 5a 32 a5 c2 ea 31 cc 7b 5d 71 35 fc d1 5c 77 cd f9 26 e3 ca 47 1a 4f 3c eb 57 b9 Data Ascii: X>P^,oOBC9$@-gs?>pB+`y#HW#2nD?\|TZcw~[)bXyZ`)GgP:`QnB:p>DrsTa='8O=\z}\+:q!WGy=[Z21{]q5\w&GO<W
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 81 7a dd 8a 4f fd f4 52 e1 38 e9 d1 e1 ff 57 07 a3 44 4c 13 71 2b 40 8c 48 70 cc 96 69 ba 94 6a f0 1b ae 96 f8 4b 7c f7 e3 b0 51 40 0a b7 e4 71 b6 7b 36 f7 c1 84 5b 56 59 a1 1b 48 3a c3 c9 46 41 4a ee 93 26 d8 2e ca e5 1c af 56 5b 6d 8d 1a a7 c1 80 4b cb 89 a2 22 3a f1 2c bd 16 d8 f2 af d9 cd 8b 2b 5e 80 a2 eb 75 99 c3 77 4b b4 84 0d 36 79 ed 01 a7 6c 82 75 42 b6 a7 28 c8 4b 41 11 82 90 b6 42 63 6e 54 f3 6c 43 d7 59 17 42 42 c2 f6 62 e2 12 7f d4 8a ad 96 8e 65 9b 72 19 ed de cf 7b df 74 a2 5f cf 14 b3 40 29 bd e6 84 15 6e f6 e3 76 20 01 58 78 64 60 78 16 d9 4c 42 d6 8d dc aa df 0f 59 4e ab cb 60 cc 4b 1a f7 67 73 2f f9 4b ba 95 af 6b 7f 3b 87 1e ac 64 44 dc 4e fd b6 be 02 85 3a 40 37 eb 3c ac bf b9 9b c2 0c 65 f8 85 52 23 71 24 4d 91 a3 04 91 d7 65 26 11 Data Ascii: zOR8WDLq+@HpijK\|Q@q{6[VYH:FAJ&.V[mK":,+^uwK6yluB(KABcnTlCYBBber{t_@)nv Xxd`xLBYN`Kgs/Kk;dDN:@7<eR#q$Me&
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 09 d7 f9 44 ea c4 74 38 a4 39 1c 0a ae 2b 28 5b e1 b4 cc 28 8e 24 60 04 14 19 a1 aa 97 50 94 01 01 a6 04 91 62 fa 2a f3 c8 a4 c2 e0 64 ad ff 9e 77 b6 1d fb f5 25 17 70 57 c7 19 81 43 11 8a 45 77 fe e4 b6 c7 fe 86 1c 1a 2b c4 57 ae 32 20 84 21 29 7f d5 dd f7 55 8a 0a d8 7a 1d 1d 1b ac 68 37 9f 91 23 09 5d 4a ad 31 f7 ee c2 5f 86 61 0f 28 06 b2 c9 fa 2b 76 58 be fd ba c4 30 4e b4 c0 ca c7 65 3f 64 a5 2e ab 92 07 6f fe d5 7f 92 43 32 5f 95 71 fe 85 8c 42 0b ac 62 68 5b c5 0b 7e 7e 22 4c 3f 06 7c 79 25 b7 5f e0 dd ec b8 dc d7 09 d3 db 24 71 ee f7 8f e5 80 ad 97 6f 23 9f ca 72 9d b2 4a 7f 18 f3 dc 6d 97 5d 52 41 b7 79 aa d1 3b ac d1 8f be 23 cf b7 b6 80 c4 e7 70 e1 54 ba 57 1e ec 7d 65 df 61 95 8d 34 ee fc ab 3f 07 2f 7a 85 91 39 fd 04 88 1e 78 a5 a9 eb 58 c1 Data Ascii: Dt89+([($`Pb*dw%pWCEw+W2 !)Uzh7#]J1_a(+vX0Ne?d.oC2_qBbh[~~"L?\|y%_$qo#rJm]RAy;#pTW}ea4?/z9xX
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: dc 1c 50 f2 02 1d f5 d1 3e 5f f2 b6 fc 19 7b 6e a1 f4 92 82 00 be b8 25 87 b2 5c ef 74 2a ed b1 1f 7e ff 13 6c 32 79 49 8a c7 1d 7f f3 ae 3a 2c aa 05 80 95 4f f5 ee b2 af 34 34 5d 13 2b c3 4d 41 9e 7b 5d dd 37 fa 98 43 7a 30 5f e4 f7 97 d6 09 7c 60 45 79 49 aa a1 81 d5 7e d8 17 aa ef 1b 2f 2d 64 e0 6d d6 ff e4 3f e5 17 70 64 9f 2f 3f fa 03 03 7e db 10 10 be 2c 5e c4 d8 6b bb 24 d7 5c 02 3c c3 13 4e bb cd 88 42 93 73 11 61 50 3f 32 4b d8 60 4d df 06 95 a7 d7 ad 30 d9 3e 29 d5 2e a6 fe 9e 4f e1 46 ab ef 9e 6c cc 65 9f a3 ba 49 08 9a fd b8 ca b7 f4 69 da 6d 63 f5 05 18 f2 c8 4d 57 ad 7b 6d 5f b2 99 3d 87 ed d9 25 c3 98 d3 26 e1 c8 8d 57 cc ce 75 b1 07 1d 19 d5 fb 1f c5 b9 e7 9d 4b 97 32 fd d4 b3 f7 21 fb 2b e5 80 30 ad 56 d5 59 7d 88 de 00 71 ca 61 dc 69 a9 Data Ascii: P>_{n%\t*~l2yI:,O44]+MA{]7Cz0_\|`EyI~/-dm?pd/?~,^k$\<NBsaP?2K`M0>).OFleIimcMW{m_=%&WuK2!+0VY}qai
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 55 cb 58 da 8b 85 38 5f 57 56 7f df 45 1b 75 a7 b2 45 ec 0c cd 04 8c 74 7a 92 18 93 cd 1e 97 d8 64 5d 6f b7 6c 69 7c 2d a2 92 ad 11 7f 50 51 7e ac 9f ce a5 6a b7 63 95 1a 3b 35 cc 58 75 d2 bc ec c2 5e bd f7 12 f3 5b 9c 81 fa f4 b1 2e f1 47 de 64 3b 37 1e 7e 98 f7 5a 2a d7 04 e5 b9 7e 9b 4d b5 c9 b6 1a f5 1f 62 6c 94 78 fa 15 c7 e5 ec ef 8f 1e 55 fa fb ff 34 89 e4 cc 7f ae 30 8f f5 37 7a bd 91 ab 9f 54 aa 45 d3 6f 8b 59 6e 2c 7c d9 0c 3b 61 3d 63 e1 86 8e 49 59 6d 60 77 2e 5b df ff 1c 22 9d 76 9b 0e 7b c4 22 6f 3c 2a 26 95 69 b5 a3 b2 f8 11 1b cb 8b e5 29 61 66 39 49 32 16 7e c3 8b bd c9 fc d5 ea f0 39 94 e5 dd 3a 96 a1 6f af bb a8 59 79 36 75 e3 45 70 50 79 a9 5d 75 b8 6b bc 1d 8b b1 af f5 86 2f b5 e9 94 15 61 c0 82 32 9e d3 32 7f f5 54 9b 95 66 50 47 39 Data Ascii: UX8_WVEuEtzd]oli\|-PQ~jc;5Xu^[.Gd;7~Z~MblxU407zTEoYn,\|;a=cIYm`w.["v{"o<&i)af9I2~9:oYy6uEpPy]uk/a22TfPG9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.6	50029	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1080	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10602 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:27:11 GMT Expires: Sat, 20 Apr 2024 11:27:11 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 9579 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	721	IN	Data Raw: 52 49 46 46 62 29 00 00 57 45 42 50 56 50 38 4c 55 29 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 d9 91 b5 20 f2 ff 1f de b3 bb 67 ce 11 fd 9f 00 fe df 3a 62 03 11 e7 9e 07 ec 2d 12 80 64 43 c4 86 47 70 07 92 04 d2 84 07 6d 3c 3b e4 c9 ab bc 7e 9f 10 ae 2b b4 76 26 d5 11 95 6a cf 65 93 4d 4b cd cc 88 a9 8b cc 4c 5b 5d d4 9d b2 25 fb 17 e4 17 41 a3 03 fd 4d c1 e4 fb 36 7a 25 fb 1d f5 9f c6 ee 65 da 5e 7a 00 6c e9 35 d4 ba c6 1d 00 96 bd 2b 22 b8 80 ce de b8 2e a0 d6 7d c3 73 7f ec 02 72 64 db aa 95 46 02 20 ff a8 dc 6d d7 ab ef 8a bb 3f e1 32 fa 53 48 b2 6d ab 6a 16 10 c1 5d 5e d1 3a f3 1f 4b 9a ee ee ee 9e 82 14 49 92 23 c9 67 7a 14 8c e5 8f 64 21 c8 bb 0b 08 f7 d2 aa ff 13 80 55 73 60 f4 8c 9e f1 2f 2c e7 f5 05 00 0b 33 b0 d8 9c 46 65 14 ea 3d 43 bd 9a 43 Data Ascii: RIFFb)WEBPVP8LU)/?M@rH g:b-dCGpm<;~+v&jeMKL[]%AM6z%e^zl5+".}srdF m?2SHmj]^:KI#gzd!Us`/,3Fe=CC
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: fb f0 f8 f3 79 3c 1f fa 5f b6 8d 24 29 aa e3 4b f9 cc d7 67 f9 31 bc cb a4 98 00 4b d0 f6 2f 92 a4 64 56 96 b6 8c bb fb cc e2 ee ee ee ee ee ee ee ee 76 73 77 77 77 97 75 77 df 1d d7 96 ea aa cc 3a d4 4c 4f 55 ed d2 73 fd b0 3a e1 90 91 14 92 b8 bb fc 22 56 12 5d ef 88 c6 12 ed 13 0e 1d ff c0 7e b8 bb ac 27 2e 85 24 5a ab 13 dc dc a1 d1 53 21 cd 22 eb 7d c3 39 d1 6c 10 41 3b 92 24 45 b6 15 51 3d 7b e0 31 33 33 cb f8 ec c0 ff 13 e1 6a f0 a4 78 42 30 33 9c 73 f9 2e 4c 57 52 a2 6d eb 98 24 dd fb 3e e4 1f 11 7f 32 22 72 ad 18 b5 6d db 9a 19 33 73 d4 23 db b6 dd f3 1a f6 c8 56 d9 b6 cd 70 c4 1f f1 7f df 8b 09 c0 ec fe 9f 22 c9 76 32 eb c0 65 d3 ac cc cc 7e 04 7a 44 af ef d2 0f e2 87 f0 33 dc bd 99 67 26 73 d1 33 39 55 75 68 fb 35 2e d9 a1 bf d2 10 c6 d5 55 69 Data Ascii: y<_$)Kg1K/dVvswwwuw:LOUs:"V]~'.$ZS!"}9lA;$EQ={133jxB03s.LWRm$>2"rm3s#Vp"v2e~zD3g&s39Uuh5.Ui
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 8e 9b 7a da 3b 49 0a 7f f1 5d bf 5d 50 cb d1 49 41 58 1a 94 8d 8e ae eb a7 0c e4 3a 07 8e 2c 2c 0d c5 a0 5e e9 6c db 42 61 01 c9 fe d5 f7 fb de 69 30 9b 15 65 aa 2d a6 59 81 d5 0a ea e0 dd 4e 35 a0 23 47 63 a8 41 a7 a7 46 8a 09 96 2d 02 de fa 4b d0 29 ff ea 7e 33 69 bf fd 01 9f b7 6f bd 6b cc aa c2 42 91 ad 5a 47 6a bc 02 0e c2 0c 8d 4c 48 06 a8 62 86 4e a9 b6 50 85 86 22 46 9d b3 b5 d3 33 a9 93 b4 f0 fc 7f 9a 59 9c 13 00 71 04 df 6d d9 74 df 4c 86 f3 31 69 ce 17 25 a2 57 97 23 91 54 86 5a 15 9b 4e 6d d7 0d a2 08 db 24 68 fd 65 a4 1a 2c 20 f9 ff ff d5 bb 82 9a 4c aa 00 a2 71 93 2c cb a2 cd 58 e2 bb d8 23 e9 19 c9 8d 3e c4 1c 07 a7 03 e7 28 de c5 73 07 2c c3 48 04 63 d7 5a 4c 91 29 70 e7 6b 0a 6a 86 73 62 81 49 43 da b9 a7 0c 2f 34 31 43 f6 6a 73 72 97 61 Data Ascii: z;I]]PIAX:,,^lBai0e-YN5#GcAF-K)~3iokBZGjLHbNP"F3YqmtL1i%W#TZNm$he, Lq,X#>(s,HcZL)pkjsbIC/41Cjsra
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 6c a1 96 47 e6 70 cf bc 35 e3 4d 0c 8e 08 30 c3 21 91 00 e3 55 2a 00 27 34 3b 45 e1 19 0a 27 52 05 ad cf a8 b0 53 2a fb 84 ca 4e 09 03 f7 c2 0b d1 78 19 af 00 1b c7 d5 f0 80 97 cc 85 ab 49 c4 da ce f3 41 b1 03 51 47 8a ac ab 98 da 71 85 c0 42 f3 d9 6c 04 ca e4 83 ba ec 25 24 ac 61 10 28 a8 f6 34 48 10 20 6e 65 48 c0 88 28 00 9b 08 48 a9 b0 91 70 22 2a a2 f5 8e 00 12 95 49 00 01 09 d5 0d 02 43 00 1c 03 03 ce 71 7e 7e bd 79 c0 73 6e 28 6d 24 f6 94 82 8b 35 e0 e5 41 3a 2d 6b d7 1b 96 65 6b ad 95 48 12 90 90 ce e6 f3 2a 7a df cf 44 e2 28 21 f4 2d 05 a8 ea 94 b0 18 80 c1 64 c9 98 c7 3f bd 8a 61 77 46 1c f8 9b 9c 74 1e e6 54 36 08 68 bd cf 52 61 10 1f 95 ca 46 74 66 a4 b2 33 68 bc 02 38 47 7d 0e 45 33 c9 25 23 35 67 10 6d 49 ed 22 05 8b d2 4e fb 1c 2d 0b d9 54 Data Ascii: lGp5M0!U'4;E'RSNxIAQGqBl%$a(4H neH(Hp"ICq~~ysn(m$5A:-kekHzD(!-d?awFtT6hRaFtf3h8G}E3%#5gmI"N-T
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 39 e7 8d 75 37 f8 aa 0d e3 0d 68 f6 11 c0 ca 38 87 3d e5 42 20 84 32 59 82 49 90 18 2b 25 a6 72 47 90 78 10 c0 16 b1 20 12 0c be 09 e0 ee 2c 12 4e 89 95 84 82 d6 83 3a 97 cb 87 7d 2d de e2 81 2b e7 f0 40 4f bb 8a f5 f5 af 43 04 bc 0e 28 5b 3f fd d0 33 2b b1 6b 32 00 90 aa de d5 bb 7a 43 59 24 94 01 66 22 08 80 60 a6 a6 aa ba 56 56 92 c0 1a 98 a4 64 29 d5 ba 2e 48 04 9d 59 37 31 9a 15 23 0f d5 59 ed 4a 44 eb 00 12 fa f6 1f bc 4b 78 3f 18 1b 7a 43 12 59 dc 35 33 31 81 40 04 60 a0 e8 8d 89 09 23 6f 5b 54 ac 0b 52 45 00 dc 63 34 cb 75 c9 fc d6 45 b4 de 01 64 ab 9d 09 e6 f3 c0 40 8d 49 ef 95 de fb 17 b8 70 cf 54 53 43 30 73 dd 81 a0 7d b8 5c 78 e1 b2 18 ba 75 dd 86 75 01 55 44 eb 1d 15 18 6b dd cc 51 53 eb 24 60 b6 da 99 d0 bf e7 7f e7 a7 30 77 26 a9 ae be 3a Data Ascii: 9u7h8=B 2YI+%rGx ,N:}-+@OC([?3+k2zCY$f"`VVd).HY71#YJDKx?zCY531@`#o[TREc4uEd@IpTSC0s}\xuuUDkQS$`0w&:
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 15 c0 f4 b0 13 c1 48 be 03 db 13 90 68 5a a4 ca 56 4d 00 1b a0 cf 44 b4 71 04 76 80 13 9e de cb 21 04 39 f5 7b 8f ee 98 e5 b8 45 cc 38 14 90 b0 d1 03 12 54 e3 98 41 a3 3f 01 a9 dc a2 32 05 03 60 27 d0 67 88 36 8e 37 89 e1 c9 76 dc 13 da 43 10 6e f8 fa 7a 26 44 63 18 a7 e0 54 76 4a d8 20 ec 8c 68 f4 ce b0 70 aa ec f9 13 bb 05 e9 27 d0 3b 04 70 85 1d c0 27 a3 ec bd 59 4e 0e 01 f8 94 6d 0f 3a 93 af 0b 2f 30 54 e7 1c 2f 48 54 bd a7 a4 72 42 a3 f7 27 20 30 b0 e7 fe 37 28 95 35 8d 0d f4 3e 13 d1 c6 11 31 b4 f3 e9 3d c1 5c 57 76 9e 1e c2 f6 ac bb cf ec 2f 63 59 72 91 a8 e8 33 a8 0c 01 f4 27 20 61 27 d1 fc 09 4a 65 03 a0 09 30 13 d1 c6 f1 2a 31 74 46 10 5a 1c 8f cc 11 9f 78 ac bd 68 f5 2e fa 0c e7 b2 33 02 3e 33 54 d9 49 04 db c9 08 c7 ae c2 4d 00 d0 00 1d a0 31 Data Ascii: HhZVMDqv!9{E8TA?2`'g67vCnz&DcTvJ hp';p'YNm:/0T/HTrB' 07(5>1=\Wv/cYr3' a'Je0*1tFZxh.3>3TIM1
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: bd cf 41 43 b5 ae 4b de 6c 88 56 00 9f 32 4d 26 27 13 e8 1d a2 31 82 0a 60 83 08 b3 16 2f 7c 68 fd da 5f 2d b5 73 34 c7 c9 a1 02 ec 94 e0 62 54 bd cf 11 20 c1 82 88 d6 d2 dd e1 30 fd 63 8f c5 f0 62 86 33 11 8c 23 2a 86 db 33 a2 d9 a1 87 02 70 e0 5c 34 1b 70 05 e0 94 0a 93 2a fa 1c d1 90 6a 5d 51 41 4b 77 87 a6 3d 04 53 79 cc 79 e1 1a c0 24 d0 3b 11 6d 1c af 12 c3 8d 88 66 e7 43 1f 5a 0f c7 21 1d 0a 9a 23 ce 45 c0 89 0a 3b 25 3a d0 80 82 45 02 b7 c3 82 64 36 1c 02 64 4d ad 33 7b 3a 98 d6 4e a0 f7 39 80 f1 2a 15 d0 7b 7f 46 83 94 ea e1 38 a4 03 66 03 9b 08 d8 08 20 a5 ea 7d 8e 00 09 23 15 76 76 77 30 13 95 c3 20 f5 cd 8c fc 60 f3 c2 60 9e 52 09 f4 3e 03 ed 4f af 50 0c fb 1c 60 50 e1 38 a4 eb 39 e6 01 e7 22 98 53 2a 0c 2a fa 1c d1 90 ea 62 28 ec 3c 9f 69 5a Data Ascii: ACKlV2M&'1`/\|h_-s4bT 0cb3#3p\4pj]QAKw=Syy$;mfCZ!#E;%:Ed6dM3{:N9{F8f }#vvw0 ``R>OP`P89"S*b(<iZ
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 3a ea b7 e2 50 89 17 b0 eb 50 0a 58 7b 4a 15 9f e6 26 7a ff b5 c0 e3 38 ab 63 3e 7a a1 2c b0 d0 42 d5 b7 d1 cb ce 77 da e6 04 7e 59 7b 5d 77 80 19 c9 70 a2 86 f7 8d 46 60 ec 97 f5 b2 fc 95 d1 62 19 0e e5 b0 1e c0 cf c5 5b f5 f0 81 cc 3f 1d da d1 c7 d7 79 9b 91 3e c9 34 e8 a9 43 18 d7 88 f9 6c 56 03 79 79 2f 63 01 66 4c 63 7a 76 dd 70 6d 8d 49 f0 08 64 98 26 a2 51 f7 02 1c b4 33 6d 6d a8 e8 10 e0 9c 1c 5d 7c fb f1 c4 4e 3f a1 54 a8 87 a1 03 04 60 26 80 33 23 9c 2d 7d e6 2c 89 92 99 62 2f e8 ae 62 d7 04 69 7b e3 3d 10 01 73 6b 71 43 92 5a 98 c7 bc b9 9b ab fc 59 dc df 5e e1 cf 32 13 d4 df 9a d3 ec a8 37 63 1f ee 21 cf a7 f3 f9 34 07 33 98 94 ce f8 bb c6 ff 47 c1 9f 5d 86 03 a7 db 37 5b 18 01 13 09 6c fa b5 66 71 52 73 32 14 b9 b2 d0 cd 41 fb fe 78 1f de 83 Data Ascii: :PPX{J&z8c>z,Bw~Y{]wpF`b[?y>4ClVyy/cfLczvpmId&Q3mm]\|N?T`&3#-},b/bi{=skqCZY^27c!43G]7[lfqRs2Ax
2024-04-19 14:06:50 UTC	1096	IN	Data Raw: 0d b7 7a e3 a2 78 c6 0d 28 90 84 08 a1 44 2c 20 33 40 08 00 42 94 d7 7b 9c c5 c1 6b ad 58 a9 1c 88 57 3d 1d ba e8 7b 1f 35 ea 85 12 d5 c5 03 ca 38 23 85 7c 8e 1c bf 18 20 1a 9e 94 58 7a 96 0a 2e 96 a4 52 91 42 45 a6 30 02 11 01 58 bd e7 65 bc 40 62 4b 58 b9 02 d7 c4 0e a2 d7 e8 47 fc b8 4e 81 05 07 b7 cc 56 c5 0d 1f b5 1f 69 02 c2 8d b3 38 53 e0 32 4f 94 48 21 6a 6a cd 01 84 78 82 c4 4b 85 3c 32 85 9c 5c 04 4a 2a 25 7a d0 10 7d 9f dc 18 9e 5e f6 af 6a b4 4b 89 92 32 f3 dc bc 1c ad 24 6b 6c 8c 09 88 86 27 a0 a5 02 84 2c 45 94 86 c5 24 06 00 22 22 a1 f1 9a 62 ff b2 26 c3 13 dd 4a 34 20 89 12 54 92 cb ad 0f 51 b5 4b 89 dd c0 cc d7 d6 b4 b2 43 4d 36 36 66 32 24 16 a0 a2 4d 10 44 28 2a 8b 79 94 ae a5 86 2e 32 ba cb ae ac 59 68 a1 85 c6 12 7f 7e 6b 3e f2 45 89 Data Ascii: zx(D, 3@B{kXW={58#\| Xz.RBE0Xe@bKXGNVi8S2OH!jjxK<2\J%z}^jK2$kl',E$""b&J4 TQKCM66f2$MD(y.2Yh~k>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.6	50030	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1080	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:50 GMT Server: fife Content-Length: 9974 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	733	IN	Data Raw: 52 49 46 46 ee 26 00 00 57 45 42 50 56 50 38 4c e1 26 00 00 2f ff c0 3f 00 09 58 92 ec c6 6d ea 3d 80 04 f8 20 dd ff c0 9b 41 67 f9 8e e8 ff 04 e0 ff 68 b0 4d 9c f0 5d 13 ce 3d 39 e7 2e 60 0f 62 d7 5a 4b 7b 80 01 c2 c0 ae 42 64 12 3c 91 d9 25 89 e0 32 83 7b 8b 6e 60 66 36 dc 3b 20 a9 00 9a d9 5a ee 0d 92 44 c0 6f 16 9b 0a 80 db 6a 9a 92 88 db 0b 3f 93 a4 ba 8b d9 35 6e 22 22 bc 49 97 b8 9e 0d 9c 03 a8 0a 32 33 e3 b4 cf 7c 8e 81 8a c8 cc c8 b4 16 a0 2a 79 3d ad 03 9e d7 cb 71 f4 c0 33 33 06 eb 68 bb 56 1d d7 0d 7f f0 02 8a 24 c9 aa ad 8c 13 13 f3 18 14 7d d2 7f ff 2b fb 12 dd 65 d4 8a db b6 8d 43 cc dd 67 59 45 92 ec a4 c9 19 de 7b 20 00 11 f8 97 83 85 fc d1 ff 09 f0 77 ac c7 64 30 04 c1 50 a0 e4 1b 84 1d 00 82 21 00 10 b0 12 0b 85 a1 82 74 fe 7b 07 02 8e Data Ascii: RIFF&WEBPVP8L&/?Xm= AghM]=9.`bZK{Bd<%2{n`f6; ZDoj?5n""I23\|*y=q33hV$}+eCgYE{ wd0P!t{
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 08 ed 81 a1 43 87 9e 76 46 4b 7e 7a d3 47 c7 dc 3e c6 c9 0b 83 43 0b 9e 28 0b 93 85 7f 1a 78 9b 8b 8d 9b 7e 1a 7a db 22 ed a3 a3 e1 a5 43 e1 d6 b6 ad 5a 59 fb 7c c1 dd dd 5d ca a0 0b 22 fa 21 d5 2a ac 02 32 1a f8 31 ee 9e d9 b9 db 6d db 48 92 24 ee 9b 7f 9c e7 9f b9 15 13 e0 03 7c b2 ff 3f d9 ff 1f e7 d4 b3 f2 ec c9 4a 05 b9 52 6b 4f be f4 f4 51 6e f7 1f 2e bb b3 81 03 99 bf c1 de 6b 3b 37 56 50 db 90 78 59 f9 f5 c5 8f 92 1f 9e dc 88 00 7e 4f dc bc 2c da be 37 d8 c1 11 0b 64 9e 9d 72 14 2c c2 42 00 59 14 3c 53 dc 42 37 4a ee e2 11 02 d8 fc 61 07 0f 10 d7 a4 61 23 f8 10 e5 d3 b8 29 e6 6e 50 e9 11 b8 66 85 ce 9c a5 07 cf c6 47 5c 13 40 e0 04 ee 99 f3 41 78 b7 21 e5 1a b4 5c 53 3b 1e 5d 6d 16 27 0e d2 e2 d6 c1 f2 94 9b 92 d9 9f b8 89 6e f2 ca 04 aa ee aa 75 Data Ascii: CvFK~zG>C(x~z"CZY\|]"!*21mH$\|?JRkOQn.k;7VPxY~O,7dr,BY<SB7Jaa#)nPfG\@Ax!\S;]m'nu
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 43 60 37 63 1b 63 c2 a1 ed f3 e4 fb 4e 27 bb e8 6a 6a 40 59 21 77 7a 47 12 c0 12 38 dc f5 79 f2 a7 74 fa ad 67 20 00 41 c3 c6 80 03 30 06 73 25 5d 9d fe 79 a2 7b 3b f7 86 c1 01 8e 8b 00 f3 9e 4d 52 7e 96 08 40 cc 2b 6f 3e f2 9e b9 5f 98 10 33 fc ae b0 f0 67 09 43 63 32 ce b9 91 6c e4 96 6c 90 00 9e 98 dc 72 cb 6d 5e 95 8d 11 e3 fc 79 c2 e0 98 64 5f 8a 45 38 5a f5 a5 15 e3 74 38 8d d3 38 09 28 95 d4 0f e4 e7 89 10 92 80 30 ef 74 60 4c 98 f7 97 3e 53 7a 47 02 95 c2 50 28 16 74 a8 e6 58 9d 25 28 05 d6 83 f4 d5 39 e9 82 8d c7 94 6a 64 c1 ac 95 5d b6 d6 f2 09 61 39 81 05 e2 fe 70 98 bb 06 6c 0c 10 06 f5 e0 01 57 e9 9d fd ad 41 e0 c8 d9 8c aa 6f 53 29 92 01 d7 fe 33 cb c6 63 b7 92 ba 24 10 01 e6 fe 52 2c 01 26 30 77 a5 26 7d 50 b1 da 63 1c 1f 33 0a 21 b8 c5 71 Data Ascii: C`7ccN'jj@Y!wzG8ytg A0s%]y{;MR~@+o>_3gCc2llrm^yd_E8Zt88(0t`L>SzGP(tX%(9jd]a9plWAoS)3c$R,&0w&}Pc3!q
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 75 42 d5 d5 37 f4 5f 9e 2f 65 11 f6 06 37 da 69 9b 7b 73 6e ce dd cd 4d d7 f2 38 f7 b9 4d fc 36 37 e9 e2 9d b7 47 6d fd 41 0e d8 9f 4a 21 80 00 2d 68 b0 79 26 09 c8 c3 9e 38 6b be 14 45 6d ab 3d fa 37 1f e4 c2 96 1a cb 22 da f5 e2 33 b2 7d b0 6d 61 2d 1b 35 e3 30 d6 b2 5b f5 e7 73 7b 98 bb d9 66 20 07 60 41 48 12 90 4e d8 84 31 36 a2 c9 a6 b2 a8 a2 66 71 1e a6 2c 66 6d d9 3e d5 77 86 45 8e f5 5c 0e 23 c0 dd 96 85 8d 8d 59 cf 32 a8 09 d1 fa 0d 7b 90 7b d2 59 bc 3a 5e 2b 0d 00 57 42 03 31 71 2a e7 60 4c 6a 22 28 ea 1a d4 a9 c6 c7 77 58 82 fe 8c 25 ac be 86 39 b6 1d 6d 3b ce 4d ce cd 73 63 6e ce 0d 9c 6f 26 37 c8 0d 83 da 7e c3 fc 20 d7 f9 21 b7 fc 67 06 73 01 20 40 3a 0d 60 6d d8 f8 40 9b 66 c5 25 aa fc c2 1f a6 2c a6 bf 6b 0b fa bb bf ab 88 35 a4 1d a0 ab Data Ascii: uB7_/e7i{snM8M67GmAJ!-hy&8kEm=7"3}ma-50[s{f `AHN16fq,fm>wE\#Y2{{Y:^+WB1q*`Lj"(wX%9m;Mscno&7~ !gs @:`m@f%,k5
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 2c 35 96 24 90 d0 12 0d 5d 0b ad 40 52 09 9a 70 1c f5 51 b0 f1 b7 87 30 ad 29 55 93 4d 4e 63 e6 5c 1b b8 30 40 91 80 81 65 16 84 8f a3 6f ed 7a 50 26 68 7c e3 f4 5c 20 fa 02 15 42 a5 92 8c 24 15 12 a8 08 dc 3f 0e 3a 53 9f 32 98 5a ad 36 99 c8 30 a9 e2 f4 b4 c2 a4 a9 49 71 ef c5 ae 48 c3 24 fa c6 2f 2b 3e 63 39 b1 00 07 d5 17 95 bb 6c b9 e3 2e 56 17 a2 75 c4 ea 80 56 b4 a2 ff d8 3e 12 2a dd 7d 6a 5d d5 94 68 9a c1 84 7a 9a 94 8d 59 49 56 26 30 0d 27 b3 52 0a bf d1 d2 ea 2d c1 04 37 fa de da 8b 85 6d 59 12 c8 88 6b 05 5a 0d 90 b0 24 55 7b d9 6f 73 1f 0b b3 fa 9f 3d a8 65 dc 9a db 94 a6 0d 17 88 ac 24 d7 04 af f4 c6 35 4c d9 c6 39 29 24 d8 d2 f4 66 96 09 be 3d 6f 65 4b 3b 4a b4 4d f6 12 a4 6c 49 bb 74 d9 94 dd db ea 97 5d 1f 0d 0b 66 bf 69 1b 78 f6 da 7a 7b Data Ascii: ,5$]@RpQ0)UMNc\0@eozP&h\|\ B$?:S2Z60IqH$/+>c9l.VuV>*}j]hzYIV&0'R-7mYkZ$U{os=e$5L9)$f=oeK;JMlIt]fixz{
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 18 f1 30 dc fc b3 e8 1f ec ed af 17 cc b5 36 db be 98 01 f4 2d 54 ed 99 d6 91 5b 38 ac d5 ca bd dc 2c ab d3 4d 43 a5 50 ff a4 0e 7b bf 6f 37 f3 90 75 97 0b ce 58 bc dd e3 a5 53 1a 26 35 dc c3 f2 1f 13 c2 08 fd 6b e1 9f aa 7f c2 7e 45 e0 09 df 7d f9 7f b0 40 e8 c7 25 70 ff 19 a0 12 08 09 7a ab 06 68 09 6c f5 d2 f3 27 b4 b1 c6 1b 8f cf 3f df fd ff e6 c6 f1 4b bd 11 99 01 43 a9 74 1f 76 b0 59 44 bd e0 da 30 3e 53 8b 61 93 0e 87 04 84 3e 9f 5c 20 06 d8 6f d8 29 7e 4a ce 3f 89 d6 bf d0 ad 73 d3 a3 b5 ed 6f 6f 74 10 da ce 9c f7 b8 c6 97 fd 36 f7 c9 0c 5a bd cf 69 5b b2 ca fc ca 98 34 b3 7b 4a 71 2d 43 04 49 34 4e 83 03 67 4b dc 0a 0e 2e a9 cd 74 c8 22 52 50 dd 72 c9 47 86 01 d8 b6 7d 9c a1 dc 7d 85 b1 ac b2 0a b4 66 4b ec dc 5e 91 55 e8 4b 9c ff f4 53 39 ec 4d Data Ascii: 06-T[8,MCP{o7uXS&5k~E}@%pzhl'?KCtvYD0>Sa>\ o)~J?soot6Zi[4{Jq-CI4NgK.t"RPrG}}fK^UKS9M
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 98 80 89 a2 01 52 49 61 75 01 a5 42 a5 d5 4a ab 01 e8 83 ba eb af 1f ba fa e6 ec 27 cf b9 30 0e 1b 1c 13 d6 e6 d9 df 5e 4e fa 49 23 94 e3 9b 2f 07 49 73 8c 83 53 7d 5e 68 49 cf 96 1d 12 90 18 c4 b9 16 95 f1 54 38 9a ef 61 84 25 ec f4 8a 32 3d 26 76 69 81 91 ba 81 d6 97 00 1c 38 1c 4b ae 46 18 f6 1b f6 7e 8f 3a f2 c2 fd a1 b3 ee 6d 8d 5f a5 9d 84 b7 6b d0 4f 70 a1 71 61 6a 42 cb 1a d6 69 9e b2 1c 5c 72 72 3c 31 96 a6 2a 11 16 9d e9 d1 a4 48 73 0b 94 91 ef 66 fd 05 8c b8 54 d1 2c 9d 89 28 32 11 97 20 80 17 0b ee e8 bf 8a 42 d5 80 30 1d 6e 1c ef 7d 56 c2 f3 47 44 df f6 58 37 1f 95 69 01 2d 58 4a bf bd 94 b2 14 e3 2f a8 c3 38 c5 70 22 9d 5b 92 17 02 2e 82 01 97 06 1b 46 ee a6 89 5d b7 e1 75 dd f1 00 56 f8 bc 67 33 3c 97 78 3e 38 27 62 f5 d5 97 bb a4 d2 ea b0 Data Ascii: RIauBJ'0^NI#/IsS}^hIT8a%2=&vi8KF~:m_kOpqajBi\rr<1*HsfT,(2 B0n}VGDX7i-XJ/8p"[.F]uVg3<x>8'b
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 72 2e 8e 2b 47 f9 6d bf d5 0f 22 d2 e3 61 eb da c7 b9 5f a9 ce 59 7f db 69 c8 80 76 5e d3 2f d7 ea 78 55 b2 b4 22 a0 41 64 22 10 f1 dd de 60 f4 ef 9a d4 78 d9 09 e9 87 e7 61 84 07 95 b7 26 72 1e 24 c6 40 a4 e0 75 64 03 0b c6 98 c4 73 59 51 d8 97 be fa ee 8d fe fd 82 4d b0 e1 1a 47 43 83 f8 22 ef f3 5c a1 8f ee ba 2f 99 37 c7 24 0f 11 ca 83 a6 32 94 21 46 21 5d 4e b7 3d 15 55 ff f1 ce ef ef 78 37 2f fe fa e7 95 1b f0 58 05 59 40 9c dc 4c c5 6a 89 6b 12 a4 b2 17 30 0a 6a 8f 5c a6 92 8b af 81 69 08 42 a2 2f 72 48 2e 1a 68 cc 52 e8 b5 fa 07 ac 5a 6e d0 a7 67 8b 80 f8 4e c7 99 fd 7c de 5e 5f 71 ee c1 cb 07 d3 fb 79 8e e4 39 0d 98 2c 65 93 58 1c 8b d8 3a 51 74 72 19 5d 8e dc 21 26 f7 75 ff 78 5d f8 70 f5 d1 ef c3 ce 00 82 d3 0d 23 40 3d d3 f0 12 00 f1 e6 a0 e3 Data Ascii: r.+Gm"a_Yiv^/xU"Ad"`xa&r$@udsYQMGC"\/7$2!F!]N=Ux7/XY@Ljk0j\iB/rH.hRZngN\|^_qy9,eX:Qtr]!&ux]p#@=
2024-04-19 14:06:50 UTC	456	IN	Data Raw: c3 14 bf 18 a3 0e 68 0e 78 5b 20 e1 4d ad d9 81 3a e9 c1 05 27 09 4e 36 82 00 71 1e 0d b4 68 94 e7 45 ab 82 60 e8 88 cd 9b cb ef e2 bb 84 9a 14 80 8e 48 99 b0 4e 2f 04 af 0b d3 0d a7 9a a5 65 36 a7 17 56 48 2b ce 74 fd 3b b7 bb e9 76 6b 07 81 71 ce 90 34 44 f0 da 4c 72 0d 05 b2 d8 a2 b0 08 63 de e4 d8 b4 31 e1 c2 a5 40 50 12 86 97 2a b5 86 e7 a5 9a 33 cb 2f 08 90 8b 97 64 f9 d6 b1 38 9f 0b 68 ac 4d 40 0b ae 84 dd 60 02 d2 07 f8 1f 3e 41 11 15 d5 5f f8 71 b0 95 5b 98 7b 26 1d 0e 1c 39 08 96 4d bd b2 cf d6 59 be 6d fc 76 95 0e 93 80 45 da 89 68 86 48 1b 42 5c ea 54 9e 60 d6 5e fd f7 9e f6 7b e7 dd e6 79 6e 30 e3 40 08 9e bc 90 96 95 bb 55 2c b1 55 6c b6 06 63 53 26 9c 12 db b1 95 47 5b 1f 0f c1 db 61 43 47 82 50 55 34 49 13 9f 31 d0 9a 9c 3d b7 3f b1 37 58 Data Ascii: hx[ M:'N6qhE`HN/e6VH+t;vkq4DLrc1@P*3/d8hM@`>A_q[{&9MYmvEhHB\T`^{yn0@U,UlcS&G[aCGPU4I1=?7X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.6	50031	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1086	OUT	GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:50 GMT Server: fife Content-Length: 40644 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	732	IN	Data Raw: 52 49 46 46 bc 9e 00 00 57 45 42 50 56 50 38 4c af 9e 00 00 2f 0d c2 49 00 4d 48 92 24 49 6c 1b 74 cd 8a 02 58 eb ff 3f 18 8b 01 a0 93 8f 11 fd 9f 80 fc 5f 85 1b bf 9f 8b 0f 57 47 65 24 39 64 41 22 a3 aa f1 a9 ea 25 aa c9 67 df af ac 20 e8 cc a8 0c aa 04 ad 8c 15 07 77 46 a9 71 e7 0a 02 27 e5 bc 9a c6 0b a8 ec fb de 48 55 cd af 3f 8d 31 52 23 2a a3 48 39 ca 33 2d 64 4a 5d 69 05 68 bc 0f 7c 52 b9 ff d7 66 2e f7 c6 e8 8d 24 c7 4b 6c 5b 40 8a 15 16 ad 81 20 c2 73 e6 6c 12 57 49 b4 13 2f 5f bb ad 9d d7 f9 1a 1f 00 1a 5a fb 6f d5 ac aa 54 8d 9f 07 80 dd 01 fb 0e 3b b0 03 9f ba a1 6c 36 9f 30 8f da 39 9b 37 81 24 2c 3b 70 e7 5d 00 41 93 06 a3 5a 9c 07 60 21 13 1e 52 85 d4 4a 6d 79 bb 9e 48 0a 43 22 99 4c 55 5a dd aa 32 75 ef f7 f4 e4 ec 8c 1a 61 91 5a e6 b8 c1 Data Ascii: RIFFWEBPVP8L/IMH$IltX?_WGe$9dA"%g wFq'HU?1R#*H93-dJ]ih\|Rf.$Kl[@ slWI/_ZoT;l6097$,;p]AZ`!RJmyHC"LUZ2uaZ
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: e1 e7 e2 e0 05 3f ca 45 37 dd 4e ee ca 8d 90 c4 84 71 52 98 fd 3a 19 c2 18 21 12 67 42 c8 c5 b7 cf 0b 7a 87 14 42 50 6e 4e ec ed b5 bd be 82 10 e8 50 48 48 42 f4 e8 01 3d 40 02 50 4b 4c 5c 5f 92 06 67 9b 99 c4 98 c4 cc ae 10 8b 00 c9 18 75 91 24 c9 65 d4 7f 2a 54 53 c1 24 ce 2e a3 cb 28 bd b1 d7 2b d0 5a 66 bb 95 34 0a 82 c0 98 20 d8 30 c1 86 09 36 82 60 85 58 23 09 31 ba be 24 89 1f 9f bf bf 8c e7 5f ca db 05 62 c6 e6 cc b3 c9 09 63 32 4b 4c 61 72 22 31 85 31 e7 04 c5 97 61 fb ce f6 17 6f 57 48 d2 a8 30 a6 82 49 12 93 04 99 54 a8 60 cc 02 21 c4 17 f1 19 b3 ad 10 62 34 19 18 00 48 00 4e 49 82 02 2d 9d da cc 91 67 9b 91 d9 21 b3 01 7b 93 5e 9d 91 81 81 7e fc 6c 3f ef 5a 20 43 c6 44 66 49 62 2a 24 26 31 26 31 c6 98 24 93 c4 d8 e6 84 e4 ce cd f2 2f 7e f6 b8 Data Ascii: ?E7NqR:!gBzBPnNPHHB=@PKL\_gu$eTS$.(+Zf4 06`X#1$_bc2KLar"11aoWH0IT`!b4HNI-g!{^~l?Z CDfIb$&1&1$/~
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 25 38 cc 78 0a 77 87 20 67 88 bb 5b cf d0 ae b5 e8 11 8b c2 29 5c c7 76 fe b8 4d ef ea b5 98 c3 2c b8 3b d4 61 c4 6a 9c c6 0b a7 17 33 4b ce 5a 4f 16 77 84 bb bb 5e db 93 87 e9 9d 15 ee 0e dd b0 82 cb 08 46 ee 2e 67 e3 ee b0 af bb 8c b0 30 7c 18 5a 72 65 08 23 77 9d b1 1e 39 41 86 6e 67 74 fd de 19 35 c9 f4 fa bd 14 b0 ff 5f a4 44 df 89 4d d8 a5 a4 c3 c2 96 12 15 b0 10 bb eb ec 53 6c 0f bb bb 51 da 0e 04 e3 ec 6e cf 53 54 b0 29 01 95 96 92 6e 58 76 17 36 67 67 46 1b ad 6d c7 36 49 d2 71 9e d7 fd e0 7d bf 40 66 44 66 21 33 c7 b6 dd 4e c5 d7 b6 f5 6b 6c db fa 6d ab 6d 23 22 33 c7 b6 ed 72 2a 2a 26 f0 bd ef 83 fb ba 62 02 bc 64 db b6 49 92 b6 6d 91 b7 7f cb f7 15 a0 fa fa 01 51 bd 04 dc 4c ee f0 c4 a7 85 43 57 78 18 98 f4 c0 e5 2f 68 d1 d6 90 f4 b1 34 3e 5a Data Ascii: %8xw g[)\vM,;aj3KZOw^F.g0\|Zre#w9Angt5_DMSlQnST)nXv6ggFm6Iq}@fDf!3Nklmm#"3r**&bdImQLCWx/h4>Z
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 17 3c 4a ee c8 0e a9 47 3a 25 77 24 2e 4e 87 2c 49 b7 74 5f e8 0e a7 19 5c 57 43 33 38 26 fe 9c 93 91 61 b4 49 5a 80 06 e8 10 31 86 fd 47 1e 3b de 2e 38 1c 6c f4 d4 59 d9 72 42 a8 f6 f9 fb cb 3f bc bf e2 d3 fb ce f3 1f 69 c7 1c 01 2a 85 d5 5d 7c 68 6c c5 cf f9 f6 8e 01 fc 71 79 a1 ea d9 8e fa 00 cb 7c de a8 b4 3a 13 61 64 81 91 91 d5 b3 b2 48 64 e8 4a 54 13 ea b4 6a 22 70 25 88 9e 95 3d 91 05 f8 4a cb c8 c2 77 3e 49 df 2d 97 26 75 a2 19 a7 b4 24 51 4b cd b8 ae 71 4a 4b 9f 2e 24 1a a9 25 68 a4 46 6a 49 c7 c8 0e 49 97 e6 05 79 c1 ae 78 33 d8 fe f1 e9 18 78 53 b4 51 70 08 6c e9 4d ee 91 d8 b8 89 21 45 a8 22 b4 92 81 b1 70 61 73 d4 98 25 46 7a 4c a0 ca dc 03 36 3c 63 39 14 2c 17 05 55 9d 9f b5 82 ab c6 df 95 6b f0 2e 05 71 45 04 42 12 68 41 08 83 d8 94 0a d1 Data Ascii: <JG:%w$.N,It_\WC38&aIZ1G;.8lYrB?i*]\|hlqy\|:adHdJTj"p%=Jw>I-&u$QKqJK.$%hFjIIyx3xSQplM!E"pas%FzL6<c9,Uk.qEBhA
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 4d d3 03 3a 3a 14 3b bd 5e ad 25 a6 e6 68 63 41 ea f5 49 5a 22 db 48 c6 8d 41 af 1f ef d7 91 56 0d 5d 36 60 20 d3 e4 2c c0 fd 69 7a e8 b5 4a d4 69 b7 24 11 d9 c9 f1 a8 94 52 ab 47 2c b7 1b c6 fe b5 ee 3f e3 15 c3 ac dc 03 cf 80 db 40 e9 01 64 dd c2 67 61 9a 46 89 41 0b 61 2d b5 ca 25 e7 72 1e 8e 1b bc 34 ba d6 da 9c ef 5b 3f 3f de 70 67 91 30 7c 4f 05 07 b4 9a 3c 83 4b 69 06 e7 03 3d f8 bf 7e cf 08 8a 68 66 1b a7 2c 77 cf 40 3e cf d1 cd 43 5a d5 34 fd ee d9 27 b7 03 d5 67 8d 0b 01 7e bf 4b 18 27 f7 75 2c a5 64 fe 64 e3 a8 74 ba 3e a2 e2 87 b9 05 da 5c cb fc a7 7c d1 f6 b6 06 18 42 d5 0c 2d b6 19 93 ee 09 fb 53 43 ce 55 76 2c 72 04 50 cd 03 14 1d 19 b6 9d 6c 62 25 29 c3 d6 69 c3 8a f7 6c dd 17 1e d0 aa 40 3e 34 a9 ee a9 dd dd 57 36 d6 62 5b 20 d1 2b a2 99 Data Ascii: M::;^%hcAIZ"HAV]6` ,izJi$RG,?@dgaFAa-%r4[??pg0\|O<Ki=~hf,w@>CZ4'g~K'u,ddt>\\|B-SCUv,rPlb%)il@>4W6b[ +
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 06 7a 7e 5a 16 12 f1 42 7d 11 b0 9e bc 91 67 26 f4 e2 bb 3a e7 a7 1d 8b 3b 79 5f 87 72 a5 36 41 46 60 e9 02 10 dd 4e 6a ec 68 90 80 29 c0 c4 52 32 90 22 4a 4d e5 ca a4 d0 51 0d 4d 88 93 da 3a 0b 27 e0 c6 07 4b fb 28 d9 a2 00 40 67 81 f2 ba 15 57 5c 48 a0 e4 88 b0 ed 91 5a 68 9d bd 28 39 72 04 ce 3c 78 9a f3 21 ff 7a 0c 50 9a 92 b4 3d 32 77 fe 5f 40 b5 19 95 49 2a 9b 1c 55 6d 89 09 e0 eb 34 62 8c 0d 31 42 d8 ad 17 a4 ab 4a 21 51 5d 6c d1 ee ee 61 cc d8 cb f3 c4 cb c7 08 00 fa 73 f6 2e 40 a9 e1 d3 74 c4 cb 45 e7 81 81 3f d5 ab 3e fb b5 a6 be ab 5a 6f 8b 9b d8 73 40 ea c0 9b 00 a6 19 80 d4 48 4a ec 08 89 4e c0 7c 58 db 50 3d 8c 67 40 a4 e5 ac f9 65 8f 82 e2 3b af d9 3c 7c ee 40 d5 dd a9 87 10 d4 3d 64 20 a8 2a 6f 0c 53 37 c9 ad 90 97 4c 99 e5 26 81 23 a3 f8 Data Ascii: z~ZB}g&:;y_r6AF`Njh)R2"JMQM:'K(@gW\HZh(9r<x!zP=2w_@IUm4b1BJ!Q]las.@tE?>Zos@HJN\|XP=g@e;<\|@=d oS7L&#
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 8e 1a d6 c3 1b 12 15 27 4c 55 8e a0 57 74 cf 1d fb d8 2c 2c a9 80 44 19 ab 78 42 04 e7 9b a7 2c a0 f8 5c b7 de c4 4c 95 e2 a9 00 bb f9 00 8c c6 50 4a 8e 79 7c b2 62 af 0f 49 58 d3 51 43 e5 db b9 45 d1 89 78 66 25 f9 ec 6c 18 cd 4c a3 85 f6 b1 b7 65 f3 50 ec 96 e2 7d e5 3b 3f 55 80 41 95 37 50 3d dc 66 66 b4 d8 a4 3b 00 7c 89 4d 0b 7a bf 2f ba 36 24 c6 52 62 50 61 cf c7 eb 2d e1 a4 e0 35 f8 3b a6 60 fd f4 71 99 cb 6a b1 2a d9 90 6a 5a 73 9f dc f4 69 f4 fc d8 bd 3f 61 22 f5 4e 65 93 8e 54 21 b9 7c 88 f8 e2 4b b0 80 d9 c8 1a 38 93 3b 07 00 de 99 ca 54 65 ba 4f 12 ff 2c f0 b0 2d 23 1f 02 00 2e b4 5f eb ab c0 15 e7 cf 23 9e 88 0d 14 fc 47 fb 57 bf a2 c2 7c 60 52 ac 92 bb 3d fb 4f 00 4e 9d bb 59 a2 94 3c cf e9 73 77 39 27 d4 9c 33 bb 4e 24 19 b3 fb a5 ec 40 d9 Data Ascii: 'LUWt,,DxB,\LPJy\|bIXQCExf%lLeP};?UA7P=ff;\|Mz/6$RbPa-5;`qj*jZsi?a"NeT!\|K8;TeO,-#._#GW\|`R=ONY<sw9'3N$@
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: c0 f7 ea 95 b9 0f 2b e8 62 1e 36 e5 7c 9e 51 c8 7b 00 d8 e6 ca 35 1f 03 54 d7 9a da 00 e0 01 ad 3a 56 6b 84 3e 0f e5 91 6a 2e 32 fd a5 2f 92 dd 25 ca 14 8e db b3 9a 65 cf dd de ad e1 ad b5 f1 97 56 fb a2 d2 f0 ac 13 3c 77 a1 06 00 91 cd e5 f5 63 0f ac 4e b5 a9 d0 79 fa 46 7e 8f c6 10 09 32 b5 10 3f 33 1d 2e 5e 2e 05 f6 5d 03 50 60 4d 77 11 ad 99 8f b8 08 4f 61 6d 2b 57 98 4e a2 46 11 b7 42 da 18 2c 97 4f a7 79 a4 60 90 48 67 49 c7 c5 0b c4 02 89 03 23 89 40 83 69 7f cf 1f 5e 28 6d ff 64 9c 5c 55 c8 1f cf 74 3e 84 56 6b da 17 5a 68 ec 7e f6 68 7f e2 b5 56 f1 b3 61 ec 49 b5 dd 68 a4 a0 90 46 43 aa 36 73 b3 64 7a bc cb 36 47 46 53 28 0c 5e 26 86 61 c5 bb 4e 85 7f 6a fa dd 69 e4 da 0c e8 fc 5f c9 fb 97 a0 f2 e0 9c 6d d8 55 65 43 a9 3a cf e8 34 95 19 4a 2f 8a Data Ascii: +b6\|Q{5T:Vk>j.2/%eV<wcNyF~2?3.^.]P`MwOam+WNFB,Oy`HgI#@i^(md\Ut>VkZh~hVaIhFC6sdz6GFS(^&aNji_mUeC:4J/
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 56 67 cc 68 66 bd b0 f6 ae 23 bc e3 f4 89 2e bb b3 e6 8e 35 cc 10 c7 0d bf 9d 11 89 dc 23 67 ec 97 b1 2f 31 66 dc a3 db eb 33 a5 e0 59 b1 00 0c 52 68 e0 39 9c 91 27 cf a8 0f ac f1 5d 4f 57 92 5c 5e 40 f0 2e f0 61 6b 4b 12 fd bc 8f 2a 2a 52 98 2f a8 a2 c2 b4 9f 87 11 8a 62 fd 63 2a 19 c1 c9 85 3c aa a8 d8 c6 82 a7 8a 18 fb 79 9f 31 45 d2 38 ed 2c 60 b5 f0 ca 2c 07 63 0a 31 48 16 3e 7d ed 71 99 70 b7 fd d5 87 28 5d 15 e8 ff bc bf e0 5f 8d 28 7f 6e 89 01 83 95 c5 7b 9d fa 3e 5d c4 fa 23 e1 5f 6e 7d 15 c2 05 a7 58 ee a4 dc 99 0d 62 b6 7d 0c 7e b9 58 89 05 af dd cf b7 67 0c e0 93 41 53 f7 b2 3b 5d aa b0 54 b2 11 c7 2b 8c 2d 1a c0 64 69 01 7c ba bf 6b 31 54 5b d3 10 ef 88 4a 85 d2 3a 2b a5 00 68 70 90 2d 7e d7 7f f4 e0 aa 66 21 7b 73 99 c0 97 b9 e6 ff 87 6d 56 Data Ascii: Vghf#.5#g/1f3YRh9']OW\^@.akK*R/bc<y1E8,`,c1H>}qp(]_(n{>]#_n}Xb}~XgAS;]T+-di\|k1T[J:+hp-~f!{smV
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 66 de 2d 4d ed 40 2a 83 a9 a4 e5 d7 e9 e8 64 a4 91 63 81 92 6d ba 6c 51 dd ba b0 84 ed 57 e6 54 ad f2 98 e6 3e 00 b4 21 f1 46 f5 83 8e 86 27 1e ab 65 69 4a 57 32 b5 9c d0 7f e9 f5 50 5d 54 4b d2 b5 4d d5 0f 2e 69 42 c2 a3 84 25 92 05 90 1b 1c e3 f9 ef fe db 07 3d d7 a4 c5 03 3f 54 20 db 7d d3 f4 4e 5e f4 3b 1f 2e 3c 3c dc a7 2c e1 48 14 5b 62 0f 7f 17 5f 68 8a b6 66 c4 20 ee 54 7a 44 3d a0 58 a2 55 de de 71 50 ea ef ea 96 88 c7 20 39 7b 40 21 dc 25 56 41 35 ea ff 39 9d 4d 4e 59 8e 8f af be 9c 50 16 2e 96 6b 49 12 17 b5 01 d2 c0 b6 50 d2 10 af 60 12 49 87 a0 4d 6d c0 94 01 89 5c cb ba ae c2 90 48 92 e8 a4 64 cb ae 8b 2a f9 b9 85 5d a6 cc 1d a9 c8 eb d9 f2 a5 98 28 e0 39 9a d7 c4 93 f4 3c 82 67 b8 d8 3d 09 97 e3 ea 4a 1d d5 2c 23 9b ae ab 7c c0 96 d4 62 25 Data Ascii: f-M@dcmlQWT>!F'eiJW2P]TKM.iB%=?T }N^;.<<,H[b_hf TzD=XUqP 9{@!%VA59MNYP.kIP`IMm\Hd](9<g=J,#\|b%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.6	50032	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1086	OUT	GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:50 GMT Server: fife Content-Length: 179240 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	731	IN	Data Raw: 52 49 46 46 20 bc 02 00 57 45 42 50 56 50 38 4c 14 bc 02 00 2f 0d c2 49 00 4d 40 90 80 36 6c 73 10 13 62 d8 ff 3f 6c 3b ed fa 82 88 fe 4f 80 24 25 5e 25 29 ca 59 89 7c 29 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 43 5e 39 d6 1a 9d e2 57 ab d6 44 4e 12 c9 d6 d6 9b 19 27 96 9c d5 33 d6 ba 24 da 66 dd 48 1b 25 52 94 4f 1d 27 89 16 3b 67 29 1b 27 89 95 dd ea bc 75 92 e7 51 b6 96 64 7d a0 78 91 b4 08 db e2 d8 16 18 91 1e 59 b2 ed 47 92 a2 85 49 6e 2d 92 ee 28 4b 77 e7 71 b5 04 63 29 33 91 a4 24 51 a2 44 ca 7a 92 22 49 05 df 01 63 00 84 29 69 a1 24 25 89 d6 38 ce de 56 92 48 1c 7d 37 4b b6 9c 06 ed f8 42 7d 4b 92 ed 47 15 ec ce 5d ac 28 11 38 ae 77 db d2 9e 71 68 66 76 14 04 8a a2 05 4b 1f e2 8d da 7e 01 8d 6c 07 21 5a 6e 5b 82 45 59 99 91 e4 24 b2 29 92 37 c9 31 Data Ascii: RIFF WEBPVP8L/IM@6lsb?l;O$%^%)Y\|)RC^9WDN'3$fH%RO';g)'uQd}xYGIn-(Kwqc)3$QDz"Ic)i$%8VH}7KB}KG](8wqhfvK~l!Zn[EY$)71
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 33 8a 99 21 f4 ff ef bf c2 b6 6d 1b 26 dd f3 0e 94 40 a5 34 d4 15 e6 74 da 90 38 cd 30 ac 94 ef 42 0a 4a 14 10 a0 40 90 28 a4 03 f5 42 27 43 8a 89 88 14 a9 06 f5 02 a1 84 e9 04 39 8c 81 61 38 4c a4 48 25 80 42 4c 20 48 81 88 14 11 c3 c4 70 88 18 e2 0e c0 80 01 0a 41 30 4a 1a 8a 49 d1 b3 e8 55 94 a2 2e 1d 82 00 40 09 74 14 1d 02 3a 0c 20 08 40 90 ba d4 4d 0c 29 82 88 60 10 0e 43 1a d6 30 24 52 a4 14 00 00 11 31 11 51 98 88 88 e6 20 9b b3 41 00 0a 01 0c a0 50 9a 60 98 26 1a 00 a2 8a 8e c2 21 ba 21 1d d2 21 7d ab 90 62 1d e6 30 1c 86 15 ab 17 00 b1 91 53 9c c6 00 87 94 01 d2 28 69 c0 d9 14 82 39 0c 29 52 50 ac 18 10 29 26 10 38 0c d1 45 23 00 40 01 52 50 08 2b 86 61 c0 44 dd ea 42 31 18 06 d8 51 ac ef ad 6e 1d 0a d1 05 11 11 29 86 d5 0d 20 a5 80 50 14 18 c6 Data Ascii: 3!m&@4t80BJ@(B'C9a8LH%BL HpA0JIU.@t: @M)`C0$R1Q AP`&!!!}b0S(i9)RP)&8E#@RP+aDB1Qn) P
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 12 10 01 58 4a 28 9b d5 0b dd 30 a7 74 5a bd a8 7b 5e ca 33 00 86 49 51 2f 30 a7 38 1d 03 c3 fc c4 8a d5 0d eb 69 6f c0 0c 31 ac a3 40 30 11 ac 5e d4 0b 0a c4 cb 0c eb 69 f6 02 33 8c 01 85 82 42 df 1a 86 21 48 29 8a c3 cf a8 a1 18 a8 17 75 20 75 85 20 0d 03 31 80 13 2b 82 20 82 62 f8 3b 81 7a d1 61 00 02 40 37 03 28 04 43 40 65 f5 12 30 c4 18 98 4e 9c e0 f8 19 21 17 87 75 38 48 13 29 50 48 dd c4 c4 04 00 bc 8b 52 08 a6 1b 4e 33 31 27 ec 84 d3 0a 29 4c d8 e0 24 0d 9e 4a 13 cd 69 22 ca 4e c6 ce 70 b2 d7 f1 eb 38 d3 4b e9 bb e9 bc 3a cf e8 de 67 1f 34 86 63 ee 0e 9b d7 71 70 64 5f af 83 bd f6 f7 da 3f b3 7f e5 78 18 18 0c 27 7b 9d ef b5 93 e7 8e 86 3f 47 d9 eb e0 a8 43 8f 7d fa c0 6b e8 db c5 70 df af f3 cf 81 fa de b0 7b cc f5 7b ec 6f eb 4c ff b7 ba 19 e5 Data Ascii: XJ(0tZ{^3IQ/08io1@0^i3B!H)u u 1+ b;za@7(C@e0N!u8H)PHRN31')L$Ji"Np8K:g4cqpd_?x'{?GC}kp{{oL
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: f3 e4 cb be 5e 29 69 d2 57 16 77 4b c6 ca b6 32 56 9e a9 e2 33 29 f9 3e be 3e ff 5f 92 f3 a7 3b d9 8a 77 be 59 a4 bc 58 52 b2 da 3a f9 f6 48 5f 39 2a 7d 3d fb e1 ab 92 55 9a ac d2 7c 5f f2 9e 0f 0a 4d 4a 94 38 f9 9c 6f 1c f3 93 5a 7f 33 1c 06 40 1a 36 04 74 ff df bc 28 da 6e 07 44 84 03 b7 6d 23 c9 1e 64 27 3d 9d 8c b1 8f 38 07 a7 12 7d 9d bf 80 67 22 ca 38 06 85 33 1f 09 02 ea be b5 3e e0 d1 56 78 25 05 2f 57 6c fa 4a d7 62 2c 6a 7b 58 0b a6 64 28 ca a8 20 0f 08 f3 cd 78 99 74 3a 31 5e 87 f6 29 1f d4 ac 90 22 72 dd 8e 9a 8c 7d 14 b4 e2 b6 9b e6 18 c0 87 b4 f8 84 e2 66 c7 f5 d6 fb 91 f7 87 e3 07 82 96 ec 95 f1 40 a4 44 52 bc 14 2b e0 a6 96 60 d7 55 e4 e2 dc ac b3 56 e5 76 1f 7d 56 74 a6 c1 97 fc c6 92 91 77 df b8 10 6b 3c 25 60 9d b9 1d 36 e6 e5 ca 8d 74 Data Ascii: ^)iWwK2V3)>>_;wYXR:H_9*}=U\|_MJ8oZ3@6t(nDm#d'=8}g"83>Vx%/WlJb,j{Xd( xt:1^)"r}f@DR+`UVv}Vtwk<%`6t
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: df ff 3f c6 98 73 f9 da ae d9 c4 85 24 84 10 dc 25 d0 a2 2d 3d 39 eb 7a da ed ee fa ce 5d 9e d3 ad 02 54 a8 1b 15 9c 12 20 41 12 20 46 b2 e3 db 5d 96 cd 39 c6 f8 ff 8f a3 72 3e ef ce d7 dc b0 6d 5b f6 b6 d1 75 9e d7 75 df f7 f3 bc af d8 b2 64 88 29 86 38 49 9d b4 93 32 a4 d3 59 cc cc cc cc 6b cd af c5 4c bf 98 99 66 3e 66 ea 7c 58 6e 93 4e 9b b8 71 e2 38 96 49 b2 64 99 84 ef fb 3e 37 5c 97 2f 49 92 55 db b6 6d cb cc a3 d4 d6 7a ef 63 cc b1 d6 5c 9b ce 65 66 86 14 dc cf 9b 00 4e e0 cd 0e 33 f3 dd 3c d7 a0 0e ad d6 e2 a1 86 6d 23 a5 cf 3f dd 3d 33 ac fe b0 6d 5b 9e c6 fa bf eb ba ef 27 46 42 08 12 dc ad 68 0b 15 a8 ae 4e 65 d5 3b 3e cb fd 75 77 77 97 e5 ee be d6 b8 cf b4 43 a7 d4 bd d4 70 d7 e0 90 04 48 42 e4 79 ee fb da 36 f2 84 5a a6 7f 47 84 2b 48 b2 e2 Data Ascii: ?s$%-=9z]T A F]9r>m[uud)8I2YkLf>f\|XnNq8Id>7\/IUmzc\efN3<m#?=3m['FBhNe;>uwwCpHBy6ZG+H
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 00 b3 fd 85 c2 64 cd d1 1e 81 37 0c 27 4a f7 7e df 3f d7 13 44 cc ab 7e 93 07 05 c5 e0 e9 5a 43 06 55 2e a2 b5 28 63 b4 89 52 3b 4b bb e2 42 20 50 96 87 13 cc e2 12 0b d6 37 71 75 a7 91 4d 0d ae 1a 2e b8 e4 c0 50 d0 02 8c 6f 0a 46 42 fb 99 da 8e 2a 88 f2 9c 5a 03 0e 54 ea c5 9f 31 75 b8 f9 04 b6 fd 5e 32 ec d2 c6 8e 0c 2a 01 c6 50 b9 fd d6 de ab de 3e 58 7a 0f 79 4b 61 14 b5 d2 68 40 ca 66 24 e2 ee 67 f5 2c a4 cd b9 7f a7 45 31 86 4b ae a5 47 e7 e9 7c df 53 b7 38 de 2d ee d1 a9 d9 8d 2d 50 4d c9 3c 34 3f d7 77 b9 22 2f 09 f1 74 e6 48 96 04 15 c4 6e 34 82 5a 11 84 bc ad 5f f0 62 aa d9 50 83 b2 38 88 7b 1f 5b 48 dc 42 35 ad 46 17 b1 15 7d 6a f5 1d e1 42 ae f3 00 18 a9 d2 2d 37 dd 46 6d 30 5b 35 28 7d fb f0 ee 49 12 2a fe 9e 12 4a 6c 73 49 b6 05 94 cc 00 da Data Ascii: d7'J~?D~ZCU.(cR;KB P7quM.PoFBZT1u^2P>XzyKah@f$g,E1KG\|S8--PM<4?w"/tHn4Z_bP8{[HB5F}jB-7Fm0[5(}I*JlsI
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 79 60 50 b3 71 9a 89 20 a7 7a 30 35 14 df 5e de ee d6 78 e3 f8 ca d7 de 63 5b 53 8b b0 19 8f a2 84 34 66 0b 6c 37 28 6e cf 9d a4 1d b5 66 54 10 39 5c cf 59 6d 77 a3 35 b9 06 14 b5 8d 1f 42 09 54 93 5a 6e 6f 5e e3 ed b9 26 59 78 fa 5f 9c bc 71 73 ef bb 40 41 be cb ab 72 82 38 98 72 09 5a f4 02 7c 7a 91 5a 14 b1 10 87 2d 60 ac 09 9b 6f 7d fb 8b bf ca 6f d3 6f 42 ef 0d a1 37 d1 d1 e9 46 6e a7 3f 88 71 24 cb 82 8b e5 e7 2e 12 e8 c5 1e 0a 38 3c 0b fc ac 7a a7 d4 d4 7a a4 6c 23 e3 14 93 2c f0 74 6e 97 5a fe f1 5f 25 ee 04 f7 03 0d 6e 80 20 d7 b9 b3 8a 78 19 cb de 7e 7a a0 e7 46 be ea 6c c2 2d 55 04 20 d0 90 b8 aa c0 68 17 f6 9b 4c 37 60 b3 00 d4 fe 15 96 a7 e7 f6 d7 87 c7 28 3f 4f d2 ae ac 05 15 c3 d1 87 4b e5 ab 8e 84 0f 9a 16 5f 90 60 37 c9 1b b5 c7 d6 2f 36 Data Ascii: y`Pq z05^xc[S4fl7(nfT9\Ymw5BTZno^&Yx_qs@Ar8rZ\|zZ-`o}ooB7Fn?q$.8<zzl#,tnZ_%n x~zFl-U hL7`(?OK_`7/6
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 5f 94 2e 00 7e 3c bf d1 97 0e 51 a4 86 9b 43 ee 57 9b 1b 5c 68 98 6d 3f 34 c6 ae 96 b7 7f b9 be 30 61 62 75 ab 9b 80 36 07 84 c1 60 f3 55 62 0a c2 38 f5 8c 93 66 78 fb bf d4 50 1e 35 8c d1 5b c0 4d 8d 13 46 2d 20 d6 b7 6e 13 39 95 68 70 d9 c8 11 d1 3a 0c 5c f6 2b 2d 69 bf db 01 36 8f 6d 7a a4 f6 9a d3 f9 f2 8f dd 04 4a eb 9f 28 58 56 ac 52 03 fa 2c 2f 81 dc f8 e1 1f 65 b7 99 6c bb 09 89 04 b9 ad 76 31 db 6f b7 c6 1f f2 4e b3 58 d5 2e 9f 65 4f 4f fc b8 c9 fc 3f da 8d 70 bf 54 10 6c 7e a4 6c f3 e1 90 3d d8 85 f1 9c f6 db 22 19 48 6c 46 4d 77 fd 44 74 a6 c6 ca 58 23 63 ce 58 7e 19 5f 65 f2 3e 7d 6f a0 93 b7 64 84 db b1 2b 53 dd 32 91 cb 1b 97 4f d3 78 8f ce 7c fb e4 52 a5 a1 db 89 68 1b 4b f8 bb 54 a3 32 67 37 4c ea 5b 4d 9d ba 25 ae 2e 33 ce 58 a7 f5 b2 09 Data Ascii: _.~<QCW\hm?40abu6`Ub8fxP5[MF- n9hp:\+-i6mzJ(XVR,/elv1oNX.eOO?pTl~l="HlFMwDtX#cX~_e>}od+S2Ox\|RhKT2g7L[M%.3X
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 82 41 5a 41 64 7a af d2 b6 54 bd 87 9b 6e ae e5 d6 61 9b 7b 7f 2f 6b 4d da c2 3d 50 8c b4 35 f4 14 2a db ef ea 8a 55 af d8 1b d6 9a 81 30 6f 5e 3f 49 df c0 81 61 51 be fa 2b 1f 1e c9 1b 53 eb d9 c2 09 3f 4e af df ff eb ef fa 6f 6f 69 6c ad 01 2b 73 96 92 6f 34 3e 50 52 36 91 95 55 7d 26 d0 20 6c 63 9e fa 4a b2 6d f4 9e b2 f6 f4 43 9b b5 86 d3 76 10 35 10 4c 09 ed 08 ce dd 42 28 61 a0 b0 cc 00 28 c7 79 78 bf d7 c4 cd 87 4e 87 06 74 6e 62 bb 9e 2d dc c4 54 eb 19 d5 b6 45 93 62 75 f0 c8 91 4d 03 3d 32 45 03 38 16 1a 9a b5 a2 22 a8 b7 8b e5 bc 1b ee c8 8b 1f 9a c7 eb 72 8b 86 61 0b 38 15 ba d1 b7 b6 0e 1e d3 4f 20 dc f3 33 d5 98 1b e7 ea bd 04 06 b2 ea 14 ac 59 38 f9 d7 ba b5 8a 6e c7 b4 fb dd fd 99 b6 29 2b a5 55 db 1a 3d 57 04 74 b2 05 4b e2 ad 98 0e 99 6c Data Ascii: AZAdzTna{/kM=P5*U0o^?IaQ+S?Nooil+so4>PR6U}& lcJmCv5LB(a(yxNtnb-TEbuM=2E8"ra8O 3Y8n)+U=WtKl
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: c0 36 8e c1 ea b9 1c bc b4 27 97 fc 5a ac d8 eb 6c bb 78 ca af 77 3b d1 38 84 bf 66 73 61 13 c0 f9 1b d3 34 2a 3c c1 bc a2 24 e3 43 0f b7 a9 c0 ba b2 0d b6 2a b6 c7 2d 6d 6c 58 08 06 f1 b9 fc 42 9a 20 db 92 06 4a 69 97 ba 00 9f d5 d0 1c 32 57 7b 23 f2 d4 9b 61 73 57 52 e8 57 5b 9e be 01 54 7f b6 7f bb ea 7e 6b fa fa cd f5 7a 5a 3d ee 04 8a 15 d1 31 b8 9a a8 d7 6a 5c 4d a1 b7 e1 2a fc 02 bf f0 eb 29 8e 20 c6 58 23 5a d6 54 8f da 50 6d 58 86 04 03 0b 7d 95 4b b2 52 af 6c 63 30 5b e3 e9 42 f3 0d 8f 46 e8 e3 b0 11 3d 0a 91 87 28 b0 85 e9 83 f6 6d fe aa 75 90 aa 17 a3 4c 46 9f 35 27 b0 e1 92 2a 34 fa 94 f7 60 70 8f dc 8b a6 c9 bd c6 2d 0b 92 62 b8 85 77 95 16 df b0 47 c6 0d c2 d5 b7 50 71 2b 47 9a 6c 74 e2 5b df 7a c2 b6 59 28 72 e8 26 d9 d6 df 86 d9 7b ae 9c Data Ascii: 6'Zlxw;8fsa4<$C-mlXB Ji2W{#asWRW[T~kzZ=1j\M) X#ZTPmX}KRlc0[BF=(muLF5'4`p-bwGPq+Glt[zY(r&{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.6	50034	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	505	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4722 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:57 GMT Expires: Sat, 20 Apr 2024 11:15:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 10253 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	721	IN	Data Raw: 52 49 46 46 6a 12 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 21 12 00 00 2f ff c0 3f 00 2a bc f2 ff 2d ba 2d e5 72 67 06 c6 fd 59 eb 1d d7 6d 47 b6 8d fb ec 7d dc dd dd dd dd dd dd 2d d8 fb 7d fb 79 9e 7e 9e 5e d1 d4 59 27 22 f5 4c 8f 44 93 22 d1 8b 2f 24 1a cb 4e 8d ac 2b 78 6b 73 01 16 b9 6b b4 6b 1a 97 d0 dd 89 74 57 e3 84 2e 8b ec 64 38 ec 0b c0 5f dc dd dd 75 47 5d bc b8 c3 8a 88 a6 26 c2 e5 4d b1 95 e2 d7 40 35 ce 1d 90 b9 bb fb 26 ea 93 4d 4e 4c 4d 48 dc 17 70 62 dc dd d9 d5 b8 73 e4 06 70 c2 a9 fa 4f 4a 4d 86 86 4e 3e a4 0e 1d af 3b 20 e2 02 88 1a 89 08 5d 62 aa f6 44 54 75 32 12 e2 ee 90 0d d6 35 11 16 75 46 fe 9e 89 b0 7d ea 5f 45 e6 8d 84 96 e9 aa c2 dd 9b 22 3b 17 80 13 d9 8e 1b a9 92 00 d9 b6 69 47 2b Data Ascii: RIFFjWEBPVP8XVP8L!/?*--rgYmG}-}y~^Y'"LD"/$N+xkskktW.d8_uG]&M@5&MNLMHpbspOJMN>; ]bDTu25uF}_E";iG+
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: a6 d6 63 c6 2c 1a 1b 8b 88 b8 41 47 c7 fa cd cd 82 d9 18 11 b1 71 ac 6f df 52 2d 94 8e ab a9 39 be 86 c6 81 d7 ac c9 40 5c b4 6d cf d8 37 1c 68 d5 aa 31 be 7e 7d b5 6b 58 ab aa 4a 65 4b 27 25 cd ee e3 73 fc 21 2f 5d 6a 2b c4 5e c0 2f 7a b6 ed b7 91 92 1a fa da b5 19 bd bc 5a 8d 1f 5f 2d 27 a7 81 20 4d 09 54 2b 2a 66 84 e8 b6 be 2f 81 b4 ec db cf 39 d4 95 2b 33 ba b9 bd b2 3a 5e 7d fe 90 90 09 74 74 3a 4c 9f 5e 30 75 d7 a8 82 fe 51 46 08 00 88 aa 24 24 0c f7 99 40 8b d7 1a 7a 1c 8e fc ea d5 bc 41 41 bc ad 98 9b 3b b5 ad 6d e7 05 0b 3c 3f 20 10 65 84 a8 29 f6 4f fd 42 d7 f3 e7 7f 80 9f 15 b2 b3 4f f6 db 5e 99 40 46 88 9a 66 64 24 e6 48 2f 5e 2c 12 1d cd c3 da b5 b5 d3 39 3a b6 56 54 f4 dc 26 a8 99 56 52 f3 84 53 59 5a be 02 a3 a7 1c f2 ca 15 bb 1c 42 4d b6 Data Ascii: c,AGqoR-9@\m7h1~}kXJeK'%s!/]j+^/zZ_-' MT+*f/9+3:^}tt:L^0uQF$$@zAA;m<? e)OBO^@Ffd$H/^,9:VT&VRSYZBM
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 53 ba 31 77 78 69 96 98 f4 19 dd dd f9 3b c4 b1 63 29 08 31 fd 25 fe fe 5f 17 93 b7 72 41 01 77 33 d8 d8 98 20 48 f3 36 b8 fb 76 4f 48 7d ef 12 79 5f a5 b8 d8 8e 44 11 d9 ab 94 94 f0 86 77 d9 57 44 e9 a8 ef de 71 b7 ff 5e bd 08 64 84 10 26 81 fb e4 6e d4 b7 6f 53 11 e9 b3 fb fa f2 36 c6 87 0f 65 10 68 f9 09 78 fb 69 5d 44 f1 4a b9 b9 9c f5 2a 82 50 8b bd 38 bb f3 58 40 a5 14 f9 de d8 ad e5 24 08 39 a9 75 37 e6 0b d3 92 78 ac 43 ee d9 c3 59 d7 2b 57 52 e0 b2 54 9c 48 47 a7 d5 d0 a1 01 1f 90 1a 9c 3d aa 25 1e 77 12 73 73 be e6 f6 f3 8b 81 4b 02 e6 22 b1 b1 d8 a3 cb a5 4b 26 1f 10 bf 18 5f bf e8 8a 27 d9 9c ab 3e 7e 89 0b b7 f5 b8 71 5b 23 22 4e 65 64 94 2f 71 51 f2 fb 70 b5 79 22 1e 73 3b ae 0e 7e e4 c8 9e 00 78 34 87 b8 7a 15 bb bf 58 42 82 49 80 07 30 8e Data Ascii: S1wxi;c)1%_rAw3 H6vOH}y_DwWDq^d&noS6ehxi]DJ*P8X@$9u7xCY+WRTHG=%wssK"K&_'>~q[#"Ned/qQpy"s;~x4zXBI0
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: a1 a0 a0 18 51 01 ff 01 29 75 39 75 ca 12 51 25 a1 d4 4a 46 26 a4 42 a0 d5 e8 d1 28 de 39 bd bd 6d 3a e1 f7 53 4a 2a 22 02 73 f1 b8 38 2a 8b c5 c5 15 80 e6 4b f8 5b 0b 08 c7 fc f8 31 a1 02 85 cb a1 f2 d8 26 08 d9 9d dc d2 92 ca e5 19 54 f2 4b 24 27 a3 90 1f 21 a5 62 5c 1e 95 c9 2d 2c 5c 31 85 6d bb 74 a1 f1 45 36 d0 2c 4c 63 6a 8a 62 fe ca c3 bf 03 0d b0 bf 88 46 db ae 5d 43 31 81 bd 5a 49 09 85 c9 4d 4d 5d 1a ee 30 b7 6f a3 a8 57 2a 2a b2 23 1a ee 40 0a 2f 69 83 a0 cb d3 3b 3b 53 78 ce be 14 08 ec 07 50 dc b3 b9 b9 c5 34 fa 3e 27 85 e3 94 45 45 a0 fd f4 e9 ca 7a 99 19 21 94 67 54 55 bd 55 4b 4b 05 86 97 e2 52 00 b3 97 b2 1f 20 20 2a b0 57 2d 2e 56 34 c2 b3 67 29 05 6f 0e 4f 4f 14 fa 7e 65 64 08 50 48 4f 4d d1 6b d9 20 6c 77 a0 22 a7 a2 2c 18 e6 ce 1d 14 Data Ascii: Q)u9uQ%JF&B(9m:SJ"s8K[1&TK$'!b\-,\1mtE6,LcjbF]C1ZIMM]0oW*#@/i;;SxP4>'EEz!gTUUKKR W-.V4g)oOO~edPHOMk lw",
2024-04-19 14:06:50 UTC	236	IN	Data Raw: 25 df 3e 9d 83 43 9b ae 5d 3d b7 5a 4e 0e 6a 80 95 d4 37 bb 9e 3b f7 a3 6b 94 97 f3 b6 58 6c ec c4 86 86 e7 eb 95 43 a8 31 46 86 6e 7f c2 98 3f 7e cc 13 18 f8 92 bc 2c 11 17 37 9d b3 f3 c1 76 ec 30 1d b7 09 6a 9a cd 69 e2 59 d7 34 b5 83 c3 8d 1c 9b c9 2b bc ff ef 8e f9 fd 7b 5b 35 35 cf 29 5b 11 d4 50 4b 56 39 29 78 e7 fb 13 a3 bd 7b 37 8d 93 d3 39 cd 17 1c fc 38 6f 74 3b 5b 7d 25 22 36 de 52 bf 6f 5f 2a 29 e9 0f ce 7e 26 4f cf 89 0c 0c 86 ba 7c b9 fd e4 c9 a9 e7 e8 69 08 35 df 66 2b 2d eb 89 63 c6 9e 67 17 6d db 8b 0b a6 9f e8 c1 9e 80 40 7d 46 88 0d fd bf a1 ff 0f 37 37 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: %>C]=ZNj7;kXlC1Fn?~,7v0jiY4+{[55)[PKV9)x{798ot;[}%"6Ro_)~&O\|i5f+-cgm@}F77EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.6	50036	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	504	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 15902 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:11:57 GMT Expires: Sat, 20 Apr 2024 10:11:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 14093 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	720	IN	Data Raw: 52 49 46 46 16 3e 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c ce 3d 00 00 2f ff c0 3f 00 4d c0 92 64 37 6e 53 ef e1 01 02 0c ea fe 07 06 b5 64 fd 8e e8 ff 04 e0 3f 7d a0 27 00 be 63 7d 90 cd ad 5e 30 63 92 f4 63 43 e9 89 19 d9 c3 87 7b 89 4f 48 1e 24 99 d8 b9 ee 59 44 77 03 f1 19 3e 93 77 da 0c 0d 00 11 4a 92 c3 f3 0e ad 37 11 11 2a fa fc 24 1f 20 24 01 50 d5 c6 ef ac 3a 5c d3 6c 2d b1 ea 0d 4d 5b 66 26 9e 55 83 77 a8 59 c6 ad 6f b2 5e a8 8d 79 b9 7b d6 17 54 91 3c cd 1e 91 a4 c8 33 d0 dd bd 6e 21 f3 82 92 62 6d 5f d0 a0 90 f3 00 79 eb 1c 39 48 00 dd dd eb 16 8e a1 dc 6c cd ec 1e 36 ca bc b0 67 50 48 52 64 0f 7b 03 11 81 eb f5 0a 10 6b 8d b5 d6 5b 7f f4 42 92 6b db ca 16 ad 26 ce 17 5a 84 f9 0f 84 30 02 29 f7 d3 22 Data Ascii: RIFF>WEBPVP8XVP8L=/?Md7nSd?}'c}^0ccC{OH$YDw>wJ7*$ $P:\l-M[f&UwYo^y{T<3n!bm_y9Hl6gPHRd{k[Bk&Z0)"
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: e1 8d 41 de e6 e8 17 8a 47 fa ef 14 87 db b6 8d 04 49 b2 fa af fa f6 f7 2e fa 38 22 26 80 7f da e7 54 3f 72 bf f3 db dd a4 bc 75 d7 55 be f0 c5 aa 7c b9 75 dc d8 3a ec de aa ad dc b6 47 5e 77 bd 75 e2 f2 c4 a6 da cf 9b ac 01 53 d0 76 d8 05 35 60 09 60 ed e1 d5 00 9a c7 b6 d5 ae 3c f5 c0 56 cd 3b 80 95 80 3b 2a 1f 0c 01 75 ca bd 3d 36 18 e3 53 1f 0d d0 93 f7 e8 e1 e9 9c be 11 81 1a 97 f2 56 a1 f6 53 f9 50 a8 03 ca a7 3e 53 e5 9f b6 1b db b6 6b db ca fd 68 ad b5 8b 09 29 60 91 08 98 04 41 91 00 41 50 b8 b8 10 c2 37 d1 1a 32 d0 5a 73 cf 31 f6 d9 ea d5 3a fb 59 d4 eb a8 93 00 b5 6b 63 1d 0b ad bc 8e 5c 11 20 ac 1f c3 b7 96 37 22 20 84 ed a3 95 45 04 04 40 00 2a 19 3c a7 d5 b6 2d cb 8d bb d3 dc 49 d0 d8 82 21 18 81 c6 21 d1 dc 17 a0 33 01 0b 7c 99 25 a0 bb db Data Ascii: AGI.8"&T?ruU\|u:G^wuSv5``<V;;u=6SVSP>Skh)`AAP72Zs1:Ykc\ 7" E@<-I!!3\|%
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: ca 5d 30 d9 fa fe ad 0d cb 59 60 7f f1 35 bf 73 9d 5f 39 e6 db ba 7c dc 65 ce 74 35 65 d9 a4 95 9b 7b 1b e2 e6 b9 b0 62 28 2f a9 33 0d 1c 87 0b 17 af 39 78 e7 17 7d fc f3 91 4f 3f 1e 7f 79 0c 6c 57 91 35 38 91 bf 73 c3 5f 37 ed db 26 3e ee 26 ab 2b 1a 31 94 95 22 8a 2c 4e 87 08 2f 22 7e c0 cd d9 6c 11 e1 4c b6 f7 3d f8 30 a3 db 39 65 81 6f b5 cc db 57 47 11 f5 1b 27 7f e4 fe b7 f4 b6 39 df ee c5 01 ab a1 a0 86 a2 9d 4e 54 44 08 04 e2 e4 c6 20 97 fc 80 97 fc 00 03 10 b6 62 64 1e 9c 83 90 06 67 1e be b8 cd ca f9 8e 35 2e 92 72 4e 9e be 9a 1d 2f 87 db 25 ee 53 9c 6e a1 cb c9 75 d1 28 11 a7 e3 c6 f5 c4 4b 1c 25 b5 55 59 92 51 1a 52 24 06 d7 ed ac 44 ea 9c 75 c2 f9 6d 56 9e 0d ee c8 22 48 9f b7 9d 4d 77 84 db 12 3c 28 f8 2a 59 b8 c2 e5 e5 44 13 6b b9 31 c4 e9 Data Ascii: ]0Y`5s_9\|et5e{b(/39x}O?ylW58s_7&>&+1",N/"~lL=09eoWG'9NTD bdg5.rN/%Snu(K%UYQR$DumV"HMw<(*YDk1
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 62 8b 88 71 14 cd 63 bd e2 a9 f7 ee 40 4e 67 c9 bd d9 9e 03 ab 74 2a ae 4c b4 f9 d9 65 86 26 02 c9 4c 66 a8 5a a6 5b ca 11 d8 9e 75 d3 8b f5 84 b3 54 18 39 23 95 58 a6 b2 49 08 51 77 a1 50 65 2b d4 63 d5 56 05 7d 69 84 88 9b 4b b6 78 4a e4 6c 61 9a 37 d8 63 c0 1a 86 d9 f9 86 60 cf 73 d7 4e 0c 8e 38 4b 41 67 14 95 a2 0e ea 08 cf 76 27 23 8b ba 2a b9 9c 9d ac 73 55 92 10 97 c0 1a 77 3a 50 58 0b 36 8d 10 00 48 93 a4 8d ab b8 38 d5 9b 62 5e a9 9c 26 2a f3 fb 35 1a 8d f9 2a 2f db 8d 8e ce 52 4f 93 e5 04 a8 d7 61 b8 b1 ba 16 39 8b e1 c6 c8 59 d5 63 62 55 ab 9c d5 22 9f c9 70 f2 08 6c 94 77 36 f5 4c 52 49 c9 4c 14 21 00 ea da 9b 42 c2 cc 80 46 c2 6c 3e f3 12 ce 1a fe 3a 6f f8 95 54 eb c3 33 8f df 5d 2f 45 00 a8 5f 51 aa 69 22 ac 34 7e 20 27 9d 4e 54 a5 a5 21 84 Data Ascii: bqc@NgtLe&LfZ[uT9#XIQwPe+cV}iKxJla7c`sN8KAgv'#sUw:PX6H8b^&5/ROa9YcbU"plw6LRIL!BFl>:oT3]/E_Qi"4~ 'NT!
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: a3 24 69 35 99 81 dc 30 ff 9b 9f 8f 5f 7e 0c 71 54 0d b9 fd 00 28 14 b1 7c f9 9f 9f d8 8f 69 3e f0 9f db 17 e8 6f 5c 1f df 7e 7c 53 cb f1 e4 c8 96 8b aa 73 88 84 da c7 d5 6c 18 40 41 17 f7 d9 e9 61 ca f1 cd e9 21 ae e1 60 fa 0a fb b1 f1 85 c7 2c 4e f6 49 39 d8 56 df d9 c9 b5 a4 b7 00 0e 46 29 48 1b 07 99 95 02 fe 87 8d 13 4e 8e 73 75 54 96 9c 3c c7 31 c8 47 85 59 fc d5 dd bb 4f e1 cb ce ef 41 5d 75 2c ca 11 f2 d7 5b fc 8b b7 e4 cf bb 7e 9d fc e5 29 1e c6 03 7c a7 66 7b 59 cb b6 29 28 17 6a 28 30 80 11 98 01 a4 01 02 bc f9 0a 18 0e 75 d1 1c 34 d7 9a eb f2 fd af 19 3e 26 d7 1f 31 fe 98 78 aa ef e6 05 8f 5c 8c 75 94 23 08 02 b3 30 62 af 61 50 aa 8e 89 fa 33 cd ea 7a da c3 fb 2e ed dc 3d ab e9 46 2d 37 05 84 58 b7 62 a6 f3 c9 e6 e5 df f8 7c 38 c2 97 1c 43 b9 Data Ascii: $i50_~qT(\|i>o\~\|Ssl@Aa!`,NI9VF)HNsuT<1GYOA]u,[~)\|f{Y)(j(0u4>&1x\u#0baP3z.=F-7Xb\|8C
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 66 db c4 b6 55 b6 25 40 93 59 50 24 68 31 60 7c c5 d0 ce 47 7c c9 26 5d ca b6 ae 63 23 26 fb 02 36 65 56 41 c5 21 a5 50 5d 74 29 aa 39 66 27 4a ed 86 2b 45 79 39 38 9d e4 72 3d 92 73 5e 5f 93 77 47 80 67 69 ca dd 02 74 28 bd 6a 17 69 ef aa c4 0a 98 f6 3e 91 cd 80 9f e1 46 e1 0e 6b 95 66 b5 7b e6 be 55 2e 9d a6 92 ad 3b bb 5c 3a ee 7c 0b be f2 2f f0 d4 09 0b 97 83 68 33 a5 a6 98 6e d1 22 99 5d d4 91 9b a2 8d 51 4b e3 ac 48 e6 06 68 b1 c9 ac b3 80 75 31 5b 90 72 bb 68 0b ad da 92 8a 82 b2 33 c0 a5 74 94 71 bc b9 3d ec 3c bd bc cb 79 cb ad b0 a9 5a 0f 16 ab 72 20 af ad 8e 94 13 0d d0 21 4d 6b 6e b8 ce 4b 3a 00 12 04 6a 06 74 48 9e 60 1e dd 73 02 24 ca 81 bd 51 1d 9d 66 91 ac a4 76 fe d7 cb 4e 3b b8 e5 4b d7 cb 41 97 45 39 a9 16 75 eb 5b 4b eb af d9 ee 53 34 Data Ascii: fU%@YP$h1`\|G\|&]c#&6eVA!P]t)9f'J+Ey98r=s^_wGgit(ji>Fkf{U.;\:\|/h3n"]QKHhu1[rh3tq=<yZr !MknK:jtH`s$QfvN;KAE9u[KS4
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: d4 f5 76 ae 16 d5 82 98 29 6a 9c 36 9b 04 35 f8 75 2c 35 d5 70 f9 7f 54 97 74 55 2f 02 4a 59 a6 bd b4 24 05 fa c1 a8 ec 6f b1 30 d2 62 7f 6d 11 8b 39 4a 49 1a 25 1f 21 9a b9 00 2a 78 4b 14 cf 0a 64 9b 73 b9 eb 83 c3 81 08 32 43 78 0a 07 5f 9c 9d 1e d5 41 cd 5a 58 b2 72 06 13 e8 24 06 73 61 73 b9 b5 14 c5 81 42 0e c4 97 44 e3 04 0e da 1b 0d f4 bd 50 b3 f3 a2 59 48 7d d3 0b ae 4d 41 9b b0 94 fc c2 dc 0c 29 88 09 52 81 21 b9 c2 74 65 6c 95 42 d1 52 5c c5 52 83 49 7b 69 14 d5 74 e5 b4 eb 8a d3 ce da 53 d7 73 92 f2 cf cb 5a ba 35 57 1c 67 e5 d2 60 62 65 e0 b5 f1 90 6f 95 a3 67 52 8b 40 28 10 12 da 48 ba c6 06 39 8b 23 f4 32 20 0b 7a 4c ce 01 18 4e 0b 18 33 84 64 5e ae 8c d8 b8 94 73 d7 2e 7c 8f 91 0e 57 ef d5 1d be 4f 88 2a 61 b8 9f 49 58 07 07 a4 38 41 ff 4f Data Ascii: v)j65u,5pTtU/JY$o0bm9JI%!xKds2Cx_AZXr$sasBDPYH}MA)R!telBR\RI{itSsZ5Wg`beogR@(H9#2 zLN3d^s.\|WOaIX8AO
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: eb 7a 37 79 74 46 f8 01 4e ad 75 30 81 00 08 02 9f d7 69 ee d5 39 67 2f 2c 34 68 72 b8 ec 42 41 c7 b5 ac 14 2a 2e 80 27 a2 00 ea 3a 59 eb 7a 0c be 25 29 cb d0 73 da fb 0e 2b 79 ab 5e 04 c5 5f d7 ee 41 a5 11 53 db 6f 4b f5 b5 15 75 1d 6b 7d 70 19 b7 99 fe 0b 7e 6a 33 0f bd c6 f0 0e 3b 6e 1a 4c 63 89 a2 46 fe 01 35 9c 36 62 6b e4 47 86 32 28 37 39 65 2d e5 72 7c ed 93 e5 24 39 18 20 39 b4 c2 2b e9 b5 77 fa 0c a5 28 80 2c 42 b1 6c 59 0a 25 0c cc 14 07 e0 42 a3 ba 12 ad e7 9c 39 fc bf d5 50 d4 b1 c3 aa 23 f7 0e 19 b5 62 53 b3 ee 73 76 d5 fd a5 9a d7 a3 ea 9a 72 75 55 c6 28 eb 6c 9f 3e 0a 6f 07 69 ad 4b 63 76 56 af 34 28 8a a2 46 c3 10 a1 5f 44 32 51 14 19 c2 6c 8f 57 37 b9 ec ae f1 4a 6c f7 df fa 7e ad f8 2a 73 25 7b 97 5d ad 9d fe 1e 09 53 35 66 21 86 0c 50 Data Ascii: z7ytFNu0i9g/,4hrBA.':Yz%)s+y^_ASoKuk}p~j3;nLcF56bkG2(79e-r\|$9 9+w(,BlY%B9P#bSsvruU(l>oiKcvV4(F_D2QlW7Jl~s%{]S5f!P
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 0e 82 11 2c 70 68 45 18 e2 ae 77 55 0e 6a 81 3f e4 a1 90 92 1e c1 43 ad 5e db c3 7e 65 66 1c 2a 4c b4 40 8b 31 f2 19 4e ee c0 3a e4 2d f5 ee 79 13 c3 d7 dd 81 ae 2a 8b 8d da e7 c0 4e 01 90 89 7e bc dd 8f a2 6c 05 bd 62 01 c2 90 b8 e2 30 72 84 f7 e9 87 6c 0d 30 1b 92 6f e8 02 e3 40 f8 8a bd 47 2d bd 2a 50 35 c2 4a 85 17 23 17 1b 1c 92 5a 12 f6 c7 78 bf 6d b3 b5 09 58 ea 18 17 a5 0a 94 de 7d 50 7f 60 57 fa de 77 3a fd 4d 72 74 b6 2d 9e 22 58 1c 21 28 1c 48 90 b0 32 15 40 26 fa 71 86 e1 5e 57 a0 5d 05 25 25 e9 23 ec 9b 7d c6 7c 7c af 33 d9 77 46 1a b8 09 c3 40 00 0e 4f cf a0 c2 0a ee aa 3c c1 fa 5b f6 0e 05 52 d8 a3 98 2a 76 6a 9b 21 e5 32 a0 cc ec 3b f4 7c c8 7c da ba 3d 3f 67 38 50 1b a3 c2 11 2e 49 50 ac ec c7 54 24 22 f3 9d ba 75 15 ec 7d 36 2a 57 92 7d Data Ascii: ,phEwUj?C^~efL@1N:-yN~lb0rl0o@G-P5J#ZxmX}P`Ww:Mrt-"X!(H2@&q^W]%%#}\|\|3wF@O<[Rvj!2;\|\|=?g8P.IPT$"u}6*W}
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 26 4d e0 19 b9 21 40 32 9d 7e a0 10 02 f8 23 e6 51 ee 45 5c 05 11 11 a6 5d 0d 47 ac 05 a1 0f 05 30 85 df a9 7e 31 cd 55 77 06 d8 6c ee 0e bf d6 89 78 a5 df 5d b3 8c 29 b8 ba 6b c5 4b a0 f3 cb 08 90 1c 01 4a 36 bc 2b 92 9d 64 a1 81 46 4f ea a6 04 bc f7 7d 0f 09 fd b0 02 56 d6 f0 3b a4 5c 0c 19 22 a2 e9 06 74 b4 7a c8 85 96 04 00 3b 35 56 c0 77 c9 67 72 6e 18 35 aa ab 7b 31 d0 07 dc 80 6f 1a af 67 ef 77 3c 79 ef 36 64 3a 2a 95 8a d6 5a 53 c0 6c e0 a4 67 82 95 68 52 58 48 23 4d bc c0 cd 15 9b 38 ed 6b 2c b0 1c 63 9f f2 81 0e 30 86 0c 61 da 15 2e 3a f4 e8 ff 79 28 00 f0 fd 7f 9f ea ef 83 96 ff e2 f1 da 45 46 54 1a 4a 29 70 2b 3e 47 f8 e8 83 de f4 b3 69 6d d2 06 a6 7c da 4d ab 92 23 6c c9 39 89 3d 11 49 7d a8 92 e4 41 36 d9 92 2d d9 92 ef 59 b3 7d 4f 15 a8 12 Data Ascii: &M!@2~#QE\]G0~1Uwlx])kKJ6+dFO}V;\"tz;5Vwgrn5{1ogw<y6d:*ZSlghRXH#M8k,c0a.:y(EFTJ)p+>Gim\|M#l9=I}A6-Y}O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.6	50035	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	505	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13280 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:05 GMT Expires: Sat, 20 Apr 2024 10:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 14085 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	720	IN	Data Raw: 52 49 46 46 d8 33 00 00 57 45 42 50 56 50 38 4c cc 33 00 00 2f ff c0 3f 00 09 48 92 24 c7 6d a2 30 0b d0 43 e8 ff 0f 06 24 c0 eb 39 a2 ff 13 c0 7f d4 af 99 ed f0 4b b6 6b e0 7e cd e6 04 77 77 dd 78 16 b3 5d bb d1 5a 9b 73 ce c5 ec ca c3 e7 7e 64 c6 5b 6d f0 83 16 80 64 00 de 53 40 fb ec 61 bb 13 eb 41 cb 54 8f 57 2d b4 84 cc 13 d6 87 ed c3 fa 1c 0c c8 de 23 17 09 06 ed 42 76 5f ec 8e 24 65 67 9b 43 d2 98 9f d1 24 69 97 49 97 9a 9d 00 d8 e2 e4 00 e6 89 1b 65 aa ec 5d bd bb e2 65 27 38 d1 15 99 11 55 78 d8 05 57 65 64 45 64 65 da 05 dc ab 36 11 61 57 70 af aa b1 d8 25 f0 a8 aa 08 bb b7 9f 5f f6 d7 2e 24 b9 b6 d5 48 d2 29 87 10 42 e8 2b 55 be dd 6f df fb 5f 59 ef 01 94 30 aa b1 db 48 92 14 29 8f 47 1c f1 9e df 7f ab 5e 64 66 0c 37 8a 24 39 52 1c ac 96 b5 d2 Data Ascii: RIFF3WEBPVP8L3/?H$m0C$9Kk~wwx]Zs~d[mdS@aATW-#Bv_$egC$iIe]e'8UxWedEde6aWp%_.$H)B+Uo_Y0H)G^df7$9R
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 2c a7 46 a2 80 6d db f1 36 bb ee 37 5f ea f6 b0 91 ee b7 6d 7b e6 6f db b6 6d db b6 6d 5b b3 bd d5 6e b7 22 69 d3 e4 fb be c7 8f 6d db ae 5d 49 b6 d5 da 98 6b 6d 60 03 67 03 c6 39 e7 39 e0 a6 7a f1 8c b8 e6 2e bb 44 93 60 ee b9 f1 54 b8 e8 e6 b2 8b c6 c1 d7 9a 73 f6 98 00 3d ae b6 bd b6 6d 2b 6b ee 7d bd f7 3e c3 7b 13 11 79 93 13 52 13 ca 40 4a 19 48 49 09 6d 4e 08 d9 f5 de 7b b3 cd 9a c1 18 73 ae 73 70 f1 83 ad c0 d5 a7 57 3d f9 4a d0 31 53 43 9f 34 83 53 82 29 0d dc 5f 03 bc 37 5f 1d 50 d7 8f ed 25 18 d8 a5 af 0c 44 1d d7 33 6c 8a f4 e3 a1 04 9e 9e c0 8e 64 5b b5 32 6b df f3 70 77 f7 3c 48 81 18 88 80 64 f8 25 8f 17 0a ee ee 0e a7 de 39 0b 5a 6d db aa 96 b5 ee 7b b8 3b 3f e9 42 36 08 a5 09 18 84 a0 80 c3 d3 7b 77 4c 80 05 38 dd ff a7 fb df d6 53 09 7b Data Ascii: ,Fm67_m{omm[n"im]Ikm`g99z.D`Ts=m+k}>{yR@JHImN{sspW=J1SC4S)_7_P%D3ld[2kpw<Hd%9Zm{;?B6{wL8S{
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 66 80 61 dd 52 7c 01 95 ab 3b be f8 99 5a 41 39 9b eb fe f6 c3 0c 06 72 1c 92 69 c8 a4 c0 30 ef da 70 1f 63 e6 0a 71 fa 75 7e 1d ce e6 45 27 fd dc 52 4b 8e 94 4e be 10 c3 7e 7d 4b 6f 61 e6 6a 52 55 7f 99 c3 bb a3 59 b6 f8 6e 0b fd 0e 39 9a 0e 0b e7 dc 61 04 2e 99 ff 70 eb 1c 85 b3 58 ce b2 6a 35 4e e6 3a 3f fd 34 09 90 db 16 ea f8 d9 b7 18 89 ec 6a 4f cf b7 cf 0d 26 d3 af f1 dd 74 32 af 72 e5 fd f4 58 cf 4d bc 61 be e6 73 24 e3 19 11 58 d3 b4 ad a4 ee 90 9b fa d8 78 f9 4b 9b 83 e9 58 72 a7 31 ce cb 89 9a c9 3c 71 ce 2d 46 e8 15 3e fc 65 3e 7b 6e ce 0b d3 97 2c d0 b9 5c ff cf 5f 9a 01 39 9d 52 ca ab 5e f1 1f 8c 54 2d e4 e5 af ed 0d 31 72 82 46 e6 a2 f9 dd b9 bc d9 85 77 75 b5 e4 a6 a3 cf d7 fe f3 cf 23 06 d7 fe a9 37 b0 9d 97 93 fa 1a de f0 ac cd b1 6c e9 Data Ascii: faR\|;ZA9ri0pcqu~E'RKN~}KoajRUYn9a.pXj5N:?4jO&t2rXMas$XxKXr1<q-F>e>{n,\_9R^T-1rFwu#7l
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 9b f0 57 ed 0e fa 44 20 95 e4 95 6c 3d 7c b9 53 9c 4e eb b4 de 7a ac 44 6f a9 58 f6 90 d3 23 6d 0f 94 b4 1e 6b 63 bd be 1d 6b 4b ab 58 9b 48 cb 4c 79 a7 f5 58 a3 db 91 6a bd 75 5a 5e 97 43 d9 7a 4b d1 c8 e8 e1 bd ad d7 b7 e3 ed f7 9b 4f a1 fb 25 e7 d7 76 b7 a1 99 13 bf 58 3f 05 fe 50 c6 8a c4 e3 23 79 53 2b ce ca 39 8d e4 91 b1 72 ba 52 05 90 7c 44 23 01 ae 2b 6f 1c 1f 56 be 03 96 cf 79 b2 b7 95 f3 c8 42 98 f0 8a 24 4a 21 5c 8e 1c e1 20 70 b1 cf 0f 01 2e 97 53 f3 09 2e 97 0b 5c 80 0b 5c 48 20 74 e2 e8 81 0c 70 b9 c0 e5 c8 95 01 8e 1c e1 72 99 bf 66 cd 93 9d 75 f7 aa 93 cf 24 d0 0a 02 32 c8 80 0c 32 20 23 83 0c c8 20 23 83 47 97 91 41 36 ca 80 b2 95 f1 96 35 11 67 93 20 c7 42 9c 2b cb c8 80 de 48 22 19 46 12 6b b0 22 0f f5 f1 eb 57 ec f6 65 fa e8 48 65 95 Data Ascii: WD l=\|SNzDoX#mkckKXHLyXjuZ^CzKO%vX?P#yS+9rR\|D#+oVyB$J!\ p.S.\\H tprfu$22 # #GA65g B+H"Fk"WeHe
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 82 38 c9 e0 34 e3 cc 9b fa 30 45 4a 4e 94 d5 b6 55 49 da f0 99 5d b8 70 e1 c2 ca d8 99 29 db 05 b8 00 db e7 2a eb d1 6c 25 a7 cc 19 b6 b1 78 ee 1e 25 4a 14 40 4e 6f 72 ce cb 01 6e 07 e7 7b 03 e4 3c 3a 82 9b c2 0a 03 7c 3c 36 e3 5c 06 24 91 81 0b 10 a0 96 15 9b 12 e8 2e 0c d8 aa 36 ce ca e5 00 bd 65 70 da 1b c8 e9 4d ce 79 42 1d 1c ff db 66 1b d7 79 69 8f 13 e1 8b c8 70 65 53 b6 1e 19 19 24 41 46 12 19 09 0d 65 a3 13 19 90 01 14 16 eb 46 97 dd 18 9c e1 82 0c 1e 9b 01 19 19 9c f5 e1 f7 69 26 a3 86 9c 7a 62 12 28 03 32 c8 c8 a6 8c 0c 9c 1e 19 19 19 ae 6c ca d6 23 23 03 22 26 2e 77 0d b6 71 dd 37 68 8a 04 12 0f 8e 85 eb 0a f0 8a 38 94 45 02 72 e4 40 cd 2e e7 74 dc f6 5b f6 45 dd a6 59 0b 06 91 c1 d9 8c 33 19 3c 36 03 01 02 e8 78 0a 7b 3c 14 c4 34 4d 80 1c c6 Data Ascii: 840EJNUI]p)*l%x%J@Norn{<:\|<6\$.6epMyBfyipeS$AFeFi&zb(2l##"&.wq7h8Er@.t[EY3<6x{<4M
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 8f 04 5c c5 f1 26 61 02 a8 e2 b6 82 da 4e 0a 2b 43 0e 9b 5b 69 87 2a 28 ed 94 76 29 45 f2 a3 e2 d9 da c3 24 62 f9 c2 2b 43 19 60 05 2e 00 2b 96 61 bb 96 43 cb b0 c2 95 01 60 15 fa 07 e2 1f f6 ef a6 d9 5d cf b1 67 ab 79 37 a8 48 66 2f ab db 3b 72 61 bb 00 c5 ec 6c 17 b6 4b 45 42 41 d6 2c 57 de 3f 50 15 ab 85 01 b0 5e 01 2b 96 81 95 2b 03 ac c0 05 60 04 59 a6 ef b5 87 06 28 7a 01 69 cc 75 3e 32 32 a0 3b 41 46 ce d5 72 de d5 12 22 e1 ea bd 75 8f 04 5c 42 f0 51 3f fb 2c 7b 1e 58 39 7a 3b 90 0b 9f 0b ac 5c cb 21 9f 77 b9 d6 ab 73 af d8 21 57 0e fc f2 af 53 e5 c3 38 e4 a0 c6 ed e0 b6 13 19 dd 23 ff d8 f3 95 75 3e 32 32 a0 3b 41 86 f4 14 0c 2a 9e a3 3d c4 aa 23 02 92 92 8f b4 8b 37 74 62 15 e0 8e bc 38 3d 53 58 3c 47 12 19 09 44 32 96 61 39 0c 26 ec a5 92 30 aa Data Ascii: \&aN+C[i(v)E$b+C`.+aC`]gy7Hf/;ralKEBA,W?P^++`Y(ziu>22;AFr"u\BQ?,{X9z;\!ws!WS8#u>22;A=#7tb8=SX<GD2a9&0
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 3d c6 f0 ad f3 73 f7 7e 99 33 5c 0e a9 63 de 8d 1e ec dd e3 a9 41 6f ca c6 3d ed 57 be bf 7c 5a 00 a2 4a 85 48 01 88 b3 eb 35 83 87 95 74 f1 a0 80 e5 db 0a d1 5c ec a2 bd a6 fd 89 00 7a 76 22 42 d0 7a a3 d3 fa b1 44 6f 29 f0 ab f7 70 52 ae d6 5b 46 6f f4 a6 d1 56 6a cd 68 c4 d1 1d 2b 22 5f e1 2d 6c 82 6c 4a 5a 8f a4 89 65 b8 c0 9f 82 3c 7a 90 1f 47 ff eb ff de be 35 ff 68 aa 3c c8 0d c8 0d 25 bd ab 07 19 64 24 ae d6 69 f4 ec 44 84 a0 f5 46 c7 17 66 8a b9 75 81 5d b6 15 ae ff 0d 21 a0 a2 3f 75 ce 96 c1 58 20 9e 2e 50 50 40 0d a0 a0 60 64 51 36 5d 2c 37 5a 29 c3 ca c2 bd e2 82 4d e4 4b f7 7a 99 46 06 45 c6 12 09 57 28 5b af 25 69 5a 95 6e 31 0b 92 0a e9 29 81 a2 10 54 41 19 94 51 56 56 06 50 d1 9f 3a 67 cb 10 21 99 86 c3 ce 8b 6d 4c 8b ad 29 54 50 a5 d2 a6 Data Ascii: =s~3\cAo=W\|ZJH5t\zv"BzDo)pR[FoVjh+"_-llJZe<zG5h<%d$iDFfu]!?uX .PP@`dQ6],7Z)MKzFEW([%iZn1)TAQVVP:g!mL)TP
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 56 db 56 64 a8 23 76 c3 56 70 7f 67 f2 9e a5 2a 6c e1 ac 15 d4 46 9d a5 aa 36 8a aa 2a a8 85 41 95 15 56 56 86 fa 9d bc 02 83 82 28 7f b5 49 7e d0 04 e1 69 aa ef df a3 ab 74 f0 35 ca 07 53 38 4d 83 02 a8 a2 aa 0a 19 55 90 55 b5 15 55 05 55 aa c2 16 28 c0 a0 87 76 ec 36 da cb 85 8e 59 fe 82 0e 35 54 4f f4 dc ea 69 da a8 52 d2 c9 95 5c 6b 3a a0 df 61 5e 77 c6 d6 9e 68 95 6a dd 83 ee cb 3c f6 f9 d2 17 77 e3 04 79 37 94 c7 2a c4 2a 1e f6 f1 bc 84 2f fd db 41 06 bd d1 63 dd c2 e9 90 9a aa d3 c7 e8 64 af 49 4c 55 9d 0e 35 54 4f d5 53 f5 f4 e1 57 0e a6 6b c5 d8 cb 21 3b 9e 7a e8 d0 7b 1f 05 04 09 64 ef 20 80 2b 88 b3 91 60 05 cc 05 91 9c cf ef c3 e0 bb 49 00 77 93 00 90 97 d8 d1 79 87 20 05 14 a7 5d a0 12 1d 04 02 a9 03 f4 de 47 01 01 c9 f7 e7 fa a8 ef 3c c1 5e Data Ascii: VVd#vVpglF6AVV(I~it5S8MUUUU(v6Y5TOiR\k:a^whj<wy7**/AcdILU5TOSWk!;z{d +`Iwy ]G<^
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 47 ef bb ee b3 02 a1 ca 60 65 14 06 05 60 65 50 60 85 41 41 4a 51 56 18 aa fb 31 0f f0 0f ff f2 63 3c 36 83 37 cc 78 e8 f4 5e 04 10 96 6d a6 ee f5 0e 3b c4 1d e7 11 60 87 02 0a 2b ce da 09 65 65 14 1c de d9 8f fb f0 2b 36 15 f2 78 ec 47 b7 64 1c 17 c5 01 ac 57 1c d9 b3 c2 a6 00 ac 1c 04 53 b8 c8 b3 5c fa 8d 63 34 f7 f7 d7 7f f8 07 ce 4f 71 42 62 03 32 1e 78 38 cf 30 05 80 45 65 0b ac f3 d2 ab 8a 28 15 aa aa fe e3 5e d9 84 8b 0c d6 ab 0b fc 36 20 db ad 8a d2 36 ea 21 0f 7f d1 a6 f0 90 27 9f af 67 f5 a9 7c 29 82 24 32 92 07 6d 64 64 30 11 13 a8 ff 6e 70 1c e2 af 31 bc 0d c0 14 27 1f d5 84 35 4e a6 e0 ac 9b 30 b3 11 4e b6 35 ea b2 df 47 01 8c 67 ce 5b 05 19 49 64 64 64 d0 ad b0 54 ff 50 9e f7 c5 57 60 d7 8d 25 3c f8 51 5b 6a 40 81 37 f4 57 c4 85 0b 97 23 ce Data Ascii: G`e`eP`AAJQV1c<67x^m;`+ee+6xGdWS\c4OqBb2x80Ee(^6 6!'g\|)$2mdd0np1'5N0N5Gg[IdddTPW`%<Q[j@7W#
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 1e d0 51 63 d9 7a ee 4e 5a 32 59 5e f2 8f 4d e1 fe c4 31 af 2d 83 b5 a5 0f f3 0c 47 be 8e 3d 69 d9 f0 bc ae f2 ee b8 e7 de f0 35 12 4f b6 cb 35 9b 90 13 a7 42 cc 51 71 5d 9a d6 c8 6b 92 08 e5 b0 89 fd a4 bf 1f 9c c2 a9 ab f6 0e d0 0b 14 12 5a e7 7c 56 39 22 b2 4f a6 2c ac 59 19 c6 3e 9b 99 d1 54 1c 59 60 97 58 c0 01 ca e7 3d 0c 8e d9 1c b8 b0 1b 87 95 95 63 ec 46 5b 0a 6f 56 56 b4 1b 25 38 0f 5b 16 19 31 22 f0 48 6a a7 ae f6 f1 af 70 8c 57 7a ef 6e 1a 43 95 dd 9c ba 94 55 a8 66 3a 8e d4 62 52 d8 57 2f 39 dc 96 22 c9 8b a5 a5 a7 05 66 90 b4 99 b2 32 8c 35 f6 25 7c 79 21 83 65 2c 4b 18 80 e5 b1 44 71 76 19 0b 31 d1 18 8a 5f d2 89 1d ac 61 20 2f 10 e5 48 14 e5 d5 1f 7d 4a 0e e3 1c b4 90 4b de 36 eb b3 a7 97 8c 0c de 86 da b5 4d ed be 44 04 25 de 8a 69 bc f1 Data Ascii: QczNZ2Y^M1-G=i5O5BQq]kZ\|V9"O,Y>TY`X=cF[oVV%8[1"HjpWznCUf:bRW/9"f25%\|y!e,KDqv1_a /H}JK6MD%i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.6	50033	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	512	OUT	GET /1QKAMf_OwuL8ftJBmPAScxrpYvpjLllyPF22Xu6pJ84z465MUF0YvS4p0f4rLTlRyDc=w3840-h2160-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 503752 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	720	IN	Data Raw: 52 49 46 46 c0 af 07 00 57 45 42 50 56 50 38 58 0a 00 00 00 0c 00 00 00 ff 0e 00 6f 08 00 56 50 38 20 cc ad 07 00 b0 92 22 9d 01 2a 00 0f 70 08 3e 3d 1e 8d 44 a2 21 a3 26 22 b3 69 30 c0 07 89 67 6e d4 b0 5f 9b eb 8b f8 82 5f d4 73 0f 91 46 8a b0 e3 ce cb b2 97 0d 1b 66 ff fd ff e7 d0 d1 37 fb bf fc ff f1 f3 67 c4 ea d9 fd df 97 1e ef ff 49 a3 fb 1f d9 3b f2 b2 6e 5f b0 4f f5 6f f2 7e 9e 3f dd f1 c1 ea 3f ff b7 cd 57 fe df 53 5f fb fd 13 7d bd 8e 67 b1 ff ce e6 79 8f 9e 9f ce 5f 73 0e 69 f4 83 ec 7e 5f ff 39 f3 77 ff 1f 1e be 07 ff 37 99 5f aa 7f 57 ff af fd 6f e5 d7 cc 9f fd 1f fd 7f e3 7c 03 fe a9 ff 03 ff 87 fb 2f df 4f a2 5f e8 df e2 ff ea 7f 9b ff 43 fb 77 f4 c7 ff b7 ee 37 c3 3f f1 df fb fd 60 7f 63 ff 9d fb 8f ff 3f e1 23 ff 7f ee 8f fd af 94 9f d5 Data Ascii: RIFFWEBPVP8XoVP8 "*p>=D!&"i0gn__sFf7gI;n_Oo~??WS_}gy_si~_9w7_Wo\|/O_Cw7?`c?#
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 60 21 87 e6 38 f2 f6 f9 af 98 4c 0b 93 fa f6 10 05 2d 0c 31 69 93 31 3b 59 a1 7c 97 50 90 54 cf 56 23 01 da b2 36 e1 6f 43 18 54 ae b5 9a cb cf 92 e1 75 d6 2d b3 f7 a8 b7 fc 9b c7 d1 f6 48 12 95 ec 16 78 5f 36 01 a9 c3 32 07 de 17 23 df 84 49 6b 4d 49 25 6e 91 19 38 1a 5f ac c1 fb 26 de b5 10 15 96 7c 86 5e 7d c9 6f 71 35 e7 de 15 0b d7 70 5a b7 e5 6f 43 20 6a a2 21 bf 62 4b 25 4c b4 33 bd 57 9f 25 75 cc c7 f7 0c c8 1a b8 bc da cb a8 24 74 d1 0a e4 64 5c 85 41 81 a7 66 42 fb 87 86 9a 50 91 ab 09 a4 d7 0b a3 8a 09 9f 49 5c 7e c2 d5 75 c2 7a 11 02 56 b7 84 cb 70 dc f9 0c bc fb 92 d9 76 74 8e 5a de cb c2 1d fa a2 0a 7c 37 1b 72 1b 40 ca 60 0b 91 ff de 17 26 b1 4c f7 45 ed b4 03 74 42 0f d0 0f 6b c8 80 15 e3 b6 8b fc ed 97 9f 77 ec 83 9a eb e1 5d 08 1a be 5c Data Ascii: `!8L-1i1;Y\|PTV#6oCTu-Hx_62#IkMI%n8_&\|^}oq5pZoC j!bK%L3W%u$td\AfBPI\~uzVpvtZ\|7r@`&LEtBkw]\
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: e4 b6 5d 86 a9 62 20 79 6d ff dc 7e f3 98 b2 0d 1a dc d3 7a 7f ff ea 57 2f 1f c7 66 e3 70 37 f6 eb 18 50 49 78 ed a0 15 9f 3b 1e 5e be 1a 85 9d 32 93 31 9f 69 fa b5 85 e2 ad d4 81 4c e5 8f 38 c0 44 3b ae 49 ec 78 9a ed 54 42 d5 5d ea 06 9d 07 60 ce 79 3c 0b 9d 76 5e 01 c8 f4 e5 3a 3c 4a d7 3a 20 42 b8 54 63 c9 6f 11 75 74 00 a3 29 54 94 75 51 45 57 30 c5 40 56 bd e4 c3 74 02 ee 96 31 7e 3b 06 19 a9 7f 95 fe a9 da 16 5d 3a 57 71 3c 10 69 83 14 ad 07 83 6a 67 18 5e c5 ec cd df 47 b9 35 15 ed 6c 57 e9 67 01 2e 04 7a 9f 53 49 c7 60 c7 51 30 45 e6 f2 79 be 82 65 a5 6d f9 49 f9 6f 63 74 f0 4f 93 ff 13 07 5b fe 0a a2 6f 71 96 fc ff 2b 00 cd 5b 93 e7 c4 0e a9 97 54 d7 2d 76 b2 1c fa cd 5c 11 8c eb 68 b9 d3 31 74 d6 28 cd 11 af ec ca 05 0f 6e fc 0e c3 56 25 e2 cf Data Ascii: ]b ym~zW/fp7PIx;^21iL8D;IxTB]`y<v^:<J: BTcout)TuQEW0@Vt1~;]:Wq<ijg^G5lWg.zSI`Q0EyemIoctO[oq+[T-v\h1t(nV%
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 2b f9 47 f5 aa 3b b6 f0 ab 42 c9 d6 53 15 d2 00 a3 4e 1f 30 d2 3f d5 e9 b4 75 7a 46 05 ec cc 10 2a 42 ab 57 93 f6 29 62 58 84 11 89 1b 4b 19 15 90 34 5d 9e 41 56 11 c0 75 26 17 1e 3d a7 40 0a ea d6 5e 77 a2 92 1e 0a d8 e1 eb 07 59 e6 9c 1b 0d 52 c3 ba c7 9b 29 1d 17 01 b4 ff 65 91 62 84 c0 96 8e 52 a8 5e e2 10 3a bc a7 75 9a 1c 25 45 46 12 4e a8 56 c5 c1 04 78 f4 60 17 35 4a 20 49 50 6b 3b 85 0a 35 44 ce 67 e4 1d de e8 b0 a5 05 da ec a1 77 e6 9f 5d 9e 72 8f 0d 1f 58 0a 94 97 10 6c bb 7b 48 e2 4b 0a cf d4 b0 fa 7f 71 6e e2 c0 a2 0e 86 80 1b b1 7b a6 f1 1f f5 e0 39 ef ba 1a 32 42 bc 34 e6 80 43 08 cb 78 69 49 27 86 8d ec ca 86 c0 54 04 60 5e 20 11 c5 3b 06 1a c0 08 c9 dc e3 cf ff dd e2 c8 69 91 59 b0 3e e8 5e 85 1a 8b e2 7a ff 7e 9a bd d4 75 af bf 92 2f 13 Data Ascii: +G;BSN0?uzF*BW)bXK4]AVu&=@^wYR)ebR^:u%EFNVx`5J IPk;5Dgw]rXl{HKqn{92B4CxiI'T`^ ;iY>^z~u/
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: a9 8b 2b 82 1f f5 a4 20 a3 6b e8 a7 38 33 21 76 e9 d7 95 df 46 24 bb f3 62 9a 8a 6b 6f 16 78 53 8c dc 30 58 45 f7 f0 cf 68 cc 19 e7 f7 f4 aa 94 11 f3 62 8f b3 b3 dc 5a eb ac 92 94 79 92 73 2b aa f7 cb cc 05 d1 c1 52 1d 92 d7 42 68 1c 82 fe e4 1e f1 07 34 c5 67 5c 5b a8 72 c8 b0 c6 ee b6 49 59 bb 1c 71 f8 ad c6 42 15 13 89 39 c3 a3 ac 48 5f 93 10 ac 28 b8 f9 a3 71 40 a8 8e cd cd 86 f6 ca 55 4f e5 f7 89 9c 76 88 0e c2 84 9a 9e 7d 8b 19 93 46 d5 f0 c1 62 4c 97 ec 58 aa 45 0e b1 96 cc de 8c 12 b7 6d 76 9d 1f 11 e0 5e 66 80 3e fb aa 91 a9 f8 76 28 73 4e 69 d7 c7 c5 db b5 13 ec 6d 60 62 53 d9 d5 4e 08 60 e4 0a c8 6d ff b7 0f 5d 74 d2 35 dd 0d 35 da 99 f5 fb 14 d6 c5 77 dc 31 f8 ac 68 9f 4f 2d 28 53 fa 49 65 79 22 7b ff 53 54 22 ce fa 0a f3 53 cf b6 76 58 b3 31 Data Ascii: + k83!vF$bkoxS0XEhbZys+RBh4g\[rIYqB9H_(q@UOv}FbLXEmv^f>v(sNim`bSN`m]t55w1hO-(SIey"{ST"SvX1
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 22 6e 53 55 ef 07 bc e5 5e 72 2f ed 64 19 78 5c 24 af 0e 5d f5 85 58 fb 3e b3 e3 a6 21 98 5e 4a c9 c5 99 df e8 c0 87 62 46 f6 a4 75 f9 e4 7c 41 c2 68 52 d4 8b 64 52 e9 ab 31 0a b5 f8 dd 53 71 22 c5 a3 31 3c 95 6d 28 1e e3 86 09 49 09 c6 20 4b 87 13 e1 94 84 43 be a3 eb 8c f0 5b f2 73 7e 67 09 5f 1f 9a c7 bf ca 87 ce 4e 78 47 6d c9 e0 c8 c2 b5 d5 ea 3a 09 4d fb 3c 64 cc 0d 94 68 9e a1 47 8c 39 af 27 c6 dd 52 61 28 e1 07 b0 e4 3f 1d 43 63 e0 76 97 9f ed ea 78 35 f8 ab 3c 00 5e ee 93 8e 4c 34 37 f0 2b 82 06 57 c6 ba 41 1e 32 6a 2b a7 5c 1b 8c ef 81 20 3e 26 93 5e 9b fb 02 0b 14 fb f5 e0 95 bc 5d ec 88 46 b7 c2 68 f5 fc 53 d9 c4 e8 5c 0d 6f 34 7d 22 b3 f1 18 73 4f d7 bb 18 03 99 8b a0 1a db 4f 8c 3d d2 d8 cb 82 22 48 93 87 2e 19 1c d4 dc 6d 5e 1b c6 2c 6a 41 Data Ascii: "nSU^r/dx\$]X>!^JbFu\|AhRdR1Sq"1<m(I KC[s~g_NxGm:M<dhG9'Ra(?Ccvx5<^L47+WA2j+\ >&^]FhS\o4}"sOO="H.m^,jA
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 3f 96 9e e6 ce ba 7a 2b 3b 27 b6 91 c5 35 0b 69 85 19 10 51 bc 5f 34 8c d3 84 ac f0 d7 36 6d 82 bc e2 f2 62 6b 0d b2 aa 1a e3 43 03 20 46 01 86 ab d3 97 59 60 a8 f0 8e 6b 48 66 49 7c e2 f1 cf 1a 0c 85 76 04 e6 22 4f 37 ca d8 eb 62 53 dd c0 35 b0 79 40 70 09 ae bf ed 01 6d 56 ec 17 8f 91 db 5b 9e b4 61 06 d7 38 2e 62 73 0a 12 e0 5e 6f 9f a9 d6 c3 b4 a8 c4 6e ca ec ad 8d b0 1c 1f 3d 59 45 b9 9f d6 02 20 97 b7 fd 62 0b 2d 4b e5 79 88 a7 9a 80 52 b7 4d 81 c0 87 4a 42 aa 7f 00 27 9b 17 9d 1f f9 43 36 1e 0f 1c 72 da 5e c8 fc 4d a1 b3 2d f2 14 3e 0f 25 c7 3d 47 9a 6e 9d 12 55 f1 dc c5 6f 8f 0d c7 61 0f 3e f2 51 a7 23 52 43 37 15 85 3e 71 8b a8 e6 ac b0 8b 13 88 e0 ab 11 8d 2c 76 eb 20 cb 1a 9f 95 e6 5a 0a ac e0 df 27 20 bb 66 eb 64 16 55 90 77 45 fe 15 ab 33 84 Data Ascii: ?z+;'5iQ_46mbkC FY`kHfI\|v"O7bS5y@pmV[a8.bs^on=YE b-KyRMJB'C6r^M->%=GnUoa>Q#RC7>q,v Z' fdUwE3
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: fa 0e 2a 53 e0 13 4f 46 3c ff aa a5 04 bc 69 33 db 83 cd f2 57 d8 a6 f3 a6 73 7b 6e 92 47 a2 5e 0b 9f ca f8 72 9f ca fe d5 33 87 f9 30 fc 90 6c bc 17 04 ad f7 b3 50 08 c4 77 af 58 2e 01 06 84 78 56 64 ed 92 ef 26 c8 07 05 be e2 f1 e2 25 47 10 8e aa 91 18 85 16 b9 12 d1 61 a8 a4 ce a8 cc 15 7e 58 9d 77 88 19 dd 87 c1 39 00 7c 84 f7 d5 a7 25 11 50 93 55 a7 57 49 1b 75 65 de 96 75 2f 38 a3 7b 10 1b dd 58 a1 a0 23 aa ac bd f3 07 db f6 29 fa 52 28 12 20 c5 9b 23 e9 f5 6e 23 68 d4 8c 84 72 46 09 6e ed 17 e7 6b 8b 8d 46 87 f0 ed 6e 3b bd 83 5e 1e 2a b8 b4 73 4f 47 6d 64 21 b6 d7 64 48 b3 d0 88 ac 92 a8 b7 ee a5 01 ca 73 9b 39 cc 9a 74 42 8a eb 8a 16 25 1d 58 ef 22 d9 29 75 f7 2b d4 9a 89 7a 22 ba 90 86 ef 67 00 54 66 6e 18 ab 18 0f 3a a8 56 5d 5d 88 d3 af fc 16 Data Ascii: SOF<i3Ws{nG^r30lPwX.xVd&%Ga~Xw9\|%PUWIueu/8{X#)R( #n#hrFnkFn;^sOGmd!dHs9tB%X")u+z"gTfn:V]]
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: d0 9d 26 5f f3 e0 45 ac 2e 0c ce 31 a6 8a a6 1e 05 30 47 81 34 e9 fb da 99 dc 05 51 e2 42 c4 a1 1d 0c a1 57 b0 04 ed 86 a4 8d 49 ce e0 26 a7 b9 87 5f 4f 7b fa 19 f7 be 1a cb ce 58 b6 7b 34 53 42 46 77 f0 a2 8f 9b 2e 5e 83 1b 6e 18 a3 f3 cc ae 71 3a 7c 4b d3 cc bd e5 57 88 88 bb 3e fd d0 e2 27 c7 f4 bc 79 5b ff de 9a d6 c1 c9 83 01 42 ee c2 22 44 f5 6d 28 6b 75 0f 9b 66 48 e7 65 ab 16 4d cb b0 bf ba ba 1f 2c b7 db f9 24 4c b9 ee d7 35 d6 c1 c0 c7 32 e4 d3 fd 5e 68 3a 49 b6 f0 7f e9 af d3 42 26 cf 26 71 e9 ba 9f bf 14 68 d4 18 f4 96 91 3e 51 fd c4 0f db ce d1 05 aa 64 00 14 f0 84 8c 71 de 1a 1a 48 4d a9 0a 78 87 5f e2 6e 74 8b 0c 62 92 c0 33 fc 2d 83 a2 9d 6e 16 54 58 27 12 59 01 ee e1 94 03 78 8f da c6 73 60 b1 dd dc 14 c9 1b 52 e2 21 02 f0 d5 f5 7b 8f cc Data Ascii: &_E.10G4QBWI&_O{X{4SBFw.^nq:\|KW>'y[B"Dm(kufHeM,$L52^h:IB&&qh>QdqHMx_ntb3-nTX'Yxs`R!{
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 88 0d a1 f4 49 31 a5 0f 0f 48 fe 24 e0 0f 58 b5 19 75 c5 3d d9 18 3c 40 3b c5 2d 4f 92 9f b4 81 d0 8c 8d 45 58 6d c1 39 65 54 6b 1d 5b d8 dc 3c 90 fb 0a 39 7f 32 cf d1 d0 de b9 9e 72 5d 72 43 8c c3 96 d1 3c c1 5c ed 87 0c dc 57 fb 3a 61 c1 fd d6 c8 79 e4 4b 47 1b ab 72 dc a9 45 05 71 ee 17 62 23 d9 98 1e 17 19 11 d5 fb 50 c7 87 58 70 58 22 5d f0 19 66 d5 c0 a3 e3 5b 55 9d a9 ec 75 d1 4c 67 b7 9d 47 91 05 eb a5 49 6c 34 5d 5b 9b 02 75 f0 76 c4 e7 bf 32 07 91 7d 1c d0 59 f6 06 c3 08 e2 4e 12 29 6c 34 e7 74 14 47 2d 08 dc 11 e1 a5 6a 5c a8 c2 7f 0d bf 6c 0e 0e b7 8c 63 07 2a 21 db 9b bd 26 df 04 84 cd db 7f f7 a5 10 b3 3b 9e 86 a5 1c 7a f5 4b db 74 48 4a 8b a1 33 40 b7 72 4e 4f 88 e5 d5 0a 10 2a 51 5f 11 99 28 b2 6d 28 20 db 53 ff 42 c8 97 c9 12 ca f4 7b 3e Data Ascii: I1H$Xu=<@;-OEXm9eTk[<92r]rC<\W:ayKGrEqb#PXpX"]f[UuLgGIl4][uv2}YN)l4tG-j\lc!&;zKtHJ3@rNOQ_(m( SB{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.6	50037	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1086	OUT	GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:50 GMT Server: fife Content-Length: 187116 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	731	IN	Data Raw: 52 49 46 46 e4 da 02 00 57 45 42 50 56 50 38 4c d8 da 02 00 2f 0d c2 49 00 4d 50 10 c0 36 6c 1b 05 90 61 d8 40 ef ff 0f 16 ed e4 f6 82 88 fe 4f 80 24 25 de 25 29 ca b3 12 79 29 89 94 c4 b6 32 5a 4a 62 29 52 ec 64 cb 43 5e 39 d6 1e 3d c5 af 76 ed 89 9c 24 92 ad d1 c3 1d 27 96 9c dd 77 ac 7d 4b 34 66 1f a4 41 89 14 e5 5b c7 49 a2 cd ce b3 94 c1 49 62 65 da df 39 c9 65 65 74 12 eb 0b c5 9b a4 21 91 b7 44 7a 48 22 0d c5 b7 6d 81 4b b1 a4 33 ca e0 44 7b e2 cc e7 a0 24 e4 37 c7 6a 5b e6 8d 14 db f4 ad 48 77 ae c4 d9 2f 9b d2 70 80 7c b1 1f 07 b3 db d9 cb f6 86 77 5d 89 92 c4 ce 75 1b b4 5d 92 2c b1 5e 81 53 9c 28 21 c9 b6 65 09 16 4a 24 c9 b4 ef 38 24 b1 88 ef a9 1f 90 03 a1 d9 8e 6d c7 24 be 5d 00 0e 32 4a bc d9 bd 0c 14 36 08 02 d9 4e f9 51 24 3f 2d d9 92 03 Data Ascii: RIFFWEBPVP8L/IMP6la@O$%%)y)2ZJb)RdC^9=v$'w}K4fA[IIbe9eet!DzH"mK3D{$7j[Hw/p\|w]u],^S(!eJ$8$m$]2J6NQ$?-
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 23 84 08 16 42 1c 78 b4 6d 5b 75 63 db b6 4a ad 7d 18 a6 c2 02 4b 43 b2 23 a1 62 32 33 e3 cf 3b ad cf 58 a9 4a 66 2f 66 f0 e8 a3 f7 9f 91 db 48 8a dc 30 b4 74 da 47 a0 18 5a f2 8e 9a cc 1c f6 de 39 f6 6e 18 56 ca 2b a4 a0 58 01 06 0a 04 89 4c 1a a8 15 1a ee 52 4c 44 a4 48 ab 53 2b 10 8a 99 86 e1 61 74 74 c3 66 22 45 5a 02 28 c4 04 82 14 88 48 11 31 4c 0c 9b 88 21 6e 00 74 e8 20 13 04 a3 78 47 31 29 7a 14 bd 16 a5 a8 49 43 10 00 28 86 46 d1 10 d0 30 80 20 00 41 6a 52 33 31 a4 08 22 82 81 d9 0c a9 5b dd 90 48 91 52 00 00 44 c4 44 44 66 22 22 76 1b de ec 0d 02 50 30 60 00 99 bc 0b 86 d9 c5 0e 80 58 45 a3 30 44 33 a4 21 0d e9 0b 99 14 6b 98 61 d8 0c 2b 56 2b 00 62 c3 87 38 8c 0e 36 29 1d a4 5e bc 03 7b 93 09 66 18 52 a4 a0 58 31 20 52 4c 20 30 0c d1 c4 8e 01 Data Ascii: #Bxm[ucJ}KC#b23;XJf/fH0tGZ9nV+XLRLDHS+attf"EZ(H1L!nt xG1)zIC(F0 AjR31"[HRDDDf""vP0`XE0D3!ka+V+b86)^{fRX1 RL 0
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a4 07 d2 f4 a9 e9 de ea 32 94 5a cf b5 5e aa 99 b7 f0 d2 74 6f 7a e5 35 7b 05 28 d4 3e 16 ea ca 34 4c 43 19 a7 3a 4f 94 ea 8f f5 4d fe f1 60 23 07 10 60 42 97 22 62 08 62 53 41 77 ac f9 d4 ea 34 4e f0 e3 c1 28 43 a1 de d7 ba 8e 75 a3 6e 63 dd 28 15 28 56 60 0a 2e 18 65 ac 8d 52 a7 5a e7 5a c6 c2 f4 58 57 ea dc 04 35 de e2 eb e8 db c8 94 37 b1 00 ea 00 a5 10 79 17 9b 60 c5 b5 83 52 04 60 3f d9 71 81 01 0c 0a b0 9a 20 62 3d cc 14 50 5c bb dd 5d 64 d2 30 cd 6e 32 99 50 7c b2 a0 3b 1a bc c3 3b 66 6f 32 60 29 26 48 ad c0 30 87 74 58 ad 53 2b 28 30 cc 2c 30 17 c3 10 31 31 57 60 35 c3 8a 21 18 10 2b 36 41 74 c1 a4 a8 19 e6 10 cc 6b f9 dd 79 a8 e3 9f 95 47 7d e2 0d de 0d c3 74 33 3b 14 16 2c f4 85 61 5e 0d 41 1c d6 61 18 32 01 98 00 43 44 c4 04 18 52 8a 5e 6d 40 Data Ascii: 2Z^toz5{(>4LC:OM`#`B"bbSAw4N(Cunc((V`.eRZZXW57y`R`?q b=P\]d0n2P\|;;fo2`)&H0tXS+(0,011W`5!+6AtkyG}t3;,a^Aa2CDR^m@
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: fa eb e2 f9 52 77 0b 16 8b 90 6b a6 c9 22 e7 ca 7f 7a 1e e9 52 56 09 89 ca ea 2e a4 49 c8 ff da 32 a4 c9 63 66 91 e7 91 9a d1 91 bb 84 44 e5 2f ed 87 e7 4c 93 e6 f2 0f e3 cb e6 f3 26 4d 16 59 e5 5c 8f 7c 1f be dd 86 41 bf 45 7f 46 bf 47 7f 46 7f 66 1c b3 d7 8f fe 3b 7d b1 1a c7 7c 1c 53 fd 19 be e8 c3 df 47 12 a2 23 ab 1c 2b e9 bb 40 f8 2e 24 fd b5 92 26 95 97 21 33 cf ef d2 e4 73 27 dc ae b2 af a4 57 21 e9 32 2a 59 69 12 12 6e 3e b2 db 56 fe d6 b2 af a4 ab c5 55 54 d2 ed 98 09 59 a4 55 6e 23 63 3c be 3c 8c fa 3b e3 40 bf 66 1c 4f c6 38 d1 ef 67 63 4c f4 5b be 3b 4c ce 9a 8f 63 36 8e f9 38 e6 77 fb 90 70 1f f5 af 90 ac 34 49 09 09 49 b9 cb 2a ab 34 09 b9 cb 2a b7 71 ff 7d 72 26 51 69 f2 fd 3b c2 fd 2a 21 d7 cc 2a 21 ab 84 dc 7a 5a a5 c9 ef 5a 16 d9 57 e6 Data Ascii: Rwk"zRV.I2cfD/L&MY\\|AEFGFf;}\|SG#+@.$&!3s'W!2Yin>VUTYUn#c<<;@fO8gcL[;Lc68wp4II4q}r&Qi;!*!zZZW
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 7e b7 7b 08 b4 37 d7 76 f3 b7 06 6c db 96 bd 6d a4 fb 7e 5e f8 be ff d7 2f b0 6c 99 19 e2 d8 71 e2 60 31 dc e9 b6 1d 66 da 61 66 e6 76 3b a5 c1 2e 17 96 86 b7 ed d1 85 76 78 3a 4c 4d 9a 42 92 06 9c 98 41 92 6d 99 24 8b 7e f8 be f7 7d 9f 87 b3 24 db aa 6d db 76 22 4a 6b bd 8f 31 e7 82 7d f6 39 97 1f 33 53 4e 9c 63 66 a6 9f 60 66 29 a9 5f 50 8a 59 29 66 66 78 cc ef 89 0f ef bd d6 9a 73 8e 31 7a 6f 25 1c b1 6d e3 48 9a b2 d7 2f ce 66 7b df a7 3f 6c ff cf 46 fe ff ef f6 78 24 69 da 8e 67 d6 b6 ed a7 bd 4f db b6 6d db b6 6d db 5c ef bc d6 98 dd 59 63 b0 9c 1d d6 c9 23 b9 1f af 4c 1e 69 9b 99 e9 df 7e a8 6d 3b b6 db b6 ad e3 ba df ef ff 2b da b0 6d 23 b2 3d 32 db 36 22 db 36 32 db b6 95 75 db 36 46 6d ac ae f5 ff be f7 b9 3c 47 b6 ad da b6 6d 5b 9e 4b e9 7d c0 Data Ascii: ~{7vlm~^/lq`1fafv;.vx:LMBAm$~}$mv"Jk1}93SNcf`f)_PY)ffxs1zo%mH/f{?lFx$igOmm\Yc#Li~m;+m#=26"62u6Fm<Gm[K}
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: b4 d7 01 a8 ad 2d 0f b5 39 c9 28 78 97 1a c2 c1 a2 74 02 e4 20 5d 5f 6e 0f fa 41 79 e8 b4 11 d6 2b 6d 65 40 09 68 42 dc 46 08 5f 96 04 80 f0 7d fa 4a 0c 80 29 5a 16 9d d8 d9 6f 01 d0 56 ea f9 f6 c9 37 5e 72 f1 b6 16 7e f8 0c de 63 47 76 d0 42 dd 31 30 6d 82 b6 62 9b f6 46 9f af 41 0e 64 13 95 25 76 18 b5 ae 76 88 64 1c d3 d8 2e dd 27 75 14 a4 7d 9c 63 28 68 39 b9 d3 75 df 27 af 0b 16 2a 7b 03 c3 a1 41 50 14 b8 b7 ca 01 f3 9e 03 37 22 36 9d c1 0d ad e6 66 c8 01 54 d0 3c 6b 2d 65 ad 15 45 45 c1 c3 6a 68 d2 1b 80 c5 50 35 03 e5 7e 9f 92 82 70 83 5c ca 57 4f 55 36 05 0f e2 2b 03 cf 5c 46 87 62 23 92 c5 4b 2d 24 e9 09 82 09 ac b7 6f ae 6f ee eb 4b 6f ad 21 74 c2 f2 96 5e 24 46 8d 9a 24 89 9c 35 6b bc 4b a7 dc e2 11 87 ae 2c 58 fb 8e 1b 84 0f 8d 23 26 76 aa 59 Data Ascii: -9(xt ]_nAy+me@hBF_}J)ZoV7^r~cGvB10mbFAd%vvd.'u}c(h9u'*{AP7"6fT<k-eEEjhP5~p\WOU6+\Fb#K-$ooKo!t^$F$5kK,X#&vY
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 25 59 9a ed 8a 06 02 55 82 1d 6b bc 86 4d 5b 1e 6c 3c 24 54 9f 25 d6 4e 76 bd 6e 2d 1e 4c 0f 03 74 b6 2d 32 5b b8 23 17 23 83 92 5d cf de a8 a1 b8 0b b3 b6 ee a8 f5 51 eb c5 50 13 85 9e b5 3d 7e fe f7 bf 3d fc e4 ed ef f4 dc 71 6b a0 30 e2 8e 7b 99 98 07 a7 63 54 62 0e 45 74 f5 be c6 ba 77 86 f4 6c e5 65 2e 1b 21 5a 8d 36 20 90 da 59 8a 90 9a 0e de df c9 e9 a1 8e 87 ab 26 ac c3 56 e9 56 4b 0a 6e e3 87 d1 46 d9 ab 8e ac 6b 34 61 97 a2 c2 a0 7a 28 d0 ec f4 de c7 8c e2 ca 9b 69 81 4b f2 d9 3e b9 d4 b6 16 b0 38 8f c1 e3 c8 e8 a0 f0 a6 a1 70 94 ad 98 d6 64 41 0b 19 7d 3f ee de 26 34 52 34 34 01 e3 20 c2 a5 f2 76 2a 91 b4 3c 66 c9 14 47 21 ea ab ad 16 e0 f3 c2 9b 0e ba 00 c2 bb 87 df e3 d4 c5 98 50 1d 8e 38 8c d3 a0 5e 31 bf 91 79 e1 ea 1e 3d 70 73 b8 f1 ca ce Data Ascii: %YUkM[l<$T%Nvn-Lt-2[##]QP=~=qk0{cTbEtwle.!Z6 Y&VVKnFk4az(iK>8pdA}?&4R44 v*<fG!P8^1y=ps
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 8f e9 3b 8c 34 a0 c6 9b a2 96 ec b5 9e 8f 2e 45 da 2c 6d d7 4e 9b d9 6e 9d c7 7b 51 24 13 05 6e df be df fd e5 6b b3 d7 ce 17 c2 d5 b8 8d 63 0e a0 78 69 d2 7a 6f 67 ee 0a 24 69 78 57 fd 4e 47 76 d6 fa ea f0 e1 46 ed 6a 3d bb 8e 1c e6 fa c3 1f f2 11 ef 03 bc dc 2e af 6d 4b 09 9e dc 51 81 7b df 3a 03 aa db 35 1c c7 2a a6 11 a0 ab 2a 7a bf 67 5d 95 b1 e8 b4 91 aa 60 5e dc 8d 5b 29 43 c6 2c e5 96 e5 ac 6a 85 01 03 38 75 ed c1 a6 13 ab 07 af c3 a4 d9 b6 ff e7 f6 b5 b5 b2 e0 6d 13 0b 9d 88 a5 91 49 a1 4a 76 a9 9c e9 46 82 03 7a 7d bc 84 35 1e 33 dd 84 cb b5 c3 e9 0d 6e bd 35 7b 09 dd c0 e8 96 40 06 2a 62 33 de 8c 12 8d 78 22 b0 77 df 0f 9d c8 d8 0a 55 cf 56 e5 09 da b9 f6 e6 c3 4d 22 8b f4 fa 9c 5b 9a 7d 77 b9 9e 2b 50 dc 9d fe cd 85 82 36 47 57 5b 7f ce b0 d8 Data Ascii: ;4.E,mNn{Q$nkcxizog$ixWNGvFj=.mKQ{:5*zg]`^[)C,j8umIJvFz}53n5{@b3x"wUVM"[}w+P6GW[
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 82 dc 8f bc df c6 6f db 54 9d 81 8c 36 c2 c5 d6 05 bc 56 b4 9b 8c 5f 84 99 e6 99 3f b8 9b 5e da dd fe 73 37 af 68 25 85 08 02 3d 13 1b b8 a3 45 9b 4f 7f c7 6c 94 38 2b 3a c5 0d 6e 69 b1 49 0e 6b e9 97 82 fb 54 98 46 34 19 32 50 1a 4d 43 39 17 32 c7 56 6e 8b df 8f bd af 7d bc 42 7a b1 9d 6a 04 5a 78 2c 12 d1 e6 3e 2e c6 e9 5f ff 5b 4f fc 08 a6 01 00 df 76 95 1e 01 78 0a 57 63 e3 d6 96 3f f6 bd 95 f2 91 b9 9e a2 a9 23 0e 7c a5 fd cc ef 72 6c ef ce 7a 2d ed c0 c4 f7 dc fa ea 5f 6e f7 27 4e 93 d3 a8 2f 9d 79 fb b0 a5 f2 c6 e6 43 c1 10 a4 95 cd 94 3c 1d 35 49 b1 1f 6e 87 78 eb 44 8f b2 24 35 68 9e de 7a a1 5c f9 56 1f aa 7d be ba dd 26 a9 10 ef 0e a6 e9 8b 81 e6 ab f3 da 4d 56 3e 7a 86 91 48 fd ff a7 21 83 70 5a be 34 e7 c4 1a af da 90 6a c9 34 40 5e 45 af 5f Data Ascii: oT6V_?^s7h%=EOl8+:niIkTF42PMC92Vn}BzjZx,>._[OvxWc?#\|rlz-_n'N/yC<5InxD$5hz\V}&MV>zH!pZ4j4@^E_
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: c3 12 96 cb 11 f6 eb 3b e7 4d 80 4d 32 a2 a8 b3 d6 1d 2f 98 99 08 a2 63 ed 24 6f 03 d0 88 d8 e2 49 c3 22 25 35 72 50 d1 9a 64 74 54 6a b1 ad 45 0d d9 55 7d c0 af a5 b8 e7 38 23 11 09 87 20 22 a7 92 a9 02 f3 59 f2 29 03 a7 e2 b5 4f d8 a0 6a 09 16 c4 f7 34 3d 9f af 71 49 ca 4a d4 bb de 7a 83 75 0e 47 78 09 06 5b 69 24 07 8b 6e be db 1a 88 0d 21 65 6b 59 b4 b5 c4 a5 5a b8 e9 2d d6 e8 e9 3d e9 cd a6 62 9a 4e 57 be 20 72 50 6a 7b 12 47 02 9f 8a 94 24 16 ce 4c 9c 8a 9c 73 92 33 23 bd a9 60 21 23 75 29 70 9b 29 83 21 a0 91 80 82 f1 d4 98 4f 91 c2 84 7c 48 67 08 14 67 de c9 e9 70 79 fa 2a a3 59 3e c2 6b 5d 2a cd ee 28 cc 47 1d 3d a5 23 34 d2 50 33 a3 30 62 b2 80 26 68 ba 0c 59 cc 2e 5f 78 2f e6 6f 01 4c ae 38 d6 58 48 0a 23 f4 11 43 c0 d4 43 03 78 b6 b1 9a 90 7d Data Ascii: ;MM2/c$oI"%5rPdtTjEU}8# "Y)Oj4=qIJzuGx[i$n!ekYZ-=bNW rPj{G$Ls3#`!#u)p)!O\|HggpyY>k](G=#4P30b&hY._x/oL8XH#CCx}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.6	50038	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	511	OUT	GET /vsc_zvvzALw1OE_hH3yKlKJje03j9iXKrlD8qLvr504kUlZZKiwTDsuHMOmcn9rspGGX=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 189446 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	720	IN	Data Raw: 52 49 46 46 fe e3 02 00 57 45 42 50 56 50 38 4c f1 e3 02 00 2f 0d c2 49 00 4d 48 0c c0 36 6c 9b 00 12 0c 1b e8 fe 3f 58 b2 9a ee 82 88 fe 4f 80 24 25 5e 25 29 ca bb 12 79 28 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 97 1c 39 d6 1a bd c5 47 ab d6 44 4e 12 c9 d6 d6 9b 27 4e 2c 39 ab 9f 58 eb 92 68 9b 75 23 6d 94 48 51 7e eb 38 49 b4 d8 79 97 b2 71 92 58 d9 ad 67 4e 72 5b d9 4a 89 a5 33 c5 8b a4 05 8e bc 24 7a 4b 22 59 56 8a c3 16 40 db e2 56 2c e9 8a a2 64 a0 80 84 1b 29 9e 47 b8 8a 6b a3 3c 32 4f d6 39 da 96 39 91 d9 92 24 da 4e f2 21 58 26 37 44 49 22 31 cf 80 39 e7 64 56 3b db 89 4e 78 82 2d 48 4d b4 65 ee e7 06 6d 73 ed e7 33 de da f9 e1 2e 4e 94 3c f0 03 46 26 a1 3e 4a 24 c9 b4 9f 38 24 31 08 e0 60 4b 9f 3d 7e 42 d8 97 75 ea 7d 2e 12 df bc c9 28 b1 93 d8 Data Ascii: RIFFWEBPVP8L/IMH6l?XO$%^%)y(R9GDN'N,9Xhu#mHQ~8IyqXgNr[J3$zK"YV@V,d)Gk<2O99$N!X&7DI"19dV;Nx-HMems3.N<F&>J$8$1`K=~Bu}.(
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 94 51 5a 1b 3d cb 5f af fd fc 8f e0 75 08 fb 3e 4b 1a a5 94 11 52 48 77 21 04 8f b6 6d ab 76 63 db 56 a9 b5 0f d9 4e 96 22 44 53 53 32 8f 60 66 e6 bf 5f cc bc 8c 55 f2 34 53 30 69 f4 d1 fa af b0 6d db 86 49 f7 bc 43 ad c0 50 15 a8 2a f6 74 95 a1 e2 2a 96 65 d2 de 03 4d ad 34 51 50 93 24 a8 88 06 b5 59 a9 43 c4 46 46 44 8c 81 da 24 b5 62 2b 85 6a d6 e0 61 b9 d8 88 88 21 a1 66 6c 30 a0 49 46 44 c6 b2 b1 5c 64 2c 79 45 68 d0 20 15 49 b2 5a 15 88 4d e3 d6 78 34 d2 a8 a2 49 12 42 ad 40 6b 34 09 9a 85 24 09 49 a2 8a 6a 63 89 48 32 92 45 71 b1 c4 61 0e 4b 10 11 69 42 08 23 63 23 a3 62 23 23 8b 0b b5 b8 16 0c 82 50 90 85 54 54 45 b2 6c 91 05 21 39 1a ad d9 64 b5 44 13 4d 7c 55 11 31 cd 36 cb c5 32 31 b5 09 c9 85 3a e5 69 0d 72 11 19 24 8e 56 05 b9 16 15 c9 36 4b Data Ascii: QZ=_u>KRHw!mvcVN"DSS2`f_U4S0imICPteM4QP$YCFFD$b+ja!fl0IFD\d,yEh IZMx4IB@k4$IjcH2EqaKiB#c#b##PTTEl!9dDM\|U1621:ir$V6K
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 61 a7 50 28 d0 6c 9c 45 59 54 24 6c 00 2a 8e e3 4f b8 a0 0a b9 60 97 24 c3 45 b5 88 da 64 d9 53 9c a6 0e dc a1 c1 0e ff 29 6e 70 53 ad e2 ab a8 f2 30 77 f1 9f 72 13 3b fc 87 0f ec 62 87 48 92 3c 24 9b 46 6d 32 55 72 95 06 66 ea 39 27 32 5f 50 37 cb 92 4d 1a d4 1c 38 e0 ab 65 59 92 3c cd 09 90 1c 12 82 26 09 18 11 51 11 12 44 24 58 28 58 5d 28 92 88 24 35 21 51 25 2c 26 f0 b5 9e f6 70 ea 02 62 21 15 c9 92 60 98 da 0a 1e f2 18 ec d4 61 4f aa c8 d3 42 88 5a 6d b5 9a 24 d5 82 55 59 9a 24 64 6b 33 b2 40 6b b5 c8 b8 8a 3d f0 70 a1 8a 4c b3 91 c5 d3 a9 6b 5b 0c 6a 1e aa 22 8b ab c8 a8 56 ea 58 1f 36 f7 b1 31 8f 4d 8f 21 8f 93 7d d9 7d 9c 7e b4 8d 47 db e1 57 1b 4e dd fa c6 79 3e b5 8f 93 d4 76 eb c3 e3 dc da c7 c6 5b db ee 4e 1e 39 7d e4 c4 ac 1b 47 f0 38 f1 38 Data Ascii: aP(lEYT$l*O`$EdS)npS0wr;bH<$Fm2Urf9'2_P7M8eY<&QD$X(X]($5!Q%,&pb!`aOBZm$UY$dk3@k=pLk[j"VX61M!}}~GWNy>v[N9}G88
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: a9 69 d2 ad 16 ab 98 e9 72 f6 84 2c 72 ef 79 f4 af b9 5c a1 df 27 bf 32 66 ee d7 b9 5f e1 3b dc af 71 bb c2 1d ee d7 90 3f e0 27 7c e5 d5 67 21 e1 49 cc 1f 42 fa 4c 93 2e 9c 09 09 79 95 55 56 69 f2 b1 ef 8b 76 eb 73 e7 2d 09 69 f2 f9 1f e1 de 2a 21 f7 9e 55 42 56 09 f9 e2 48 9b 69 f2 6e 1f 39 f3 03 5f 82 5c 98 fb 69 3e 7a f1 28 24 24 64 95 57 d9 46 62 e6 18 97 be 68 f9 a9 25 a4 49 48 c8 cc 5b 21 21 8b 31 24 fc 1c d2 10 f2 53 4b 48 48 25 f3 4c f6 7c d3 12 de 79 cb f9 9f 5a 42 be 38 3f 0c 59 bd 95 09 49 13 ce 84 34 d9 c7 18 3e bd b8 25 dc 7e f7 72 7c be ca ea 93 d9 6f 8f b9 0c 69 d2 67 16 17 43 42 42 fa cc ec 69 12 72 f6 8c 99 e6 bd 55 c2 3b e1 ab f7 b9 98 9f 7f 3a 13 12 f2 4c 5e 25 dc de 66 56 69 56 b7 91 90 70 79 cc 84 54 cf 77 67 3c bf 00 fc ed 87 af fe Data Ascii: ir,ry\'2f_;q?'\|g!IBL.yUVivs-i*!UBVHin9_\i>z($$dWFbh%IH[!!1$SKHH%L\|yZB8?YI4>%~r\|oigCBBirU;:L^%fViVpyTwg<
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: d5 95 99 11 71 78 ba 6d db b4 6d 6d db 72 6b 7d cc 39 d7 5e c6 b6 2e fb 0a d9 b6 ed e8 15 bb fe d5 75 c5 af 7f c0 a0 6d 6b e3 f8 9c a5 c9 d1 5b c8 82 6d 2b 6a a5 05 c4 a7 99 30 d2 89 01 1c d2 9f fe f0 ff 5f e5 34 fe bf c7 91 71 9f 39 71 81 10 42 b0 e0 ee 14 a7 58 d1 e2 35 ac 50 58 da 6d a1 5b 37 e8 16 2d b6 c5 5d 4a 81 50 08 5e dc 29 6e 11 68 12 42 08 21 19 77 39 72 bd 93 33 93 f4 9d f4 ff 88 80 45 db 56 d4 e6 00 1d 9c 7a df 2a 2b e2 f3 81 24 9f de 68 6b 5b 36 27 da b6 6d df 8f e3 38 cf cb af f2 aa 54 c5 dd 13 1c 82 bb 75 d3 06 ed 7a bb 8e f1 b8 bb bb df 2e 6d d0 2e 34 d0 78 37 10 22 10 24 09 81 b8 54 a4 dc eb d2 f3 3c 8f 63 df c7 13 b8 fb f1 e7 b7 06 fe bf 55 bb 6d ac ff 5a 1b ce be 20 06 5b b2 24 b3 e5 38 4e d2 34 49 a7 4d 9b a6 30 85 99 d7 e1 c7 cc cc Data Ascii: qxmmmrk}9^.umk[m+j0_4q9qBX5PXm[7-]JP^)nhB!w9r3EVz*+$hk[6'm8Tuz.m.4x7"$T<cUmZ [$8N4IM0
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: c8 51 ba be dd 9e f5 9d ea d0 19 23 6c 57 d9 a6 01 f3 40 09 76 b5 10 75 73 25 81 c4 df 67 5f 89 20 38 d1 c6 8d 8e ed b9 4f 06 90 b7 d2 8b ed a3 6f b9 e4 e2 6d 2b fc f0 33 f8 11 1b e9 c4 8a ee 31 34 6d 82 b6 c9 76 b5 46 9f 5f 80 1d e0 66 21 23 3a 1d 53 b7 0e 59 4a 8d 6b dc 6e ed cb 75 36 58 c7 f1 c6 b1 d0 e5 f1 4f f7 fb be fa ba a8 b8 b2 1b 1a 1e 1a 04 45 81 7b 9b 02 b0 e8 05 70 23 72 d3 99 dd dc 7a 1e 86 1c 40 05 2d b2 d5 5a d6 46 51 54 14 3c ac 8c c6 3f 01 d8 18 6a 59 60 a1 ef 55 7c 10 2e c8 b1 d5 ad 24 59 90 82 07 a9 5b 0e 3e f3 33 1a c2 a2 92 8b 37 95 99 a4 c4 30 3a b0 5d 3c 55 fb e2 3e 65 d3 2b 17 42 c7 14 96 7f 46 c6 a8 a8 24 de c8 73 e5 8a f7 fc 89 57 3e e2 d0 4d 0b 56 db 71 83 f0 a1 a9 88 44 fb 36 98 3f 44 55 6e 6c f4 c2 17 53 69 ce 25 62 ac ac 90 Data Ascii: Q#lW@vus%g_ 8Oom+314mvF_f!#:SYJknu6XOE{p#rz@-ZFQT<?jY`U\|.$Y[>370:]<U>e+BF$sW>MVqD6?DUnlSi%b
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 0e 36 1e 12 ca 67 8d ab bd 4e b7 8d ec 81 29 61 a0 ae 6e ab 99 15 df 91 2d 23 07 4d f6 4a 96 a2 42 e3 9e c9 da b6 a3 e6 a3 e6 c5 50 13 e2 9e d3 31 bf fe f7 bf bd f8 d9 c7 bf b3 e7 4e db 00 85 11 77 da ab e4 7c f5 74 9e 5a dc 21 54 77 3f d6 a8 fb 41 cb 9e 6d 5c ee b2 28 8b ea d8 06 05 98 ae a6 80 d5 ec e0 c7 bb 78 7a c1 f9 e1 55 27 5e c7 ad e3 d6 4b 0a 6e cb 87 d1 46 69 d5 47 d6 2d 9a b4 6b 51 61 50 1e 0a 34 3b de fb 90 45 5c 75 33 ad 70 49 ae 75 e5 f9 9a cb 60 e3 dc 06 4f 45 46 07 0d 2f 0d 85 a3 cc 8d c9 25 1b 54 9c d1 fb 4b f6 71 a1 88 45 28 01 53 41 84 63 0b 6b df c4 a4 c2 38 79 29 15 85 48 cf f2 96 03 5c 6f 78 e9 a0 67 40 78 ef e6 73 9c b4 31 26 94 c3 11 87 09 06 d4 45 d5 8b 54 1b 6e c5 d1 03 ae 0a 17 6f c1 73 1e da e7 db 83 9f af bd 6f 82 2d c5 bc 29 Data Ascii: 6gN)an-#MJBP1Nw\|tZ!Tw?Am\(xzU'^KnFiG-kQaP4;E\u3pIu`OEF/%TKqE(SAck8y)H\oxg@xs1&ETnoso-)
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 7a 39 ba 14 69 77 69 bb 75 da cc 9a 39 9f ef 65 91 4c 14 b8 be 7c be 67 b7 ba cd da f5 ea 86 f1 6b bc 8d 47 1f 50 cb cb c6 6f 6f 75 60 db c0 24 99 da eb 7e 6f 47 76 d6 7c 39 7c b8 d1 76 77 bd 79 9d 19 ce fd 1f 7f 97 9f f0 7d 80 d7 db f5 b5 6f 25 c9 17 77 52 ec 3e 51 27 a8 7a bb 8f ef 98 22 1b 09 5a a5 f0 c9 9e b3 8a 6a 31 db 88 0a 9c 77 ef c6 5b 59 5a 2a 57 79 cb 78 75 6d 30 60 00 a7 af 16 6c 3a b9 3c 78 1d a7 cc be fd cd f6 0b 1b 65 c1 db 2e 16 3a 11 4b 23 53 42 55 ec 5a 21 dd 45 06 07 6c f7 a8 4d 98 52 e3 a4 4b 38 de 16 38 a5 e0 2a 95 f5 10 ba 40 74 a5 90 80 02 4b dd 9c 32 1a 71 62 a0 37 ef 17 3d 31 c7 dc d0 d2 99 5b 7c 18 f9 9c ba e1 70 49 64 23 db 3d 0e e5 67 d9 3b de ee 9b a1 54 6f ff 63 d5 50 d0 ee d1 35 d6 6f 33 2f 76 6e 15 99 b9 ba ea aa 8a 31 33 Data Ascii: z9iwiu9eL\|gkGPoou`$~oGv\|9\|vwy}o%wR>Q'z"Zj1w[YZWyxum0`l:<xe.:K#SBUZ!ElMRK88@tK2qb7=1[\|pId#=g;TocP5o3/vn13
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 2b 34 04 b4 88 10 9b 0b 38 57 b6 87 2c 5f 84 93 e6 9e 9f 78 eb ce ef 6d be bd f5 33 ab 98 88 05 81 ce 19 1b b8 93 65 bb 1f 7f c7 ec 4c 09 36 74 26 37 bb b5 e5 26 e9 b7 b1 af 0f ee a3 86 c9 2c 92 43 02 d2 b1 69 2a cf 91 c0 aa e2 35 fa 7e dd 3d f5 e1 2d a5 17 db 5b 2d 40 4b 8f 45 50 ed de c7 8b f3 e8 5f fc b3 af 7c 24 87 01 80 d8 9a a6 1e 01 84 8a af 46 e3 ad 5d e1 71 dc db 90 1f b9 eb 6b 91 19 75 e0 95 ed af ff 5d be 1d ed 6a af ad 43 b8 f8 3d 7f 7d f7 df de e1 9f f1 4c 66 63 5e 7a 16 ed e7 ad 54 34 b6 18 0a 86 20 6d ec a6 d4 71 d4 24 93 7d 77 3b 26 9a 93 3d ca 9a d2 a0 45 bc 79 a1 42 e1 4a 0f 6a cb 3c b9 36 f1 16 b1 e7 f5 d2 94 8d 81 aa 5b 61 d7 eb 14 5f 7a 9a 91 48 fb f5 69 4a 13 9f d6 5f 9a e7 44 8d ab 6a 92 e4 a5 01 c2 16 6d f7 0e bc 6c 30 2c be 96 96 Data Ascii: +48W,_xm3eL6t&7&,Ci*5~=-[-@KEP_\|$F]qku]jC=}Lfc^zT4 mq$}w;&=EyBJj<6[a_zHiJ_Djml0,
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: fa bc 29 70 93 19 53 e8 d4 da ea 06 33 60 41 74 5c ed ad 56 03 14 61 cb 1e 65 58 a4 a2 41 0d 2a 5b 36 19 1d 35 95 ad a9 51 61 bb 5b 9f f5 b3 86 f7 7c a7 08 04 1e 8a 40 66 c8 a9 80 c5 ac f9 98 99 b7 e2 d5 26 6d 56 b7 02 0b 12 7b 1a cf a7 6b 59 92 69 15 fa 9d 37 6f b0 2e e1 08 af c1 60 8b 45 56 c1 46 57 dd 9b 0b 8c 85 90 05 e5 8c 36 97 e7 d8 72 b8 f4 b2 ad 75 7a 27 dd 2c 83 6b 7a ba f3 22 64 b0 4c c7 12 23 c0 33 88 84 28 3e d3 f1 14 bc 79 e4 99 c3 3f a9 c1 86 b4 a4 4d 81 db 9d 69 30 04 34 12 50 32 3e 35 0a 53 b0 e8 90 87 14 9a 40 e3 0c 7b 72 0a 5c 11 5f d3 68 d6 8f 70 ae 6b 95 69 8e c2 7c d0 c9 53 0a 42 c6 0f 95 13 85 11 93 05 0c 41 d3 65 c8 62 9a 62 e1 bd 9c ff 0f c0 e4 17 8f 13 83 65 51 d0 a3 86 81 53 1f 36 90 37 37 66 08 69 c3 81 63 e9 de 02 5a 8a 96 cd Data Ascii: )pS3`At\VaeXA*[65Qa[\|@f&mV{kYi7o.`EVFW6ruz',kz"dL#3(>y?Mi04P2>5S@{r\_hpki\|SBAebbeQS677ficZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.6	50040	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1086	OUT	GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	524	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:51 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:51 GMT Server: fife Content-Length: 185044 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	731	IN	Data Raw: 52 49 46 46 cc d2 02 00 57 45 42 50 56 50 38 4c bf d2 02 00 2f 0d c2 49 00 4d 40 0c 80 36 6c 33 70 08 09 74 ff 1f 6c 3b cd 76 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 6f 1d 27 89 26 3b 7b 29 0b 27 89 95 d5 fc cc 49 2e 2b 4b 29 b1 f4 4c f1 24 69 91 c8 53 22 4d 52 92 48 96 a5 e2 db b6 c0 95 58 d2 19 65 e1 44 73 e2 ac cf 85 72 8b fc e6 18 6d cb 47 52 6c d3 b7 22 dd b9 12 67 be 6c 4a 11 c9 05 37 6b 66 b6 33 8b 2d 60 b7 66 53 24 89 9d eb 36 68 9b c4 c0 d1 92 6f c4 89 56 2d 47 c9 12 64 59 10 26 7c c7 21 89 57 e9 95 57 64 49 b6 2c 49 b6 2c 71 3b b6 9d 93 ed 1b 25 23 c9 4e 64 93 30 66 1b d3 5d b4 80 d7 22 41 b6 20 5a 74 Data Ascii: RIFFWEBPVP8L/IM@6l3ptl;vAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%Ro'&;{)'I.+K)L$iS"MRHXeDsrmGRl"glJ7kf3-`fS$6hoV-GdY&\|!WWdI,I,q;%#Nd0f]"A Zt
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 0a db b6 6d 98 74 cf 3b 50 4c 9a 76 91 aa 2d f4 b8 0c 4e 5c 82 20 4a 79 85 14 14 2b 90 09 05 86 c5 66 35 a9 16 aa 7c 5a 09 31 b1 62 cd 41 b5 c0 28 16 aa 4c 6e c1 c0 19 c4 42 ac 58 d3 10 0a 09 11 91 14 98 58 31 09 42 82 98 49 60 0e 41 18 30 c0 66 18 41 71 91 12 52 f4 2a 7a 2f 4a 51 b5 9a 61 08 42 31 a9 15 35 43 6a 81 60 18 82 61 55 ab 86 04 56 0c 13 23 90 c5 02 eb 8c ce c0 62 c5 4a 81 20 88 98 84 98 d8 42 4c 4c 89 c9 5b bc 89 08 52 64 42 20 d8 ec 62 04 a1 98 22 08 66 16 b5 42 33 35 b0 9a d5 ac ff d8 ac 44 2d b4 20 16 44 89 6a 81 60 36 b9 9b 1e 0c 88 59 19 60 9d c5 45 88 37 9b 11 5a 60 c5 8a 94 28 81 88 95 10 11 d1 02 53 4d 91 09 82 14 c1 8a 14 59 94 20 08 c4 90 6a 54 8d 52 c4 19 08 5b 4a f4 bf a8 46 cd 66 aa 61 62 62 25 88 6a 20 58 29 90 d9 0a 82 60 90 70 Data Ascii: mt;PLv-N\ Jy+f5\|Z1bA(LnBXX1BI`A0fAqR*z/JQaB15Cj`aUV#bJ BLL[RdB b"fB35D- Dj`6Y`E7Z`(SMY jTR[JFfabb%j X)`p
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 0f 9c d2 87 74 97 9a 68 d2 87 44 3b 06 06 06 ec f6 cb ed 76 ee f5 05 86 18 e1 b4 0d 9c 81 61 b8 c8 e4 9b 5c 7a 1d 75 12 bf 9e 4d 65 ae 5d f5 5d ad 7b ab 7b 2b ad 0e 95 a6 67 d7 d3 90 05 29 32 bd 94 3a d5 ba d6 d2 8a a6 a7 a9 d6 2e ff e1 be de fe a5 35 4e 29 b3 ee b3 5e 8f 6a 3f 73 4a b1 aa be ae e2 8b ee 52 5e 8e b5 19 17 76 c8 46 65 4d ad 3e aa 87 bd d9 64 d2 29 48 29 c4 66 36 23 88 4f a1 14 43 88 6f 76 e2 6f 44 37 3d 8c d4 26 8b aa 61 62 84 d3 90 92 2a 71 51 b1 59 2d 24 55 5c c5 66 88 a6 df 7f de bf fd 63 67 2a 96 f4 a5 ca ec f1 a8 fd 5f 75 29 52 d5 ac ff 7e 59 9f f4 e7 2e da 17 3b 06 76 08 65 6d aa 4d 0c 9b 10 29 66 6f 56 35 35 08 dd ea 51 1d 54 0b 82 20 8c 82 70 0b 5b 60 7a e8 e1 2e 44 d5 88 12 98 2d 0c 31 a2 11 13 02 23 a4 a8 06 51 b5 6a 18 45 24 9d Data Ascii: thD;va\zuMe]]{{+g)2:.5N)^j?sJR^vFeM>d)H)f6#OCovoD7=&abqQY-$U\fcg_u)R~Y.;vemM)foV55QT p[`z.D-1#QjE$
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 86 40 c3 ab 5a 31 43 fa 3a 90 7e 8a c5 e7 1f c2 db 77 ae b7 c9 ef 95 ea a4 69 31 c5 a2 9b ae 41 60 c1 39 b8 c3 9b 1e d6 81 f0 5b ac fb 40 2e 16 24 e8 04 12 0f ac 58 d1 10 78 60 c5 d7 8d 3f 3b 77 88 45 43 e2 db ce 8a 15 e1 66 45 e0 1c ac 68 58 11 f8 fa a4 ad eb 86 97 31 79 86 37 05 85 cd b6 58 f1 c0 36 89 c5 39 2e 7f 3c 09 04 1a 02 01 fa 07 81 c0 62 0c 84 fb 40 a3 c0 af 8d 40 e0 1e cc 0e 1d 85 f0 d1 47 ce ce 49 e0 eb fe 71 60 f5 c1 c7 d8 cc 41 c3 c7 b8 0b 34 8c 39 06 de dd a2 be 59 f0 fb f9 ed 8a d5 db 73 dc e6 3a 0f cc 90 8b c5 9f 81 40 20 17 0d 0d 7d 71 0d fa a2 f9 64 a5 f0 49 b8 88 45 2e 62 7d fb 7d 67 9f 04 ee f0 40 58 f7 c5 8a 66 7a 20 10 68 68 f0 f8 31 17 b9 ee de d4 d7 14 8b 80 c2 0c 1f e3 93 7d bc 11 eb 9e 21 b1 6d 23 41 92 24 bb 6a f2 cf b9 7b 6e Data Ascii: @Z1C:~wi1A`9[@.$Xx`?;wECfEhX1y7X69.<b@@GIq`A49Ys:@ }qdIE.b}}g@Xfz hh1}!m#A$j{n
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 96 31 b6 98 59 97 19 0e ee bd ab 7e bf f5 2a 4e 3a 33 6b 45 7f 73 c0 f6 df b9 dc b4 da ef f7 5f e5 5d bb 4c 93 34 92 46 bd cb 2a ee 25 14 57 82 9d e0 d0 12 3a a4 51 72 20 3d d4 1c 0e 3d b4 24 90 f6 39 5f 62 48 c1 a1 86 03 27 f4 de c1 05 6c 63 35 cb b6 a4 51 d7 8c da 8c 34 75 ef b7 ac b5 fe bc 6d db 56 6d 47 b2 d4 5a 1f 73 ed bd 0f 48 32 99 39 bb 07 73 c4 4d 66 66 66 fc 85 5b f2 89 99 99 99 f9 07 18 df 98 39 f3 32 53 b8 07 ba 87 87 99 74 a4 73 36 ac 39 47 b8 82 24 2b 6a 06 30 77 f2 46 f0 36 f8 ef 8b d6 b6 65 73 5b db ba ef e7 fd 7e 2c 66 52 81 b0 c4 92 85 96 31 30 92 c1 bc 36 33 33 1e 31 33 33 33 33 8f d0 48 e2 38 46 d9 b2 18 4a 52 95 8a 54 a0 62 fc f1 fb de e7 6e 4b ce 58 87 e3 98 02 ff ff 8f 46 e4 f3 bf bb e7 ee 7f 67 24 12 2d 23 7b 64 cb 2c 32 32 b3 f7 Data Ascii: 1Y~N:3kEs_]L4F%W:Qr ==$9_bH'lc5Q4umVmGZsH29sMfff[92Sts69G$+j0wF6es[~,fR1063313333H8FJRTbnKXFg$-#{d,22
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 91 bd 74 3d 1a 37 fa 51 79 e8 f4 11 b6 2b 6d 65 40 09 68 42 dc 66 08 5f 2e 24 21 e3 ef d9 17 02 48 9c 51 e3 a2 d3 36 f7 c1 08 cc 2b f5 7c fb e4 9b 2f b9 78 db 0a 3f 72 82 07 d2 08 19 6a 4b 1b e3 88 68 13 b4 15 db 55 1b 7d be 05 3b a0 9b 89 99 82 e3 69 e8 c6 3e 53 a8 38 c6 75 ab ef c7 e9 c4 38 4c 2f 4e 4b 3a 3c fd c3 fd de d7 5f 17 11 47 76 43 e1 49 83 a0 28 70 6f 93 03 e6 3d 07 6e 44 6c 3a 93 9b 5a cb dd 90 03 a8 a0 79 b6 5a cb 5a 2f 8a 8a 82 87 d5 d1 a4 37 00 8b a1 ea 06 0a bd 57 e9 13 c9 01 79 28 5f 23 4d d9 14 3c 88 af 9c f8 e4 e7 28 24 83 42 0e 5e 6a 21 c9 48 10 2c 60 9d 3f 54 7d 77 4f 59 7a e4 40 d2 09 cb 5b 7a 91 18 35 6a 92 24 72 d6 ac f1 2e 9d 72 8b 47 1c ba b2 60 d5 1d 37 08 9f 34 2b 05 82 5d 0d f2 27 b1 22 17 8b 5e f1 95 59 39 9e a3 63 a5 b2 50 Data Ascii: t=7Qy+me@hBf_.$!HQ6+\|/x?rjKhU};i>S8u8L/NK:<_GvCI(po=nDl:ZyZZ/7Wy(_#M<($B^j!H,`?T}wOYz@[z5j$r.rG`74+]'"^Y9cP
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 42 8d 59 63 ed 64 d7 eb de e2 c1 8c 30 10 57 d7 6a ce 88 6f a4 34 e5 44 c9 56 32 05 05 8a 9b c1 da b6 a3 36 46 6d 14 43 4d 69 92 31 32 c0 9b de bb 1f fd dc 73 ee f2 f4 b8 75 50 18 71 c7 bd 4c cc f3 87 b3 ac c1 1d 92 e2 ee 7b 0d ba ef 6a d8 d3 c6 e5 2e 83 32 a1 4e 5b 10 40 c3 d5 2c c4 68 76 f0 7d e7 0f 2f 78 76 f2 a8 33 1e 87 ad 31 ac 95 14 dc e6 0f a3 8d 52 ab 8d ac 6b 34 61 97 a2 c2 a0 46 28 d0 ec 8c de c7 cc e2 ca 9b 69 85 4b f2 d9 3e b9 d4 f6 16 b0 38 b7 89 67 a5 4c 9d 28 3c 34 29 1c 65 2f a6 37 59 d0 e2 1c ed af ea 87 81 20 26 20 04 8c 83 08 97 ca db a9 44 12 61 3a 78 28 2b 95 44 7b f5 d5 03 7c 5e 78 d3 41 17 40 78 f7 e5 f7 71 da 62 4c a8 01 47 1c c6 e9 50 17 51 0f 42 2d 5c c5 d1 23 1c 95 1c bc 82 39 43 7d b3 6e 7c f3 38 79 27 dd 0a 1c 33 7d 53 99 86 Data Ascii: BYcd0Wjo4DV26FmCMi12suPqL{j.2N[@,hv}/xv31Rk4aF(iK>8gL(<4)e/7Y & Da:x(+D{\|^xA@xqbLGPQB-\#9C}n\|8y'3}S
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 38 36 6d 66 d5 06 4f f7 a2 48 26 0a dc fe f2 7e 8f 97 af dd de 3a 5f 98 7e 8c d7 78 ea 23 44 7a b5 e9 d7 3b ec 79 52 20 c9 cc da 9a df e9 c8 ce da 58 03 3e dc 44 b2 52 4e ad e3 86 e2 ea f3 53 7d a6 ec 01 5e 6f 97 d7 be a5 04 cf ee a8 d8 7d 81 0e 10 f5 ba 4f df 31 0b 6c 4a a2 2a 0b bf d8 9c 2a 15 49 b6 88 95 70 be 7f 1b af 32 34 14 2e f2 ca f4 68 da 60 c0 00 4e 5b 35 d8 74 62 8d e0 75 98 34 fb f6 bf df be b5 5e 16 bc ed 62 a1 13 b1 34 32 29 54 c9 2e 95 b3 dc 48 70 40 6f 8f 97 30 65 4d 07 1d c2 c3 95 c8 39 1a dc 46 eb f6 1a ba 81 d1 6d 49 02 b0 90 a1 6e ce 32 35 e2 89 c0 de 7f 3f 74 22 63 2e d4 72 ce 15 1f 8d f9 3c 76 b7 c3 4d 22 8b f4 f6 9c 5b 9a ba bb 5c 2f 15 28 ee 4e 7f 72 a1 a0 dd a2 ab af 3f 67 5a ec dc 28 30 b9 b8 ea 2a 8a 98 33 c9 e8 10 1a 3f fb 9d Data Ascii: 86mfOH&~:_~x#Dz;yR X>DRNS}^o}O1lJ*Ip24.h`N[5tbu4^b42)T.Hp@o0eM9FmIn25?t"c.r<vM"[\/(Nr?gZ(03?
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 43 c0 5b 45 bb cb fc 45 74 d0 bc e7 97 b6 ee fc b6 f9 b6 bb 57 b4 92 42 04 81 9e 89 01 b6 82 c5 70 96 67 cc 99 25 ce 86 4e 71 93 5b 5b 6c 92 c3 5a fb a5 e0 3e 15 a6 93 20 27 01 b8 9c 36 9b c8 f3 c0 c0 55 c4 63 f4 be ea 9e 78 78 85 f4 62 3b d5 0c b4 f0 58 42 05 ac ed c8 20 71 ea f7 fd a7 13 1e 85 cb 00 80 6f 55 a5 47 00 21 e2 6b 83 f1 6a 47 78 3c 6c 1b e6 c7 dc f5 91 60 a2 0e ac ac bf f5 d7 f8 3a e8 6a 6b 63 9f 1c fc 9e 3f 7e fa 2f b6 ff 93 9e 93 6c 9a 2d 4f de 7e dd 52 79 63 f3 a1 60 08 d2 c6 6e 4a 9e 81 9a a4 d8 8f b7 43 bc 0d a2 47 59 93 1a 34 cf 68 a3 50 ae 7c 6b 0f 55 9d df dc ee 93 54 b0 67 3d 34 cb 62 42 d4 55 f8 d6 2d 56 3e 7a a6 91 48 fd 5f a7 09 cd f8 b0 fe b2 79 4e d0 b8 8a 29 cd 92 69 80 bc 8a de be c0 b2 60 32 f8 48 95 3d ed 2c ad d3 0d da 63 Data Ascii: C[EEtWBpg%Nq[[lZ> '6Ucxxb;XB qoUG!kjGx<l`:jkc?~/l-O~Ryc`nJCGY4hP\|kUTg=4bBU-V>zH_yN)i`2H=,c
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 1c 2f 98 1b 11 44 c7 da 49 de 26 a0 11 b1 c5 93 86 45 4a ea e4 a0 a2 75 c9 e8 a8 d4 62 db 8a 1a d6 dd f8 ba af 35 79 f3 9d 52 48 c4 93 52 48 32 ca 59 09 e6 b3 e6 53 26 4e c5 ab 4e d8 a4 66 09 16 c4 f7 34 23 9f af 79 49 ca 4a b4 bb d1 4a c0 da 27 a7 f0 21 31 31 4a 23 39 58 74 f3 dd de 40 0c 24 29 20 e7 a8 39 3c 2f d5 c3 4d 6f b1 66 4f ef 49 6f 86 91 63 7a b8 b3 48 12 8c b0 4b 13 11 e0 02 a2 21 88 4f 3a 3d 0b bd 3c e5 c9 48 6f 2a 58 c8 4c 5b 0a dc 6e 94 c1 10 d0 48 40 c9 f1 a1 41 98 85 96 3a c9 90 c1 14 28 ce 6d 27 67 c0 e5 19 ab 8c 66 fd 08 6f 75 a9 34 d5 51 98 8f 3a 7a ca 40 e8 a4 a1 66 46 61 c4 64 01 5d d0 74 19 b2 98 2a 5f 78 2f e6 b7 00 26 3f 78 3a 30 31 2c 95 68 54 18 38 fe c4 40 de 5f 4c 17 52 87 03 c7 d2 bc 19 54 8b b6 98 3d 2f 9a c9 2a 86 e9 1a 16 Data Ascii: /DI&EJub5yRHRH2YS&NNf4#yIJJ'!11J#9Xt@$) 9</MofOIoczHK!O:=<HoXL[nH@A:(m'gfou4Q:z@fFad]t_x/&?x:01,hT8@_LRT=/*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.6	50041	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	510	OUT	GET /y1nFhmpGeQt9HIXHNSZ2RZDwVxgF_9CzLInYqwaeCxSc7G8ZDkI6rm5-RcvnCOozOmE=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 186166 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4100 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	720	IN	Data Raw: 52 49 46 46 2e d7 02 00 57 45 42 50 56 50 38 4c 22 d7 02 00 2f 0d c2 49 00 4d 48 0c 80 30 6c 9b 81 8c b1 21 ff 3f 2c c9 f6 7a 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 b7 8e 93 44 93 9d bd 94 85 93 29 d6 34 fb d5 75 5d 59 5a 92 f5 42 f1 a4 dc 78 dd 16 87 34 49 97 2c d9 f6 a5 44 d1 c4 24 a7 26 49 67 c2 37 c7 68 09 4a e7 42 b9 13 49 4a a6 28 fb 47 03 17 00 6e 30 4a 92 92 72 41 d4 9a 94 14 4b 3b 67 6d 2b 64 f9 6b 1f 74 37 70 5c a0 1d fb ac 0f 5d b1 6c 27 81 6c af 32 01 03 c0 d8 9d 00 40 de 2a d9 96 40 cb b6 20 d9 81 b2 85 9c 5d ce e9 4b ca 3a 30 48 b0 25 c9 16 20 c9 b2 24 ad c4 94 24 47 62 89 63 e0 18 00 81 01 10 e0 Data Ascii: RIFF.WEBPVP8L"/IMH0l!?,zAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%RD)4u]YZBx4I,D$&Ig7hJBIJ(Gn0JrAK;gm+dkt7p\]l'l2@*@ ]K:0H% $$Gbc
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: b5 6d 6d 23 6d db b6 7d 3f 95 8e 23 85 0d 95 5c 5d a0 66 66 e6 ff bf 76 f1 12 ed 76 5c cd cc dd d1 a9 b3 ff 0a dc b6 51 32 3c c6 57 a0 18 4a b9 a1 2e 33 d3 6e 9d c3 6e 86 61 45 79 89 14 14 2b c0 40 81 20 91 49 07 ea 85 8e 87 14 26 44 48 21 65 a7 5e 20 14 33 1d c3 87 d1 31 0c 9b 09 29 a4 14 40 21 4c 40 20 05 22 a4 10 61 98 30 6c 22 0c 71 05 a0 43 07 99 20 18 c5 0d 85 89 a2 5b d1 73 51 14 75 e9 10 04 00 8a a1 a3 e8 10 d0 61 00 41 00 82 d4 a5 6e c2 90 42 10 21 18 98 cd 90 86 35 0c 89 14 52 14 00 00 21 c2 84 08 99 09 11 a2 d9 f0 66 6f 10 00 05 06 0c 20 93 9b 60 98 26 1a 00 22 8b 8e c2 21 ba 21 1d d2 21 fd 2e 93 c2 3a cc 61 d8 0c 2b ac 5e 00 c4 86 a7 98 46 07 9b 14 1d a4 51 dc 80 bd c9 04 73 18 52 48 81 c2 0a 03 42 0a 13 10 70 18 a2 8b 86 01 80 02 48 81 02 b3 Data Ascii: mm#m}?#\]ffvv\Q2<WJ.3nnaEy+@ I&DH!e^ 31)@!L@ "a0l"qC [sQuaAnB!5R!fo `&"!!!.:a+^FQsRHBpH
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: c3 32 cc 7d bd ea 58 be a7 15 1a d7 03 05 34 3d 37 3d a2 d7 ad b6 e6 68 df bf 6a d7 9c f9 a0 f2 ce ac 5b d3 a9 49 53 34 bf 9c 7d ad 75 a9 fa 1d 5d 9a b4 7a 31 0b d2 74 a3 4e cd 2f 9b df 69 1a 4d 97 a6 27 a4 d1 f8 be e1 1d 37 f4 88 1e 61 48 21 18 82 04 61 b9 d0 d7 43 3d 9e f8 f7 13 fd 67 f8 fe e7 53 7d 7f ec e7 0d bf 9e de d7 99 ff 3c f1 9f a7 2b 7b fd 78 ba 0c fe f6 48 5f 1f 0b 86 82 0a 7c a5 cc d5 28 f5 72 5b a7 b9 cc 85 cb 6d bd aa 75 9d 7d aa 75 9d eb 8e ba d4 4b ad 6b ad bb 5a 57 ea 5a 79 67 ae f3 cc 57 53 99 f8 a8 f2 c1 e4 17 f5 52 eb 5c fd 6a e2 83 ca 5b 93 1b bc 83 e1 86 17 40 03 0d 08 2b a4 b0 f0 29 31 00 5c cd 1e 14 19 ea a6 bb ba 4c 26 14 d8 cd d5 ec 06 60 c8 bb 81 19 d0 cc 72 01 85 0d 75 c3 05 b3 01 60 16 86 37 19 5a 86 21 6f 52 17 0a 6f f1 39 Data Ascii: 2}X4=7=hj[IS4}u]z1tN/iM'7aH!aC=gS}<+{xH_\|(r[mu}uKkZWZygWSR\j[@+)1\L&`ru`7Z!oRo9
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: ca 26 5d d6 7a d8 25 a4 49 97 6b bd da 25 2b dd 76 93 5e 89 ca 7d e6 f7 3d cd 3b 21 6f d2 25 7c be 56 ba 34 09 59 2b 5d ba b7 a2 f6 59 3f fc 76 bc 35 6a b5 f9 f8 be 1e 44 46 10 d6 71 fc fa c7 4b bf f4 82 20 08 be 34 7f 82 4f f8 2d 5c f8 03 de f9 97 dd 91 e9 92 b2 56 be 9f 2f fc 74 a4 4b 54 c2 ee b6 f6 cd d7 dd 4d 33 6e de ec f2 cb 23 21 5d 36 f1 cc 33 b6 4d ba 34 5f 9d 99 c7 0a f1 6a 97 26 e1 e3 90 ff 49 93 26 4d ee 6b bf c9 9b df 9b fd 3d ee fe a7 b2 61 b3 0c b9 c7 97 82 b0 c6 b1 f0 41 d6 f3 e9 c7 0d 0c df 47 25 7c 11 95 cd 3b cf 95 2e dd cd 2f 8f b7 ba 57 d3 b6 cb 91 69 d2 fc a5 c9 9f 7b 36 69 5e 7d df 6b 45 36 69 f2 d3 23 dd 71 cd 6c 12 f2 58 ef 35 69 b2 49 54 9a 77 6e eb 30 44 33 4d 8e 4c 7a 27 f0 9f ed 95 67 64 13 41 58 f3 ec 23 92 8f a4 9c eb eb 90 Data Ascii: &]z%Ik%+v^}=;!o%\|V4Y+]Y?v5jDFqK 4O-\V/tKTM3n#!]63M4_j&I&Mk=aAG%\|;./Wi{6i^}kE6i#qlX5iITwn0D3MLz'gdAX#
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 74 65 98 78 12 6c 5b b6 6d db 6a 8a d5 36 36 7e 96 20 0d 24 ca cb 97 1f 25 0c 31 72 e0 c3 7b f7 ec d9 83 0d db 48 8a 7c fc 15 33 d6 fe b0 ed 5f 27 a7 fd bf fb 29 2f 9d 99 9d 59 d7 6c 92 8d 07 0d 12 25 10 68 71 27 a4 14 77 87 e2 4e 68 a1 86 cb 1b ab e0 b4 50 08 ee 14 d7 10 d7 0d 31 92 6c 92 75 1f 7d c9 53 8e e3 b5 52 e3 cd df 7a 25 db 56 6d db 76 4a a9 7d cc 39 d7 de 87 c4 cc cc cc 0c df 81 96 2c fd 00 33 bb ec c9 27 8b 99 c1 7c cc cc fc 24 9d 7b cf 5e 6b 8e d1 5b e5 6b db b6 6b 4b 92 9c 31 e6 da e7 be 67 66 ee e6 c1 0b 9c 73 ce a4 6c f8 09 7c 03 74 a8 10 39 f9 04 7c 49 89 90 21 73 ce 39 4d 47 78 98 b9 d9 7b f7 ec 3d 03 12 23 49 8e a2 18 2d c8 93 8d e0 bc fd f2 c3 ff 4f b5 a5 c6 de e7 fb ad aa b5 b6 ef e3 d2 e7 9c 76 83 6e dc 5d 1a 97 40 42 3c 99 90 d1 eb Data Ascii: texl[mj66~ $%1r{H\|3_')/Yl%hq'wNhP1lu}SRz%VmvJ}9,3'\|${^k[kkK1gfsl\|t9\|I!s9MGx{=#I-Ovn]@B<
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: b6 a1 57 62 92 7b 4a 57 ec cd 75 e8 9e 0b 43 75 48 52 b8 f7 a5 77 65 9b ef da 1a e6 d2 42 cf 05 46 97 f2 d5 ee eb 7b ff f4 c2 7b 55 2b df 8c 9f ea 1c 3f 23 97 9d 5b 19 7c c1 cf b3 c8 bd a5 65 ad 87 c2 ea a2 2c 19 f4 da 3e 2e cc a1 29 a1 e8 6b f1 d2 ae 24 5b 26 20 44 5e 09 56 9b 6b d4 ce f0 dc d7 33 52 ad a7 9f dd 8a 34 8a a5 9c 70 64 5b 17 bd 7d 6f b5 52 9b b7 7a cf 51 2d 40 c5 23 e3 f7 ee dd 56 b5 06 23 0f ae 35 91 2e fa 5a de c2 bd 42 4c d5 2a db f6 f7 9b 76 73 5d e7 29 a9 37 62 05 82 c2 b8 67 21 83 33 ed 98 e5 ec 3d a1 cd e6 8b 69 cb 58 eb ef d1 c3 fc 31 73 cb a6 2a a4 c4 25 30 ac 17 7a eb be f7 f9 f8 d7 d3 de f5 2c 51 42 39 4d bd 3c d0 2b 11 96 db a0 f9 16 45 37 ef 9d ad 37 0f e0 22 70 3a 66 45 61 80 d5 ae 6a ee 3d 54 8c 8b 0c ae a3 59 5a 30 79 69 af Data Ascii: Wb{JWuCuHRweBF{{U+?#[\|e,>.)k$[& D^Vk3R4pd[}oRzQ-@#V#5.ZBLvs])7bg!3=iX1s%0z,QB9M<+E77"p:fEaj=TYZ0yi
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 90 f8 76 bf 48 36 51 32 9a ca 86 63 69 f3 cd df 75 fa 06 a1 90 09 e5 77 ed d7 01 38 3c cc 39 9f 91 7b c8 97 79 d7 7d c2 84 ce 1e 27 c4 f2 c8 d0 96 d4 77 5c d4 8a 61 7b 77 c9 b3 2c 9a bd ae dd 95 8d 3b b6 5c e3 48 8d b3 61 af 5c bd 2c f7 d9 8f 7f 70 fb d7 7f 37 37 84 34 c3 cb 0c 2c 59 da 8a af f5 9e e6 84 1f b6 be 78 bf 49 2a 5c 69 8b ee a3 79 06 55 0c a5 21 b1 4d ea 50 dc 76 63 92 ea 3c 39 de ad 06 9b 8c bc 6d 54 42 f3 71 af 44 ed b8 3f b8 05 9a 61 e6 a6 84 71 b5 2b 70 d5 82 0b b6 d6 3b 57 aa f6 d4 34 28 c1 ce 47 02 d2 c2 8f af fc 4a 19 40 b6 2f c3 1d 06 ce 1a d8 42 a4 dc a0 8e ee a8 a4 14 6d ad 8d 01 49 f3 9b 04 27 f4 58 19 d6 cf d6 6f e6 4a 9f bf 78 e3 4b 40 e0 54 4b 35 28 02 e4 dd 92 0f 6e 3a 1a 07 4f 80 8e 56 6b ca 54 89 16 66 6b bf d8 0e 35 38 2e b4 Data Ascii: vH6Q2ciuw8<9{y}'w\a{w,;\Ha\,p774,YxI*\iyU!MPvc<9mTBqD?aq+p;W4(GJ@/BmI'XoJxK@TK5(n:OVkTfk58.
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: a3 49 fd af ff b1 ab ff f9 f2 80 5c da 2c 65 e6 32 b5 8c 5f d0 6c 7b 53 e2 c4 22 66 87 0e ca 2c d5 c7 7c b4 e4 5d f8 f6 40 36 1c b8 0b 8d 99 b6 2c 52 ec 81 2e 2e 55 30 ef 85 88 b1 41 42 49 d4 85 2e bb 38 a3 29 68 e8 de ba 81 c0 a3 5d 5b e3 96 8c 91 61 f7 26 dc b1 74 1f 9f 43 e3 90 c3 0f 99 19 06 97 37 9b 73 7b ed f1 73 ef 3d 7e 3f ba da 62 6c 9e 3e 5f bf 2f 07 e3 5b 4d dc 42 ba ba ad b2 a1 bc 6e a3 2d dc dd 14 2a ed 91 d3 cc 5b a2 73 b4 3d a1 9f 9b 2f 0c 46 f0 42 42 9d 9a e2 9b 88 9b 5f fe 06 ee 69 c6 da b5 1e 56 8e 0f f5 8e fd 18 90 8a 11 e5 a8 8a 43 06 44 a6 b1 ea 3b 0a 3b 6d 62 c0 dc b4 8c 64 bf fc f9 3d da 3e 63 bf da de 75 50 7a 2e f7 ed 98 5f cf fe e0 ed 5f a1 65 66 d6 08 3a cb db 21 02 78 d3 4d 61 14 b2 77 bf f2 d4 e3 17 1c fb 9a 99 0c ee 29 ed 98 Data Ascii: I\,e2_l{S"f,\|]@6,R..U0ABI.8)h][a&tC7s{s=~?bl>_/[MBn-*[s=/FBB_iVCD;;mbd=>cuPz.__ef:!xMaw)
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 00 7e 71 a3 70 63 49 5a 02 46 2f b3 c5 24 68 dd fc d0 80 99 38 66 5d 9c a6 d9 c2 76 fb fd 63 ef d6 e4 02 85 8a 07 07 44 c4 7d 09 72 73 d1 6d 95 05 9d e6 d6 e4 59 de 91 8b 9b b7 fb 6f f7 1b a6 96 44 48 3d 7f f3 a7 63 1f ec 0b 7f aa f2 bd c7 6d cf 2e ce e7 80 ef b3 5c ff ba 39 ab 09 6c 30 4b 9b 46 23 70 86 e0 f6 98 17 22 97 51 5b f6 91 fd a1 36 46 a5 6e 1a f6 0d bf 5f df bc d0 85 c1 6f 2d 8d 50 d1 d2 e7 2f 7d 2f 38 56 e3 2c 19 8a 90 c3 1b d0 b1 0c 69 b2 a5 89 da 54 ae 3c 64 d5 06 e2 16 62 13 5d 7a 4e 28 8a 29 d1 42 70 38 df d6 cd 1b 35 ca a1 e5 0a 3d 4e 31 4d 28 0e a5 e5 d2 c4 35 f5 e9 03 47 bf aa 15 11 e5 b6 c1 20 a7 4c dc cc ba e0 b0 d9 ea bd d8 18 53 53 6c 62 6f 6a 7c 2b 5b ef aa d5 fd de d7 7e 93 ea 5b c1 7f f8 9e 07 08 45 b9 74 56 72 62 39 75 6f 76 4c Data Ascii: ~qpcIZF/$h8f]vcD}rsmYoDH=cm.\9l0KF#p"Q[6Fn_o-P/}/8V,iT<db]zN()Bp85=N1M(5G LSSlboj\|+[~[EtVrb9uovL
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 2d f1 33 ee a1 b9 4a d0 34 98 c7 af b0 8d 29 6d b5 46 08 6d b4 2d 6b ee 31 50 d5 92 07 69 d3 4c c3 75 b8 e3 4a fc 45 cf e1 36 ea 98 f8 1b 19 f6 74 b8 77 e3 05 f0 54 04 66 6e d2 ab 71 9d f7 59 8c f6 5d bf 7b 77 c2 1c 00 4f d1 2e 6b 5a 5b 05 2f b7 22 63 c3 f0 bc 73 bc d0 72 bf c0 b2 7b 30 ae 44 b0 a1 b7 09 53 df 61 ec 68 3c aa d8 30 d3 c9 0b 72 6c 22 59 2e 74 f2 e1 ef fb 83 ba ec 9c d2 0c 59 3d c0 58 8f c6 6c 60 e3 2b 47 eb 21 60 df 98 be 6f b1 ad 28 14 21 14 b6 6d 6d b6 b8 1b 28 9d 21 e0 71 2a e7 c4 51 59 bd 34 2d c2 02 80 a6 4d fb 36 b3 99 d2 84 be 5d 8a 0f f0 7a fb e5 64 17 36 c1 75 ff 44 eb 5b 50 9c 2f b7 4d e1 ee 5e df ff be ad a1 f1 c7 80 58 84 61 86 c8 67 a9 c5 ba 6c 5c c2 66 62 52 6f 78 13 e8 46 9b 97 5b 1a bc f3 34 e6 36 56 68 7e 61 13 e6 9b 21 94 Data Ascii: -3J4)mFm-k1PiLuJE6twTfnqY]{wO.kZ[/"csr{0DSah<0rl"Y.tY=Xl`+G!`o(!mm(!q*QY4-M6]zd6uD[P/M^Xagl\fbRoxF[46Vh~a!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.6	50042	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1082	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:50 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:50 GMT Server: fife Content-Length: 9990 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	733	IN	Data Raw: 52 49 46 46 fe 26 00 00 57 45 42 50 56 50 38 4c f2 26 00 00 2f ff c0 3f 10 09 58 92 e4 d6 6d 6a b1 02 f8 58 dd ff c2 02 21 d2 76 f2 1d d1 ff 09 c0 bf 98 99 94 e9 95 31 17 73 31 87 fd 1c 77 f7 13 90 62 f6 71 80 74 c4 d5 c7 a6 31 1e ee dd b7 e8 99 b5 5b 12 96 2b 52 6d 65 46 31 2f b5 66 99 c6 b6 46 92 ee 1c 63 53 c4 35 e7 74 3e 85 65 85 11 11 00 0e 90 02 00 1f 83 14 f3 37 29 e2 ea 7d 83 d1 17 64 5c 5d c8 b5 e8 80 0a 44 f1 1e 19 70 b3 5c a8 5a cd ec 14 76 e8 98 a1 be e3 e5 ed a7 7e ed c2 6d 24 c9 ae d2 01 a0 b5 e6 8a fc 83 c3 c4 e7 bf e3 1e ca 46 10 49 4a 36 01 43 00 50 03 d8 3f 97 01 1c 86 6d 24 49 4e fa b5 44 58 e4 1f 1b 51 50 58 fd 9f 00 fc d3 f4 27 29 c3 78 e9 e7 8f 98 31 43 e8 32 73 71 01 58 78 3a cc 5c 18 5c b9 cb c2 37 73 0e e1 f2 38 8a 10 76 e3 02 70 Data Ascii: RIFF&WEBPVP8L&/?XmjX!v1s1wbqt1[+RmeF1/fFcS5t>e7)}d\]Dp\Zv~m$FIJ6CP?m$INDXQPX')x1C2sqXx:\\7s8vp
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 99 19 dc dd 1d 4a a7 72 3a 7a 4a 2a ab a8 1c 8e 80 e3 70 ab ac f3 03 70 77 87 2d 91 5f be 47 0a 2c 00 04 e8 bc 6f db b6 6d 24 0d d1 5e b5 bd c6 ee c5 dd 9a 6d 7b c9 b6 d1 6c db a1 6c 2b 71 f3 cc f2 74 42 51 5c 02 a6 5f 70 42 c0 ef fa ff 7e df ff e3 41 fe e3 81 24 43 0c ca af 3a bc e9 dc fd b5 2f 17 1a ef fc bf 67 27 c6 3d 98 23 81 53 41 90 c5 91 9e 3b a0 33 e0 6a fc 70 44 0f 72 74 8e ec b5 de ca 1f 3a 05 80 f5 3a 28 9c 0f 86 f5 33 0a 77 e1 14 2b 7d e2 3e 28 8e 54 76 fd 5f 9c e2 c9 99 72 ab 28 dc 36 5e 57 1c 4b 41 18 9f 0b 97 d2 b9 0f 01 36 45 8e f6 55 13 27 76 1e f1 5d 2d 11 f0 a2 af e0 8a fc bd 60 37 de 1d 59 e3 38 0a c8 19 95 ef 8e a3 f5 66 c8 57 a6 93 2a dd 94 01 aa 2a 20 e9 55 b3 51 8c d9 14 65 ef cd 71 25 80 40 60 d1 99 c2 72 85 80 d9 7d 03 cd fc 52 Data Ascii: Jr:zJppw-_G,om$^m{ll+qtBQ\_pB~A$C:/g'=#SA;3jpDrt::(3w+}>(Tv_r(6^WKA6EU'v]-`7Y8fW* UQeq%@`r}R
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 47 f1 31 c7 ee 1a 2a 0a b2 9b 41 6b 22 80 63 e2 95 22 05 03 9a 80 b7 fb c4 9c 02 21 5d a6 05 a9 b7 e4 da 8a 12 ca 6c dd 5d 4f b1 d2 ea 54 1b a4 c9 aa 50 99 54 ee 61 1c 33 90 12 d2 74 a5 76 8d b0 34 65 8d 62 1a 26 7a 3a 80 47 69 0f 18 a3 a2 bc d8 6e 08 48 59 4a 4e b0 6a 98 9f 2b 69 9d 0b 42 69 8a 51 ec 52 12 a7 20 87 a0 ed c0 0a fc 90 fa 7d 68 c5 44 45 38 09 7c 24 8f 88 1e 9c cf b1 28 a4 29 d7 16 10 d7 c9 75 59 a1 c6 5c 8b 67 75 95 7a 18 91 06 ad 64 27 02 b6 63 16 96 42 42 43 20 31 19 14 0c 06 17 33 8f a1 f7 1d 46 65 35 d7 56 55 64 f6 79 8b 6c c7 ca 51 cb 35 2e 51 64 93 f0 87 52 0e 72 d9 a7 32 5c d1 6c 2d e9 da 90 9d d2 49 d1 f6 8f 59 18 a0 43 53 08 25 d3 4c 58 7c b7 1f 4c 02 19 63 30 ce 17 9c af 20 42 a3 11 02 b0 0b 35 e4 da 79 20 eb 52 b4 42 9a 54 c2 59 Data Ascii: G1*Ak"c"!]l]OTPTa3tv4eb&z:GinHYJNj+iBiQR }hDE8\|$()uY\guzd'cBBC 13Fe5VUdylQ5.QdRr2\l-IYCS%LX\|Lc0 B5y RBTY
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 5b cf 62 03 5e 09 31 2d 07 61 5d 67 1d 62 e2 c4 fc 7e 7b 50 13 14 86 b5 cb 2c 1b d3 09 f9 94 78 b9 16 ce 8c 8b 85 74 13 2c d9 b5 4b 11 a9 74 a4 1a 90 ce 62 45 b2 eb d7 b1 95 90 ea 04 1b 8b 40 fc 56 ad a1 b5 11 c2 6b 9e 0a 04 28 23 ee d9 b0 11 7b 86 90 e4 75 b2 11 14 11 b8 97 a3 b1 d3 8d 15 04 43 a1 6d 85 57 ad 6a 12 f3 13 d6 fc 6f 60 1f 6c a4 c4 29 01 c0 53 1c 72 fb ae 15 42 3b 64 35 67 15 92 e6 d8 12 99 d7 83 31 00 75 41 b3 1b 53 0c 43 79 9d ec 20 46 b1 02 ed 2a 72 d1 c5 40 ac 23 e6 52 d6 91 e6 5a a5 19 bc e4 0d 7b 9e 5b 5f c2 1f 34 f4 e8 98 63 77 3d 0d 22 62 55 d9 c6 cd 64 37 5e 02 a4 89 19 9a 94 6a c6 4e e2 42 96 a0 5a 20 5d 21 c7 11 75 82 b3 15 91 84 2e 92 e0 12 92 fa dd c0 9e 3f fd 25 53 13 32 4c 42 0e d9 21 dc 49 ee 21 2a 56 76 14 cb b3 4f b0 d2 24 Data Ascii: [b^1-a]gb~{P,xt,KtbE@Vk(#{uCmWjo`l)SrB;d5g1uASCy Fr@#RZ{[_4cw="bUd7^jNBZ ]!u.?%S2LB!I!VvO$
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 26 be ba ee 3b cd b9 36 9d 5c 5b 81 d4 95 56 a8 48 a1 e2 2a d3 4f 55 a0 95 46 bf 1a d4 ed bb 6b e7 93 f7 12 82 cc 0b 4a 2c 7b 2e 5f 38 6c f8 6f 79 27 0c ec 91 59 83 5c 4f 25 92 17 5b 31 4f ae f5 83 71 67 f1 b3 11 82 5c 0f 92 30 fa df 2c 8e 40 43 ef a8 71 77 8d 90 52 ee 33 89 44 a5 42 82 4f ed 2a fe 19 7a 22 cd 15 29 d5 c6 fb a5 9b 6b 5d 88 aa 90 68 81 50 b4 c6 4a 2e 6e 52 b7 03 0e 92 08 75 e2 ce fe 47 24 68 3b 60 f5 b6 dd b5 c5 12 62 74 48 07 52 0c 03 b1 48 f8 f5 d8 5f da b4 92 b7 83 27 df 0a c1 d1 08 c9 0a 84 66 48 31 30 eb 52 78 57 14 59 42 23 a4 b7 dc a2 b5 be c3 91 66 af 14 d9 11 ba 78 10 2e 9d 72 3b 0e 76 05 72 f5 01 72 e9 fc e0 3f 50 8e 07 95 bc 94 af 4c 50 67 8f a9 10 3f bd fc 0e 50 a9 aa 2f d2 eb 5b 84 70 7a 3a bb f3 1f 83 a0 d5 3d c8 4c 87 d6 dd Data Ascii: &;6\[VHOUFkJ,{._8loy'Y\O%[1Oqg\0,@CqwR3DBOz")k]hPJ.nRuG$h;`btHRH_'fH10RxWYB#fx.r;vrr?PLPg?P/[pz:=L
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: af 55 a9 b4 32 45 c3 bc 10 4a dd 12 21 a2 0a 7d 7e 2f 2a 0b 66 d1 e0 98 ad 41 29 97 b3 50 83 10 5c 74 26 41 9a 86 e6 fc 6b 8e 7f ca 10 dc 4d e0 80 06 23 ed 1d a8 a1 35 89 f9 20 45 3f 57 ad 44 ae 0c e2 a9 0d 64 60 7f 90 c5 60 14 48 45 d1 2b e7 97 ca 92 f5 a7 26 8f f1 15 a1 9b c8 2d b2 13 63 a5 04 36 08 36 b6 67 3e d3 c2 11 93 c4 15 5d f7 94 21 21 06 c9 91 2d 0a de a4 ff 19 f2 fc 56 4a e7 c7 15 ee bf d2 8e b1 71 21 93 ac 50 04 a0 bc f2 4e f9 c8 0d 79 5b 0d 59 83 53 4a 16 f2 38 d9 3e a4 a3 3b 92 31 db 3f 3f ba 6b 3e 30 99 9a 49 e8 fd fd 52 e3 00 f7 9b a9 5a 1e c5 36 37 c8 f3 f9 8e 6c 44 19 47 df b1 ce 5e 48 78 2a af d8 b5 15 57 30 c8 77 56 f0 43 05 52 b3 c2 2e 15 67 13 32 a3 28 2a a3 2c 14 bc 65 3f 7f 76 dd fa 92 fb f0 a9 6a 07 ea ac f9 ee e8 da 42 ba f5 f3 Data Ascii: U2EJ!}~/fA)P\t&AkM#5 E?WDd``HE+&-c66g>]!!-VJq!PNy[YSJ8>;1??k>0IRZ67lDG^HxW0wVCR.g2(*,e?vjB
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 41 81 0a fd 16 36 27 b6 1b 38 ef 21 3b 75 4e b1 3d 4b d3 40 8e 60 23 43 2a 21 96 00 97 00 f7 57 36 47 81 83 20 10 c8 1a 83 70 e5 97 9e 75 f5 e7 9e 76 b6 58 13 76 93 dd 4a 17 c5 c7 71 56 2f 40 b7 bc f4 e4 cd 1b 91 b7 ac 2a e4 d5 dd ad 90 50 93 15 8e 95 f6 35 7e ea 2c 67 79 3c 94 20 15 6e 0d 2a 50 47 b0 4b 64 c7 9a 5d f9 e9 b9 8e 78 e6 24 53 b1 87 ff df 06 ae fa b1 04 07 0c 24 e0 c0 bd c9 a2 11 41 da ca b4 22 47 71 cf e5 18 ba da 0b 4f 39 45 64 df 92 ec de 2a bf fe 6f bb 64 af 52 16 d5 47 b6 94 61 ba 38 d1 e8 29 4a 48 5b a5 e1 a9 f5 fc dd 59 83 55 7a 81 c1 7e 6e cd 01 85 b6 d8 5d c0 85 ce cc 9c ed f2 99 76 18 63 56 12 8b 60 0b 19 01 9a 22 d9 23 95 87 25 bd 58 44 91 5e a6 a6 9b 9d d8 91 ab bc f4 82 f3 ad e4 4b 96 7d 5f fd d9 f0 ab ff 76 7b 10 1a 6f 72 5c 4e Data Ascii: A6'8!;uN=K@`#C!W6G puvXvJqV/@P5~,gy< nPGKd]x$S$A"GqO9EdodRGa8)JH[YUz~n]vcV`"#%XD^K}_v{or\N
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: df 29 c1 a5 e4 f5 1b d0 91 9b 46 34 58 4d 85 b8 56 46 c4 41 56 36 71 f6 fa cb 51 cf 17 10 2d e0 eb ab 85 bf 5e 9d f0 13 f0 77 b5 80 90 eb e7 f1 c9 77 38 f3 e4 f0 fa 9c 38 9e 63 f3 c3 20 3c 6e db 49 f2 78 9c 4a 36 38 38 b6 5f fa fb f8 f2 fd 94 09 dc 9e c6 21 a4 24 5c 08 52 10 43 4a 4b 83 30 63 fb c7 96 e0 c7 78 dc 8e 83 ed e5 b6 6d 0f 5e 7d 14 d9 36 7b 43 e9 29 a5 07 89 2c 94 6d 75 14 b9 7d b4 8d c3 f7 5b 70 d3 a9 8b a3 35 02 1e 08 88 10 f0 6d f5 5f 2d fd ed 84 40 40 d8 f0 1b c6 05 04 ae 3e c0 ce 13 f0 ab f9 55 37 35 0f b6 2d 06 09 0f 52 f8 1b 4e e4 38 b1 8c c9 74 27 43 76 fc 54 57 05 84 f6 a1 30 e1 84 fc fb 9c 67 27 cc 4f 98 4e b8 3f bf 7a 5e dc fd 91 f1 e1 f1 e5 02 82 df 0f df ff e7 8f ce 1e fb db 26 31 35 13 c4 86 44 da 51 09 e3 c5 4e 29 44 da 31 4a 19 Data Ascii: )F4XMVFAV6qQ-^ww88c <nIxJ688_!$\RCJK0cxm^}6{C),mu}[p5m_-@@>U75-RN8t'CvTW0g'ON?z^&15DQN)D1J
2024-04-19 14:06:50 UTC	472	IN	Data Raw: 81 e4 ec ab 2c 24 41 c5 b6 e5 6d ea c2 8b d6 b3 bb 2e e6 af 17 bd 0d 8b b3 37 65 14 5a cf ee ba 92 6b 2d a4 98 a6 ea 26 63 7b 13 42 23 56 b5 bb 76 21 24 e5 12 de cf 4a 6f 53 07 97 e4 81 f9 c3 24 e1 94 99 59 cb b5 51 2b b2 a5 bd 4c 5d c5 ee da 19 b5 9e ee 48 72 c0 90 1e 75 94 c0 09 69 32 83 5b 66 56 8b ec c2 2f ba 20 46 c7 0b cd 40 d1 6a e5 46 28 4a ec 5a 88 3d ea 92 24 c8 06 ab 8b fb 77 53 62 a7 da 91 da 2b 56 97 a6 22 3b 24 d7 aa 87 25 f0 26 f4 33 95 ac 52 14 45 b6 46 34 59 f9 90 e1 ab ec 67 88 ba 09 2d 37 58 d9 df 0e 15 b0 92 12 26 d2 42 50 e0 59 b5 42 e8 c3 44 63 56 ac a6 42 c8 dd 5b de 04 93 fc 58 24 1c 18 25 84 07 41 05 c4 b1 5a 02 52 02 90 c0 37 88 c7 9e 84 f1 da 39 9a 98 4d cb 40 52 57 8d 70 ff 60 52 2d 90 18 0b 41 58 b2 a1 58 ab b5 4e 3d a7 cf 88 Data Ascii: ,$Am.7eZk-&c{B#Vv!$JoS$YQ+L]Hrui2[fV/ F@jF(JZ=$wSb+V";$%&3REF4Yg-7X&BPYBDcVB[X$%AZR79M@RWp`R-AXXN=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.6	50043	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	1081	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8966 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:30:58 GMT Expires: Sat, 20 Apr 2024 13:30:58 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2152 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	722	IN	Data Raw: 52 49 46 46 fe 22 00 00 57 45 42 50 56 50 38 4c f1 22 00 00 2f ff c0 3f 00 09 48 92 e4 b6 91 a2 1a 20 c6 a0 f7 ff 0f 96 01 d7 5f 23 fa 3f 01 fc 23 7b a2 9f c7 07 1f 7c e8 59 1f b4 47 27 47 59 9f a7 4d 61 48 21 bb f7 38 82 3c 48 ba f0 40 01 ba 11 01 d2 2d 49 77 a2 0f 3d c9 8c 10 b2 81 ee 1e 91 09 11 48 07 d3 31 3a 9e 2c 56 f4 5a cf d4 06 40 32 b0 46 a7 06 ec 97 aa 32 33 9f f9 dc e4 57 51 95 b9 d6 1e 1c 0b a8 aa cc 4d 37 6b c3 c7 00 78 4d ca 13 c7 e4 cf ba 80 23 db 76 23 e5 e0 7f fd 9a 81 8f f7 a0 fd af 8e 90 5c 6a a9 23 48 1d 47 b2 ad 2a 8d 7f e7 20 6b ea e6 1f 13 16 82 b3 a4 dc 48 92 e4 28 89 3e 7d 83 d6 d0 ff 7f 1d 1e 6e ff 27 40 82 ff e3 4f e3 fa 6e ee eb 4e ac b5 07 cc b7 bb 76 b6 36 24 5b 28 76 72 42 b6 98 66 2e e7 06 e7 00 68 bf dd 47 34 b5 41 30 6b Data Ascii: RIFF"WEBPVP8L"/?H _#?#{\|YG'GYMaH!8<H@-Iw=H1:,VZ@2F23WQM7kxM#v#\j#HG* kH(>}n'@OnNv6$[(vrBf.hG4A0k
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 33 33 6f b4 66 76 44 31 33 33 43 c4 cc be cc cc 34 2c ee ee 73 8c 67 8e 34 dd 7d cd fe 4d 37 da ec 96 aa dd 06 99 99 3d d5 5b aa b2 cc 8e 5c b5 28 e3 52 b6 91 8c c7 cc ec 29 19 bb ca 21 d3 2d 99 f3 8d cc cc 8c 32 ca 90 31 4f 42 8d b6 ad 43 92 74 ee fb 22 a3 18 15 3d b6 6d db b6 6d db b6 e7 9f 6d db b6 6d db b6 23 57 46 32 e2 7b 74 6c db 56 6d 2b 63 ac bd f7 39 17 77 77 77 0b 89 88 dd 33 c8 28 80 c5 1e 52 03 ea e0 ee ee 96 ba bb c3 f3 f7 fe 95 b3 57 4c 40 03 7c 94 ff 6f ed ff 5b fb ff 66 58 b1 4f dd df 7a 2b 50 2e 50 94 a0 22 a8 10 0c 72 9b 41 3e 9d 41 06 83 dc 66 90 4f 67 90 c1 20 9f 0b 07 42 c3 29 e7 39 be 62 9a a3 b4 87 5c af 2e 7a e5 07 17 dc ff 9e 12 b4 83 19 bb 51 06 99 13 6d 21 83 01 e4 36 83 cc 89 b6 90 c1 00 72 9b 41 e6 44 5b c8 60 0b d9 16 62 cc Data Ascii: 33ofvD133C4,sg4}M7=[\(R)!-21OBCt"=mmmm#WF2{tlVm+c9www3(RWL@\|o[fXOz+P.P"rA>AfOg B)9b\.zQm!6rAD[`b
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 8e 02 20 8d 77 f9 f6 d1 e5 7f 18 6f c8 1c 8f 8f 4b 53 19 4d 8c 77 6b 6a 3c 9a 9c 52 df cd 70 54 3c 7d 6a 99 b7 df 7d 43 8a d4 d5 4e 23 13 4f c6 91 b7 e5 9b c6 ed bb 9a 19 af 36 e5 29 a9 81 95 2e 30 96 1f 8e a8 dc 44 26 fe 62 59 0c 92 66 ea c7 7c 43 fb 28 11 a1 3a 68 95 6b fb 13 51 8f 42 64 2e f8 a8 34 54 11 44 98 6e 76 67 dc 7f 31 f9 12 2b 87 74 24 b8 86 80 60 cf 37 04 ba d9 ef d1 ec 75 21 23 c1 0d 2f 11 26 c8 84 0d eb fa cd 78 b5 09 46 cc 2e 76 52 a1 87 68 4b ae 7a cb 34 cf 92 d1 6e 6e 81 18 f5 ec fd 16 57 bd a2 5d fd e6 31 9f 1e 0d 97 37 63 b3 f6 bf ae fa 4d df 79 1e 7a 2e f2 72 41 2d b1 e0 96 7d f3 33 71 cc 13 40 51 2c bd ec 8d fa 88 50 d3 30 e9 f3 c7 55 a5 16 e9 d8 4c 31 ab 4d b8 9c 53 cd d8 45 2d 40 cc b8 7c df e3 fa 04 da cb ec 32 5b fe 44 3c 80 2b Data Ascii: woKSMwkj<RpT<}j}CN#O6).0D&bYf\|C(:hkQBd.4TDnvg1+t$`7u!#/&xF.vRhKz4nnW]17cMyz.rA-}3q@Q,P0UL1MSE-@\|2[D<+
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: dc 5e 82 da 62 b2 23 8d 30 23 46 85 13 45 02 91 44 92 2c 09 52 8b 37 e2 78 c0 24 e6 fb cf 2e 0c 27 db fa 91 d5 b2 93 b8 1f 4b 70 00 72 90 92 31 a5 03 01 c6 7d 13 04 33 1f 8f 14 a5 f6 bd e9 37 81 a0 a6 d5 79 a0 01 8b 90 86 38 59 24 10 49 20 48 22 a9 d0 3e e1 e1 2d bf ee db 9c ef bd e5 61 9b 4c 71 66 c9 77 33 c9 7a 50 d8 2c 25 f2 cf 08 40 f1 3f 50 f5 3b 04 33 ad 5d de 4d 4d c2 ca 99 2b c1 e0 57 f9 31 95 c8 34 4e d9 48 02 48 40 41 55 13 a5 00 25 12 91 26 98 3c ee ee 9c 82 4b ee f5 e9 74 3f 1f 2e c5 ee 73 aa 9a 33 67 23 b3 b2 2b a9 63 60 8a c7 93 d5 ff 42 30 dd fc 83 1f a8 05 71 da c5 1a 41 97 cb 11 52 9a 8a 38 b9 63 0d 02 91 d0 0a 4a 41 14 cb ab 20 55 8a 4f b0 af c8 e7 0b 65 11 0d c4 a9 a6 35 f3 75 87 6c 16 87 94 3c 0f 66 a0 f8 4e b8 fa 29 49 50 30 15 a7 5b Data Ascii: ^b#0#FED,R7x$.'Kpr1}37y8Y$I H">-aLqfw3zP,%@?P;3]MM+W14NHH@AU%&<Kt?.s3g#+c`B0qAR8cJA UOe5ul<fN)IP0[
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 83 d1 89 bc 67 99 72 43 1c d5 f5 e9 0c 47 dd ef d9 f5 b4 74 00 84 55 e6 da b6 e4 aa 6d df cd 16 08 0c 34 60 92 d1 9b 34 d8 20 7c 5b a3 f5 43 7f 30 63 88 64 e9 86 1e 53 0c 0f 7b c7 d6 5e f1 97 7a d7 53 07 64 01 98 41 05 a1 65 02 5c 42 01 79 8d b3 e2 17 be e6 bc 50 df eb 3e b6 1c 5a c5 e3 21 ac 55 89 77 de c1 1e 6f 59 f4 f7 88 5a 85 81 06 0c c9 34 d8 d6 06 0d f4 5e 42 f8 e5 96 a5 59 32 50 81 fb 6d a3 05 0e 9c 71 aa fd 65 e5 33 eb 63 20 d7 8e 99 a7 e9 48 46 19 a3 82 58 b2 2e f2 17 bc b9 ff c4 6b df fc fc e7 9c 47 e0 3f af fe 50 3f f7 2e ed 61 fc 84 10 ee 9a 03 e3 e9 53 8d 33 96 91 dd 38 fa 04 32 61 92 a9 21 d3 30 30 f4 1a 86 32 65 ea da 1f 8d 31 b1 a6 be eb ea 73 ec bf e0 74 07 db 2c c5 48 83 47 28 ca 05 c1 80 56 44 e4 0c 23 c7 18 05 ab 86 65 03 c8 05 2f 71 Data Ascii: grCGtUm4`4 \|[C0cdS{^zSdAe\ByP>Z!UwoYZ4^BY2Pmqe3c HFX.kG?P?.aS382a!002e1st,HG(VD#e/q
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 99 d9 b5 02 3a 60 84 58 2b 52 0e 98 b2 34 22 12 2a a4 64 86 8d 2b ac ac 40 bc d5 da e8 51 a5 9a 87 4c a6 72 1a 45 8f 99 b1 df 88 0a 21 2c 3b 0a 87 95 7e ff 2c 4f ff e1 3c c8 aa 20 90 8c 31 90 84 cf 98 a6 6e cb e9 88 32 9a ac f4 5b f8 35 98 76 65 0c b2 60 02 19 e8 20 20 c8 21 c8 a2 07 44 a5 1d 4c a2 cb 85 9d 4a 19 36 a5 31 de 72 05 b6 6d 7d 94 c9 8e cd f3 ad 7f 6b 86 be e7 98 41 87 8c 89 3c ee ab bb d2 2e 08 5e 71 ed df f7 9d ff 8b ac 63 ee 22 0f 45 8a b9 aa 71 66 0e 9a 92 fd 91 a6 90 e9 b5 68 ce 02 87 66 ab 89 cd 54 79 d2 10 d1 00 9d 8d 74 59 d3 13 1b c9 44 ea 04 38 ac a1 64 28 fe 9e 4c ec 87 54 de 72 e6 3e 14 a9 ab 22 61 c8 b3 06 77 b6 ff 98 75 66 7a 79 59 d7 3e 71 66 33 0a 70 d1 5f db 1d 9b 52 f4 0a ce a4 3b 1b fd 49 a8 8e d1 ff b5 e1 ff 5b 90 fa 82 ff Data Ascii: :`X+R4"*d+@QLrE!,;~,O< 1n2[5ve` !DLJ61rm}kA<.^qc"EqfhfTytYD8d(LTr>"awufzyY>qf3p_R;I[
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 20 3b be f2 ff a0 65 f6 0c b7 2f f1 86 ce 8b 43 ac aa c2 75 55 63 ef 0d 9b f3 d3 31 35 f2 c1 5d 13 fc 31 5c 83 ae 87 61 10 e7 fb 15 dd e4 cf e2 5d bd 83 33 f0 63 ef 10 d0 1f 76 40 64 88 4c 64 0f 94 89 28 8e 21 56 8c c7 66 13 4b dc 6e 71 ff 7c da 5d 0b 89 68 71 e4 99 c8 91 6c f0 c7 fd 93 c1 65 30 87 b4 b9 66 c8 62 5e a4 b4 2f 2d 53 99 10 89 1d 99 c6 80 8c 88 1b f8 1b 5e c7 8f fe fc 9e 0e 18 21 09 49 81 36 a0 b5 88 35 89 43 92 0a 8b ef ce 37 2c 33 3d cb 6d a6 6a 5b 0c 12 10 24 20 52 2f af ac 80 6f bd 5c 67 a5 0f 5e eb d8 b1 7b e7 28 61 65 50 0c 80 cb 01 01 0e 5d ce 39 77 c0 88 3d 03 5f f2 2a 1e 69 bd 26 70 0b 56 c9 81 80 11 05 49 d9 81 02 e2 3f 68 89 71 8b 5b 95 f9 1c b0 13 44 0f 18 ed b9 1f ca a3 a7 63 f9 2a 1b fd c9 70 28 55 a7 72 37 a3 8d d3 58 05 95 94 Data Ascii: ;e/CuUc15]1\a]3cv@dLd(!VfKnq\|]hqle0fb^/-S^!I65C7,3=mj[$ R/o\g^{(aeP]9w=_i&pVI?hq[Dcp(Ur7X
2024-04-19 14:06:50 UTC	714	IN	Data Raw: 7c 3c 5a 66 51 e7 52 cb e0 ab cd 96 90 c1 e5 2c 16 e0 08 0c b4 3b 22 11 b8 9c c5 02 1c 81 81 76 47 24 02 97 b3 58 80 23 30 d0 ee 88 44 e0 72 16 47 e0 08 e8 93 3f 63 64 ec 11 64 b1 19 9e 3d 4e cb ab 65 ea cd 19 70 55 f0 53 f2 60 d5 08 c8 c5 4e 3d 20 bc c5 18 01 c7 d4 03 72 b1 53 0f 08 6f 31 46 c0 31 f5 80 5c ec d4 03 c2 5b 8c 11 70 4c 3d 20 57 67 5d 0f 74 5b 8d dd 1f 9d 89 01 5e b4 72 1e bf 70 82 54 3b 4b 8a 25 64 22 30 f5 e7 fe 67 6e b7 4d fe 6f 26 05 30 c6 c7 63 34 42 0f 08 03 22 1d 81 a6 71 4c 01 94 a8 0b 46 47 0f 08 03 22 1d 81 3d c7 14 40 89 4b 8c 8e 1e 10 06 44 3a 02 7b 8e 29 80 12 97 18 1d 3d 20 6c 62 7b 97 65 ff 34 f5 ec fe 31 5b c5 e8 f7 ae 44 c3 5b 47 27 98 3a 41 e2 7b 93 8f ff 75 8d 9f 2e 2b e9 1d 88 ad b3 b8 61 47 bb 70 ce 53 38 ed c2 39 4f e1 Data Ascii: \|<ZfQR,;"vG$X#0DrG?cdd=NepUS`N= rSo1F1\[pL= Wg]t[^rpT;K%d"0gnMo&0c4B"qLFG"=@KD:{)= lb{e41[D[G':A{u.+aGpS89O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.6	50044	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	504	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:50 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10602 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:32:57 GMT Expires: Sat, 20 Apr 2024 11:32:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9233 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:50 UTC	721	IN	Data Raw: 52 49 46 46 62 29 00 00 57 45 42 50 56 50 38 4c 55 29 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 d9 91 b5 20 f2 ff 1f de b3 bb 67 ce 11 fd 9f 00 fe df 3a 62 03 11 e7 9e 07 ec 2d 12 80 64 43 c4 86 47 70 07 92 04 d2 84 07 6d 3c 3b e4 c9 ab bc 7e 9f 10 ae 2b b4 76 26 d5 11 95 6a cf 65 93 4d 4b cd cc 88 a9 8b cc 4c 5b 5d d4 9d b2 25 fb 17 e4 17 41 a3 03 fd 4d c1 e4 fb 36 7a 25 fb 1d f5 9f c6 ee 65 da 5e 7a 00 6c e9 35 d4 ba c6 1d 00 96 bd 2b 22 b8 80 ce de b8 2e a0 d6 7d c3 73 7f ec 02 72 64 db aa 95 46 02 20 ff a8 dc 6d d7 ab ef 8a bb 3f e1 32 fa 53 48 b2 6d ab 6a 16 10 c1 5d 5e d1 3a f3 1f 4b 9a ee ee ee 9e 82 14 49 92 23 c9 67 7a 14 8c e5 8f 64 21 c8 bb 0b 08 f7 d2 aa ff 13 80 55 73 60 f4 8c 9e f1 2f 2c e7 f5 05 00 0b 33 b0 d8 9c 46 65 14 ea 3d 43 bd 9a 43 Data Ascii: RIFFb)WEBPVP8LU)/?M@rH g:b-dCGpm<;~+v&jeMKL[]%AM6z%e^zl5+".}srdF m?2SHmj]^:KI#gzd!Us`/,3Fe=CC
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: fb f0 f8 f3 79 3c 1f fa 5f b6 8d 24 29 aa e3 4b f9 cc d7 67 f9 31 bc cb a4 98 00 4b d0 f6 2f 92 a4 64 56 96 b6 8c bb fb cc e2 ee ee ee ee ee ee ee ee 76 73 77 77 77 97 75 77 df 1d d7 96 ea aa cc 3a d4 4c 4f 55 ed d2 73 fd b0 3a e1 90 91 14 92 b8 bb fc 22 56 12 5d ef 88 c6 12 ed 13 0e 1d ff c0 7e b8 bb ac 27 2e 85 24 5a ab 13 dc dc a1 d1 53 21 cd 22 eb 7d c3 39 d1 6c 10 41 3b 92 24 45 b6 15 51 3d 7b e0 31 33 33 cb f8 ec c0 ff 13 e1 6a f0 a4 78 42 30 33 9c 73 f9 2e 4c 57 52 a2 6d eb 98 24 dd fb 3e e4 1f 11 7f 32 22 72 ad 18 b5 6d db 9a 19 33 73 d4 23 db b6 dd f3 1a f6 c8 56 d9 b6 cd 70 c4 1f f1 7f df 8b 09 c0 ec fe 9f 22 c9 76 32 eb c0 65 d3 ac cc cc 7e 04 7a 44 af ef d2 0f e2 87 f0 33 dc bd 99 67 26 73 d1 33 39 55 75 68 fb 35 2e d9 a1 bf d2 10 c6 d5 55 69 Data Ascii: y<_$)Kg1K/dVvswwwuw:LOUs:"V]~'.$ZS!"}9lA;$EQ={133jxB03s.LWRm$>2"rm3s#Vp"v2e~zD3g&s39Uuh5.Ui
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 8e 9b 7a da 3b 49 0a 7f f1 5d bf 5d 50 cb d1 49 41 58 1a 94 8d 8e ae eb a7 0c e4 3a 07 8e 2c 2c 0d c5 a0 5e e9 6c db 42 61 01 c9 fe d5 f7 fb de 69 30 9b 15 65 aa 2d a6 59 81 d5 0a ea e0 dd 4e 35 a0 23 47 63 a8 41 a7 a7 46 8a 09 96 2d 02 de fa 4b d0 29 ff ea 7e 33 69 bf fd 01 9f b7 6f bd 6b cc aa c2 42 91 ad 5a 47 6a bc 02 0e c2 0c 8d 4c 48 06 a8 62 86 4e a9 b6 50 85 86 22 46 9d b3 b5 d3 33 a9 93 b4 f0 fc 7f 9a 59 9c 13 00 71 04 df 6d d9 74 df 4c 86 f3 31 69 ce 17 25 a2 57 97 23 91 54 86 5a 15 9b 4e 6d d7 0d a2 08 db 24 68 fd 65 a4 1a 2c 20 f9 ff ff d5 bb 82 9a 4c aa 00 a2 71 93 2c cb a2 cd 58 e2 bb d8 23 e9 19 c9 8d 3e c4 1c 07 a7 03 e7 28 de c5 73 07 2c c3 48 04 63 d7 5a 4c 91 29 70 e7 6b 0a 6a 86 73 62 81 49 43 da b9 a7 0c 2f 34 31 43 f6 6a 73 72 97 61 Data Ascii: z;I]]PIAX:,,^lBai0e-YN5#GcAF-K)~3iokBZGjLHbNP"F3YqmtL1i%W#TZNm$he, Lq,X#>(s,HcZL)pkjsbIC/41Cjsra
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 6c a1 96 47 e6 70 cf bc 35 e3 4d 0c 8e 08 30 c3 21 91 00 e3 55 2a 00 27 34 3b 45 e1 19 0a 27 52 05 ad cf a8 b0 53 2a fb 84 ca 4e 09 03 f7 c2 0b d1 78 19 af 00 1b c7 d5 f0 80 97 cc 85 ab 49 c4 da ce f3 41 b1 03 51 47 8a ac ab 98 da 71 85 c0 42 f3 d9 6c 04 ca e4 83 ba ec 25 24 ac 61 10 28 a8 f6 34 48 10 20 6e 65 48 c0 88 28 00 9b 08 48 a9 b0 91 70 22 2a a2 f5 8e 00 12 95 49 00 01 09 d5 0d 02 43 00 1c 03 03 ce 71 7e 7e bd 79 c0 73 6e 28 6d 24 f6 94 82 8b 35 e0 e5 41 3a 2d 6b d7 1b 96 65 6b ad 95 48 12 90 90 ce e6 f3 2a 7a df cf 44 e2 28 21 f4 2d 05 a8 ea 94 b0 18 80 c1 64 c9 98 c7 3f bd 8a 61 77 46 1c f8 9b 9c 74 1e e6 54 36 08 68 bd cf 52 61 10 1f 95 ca 46 74 66 a4 b2 33 68 bc 02 38 47 7d 0e 45 33 c9 25 23 35 67 10 6d 49 ed 22 05 8b d2 4e fb 1c 2d 0b d9 54 Data Ascii: lGp5M0!U'4;E'RSNxIAQGqBl%$a(4H neH(Hp"ICq~~ysn(m$5A:-kekHzD(!-d?awFtT6hRaFtf3h8G}E3%#5gmI"N-T
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 39 e7 8d 75 37 f8 aa 0d e3 0d 68 f6 11 c0 ca 38 87 3d e5 42 20 84 32 59 82 49 90 18 2b 25 a6 72 47 90 78 10 c0 16 b1 20 12 0c be 09 e0 ee 2c 12 4e 89 95 84 82 d6 83 3a 97 cb 87 7d 2d de e2 81 2b e7 f0 40 4f bb 8a f5 f5 af 43 04 bc 0e 28 5b 3f fd d0 33 2b b1 6b 32 00 90 aa de d5 bb 7a 43 59 24 94 01 66 22 08 80 60 a6 a6 aa ba 56 56 92 c0 1a 98 a4 64 29 d5 ba 2e 48 04 9d 59 37 31 9a 15 23 0f d5 59 ed 4a 44 eb 00 12 fa f6 1f bc 4b 78 3f 18 1b 7a 43 12 59 dc 35 33 31 81 40 04 60 a0 e8 8d 89 09 23 6f 5b 54 ac 0b 52 45 00 dc 63 34 cb 75 c9 fc d6 45 b4 de 01 64 ab 9d 09 e6 f3 c0 40 8d 49 ef 95 de fb 17 b8 70 cf 54 53 43 30 73 dd 81 a0 7d b8 5c 78 e1 b2 18 ba 75 dd 86 75 01 55 44 eb 1d 15 18 6b dd cc 51 53 eb 24 60 b6 da 99 d0 bf e7 7f e7 a7 30 77 26 a9 ae be 3a Data Ascii: 9u7h8=B 2YI+%rGx ,N:}-+@OC([?3+k2zCY$f"`VVd).HY71#YJDKx?zCY531@`#o[TREc4uEd@IpTSC0s}\xuuUDkQS$`0w&:
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 15 c0 f4 b0 13 c1 48 be 03 db 13 90 68 5a a4 ca 56 4d 00 1b a0 cf 44 b4 71 04 76 80 13 9e de cb 21 04 39 f5 7b 8f ee 98 e5 b8 45 cc 38 14 90 b0 d1 03 12 54 e3 98 41 a3 3f 01 a9 dc a2 32 05 03 60 27 d0 67 88 36 8e 37 89 e1 c9 76 dc 13 da 43 10 6e f8 fa 7a 26 44 63 18 a7 e0 54 76 4a d8 20 ec 8c 68 f4 ce b0 70 aa ec f9 13 bb 05 e9 27 d0 3b 04 70 85 1d c0 27 a3 ec bd 59 4e 0e 01 f8 94 6d 0f 3a 93 af 0b 2f 30 54 e7 1c 2f 48 54 bd a7 a4 72 42 a3 f7 27 20 30 b0 e7 fe 37 28 95 35 8d 0d f4 3e 13 d1 c6 11 31 b4 f3 e9 3d c1 5c 57 76 9e 1e c2 f6 ac bb cf ec 2f 63 59 72 91 a8 e8 33 a8 0c 01 f4 27 20 61 27 d1 fc 09 4a 65 03 a0 09 30 13 d1 c6 f1 2a 31 74 46 10 5a 1c 8f cc 11 9f 78 ac bd 68 f5 2e fa 0c e7 b2 33 02 3e 33 54 d9 49 04 db c9 08 c7 ae c2 4d 00 d0 00 1d a0 31 Data Ascii: HhZVMDqv!9{E8TA?2`'g67vCnz&DcTvJ hp';p'YNm:/0T/HTrB' 07(5>1=\Wv/cYr3' a'Je0*1tFZxh.3>3TIM1
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: bd cf 41 43 b5 ae 4b de 6c 88 56 00 9f 32 4d 26 27 13 e8 1d a2 31 82 0a 60 83 08 b3 16 2f 7c 68 fd da 5f 2d b5 73 34 c7 c9 a1 02 ec 94 e0 62 54 bd cf 11 20 c1 82 88 d6 d2 dd e1 30 fd 63 8f c5 f0 62 86 33 11 8c 23 2a 86 db 33 a2 d9 a1 87 02 70 e0 5c 34 1b 70 05 e0 94 0a 93 2a fa 1c d1 90 6a 5d 51 41 4b 77 87 a6 3d 04 53 79 cc 79 e1 1a c0 24 d0 3b 11 6d 1c af 12 c3 8d 88 66 e7 43 1f 5a 0f c7 21 1d 0a 9a 23 ce 45 c0 89 0a 3b 25 3a d0 80 82 45 02 b7 c3 82 64 36 1c 02 64 4d ad 33 7b 3a 98 d6 4e a0 f7 39 80 f1 2a 15 d0 7b 7f 46 83 94 ea e1 38 a4 03 66 03 9b 08 d8 08 20 a5 ea 7d 8e 00 09 23 15 76 76 77 30 13 95 c3 20 f5 cd 8c fc 60 f3 c2 60 9e 52 09 f4 3e 03 ed 4f af 50 0c fb 1c 60 50 e1 38 a4 eb 39 e6 01 e7 22 98 53 2a 0c 2a fa 1c d1 90 ea 62 28 ec 3c 9f 69 5a Data Ascii: ACKlV2M&'1`/\|h_-s4bT 0cb3#3p\4pj]QAKw=Syy$;mfCZ!#E;%:Ed6dM3{:N9{F8f }#vvw0 ``R>OP`P89"S*b(<iZ
2024-04-19 14:06:50 UTC	1255	IN	Data Raw: 3a ea b7 e2 50 89 17 b0 eb 50 0a 58 7b 4a 15 9f e6 26 7a ff b5 c0 e3 38 ab 63 3e 7a a1 2c b0 d0 42 d5 b7 d1 cb ce 77 da e6 04 7e 59 7b 5d 77 80 19 c9 70 a2 86 f7 8d 46 60 ec 97 f5 b2 fc 95 d1 62 19 0e e5 b0 1e c0 cf c5 5b f5 f0 81 cc 3f 1d da d1 c7 d7 79 9b 91 3e c9 34 e8 a9 43 18 d7 88 f9 6c 56 03 79 79 2f 63 01 66 4c 63 7a 76 dd 70 6d 8d 49 f0 08 64 98 26 a2 51 f7 02 1c b4 33 6d 6d a8 e8 10 e0 9c 1c 5d 7c fb f1 c4 4e 3f a1 54 a8 87 a1 03 04 60 26 80 33 23 9c 2d 7d e6 2c 89 92 99 62 2f e8 ae 62 d7 04 69 7b e3 3d 10 01 73 6b 71 43 92 5a 98 c7 bc b9 9b ab fc 59 dc df 5e e1 cf 32 13 d4 df 9a d3 ec a8 37 63 1f ee 21 cf a7 f3 f9 34 07 33 98 94 ce f8 bb c6 ff 47 c1 9f 5d 86 03 a7 db 37 5b 18 01 13 09 6c fa b5 66 71 52 73 32 14 b9 b2 d0 cd 41 fb fe 78 1f de 83 Data Ascii: :PPX{J&z8c>z,Bw~Y{]wpF`b[?y>4ClVyy/cfLczvpmId&Q3mm]\|N?T`&3#-},b/bi{=skqCZY^27c!43G]7[lfqRs2Ax
2024-04-19 14:06:50 UTC	1096	IN	Data Raw: 0d b7 7a e3 a2 78 c6 0d 28 90 84 08 a1 44 2c 20 33 40 08 00 42 94 d7 7b 9c c5 c1 6b ad 58 a9 1c 88 57 3d 1d ba e8 7b 1f 35 ea 85 12 d5 c5 03 ca 38 23 85 7c 8e 1c bf 18 20 1a 9e 94 58 7a 96 0a 2e 96 a4 52 91 42 45 a6 30 02 11 01 58 bd e7 65 bc 40 62 4b 58 b9 02 d7 c4 0e a2 d7 e8 47 fc b8 4e 81 05 07 b7 cc 56 c5 0d 1f b5 1f 69 02 c2 8d b3 38 53 e0 32 4f 94 48 21 6a 6a cd 01 84 78 82 c4 4b 85 3c 32 85 9c 5c 04 4a 2a 25 7a d0 10 7d 9f dc 18 9e 5e f6 af 6a b4 4b 89 92 32 f3 dc bc 1c ad 24 6b 6c 8c 09 88 86 27 a0 a5 02 84 2c 45 94 86 c5 24 06 00 22 22 a1 f1 9a 62 ff b2 26 c3 13 dd 4a 34 20 89 12 54 92 cb ad 0f 51 b5 4b 89 dd c0 cc d7 d6 b4 b2 43 4d 36 36 66 32 24 16 a0 a2 4d 10 44 28 2a 8b 79 94 ae a5 86 2e 32 ba cb ae ac 59 68 a1 85 c6 12 7f 7e 6b 3e f2 45 89 Data Ascii: zx(D, 3@B{kXW={58#\| Xz.RBE0Xe@bKXGNVi8S2OH!jjxK<2\J%z}^jK2$kl',E$""b&J4 TQKCM66f2$MD(y.2Yh~k>E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.6	50045	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:50 UTC	504	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9974 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:00 GMT Expires: Sat, 20 Apr 2024 12:12:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 6890 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	722	IN	Data Raw: 52 49 46 46 ee 26 00 00 57 45 42 50 56 50 38 4c e1 26 00 00 2f ff c0 3f 00 09 58 92 ec c6 6d ea 3d 80 04 f8 20 dd ff c0 9b 41 67 f9 8e e8 ff 04 e0 ff 68 b0 4d 9c f0 5d 13 ce 3d 39 e7 2e 60 0f 62 d7 5a 4b 7b 80 01 c2 c0 ae 42 64 12 3c 91 d9 25 89 e0 32 83 7b 8b 6e 60 66 36 dc 3b 20 a9 00 9a d9 5a ee 0d 92 44 c0 6f 16 9b 0a 80 db 6a 9a 92 88 db 0b 3f 93 a4 ba 8b d9 35 6e 22 22 bc 49 97 b8 9e 0d 9c 03 a8 0a 32 33 e3 b4 cf 7c 8e 81 8a c8 cc c8 b4 16 a0 2a 79 3d ad 03 9e d7 cb 71 f4 c0 33 33 06 eb 68 bb 56 1d d7 0d 7f f0 02 8a 24 c9 aa ad 8c 13 13 f3 18 14 7d d2 7f ff 2b fb 12 dd 65 d4 8a db b6 8d 43 cc dd 67 59 45 92 ec a4 c9 19 de 7b 20 00 11 f8 97 83 85 fc d1 ff 09 f0 77 ac c7 64 30 04 c1 50 a0 e4 1b 84 1d 00 82 21 00 10 b0 12 0b 85 a1 82 74 fe 7b 07 02 8e Data Ascii: RIFF&WEBPVP8L&/?Xm= AghM]=9.`bZK{Bd<%2{n`f6; ZDoj?5n""I23\|*y=q33hV$}+eCgYE{ wd0P!t{
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a0 a2 1f fd e8 4b 5f 1f 9f 93 68 08 ed 81 a1 43 87 9e 76 46 4b 7e 7a d3 47 c7 dc 3e c6 c9 0b 83 43 0b 9e 28 0b 93 85 7f 1a 78 9b 8b 8d 9b 7e 1a 7a db 22 ed a3 a3 e1 a5 43 e1 d6 b6 ad 5a 59 fb 7c c1 dd dd 5d ca a0 0b 22 fa 21 d5 2a ac 02 32 1a f8 31 ee 9e d9 b9 db 6d db 48 92 24 ee 9b 7f 9c e7 9f b9 15 13 e0 03 7c b2 ff 3f d9 ff 1f e7 d4 b3 f2 ec c9 4a 05 b9 52 6b 4f be f4 f4 51 6e f7 1f 2e bb b3 81 03 99 bf c1 de 6b 3b 37 56 50 db 90 78 59 f9 f5 c5 8f 92 1f 9e dc 88 00 7e 4f dc bc 2c da be 37 d8 c1 11 0b 64 9e 9d 72 14 2c c2 42 00 59 14 3c 53 dc 42 37 4a ee e2 11 02 d8 fc 61 07 0f 10 d7 a4 61 23 f8 10 e5 d3 b8 29 e6 6e 50 e9 11 b8 66 85 ce 9c a5 07 cf c6 47 5c 13 40 e0 04 ee 99 f3 41 78 b7 21 e5 1a b4 5c 53 3b 1e 5d 6d 16 27 0e d2 e2 d6 c1 f2 94 9b 92 d9 Data Ascii: K_hCvFK~zG>C(x~z"CZY\|]"!*21mH$\|?JRkOQn.k;7VPxY~O,7dr,BY<SB7Jaa#)nPfG\@Ax!\S;]m'
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 31 3e 4b 90 90 50 80 0c 34 8b b0 43 60 37 63 1b 63 c2 a1 ed f3 e4 fb 4e 27 bb e8 6a 6a 40 59 21 77 7a 47 12 c0 12 38 dc f5 79 f2 a7 74 fa ad 67 20 00 41 c3 c6 80 03 30 06 73 25 5d 9d fe 79 a2 7b 3b f7 86 c1 01 8e 8b 00 f3 9e 4d 52 7e 96 08 40 cc 2b 6f 3e f2 9e b9 5f 98 10 33 fc ae b0 f0 67 09 43 63 32 ce b9 91 6c e4 96 6c 90 00 9e 98 dc 72 cb 6d 5e 95 8d 11 e3 fc 79 c2 e0 98 64 5f 8a 45 38 5a f5 a5 15 e3 74 38 8d d3 38 09 28 95 d4 0f e4 e7 89 10 92 80 30 ef 74 60 4c 98 f7 97 3e 53 7a 47 02 95 c2 50 28 16 74 a8 e6 58 9d 25 28 05 d6 83 f4 d5 39 e9 82 8d c7 94 6a 64 c1 ac 95 5d b6 d6 f2 09 61 39 81 05 e2 fe 70 98 bb 06 6c 0c 10 06 f5 e0 01 57 e9 9d fd ad 41 e0 c8 d9 8c aa 6f 53 29 92 01 d7 fe 33 cb c6 63 b7 92 ba 24 10 01 e6 fe 52 2c 01 26 30 77 a5 26 7d 50 Data Ascii: 1>KP4C`7ccN'jj@Y!wzG8ytg A0s%]y{;MR~@+o>_3gCc2llrm^yd_E8Zt88(0t`L>SzGP(tX%(9jd]a9plWAoS)3c$R,&0w&}P
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 53 09 07 c0 90 4c 31 a5 84 53 51 75 42 d5 d5 37 f4 5f 9e 2f 65 11 f6 06 37 da 69 9b 7b 73 6e ce dd cd 4d d7 f2 38 f7 b9 4d fc 36 37 e9 e2 9d b7 47 6d fd 41 0e d8 9f 4a 21 80 00 2d 68 b0 79 26 09 c8 c3 9e 38 6b be 14 45 6d ab 3d fa 37 1f e4 c2 96 1a cb 22 da f5 e2 33 b2 7d b0 6d 61 2d 1b 35 e3 30 d6 b2 5b f5 e7 73 7b 98 bb d9 66 20 07 60 41 48 12 90 4e d8 84 31 36 a2 c9 a6 b2 a8 a2 66 71 1e a6 2c 66 6d d9 3e d5 77 86 45 8e f5 5c 0e 23 c0 dd 96 85 8d 8d 59 cf 32 a8 09 d1 fa 0d 7b 90 7b d2 59 bc 3a 5e 2b 0d 00 57 42 03 31 71 2a e7 60 4c 6a 22 28 ea 1a d4 a9 c6 c7 77 58 82 fe 8c 25 ac be 86 39 b6 1d 6d 3b ce 4d ce cd 73 63 6e ce 0d 9c 6f 26 37 c8 0d 83 da 7e c3 fc 20 d7 f9 21 b7 fc 67 06 73 01 20 40 3a 0d 60 6d d8 f8 40 9b 66 c5 25 aa fc c2 1f a6 2c a6 bf 6b Data Ascii: SL1SQuB7_/e7i{snM8M67GmAJ!-hy&8kEm=7"3}ma-50[s{f `AHN16fq,fm>wE\#Y2{{Y:^+WB1q*`Lj"(wX%9m;Mscno&7~ !gs @:`m@f%,k
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: a1 14 76 9f 74 a6 62 83 1b 8d 6f 2c 35 96 24 90 d0 12 0d 5d 0b ad 40 52 09 9a 70 1c f5 51 b0 f1 b7 87 30 ad 29 55 93 4d 4e 63 e6 5c 1b b8 30 40 91 80 81 65 16 84 8f a3 6f ed 7a 50 26 68 7c e3 f4 5c 20 fa 02 15 42 a5 92 8c 24 15 12 a8 08 dc 3f 0e 3a 53 9f 32 98 5a ad 36 99 c8 30 a9 e2 f4 b4 c2 a4 a9 49 71 ef c5 ae 48 c3 24 fa c6 2f 2b 3e 63 39 b1 00 07 d5 17 95 bb 6c b9 e3 2e 56 17 a2 75 c4 ea 80 56 b4 a2 ff d8 3e 12 2a dd 7d 6a 5d d5 94 68 9a c1 84 7a 9a 94 8d 59 49 56 26 30 0d 27 b3 52 0a bf d1 d2 ea 2d c1 04 37 fa de da 8b 85 6d 59 12 c8 88 6b 05 5a 0d 90 b0 24 55 7b d9 6f 73 1f 0b b3 fa 9f 3d a8 65 dc 9a db 94 a6 0d 17 88 ac 24 d7 04 af f4 c6 35 4c d9 c6 39 29 24 d8 d2 f4 66 96 09 be 3d 6f 65 4b 3b 4a b4 4d f6 12 a4 6c 49 bb 74 d9 94 dd db ea 97 5d 1f Data Ascii: vtbo,5$]@RpQ0)UMNc\0@eozP&h\|\ B$?:S2Z60IqH$/+>c9l.VuV>*}j]hzYIV&0'R-7mYkZ$U{os=e$5L9)$f=oeK;JMlIt]
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 4f 99 20 2e 6b 11 e4 ae ad 1e 8c 18 f1 30 dc fc b3 e8 1f ec ed af 17 cc b5 36 db be 98 01 f4 2d 54 ed 99 d6 91 5b 38 ac d5 ca bd dc 2c ab d3 4d 43 a5 50 ff a4 0e 7b bf 6f 37 f3 90 75 97 0b ce 58 bc dd e3 a5 53 1a 26 35 dc c3 f2 1f 13 c2 08 fd 6b e1 9f aa 7f c2 7e 45 e0 09 df 7d f9 7f b0 40 e8 c7 25 70 ff 19 a0 12 08 09 7a ab 06 68 09 6c f5 d2 f3 27 b4 b1 c6 1b 8f cf 3f df fd ff e6 c6 f1 4b bd 11 99 01 43 a9 74 1f 76 b0 59 44 bd e0 da 30 3e 53 8b 61 93 0e 87 04 84 3e 9f 5c 20 06 d8 6f d8 29 7e 4a ce 3f 89 d6 bf d0 ad 73 d3 a3 b5 ed 6f 6f 74 10 da ce 9c f7 b8 c6 97 fd 36 f7 c9 0c 5a bd cf 69 5b b2 ca fc ca 98 34 b3 7b 4a 71 2d 43 04 49 34 4e 83 03 67 4b dc 0a 0e 2e a9 cd 74 c8 22 52 50 dd 72 c9 47 86 01 d8 b6 7d 9c a1 dc 7d 85 b1 ac b2 0a b4 66 4b ec dc 5e Data Ascii: O .k06-T[8,MCP{o7uXS&5k~E}@%pzhl'?KCtvYD0>Sa>\ o)~J?soot6Zi[4{Jq-CI4NgK.t"RPrG}}fK^
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: e0 12 fa 56 73 56 03 1b d2 85 13 98 80 89 a2 01 52 49 61 75 01 a5 42 a5 d5 4a ab 01 e8 83 ba eb af 1f ba fa e6 ec 27 cf b9 30 0e 1b 1c 13 d6 e6 d9 df 5e 4e fa 49 23 94 e3 9b 2f 07 49 73 8c 83 53 7d 5e 68 49 cf 96 1d 12 90 18 c4 b9 16 95 f1 54 38 9a ef 61 84 25 ec f4 8a 32 3d 26 76 69 81 91 ba 81 d6 97 00 1c 38 1c 4b ae 46 18 f6 1b f6 7e 8f 3a f2 c2 fd a1 b3 ee 6d 8d 5f a5 9d 84 b7 6b d0 4f 70 a1 71 61 6a 42 cb 1a d6 69 9e b2 1c 5c 72 72 3c 31 96 a6 2a 11 16 9d e9 d1 a4 48 73 0b 94 91 ef 66 fd 05 8c b8 54 d1 2c 9d 89 28 32 11 97 20 80 17 0b ee e8 bf 8a 42 d5 80 30 1d 6e 1c ef 7d 56 c2 f3 47 44 df f6 58 37 1f 95 69 01 2d 58 4a bf bd 94 b2 14 e3 2f a8 c3 38 c5 70 22 9d 5b 92 17 02 2e 82 01 97 06 1b 46 ee a6 89 5d b7 e1 75 dd f1 00 56 f8 bc 67 33 3c 97 78 3e Data Ascii: VsVRIauBJ'0^NI#/IsS}^hIT8a%2=&vi8KF~:m_kOpqajBi\rr<1*HsfT,(2 B0n}VGDX7i-XJ/8p"[.F]uVg3<x>
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: bf 3c 83 49 4b 8d 3a ef 78 a0 88 72 2e 8e 2b 47 f9 6d bf d5 0f 22 d2 e3 61 eb da c7 b9 5f a9 ce 59 7f db 69 c8 80 76 5e d3 2f d7 ea 78 55 b2 b4 22 a0 41 64 22 10 f1 dd de 60 f4 ef 9a d4 78 d9 09 e9 87 e7 61 84 07 95 b7 26 72 1e 24 c6 40 a4 e0 75 64 03 0b c6 98 c4 73 59 51 d8 97 be fa ee 8d fe fd 82 4d b0 e1 1a 47 43 83 f8 22 ef f3 5c a1 8f ee ba 2f 99 37 c7 24 0f 11 ca 83 a6 32 94 21 46 21 5d 4e b7 3d 15 55 ff f1 ce ef ef 78 37 2f fe fa e7 95 1b f0 58 05 59 40 9c dc 4c c5 6a 89 6b 12 a4 b2 17 30 0a 6a 8f 5c a6 92 8b af 81 69 08 42 a2 2f 72 48 2e 1a 68 cc 52 e8 b5 fa 07 ac 5a 6e d0 a7 67 8b 80 f8 4e c7 99 fd 7c de 5e 5f 71 ee c1 cb 07 d3 fb 79 8e e4 39 0d 98 2c 65 93 58 1c 8b d8 3a 51 74 72 19 5d 8e dc 21 26 f7 75 ff 78 5d f8 70 f5 d1 ef c3 ce 00 82 d3 0d Data Ascii: <IK:xr.+Gm"a_Yiv^/xU"Ad"`xa&r$@udsYQMGC"\/7$2!F!]N=Ux7/XY@Ljk0j\iB/rH.hRZngN\|^_qy9,eX:Qtr]!&ux]p
2024-04-19 14:06:51 UTC	467	IN	Data Raw: ca 2d 8f f7 3e 57 07 01 b0 39 44 c3 14 bf 18 a3 0e 68 0e 78 5b 20 e1 4d ad d9 81 3a e9 c1 05 27 09 4e 36 82 00 71 1e 0d b4 68 94 e7 45 ab 82 60 e8 88 cd 9b cb ef e2 bb 84 9a 14 80 8e 48 99 b0 4e 2f 04 af 0b d3 0d a7 9a a5 65 36 a7 17 56 48 2b ce 74 fd 3b b7 bb e9 76 6b 07 81 71 ce 90 34 44 f0 da 4c 72 0d 05 b2 d8 a2 b0 08 63 de e4 d8 b4 31 e1 c2 a5 40 50 12 86 97 2a b5 86 e7 a5 9a 33 cb 2f 08 90 8b 97 64 f9 d6 b1 38 9f 0b 68 ac 4d 40 0b ae 84 dd 60 02 d2 07 f8 1f 3e 41 11 15 d5 5f f8 71 b0 95 5b 98 7b 26 1d 0e 1c 39 08 96 4d bd b2 cf d6 59 be 6d fc 76 95 0e 93 80 45 da 89 68 86 48 1b 42 5c ea 54 9e 60 d6 5e fd f7 9e f6 7b e7 dd e6 79 6e 30 e3 40 08 9e bc 90 96 95 bb 55 2c b1 55 6c b6 06 63 53 26 9c 12 db b1 95 47 5b 1f 0f c1 db 61 43 47 82 50 55 34 49 13 Data Ascii: ->W9Dhx[ M:'N6qhE`HN/e6VH+t;vkq4DLrc1@P*3/d8hM@`>A_q[{&9MYmvEhHB\T`^{yn0@U,UlcS&G[aCGPU4I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.6	50047	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:51 UTC	1080	OUT	GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:51 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:51 GMT Server: fife Content-Length: 6354 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	733	IN	Data Raw: 52 49 46 46 ca 18 00 00 57 45 42 50 56 50 38 4c bd 18 00 00 2f ff c0 3f 00 09 47 92 e4 b6 4d 61 21 88 de 5a e8 ff 0f 66 02 9d ce 11 fd 9f 00 fb 9b bd e0 da 78 7c 0f 1b c0 16 de 2e 0f 78 27 eb ef d7 42 2e 28 22 c8 e8 5b 66 09 4d 94 e8 f2 06 96 04 44 19 94 6a 40 11 98 80 c4 03 bd 14 2d b3 02 d1 06 28 53 04 80 36 00 aa 4c 0d 62 a8 cc 4c b4 23 73 65 56 5c a6 de cc 8c 2c 19 2a 3b 27 0f 99 7b 9d 06 ab 7b 38 f5 e4 1e 37 fe d7 05 1c d9 b6 db 36 a7 c0 60 fe 50 e9 3b 67 1b 8b f2 fe 6b 97 2a dd 33 00 8e b5 e3 b6 91 1c 89 68 ac b7 b5 77 17 c0 e4 1f df f9 97 e3 48 92 1c 25 4f 01 6f e2 fe 57 68 e9 bf 3d 67 4a ff 27 40 c2 bf f9 52 97 f4 34 ff 9e c7 6f 9f a0 37 74 fb af e3 51 d4 45 1e 75 7c bd 58 68 8c d9 53 01 a0 cb 00 49 92 1c ad f7 d6 31 80 10 42 34 1a 09 90 6c 50 98 Data Ascii: RIFFWEBPVP8L/?GMa!Zfx\|.x'B.("[fMDj@-(S6LbL#seV\,;'{{876`P;gk3hwH%OoWh=gJ'@R4o7tQEu\|XhSI1B4lP
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 1c 82 16 da aa 5f 3e 07 e3 6f 14 97 c6 84 22 4b fe b9 aa 59 65 81 31 b0 e4 d0 a2 6d db 94 24 ad 40 da 81 17 51 b6 6d db b6 6d db b6 6d eb cf b6 6d 75 87 1d 91 b6 8d 17 41 c7 b6 ed 36 76 74 ee 03 c1 47 56 ad 6f 22 e5 1a 88 4f 35 4e c5 9a 92 f7 5e ea 26 01 12 c0 8b 09 70 80 09 ff 4f f8 7f 22 a9 41 f6 da 16 e8 7b 2c e2 02 9b b0 91 da d0 de aa 65 53 2c fd 0c f6 f9 ed 45 d8 a4 b6 a9 1f fd 67 f1 9e a9 5d 94 b3 b7 b6 c5 6b fa 57 19 0e bf b4 8b 9d b6 2d dd f5 7d 65 40 27 0b ea 79 97 5e bf a6 e1 a7 6b 46 c5 f5 b3 b9 61 ae ec 6f 4f 29 e9 78 9c 16 5b c3 84 52 1b 35 3b e2 e4 c3 64 2f 19 f6 31 98 b1 df 3e ab 2e 6c 7c 17 6c 68 81 ca 04 2a f2 e9 3d 06 1e 51 a9 1f 36 6f c1 ef 67 b4 24 40 8e fd bc cf 91 e0 f7 b3 0c f8 a2 a4 79 db 9f 4d b3 50 d7 7f 2f ec c0 ad ec 27 bf a4 Data Ascii: _>o"KYe1m$@QmmmmuA6vtGVo"O5N^&pO"A{,eS,Eg]kW-}e@'y^kFaoO)x[R5;d/1>.l\|lh*=Q6og$@yMP/'
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 40 2b c9 58 0c eb 78 fa bc 20 66 f1 9b f0 a1 f7 db f7 2b 28 7c b9 63 cb b3 91 70 5c 4c ae de f9 81 c7 32 12 a7 2f a6 37 9c 32 12 f8 c0 c7 e5 fb 4c 6c a8 ea 27 7c 1a ef fa 34 a0 2a 46 7b fe eb a6 e7 99 88 aa 39 13 19 3c c0 87 df 6f bf ed cd 77 df ea 7a 1e 6f 82 85 57 b7 b5 ef 70 3c 9b 63 a7 db 91 e3 4b d3 ab b7 7d c8 77 7e fc e0 f5 9d fa 0f 03 ce 07 be cf 3d bd ff 23 4e c6 bb 22 df fe d6 d3 6f 7a 6d fb f8 3f 0a df e5 dd b3 ef 78 fb c9 3b 3f 0d e5 92 69 29 d5 4f a7 4d c5 ac e9 31 6d 7d a8 f9 5b 5e 59 23 d6 d4 e1 fe fb ef 07 38 6e 3e 97 9e 26 58 3e 98 36 90 2d 61 19 54 34 15 f2 40 0a 03 0c a3 b5 c2 6a c0 8e a2 6f ce ce 83 05 dc f8 f3 7f 0b 56 38 3a ee 84 4d e5 5e 11 73 f6 16 6f 8e 11 28 c7 b9 d7 ae c8 c7 0e b6 38 41 fe a9 34 7b da 8e 46 be 8b c9 d9 b2 00 30 Data Ascii: @+Xx f+(\|cp\L2/72Ll'\|4*F{9<owzoWp<cK}w~=#N"ozm?x;?i)OM1m}[^Y#8n>&X>6-aT4@joV8:M^so(8A4{F0
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: b5 1a 2c 4a 68 fd 85 ce 98 22 94 54 59 13 00 18 3e 5b 5e d7 85 3f 5d 14 dd 6b 04 98 ae 40 4b 9f 47 93 dd b8 35 8f 5c 7e 6f 48 ab 2b 2c 5f b7 b8 ae c7 1b 53 65 0d 51 6d 4f 64 bf 83 6c 14 9d 77 b5 0b d5 4d 7c 90 04 06 a6 56 6a 5c b8 4d 77 cc 07 8d 0c 4a d0 f8 cc 97 73 ea 84 e6 82 d5 84 04 6d 3e 65 52 49 4d 1f 41 b8 e8 b1 74 1a 3b 18 ea cb ee d8 01 08 6a d8 74 1b e1 9b a7 34 57 3a 1d 03 76 14 5b 5d 2b 0b 5d 71 e5 00 16 b5 21 68 b0 f6 cc a7 18 b7 46 83 57 c6 f7 bb 63 11 e6 2a b4 14 39 a5 68 cd 68 99 4e 5f 34 09 1b cf 79 48 0d 78 25 3c de 69 e9 2a 9e b4 7a 8a 97 09 cb 58 0e 75 95 85 78 ce c5 88 81 45 2d 44 bb 67 85 97 bf f9 7f 6d 4b 65 d9 4a fa e9 6a e9 cb 15 13 68 48 19 fd d8 3f 3a a3 77 81 53 e6 46 2a 4d 58 fb 40 69 75 57 f5 c6 f7 8f 7c 0c 08 13 9d 71 a7 50 Data Ascii: ,Jh"TY>[^?]k@KG5\~oH+,_SeQmOdlwM\|Vj\MwJsm>eRIMAt;jt4W:v[]+]q!hFWc9hhN_4yHx%<izXuxE-DgmKeJjhH?:wSF*MX@iuW\|qP
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: b1 2d 71 8f 60 06 28 41 e3 57 b0 d5 1a 8e a8 fc 3a e3 ce 47 73 5c b6 09 ac e6 74 89 f1 a3 51 63 f1 f9 69 1b 31 90 4a 7e 97 de 67 12 34 42 63 65 21 fd 8f f9 5d f1 82 ed 5c a9 22 68 31 ac 98 d3 65 f2 e8 b2 76 1e d1 66 2f f9 bd e1 94 2f 50 9c 1a 0c cd 0a 66 db a3 b7 fc 5e b5 e7 e6 7c 0b 24 86 5b 18 ae 86 6b cd a4 35 53 a3 81 b5 96 d9 5b fe 2b 79 3d d8 4b f5 ca c3 00 cd e4 67 36 9e 3c f3 1a 48 51 3b 6c 07 02 ad c5 70 35 ba 6a 33 29 86 c7 b1 18 d7 3a 12 aa f5 0b fe e6 d5 ee ae f3 30 03 dc c9 3a f6 f7 d7 be 19 79 b5 3a da 22 7a 47 73 f9 15 2d 33 69 d8 8c 6f 09 a1 68 7e f4 97 fe 5d 5f be fa f3 6d e2 95 2d fa de 1b a7 bf 90 46 0c 13 de f1 95 ef 74 f7 c3 d7 38 b5 ba e8 4c 9c 8f fa 9e 1b 7c 49 cd f0 34 92 91 95 46 cd a6 16 e3 2b 31 da a2 7e fc 97 7e 01 89 c2 e9 cb Data Ascii: -q`(AW:Gs\tQci1J~g4Bce!]\"h1evf//Pf^\|$[k5S[+y=Kg6<HQ;lp5j3):0:y:"zGs-3ioh~]_m-Ft8L\|I4F+1~~
2024-04-19 14:06:51 UTC	601	IN	Data Raw: b1 5c 17 7e f6 d3 3b 78 be 9c 0e cb 96 0f b7 9e f7 c5 b2 3c a0 e3 c5 f5 e0 6f 9e 53 3d bd 1d 1e 7c d2 cf fe dc 9b 2d df dd 3e 3c f7 fc f0 e2 e0 b0 2c d8 e1 7a f0 5f ce 93 e5 a9 ad 96 c5 19 2d b6 fc 96 33 be cd 61 81 42 73 2d ac 57 e9 11 3c ed 6e b1 0b ed f0 72 87 2d cb 72 d8 c6 0b ca 70 87 eb 81 d7 f1 d1 a8 9e 96 be e8 72 58 fa ad 9b e5 80 05 e5 da f8 ba fc df e5 29 2d 70 aa c3 d2 1f 6c 99 e5 60 72 87 eb c2 ab 78 14 ef e4 29 d1 69 0f 7d 59 0f 8b be 2c 8b 65 ec da f8 5f 2f 64 4b 4f 6d 58 96 7e 3a b0 38 b8 6e 9e e3 02 de a8 8b 9e be c0 72 bd 38 2c eb 1b e3 40 2d 58 6a c1 e1 7a b1 2d bd 31 58 8a 05 0e ae 97 f7 87 2d bf 51 46 77 e8 ae 9d 7d f1 d3 f7 ed 87 eb de 75 bf ef c2 c3 57 79 bf 9b 2d a3 50 30 67 45 df 47 ee da b7 39 fb 3d 41 14 0a 71 c6 97 9d ba de f7 Data Ascii: \~;x<oS=\|-><,z_-3aBs-W<nr-rprX)-pl`rx)i}Y,e_/dKOmX~:8nr8,@-Xjz-1X-QFw}uWy-P0gEG9=Aq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.6	50046	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:51 UTC	1082	OUT	GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:51 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:51 GMT Server: fife Content-Length: 13528 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	732	IN	Data Raw: 52 49 46 46 d0 34 00 00 57 45 42 50 56 50 38 4c c3 34 00 00 2f ff c0 3f 00 09 46 6e db 46 82 e3 b4 45 e1 f4 ff 0f de e0 39 cd 35 a2 ff 13 80 3f 1a 9f 21 2d e3 22 b2 40 43 e8 42 92 08 83 70 9d 24 89 f4 a9 aa 70 cc b7 b8 55 d5 38 21 9e f4 b4 c6 18 dd a6 2d 47 ef 1d d0 4b 3c 48 fa 6c ad be 03 e5 10 f9 20 da ba e3 5e 64 8c 4b 19 b4 47 3f c2 91 9c ad b5 4b 2f 03 c8 39 67 bf 92 86 20 1f 68 49 14 85 23 3d 3f 75 01 47 b2 6d 55 55 17 72 0a f8 ee ee 32 ff c1 69 a4 f7 dc c3 cd 48 1d 47 b2 ad 2a fd ff c7 dd 1d a2 60 49 fe 71 b8 bb eb c2 8d 24 49 8e 2a 2a 99 3d 2d 17 4f c3 9a 04 96 86 fe 4f 80 52 c1 66 49 01 b0 9b aa 47 4d 68 40 c1 fe b7 8b 84 49 ca 24 65 c8 cc 8c 7c 57 35 11 c0 c4 4e ca 80 20 00 94 40 a9 00 8b 5e 00 98 10 0c 58 b0 00 b9 56 02 c8 08 55 b8 ad 75 cc 36 Data Ascii: RIFF4WEBPVP8L4/?FnFE95?!-"@CBp$pU8!-GK<Hl ^dKG?K/9g hI#=?uGmUUr2iHG`Iq$I*=-OORfIGMh@I$e\|W5N @^XVUu6
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 1d 33 43 66 cc 36 43 b6 6d 5b dd b6 dd 6b af ad fe f5 ff bf ef 89 09 e0 9a ed bf 6c db b6 9b 31 a7 6a 21 89 d5 12 96 5c 04 e6 70 1c 97 53 a8 50 5d d7 f5 1e 60 ad a3 18 be 4c 1c 87 73 d8 b4 c1 3f ee d4 f0 9f 92 69 a7 c2 03 76 fa c7 33 85 95 92 e9 a0 9d 2e ba 68 a3 8a e1 64 b2 62 38 74 d2 49 37 35 fd c7 25 7a a1 17 ed b4 c3 e3 18 7a 4a 87 4e b8 f1 a5 0b fe a8 73 38 29 38 14 a5 d0 a8 2f 35 6c d4 e1 38 08 a7 d1 a8 eb 82 de a8 9c c0 48 61 53 f7 18 e4 d6 b6 ed 5a cd 5a 07 0f a1 4d 7d 17 d4 45 15 54 01 35 10 51 02 55 90 ca 46 5e 7a 77 41 8e 24 49 92 12 91 0b 7f 44 40 7f 71 78 23 c5 7d ed 74 c4 04 18 80 95 fe 5f e9 ff 95 fe 7f 8b aa 63 03 34 f5 a2 17 c4 eb 98 21 4e e2 12 17 b9 d4 05 2f a4 54 41 98 93 cf 48 1a 2c a1 58 86 db 84 0e c0 41 ef 1e 3c f6 87 51 ac 8e 55 Data Ascii: 3Cf6Cm[kl1j!\pSP]`Ls?iv3.hdb8tI75%zzJNs8)8/5l8HaSZZM}ET5QUF^zwA$ID@qx#}t_c4!N/TAH,XA<QU
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 0e d4 7d 61 fc 50 41 8e 9f 98 22 0b 96 35 57 df 9f 52 9b 66 48 80 48 64 4a 36 0e f7 3c c4 7b b7 da 07 38 42 04 e3 75 7f d6 4f fd b2 4e bd da 40 c0 1d b7 ab e9 5f 6e b0 d9 82 95 99 f7 43 de f5 b4 14 9d 51 9e 9d 67 6c 40 6c 63 c3 0e ab db 20 ef a9 62 da 80 60 af 7b 71 cd 3d bf 1e e6 2b 24 1f cd 99 a4 ee e6 62 57 4d d7 d2 a7 f9 b0 40 21 46 17 df cc df 43 6e 07 b9 5d 8f e3 ae 7d 4c 4d 7a 92 85 79 cd 35 7b ad 11 b5 4a de cb 68 1b 6c 10 09 ef 67 c9 b1 19 7d 8e 8c 2c da c6 06 c4 3e b2 be bb b9 65 51 11 c4 7b 9d 28 99 12 e8 78 27 44 2e 80 83 0f 15 09 51 39 b5 57 e6 5e ee 6e 97 bb 46 25 58 b6 6e 84 19 1f 63 5d 0e b8 cd 8d 60 b4 10 cf 26 03 7a f8 f8 86 c5 44 71 cc c1 d2 d7 24 8c 2c b8 75 16 f3 9b b3 66 94 84 48 54 2c f3 f9 d4 44 55 9b 8b 98 94 83 81 18 30 3c 50 a0 Data Ascii: }aPA"5WRfHHdJ6<{8BuON@_nCQgl@lc b`{q=+$bWM@!FCn]}LMzy5{Jhlg},>eQ{(x'D.Q9W^nF%Xnc]`&zDq$,ufHT,DU0<P
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 35 59 05 8d fb ae b1 07 d0 8a a1 31 83 29 df fe bd fa 37 a4 1e d4 45 98 6d 6b 21 f7 b2 67 f2 71 07 77 bc c6 eb db bd b8 6e 17 c8 18 0b 2d e9 99 7b c3 4a 4c 7d 2a 55 91 54 4b 0c 8e 1b 76 19 cd 62 1b 17 79 0f 99 8a 11 6d ba ef 21 1a a5 d5 ab 19 01 ad c4 2d 92 68 18 58 6d 7b 40 ae b2 b7 7f f2 ef 79 19 27 ea 62 bb ac be 6c ef fb 74 c3 5a 26 88 30 08 88 a8 b1 d4 fa 9c a0 b5 c4 29 3e ac 4a d7 ef 5b 07 25 31 e9 7c 55 77 7a 9d bd aa d7 c2 04 2b 4d 25 57 d4 28 63 7b 68 27 f6 73 66 55 5a 35 9a 8a 5d d0 1a 01 f6 b9 ac e4 a3 ef 0e 20 6d 76 de a1 31 ef 18 a2 55 5a 63 98 88 65 fb 9d 92 92 91 7c 2d 7a 45 19 fb d2 5e d7 6a 48 f3 70 cf 71 cf 59 bb d7 fb fe 7a af f7 5a c3 ef 11 ff f1 77 8a f7 fe c9 a3 17 90 55 38 ec 4d 22 f4 6a 48 94 26 2f ae 34 64 94 07 b2 8c 72 99 16 7b Data Ascii: 5Y1)7Emk!gqwn-{JL}*UTKvbym!-hXm{@y'bltZ&0)>J[%1\|Uwz+M%W(c{h'sfUZ5] mv1UZce\|-zE^jHpqYzZwU8M"jH&/4dr{
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: c5 f1 5f 6c 88 12 ff a9 5e 31 2e d6 59 f7 a2 b1 47 69 22 4a e3 16 40 2b 6b 32 6e 71 29 a1 bb a5 49 77 4c 36 0a 39 1a 06 a6 73 75 ac 2a 34 f1 4a 7f 94 f5 a3 57 c3 f4 e7 9c d2 22 f4 7f 2c 7f af 7c 29 cb cb fd 78 6a 2f 65 f1 25 7d 59 f8 ed cb 13 96 4f 4b f1 dd fd 27 f7 d2 ed fb 59 48 ab 96 4e be 21 1c 89 f9 f0 74 33 3b 59 1c 76 c5 b2 f0 dc 3c cd 51 80 21 be 2a 5b 50 d4 4a ec a8 55 9b 85 e6 ba 37 95 30 da 28 39 2c 87 c1 fc b9 ac 29 56 90 a9 74 aa 2a 68 c5 87 fd cb bd 74 1d 4c df ab ee d7 c6 35 ce 97 85 cb 1a cb f2 25 fd 4b 59 96 85 4f d7 58 7c 29 ee 3f 7d 3a 22 3f cd 9f 96 db ab b3 00 78 69 3e 8b 71 c6 d9 2a 71 4c a0 1e 92 43 eb 70 bb e0 9d 6d a1 16 a6 20 ef 22 32 a6 27 83 59 a8 58 dc 08 0c f1 d8 42 fb 30 8a 34 b3 4e 3c 0a ad 88 d8 19 9a 3f 18 d6 4b df 30 8f Data Ascii: _l^1.YGi"J@+k2nq)IwL69su4JW",\|)xj/e%}YOK'YHN!t3;Yv<Q![PJU70(9,)VthtL5%KYOX\|)?}:"?xi>qqLCpm "2'YXB04N<?K0
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: d9 30 18 79 6f a6 42 2b df e6 8c fd 6c 18 65 4c 33 16 02 93 e9 35 79 f0 c3 1f c6 1f 76 01 4c 9f 95 d3 09 a4 4a 89 5c 80 4a 85 48 fa 10 7d 34 c9 63 0f 6f c0 89 8f 5e ca a7 02 5e 8a e7 69 9e 77 6d c3 f0 8b c7 57 c9 08 6e f4 2e d1 cd f3 1c 99 39 a9 f4 6b 8c 20 c8 98 07 62 16 eb b4 b2 dd 7f 53 d0 3c 78 0f 41 33 8a c6 7b ec f1 b9 80 a9 dd 99 be 4a 58 bc 0f 50 91 fe e3 4f 6c b4 ed b5 e6 1d 52 8c d4 10 4f e4 a0 01 38 13 b7 1a 54 e3 a3 d2 d0 30 97 8b ba de 9e d8 b6 e0 b3 3b 2c e6 56 84 d3 b0 3e fb a7 87 a4 26 ef 12 dd f1 2f 2d 7b aa 1a 7a 64 e4 b8 c2 ba c9 9e f5 dd bc 8d b2 33 4c 58 91 be a6 9d 36 7d 05 3b 5b 49 1b c2 ca c8 47 d9 4f a3 81 11 08 b6 56 fa 59 7d a8 1a b7 da 55 e6 bd 42 8d ad 95 db 54 12 72 94 68 0e 0c 62 22 e8 ab a8 80 b6 3e 8a 04 8c 6e fc ae fc 61 Data Ascii: 0yoB+leL35yvLJ\JH}4co^^iwmWn.9k bS<xA3{JXPOlRO8T0;,V>&/-{zd3LX6};[IGOVY}UBTrhb">na
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: eb 46 c3 1b 32 ec 0f 3b 89 a5 23 d1 83 9a ce 36 ef f5 43 31 a1 6c 7f b0 27 35 87 a8 66 18 93 06 72 9d 0f 06 a6 c0 86 23 68 67 f8 e7 57 d9 43 3f b5 45 3e bb 55 76 37 47 56 14 a5 56 e3 42 46 62 5b f8 11 5a 9b be de 2f 31 ea 74 4d 7b 35 c9 10 34 ac 9b ac a6 22 07 cd 1b ad f4 06 26 6c 24 5a a7 d5 1b 32 b7 b1 4b 40 f7 d1 b8 b9 9f 01 d3 8f 62 12 51 17 c0 f9 c0 45 43 26 7d e5 81 4c 36 52 a5 a3 72 aa 22 a9 9b da 43 f1 99 f1 4b 5f d6 63 76 60 7d 99 85 5b d0 1c bd 95 94 d8 ea 3e 9b 84 bb 17 25 93 80 cf 4d d6 0d f1 48 43 21 f3 06 32 24 63 4d 31 f2 91 8f a5 d1 dc 64 1d 93 a1 a0 e5 30 cc 6b 7d 43 87 c7 b6 dd 6c de e1 f9 58 b5 58 47 2f d3 e0 34 68 c8 4c a9 7b 33 b7 b3 32 a0 23 a4 b0 36 42 c6 e7 16 bf cb 28 53 6c fd ee ec 91 63 2f d5 6f 0b 1e 5e ad 13 5a d3 a0 f5 30 56 Data Ascii: F2;#6C1l'5fr#hgWC?E>Uv7GVVBFb[Z/1tM{54"&l$Z2K@bQEC&}L6Rr"CK_cv`}[>%MHC!2$cM1d0k}ClXXG/4hL{32#6B(Slc/o^Z0V
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: f5 e2 56 df 9f d8 0e 37 4d 39 d2 8d a8 19 89 3d a6 3d 6a 94 1a 32 dd 8c 6e 34 84 d1 63 d7 7a 85 d3 64 b8 09 eb 46 f3 56 64 74 8b 1b 75 1f 32 a0 69 f1 59 c9 96 cc 57 3c ed f7 c6 75 30 3d f7 6a cc 6c a3 36 cd 5d 10 31 85 db a8 e9 78 af 38 02 06 b4 a0 0b d5 11 32 4c b2 de 40 a3 b8 6d f1 12 07 31 83 70 4a a2 45 ba 19 29 c1 b5 d8 5a 25 4a 89 b6 e8 f9 00 73 99 cc 4d 46 37 43 de e6 6e de 14 76 d8 c8 87 1b b2 6e 98 9c 86 79 83 49 ce 7c b7 a8 e7 ad 47 7c fd 45 f3 a6 ba 99 6e 15 88 95 3a 81 5a 77 8e e1 d5 11 54 4e 04 a3 76 9a cb 24 1f 75 74 bb eb ef d2 d4 16 d3 82 63 36 1e 9b fd 9b 5f 68 88 5c 3e 54 09 2e 1e 77 b4 9f 21 37 1a 02 43 08 73 ad f9 38 e2 c6 c3 4d a5 d1 0d eb 26 cc 69 6d 69 be de 42 9b 02 29 19 20 61 68 ef d2 c1 ff 99 b7 2f fe 8b 9c 0b 17 a1 11 20 e1 e1 Data Ascii: V7M9==j2n4czdFVdtu2iYW<u0=jl6]1x82L@m1pJE)Z%JsMF7CnvnyI\|G\|En:ZwTNv$utc6_h\>T.w!7Cs8M&imiB) ah/
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 40 45 f0 33 d3 09 5c f7 1e 4e 40 65 14 ce 80 38 1b ad 5f 48 8f f8 6c f9 d3 83 f1 50 7c 17 8b e1 cc 96 7f b7 39 b3 89 0f 23 79 83 11 37 3d f9 cc 69 d0 dc 1a 20 61 6e 42 18 2d 8e 47 86 09 19 72 33 04 6a 45 20 4c c6 03 18 3a 38 88 3a ec c7 9b b6 1c ea e4 61 8e e7 90 94 03 9c 70 1c aa 43 e0 c3 a1 86 43 0d 9d 85 1a b0 4a 83 a6 c6 4f 8f d0 63 0a bd d7 ac 85 89 e1 5f 6e 54 4c 21 09 2e e6 6f 53 fc 96 70 38 87 01 3e 67 d2 9c 06 8d 98 2c a6 50 69 20 43 20 73 99 d5 a9 d5 2b 87 3a ad dc 02 61 fd df 84 2c 8e d6 27 61 fa 61 74 d5 64 0d 87 e3 84 e0 c4 f1 01 d4 38 02 a2 e2 44 25 3c a4 a0 06 be 22 c9 9b 75 fd a2 6f b3 17 7d 57 bc ab 04 ea 2d 6e 42 24 03 ec 16 14 d2 e9 5c 52 ae 0c 76 85 91 d1 50 51 03 68 5a 1a 23 b1 56 ed 2a c8 a8 d6 5c 86 89 6e 98 37 20 ed b8 18 a7 3b cd Data Ascii: @E3\N@e8_HlP\|9#y7=i anB-Gr3jE L:8:apCCJOc_nTL!.oSp8>g,Pi C s+:a,'aatd8D%<"uo}W-nB$\RvPQhZ#V*\n7 ;
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: c5 4a a8 8d 18 d7 a5 4c a1 cc 0a d4 3c b3 22 3c f0 f0 18 1e 40 75 ab 54 4e a2 ee 41 85 b7 d3 e2 1c b3 8f 0d 4f 92 f0 c0 05 f1 df 9f 60 0d 2c 60 9c 6e 11 1b e7 b3 f2 30 3e 1b 63 14 e6 78 95 42 e8 58 b8 3a c4 71 3e 9f d2 51 2a 9f 4a c5 49 6d 4c fe 32 c6 ee 18 59 27 f1 0b 78 9c 7c c1 05 5c a7 8f 31 49 c5 99 c4 22 f1 c0 17 c6 8d 9f fe fd 8f d0 bd 54 d2 20 92 4e a8 28 07 d7 c8 77 c5 33 f1 12 05 a8 4f 57 8c 6e b3 ad 90 9d 6e 55 99 0b e2 80 87 8f 2b 86 83 23 9e d0 09 c2 83 71 21 29 22 20 aa 05 6f 84 86 ef 0b 90 c9 99 2b 38 ea e1 be d5 53 ad c0 89 67 f1 cf 03 79 77 23 7b ff 55 08 1d 0b 37 9f 3a cd 8d a3 fc c7 e4 c3 50 49 5d c5 a0 86 8b e3 38 cf 8b 29 ee a6 0c 72 8a bb a9 ce a7 e8 e6 b8 9c 8a bb 62 38 ee e8 99 1f 88 27 60 0b a4 e3 c4 d6 ed 49 03 47 93 0b 44 f1 72 Data Ascii: JL<"<@uTNAO`,`n0>cxBX:q>Q*JImL2Y'x\|\1I"T N(w3OWnnU+#q!)" o+8Sgyw#{U7:PI]8)rb8'`IGDr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.6	50048	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:51 UTC	1082	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:51 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:51 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:51 GMT Server: fife Content-Length: 14592 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:51 UTC	732	IN	Data Raw: 52 49 46 46 f8 38 00 00 57 45 42 50 56 50 38 4c ec 38 00 00 2f ff c0 3f 00 4d 40 72 1b c9 91 84 c8 8c 34 e5 fe ff e0 ac ee aa 99 35 e7 88 fe 4f 00 fe d7 32 06 c0 8f 98 89 08 79 49 87 98 98 88 35 90 37 cc 58 cc 5a 6b 0d e4 81 aa 59 a6 d8 b6 35 55 90 07 46 3e b5 a6 55 de b5 ec 4f ed 61 c8 1b 91 ac 22 63 8c d1 b4 e2 84 9e 11 63 16 a8 02 38 72 32 29 5b 0c ef 37 dc c1 f9 54 4f 7a 77 77 79 c5 83 b1 19 3b d9 f0 08 0b 60 d1 28 ee 07 06 2c 33 80 1a c1 cd 7a 05 b1 aa 3a 11 11 24 e9 be f4 95 9b 99 ce a9 da d3 d2 49 d2 f5 00 a6 35 33 3d a2 e8 c1 56 7b 66 a6 45 26 b5 9e e5 36 22 d7 9a 77 e0 1a 22 21 6b ce 5b 00 56 ac 59 ef fd 43 17 72 1c 49 72 24 c9 e5 e5 ec ff 6f f3 65 85 44 62 48 1c 6f 9c 3a bd d5 2d ad 0c 4b 92 64 55 55 e2 0e 8d 3b 9c fd 2f 8c 2f e7 b9 06 1c c9 b6 Data Ascii: RIFF8WEBPVP8L8/?M@r45O2yI57XZkY5UF>UOa"cc8r2)[7TOzwwy;`(,3z:$I53=V{fE&6"w"!k[VYCrIr$oeDbHo:-KdUU;//
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: e8 06 77 54 70 0b db 56 ce aa a9 1b 52 5b 97 d4 b2 4b 60 33 b4 98 1c 36 42 4d 1e 51 41 6a 8e dc 59 0e 29 b7 96 73 71 77 43 f1 60 c5 af 8d 37 ff bf 55 92 ec 1c a8 6a 9a c6 e1 59 66 66 14 33 33 33 33 33 33 33 59 97 99 19 97 99 99 69 96 79 77 b0 7b 66 67 ba a7 ab bb aa ce 31 16 b4 db 73 aa da bb fb 73 37 01 85 42 39 d4 f3 c8 7a 2d 3d 47 2c 55 0a 6f 04 72 ef 4d 43 6e 2b 01 6c 71 b9 7f 57 95 80 28 8a cd 43 ee c8 6c 77 2c 81 fb 8a d5 22 97 3a 05 d9 74 29 02 b9 eb 8e db 62 ad 7b a2 10 43 0e 98 c0 35 77 dc 71 5b ac 1c 4e 5c d7 14 43 bb 6d be 79 a8 43 50 2a 9b c2 d8 62 a6 d7 dd 04 84 31 c8 65 d6 d8 4a e1 b8 77 12 10 8c 2b 53 16 4b 31 c8 be ee a4 20 86 d7 bc e3 52 a0 6d db b4 1c ed 7d 1e ea ab 2a b6 ed b6 6d db b6 6d 77 ff 42 46 db b6 ed d8 b6 ed a4 10 27 65 7d bc Data Ascii: wTpVR[K`36BMQAjY)sqwC`7UjYff3333333Yiyw{fg1ss7B9z-=G,UorMCn+lqW(Clw,":t)b{C5wq[N\CmyCPb1eJw+SK1 Rm}mmwBF'e}
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: cf 06 2a e9 6c d3 fa 1c fc 87 4d d5 66 7f e1 96 ca f6 ae 55 6a 4c 03 d8 d2 8e 5f 9a 94 53 fd 08 01 81 c5 24 3f dc c3 2f cd a7 15 25 27 42 e1 d9 b6 c6 41 00 11 04 91 b0 5c 4b 87 d5 a9 a3 73 e4 24 1c 35 cb 3b 70 8b 37 99 67 4c 2d 05 05 14 4c c9 f4 5a c6 fe 73 c6 c7 40 ca 90 5c ea 37 6f 68 3d 34 b7 61 b6 3c 70 55 e9 d1 87 ab a5 7d 00 1c 20 11 71 41 14 8b 53 7a 3c 47 6c cc 49 ed c9 e6 c6 d5 7a 8d a9 4c cf a4 dc 0f a1 80 82 c5 1c 34 66 74 4d 38 0a 85 a8 5b 80 68 42 b9 4f f6 d0 26 aa b5 e7 f9 dc d1 f4 81 11 04 22 80 0b 9a 45 91 e6 22 ee 61 74 e2 d0 20 13 e3 64 6b 33 2c b7 ac 59 1d 10 f4 5a 50 21 02 1c 30 1d eb b7 d9 52 8d 29 4c 66 8d c6 cb 0c 60 13 85 44 50 d9 17 eb f7 fe 4a f4 d1 74 93 3e 12 62 e6 f2 bd ab de b6 5e 16 84 6b 6c 59 ee 2a cf d6 66 b7 51 de c1 6c Data Ascii: lMfUjL_S$?/%'BA\Ks$5;p7gL-LZs@\7oh=4a<pU} qASz<GlIzL4ftM8[hBO&"E"at dk3,YZP!0R)Lf`DPJt>b^klYfQl
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 17 e9 08 27 fd e7 d4 dd 95 0d 7c e3 cd d1 0f f0 97 35 5a 39 a8 08 00 c3 39 4a 16 25 66 8e 3e 38 ba a5 42 c1 07 73 3c 0b c1 33 4a 81 f6 4c 90 94 03 68 bd 5b fa 77 08 08 18 1c 80 35 f6 58 6f cb db eb d2 bd aa ed 41 b6 b0 d7 8d 20 40 10 20 22 0b c6 3b 3b 6d a6 27 cf a4 b5 c9 8c f7 3d ca 7f 9a fe cb f8 8f 62 ef 55 9f cf 46 2e a8 b5 00 30 83 82 cc cf 7a 0e 06 81 fa 16 2b 72 32 40 5f 94 e0 69 23 7b 59 57 94 a0 36 42 00 71 46 2f 0a 88 b1 4d bf b5 b7 ee 6d e3 f6 e2 9b ad ed f3 3a ff 78 f9 c7 d3 29 eb 2b b3 fd c4 e1 3b e4 f6 31 d6 fe af 7f d0 99 65 7d ae 53 4a 86 b1 e0 ee ac 41 8e 49 6d e7 3b a1 c2 17 cd ef 41 69 6e 00 1e 42 82 6a 4d f1 c7 de 68 41 52 60 e1 12 2d 44 68 84 63 ad d6 bd d4 57 58 71 5c 3b a8 d6 f6 79 b5 fb 73 da 8f d6 57 92 c1 7e 50 f9 85 f0 cf 13 52 Data Ascii: '\|5Z99J%f>8Bs<3JLh[w5XoA @ ";;m'=bUF.0z+r2@_i#{YW6BqF/Mm:x)+;1e}SJAIm;AinBjMhAR`-DhcWXq\;ysW~PR
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 01 c1 2e 88 5c 75 f1 0a 03 6d 4b ac 48 d8 2e c3 9c 14 36 6a 0f d1 6a 93 10 e5 b4 9e 3f fe 28 0a 24 22 d4 47 1f d7 fa 6b e4 bc 38 fc ee ae 9d a6 38 08 5f 7f da 03 c9 08 9f b6 fe 0a 34 24 24 97 51 73 65 88 cb 17 66 d4 77 83 c5 6a 8e 9f 7b d3 51 32 67 df 22 e8 03 44 27 d8 4c f2 8c c1 dc a3 85 01 8e 28 84 51 00 53 46 6b ad c5 fd e2 77 8e 3b ad 75 b5 ee bd 7a 4e ed b2 35 00 82 db de 29 db a9 1b a4 f7 7d 7c cf af 7f 4f 4d 29 25 71 b5 ae fc ce d6 bc f9 4d 75 82 5a be da 6b fa be bd 37 dd 8d 0a d6 98 4e f7 c2 ab 07 17 77 f3 f9 e8 e1 88 53 65 93 22 90 01 30 0a 05 2d c8 26 b3 1d 38 1a af 36 8e d2 36 1c 08 74 53 0e 20 70 fa fa 49 f3 80 f7 7f 9e dc 7f 92 7e 48 b5 84 84 6f 2e cb 0c e6 da 8c 52 6b c5 30 b3 71 38 86 72 a1 2a 97 4d 50 fc 01 21 1b 3c e8 86 1b 9e e9 2a d3 Data Ascii: .\umKH.6jj?($"Gk88_4$$Qsefwj{Q2g"D'L(QSFkw;uzN5)}\|OM)%qMuZk7NwSe"0-&866tS pI~Ho.Rk0q8rMP!<
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: da be 97 de bb ba 7b df 8d e9 d2 b0 6f 3b ff 7c 34 5d cc eb 78 92 c8 e5 cd 96 24 ee d5 df af 24 b8 5f a9 fb c5 17 8e 3a e2 f8 4a fb e7 3b 9e 39 d2 2f 7d b7 9f f9 da 6f f6 ea eb 46 b1 e0 82 1d 39 40 7c b1 87 75 ef fd 03 68 67 68 2b 53 07 76 f4 f1 ab 7b d7 1b dd ba 4f 45 f7 74 69 5a 35 8d d6 55 ad bc 6e bb 45 2e 91 1b 7a f5 5e fb 6e c8 60 6d ca e5 d0 63 7d 1f 63 64 5a 17 ba 84 42 42 22 cf c9 75 bc 58 8f fb 9f e0 a8 b3 24 2e 78 c3 70 e4 3f fd 98 07 89 8f d2 4e d8 47 80 00 e1 ec 9d 29 6d d7 5d 5a 57 b7 b1 6f d5 b4 1d 9a 7d 2b d5 4e f2 ba 44 f2 88 24 31 62 ca 17 6d d9 27 91 44 14 c5 5c 0c a7 eb 58 64 4c 02 a0 14 ea a4 bd 3e fe 29 87 5e 9c cf 4a a3 15 b4 c9 e6 6a 0e ff 9a 71 1f 59 7a 88 b6 2b 40 1c c4 69 d5 fc 81 ea b6 b7 56 e7 ab a9 ee a3 b5 6a 34 76 76 e8 30 Data Ascii: {o;\|4]x$$_:J;9/}oF9@\|uhgh+Sv{OEtiZ5UnE.z^n`mc}cdZBB"uX$.xp?NG)m]ZWo}+ND$1bm'D\XdL>)^JjqYz+@iVj4vv0
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 0f 59 8d 69 0f 9c 3c 2c 7d 64 75 9e 5c c5 2c d4 1a a4 b5 29 21 4d 1a 9d 7f da da 2a c4 53 b1 e3 67 dd 7f f1 cf e4 75 db 7b 1e c9 bf 38 6a ed ae 0f 82 65 0c 77 b8 c3 3d dc 6e 49 00 7d 9c 70 86 77 47 43 2f 40 cb 9a 4b f4 e3 3d 6b b1 be 7d 69 5b 3d bd bf b6 9c d4 e7 50 d2 64 32 5a 8b cb 35 ef 47 3c aa fe 3f 1d da d1 7c af f3 2a 89 f7 d7 9a 36 57 18 c3 48 05 87 3b dc 91 ab 02 5c 3d 4e be a2 76 14 87 68 ef 44 01 d0 03 9c 97 a0 e2 64 8b b2 b6 59 9a 95 38 ba d2 a0 b5 e8 d7 16 95 24 e3 29 35 5a a0 f6 ad b6 bd 9a 7b 5e 1e be 22 49 2c 55 f5 79 31 22 2e d7 86 70 5c c1 fd 8a dc e4 10 8f 93 3c 35 50 61 05 c2 a5 f6 b9 54 00 ca 51 67 a2 4d 2c 39 bc 59 c9 49 43 19 47 02 1d e5 23 9e d3 26 66 11 11 ae ef be d7 25 79 bc e6 3d 47 55 9c 75 7e 95 cf 97 55 9f 93 b9 98 4c e1 28 Data Ascii: Yi<,}du\,)!MSgu{8jew=nI}pwGC/@K=k}i[=Pd2Z5G<?\|6WH;\=NvhDdY8$)5Z{^"I,Uy1".p\<5PaTQgM,9YICG#&f%y=GUu~UL(
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: ee 01 e0 f9 8f 87 ed df cd 9f 84 95 c8 48 ea 96 24 43 ee b7 32 3c c4 83 60 18 24 98 19 d6 be 10 33 e5 de d9 fd da b0 4c 47 93 e9 37 a8 08 54 a1 0c 5c 21 8c 9c fb f8 7e 08 08 15 d2 dc c4 4d 9d 47 bd eb 4c b1 1e 09 bb 75 ba ec 09 5c f8 2e de 77 cf 7a 6c 7f ae 2d 22 94 44 c8 3d 49 c4 52 5b 92 48 ea cf 54 a4 11 c1 2e 2b d3 ba 75 f5 82 c9 99 e1 85 c3 69 98 e5 9e 91 b6 90 4e d4 37 ea b1 01 78 51 8d aa 57 33 cd b7 4e c2 60 d3 ec f1 7e 55 b5 a7 86 b8 a8 81 3c 8c 5e 1a 05 c8 00 7f e6 26 6e 91 4c 92 e0 8a eb f1 c5 12 c9 83 78 48 7a 17 fe 7f b1 a3 35 ea 7b 19 31 13 6e 91 d9 b7 4c d9 24 9f 37 e0 5c ea d6 d5 15 bc 12 05 19 a4 b8 60 43 1b 7d 50 e1 7c d4 ad d0 d5 95 88 8e e5 78 bf e6 d2 df c0 bb 04 5e 97 24 be 9d 71 f5 22 15 12 41 12 93 cb c7 97 3f 97 f4 b2 0e 56 ee 70 Data Ascii: H$C2<`$3LG7T\!~MGLu\.wzl-"D=IR[HT.+uiN7xQW3N`~U<^&nLxHz5{1nL$7\`C}P\|x^$q"A?Vp
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 11 cb f2 ea 72 3d 76 8b 72 5b 97 34 8e e9 5c 96 b2 5f ca 3e dd ea b8 90 87 bd a5 3f c1 83 07 ca 92 9e 6f 33 c0 8d c3 7e 65 d6 97 7f 14 71 38 7c 14 b4 fe a2 a9 69 75 b2 ac 57 bb 92 c1 20 e6 7e 34 6f e5 3d 55 eb 97 2f c5 e9 d4 60 64 b3 bb 06 c6 f3 1e b9 32 21 82 90 91 71 1c cb 07 eb b8 dc a6 69 91 7a 5b 5e 5f 1f 96 61 ac 69 7c ef 1b e3 a1 a4 43 49 e7 6e dc 95 f5 39 04 7d 89 7a 27 f9 3c 4d da 87 bb f2 e0 f9 b4 ab e9 2f 2e d4 2b d5 d6 08 c0 e8 53 4c 1b 39 30 4c 9d 66 d7 55 7b 95 c3 cd dd 75 e4 4a a5 52 39 bf 9e d3 e6 a7 af 3c f7 58 91 b7 77 78 1a 81 d7 d5 7f 11 32 0f 42 c4 65 e4 36 d5 0f d6 f9 30 f6 7a bb 3c d3 71 44 92 94 ae a5 07 39 dc ee eb 52 d2 94 4a 59 3f 5c 97 d2 d7 17 cc 9b de 6a f7 f3 7d bf bd de d1 db e7 c3 d1 96 97 a5 87 d0 1a 5b 0b 38 04 c3 ca 2a Data Ascii: r=vr[4\_>?o3~eq8\|iuW ~4o=U/`d2!qiz[^_ai\|CIn9}z'<M/.+SL90LfU{uJR9<Xwx2Be60z<qD9RJY?\j}[8*
2024-04-19 14:06:51 UTC	1255	IN	Data Raw: 21 e7 9c cb cb cb 8b b2 db 1f 0f d4 cc bb d4 d2 94 8b 37 fe a1 6a 07 92 ca 71 c5 92 81 00 45 8e 02 58 7e a6 d5 26 10 6e 13 2c 27 8e db bb 77 8e da 0e 07 c5 50 c7 60 9f a5 04 05 0d 3e 6a 4e 9e 42 09 15 89 29 fe f8 18 dc f6 3e 7d 3f 83 49 05 32 f4 f6 86 f9 e3 fd f9 fa b8 3f ca 98 ee 52 4e d8 a7 eb fd 1e 09 a5 22 15 0c c9 73 7a f7 be 94 32 94 8b 72 f1 30 ec f7 25 a3 bc 3c 5e 88 ae 07 e4 77 7e fe 77 ee d6 1d 5d cb 9d 61 2a d4 31 b5 64 c9 3c 47 43 61 f4 2d 3f 08 48 e6 27 79 10 1f 57 ba 03 92 5b 7d b9 fd 95 43 36 7a d3 98 8d f2 e9 93 c5 1d e2 12 04 96 b3 18 3f 28 78 c4 5b 1c 1f 21 10 19 70 73 35 51 2d eb 0d 07 2e fb 77 f7 fa 97 e3 fe 23 d7 29 61 87 e5 d5 f5 1a 5a 50 90 d2 a1 60 a8 d3 52 86 8b 21 fb f1 98 9f e7 9c 33 f6 65 bf 1f de 57 77 2f bb 58 f4 fc f3 f5 96 Data Ascii: !7jqEX~&n,'wP`>jNB)>}?I2?RN"sz2r0%<^w~w]a*1d<GCa-?H'yW[}C6z?(x[!ps5Q-.w#)aZP`R!3eWw/X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.6	50056	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:51 UTC	1146	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:06:52 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:52 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-S5-t_9GIEMY4ZXMnuPyI-A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.6	50058	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1558	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=2uuinniaxkc5 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:06:52 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:52 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-lkw23YG1kjGimAqTmM5oXQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:52 UTC	364	IN	Data Raw: 32 62 30 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b03<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6c 6b 77 32 33 59 47 31 6b 6a 47 69 6d 41 71 54 6d 4d 35 6f 58 51 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="lkw23YG1kjGimAqTmM5oXQ" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 6b 6c 63 76 71 71 76 73 31 47 59 46 5f 6b 43 61 5a 38 38 4c 6e 69 6a 65 54 37 63 57 32 46 6f 30 79 65 42 78 45 56 6b 78 38 49 57 32 68 42 35 64 6e 79 39 35 38 48 47 76 68 32 48 77 74 32 75 33 71 6a 61 4d 74 6b 4b 38 50 61 50 32 73 37 4e 31 43 52 6b 4e 78 4e 5f 5a 37 75 7a 5a 45 65 69 77 42 4b 6b 52 63 6a 77 4b 68 37 76 58 4a 54 79 30 33 43 4a 56 6c 4c 49 62 79 57 72 6b 57 38 7a 34 6b 48 4b 59 37 32 56 58 68 31 44 5a 56 70 31 6b 31 63 6e 4c 4d 6a 33 45 41 4c 44 59 6e 61 6b 6b 31 61 37 4d 32 4e 5f 65 62 4d 64 37 67 6e 65 6d 63 50 57 49 6b 2d 51 6c 78 5f 61 4f 71 6a 4e 4a 41 6b 6f 4a 70 52 44 6b 72 6a 46 5a 61 38 65 46 6f 66 76 35 73 50 39 51 73 73 46 51 50 48 32 48 55 69 59 52 76 4f 4c 4e 75 4d 30 4e 6f 51 6c 42 4d 4e 48 4c 75 5f 33 78 33 61 7a 37 30 69 31 Data Ascii: klcvqqvs1GYF_kCaZ88LnijeT7cW2Fo0yeBxEVkx8IW2hB5dny958HGvh2Hwt2u3qjaMtkK8PaP2s7N1CRkNxN_Z7uzZEeiwBKkRcjwKh7vXJTy03CJVlLIbyWrkW8z4kHKY72VXh1DZVp1k1cnLMj3EALDYnakk1a7M2N_ebMd7gnemcPWIk-Qlx_aOqjNJAkoJpRDkrjFZa8eFofv5sP9QssFQPH2HUiYRvOLNuM0NoQlBMNHLu_3x3az70i1
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 75 38 69 78 53 50 34 53 71 4b 4a 53 56 72 59 72 44 2d 70 68 5a 48 77 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 6c 6b 77 32 33 59 47 31 6b 6a 47 69 6d 41 71 54 6d 4d 35 6f 58 51 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: u8ixSP4SqKJSVrYrD-phZHw"><script type="text/javascript" nonce="lkw23YG1kjGimAqTmM5oXQ"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:06:52 UTC	615	IN	Data Raw: 4a 4f 62 45 73 30 59 32 4e 54 5a 6c 56 56 4d 6c 64 34 56 7a 64 57 4e 6e 6c 56 61 6a 64 6b 51 55 5a 4a 5a 47 39 75 52 58 4e 46 57 56 56 4e 55 6b 5a 6c 4d 32 6c 76 57 54 52 36 64 55 64 7a 4e 6c 4a 77 4d 6e 68 36 63 6d 5a 6b 63 53 39 54 63 45 5a 79 62 6d 46 5a 65 57 35 56 64 32 70 59 56 46 5a 71 57 47 4a 75 62 6b 64 34 52 30 78 61 51 54 4e 7a 4f 55 4e 4f 52 55 39 71 52 47 70 30 59 33 70 34 54 6a 6b 32 51 55 39 32 61 32 31 4c 55 31 4e 34 63 45 68 6e 51 30 4a 4c 61 69 74 75 4d 33 70 33 54 54 4e 46 52 31 64 53 5a 55 70 33 52 6c 46 48 4d 31 56 55 53 57 74 55 5a 6c 6b 30 62 55 59 35 4e 6e 6b 32 63 32 68 72 55 33 46 6d 64 6b 39 45 4f 47 4a 4e 61 30 74 70 4b 31 4e 77 53 31 6c 51 65 6b 78 4a 63 46 5a 6b 52 58 4a 74 4d 6d 70 48 64 57 6c 6e 64 57 35 6d 59 6d 78 46 63 Data Ascii: JObEs0Y2NTZlVVMld4VzdWNnlVajdkQUZJZG9uRXNFWVVNUkZlM2lvWTR6dUdzNlJwMnh6cmZkcS9TcEZybmFZeW5Vd2pYVFZqWGJubkd4R0xaQTNzOUNORU9qRGp0Y3p4Tjk2QU92a21LU1N4cEhnQ0JLaituM3p3TTNFR1dSZUp3RlFHM1VUSWtUZlk0bUY5Nnk2c2hrU3Fmdk9EOGJNa0tpK1NwS1lQekxJcFZkRXJtMmpHdWlndW5mYmxFc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.6	50059	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:52 UTC	1081	OUT	GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:52 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:02:34 GMT Expires: Sat, 20 Apr 2024 14:02:34 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 258 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:52 UTC	723	IN	Data Raw: 52 49 46 46 f0 16 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c a8 16 00 00 2f ff c0 3f 00 09 47 6e db 48 12 ec 42 50 48 d9 fd ff 07 d7 3e eb 35 a2 ff 13 80 3f b9 9c e0 12 19 11 68 11 08 a0 8d c5 25 45 14 cc 5b 66 ee d5 20 40 40 09 33 33 22 b7 68 4c 47 b1 d1 cf 48 66 6e a9 5e d3 07 f0 cc a7 f8 4a 79 a2 de a1 24 af d8 1a 72 66 ca f6 92 25 61 e5 b1 24 ad 60 e8 9c f5 3e b0 6b 2f f0 10 af f9 d6 aa cb ad 6f bb 80 23 d9 b6 6a a5 bf fb e7 44 14 e1 09 b1 f9 8f 4d b3 ab 78 ea 44 92 24 21 ca 40 21 4b 22 5b f2 ff 57 21 51 a8 8b 0b b7 91 24 bb 4a 9b 5f 20 9e 48 60 2c 6c f2 8f 8a 00 30 fa 3f 01 0a ff e3 2d 43 02 04 5d 96 19 02 60 75 95 2f b7 96 6b d4 c6 ef be 0b 8c fd b9 18 60 30 c0 48 a6 04 01 00 06 03 1c 00 d6 cc 08 20 68 93 31 Data Ascii: RIFFWEBPVP8XVP8L/?GnHBPH>5?h%E[f @@33"hLGHfn^Jy$rf%a$`>k/o#jDMxD$!@!K"[W!Q$J_ H`,l0?-C]`u/k`0H h1
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 6a bc 94 7f 04 0d 7c c6 e0 f7 3a 83 45 79 4f 04 d4 3f 1e ca 2f 82 a6 6c 50 33 00 39 69 50 33 8e 1f 74 1c b4 91 e4 48 ee bd f4 4f e1 f9 a3 7b 04 79 da 41 1b 49 8e 54 dd 17 f8 93 7b 2c f9 bb 62 02 1c c0 78 ff 8f f7 ff 78 ff 8f bb e1 0d 2f bb 1f 7f ae 5f 7e bf 5f 59 fb 29 e9 e4 95 e4 55 1c 82 16 5f 81 f2 ca 8f 57 cc 3d 3a 29 32 4b 27 5f 21 ed 2d fd 80 c7 a7 e2 be ed 03 7a 17 7a 43 6c dc 45 c9 13 c5 ab e4 ab 9b fa 91 73 4e 76 9d 5d 92 9d 3c f6 c2 bf 63 f7 e7 d7 ab af 82 0d 15 74 52 41 09 4a 14 b6 31 1d b6 e9 36 36 28 41 89 d2 77 94 ed 51 f5 ae 43 50 42 11 25 14 a9 31 9f c4 6f 79 d7 6b 4e 38 e5 01 d9 24 35 1a 5d 71 8f 9a a8 ea 12 b6 b1 79 15 28 41 05 15 d4 0a 45 14 a2 44 17 a2 b0 8d 8d f1 53 21 a8 40 05 25 ba 10 85 d4 98 62 29 6c d3 8d 1a b3 bc cb ee 49 87 dc Data Ascii: j\|:EyO?/lP39iP3tHO{yAIT{,bxx/_~_Y)U_W=:)2K'_!-zzClEsNv]<ctRAJ166(AwQCPB%1oykN8$5]qy(AEDS!@%b)lI
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 2f 02 94 aa e0 9b f1 8e dd 9f 55 0a 5a 5f 11 3a 25 6c 1a 16 8d 31 03 19 c6 42 e2 2c 7b 85 22 3a 64 d7 27 25 74 b2 ae 6c d2 da 11 bf 80 4c 0b 5f 4b bb 6d fb cf eb fb 71 fd 55 3f 0a 9d 1d 14 cb 93 0d 4a 50 9e 4d c3 4b cf 22 e9 a3 a0 80 58 85 41 fb f7 b5 cb ee 52 21 15 05 74 fe d1 9e 89 35 eb f5 43 3f bc 1d 3a 3b 36 22 57 1a 76 a8 b1 a6 65 29 42 1f 75 9e 55 c2 dc 96 8d 92 73 4c e6 d9 6b 16 29 0a 28 8d 8b e9 0b 0b 3e f0 3a 4e f4 7c b4 05 81 16 5a 63 50 82 f2 ec d6 fa 70 1a 25 4c 60 67 ed 85 cc 76 93 a4 f1 eb 39 97 ee aa 8a 27 9a 30 02 b6 a0 e4 46 5a 54 ba 25 b5 14 1f 9d 25 8b 05 99 08 20 de e0 a2 b3 22 7a 1a 44 01 76 0c 92 5b 1d e4 66 25 b2 05 dc fd 64 cf f2 c7 25 ce ee 59 ee d4 de 33 0a 3f 27 02 e0 98 fe 6e 93 4e 5e a8 af 66 68 f4 52 99 97 29 ac 9f 9d 55 6e Data Ascii: /UZ_:%l1B,{":d'%tlL_KmqU?JPMK"XAR!t5C?:;6"Wve)BuUsLk)(>:N\|ZcPp%L`gv9'0FZT%% "zDv[f%d%Y3?'nN^fhR)Un
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 39 0b 34 14 36 12 db 86 84 8f c7 08 cf 4e 93 35 a1 c4 ad b5 50 b7 96 c4 79 36 c0 d6 67 cc cb ea 62 9a 03 1e 76 a3 5d 64 4f c0 a6 7b b6 50 19 2a 03 71 9e dd 60 61 c4 ff db 40 c3 40 72 34 63 01 ee 25 53 14 c9 6c ac 69 4c 83 12 f4 34 42 21 f9 29 bf 42 f2 02 4a 1d ed 42 6b 97 6b 26 24 27 0b b0 f7 50 0b 0d 54 50 82 cb 99 56 38 62 33 e3 aa 5a e8 92 38 de 86 e4 09 24 ea b0 0a d4 42 03 15 94 e0 22 39 8d 36 f0 12 a4 ee a5 18 59 0a f7 a3 61 2c a6 ba c2 da 0b 62 ba bc e1 85 e8 69 08 17 30 62 03 3a b1 03 72 34 5a 0a a2 00 44 b9 55 63 33 54 50 82 12 ea 34 e3 82 21 cf 29 46 cc ed ed 68 0d 48 e9 80 30 a5 16 ea d6 9a 2e 42 9d 68 2f c8 98 11 d9 74 8d 25 8e b7 22 4f 20 09 30 2d 54 86 0a 45 58 45 21 d9 67 41 b0 5d d7 d8 2e 3e 93 05 72 3c ab a1 7a 02 dd f8 11 15 68 42 09 56 Data Ascii: 946N5Py6gbv]dO{P*q`a@@r4c%SliL4B!)BJBkk&$'PTPV8b3Z8$B"96Ya,bi0b:r4ZDUc3TP4!)FhH0.Bh/t%"O 0-TEXE!gA].>r<zhBV
2024-04-19 14:06:52 UTC	1255	IN	Data Raw: 7b cc 11 07 53 e4 1a 06 18 56 dd 1e af 19 27 da c0 c0 67 e2 e5 35 58 9c b4 06 45 62 ba d4 5d 84 ae 7e 03 5b 7d e0 92 61 cf 36 8a 67 0a 1f 22 59 63 6f 06 24 1e f6 3e 1e f6 7e d0 1b ca 13 d4 ca fd 6a d4 73 a3 3a 01 06 eb ea 3d a8 40 03 e5 59 11 04 f0 fd 6c 61 03 12 a6 ef e4 a8 7c e6 8c 49 91 03 58 f5 c7 51 0b 2a 0e aa 4d 42 05 2a 28 59 85 a8 e1 25 6b 80 60 9a 71 b6 9c f0 53 cb b3 8a 1c 39 7d f7 4a d9 e2 46 5c 9b 0f e1 1d 1a 63 03 95 a5 08 05 be 08 b2 e1 ff fd e9 4f c7 c5 5a ac f6 e8 c3 bd d7 dc 7b 1f 77 fa 38 7c 6a 74 f7 ff 33 31 63 6d 5f 6e 7e 55 e3 9e 97 04 77 1b 7a 4f 96 ba 27 d4 3d be 00 53 de 7e 7b ca 61 fd ef 4f bc fa af 6e b2 70 ff db bb e7 fd be ff c9 73 ef 8f e4 8d 29 25 ce e5 aa 83 d2 a8 cf 1f 9b 94 e2 55 62 f4 3c bf 7e f9 d5 fc 4c 5b f4 ab c7 ff Data Ascii: {SV'g5XEb]~[}a6g"Yco$>~js:=@Yla\|IXQMB(Y%k`qS9}JF\cOZ{w8\|jt31cm_n~UwzO'=S~{aOnps)%Ub<~L[
2024-04-19 14:06:52 UTC	137	IN	Data Raw: f4 2c 6d d9 06 f9 84 d9 5b 1d 45 29 8e 14 ee d6 42 9c 79 11 c0 02 58 a0 e0 a9 57 94 52 4a 04 82 cc 67 66 61 4e 83 62 f6 54 ac fc 89 fa 44 18 64 56 ca 27 0c 8f 2d 51 f4 c7 1f 7f 44 90 cc 7b a8 b7 5f 7a 0b ef 2d a8 8c 22 01 81 d5 7e 4e 3d 18 80 08 24 e8 e3 6d fd b5 ff c7 fb ff 2f d4 06 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: ,m[E)ByXWRJgfaNbTDdV'-QD{_z-"~N=$m/EXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.6	50060	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1081	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:53 GMT Server: fife Content-Length: 5890 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	733	IN	Data Raw: 52 49 46 46 fa 16 00 00 57 45 42 50 56 50 38 4c ed 16 00 00 2f ff c0 3f 00 09 58 92 e4 d6 6d 6a 77 01 d1 28 c0 f7 3f b0 1e 00 6d 27 df 11 fd 9f 00 fc 9b 95 3d 6b 50 37 75 c7 0e 5b fc b8 da a0 53 e2 7c bc 1e d4 83 74 f7 f0 15 e1 7e 54 8e 84 67 46 00 e1 8b e4 84 3b 60 51 b9 c3 cd 54 da 72 b0 b4 4e 55 53 45 93 7c 55 e5 90 48 93 fb 22 39 23 09 b4 d8 00 48 80 36 dc 2f b2 06 0c 00 12 67 45 60 e0 32 eb 33 20 cd e5 c5 d3 1e 77 bd ab 17 8d ff eb 02 72 6c db a6 ad d1 7c f8 d8 df 36 f3 8f e8 47 60 1b 87 9f 6d 38 8e 64 bb 56 ea 9b d0 8d 9e be b7 f3 3d fb 5f 13 31 22 44 44 6e db 48 72 24 de bd 34 b5 a7 ca 7a 7c fe 11 5d 08 67 be 04 fa 3f 01 12 fe cd f7 8d 72 fc 0a fa 68 d1 f6 41 de bf c2 e6 d4 e3 e9 d2 b0 ee 82 76 ab 4b c3 37 64 4a b6 a3 4f 84 15 2b c0 7c 20 8d 9e 75 Data Ascii: RIFFWEBPVP8L/?Xmjw(?m'=kP7u[S\|t~TgF;`QTrNUSE\|UH"9#H6/gE`23 wrl\|6G`m8dV=_1"DDnHr$4z\|]g?rhAvK7dJO+\| u
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 6d db 6c db aa 4a a7 cb 94 43 db b6 a9 3d fb dc 8f 23 1f 7e db b6 6d b3 8b 93 2a bd ed a4 67 9b fc 55 ac ca b6 f9 db b6 6d ff df bb 27 26 60 07 de f1 ff 3b fe 7f 27 a9 41 0e da 39 60 1c b0 88 4b 38 13 9e f1 33 9c 67 ea dc 3a 33 c6 05 38 e4 d7 97 f2 fd 59 c6 bf b6 14 bf bd c3 a5 2d 93 d5 1b d9 e2 a8 67 e8 0c bd 91 f1 d7 9c b8 ff dc e2 d3 79 3f ce cd cd 38 54 01 19 3b 1a 1d 9a 7e aa ea ef 66 ad cb 5b b6 ab 69 dd be 9a c9 d9 43 46 bd e6 f9 b1 fe 7c 32 c2 e4 51 d2 45 0c cb 5f ce 5e b2 91 c1 f2 4a 9f 82 e4 20 c5 b5 a5 a0 58 16 77 9d d4 14 41 ef 2f 69 a8 2c a5 af 28 a5 ff 7a b2 b2 fc e4 09 70 b5 28 4d 4e 60 79 e0 fe 52 ac b9 0e eb af c9 aa 50 21 0e f3 f5 a5 70 d4 c8 b2 ea 14 d5 cc 66 ea ef 85 c2 1d 65 b5 c9 9e dc 6b 39 48 39 cf e4 b9 9a 7a 78 56 50 14 ba df 78 Data Ascii: mlJC=#~m*gUm'&`;'A9`K83g:38Y-gy?8T;~f[iCF\|2QE_^J XwA/i,(zp(MN`yRP!pfek9H9zxVPx
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: a4 0b a2 9f 51 44 77 23 36 19 b3 46 c4 be b5 ea ff cf ef 70 a3 f7 fb df ed 7f d4 4e 26 7f f4 d5 d2 77 7c 38 fa 66 e9 fa 0c 08 aa 43 ed 3a a5 b3 a6 7f d8 d5 e9 e3 1e da b8 c8 f0 eb 3f 95 3f 59 fe 0f d5 ab 55 f4 2b c1 48 cc db 11 d3 81 f4 18 67 fa 75 66 7a 5b 24 9f 93 6a c1 4a 4a 38 37 d7 5b d9 5d 99 4b 8a 54 43 c0 d4 24 6c 83 87 3d 1d c6 d1 88 02 c0 cb 2b 8e 5d b4 eb 28 6d ac a2 7f 12 d3 99 35 b7 aa 17 88 49 93 33 2d 2e d6 3d ff c8 5b 17 54 f0 fa 11 0a 93 24 14 0c 98 1a d7 ac 5f 88 f8 05 da b4 a2 6e 75 93 07 fc 98 3a 2b 52 da 50 d1 3f 69 8b c4 dc fd df a5 5f cd 64 79 5a 99 98 a9 e6 a8 b7 0f 96 6f 02 8d 94 24 5e 5a 28 fd 46 18 63 04 4a 0d e3 f8 79 cc cf 09 d4 59 0b dd dd 2b 27 2a 26 e8 0e 0c ed 76 3c e9 ae db 6a f6 96 6e 6a 95 3d 8c 00 9e c3 92 b3 0d 9f e3 Data Ascii: QDw#6FpN&w\|8fC:??YU+Hgufz[$jJJ87[]KTC$l=+](m5I3-.=[T$_nu:+RP?i_dyZo$^Z(FcJyY+'*&v<jnj=
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 7e 27 8c e7 c9 a9 94 e8 47 5b 26 4b 1b d3 3c 1f 27 28 3f 6e 9f 66 3c b2 56 6e b4 eb 7d a5 a0 15 11 8a d8 33 94 b6 10 d4 85 e3 5c de 59 ff 69 dd d9 e3 d5 e2 7e b9 ef fd f5 8b 88 07 d9 a2 67 ff 2c c5 d1 f3 b4 88 b6 18 b0 e9 6f fa 51 c4 e4 b6 53 6f 81 f1 6d f7 74 cc 87 fd 1f 60 74 8b 53 a3 c8 60 45 28 19 e6 71 a0 08 dc e9 6f fa a9 b5 f2 c5 8a ad 72 e6 12 e4 78 f1 f2 82 6d 61 02 8d 31 41 e9 46 61 50 04 95 71 72 3f 8f 82 22 b0 e8 47 3f 54 2c 63 f8 79 c6 25 13 e3 3f 2a 61 a5 47 d8 57 c7 c0 22 aa 70 22 ba 81 40 b1 98 cb a5 c8 c0 b2 79 d2 28 e1 63 a5 6f c7 9c 5a 43 fd c6 81 3a 15 8d 2f 0f 44 09 11 c3 c9 89 50 24 94 b6 c8 c2 96 e3 3c 52 ba cb a6 9f ea 6d 6b 05 2e cb 4f 9f 4b e3 8a 03 55 aa 5e 5f 47 6e 9a cc ae 13 2a cb 4b af cc 0d 0d e8 ad 8d c9 d2 2d 6d 89 85 94 Data Ascii: ~'G[&K<'(?nf<Vn}3\Yi~g,oQSomt`tS`E(qorxma1AFaPqr?"G?T,cy%?aGW"p"@y(coZC:/DP$<Rmk.OKU^_GnK-m
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: cf 62 cc a4 0a a1 48 33 19 8a 28 84 92 2c 6c da 50 08 9b f6 ae d7 66 22 8b d9 7c 22 a6 0b 27 82 12 dd 40 ec 19 dd a8 68 4f da e0 16 d2 6c 0b ea 76 1e ad 09 45 28 9c b4 a5 5b 44 77 21 d5 44 1b 44 7b d2 46 3f da 3a c1 c6 98 45 02 d1 9e 5e 23 da 60 d5 56 06 52 26 8b c1 a6 5d ec 79 4b 86 f6 4b 60 33 9f ff 77 09 8a d7 08 45 50 84 32 2c b6 73 a4 0d 85 28 ed 49 37 b8 35 7d 82 0d 99 4b 35 44 f7 a4 2d dd d2 96 0c 1c 4d 16 41 ec 1b fd 74 4e da 8d 0c b5 cc a3 2f 49 54 87 a8 55 5b a4 c1 c2 06 69 04 9b f6 d4 09 dc 12 6d b4 a5 5b 32 8f 3e 7b fa e1 92 47 85 13 d1 86 b2 e7 22 e5 09 cb be 81 5b d3 03 02 29 e1 3f 0c f5 79 70 ac b9 f1 b9 c3 ec b8 2f 4e da 22 f6 2c 21 65 ba 9a d2 3d f5 70 8b 74 4e 10 6d 2a 18 6f e2 f1 e7 ce a4 e5 89 d6 47 aa bc c8 b3 67 f9 70 fd 5c 19 9b 8c Data Ascii: bH3(,lPf"\|"'@hOlvE([Dw!DD{F?:E^#`VR&]yKK`3wEP2,s(I75}K5D-MAtN/ITU[im[2>{G"[)?yp/N",!e=ptNm*oGgp\
2024-04-19 14:06:53 UTC	137	IN	Data Raw: 1b 49 9f 9b f7 43 e3 60 bf f7 4f 7e 7d a7 f0 b1 76 f1 22 fc 10 24 c6 21 1a 23 43 92 2c 0e f7 ba 93 cf ad ff 74 63 0c 07 fa c6 87 ae df cd f5 90 43 75 64 8c 71 33 32 c6 61 72 73 f3 81 5c 27 87 cb 30 6e 6e 46 de bd 19 e3 10 0d e3 83 0f 6e 86 24 0e f7 40 ae df 82 e1 30 0f 37 1f 7c f0 c1 18 0e f7 0e 1b 92 77 df 8d 71 98 0c 37 1f dc dc 8c 71 b8 24 ae af af 93 e1 70 47 e4 80 71 3c 72 f4 8e ff df f1 ff 1f 88 19 00 Data Ascii: IC`O~}v"$!#C,tcCudq32ars\'0nnFn$@07\|wq7q$pGq<r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.6	50061	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1081	OUT	GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:53 GMT Server: fife Content-Length: 26572 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	732	IN	Data Raw: 52 49 46 46 c4 67 00 00 57 45 42 50 56 50 38 4c b7 67 00 00 2f ff c0 3f 10 09 89 6d 23 49 92 84 8c 88 c9 0a 75 af ff 0e cf b3 cf 9d 01 11 fd 9f 80 f9 ef de bf 60 3b 92 98 99 fc 88 cd 32 4f 64 92 1f 00 6c a4 99 da f3 b1 98 7d f8 de 85 53 29 65 0a 33 3b a3 57 50 60 27 d7 25 41 dd 42 3c 7a 25 9a 25 c0 2b ce 6e 59 7a de d1 d2 ab b4 af 7c d6 da 0f 56 e0 5e d7 45 a5 35 0f 8e dd 45 ef 1e b0 b4 57 2b 79 68 99 f6 9c be d1 a3 5d 2f 75 6f 9d 24 6d 6b 5b 6f dc 76 81 b6 12 2d 0f b6 2d 7d b3 0c b0 5d 2c 91 73 8e 6d cf cc 8b b9 e7 e3 fb 9e 0f 6f bf 50 d6 4d 86 a6 d5 61 77 9d 3c a6 d2 2b fa bc 2c 48 ec 7a b7 e9 e4 9d bb 14 c8 ae d4 c5 2d c0 7e bd 1a 25 cc b1 49 25 2d c6 0c 96 de 4c 96 2d c0 56 5e 9a 43 2a 7f 62 28 b6 a9 ce 8c d7 d8 fe 64 92 69 e0 9c a3 53 a6 65 bf 31 21 Data Ascii: RIFFgWEBPVP8Lg/?m#Iu`;2Odl}S)e3;WP`'%AB<z%%+nYz\|V^E5EW+yh]/uo$mk[ov--}],smoPMaw<+,Hz-~%I%-L-V^C*b(diSe1!
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 06 1a e3 9c c6 18 d3 39 e6 28 41 09 47 73 0f 2e 16 e1 a1 ee 60 19 3d 8c 0d a6 30 67 f8 23 46 25 be c5 22 ed df 2b 49 76 fe e7 64 56 8f f7 de 7b 79 ef bd 5b 82 37 d7 73 79 ef bd f7 de 7b 83 bd 76 e0 dd 38 79 ef cd f5 f7 b6 af ae ca 73 64 d8 97 99 27 2f bb bf 2d c8 bb 0d 24 9d 35 34 bd 21 f6 c1 2f e2 b2 b3 85 4f 6e 03 77 0d b2 5b 48 3c 34 61 d3 0f d7 16 86 ca 52 ef 7d 6f a1 69 0b 0e 1d a4 88 a3 2d 14 99 b8 dc 62 45 a4 1c 4d aa 86 4d 9b de 10 12 fe 64 16 a0 44 13 51 48 a6 40 e2 8a b8 96 8a 7a 53 4c 71 56 a0 88 ba 34 b7 30 b4 57 70 98 bc 2b 6d 41 50 82 df 1a 8a 4a d0 1e 19 9a a0 71 af 21 e1 e0 a1 82 b9 86 a2 82 42 4d 65 12 24 4e aa 2d 1c 3a da 80 85 de 95 bc c7 bd 01 99 a2 33 4b 98 4b 0f 54 08 52 ae 6d 5b b5 ad f4 b9 ce fd 6e b8 93 81 94 5f 00 df 35 11 1a b1 Data Ascii: 9(AGs.`=0g#F%"+IvdV{y[7sy{v8ysd'/-$54!/Onw[H<4aR}oi-bEMMdDQH@zSLqV40Wp+mAPJq!BMe$N-:3KKTRm[n_5
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: ef 17 cc 98 39 ef cf 71 8b 87 c5 47 a0 53 c2 ed 61 e1 eb da d3 ed 8e 3e e2 43 e7 b7 c7 cf 9c 12 d4 f6 83 de 75 3b 60 80 3f 1e 18 ce d3 35 ea 1c 3e d3 96 fe 98 37 3b fd 92 db 5d db 97 25 bb a5 8b 2d 73 ee 00 6e b8 91 22 c2 71 75 0c d9 d1 03 56 dd c8 63 db 1b 6e 60 73 7e bb ee b7 30 d6 0a 75 12 13 85 3a 9e 3a 01 76 cc a8 55 ad 1a 34 56 7c 66 8a 4f 9c 69 40 15 76 c4 aa 55 d6 8e cc cc 29 84 b3 de eb 4b 9c 8d 85 43 d3 e6 bc a5 e1 c6 40 1b 57 b3 dd 8d af 9c 2e 7e 5e 8c bd 14 d5 a2 af 39 44 99 fa 70 f5 b8 c6 e3 b1 97 8a af 1e e7 e0 96 4e c9 87 ed c6 67 c1 61 9d cd e4 88 11 ab 96 55 cb c0 2e d2 1a 58 31 5c ab 5a 27 c8 34 c6 ee 63 54 5f af 75 f2 55 0f bd ba 77 7d b9 ef 4e a1 76 f2 89 c1 cc 78 31 7b 70 81 da 1a 0d 0f 45 a1 bb 62 56 a0 74 3f 8e 55 d1 5f 91 e5 8f 50 Data Ascii: 9qGSa>Cu;`?5>7;]%-sn"quVcn`s~0u::vU4V\|fOi@vU)KC@W.~^9DpNgaU.X1\Z'4cT_uUw}Nvx1{pEbVt?U_P
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: a7 2f 1f ed 23 04 78 82 93 2f 7b 2c 0d 0b 57 4d b9 5e 58 e5 46 0e 3b 9f 88 5f b0 03 d8 c1 4e 11 10 c5 fa 2b f5 7b 1b 50 14 7c 1f 3a d9 25 22 0a e9 62 c8 7c a7 b2 22 a3 2f be 75 9f 2b fc 22 78 05 3d 05 f4 e5 9b 72 fa 66 b7 f3 dd f7 51 e8 a3 73 ee de cd 0a 67 75 71 dc e6 94 57 fe cd a1 39 9d 22 58 d3 9a fe 50 d3 8f 5e 61 e9 12 21 a4 b8 11 2a 9e 72 dd fd 5c 0c 5e 9a af 2d 87 92 12 ba 63 00 cc 9d 6c 73 89 c8 4e 04 71 de 07 01 c1 8b f8 74 d3 f9 f3 27 74 1e 81 1b f7 86 f0 20 c8 c1 2b ce 15 9a 5b 72 df 16 45 af 5a 5f f4 28 c0 83 2d 3c df 74 21 88 c8 2c 51 f7 75 76 07 17 2a 45 15 d7 ad cb 5a f0 d8 fb 26 c7 d6 f5 eb be 41 ae 3e 54 4c 47 ee 66 de ca e2 19 e1 6e 71 22 78 9e 7e c7 8d 72 7b 5a bb 43 87 2b 7b d9 7c af f4 37 0b bf c1 5d 96 a9 24 b4 49 30 d6 0c 79 8c 51 Data Ascii: /#x/{,WM^XF;_N+{P\|:%"b\|"/u+"x=rfQsguqW9"XP^a!r\^-clsNqt't +[rEZ_(-<t!,QuvEZ&A>TLGfnq"x~r{ZC+{\|7]$I0yQ
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 24 c4 bf ad 9f dc f2 f3 f5 b9 5e a8 7c fc ee b6 cd f1 1d 5f e9 dc d4 2c 20 d4 fe 70 a0 16 a5 3c d9 ec b0 88 2f 36 05 d7 b7 d6 ce 66 b8 fa 1a 63 90 07 5f 23 c2 a2 75 b6 5e 84 77 45 9f 75 c7 1b d8 e8 e3 98 db 89 4d 91 71 3d 26 9d fd f0 f6 49 61 fd f4 e0 ac ac 09 6b 99 86 a2 63 59 29 a5 09 ca 2b 6f c6 b5 06 0e 5b 41 50 3e 99 cc 1e f0 8b 68 0a 8b d5 4a 79 d5 9f 00 f1 fa 89 32 46 d6 97 6f 8d de bd 45 38 88 da f1 13 11 89 3b 8f ba 35 ca 2b fc f6 e8 9c 0f 49 6d c2 ec 66 f6 56 df 16 df 77 5e 85 b8 65 51 9b 3e db 50 b4 9f d3 a5 f6 67 4e c2 43 c8 8c 76 4e 19 71 d6 59 b3 4a 34 96 43 5a 26 58 2c e3 59 7b a3 be 9a 4f 0d e9 78 ec ac 3b 8c cd 6a f7 e4 c6 d8 77 59 21 3d d9 5b 4a 36 76 55 1d b9 dd ef 61 63 37 76 c3 61 7a 2d 6f bd 58 43 e2 3d 41 76 5e c1 b6 d3 6a 2b aa 1e Data Ascii: $^\|_, p</6fc_#u^wEuMq=&IakcY)+o[AP>hJy2FoE8;5+ImfVw^eQ>PgNCvNqYJ4CZ&X,Y{Ox;jwY!=[J6vUac7vaz-oXC=Av^j+
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: bf e8 53 42 a0 e8 b3 2b 16 b7 8a ab 3e 8e 61 51 dc 68 ad 6f ce e9 b7 64 48 df 15 3c b0 b0 3a d3 0b 22 a7 22 a7 79 ce 22 fb b0 b8 c1 80 75 10 67 5a 7f cc 6c 43 2b c0 da 38 e1 72 b1 f8 2a 84 f8 69 ac c4 ab 20 2c ae 7c 1c bc b7 57 07 23 41 89 8a c1 84 07 29 4c 70 4a ba 83 4f 7d 1c ae b0 1b 78 11 9b d2 53 58 67 9d 57 0b 77 de e7 6a 2b a9 0a 2b 73 19 42 b0 9d 3c 0a 49 1c 2e 6e e8 66 45 a1 33 f3 78 03 da 2f 42 d1 8a 36 64 21 46 6b af 8c 9d 72 be d0 f2 78 6c a6 01 5e 86 f8 ee 1c 2d 62 4c 66 78 1f 08 48 af 08 f9 7b ea 00 22 af e5 dc 82 1a a3 e5 79 2d 18 ac 03 34 e8 f4 07 4f e0 06 ac bb f7 f2 24 96 27 d9 0f 2f 76 e5 83 5b 65 2b 15 1b f3 3b eb 55 a1 32 15 5b eb fd b4 dc 05 25 24 36 cc b0 81 10 e2 b0 d5 61 f4 43 25 6b b1 3a 61 dd 6d 67 17 35 28 27 b3 50 a0 a7 62 ae Data Ascii: SB+>aQhodH<:""y"ugZlC+8r*i ,\|W#A)LpJO}xSXgWwj++sB<I.nfE3x/B6d!Fkrxl^-bLfxH{"y-4O$'/v[e+;U2[%$6aC%k:amg5('Pb
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 01 66 09 d4 1e 17 87 1d bb f7 97 89 70 a8 81 1f 06 e9 65 6e 3f 14 ce 14 57 18 b7 f9 b8 48 0b 68 5b 67 dd ef 42 2d b6 34 ae cd c7 ed 14 c4 cf c2 c9 a8 74 62 8d b8 60 39 2e 2d 9d 5d c7 56 d2 69 69 41 08 f9 40 16 cc f4 a1 8b 6d 6c 31 01 69 b5 0b b7 40 61 f9 a5 00 60 89 b7 f1 36 34 58 3b a7 a6 03 62 f2 a4 e6 91 3a 04 16 b5 22 56 6b 20 e6 27 fc bc 33 20 c0 2e 48 8c c0 5a f5 ac e9 80 1d 21 d9 02 5c 07 98 02 7c db 24 36 17 91 5d 00 13 c2 54 82 b5 b9 be 42 d3 1d 1f 68 d7 4f d2 d6 ba d4 59 88 83 9d c6 8e ae b4 ee 4f 4a d7 e1 e2 01 9b 88 dd 9a 07 d6 25 96 22 e9 b0 1d bb 2e 94 20 9d 83 7b e9 02 02 db d0 b3 93 d2 19 b6 88 49 9d ef bd 8d 63 07 d6 61 7f 2f a1 6c b2 96 81 a8 d4 8c 01 42 cb 6c 16 10 09 98 75 e8 64 c3 3a 03 d8 b6 50 43 0d 22 57 1b 2b 1b ff 7b 74 59 8d 4c Data Ascii: fpen?WHh[gB-4tb`9.-]ViiA@ml1i@a`64X;b:"Vk '3 .HZ!\\|$6]TBhOYOJ%". {Ica/lBlud:PC"W+{tYL
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 85 e5 e6 90 30 8d 5b 76 8b 35 89 d2 3a cf e2 19 71 96 4b a6 ae 05 0d 98 4f 33 94 fc e2 ad c6 80 c4 36 31 b1 d0 3e b6 79 ef c8 00 53 1c d6 e6 9a 99 45 b9 c4 8b d7 4e 34 37 53 c8 7b 73 93 3f 7e c3 b5 42 b4 4d 8d 6a 7f 4e 86 31 c6 28 49 cb c3 59 ac 59 a2 38 3e ea 16 49 d7 99 2b 49 aa 77 5b 56 79 ec d0 d4 5b 33 eb ba 0f 70 61 8d 72 ba eb cc dd 9d d2 6b 9c b5 89 51 f5 f8 5a 62 9b 88 74 c6 d7 9d 55 14 dd b5 7c f8 93 d3 3f 69 cc 96 ff fd 13 5d df b9 78 26 df 7c a9 3f 88 5b 6c cc ed a6 e5 42 b2 bc 8e a5 ce 8a 5b 73 9b 85 76 26 be be 79 87 2a 0c 6c 8f 39 1f 4c 22 98 71 a6 75 ae 01 6c 4a eb e3 b2 37 d4 bd eb 8b 99 56 d9 56 93 69 6e e9 a1 77 bd 0f 66 1b f2 ce f7 7d 6e 94 77 bd 20 ce 5c ca da a5 47 6f 30 da f5 74 63 3b 7f 30 0f 48 08 4c 8d 62 67 8c 96 99 c0 94 5d b1 Data Ascii: 0[v5:qKO361>ySEN47S{s?~BMjN1(IYY8>I+Iw[Vy[3parkQZbtU\|?i]x&\|?[lB[sv&y*l9L"qulJ7VVinwf}nw \Go0tc;0HLbg]
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: dc d7 74 2e c1 52 60 5d 5f 5b d1 f7 19 2b 9c be e2 58 59 77 b3 2a 70 37 28 32 9b 4c bd bd b3 dd 42 84 79 2f ca 61 17 7d f4 ce 73 67 cf 62 ad 2f 1c dd c3 ce 38 e6 3e e3 d3 dc b1 b9 45 df fa 75 46 21 c6 4d 91 28 16 d5 75 31 c5 bb c7 b6 c7 6d 3b 47 e4 3c 79 87 8f 06 89 c3 90 18 93 48 f0 75 26 26 f6 bb 24 7e 52 de 7e 90 2c 93 ba c7 6f 44 44 ae b0 bb 4c f9 dd f8 62 b3 5e 17 d7 c5 ad ae 15 f5 42 a6 8b 6f dd 04 fc 93 05 84 32 5f a0 bd b9 e6 d3 64 36 a8 b1 32 4e f7 19 32 f6 a6 cd 3c 45 cb ed c3 ea f9 ea 62 d3 3e c9 6e 6a ef bc 97 1c af 37 be 0d e6 30 9f d6 e2 bd 5d 0b 2b 7d bc 3a 41 ab 9c db b2 76 b6 b3 2c 78 aa ad fa 55 76 b1 ec 77 a6 b4 11 07 e9 a6 fd 36 49 86 ef 0b be f7 fd ce 6e 4b b6 65 bf c3 5a 75 94 61 95 9b 5f f8 33 8f 87 f6 41 5c 94 cd ba e3 9c 48 90 d2 Data Ascii: t.R`]_[+XYw*p7(2LBy/a}sgb/8>EuF!M(u1m;G<yHu&&$~R~,oDDLb^Bo2_d62N2<Eb>nj70]+}:Av,xUvw6InKeZua_3A\H
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: b7 ff 79 ce be 97 ab 6d bc e8 b1 d8 82 b4 55 9e c2 7a 95 6a 3c 71 e8 b7 4a 59 d4 c7 41 fa ed a3 54 9e 00 60 83 81 52 62 71 76 11 a2 79 1a 14 c4 c2 fd 79 08 b7 e6 d6 fb db be e8 53 13 5b 13 62 8b 2f fa 10 7b f0 69 3f 11 ac c1 98 7a a1 62 63 c6 57 ba 33 6a 1c 92 e0 bf 19 6a 65 82 ad 41 af 59 db 6b 7c 1e d7 e3 ad c0 d6 eb fa e5 3b be 61 3d be b6 ef 77 ba 7e fd 93 6d 6d 0c 5b 63 c6 d2 42 0c b1 ea 68 a7 53 53 d7 79 58 98 19 45 82 da a8 f3 9f 6f fd 6d bc 33 a1 47 9c 4d 51 a4 ea bf 14 c7 28 d6 ae 68 71 a9 75 e2 8a 98 d8 ae 9d 85 d8 e0 b0 5b b2 69 a0 0f 33 6f b7 3d c5 65 ef 0e ad 55 a0 50 f9 ac 4f db 7b fc f9 57 5b e5 ad fd 0a 5c eb e8 b1 e6 48 15 c1 33 56 14 c6 9c 63 12 3b 6f 8f cb 35 f5 ae 0e 2d c6 18 fb ed 5a ea 2b 53 53 7b 19 d7 e6 f3 78 71 ab c6 1b 0c 06 e3 Data Ascii: ymUzj<qJYAT`RbqvyyS[b/{i?zbcW3jjeAYk\|;a=w~mm[cBhSSyXEom3GMQ(hqu[i3o=eUPO{W[\H3Vc;o5-Z+SS{xq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.6	50062	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1081	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9308 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:02:44 GMT Expires: Sat, 20 Apr 2024 14:02:44 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 249 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	723	IN	Data Raw: 52 49 46 46 54 24 00 00 57 45 42 50 56 50 38 4c 48 24 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 a0 72 da bd fe ff c3 33 59 fa d4 d7 88 fe 4f 00 1f 7c bd 06 31 a5 8c 98 11 95 18 a9 c7 6a 48 2d 5a e4 4e e0 ac 88 b2 13 62 aa e8 48 d6 dd b1 fd 03 2b a1 6f 37 d4 c3 76 e5 59 03 80 0b c7 31 03 9c ff d8 63 48 95 d8 26 24 25 d8 7e 09 78 5a cf d3 f9 ae 0b 38 8e 24 49 6e f2 01 04 ff ff 1c 3e 81 b6 ac d4 b5 18 34 16 8d 36 75 5f 73 90 b2 24 d3 71 24 db 4a d5 38 4b 42 38 61 90 7f 24 ac f8 ee ae 05 ab b1 6d 59 d1 d2 c0 17 fe 15 a1 80 54 10 f0 72 de 65 1e ba d3 ff 09 40 7f 6c 08 82 e0 37 82 20 10 91 60 67 2f 5d 2b 90 1e 44 82 e0 3a 7b 49 7a 20 08 02 82 bd 76 59 a3 d1 20 3e a0 7f 11 3d 10 04 91 ad d4 05 9b 4b 43 44 40 e8 f1 7c 52 1b 08 21 d9 5a 63 79 dc 90 31 00 02 02 44 0e Data Ascii: RIFFT$WEBPVP8LH$/?M8rFr3YO\|1jH-ZNbH+o7vY1cH&$%~xZ8$In>46u_s$q$J8KB8a$mYTre@l7 `g/]+D:{Iz vY >=KCD@\|R!Zcy1D
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: f7 27 e5 f6 d8 b6 6d db b6 6d db b6 6d db b6 6d db 9e ea 4a 52 8c ff ef 7b b4 24 49 52 ed 58 11 d5 f7 5e c1 30 33 6c 65 b6 f0 76 c1 cc 7c a5 c7 bc 36 c6 2f 66 18 96 74 4e 77 06 44 db 56 ea 46 37 8f 1a 21 cd 8d 41 40 9b 99 0f f0 01 27 fc e5 a4 ff 38 e9 3f 4e fa 8f 93 79 e1 d8 3f cc f7 b3 38 da 17 ab 39 f6 17 f3 3f 7b ec 37 2b 25 cb 53 29 7f 67 df 02 f4 4d 6b df 14 87 e6 60 78 16 c7 e7 66 a8 bb 86 7a da f8 0c 8e cc ec 09 13 73 bf 6e ff f2 9f 47 7f e1 e3 53 3f 76 cc e5 5f e4 94 8f 39 70 d0 06 07 6c 54 0a ca c0 18 e3 81 89 5d 2c c0 51 7c d8 59 3c 60 65 67 66 5e 9c f0 50 ac f0 b3 df cc 3f f8 40 be ff 1a 97 f1 f2 1c e6 89 13 bc 0a c8 f8 64 25 bc 14 17 aa 8c 2a 29 e0 a3 77 e6 09 7b fb 80 05 96 83 d3 72 c2 42 69 d0 1f f9 70 fa c6 f5 f9 39 cc 43 1f 9c b3 33 56 cf Data Ascii: 'mmmmJR{$IRX^03lev\|6/ftNwDVF7!A@'8?Ny?89?{7+%S)gMk`xfzsnGS?v_9plT],Q\|Y<`egf^P?@d%*)w{rBip9C3V
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: db b9 18 20 32 90 5e ee 14 de 77 61 5b 06 7e ee 83 fc c0 9d fc d0 b5 cd 21 fb ff ef f4 61 50 77 e6 c4 72 61 00 95 6e 97 da 59 6a 5a 82 6e b7 d6 8c 7a 96 a1 16 65 44 28 4e dd 46 bc 09 ea 30 6e 56 19 32 4b f8 ea db ff 6a 0d 38 fe 3f df 71 57 be eb d8 a2 cb 9d 29 76 61 98 f4 70 8b 9d 2a df 10 d9 8b 01 a2 6e bc a4 2c c1 4e 97 d5 d9 3c 2a b1 d3 97 45 e4 12 8b 2c 61 53 1f 59 66 91 21 09 2b 59 a2 9e b1 79 5a 00 2e fc 21 5f 7d 02 3f f5 58 1d 22 b9 49 5a 81 3a b3 46 01 4c dd a8 02 a3 a2 74 99 71 1c 5c c5 96 22 dd b1 f1 b1 8b d8 c5 82 66 96 42 69 80 60 74 86 8a 89 57 9c fc df 9a c7 85 e5 a3 2b a5 dc 34 72 56 61 b8 1a 18 be 87 d4 fb ae 48 15 95 05 f0 c4 4b 45 b1 17 f2 ee a0 1e e3 30 8d 0c be 09 39 09 22 32 c0 1c 2e d4 59 db 58 2e f3 6d 37 f0 93 8f d5 fb 11 df b7 40 Data Ascii: 2^wa[~!aPwranYjZnzeD(NF0nV2Kj8?qW)vapn,N<E,aSYf!+YyZ.!_}?X"IZ:FLtq\"fBi`tW+4rVaHKE09"2.YX.m7@
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: c2 c3 8b fc f7 f8 73 52 82 7a d9 24 ee 8f 97 a0 19 9f 3b 1c a8 97 dc c2 9a 25 0e 64 0d 46 55 78 8c 69 29 90 00 c8 a4 b6 15 9d 66 99 ed b1 c1 aa 42 ee de 5c 63 d0 9d ea 61 ac 43 e9 b9 ac b9 95 51 93 93 23 ee 00 25 9c 9c 9f 17 dc 58 0f 5c a5 9a 15 8f 58 af aa 60 25 58 37 a3 fb 66 a2 f1 e4 5e 91 65 50 45 5b 3a 30 4a 0a 34 d8 b2 a2 2c 30 55 45 77 a5 26 43 26 7e f7 4c 4b 9e 40 1c 1f 51 26 70 18 3c e7 2c f3 24 f9 c0 06 aa ce 76 54 34 5e 89 22 4c ce ca 6b 5f ae a3 f3 b4 a6 c4 d8 6c f5 88 03 47 b5 82 41 b4 c5 85 47 9a 71 c8 b4 b3 97 01 06 a2 f5 50 d3 05 19 24 0a f5 76 b8 29 a6 6a d9 c6 82 3a ba 19 98 44 4c 01 54 2b 4f c4 05 38 ea 1c 05 47 1a 5f 08 3d b7 45 e0 3b 1d fc e0 96 bc e9 09 87 e3 d6 69 46 3c e3 00 97 28 2e 5f e4 58 03 a5 36 47 a2 a5 1a 4d 35 f9 04 12 46 Data Ascii: sRz$;%dFUxi)fB\caCQ#%X\X`%X7f^ePE[:0J4,0UEw&C&~LK@Q&p<,$vT4^"Lk_lGAGqP$v)j:DLT+O8G_=E;iF<(._X6GM5F
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 42 4f 31 21 80 7e 36 25 36 be af a8 a3 23 9d c3 0f dd 63 ba be d2 25 4b e1 08 2b 2d 94 79 a1 6d 1e 62 6e bb 90 ca 88 4f 38 3d af 3a 6d d5 68 f8 8c 5f f9 63 de 75 d9 25 9e 30 cc b8 c7 09 5b c1 da 6f 2c 39 8a ad 30 b7 26 32 9e 53 10 53 c6 14 3a e8 11 2d b0 51 c3 48 fb 5f 69 00 ec bb 96 22 da 0a ff b8 b2 0c 91 c8 df a2 ad 86 45 2e f4 78 4e 59 18 a9 8f ec 67 78 da d6 e8 1f 1a 7f f5 f5 ec 14 f5 8a 9a 9c 50 5f 11 28 8b 18 74 f1 ad 69 86 1b 04 81 1d 62 05 e8 bd 7d d4 9c 86 31 47 f7 00 04 9a 1d 7d c5 37 98 4a 3a 43 9a c7 32 e5 ca 2e 7c 91 66 19 23 e3 7f 8b 34 1f 78 3a c3 bb 9f 1d d6 bc f9 84 d3 c6 ab 4f df 68 2c b6 dd d8 7f e5 0e ec 2e 7c b8 ef 84 e7 51 f6 2c 9a bb c1 48 47 74 cd c2 9f d8 70 6d 0a 5b a6 e3 ee 11 9c c5 3e f0 0c 1f d9 cc 8a 97 d9 c2 66 4b 98 a8 76 Data Ascii: BO1!~6%6#c%K+-ymbnO8=:mh_cu%0[o,90&2SS:-QH_i"E.xNYgxP_(tib}1G}7J:C2.\|f#4x:Oh,.\|Q,HGtpm[>fKv
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: a3 b0 bb 7f bd 2b 3a 29 cb a3 a3 f9 29 dc 50 fa a8 b4 05 6a 29 8f 4b 1a a8 b2 39 b9 40 dc b0 64 6f 5f fc de 45 ac 2e fc 10 ba d9 61 68 c6 3e 7a 6f 1f 55 9f 85 d1 a4 af c4 00 74 00 91 6c 96 a8 2e b3 9e 82 62 dd 17 db 62 a8 c0 29 66 5e 1d 1b e7 f6 df 53 f4 5a ef d6 64 40 2a e8 dc 99 cb 79 2e 1a 26 50 ca c1 b1 ec 96 67 05 03 63 60 56 f5 ca cc 10 1c 8b 20 45 00 a9 6f 56 47 ad cf 46 df d1 0b 43 ee 05 ba 55 c9 5c 1d e7 ea 3c 7c 2f 78 db cf e0 14 ea af 7a 28 47 91 25 05 34 c3 df ff f3 12 2d ed a6 ab 48 37 c8 83 9a 5a 7b a4 71 2a 40 74 a4 fb d6 1f b2 ba 46 56 a6 e3 28 63 2c a3 90 ae ee 17 f7 65 8c 27 93 9e a9 91 80 38 1d e4 9d c3 91 5b 6b 9b 43 51 52 d4 ac b3 d6 28 d3 0d a3 28 8a ba 79 52 96 2e 1c 40 67 51 24 83 1a 3d bf 0b 24 51 e3 76 70 dc c3 7d 53 5f eb ae 1f Data Ascii: +:))Pj)K9@do_E.ah>zoUtl.bb)f^SZd@y.&Pgc`V EoVGFCU\<\|/xz(G%4-H7Z{q@tFV(c,e'8[kCQR((yR.@gQ$=$Qvp}S_
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 80 4d 2b 3c d9 1e 23 b3 64 d4 d5 1e 68 65 2e 85 9b d9 67 d3 a2 16 14 9b a1 99 9e 93 a5 42 52 ad 08 54 41 78 3d c1 56 63 3b e8 87 5e 76 68 76 a8 83 4b e4 02 74 a0 34 8a 5a be ec dc cf aa ac db 31 a9 46 82 00 f2 d9 3d ef 9a 97 2f 29 5d b0 0b 00 a1 87 6a 86 31 e9 fe f6 3f 85 81 58 66 0d 37 04 8e 86 db 2e 68 c6 84 b7 2b 5a 8f 4a 55 88 93 d7 ae 30 bd 5f 07 e0 88 ad 7c 42 19 56 f5 5c 24 8a d2 41 f8 c9 43 71 ff b5 8f 7d ed b2 8e 81 86 7f a0 ff dc e3 c3 33 fd ed e7 ed 32 57 0c b8 97 8f c7 ea ae 8b 32 1a a8 ad 69 8a 55 3d 83 db ce d0 30 73 f5 ab 50 35 26 2e ab 9f 3d 55 95 44 ae f5 b1 91 4d 82 38 60 d4 01 07 97 e0 22 08 cb 5a 3e e7 f4 2f 1f 3a ff 4c 31 51 83 57 05 58 be 3b 7e c5 6b 4b 8d a3 13 e5 fd e9 be 9b 23 78 f5 3a 7f 63 9a f7 7e ee 94 6b a2 57 74 f6 3c c5 22 Data Ascii: M+<#dhe.gBRTAx=Vc;^vhvKt4Z1F=/)]j1?Xf7.h+ZJU0_\|BV\$ACq}32W2iU=0sP5&.=UDM8`"Z>/:L1QWX;~kK#x:c~kWt<"
2024-04-19 14:06:53 UTC	1055	IN	Data Raw: a9 9d 56 4a 35 6b 49 31 48 12 a5 54 0e 0b b1 a6 1e fa 78 fc d9 4f ad 39 7b f5 87 43 56 45 bb 00 c3 67 5d 43 52 d2 fd ec 96 e5 05 6d f4 f4 e6 29 78 a6 db b2 bf 76 27 a4 8b fc 9e 2e bf 8a 0f 2d d3 67 0e 64 74 81 ed 3e 1d 4f 38 27 d1 9c 6b b9 2a 6e c7 44 a4 c8 61 6d fb 6e ee a2 75 e1 c6 a7 fd 99 a9 7c 7a d2 af 2d ad 31 ad e9 cc 44 32 fe 8f c5 79 26 81 86 c8 c5 86 9b a1 90 92 c6 ed 7c fa 65 b9 0c 0f b5 8b 51 cd ca ec 14 f4 ed 5a 48 a9 de cf db 02 58 2d fc a8 67 cb a1 25 37 27 37 72 74 86 a9 90 16 f9 44 0e 54 6d 69 ea 7f 3d 49 35 7f 1e 13 29 65 b1 76 7c 27 7f c1 ee c0 cd 8f 17 9e 7e de 9f d6 e3 0f 9e 8d 6c 1f 76 1f 56 17 4c 13 6f 6a b1 4d 19 51 ae 35 9a ad 13 ff 3e 19 88 bd 4c dd 76 5c 97 d5 a6 5a 20 19 4e 41 2a ec 6b c2 c7 2a 84 55 c7 bc 2d 9f df 1b dd f7 fa Data Ascii: VJ5kI1HTxO9{CVEg]CRm)xv'.-gdt>O8'knDamnu\|z-1D2y&\|eQZHX-g%7'7rtDTmi=I5)ev\|'~lvVLojMQ5>Lv\Z NAk*U-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.6	50063	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1080	OUT	GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:53 GMT Server: fife Content-Length: 5456 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	733	IN	Data Raw: 52 49 46 46 48 15 00 00 57 45 42 50 56 50 38 4c 3b 15 00 00 2f ff c0 3f 00 2a ac d6 f6 af b6 2c e7 1a bb c3 cc 69 66 9c 7b ef 66 ee c2 03 55 7d aa aa bb 8b 99 99 99 72 8a 99 99 99 19 47 cf f9 a7 b9 f6 3c a7 5c ef 6a 17 70 d1 b9 02 86 b2 ab 5c 83 0a 33 ee 13 92 f3 90 0e 47 a6 ed b1 d3 84 e3 c8 31 e8 1e 53 b6 4a 5c c6 58 71 e4 38 92 e4 6c 47 2e ed 70 5f 40 e3 1a e3 5c 40 93 8a ca e8 4b 98 e7 06 f6 88 da 2e 2e 96 66 c0 d3 0d a0 63 d0 9c 75 54 c8 b6 cd 68 bc 81 e9 c2 91 25 c3 0d b2 c6 f4 e1 48 8e 6d f9 6f 70 e1 72 e1 73 0b 61 74 4b d6 a8 3b 38 ea a8 5c c0 0a a8 5c 40 97 0c a7 b6 9d a6 74 98 99 54 d4 0a 39 5e 61 a6 1d e6 e4 a7 c2 b0 d4 51 51 ad 82 e5 4b ce 31 5a b7 0b 27 0e 6d a6 93 00 d9 b6 69 47 7b 6c db b6 6d db 13 db b6 6d db b6 ed 7c c5 f9 88 6d db b6 29 Data Ascii: RIFFHWEBPVP8L;/?*,if{fU}rG<\jp\3G1SJ\Xq8lG.p_@\@K..fcuTh%HmoprsatK;8\\@tT9^aQQK1Z'miG{lmm\|m)
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 0d 2b 2c ec 47 a7 df e7 99 d7 02 9a 0f a4 fc d2 da e1 d7 2f 40 75 25 91 34 16 2d 02 02 5c 32 b3 0b 81 20 5f 03 5b 5b 25 71 aa e9 e9 2d 9e 99 01 d9 19 94 9b 7b 2c 40 ee 26 00 27 3a 74 08 10 c3 cb ca 0a de b8 71 70 20 e6 79 b1 e0 76 cf 9e 8d aa ae 46 7f 69 ae 21 8a 7d 17 de 28 25 d3 f6 ed 63 30 b3 b7 37 42 16 59 3c 3b 4b 57 68 f7 ee e2 3f 7f 52 52 e2 ef df 13 5e bf 1e 52 0e 01 28 a7 a0 d0 35 2d ad 9e 95 55 1d 0b 8b 46 ae ae 3d b2 b3 cf bc 6c 69 89 d5 94 96 96 8b b6 4f 4a aa 63 66 b6 b5 89 bb 7b 8f b4 34 47 26 63 d6 e0 20 a2 bc 8a 4a 54 00 b0 f7 12 a9 a6 a5 85 1e b1 36 49 ea 9e 3d 1e 88 1a 9a 9b 03 00 54 d1 d2 d2 19 40 a1 7b f7 88 2d bc 55 56 4a 0a e8 6e 01 10 00 5a c4 97 82 b6 23 03 be ef 6a b1 60 7e a0 7d 6c ec b4 8e 0e aa e5 6b 6b 03 73 73 2b ab a9 69 aa Data Ascii: +,G/@u%4-\2 _[[%q-{,@&':tqp yvFi!}(%c07BY<;KWh?RR^R(5-UF=liOJcf{4G&c JT6I=T@{-UVJnZ#j`~}lkkss+i
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: e7 3b 78 50 00 78 e1 fb f7 d1 99 09 91 92 fb 1d e6 1f 03 5b 8a bc 78 21 00 74 b1 87 04 26 cb 57 56 bc 4c 0a 7b 62 7d 3d 00 40 56 ca e6 cd 9c 92 4d 71 c0 39 ff c4 64 9f 28 19 37 de 4e d4 23 23 43 d3 1e 53 f4 2b 49 ae 6c 89 c8 95 d8 74 08 0e f6 38 5d c8 3f 2b 30 a5 5d 78 b8 43 db 8d 9d 89 44 49 67 02 41 a3 76 56 1a 38 3a 12 1c 0c f8 3c 60 ca a7 0a 00 99 f3 aa 00 70 fe 48 f0 eb 45 0d 9c 9d 7d 85 f3 1b 39 3b 03 93 fd d9 de 9a be 3d 13 13 9b c5 73 73 b4 12 e3 27 d9 b9 53 b2 7c 79 99 7a 41 4e ec 82 b3 2e 0d 6c 9e 5d 23 c1 bb 23 c5 7e ff 2e fa e5 0b 7a 7d 56 b8 e8 3e 4c 16 4e 4f ab 7b 33 f6 4f 0e 04 a6 bc 20 ed 2f 49 4e 68 6c 04 00 18 5e 5a 7a 8b 00 a5 b3 d6 36 20 00 70 f6 b5 25 37 0f 04 0d 42 6e 14 78 49 74 a4 4d 80 4f 36 f4 a5 52 7b 66 66 a2 d7 67 65 8b 9f 64 Data Ascii: ;xPx[x!t&WVL{b}=@VMq9d(7N##CS+Ilt8]?+0]xCDIgAvV8:<`pHE}9;=ss'S\|yzAN.l]##~.z}V>LNO{3O /INhl^Zz6 p%7BnxItMO6R{ffged
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 6e e1 ee 0e 72 9c df c1 c6 20 56 31 26 26 92 08 65 57 9e 81 61 52 b9 ba b1 b1 91 49 5d 6f 36 be ae 4e a5 bd fd fc 8f 1e d1 6e fd 74 8a 89 89 a4 6c db 86 57 94 ff c9 13 5a 0b d8 25 29 29 fc 52 0a 5b 6e 50 8a 87 87 d4 a8 62 47 87 59 59 5d 1d e4 65 af 28 b6 e7 a3 7f c0 36 ee 66 1d 1a af 0f 63 df 84 dc 52 61 98 98 77 ae c7 f0 ee 5c 74 73 2a a9 ab 03 35 73 86 87 dd c7 57 94 4c 07 f7 5d 41 6c 4f 14 fe f4 09 e4 e6 b1 b1 e6 49 af a0 a2 82 eb 45 a3 69 f2 c1 5e 6a 1e 69 bd 19 7d ea 45 00 de 0c 50 33 ba ba c6 54 54 8c a9 ac 9c d6 de 8e 8d 69 66 0e 0c 20 d7 40 01 28 f0 fc 39 4b 45 7b 46 12 ca fa c2 a7 c6 d4 b3 b5 f5 d1 11 a0 7b 7e 90 9d 3b b2 b1 ff 3c 7f 6c 0c 53 4e 4c cc 22 a1 de 1a 7c d8 9e 59 59 23 8a 8b 01 49 df cc cc 18 7a bd be 2c 7e fe 1a 24 ea 47 4b 5e bf ae Data Ascii: nr V1&&eWaRI]o6NntlWZ%))R[nPbGYY]e(6fcRaw\ts*5sWL]AlOIEi^ji}EP3TTif @(9KE{F{~;<lSNL"\|YY#Iz,~$GK^
2024-04-19 14:06:53 UTC	958	IN	Data Raw: 3b 29 29 2e ee 71 ee b4 8f 89 91 84 c3 36 92 9b 03 ba 90 48 48 15 e4 c2 13 96 19 0b 3e 4d 16 fe cc 5f 2d 63 63 9f 52 91 71 99 57 3c 07 a0 f9 2f 97 2b 31 02 70 0a 26 a6 80 1b 57 5d 2d 3d 1d 19 10 17 ba f5 aa da da 11 4b 6a dd 57 8b 96 2c 2d 8d 2a 2b 7b 4f 34 bf 3f b5 a3 43 92 e5 d3 ab 4e d9 b4 c9 b7 bd e6 de de 57 92 2c 9a 9a a2 36 69 2f e5 c7 d4 a6 5e 5e 48 45 e7 8a 2a d2 de 7a c0 fd b4 26 8f 87 ae 2a bd 8c 00 04 55 4f 47 ce ab 52 fc fc 40 0d b6 a6 90 fb 86 18 e2 ad d3 4c ed 80 cd 00 00 db 3d 7d 2a 00 96 21 86 d8 eb ce c3 2a da 28 00 ca 9c 82 fd e8 40 db 81 89 49 00 e4 49 ac 44 42 ba ed 1a fb 0a 60 ca 49 b6 6e 8d 73 bf 91 a3 23 00 40 f1 6f df c8 ef c2 eb 94 94 24 69 e2 e1 e1 55 94 91 61 98 d5 f0 da 46 45 49 5a 47 44 b8 8a 14 d2 ff 3d b0 fe 5a e3 f2 18 d4 Data Ascii: ;)).q6HH>M_-ccRqW</+1p&W]-=KjW,-+{O4?CNW,6i/^^HEz&UOGR@L=}!*(@IIDB`Ins#@o$iUaFEIZGD=Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.6	50064	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1081	OUT	GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:53 GMT Server: fife Content-Length: 8092 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	733	IN	Data Raw: 52 49 46 46 94 1f 00 00 57 45 42 50 56 50 38 4c 88 1f 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 85 02 b5 45 ce ff 1f 5c 59 51 39 fb 35 a2 ff 13 c0 7f 72 dc aa 80 cc 25 ea 13 99 0b ec 91 f9 4a 99 3e 90 d9 11 0a 0a a8 2d 62 46 46 a3 ee 5a e0 be 48 85 52 5b 44 34 ca aa 82 5c e7 24 e2 b3 9c 8c a7 f1 06 b4 dc c7 ba 2a 55 22 9e e2 6b 81 d3 6a 9d 8d b2 5c 70 36 92 7b 01 9c 0d 3b f7 64 3a ce 73 a6 fa 22 27 e8 c4 77 64 b6 5c c1 b6 6d f0 f1 19 b0 6d 4c c7 18 8b fe a6 0b 38 92 6d ab 56 1a 77 77 0d 29 e6 3f 12 42 c2 1d 11 b9 fb ff d8 3d ff a3 b1 e3 48 b6 55 a5 71 56 d4 0d e1 e5 1f 13 2b 77 b7 5b 17 29 d8 b1 6d ab 6d 76 09 e9 bf 32 83 24 af c8 8c 61 f8 73 ff 27 80 fe db fe 75 1c a4 af 50 3b 35 ef da b1 63 40 e7 c0 61 52 83 fa ed 8f 3c f8 ce 66 3b 6a 5e cf 56 cf 8f f9 Data Ascii: RIFFWEBPVP8L/?M@rHE\YQ95r%J>-bFFZHR[D4\$*U"kj\p6{;d:s"'wd\mmL8mVww)?B=HUqV+w[)mmv2$as'uP;5c@aR<f;j^V
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 9f fb 3f ee 90 13 52 03 6d d0 27 25 31 a4 ee 6e ef 9d 98 00 bc d9 ff af 92 64 e7 9c 53 55 4d 33 3d b7 b7 61 98 e7 5e 31 33 33 33 33 33 4b 2e 33 33 33 33 33 33 33 2d 33 ef 30 4f f7 34 56 d5 31 aa a7 9e db dd ff aa 71 bf e6 cd e1 44 d1 62 29 86 eb 1e b3 ec 8a 40 cf 73 b2 b8 51 28 81 1a 81 4b bb 66 89 f5 73 b7 52 38 11 c8 9c 1c 94 42 bb ed b6 db 6e bb 42 97 26 02 99 72 77 12 b8 e4 8a a5 bf bb 60 ad fb 8b 42 94 85 dc eb ca dc 23 56 8d 39 a6 18 ec 72 15 c5 26 c0 ee 9a 47 ac 59 77 cc bf 58 e3 2a 06 65 71 43 d0 95 2b 73 5c 2d b9 82 4a 40 11 74 0c 25 88 a1 dc 35 65 97 a5 e7 99 f1 e4 5e a5 a0 3c a4 08 64 ae 3b 8f 7c 1c 77 5c da da b6 1d ae 98 e7 fd fe 99 49 32 59 a8 6d db 76 7b 30 76 4f 60 e1 4c ca cd ee 75 cb b6 6d db 6d 16 92 cc ff 7d 1f 2d db da 96 b7 cd 79 de Data Ascii: ?Rm'%1ndSUM3=a^133333K.3333333-30O4V1qDb)@sQ(KfsR8BnB&rw`B#V9r&GYwX*eqC+s\-J@t%5e^<d;\|w\I2Ymv{0vO`Lumm}-y
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 41 11 12 37 51 b4 70 97 9f 65 9d e3 3e 12 bc d5 34 c8 2c 4a 5c 04 7c e3 bc ef ea ab a7 f7 a2 a9 a8 b3 c1 7e b1 62 df 63 b7 5e 4a f1 08 2f 05 ba 88 77 f1 b1 be 91 28 41 31 47 9c 9b 3d f1 e7 bb 6a 35 a5 63 9e e6 80 68 28 9f 75 1c 05 5c 42 2e 84 8e 1a a7 a8 34 65 40 25 21 41 0b b4 ca 4b cd bb ef c3 f5 1a 72 3c f1 fd 89 d8 59 4d 27 ea 56 cc 41 69 c8 23 33 17 c1 9d bd 6c 1f 54 aa dd 15 88 bc 23 aa 77 fe 6d fc 5a 7f 9f fc d0 45 fd 98 78 1c b0 0f 89 01 d4 7d cc b7 4d c8 69 5b 4b a7 46 7b 29 4c 1e d9 27 e7 03 22 cd 26 14 56 67 5c 17 74 56 e9 61 21 d0 0c 4f 2f 44 20 63 01 f0 c7 0b 06 b6 19 46 45 60 ef f3 57 78 a0 ef 1a f7 6c bb 1b 54 0f 28 25 3b 85 b6 9a 80 6c 90 41 ec 01 0a 13 4e 61 1c d2 44 50 70 c6 19 a6 f1 89 e1 a4 4e 66 b4 be f5 5c 11 e4 12 a0 2d e2 5d 66 79 Data Ascii: A7Qpe>4,J\\|~bc^J/w(A1G=j5ch(u\B.4e@%!AKr<YM'VAi#3lT#wmZEx}Mi[KF{)L'"&Vg\tVa!O/D cFE`WxlT(%;lANaDPpNf\-]fy
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 04 77 c6 89 6e f5 01 a0 c0 fa 51 fa a9 7f 9a d8 2d 6c 71 f5 84 3d 6c 81 a3 30 11 65 bc bd 76 68 ee 6c 01 e8 18 6c db 84 54 2f 0d 57 dd 93 65 3e fd 3d 9b 5b 67 8a 68 c3 c4 b6 1b 47 d5 53 80 f4 87 d8 44 28 5b 9c 4e 03 97 c6 f8 26 b5 75 74 5a 26 d4 4d f2 35 15 3b 97 e5 46 61 6a 37 c3 28 1e 13 4f 03 96 2c e2 e2 58 32 14 10 fb 48 8c 32 b4 b5 1e 2d f6 e5 47 4b 3b e5 a2 28 e6 11 c2 30 94 79 74 e0 df 7f d7 5b 1f 29 35 27 50 95 51 63 cc e9 a8 22 c4 87 b7 f8 67 78 b7 79 b0 97 61 ae ba e5 88 0b b1 50 3a a1 73 e2 7b d2 92 e6 25 82 89 cd b8 98 e6 21 bf 4e fe f2 27 5f e0 45 5c 2a 1e ab 00 e8 51 d6 a9 c6 1a 9b b9 c7 d8 fa 2c 65 cd 03 ad c5 ba 24 9e d5 51 3d cd e7 ad 06 5a c0 79 b0 a7 b6 8e ba 17 f2 42 9d fe 5e e5 ae 60 98 10 9b 61 60 42 1c f0 de 8b 94 2f 4c fe 69 b8 fd Data Ascii: wnQ-lq=l0evhllT/We>=[ghGSD([N&utZ&M5;Faj7(O,X2H2-GK;(0yt[)5'PQc"gxyaP:s{%!N'_E\*Q,e$Q=ZyB^`a`B/Li
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: fd 14 8e da d0 dd 7a 25 02 55 a1 5b 6e 43 58 3d 64 8d 7f 23 9a 73 e8 86 77 1b 9f 5c 75 d3 26 42 37 75 37 dd d2 4e c3 22 a6 e5 0a 50 55 39 10 ea 6a b8 e7 9f 18 96 2b 56 6c 90 2b a1 9b 98 73 73 f5 68 ea 45 b9 c5 26 2a 6e 21 21 29 92 7c 79 ee 44 18 46 ba 72 68 53 85 6e 62 b2 0e 8a 30 67 55 e8 6e fb 2d 4a 88 2a 42 9c cf c2 b0 06 24 90 61 e9 a7 1b c3 38 a0 4d 42 ff ac 7b a3 5b 84 36 f4 f7 98 14 41 d4 dd ac de 95 6a ba 21 21 da 98 d9 5b d3 30 1d 9e c6 67 fd 34 0e 26 a1 ad 12 93 42 28 51 45 29 ea 40 97 48 30 e1 49 a6 2b c7 a0 9d c6 25 98 aa f4 23 26 8a 50 16 bb 87 51 b3 a2 81 4b 12 4a 3c 8c 72 94 ae 38 85 fe 19 93 ec 95 70 70 31 51 04 c5 26 aa 4e 1a 73 84 47 10 68 bc 7c d0 2f fd 94 da 38 40 e8 6e 98 a2 b4 85 9d 29 45 2f 1c 49 11 14 61 a9 b9 31 87 81 46 92 48 20 Data Ascii: z%U[nCX=d#sw\u&B7u7N"PU9j+Vl+sshE&n!!)\|yDFrhSnb0gUn-JB$a8MB{[6Aj!![0g4&B(QE)@H0I+%#&PQKJ<r8pp1Q&NsGh\|/8@n)E/Ia1FH
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 4c 15 ba 39 64 80 98 a0 04 4c 45 50 08 c8 0b 0b 49 a0 04 14 61 03 66 31 73 c7 cc 90 6e d2 cd 87 d2 0a 70 18 02 9c 34 6b 7f f0 15 32 2b b7 fc 34 10 41 c4 1d ae 3a 56 03 c1 4c 16 9d 98 b4 c0 94 a1 5b 36 52 00 72 08 8a 10 a6 42 28 6e b5 e9 8e 24 50 04 12 8a 28 9a 66 fa 7f e8 73 15 2b fb af 1a 1b 52 50 64 ab 01 57 b5 6c bc df b5 77 22 e9 7f 72 cb 5b 82 88 44 84 ba 46 af f6 fd 0f 4f f2 d9 db fb 26 42 10 d2 11 91 5e 83 fb cc 33 ac 3e 92 f4 b1 7c aa 6a 11 aa e3 40 54 b5 8b 07 75 8b 36 6c 68 82 49 11 a8 5b 6d 72 61 f1 40 a0 02 66 89 e2 01 b3 91 36 93 f1 3d 81 b9 5f 89 4d 63 44 63 a4 20 40 23 6d f5 c1 fd 45 c7 58 38 75 cb 5b 5e 44 04 51 47 29 3f e4 9f 5d ed 75 14 25 62 83 a1 5b 1f fc 83 bf 7f e7 ad 8e e2 bf fe d1 c7 1c 55 bc f6 65 dd 29 7f 63 a3 ec c1 84 40 39 ce Data Ascii: L9dLEPIaf1snp4k2+4A:VL[6RrB(n$P(fs+RPdWlw"r[DFO&B^3>\|j@Tu6lhI[mra@f6=_McDc @#mEX8u[^DQG)?]u%b[Ue)c@9
2024-04-19 14:06:53 UTC	1084	IN	Data Raw: 3e 57 22 49 44 64 16 0c e7 dd 94 be 65 5e 6b b2 19 43 41 50 dc 96 f7 ee 56 73 8d 70 95 6e 48 50 6c f2 01 24 25 11 61 d7 f5 2b 42 af 67 71 29 fd 09 ea 08 a9 4b e3 49 6a dc 5d 2a 68 96 f3 3c 22 99 94 ac 88 a4 94 92 68 7c dc 0c 05 6a 7c 3f a5 6f c0 d5 06 4d 85 94 2e 4e 98 d8 4a ff de b5 30 2d 3d 5a f0 8c 82 b7 55 4a 29 09 c9 29 91 94 52 f6 0c 8c 8f ef da b1 de 79 a7 92 bf 37 17 3f 95 ea df 2c 8a bb 8e eb 77 65 6b ef 01 be 6e c4 f3 3c 6f ab ef 13 11 28 29 01 49 e9 fb 5d 0b 3e 77 7c 7c fc 80 e1 71 09 c9 37 68 f6 63 e8 13 35 78 d7 62 f0 7a ba 13 c9 1e 0d cd a5 88 1a de 56 cf 0b 34 7c d1 56 29 09 49 eb 2a f3 fe fe fe 3e d3 c5 8d 8b 3b f5 9b ef 34 6d 7e b8 88 b0 8a ab 21 b5 f6 0b 21 dd 3e ed fe d3 23 3d f0 cc 5d be 93 45 3b b4 02 11 49 df 2f fb 6f b8 e6 e6 fd fd Data Ascii: >W"IDde^kCAPVspnHPl$%a+Bgq)KIj]h<"h\|j\|?oM.NJ0-=ZUJ))Ry7?,wekn<o()I]>w\|\|q7hc5xbzV4\|V)I>;4m~!!>#=]E;I/o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.6	50065	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	510	OUT	GET /1UDsmSjGQaR4D4DxfctR1pc7HvvsTK_V61CChEA8EyY-hbn4NqDaQ-yFE0IEMOsa2iU=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 179240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4103 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	720	IN	Data Raw: 52 49 46 46 20 bc 02 00 57 45 42 50 56 50 38 4c 14 bc 02 00 2f 0d c2 49 00 4d 40 90 80 36 6c 73 10 13 62 d8 ff 3f 6c 3b ed fa 82 88 fe 4f 80 24 25 5e 25 29 ca 59 89 7c 29 89 94 c4 b6 b2 b5 94 c4 52 a4 d8 c9 92 43 5e 39 d6 1a 9d e2 57 ab d6 44 4e 12 c9 d6 d6 9b 19 27 96 9c d5 33 d6 ba 24 da 66 dd 48 1b 25 52 94 4f 1d 27 89 16 3b 67 29 1b 27 89 95 dd ea bc 75 92 e7 51 b6 96 64 7d a0 78 91 b4 08 db e2 d8 16 18 91 1e 59 b2 ed 47 92 a2 85 49 6e 2d 92 ee 28 4b 77 e7 71 b5 04 63 29 33 91 a4 24 51 a2 44 ca 7a 92 22 49 05 df 01 63 00 84 29 69 a1 24 25 89 d6 38 ce de 56 92 48 1c 7d 37 4b b6 9c 06 ed f8 42 7d 4b 92 ed 47 15 ec ce 5d ac 28 11 38 ae 77 db d2 9e 71 68 66 76 14 04 8a a2 05 4b 1f e2 8d da 7e 01 8d 6c 07 21 5a 6e 5b 82 45 59 99 91 e4 24 b2 29 92 37 c9 31 Data Ascii: RIFF WEBPVP8L/IM@6lsb?l;O$%^%)Y\|)RC^9WDN'3$fH%RO';g)'uQd}xYGIn-(Kwqc)3$QDz"Ic)i$%8VH}7KB}KG](8wqhfvK~l!Zn[EY$)71
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: c9 a9 62 66 e6 f9 cf a0 aa f1 86 33 8a 99 21 f4 ff ef bf c2 b6 6d 1b 26 dd f3 0e 94 40 a5 34 d4 15 e6 74 da 90 38 cd 30 ac 94 ef 42 0a 4a 14 10 a0 40 90 28 a4 03 f5 42 27 43 8a 89 88 14 a9 06 f5 02 a1 84 e9 04 39 8c 81 61 38 4c a4 48 25 80 42 4c 20 48 81 88 14 11 c3 c4 70 88 18 e2 0e c0 80 01 0a 41 30 4a 1a 8a 49 d1 b3 e8 55 94 a2 2e 1d 82 00 40 09 74 14 1d 02 3a 0c 20 08 40 90 ba d4 4d 0c 29 82 88 60 10 0e 43 1a d6 30 24 52 a4 14 00 00 11 31 11 51 98 88 88 e6 20 9b b3 41 00 0a 01 0c a0 50 9a 60 98 26 1a 00 a2 8a 8e c2 21 ba 21 1d d2 21 7d ab 90 62 1d e6 30 1c 86 15 ab 17 00 b1 91 53 9c c6 00 87 94 01 d2 28 69 c0 d9 14 82 39 0c 29 52 50 ac 18 10 29 26 10 38 0c d1 45 23 00 40 01 52 50 08 2b 86 61 c0 44 dd ea 42 31 18 06 d8 51 ac ef ad 6e 1d 0a d1 05 11 11 Data Ascii: bf3!m&@4t80BJ@(B'C9a8LH%BL HpA0JIU.@t: @M)`C0$R1Q AP`&!!!}b0S(i9)RP)&8E#@RP+aDB1Qn
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: d6 81 61 0e 60 d8 08 65 03 30 8c 12 10 01 58 4a 28 9b d5 0b dd 30 a7 74 5a bd a8 7b 5e ca 33 00 86 49 51 2f 30 a7 38 1d 03 c3 fc c4 8a d5 0d eb 69 6f c0 0c 31 ac a3 40 30 11 ac 5e d4 0b 0a c4 cb 0c eb 69 f6 02 33 8c 01 85 82 42 df 1a 86 21 48 29 8a c3 cf a8 a1 18 a8 17 75 20 75 85 20 0d 03 31 80 13 2b 82 20 82 62 f8 3b 81 7a d1 61 00 02 40 37 03 28 04 43 40 65 f5 12 30 c4 18 98 4e 9c e0 f8 19 21 17 87 75 38 48 13 29 50 48 dd c4 c4 04 00 bc 8b 52 08 a6 1b 4e 33 31 27 ec 84 d3 0a 29 4c d8 e0 24 0d 9e 4a 13 cd 69 22 ca 4e c6 ce 70 b2 d7 f1 eb 38 d3 4b e9 bb e9 bc 3a cf e8 de 67 1f 34 86 63 ee 0e 9b d7 71 70 64 5f af 83 bd f6 f7 da 3f b3 7f e5 78 18 18 0c 27 7b 9d ef b5 93 e7 8e 86 3f 47 d9 eb e0 a8 43 8f 7d fa c0 6b e8 db c5 70 df af f3 cf 81 fa de b0 7b cc Data Ascii: a`e0XJ(0tZ{^3IQ/08io1@0^i3B!H)u u 1+ b;za@7(C@e0N!u8H)PHRN31')L$Ji"Np8K:g4cqpd_?x'{?GC}kp{
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 79 b3 e4 cf 23 7f 1d 1f 8c 95 d5 f3 e4 cb be 5e 29 69 d2 57 16 77 4b c6 ca b6 32 56 9e a9 e2 33 29 f9 3e be 3e ff 5f 92 f3 a7 3b d9 8a 77 be 59 a4 bc 58 52 b2 da 3a f9 f6 48 5f 39 2a 7d 3d fb e1 ab 92 55 9a ac d2 7c 5f f2 9e 0f 0a 4d 4a 94 38 f9 9c 6f 1c f3 93 5a 7f 33 1c 06 40 1a 36 04 74 ff df bc 28 da 6e 07 44 84 03 b7 6d 23 c9 1e 64 27 3d 9d 8c b1 8f 38 07 a7 12 7d 9d bf 80 67 22 ca 38 06 85 33 1f 09 02 ea be b5 3e e0 d1 56 78 25 05 2f 57 6c fa 4a d7 62 2c 6a 7b 58 0b a6 64 28 ca a8 20 0f 08 f3 cd 78 99 74 3a 31 5e 87 f6 29 1f d4 ac 90 22 72 dd 8e 9a 8c 7d 14 b4 e2 b6 9b e6 18 c0 87 b4 f8 84 e2 66 c7 f5 d6 fb 91 f7 87 e3 07 82 96 ec 95 f1 40 a4 44 52 bc 14 2b e0 a6 96 60 d7 55 e4 e2 dc ac b3 56 e5 76 1f 7d 56 74 a6 c1 97 fc c6 92 91 77 df b8 10 6b 3c Data Ascii: y#^)iWwK2V3)>>_;wYXR:H_9*}=U\|_MJ8oZ3@6t(nDm#d'=8}g"83>Vx%/WlJb,j{Xd( xt:1^)"r}f@DR+`UVv}Vtwk<
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 87 82 9f de f0 ff 57 6d a7 d9 b6 df ff 3f c6 98 73 f9 da ae d9 c4 85 24 84 10 dc 25 d0 a2 2d 3d 39 eb 7a da ed ee fa ce 5d 9e d3 ad 02 54 a8 1b 15 9c 12 20 41 12 20 46 b2 e3 db 5d 96 cd 39 c6 f8 ff 8f a3 72 3e ef ce d7 dc b0 6d 5b f6 b6 d1 75 9e d7 75 df f7 f3 bc af d8 b2 64 88 29 86 38 49 9d b4 93 32 a4 d3 59 cc cc cc cc 6b cd af c5 4c bf 98 99 66 3e 66 ea 7c 58 6e 93 4e 9b b8 71 e2 38 96 49 b2 64 99 84 ef fb 3e 37 5c 97 2f 49 92 55 db b6 6d cb cc a3 d4 d6 7a ef 63 cc b1 d6 5c 9b ce 65 66 86 14 dc cf 9b 00 4e e0 cd 0e 33 f3 dd 3c d7 a0 0e ad d6 e2 a1 86 6d 23 a5 cf 3f dd 3d 33 ac fe b0 6d 5b 9e c6 fa bf eb ba ef 27 46 42 08 12 dc ad 68 0b 15 a8 ae 4e 65 d5 3b 3e cb fd 75 77 77 97 e5 ee be d6 b8 cf b4 43 a7 d4 bd d4 70 d7 e0 90 04 48 42 e4 79 ee fb da 36 Data Ascii: Wm?s$%-=9z]T A F]9r>m[uud)8I2YkLf>f\|XnNq8Id>7\/IUmzc\efN3<m#?=3m['FBhNe;>uwwCpHBy6
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: cf 5d d6 62 e7 dd 6e 38 1f 19 82 00 b3 fd 85 c2 64 cd d1 1e 81 37 0c 27 4a f7 7e df 3f d7 13 44 cc ab 7e 93 07 05 c5 e0 e9 5a 43 06 55 2e a2 b5 28 63 b4 89 52 3b 4b bb e2 42 20 50 96 87 13 cc e2 12 0b d6 37 71 75 a7 91 4d 0d ae 1a 2e b8 e4 c0 50 d0 02 8c 6f 0a 46 42 fb 99 da 8e 2a 88 f2 9c 5a 03 0e 54 ea c5 9f 31 75 b8 f9 04 b6 fd 5e 32 ec d2 c6 8e 0c 2a 01 c6 50 b9 fd d6 de ab de 3e 58 7a 0f 79 4b 61 14 b5 d2 68 40 ca 66 24 e2 ee 67 f5 2c a4 cd b9 7f a7 45 31 86 4b ae a5 47 e7 e9 7c df 53 b7 38 de 2d ee d1 a9 d9 8d 2d 50 4d c9 3c 34 3f d7 77 b9 22 2f 09 f1 74 e6 48 96 04 15 c4 6e 34 82 5a 11 84 bc ad 5f f0 62 aa d9 50 83 b2 38 88 7b 1f 5b 48 dc 42 35 ad 46 17 b1 15 7d 6a f5 1d e1 42 ae f3 00 18 a9 d2 2d 37 dd 46 6d 30 5b 35 28 7d fb f0 ee 49 12 2a fe 9e Data Ascii: ]bn8d7'J~?D~ZCU.(cR;KB P7quM.PoFBZT1u^2P>XzyKah@f$g,E1KG\|S8--PM<4?w"/tHn4Z_bP8{[HB5F}jB-7Fm0[5(}I*
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: c7 9f 83 8c 5f e9 2f e0 6d 14 9b 79 60 50 b3 71 9a 89 20 a7 7a 30 35 14 df 5e de ee d6 78 e3 f8 ca d7 de 63 5b 53 8b b0 19 8f a2 84 34 66 0b 6c 37 28 6e cf 9d a4 1d b5 66 54 10 39 5c cf 59 6d 77 a3 35 b9 06 14 b5 8d 1f 42 09 54 93 5a 6e 6f 5e e3 ed b9 26 59 78 fa 5f 9c bc 71 73 ef bb 40 41 be cb ab 72 82 38 98 72 09 5a f4 02 7c 7a 91 5a 14 b1 10 87 2d 60 ac 09 9b 6f 7d fb 8b bf ca 6f d3 6f 42 ef 0d a1 37 d1 d1 e9 46 6e a7 3f 88 71 24 cb 82 8b e5 e7 2e 12 e8 c5 1e 0a 38 3c 0b fc ac 7a a7 d4 d4 7a a4 6c 23 e3 14 93 2c f0 74 6e 97 5a fe f1 5f 25 ee 04 f7 03 0d 6e 80 20 d7 b9 b3 8a 78 19 cb de 7e 7a a0 e7 46 be ea 6c c2 2d 55 04 20 d0 90 b8 aa c0 68 17 f6 9b 4c 37 60 b3 00 d4 fe 15 96 a7 e7 f6 d7 87 c7 28 3f 4f d2 ae ac 05 15 c3 d1 87 4b e5 ab 8e 84 0f 9a 16 Data Ascii: _/my`Pq z05^xc[S4fl7(nfT9\Ymw5BTZno^&Yx_qs@Ar8rZ\|zZ-`o}ooB7Fn?q$.8<zzl#,tnZ_%n x~zFl-U hL7`(?OK
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 32 92 a3 66 1d 30 cf fd b8 bd b0 5f 94 2e 00 7e 3c bf d1 97 0e 51 a4 86 9b 43 ee 57 9b 1b 5c 68 98 6d 3f 34 c6 ae 96 b7 7f b9 be 30 61 62 75 ab 9b 80 36 07 84 c1 60 f3 55 62 0a c2 38 f5 8c 93 66 78 fb bf d4 50 1e 35 8c d1 5b c0 4d 8d 13 46 2d 20 d6 b7 6e 13 39 95 68 70 d9 c8 11 d1 3a 0c 5c f6 2b 2d 69 bf db 01 36 8f 6d 7a a4 f6 9a d3 f9 f2 8f dd 04 4a eb 9f 28 58 56 ac 52 03 fa 2c 2f 81 dc f8 e1 1f 65 b7 99 6c bb 09 89 04 b9 ad 76 31 db 6f b7 c6 1f f2 4e b3 58 d5 2e 9f 65 4f 4f fc b8 c9 fc 3f da 8d 70 bf 54 10 6c 7e a4 6c f3 e1 90 3d d8 85 f1 9c f6 db 22 19 48 6c 46 4d 77 fd 44 74 a6 c6 ca 58 23 63 ce 58 7e 19 5f 65 f2 3e 7d 6f a0 93 b7 64 84 db b1 2b 53 dd 32 91 cb 1b 97 4f d3 78 8f ce 7c fb e4 52 a5 a1 db 89 68 1b 4b f8 bb 54 a3 32 67 37 4c ea 5b 4d 9d Data Ascii: 2f0_.~<QCW\hm?40abu6`Ub8fxP5[MF- n9hp:\+-i6mzJ(XVR,/elv1oNX.eOO?pTl~l="HlFMwDtX#cX~_e>}od+S2Ox\|RhKT2g7L[M
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: d3 09 1b ba ba 4b 90 bd ea 85 fc 82 41 5a 41 64 7a af d2 b6 54 bd 87 9b 6e ae e5 d6 61 9b 7b 7f 2f 6b 4d da c2 3d 50 8c b4 35 f4 14 2a db ef ea 8a 55 af d8 1b d6 9a 81 30 6f 5e 3f 49 df c0 81 61 51 be fa 2b 1f 1e c9 1b 53 eb d9 c2 09 3f 4e af df ff eb ef fa 6f 6f 69 6c ad 01 2b 73 96 92 6f 34 3e 50 52 36 91 95 55 7d 26 d0 20 6c 63 9e fa 4a b2 6d f4 9e b2 f6 f4 43 9b b5 86 d3 76 10 35 10 4c 09 ed 08 ce dd 42 28 61 a0 b0 cc 00 28 c7 79 78 bf d7 c4 cd 87 4e 87 06 74 6e 62 bb 9e 2d dc c4 54 eb 19 d5 b6 45 93 62 75 f0 c8 91 4d 03 3d 32 45 03 38 16 1a 9a b5 a2 22 a8 b7 8b e5 bc 1b ee c8 8b 1f 9a c7 eb 72 8b 86 61 0b 38 15 ba d1 b7 b6 0e 1e d3 4f 20 dc f3 33 d5 98 1b e7 ea bd 04 06 b2 ea 14 ac 59 38 f9 d7 ba b5 8a 6e c7 b4 fb dd fd 99 b6 29 2b a5 55 db 1a 3d 57 Data Ascii: KAZAdzTna{/kM=P5*U0o^?IaQ+S?Nooil+so4>PR6U}& lcJmCv5LB(a(yxNtnb-TEbuM=2E8"ra8O 3Y8n)+U=W
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 01 c8 ec c2 ad d7 06 c1 15 7a 71 c0 36 8e c1 ea b9 1c bc b4 27 97 fc 5a ac d8 eb 6c bb 78 ca af 77 3b d1 38 84 bf 66 73 61 13 c0 f9 1b d3 34 2a 3c c1 bc a2 24 e3 43 0f b7 a9 c0 ba b2 0d b6 2a b6 c7 2d 6d 6c 58 08 06 f1 b9 fc 42 9a 20 db 92 06 4a 69 97 ba 00 9f d5 d0 1c 32 57 7b 23 f2 d4 9b 61 73 57 52 e8 57 5b 9e be 01 54 7f b6 7f bb ea 7e 6b fa fa cd f5 7a 5a 3d ee 04 8a 15 d1 31 b8 9a a8 d7 6a 5c 4d a1 b7 e1 2a fc 02 bf f0 eb 29 8e 20 c6 58 23 5a d6 54 8f da 50 6d 58 86 04 03 0b 7d 95 4b b2 52 af 6c 63 30 5b e3 e9 42 f3 0d 8f 46 e8 e3 b0 11 3d 0a 91 87 28 b0 85 e9 83 f6 6d fe aa 75 90 aa 17 a3 4c 46 9f 35 27 b0 e1 92 2a 34 fa 94 f7 60 70 8f dc 8b a6 c9 bd c6 2d 0b 92 62 b8 85 77 95 16 df b0 47 c6 0d c2 d5 b7 50 71 2b 47 9a 6c 74 e2 5b df 7a c2 b6 59 28 Data Ascii: zq6'Zlxw;8fsa4<$C-mlXB Ji2W{#asWRW[T~kzZ=1j\M) X#ZTPmX}KRlc0[BF=(muLF5'4`p-bwGPq+Glt[zY(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.6	50068	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1081	OUT	GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5298 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:42:59 GMT Expires: Sat, 20 Apr 2024 13:42:59 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1434 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	722	IN	Data Raw: 52 49 46 46 aa 14 00 00 57 45 42 50 56 50 38 4c 9d 14 00 00 2f ff c0 3f 00 09 47 6e db 48 12 9c 2a 4f 75 60 ff ff c3 bd 24 35 db 39 a2 ff 13 80 bf 79 b8 36 0b 1e b5 28 44 94 e2 ed 7c 8a 9e 71 92 4e af e3 e8 10 cf 2b 33 b9 98 27 01 f0 33 29 49 24 e5 be 49 49 94 d4 11 a4 62 8e 0d 52 2a 62 46 6c 8a 47 2e 51 a1 b9 83 27 ec 81 32 81 b1 81 64 92 ec 9a 00 20 9c d3 2d 97 32 00 db b9 07 1e bb 6e 5b 1c 25 55 96 1f 9d 9d 85 ff 75 01 37 b6 6d 57 cd 1a 22 0f 77 88 08 7f a8 02 d4 7f 2d bf 00 b9 c8 7b 3d 73 f1 31 ec 48 b6 55 2b fd dc df 5b 4f 71 58 21 90 7f 4c fa e9 14 1c 49 b6 5d 35 8d 27 e3 e1 5f a6 91 8d ec fe 57 45 a8 4c fd 9f 00 09 57 b3 71 29 2d f3 fa b8 34 dd a6 cc d7 af f7 d7 c4 ce 44 7e 50 e2 f0 52 45 ec c7 e9 e2 b0 23 40 7d 57 f1 dc 9e 1a ed 23 dc 40 4a 29 55 Data Ascii: RIFFWEBPVP8L/?GnHOu`$59y6(D\|qN+3'3)I$IIbRbFlG.Q'2d -2n[%Uu7mW"w-{=s1HU+[OqX!LI]5'_WELWq)-4D~PRE#@}W#@J)U
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: cb b5 8a b2 ce 8a fd 00 c1 9d c3 7b 66 2b 92 1c 5b db d6 36 7a de 4f 92 39 cc 69 87 eb 59 ce 74 cc cc b4 02 2a c7 ed 94 b4 8a a9 e6 cc 06 98 99 d9 20 cb fe bf 4f 72 24 49 8e e4 44 66 cf f4 ec f1 3b 09 4e 14 c8 77 10 00 12 e1 c9 f4 e0 1c 18 d6 95 31 01 21 30 e8 ff 41 ff 0f 26 55 00 89 35 0f 00 17 63 02 22 9e a3 44 9c 79 a1 50 64 ce 07 62 dc 43 01 11 3f 25 97 f2 a2 15 e6 b6 c9 8b 87 4b 29 63 aa ec fa e7 da 5d 8e d0 a4 4c a9 7b a8 04 bc c8 8a a8 bb f6 ea ec 0f 72 b9 32 57 ab f4 bd 87 8b 40 59 86 76 9f e9 34 d3 d9 67 c7 f9 6c f2 cd 48 2c 89 27 0b f3 12 b7 0f 75 3b 13 51 0f fc f9 cf 0f 18 e4 d1 6c 38 6a 9d d3 2e a3 6c 16 e2 39 08 3c e8 10 0b 61 b4 70 c4 ff 22 38 68 a1 b3 ad 10 00 12 4b d2 11 ec 15 85 88 92 f0 2b e7 9f 89 f2 54 88 63 71 8f ff cf 02 41 69 18 8a Data Ascii: {f+[6zO9iYt* Or$IDf;Nw1!0A&U5c"DyPdbC?%K)c]L{r2W@Yv4glH,'u;Ql8j.l9<ap"8hK+TcqAi
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 7a bb f0 8d d3 fd 77 7d 74 50 9d ee 0f e1 9b e6 e7 ef 58 5d df c9 68 3f be f4 0d f5 e5 27 a8 ee 58 ea cf e7 d6 16 a7 c9 92 52 e7 14 cb 69 d2 7b 86 e3 8b c7 07 cb bb e9 70 c1 7b bd 97 c2 5a 4b 37 ae 4f c2 cd bf 5f d4 f1 e5 bd 52 f8 9f 3f 6d ef 23 fa e9 4d f6 aa 98 a7 ca 3c b6 4c 0d cc 26 10 8b b9 c9 5a fb c8 4f 51 95 3a 90 a5 60 60 6a df 13 19 a0 f7 88 7e e9 4f 1c 98 2e f3 fd 93 2d bb 5b bd 5b cc 51 d6 5f eb a9 54 ab 30 c6 08 57 d1 2d ab a3 bf 6b e7 eb c0 8e 3a 1f ce 36 ee 6c 82 58 59 c3 2d 67 57 dc e5 53 9f 12 31 58 a6 c5 ca 18 2b 12 dd 58 8c ad 1d b7 1c b8 64 1d 77 7f 55 5f 75 d6 ce ca 42 c5 c9 b2 de b5 b5 6b a7 c5 64 43 21 4b 81 e9 f6 a7 b8 dd 27 e6 91 75 a2 5f a1 6a 45 c1 58 1f d8 b7 52 3a eb a7 bc 0b 4f ff 85 fa a1 d1 40 bf 84 b2 ea 20 d6 07 76 db b8 Data Ascii: zw}tPX]h?'XRi{p{ZK7O_R?m#M<L&ZOQ:``j~O.-[[Q_T0W-k:6lXY-gWS1X+XdwU_uBkdC!K'u_jEXR:O@ v
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: d2 3e e8 85 d8 67 52 54 5b 64 ca 42 f7 72 d9 46 aa 98 0c fd 2c bc b2 32 51 37 04 d7 86 18 58 84 6e 74 bd 47 14 99 14 17 2b d3 5c 6c e8 69 ed a1 3f 67 d6 28 35 81 01 6b bf 74 6c bb ee 97 92 89 d1 44 f7 42 b2 91 32 31 16 a2 fb 32 fe d1 ca 2a a6 02 ac d5 66 46 27 47 71 fa 75 24 93 01 d1 cd 14 6a 1b 05 d1 8f ee 1c 38 d6 70 29 6d 28 f1 7d 27 f7 f9 47 7f 2e 5e 8a b5 73 10 65 23 1f 31 dc 32 da ac 98 2e fa 51 31 bd 63 47 39 be 2f c7 fd 20 56 0f a4 6c e6 8c a1 9b de d4 1f 2b 8e 51 4d a8 30 f1 f1 4b 7d 4a 7f a2 4d 67 22 8a c8 36 ba 1e da e8 ce 68 53 d6 06 42 89 89 d8 f9 24 97 ef 5f 3f 63 94 7e b4 d1 5e 8a 28 42 d9 d0 d1 8f ee 20 b2 84 28 c2 24 94 e9 9c ae 7d 9c df fb 13 fd 12 6d 28 f3 ba a1 fa d3 ea d4 8a 44 09 57 82 62 3b 13 aa 97 9b fd 48 71 d1 9d 1c 0a 51 5c 5c Data Ascii: >gRT[dBrF,2Q7XntG+\li?g(5ktlDB212*fF'Gqu$j8p)m(}'G.^se#12.Q1cG9/ Vl+QM0K}JMg"6hSB$_?c~^(B ($}m(DWb;HqQ\\
2024-04-19 14:06:53 UTC	811	IN	Data Raw: fc 45 ee 2a d3 34 77 b0 3f d8 f2 1f 5f 0f 55 a1 e7 07 ba ae 8d ae f9 24 04 c4 83 b1 7b 14 ea 91 a9 7e c1 b9 c1 dd 1e 01 3c 42 56 15 57 d7 d4 14 e5 85 b2 5a 18 e5 19 35 d6 ae d9 f4 38 3f 0e cc 08 98 77 04 d2 de 21 43 23 6e 18 27 66 d8 78 78 d8 68 43 3d 1e 89 23 a3 7e 91 e4 ce da 5a 21 4c 52 1f 0a a1 6d 86 93 b5 4e 87 54 d9 d6 9d 58 c7 23 61 24 7a e6 bc bc 9b 3a 65 7a 87 96 4e b2 a1 75 74 39 a9 ab 28 0f 07 31 aa c3 3a fb 6f e8 64 2a a2 1e 07 66 04 7a 16 ce 77 83 45 65 d4 3c 39 f4 d0 2c 9b c6 7f 87 6c c0 90 b5 2e 84 d0 cb 35 cb c3 e7 d3 c7 1e 05 7a 24 3c 63 dc b5 b4 94 43 dd 33 7d 46 50 c4 7c 26 14 ff dd f2 ad 75 6d cc 0e 46 67 e4 51 40 47 e6 79 67 ee 27 19 e8 75 d6 98 8a a9 7b 8e a8 18 24 f5 b2 36 d4 5a 1f 38 1e 05 e6 cd cf f0 c1 5d 01 49 b5 a9 0c 4f b6 f5 Data Ascii: E4w?_U${~<BVWZ58?w!C#n'fxxhC=#~Z!LRmNTX#a$z:ezNut9(1:odfzwEe<9,l.5z$<cC3}FP\|&umFgQ@Gyg'u{$6Z8]IO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.6	50070	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1081	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:53 GMT Server: fife Content-Length: 10968 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	732	IN	Data Raw: 52 49 46 46 d0 2a 00 00 57 45 42 50 56 50 38 4c c3 2a 00 00 2f ff c0 3f 00 09 49 6e 23 49 92 04 33 73 8f ee 08 f3 fe ff 83 63 ed 65 e6 1c d1 ff 09 c0 ff 7b dc 95 e6 dc 93 77 9e 24 ad fc 62 09 c0 06 f0 c0 06 e0 de 33 6d 65 1e b1 a6 65 6c a4 33 1e 30 f3 3b 02 60 25 e0 e5 8d 84 08 82 e5 09 c0 0d 29 04 09 32 33 6d 49 77 04 be 25 18 10 eb cc 3a 42 04 24 81 65 00 06 30 cc 33 00 35 31 a5 0f 23 c7 8b 99 fc 94 94 39 69 b7 f6 64 12 c8 a5 fb 05 0b 40 55 ef 03 ad bd f1 42 7d 8c d1 da 18 8f 80 c5 18 ad a5 75 c3 c5 a9 79 f1 55 37 55 37 0f bf ef 7f 71 01 b7 91 24 47 52 de d3 41 1d 2b f1 f9 97 15 ef bf 49 67 c0 6b 33 d3 ad 9d ec 34 92 6d a9 6a 76 14 75 e4 93 47 92 7f 54 fc 25 04 84 e3 48 92 1c 25 ef 0e cd e9 17 2f a2 ac c0 7f 93 30 a1 ff 13 40 82 3b fa c4 09 30 26 4c 01 Data Ascii: RIFFWEBPVP8L/?In#I3sce{w$b3meel30;`%)23mIw%:B$e0351#9id@UB}uyU7U7q$GRA+Igk34mjvuGT%H%/0@;0&L
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 66 66 69 98 a1 a1 78 29 b2 3b b2 15 11 6e ff 2e 50 fe c2 0d 06 52 17 c8 0b b4 af 03 30 fe 7d bd f4 f7 04 62 69 c9 2d 91 5b ef c9 64 8b 71 d1 0d 7f 9f 5c 79 cc dc 3a 40 88 ae 20 d9 cc 52 9f 60 5c 3d 1d 82 4d bd 3d 81 dc 71 f5 fa 02 7b 00 5d 82 5d b9 58 ae 04 48 92 4c db aa 83 6b 7c db b6 6d db b6 6d db b6 6d db b6 6d f3 e2 d9 f6 7b 07 ef ca ad 6d 5b d5 96 b5 ce 7d 1f 99 3b 14 41 11 ee 12 d1 91 35 42 ce a0 06 77 77 22 77 d7 8f fb ee 39 31 01 7a ad fd 57 65 eb 56 6a d4 5c df 76 77 39 b8 bb 44 ee 0e 11 b7 c4 f5 91 11 bb fb f1 73 3e 9b 35 82 b9 36 ba 17 f1 8b a4 3b c3 21 de f2 0f fe c8 48 ff 58 b8 2f 61 e0 cc a0 92 8e 8c b0 1a 29 19 79 25 85 33 83 91 ac f0 ac 10 5f 8d 4c 57 80 3b 3f 24 a3 9d 94 cc 9d 9e 74 5c fb 55 e0 85 7b 05 1d 89 d7 1d 9c 8c 76 d2 89 6b 61 Data Ascii: ffix);n.PR0}bi-[dq\y:@ R`\=M=q{]]XHLk\|mmmm{m[};A5Bww"w91zWeVj\vw9Ds>56;!HX/a)y%3_LW;?$t\U{vka
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 9a 67 d7 ab d0 6a 90 36 5d 49 cc 90 89 9b 10 66 88 19 2c c1 e2 fc 1a ce 50 0b ee 0c 51 0b a9 f3 60 a9 33 be fd ed 4e 97 92 c9 27 a8 50 f4 11 aa 93 a2 44 81 51 97 83 a1 8c 8f 32 85 4c 6e 84 30 23 a6 90 29 cc 88 e9 40 94 85 83 e0 85 28 61 95 20 47 46 06 58 14 54 14 29 8a 28 58 c5 7e 1c ae 0c bd b6 90 c9 4d 70 33 45 26 61 11 16 ac 1c 88 5a 48 11 1e 43 8a b0 ca 36 85 8d 01 26 05 07 4a 8a 12 45 55 30 58 e8 8d 32 b0 42 26 84 1b 53 04 61 11 99 44 66 21 2c a4 08 2f 84 12 56 09 29 56 d9 82 21 0a 0e 8a 14 25 8a 0a 18 1c 3c 93 22 c4 a3 b0 10 b1 9d 21 66 10 21 93 30 6f 48 59 48 11 6a 91 12 56 11 52 ac 69 60 02 43 85 12 45 71 a0 c2 00 0e dc 40 09 85 b7 24 07 41 01 84 0b e4 51 40 8e a0 00 c2 05 37 e2 b6 29 82 45 5c 9f 62 d9 55 45 41 0c 8b 32 2c e3 cc c9 f6 79 1f d0 0c Data Ascii: gj6]If,PQ`3N'PDQ2Ln0#)@(a GFXT)(X~Mp3E&aZHC6&JEU0X2B&SaDf!,/V)V!%<"!f!0oHYHjVRi`CEq@$AQ@7)E\bUEA2,y
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 9f 17 0e c2 0b 52 c2 aa aa c2 41 89 a2 70 50 14 45 0c 60 40 ca 95 1f 79 bf 37 bb c3 cd cf ad e1 c0 91 9b 17 0e 84 17 a2 82 55 86 07 25 85 c2 41 51 94 28 30 cc 8a cb ae 94 ca a4 20 26 07 33 3d 8a 8e 58 0a 19 96 75 2c c9 94 8d c6 6c b6 e6 27 53 c8 d6 c2 f4 8e d5 d7 e3 fd f5 f5 dc 8f 8b d6 8f e0 09 38 10 8f 21 2a 58 25 38 50 52 28 0e 94 42 45 81 61 96 6e 6e c4 15 84 bd 60 4a 00 8f 7c 5b f7 3d e1 63 6e 45 27 54 06 74 00 84 44 67 b6 c2 0a b3 6a 95 ce b1 58 cd b0 cd f8 37 1f cc d7 d3 3c da 91 53 0c 29 6e fc 56 84 c7 90 12 bc 10 39 0e 4a 0a 85 83 a2 28 51 30 8c a6 54 c4 15 06 be 8d f8 c8 1d 76 70 ff e3 76 a0 05 36 12 c1 d3 44 45 b4 88 85 a8 4d 4f b0 7a 97 f0 2d 5e ba 92 7a 76 4a 3b 82 b4 90 20 8a f0 18 52 c2 2a 41 a1 a4 50 dc 19 14 45 49 a1 60 20 86 41 5c 01 7c Data Ascii: RApPE`@y7U%AQ(0 &3=Xu,l'S8!X%8PR(BEann`J\|[=cnE'TtDgjX7<S)nV9J(Q0Tvpv6DEMOz-^zvJ; RAPEI` A\\|
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 33 16 0f be d8 08 fa 59 d5 89 ff c9 a7 c0 a5 c3 5e c0 8a d2 80 60 17 11 98 10 66 10 f2 e1 2c 29 d7 57 a0 28 52 cc 23 02 b9 b6 47 90 05 b0 e7 2c 50 99 87 5b bc 19 1e 94 65 74 25 24 17 06 44 29 94 28 29 52 9c 3a 9c c6 b1 dd 11 98 9f 4a 8a ca a0 28 9c ae 7e c1 97 45 be 08 41 52 e9 8c af b9 c4 fa 4d 6b 41 1e 6e 78 11 0d 0b 45 2a 97 02 9f 9d e2 2b 28 72 98 43 89 88 9d 6c 86 d3 38 54 a5 a8 78 f0 89 b3 7f ed f9 f5 cb 56 57 57 48 b9 e4 53 a9 81 69 2c 6c cc 0a bf 94 39 c0 a6 5a 51 91 cf ec 29 da cd 09 11 41 44 4a 34 b9 b0 0d cc 1c 29 2a b0 36 a1 04 27 85 8a f2 7a cc af 3e de 7f d5 e4 76 ad 63 ad 23 59 a9 64 53 38 8e 05 72 ad f2 73 4d 12 0b 51 49 97 4f 46 4e a5 14 79 69 c9 c3 61 47 bb 36 64 42 51 51 ee 5d 02 b1 bd fd 44 b3 f8 d3 7c f6 19 76 ec a0 66 c7 ef f9 3a 64 Data Ascii: 3Y^`f,)W(R#G,P[et%$D)()R:J(~EARMkAnxE+(rCl8TxVWWHSi,l9ZQ)ADJ4)6'z>vc#YdS8rsMQIOFNyiaG6dBQQ]D\|vf:d
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 09 0c e5 93 d6 b2 fd 0d 32 9d e0 61 1a 92 87 fe 9b 7f 0e cc 6b 4f 38 13 59 fc 43 0e db f1 48 82 a7 05 a3 5e 9a 8d d7 87 b2 28 3f 72 45 7f 24 f7 3a 74 20 89 ea 44 b0 10 82 19 79 ca 59 52 78 a1 38 00 9b 30 16 76 65 61 0b 59 18 db a3 c7 21 1d a4 63 be a3 a0 3d ca c8 8b 86 31 01 42 a2 93 e1 4d 5d 2e 72 89 82 7f 3a a7 b7 3c 59 c5 8c 12 89 05 c6 82 24 76 9b 10 2c c4 60 11 6f e0 0b 7c 6d bf 90 29 e6 c1 b7 ce 14 8c 49 b5 1f 57 03 76 5a f7 34 0c 92 09 25 d6 21 c5 dc e9 9d 05 33 2c ec c6 43 9a 98 82 25 01 3f 37 8f f3 fd 8f ba f0 9e d6 8e 74 8c 34 13 f3 1d ba 83 29 73 9f 82 70 97 25 ac 3f d0 7d 7f 24 16 0e 1e 83 a8 c0 6b 7c c0 73 c7 81 2d 19 98 7d 2d 32 49 99 b6 2d 25 fb 1d 06 cd b9 68 86 bf df 1e aa d6 3f 7f d7 4a 39 85 af 6f 7f ca 5f fb c6 a3 50 8a ae 74 44 0b cd Data Ascii: 2akO8YCH^(?rE$:t DyYRx80veaY!c=1BM].r:<Y$v,`o\|m)IWvZ4%!3,C%?7t4)sp%?}$k\|s-}-2I-%h?J9o_PtD
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 6d 30 c7 dd 30 21 de 18 1b 31 9d c0 d6 36 4d d3 dd bb 2f 60 3e 2a f9 98 f4 d9 f9 b4 4e 83 ed e0 ff f2 55 ce cf 5e d1 3a 4c 75 9a 86 61 02 58 b7 be 06 c9 24 46 87 7d e4 41 5b 1c 1f d2 72 00 6c 65 6d 55 8b a7 37 42 71 89 23 0b 69 88 e9 cd 1b ff b9 de bd 37 3d 7c b8 5e 94 0e d3 2f 7c 19 7e 9c f2 91 69 ef fc 25 77 90 75 ef 45 e6 3b 3e af 7e a5 6f 32 d4 c1 cb 30 4d b7 93 b6 b4 9a db 56 60 48 a9 11 39 c2 b1 58 db 3b 61 22 9b 56 d4 41 8b 26 97 c0 45 b2 d6 1a b3 d9 63 9d 22 ca c6 33 d1 7f 11 b3 ba 24 87 1c 06 99 a2 e1 9c 3e 96 1f 9d a7 9f 91 97 9f 35 3f db 9c de 6a 97 c2 57 7a c7 b7 fb 50 5d bd 64 cf bd 57 b0 85 20 16 75 27 d6 4e 44 f2 ce d9 1f 0d 6b 00 b9 81 0e 25 41 a2 0f 1f 3f 2c d0 d0 3a 78 23 7c f5 89 75 b7 5d ed c2 c9 c7 1c 1b 02 7a e4 eb 36 95 8d 31 eb ef Data Ascii: m00!16M/`>*NU^:LuaX$F}A[rlemU7Bq#i7=\|^/\|~i%wuE;>~o20MV`H9X;a"VA&Ec"3$>5?jWzP]dW u'NDk%A?,:x#\|u]z61
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: d2 a2 73 7f ad ff e5 43 4a 65 ae 0e 78 42 b2 8a 63 48 ee b8 fd 71 cf 94 f4 d0 c1 a6 24 63 a9 7f e0 29 fd 6d eb eb 31 c0 00 13 08 d6 5e a2 80 90 eb 40 27 41 8e 5b 2e 77 ac 38 75 9d 76 f6 8a d3 cf 95 12 7b b1 2d 32 e4 29 6b 97 4f 07 79 3a d0 db 85 76 5b a8 4b 58 d5 63 34 b7 9a 23 12 56 b1 47 c6 9e 6a ec b1 ef 69 15 4b 93 1b 93 c1 f0 41 7f e0 89 f2 8c 25 6a 78 08 cc 83 ac b3 83 30 50 72 fb bc d1 0a 6c 2e 4f f3 1d 0b 3d e6 c9 be 53 b2 1a 2c 2a 32 37 81 15 c8 4e 18 ae f5 d1 17 db 85 c1 af d5 91 5f da 32 ed 3a 76 16 29 6c f3 70 1e 0b 7b ef 41 82 02 c3 ef 6e 19 8c 0a 6c 6f 21 4f dc 39 27 1c 60 2c 20 e5 21 39 10 45 8c 42 28 09 37 49 c2 c9 85 7e 67 cd cb f3 49 b7 fe 52 2d a5 6e e5 b0 67 54 60 25 65 79 8c d5 19 89 7e b9 69 ee d5 52 bd 3e cc ed c1 12 eb cc 61 06 b4 Data Ascii: sCJexBcHq$c)m1^@'A[.w8uv{-2)kOy:v[KXc4#VGjiKA%jx0Prl.O=S,*27N_2:v)lp{Anlo!O9'`, !9EB(7I~gIR-ngT`%ey~iR>a
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 33 54 d4 c6 a4 94 33 ba 28 95 b6 e3 e4 a8 02 07 30 f8 03 3f e4 c9 f8 25 95 5a 7d ce b9 27 a4 15 45 a7 cc 9d fb 9f f3 e6 07 03 b6 ab 06 7e 50 1a d1 83 7d 6f 1f 14 d2 81 f2 a0 74 b8 d7 ac 79 0c 53 4a 19 6c d8 6b 8e ec b3 cf 7b 71 a4 ca d1 62 3f e0 0c e5 d8 50 93 42 9f 27 62 06 87 c6 68 67 64 a9 df f9 19 66 91 f0 d9 26 69 f3 ac a7 7f 6e 40 cb ea c6 12 de 7c 56 0f bd 58 72 99 92 0c 2c 0a 79 eb 20 83 1c 25 ad fd e0 29 8c 9a 82 31 60 ae 9a 85 a3 6c 9b ca a7 b3 08 45 28 98 0e a8 a8 d3 a1 ac a6 3a 62 56 eb 83 af ae 77 bd bd 26 9a 64 47 5d b1 cf b9 e2 dc b1 5f 83 da dd 5c 94 05 39 a6 fb d5 aa b3 c6 23 ef 74 70 cc e1 80 39 b2 19 99 66 0f c6 60 ac 41 4e a6 9c ad 21 95 38 51 0e f2 5a 84 b4 28 42 5a 52 52 f2 6d d5 68 e3 01 b0 ca 83 ff fe f6 c7 e9 fa 2c b1 ac 20 69 45 Data Ascii: 3T3(0?%Z}'E~P}otySJlk{qb?PB'bhgdf&in@\|VXr,y %)1`lE(:bVw&dG]_\9#tp9f`AN!8QZ(BZRRmh, iE
2024-04-19 14:06:53 UTC	196	IN	Data Raw: b3 6f a6 e3 72 c7 cf 6a c7 7d 5b 7c 03 77 0c a3 3b 1d f1 f4 14 ef ee ee 7e ee e7 16 91 0e 3a 3a d2 a4 75 e8 f4 d3 b3 a7 de b4 74 36 1d d2 d2 3a 8d 48 37 d2 4f cf d9 b4 e8 a4 e9 6c 3a a3 8e 6d ba 3d e9 90 6f 3e e5 5d 46 f2 cd 7c f3 e9 49 10 1d 5a 74 b4 74 3a 8d b8 d8 82 86 18 b7 6d e8 e8 68 c3 74 34 82 de 18 35 69 a1 d3 3c f7 73 9e e2 5d 9f 8b 3a 36 1d 5a 3a a4 0d 5b 3a 3a 74 c8 73 5a 3f d1 b1 6d 41 0b 3a 9b 86 74 90 e7 f4 53 eb 0b 74 3a 2d 1a dd fd d4 f2 ae 23 22 1d 3a 3a 3a 9d 0e 3a ee dd d1 b1 ed 6c 3a 1d c3 16 1d 0f d8 71 b9 49 c7 b8 a3 d3 2d f4 bb ef af f8 bf cf ff 7d ad 04 00 Data Ascii: orj}[\|w;~::ut6:H7Ol:m=o>]F\|IZtt:mht45i<s]:6Z:[::tsZ?mA:tSt:-#"::::l:qI-}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.6	50071	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1082	OUT	GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 41480 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:59:43 GMT Expires: Sat, 20 Apr 2024 13:59:43 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 430 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	722	IN	Data Raw: 52 49 46 46 00 a2 00 00 57 45 42 50 56 50 38 4c f3 a1 00 00 2f ff c0 3f 00 09 88 91 e4 86 6d 06 80 f1 87 07 ad fe 0b a6 9c b4 10 d1 ff 09 88 93 11 fb 99 01 06 92 99 91 b2 33 9b 4c 38 e7 44 64 26 33 33 cc 6c 8e 21 7b f2 86 ca 43 be ec 4c 66 6e 4e 42 66 fc 48 07 a8 93 99 19 c3 5b 4f 66 e6 31 38 06 98 ac 31 6d b4 3d c0 c9 cc 99 f1 e0 2e c0 16 b8 0d d2 b0 63 32 3b f3 b4 f6 03 7b ec dd b5 1b 90 66 a6 39 e9 cc 44 0a 0d 70 b5 b9 3b 27 ba cf e4 35 46 12 38 76 eb 01 81 ed 47 ea ee 04 a6 17 4c fb 91 bc 00 5d d9 20 a9 79 f1 de 06 a4 45 ed 32 b0 3c 99 09 cc de fe f1 d0 76 bf d8 4e 4a e3 dd b5 1b a0 1d 4f 7c 1e ee af 6d 03 11 11 6d ef 2e b8 fc 3c e8 c5 75 fe f0 3c 62 77 ed 63 00 09 9e f2 49 c3 e7 42 62 b5 b6 9f 8b 07 6c 7b ed 3d 11 b1 e8 76 f9 e1 76 45 d4 d7 9f 9d 19 Data Ascii: RIFFWEBPVP8L/?m3L8Dd&33l!{CLfnNBfH[Of181m=.c2;{f9Dp;'5F8vGL] yE2<vNJO\|mm.<u<bwcIBbl{=vvE
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 6f 6a 22 bc 34 6b b1 16 21 44 01 61 b4 c0 57 1e 78 e0 27 f9 eb 1f 3f 09 8d 7d 06 53 03 97 f7 87 3b 35 a9 36 65 a5 7f 5e ff 6c 3e f0 c6 03 2c 09 21 04 84 13 8d e4 dc 3c c0 c3 9d 4c ea 8e 72 e1 fb ca b1 43 6c a0 20 00 05 73 07 9f 06 44 96 ec 97 76 4c 79 c8 ae cb 6a ca 92 1b dc 71 47 b9 2c 00 01 81 c2 7e 86 ff fc a4 d1 08 a1 17 91 18 c6 f0 4e ff 7e f3 ca 96 46 e3 a2 ea b5 59 3a a4 50 4a a0 28 14 1c e0 40 08 0f 34 c2 d6 a0 4d 7a 76 91 59 9b d5 9c 71 3f b3 fe 3c f1 13 73 e6 cb 00 28 90 02 00 a5 ef e0 fa 33 e1 85 17 42 d8 ce ae 5e be b6 07 8d 46 9b 75 31 6e b3 b8 59 3c c4 cf b3 c7 f3 b1 05 0c 03 86 f3 0c 3b 7e f2 70 b4 fc 68 cb 9a 07 1a 2d ba e8 fa 3e 58 4d be 1a 2e f6 ab 0b 0b 25 1d 21 20 a0 14 14 00 9e ef 11 7b 12 61 cf 9e d0 da 2e 4a 2d 8f e6 c7 00 c0 05 98 Data Ascii: oj"4k!DaWx'?}S;56e^l>,!<LrCl sDvLyjqG,~N~FY:PJ(@4MzvYq?<s(3B^Fu1nY<;~ph->XM.%! {a.J-
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: d2 d8 70 d2 49 4b ac 07 6d 28 5c 57 20 78 68 d0 25 96 41 a7 60 c0 9d 54 b0 e6 2d c8 d2 84 07 17 5d 70 d3 58 74 c1 3f dd 87 1d ac 0d 45 75 03 c7 9f 93 34 17 4c 1a cf 23 b4 03 2a e5 27 3d d7 20 53 54 de d0 6c 98 74 27 6c b1 1c 74 6d 28 98 4b 5e a2 de 1b e8 4d d3 12 0c 9a 30 e4 95 83 1e 0b fc d6 b6 ed da 95 6d 5b a5 d4 36 00 ac 88 d8 9c 33 89 6f 07 b6 01 5b dd 56 70 af b6 0b db 9f ad 6e 89 13 69 11 60 8e de aa df da b6 55 db b6 6d 2b a5 5c 27 e3 66 26 07 18 9c 40 7f d0 b1 ed 08 4b 5b da 2a 9d 33 69 8d 9a 62 02 fe 83 be bc 80 67 30 ff 64 00 cf ee 62 a4 08 17 f1 4c 9e 54 7a e2 97 df 80 27 67 31 af 12 3c 85 9e 26 4f 75 59 cc af cf f1 34 56 a6 62 85 1f f0 9c df 41 cf aa b5 95 a0 98 56 2b e0 12 3c ef 29 80 7a ea 2e 43 c0 63 45 ef 6f aa dc bf d3 00 7e 10 f0 00 54 Data Ascii: pIKm(\W xh%A`T-]pXt?Eu4L#'= STlt'ltm(K^M0m[63o[Vpni`Um+\'f&@K[3ibg0dbLTz'g1<&OuY4VbAV+<)z.CcEo~T
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 02 4e 90 81 df 67 02 c9 ce ac 1b b3 cd 43 e0 6e 48 0f 01 cc 34 e0 97 17 a0 77 90 04 18 2f 14 c2 13 3a cf 36 43 bc ef e7 1c e9 98 06 21 17 50 3c 5e 98 5f 69 9a d3 07 16 80 27 98 6b 9d 82 1d a8 3c 1f 7d 1d cc 6b 93 58 ee d5 5f 34 01 19 90 9f 2d 13 63 ae 0c 17 24 42 55 98 1e 00 51 00 1a 33 aa 19 3d 84 38 1d 63 07 84 c0 93 0a 60 e6 cd 34 68 81 06 02 7a 4f 67 79 80 e7 54 2c 16 c0 cb 83 fb e4 22 d8 8c 26 7d dd 27 68 a1 2f b1 1d 00 b7 e7 15 60 f2 b4 76 a6 2b 5a b8 fa 85 a9 4b 13 68 0b 86 fb 70 bb 37 ab b0 58 6b 02 99 78 b4 09 9e a9 02 01 ca 09 81 0d cb 36 10 40 cf 03 e8 00 9a ac 2c 16 9b 99 b5 bb f1 8c 06 d4 dc 0b cb 09 c0 cb bf 32 26 b3 69 13 8a 00 02 88 a8 5a 30 62 3a ee af 45 48 d2 19 c0 1b f8 8a 5a 6a 70 c3 0f b7 0e 88 6d 81 46 72 74 db a8 4b f4 6e c0 d0 81 Data Ascii: NgCnH4w/:6C!P<^_i'k<}kX_4-c$BUQ3=8c`4hzOgyT,"&}'h/`v+ZKhp7Xkx6@,2&iZ0b:EHZjpmFrtKn
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 5c 53 33 05 5e 00 cc 6c f3 84 3f 79 8e 39 6b 65 70 22 b9 b0 00 65 b2 35 48 e0 40 94 54 25 50 35 de 05 07 85 80 48 20 a6 1d 30 57 0a 39 62 b6 07 3f 1b 03 e0 02 8b 69 6e 80 d3 6a 42 05 15 40 a0 04 af ba 4f ce 67 73 f0 64 bd 00 40 9a a4 d8 16 0c 61 fa ba 50 81 c1 34 87 16 6a 21 41 13 91 b9 95 79 a5 06 90 bf f5 ef 11 02 4f d4 6c c8 8d 83 12 48 4c bf 50 7f e3 46 bf 8b a4 0a f4 00 4f a6 32 90 89 c0 62 b1 3a 78 30 0d 0f 4f 08 c0 d8 98 5a 10 4f 28 64 10 b3 2b 4b 7d 9b 5c 5b 73 40 cd c0 2b 77 c2 18 63 30 2b b1 fc c5 cc 6e b6 41 f6 9c 68 e7 24 bc 10 3e 43 43 f7 9a 48 13 56 21 76 6f aa ff 95 e7 7f e6 d1 3f a5 fd 21 09 15 43 55 01 14 a8 b2 11 40 ef c0 57 01 05 d8 42 c6 73 1d 1e 9a a3 59 9a 14 df df 3e c4 9b 32 91 37 33 5b c1 f0 b8 4f be 03 2c 2c be 4c 2a 90 25 67 70 Data Ascii: \S3^l?y9kep"e5H@T%P5H 0W9b?injB@Ogsd@aP4j!AyOlHLPFO2b:x0OZO(d+K}\[s@+wc0+nAh$>CCHV!vo?!CU@WBsY>273[O,,L*%gp
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 09 54 ad 0e 20 94 23 b1 96 84 77 a6 27 b3 15 3d 73 c6 40 9f 41 3f df ad 49 dd fb 73 7c fe 13 b3 59 d5 cc 84 04 90 be 32 7d 03 fd 86 02 c5 00 78 58 50 cc 0b 75 e6 3e 75 91 7f 22 99 69 c5 02 70 77 9f 01 6a ae 60 44 05 cf 8e b2 a1 07 b0 8c 82 c8 6c b9 d5 9d 37 af 5e 5e ef 74 b9 5d 8a 9b 53 9a 87 f1 a9 d4 c9 66 33 d1 ae 1f f5 cd 0a 8d 39 e2 92 56 7d d9 22 fa da c5 86 6f 1a 14 d3 cc 73 25 94 94 fd cc 7f f9 5b c9 df cd 0a 96 9f 69 77 e6 bb 59 f4 5d 2c bf 55 cd ac 7a 32 9b 16 3e a9 c1 90 8c 13 f0 83 69 26 12 6c 40 ff 31 9c 7a 11 33 89 04 63 50 66 5e 63 d3 64 55 a8 f1 be 1d 2d 45 62 33 9f 0d 30 aa 6f fb f0 da aa 7a 29 ac 7e 3c d1 ed 22 d5 55 0a 73 bb 4b fd 28 86 4e 78 ed 46 6f 17 a4 68 d0 c6 8d 94 cb b6 35 f4 bc 8f fb 85 b0 1d c8 5d 96 92 50 fd 7a 54 93 b4 7d 79 Data Ascii: T #w'=s@A?Is\|Y2}xXPu>u"ipwj`Dl7^^t]Sf39V}"os%[iwY],Uz2>i&l@1z3cPf^cdU-Eb30oz)~<"UsK(NxFoh5]PzT}y
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 8d 62 d9 14 30 98 06 04 d4 e0 3b 30 27 63 04 3c 93 9a f1 dc 56 93 d9 0d f6 60 0b a8 30 40 28 e4 a3 24 ae ae 9e 42 08 06 f0 6c 2c 6a 5c c0 7c ba a8 b1 af e0 7d f4 83 69 c7 20 a4 2a 02 45 f3 45 d5 d9 6e 7c 49 52 25 5b d2 07 d4 85 6e 9e 83 67 96 0c ad c0 65 19 41 f6 b1 49 dd 4a b0 be 58 21 74 ca 84 14 18 3f dd 27 dc 19 7d 36 1e 30 0e 3c ce 1b fb bd 5c 1d ec 4a af 81 20 20 01 76 5a 03 0a a8 d5 f0 8e 65 40 62 fe 84 7c 99 21 18 4f c2 6c f1 3a 11 68 a1 00 e4 c7 04 0c 60 66 eb ba 8f ec 74 f1 b0 00 ec 7a 79 9d 4b ff 10 e9 73 e5 96 8c e3 04 34 76 24 7a 83 38 e8 35 c1 26 6f b0 b1 4f f7 83 ad d9 95 e9 f6 c6 61 d7 88 ce 7a b4 3a 80 87 2d a3 b3 69 65 6a 3f a9 69 b2 67 98 2c ed 76 5d 7c bc 9b 91 99 99 ea cb 50 c4 c1 d8 c7 78 fd 7e 2a dc dc 3f fc f5 63 3d 78 3a 99 42 42 Data Ascii: b0;0'c<V`0@($Bl,j\\|}i EEn\|IR%[ngeAIJX!t?'}60<\J vZe@b\|!Ol:h`ftzyKs4v$z85&oOaz:-iej?ig,v]\|Px~?c=x:BB
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 62 81 19 83 31 66 c6 18 c0 60 58 70 48 62 b9 cc 72 27 1d 76 fb c4 90 c6 36 09 fb 14 6a 12 b8 86 9f fe 92 41 6c a5 15 8b 8e ee 5a 48 0b a7 67 af 6b bf 05 bc 8e db d2 5b b6 4d 32 c1 2f 7d a3 b5 ad 4e db e4 dd 53 97 7d c6 0a 9f 57 c9 2c 55 41 b6 71 99 d5 21 ec 02 7f 0b b7 f8 07 7a a3 98 88 fe 5e 74 64 60 cc 75 da 85 7a 0d bc 04 9f 02 c7 c3 2a e6 6f 0d 7b 6c 8c 81 d9 70 c1 fa 68 40 d5 49 ff 3f 7e 01 09 0a d8 0a 7a 67 d6 14 d3 15 8a 2c 4d c5 b4 53 33 d3 5f f7 2d 00 32 4f 01 63 8a de c7 00 b4 e9 78 53 e7 4a 89 53 73 4d a2 c1 0f 5a d7 f7 55 ad 4a 80 88 01 21 55 1d cd b9 3d b9 76 1e 2f 7b 21 5e bd a7 87 15 e7 32 e6 a2 2e 82 0e 8f 48 64 bd db cc 0b ee 08 38 a7 14 82 52 87 51 0e 7d 86 b1 3b f7 d1 9b 2e e1 04 95 28 ee 3c eb b1 5a 32 c1 ae 75 95 a9 b7 d3 ed f6 a6 7e Data Ascii: b1f`XpHbr'v6jAlZHgk[M2/}NS}W,UAq!z^td`uz*o{lph@I?~zg,MS3_-2OcxSJSsMZUJ!U=v/{!^2.Hd8RQ};.(<Z2u~
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: cd 7e 1c 22 3a da ec 24 b7 f7 f7 f7 74 85 44 96 83 b5 b7 5d 67 d5 37 47 12 c0 fb a6 db ec 6f 8e 7d 21 03 23 b4 da 98 e2 ae ba 07 5d ce 35 39 41 80 c2 fe d6 50 c6 c0 1d 56 5e c0 26 bf c9 3d f0 cb 32 a1 90 14 8c e1 b4 86 14 78 c4 56 87 de 13 99 8f 6c 6c 21 a1 1c 98 14 15 b6 af c0 31 02 c4 84 4f bf 76 59 e2 5a a7 13 51 95 17 5d 7f a2 11 58 e4 10 7c 6b fb 60 68 6f 04 58 aa 4b 05 2b c6 31 3b f5 3f 5d 2b 5a 05 ad 98 4f 07 30 d8 cd e2 d6 bf b5 14 51 2c 22 06 6c 4b 66 50 c6 72 5a e9 0c dd 8b 7e f3 70 63 4c 5f a9 45 3a 8c 32 75 0a 2a f8 58 6d e2 00 68 88 84 2c 67 ba 78 54 47 56 7a 1b bc fc 5e 71 cc 9a fc c2 54 d6 50 16 cd 66 63 2e 85 78 30 bd b0 b0 20 45 20 af fa 35 14 c5 44 6f e9 24 0c bb 54 ae f5 c2 b4 f9 2f 36 ff ff c9 1a d0 6b 63 b8 81 e5 f4 02 5b d0 a1 03 9a Data Ascii: ~":$tD]g7Go}!#]59APV^&=2xVll!1OvYZQ]X\|k`hoXK+1;?]+ZO0Q,"lKfPrZ~pcL_E:2u*Xmh,gxTGVz^qTPfc.x0 E 5Do$T/6kc[
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: 73 cd ab c7 db ff 66 b9 0b 65 11 59 a9 ee 5c b7 14 08 10 4a 96 9e f2 29 00 9f 27 60 cb 0d 9e b9 76 c0 9e 74 e0 2b 08 f0 c7 fc 88 a5 87 dd 23 c6 3e dc 7c af 0b fc f7 f3 f9 17 bf 31 c3 77 6d d8 7b bf 6b 8b 8e 63 cb e1 7a ef d1 92 74 44 1c 5d e3 c4 5b da e2 58 19 1d a5 a2 59 4a 4d d9 f0 13 75 bc ad f5 f2 93 20 ca a3 56 1d fe 4c 71 f3 35 61 91 87 08 3a c2 69 21 06 27 30 b6 14 43 d4 cc 73 4c 1e 65 1a b2 a8 55 83 0e c7 80 04 6b 29 d2 bd 7a 86 63 8a 05 b3 fa ba 2f 2d 09 a3 f7 b6 50 40 00 90 c0 17 25 d8 b5 7d 3b 5a 8d ff 7e 31 47 2e b4 43 06 7c dc 6b 05 1b 53 c1 ee 57 fb 90 ba 78 fc ec be fd c0 2f 14 d3 ad 2d ff ac e2 38 2b af cd 2f f0 77 2f d4 a3 20 ed 77 95 0e 94 12 80 11 e6 de 6f 19 f8 42 a6 72 80 2d 84 f9 b2 81 01 d5 ff 89 7f 12 15 04 7a 08 93 d1 21 04 20 5b Data Ascii: sfeY\J)'`vt+#>\|1wm{kcztD][XYJMu VLq5a:i!'0CsLeUk)zc/-P@%};Z~1G.C\|kSWx/-8+/w/ woBr-z! [

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.6	50072	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:53 UTC	1081	OUT	GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:53 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:06:53 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:06:53 GMT Server: fife Content-Length: 3812 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:53 UTC	733	IN	Data Raw: 52 49 46 46 dc 0e 00 00 57 45 42 50 56 50 38 4c d0 0e 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 e0 96 66 9f ff 7f b8 dd b5 9c fa 1a d1 ff 09 c8 4d 3f 36 81 6e 01 d5 0d 60 5d 06 f6 63 82 e8 09 ec 4c 70 32 01 3b 30 04 24 2a d8 59 12 c5 ce cc df 02 76 a6 5e 4a 02 76 e6 a2 06 ec ac 88 ca bb b1 26 5e b3 2a 17 ac 4b 61 47 54 f6 c4 ec ba a7 0b a8 b1 6d cb 8a 76 fe 31 02 bd 04 b3 7a 01 b4 fb e3 53 58 24 6e db c8 68 2a ec ff 5f 37 3c 7c f0 80 e3 48 92 a4 a6 f0 00 ff ad 4b de e7 bc 01 29 fa 3f 01 e9 47 7f 5b 67 dd b9 33 98 13 00 a6 04 7f 30 40 4c 00 80 00 7a 1d 18 7a 8f b7 6d 8d 40 00 10 ff 9e ae 03 29 c5 d0 02 77 61 c9 20 9d 39 94 12 ee c2 6a a4 fd e3 87 15 7a 8a b0 24 a4 c3 6f ad e0 ab 3b b1 42 c7 d6 c1 4d 00 21 a1 76 52 14 00 03 30 91 ce ad ca 9e 00 80 80 74 56 80 Data Ascii: RIFFWEBPVP8L/?M8rFfM?6n`]cLp2;0$Yv^Jv&^KaGTmv1zSX$nh*_7<\|HK)?G[g30@Lzzm@)wa 9jz$o;BM!vR0tV
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: a6 b4 43 a2 28 04 c2 3e fb 69 8f f3 f9 40 69 96 69 c0 c5 e6 dc 22 f6 8f 88 de c5 48 2e 48 52 60 dc 48 b5 57 0a 42 4e 8c 3d e3 be fa 39 7a 0f ef e7 85 d4 ac c9 9e b9 5c 59 f7 73 45 9c 3b 71 a0 50 a1 8c c4 35 69 b5 e7 32 30 3a b1 47 dc 48 8e 7f 74 76 79 a7 2c 15 9e 6b 54 89 ad ca c6 08 98 f7 84 fb 4f e3 dd b2 90 96 32 26 c9 98 0c 0c 69 9c 36 9c 49 0b 21 b9 16 e2 ca 78 d3 37 fb c1 ab 38 76 cd 24 b4 43 33 3d cf 19 8a 72 e3 fa bc 72 f3 3e 70 43 ce 1c b3 71 25 2a 51 13 cc b6 4d 9c 71 41 60 98 d6 93 07 7f fb 6b 7f 1f 38 f6 de 8f 36 ce 9a a3 34 33 54 23 e0 95 66 91 da 37 bf fc e5 db c3 79 f7 bb 72 5b 74 54 c3 52 86 6b 90 5c 2c 0c 04 46 61 60 c5 40 48 6e 5c 7f eb 26 73 ed 7a 37 26 aa 0e 37 a4 43 4d a6 01 c5 8a 82 a1 a3 34 93 b4 40 b9 f1 bc f7 c3 d1 8e 7f e5 e8 47 Data Ascii: C(>i@ii"H.HR`HWBN=9z\YsE;qP5i20:GHtvy,kTO2&i6I!x78v$C3=rr>pCq%*QMqA`k8643T#f7yr[tTRk\,Fa`@Hn\&sz7&7CM4@G
2024-04-19 14:06:53 UTC	1255	IN	Data Raw: cd f7 a7 83 66 c1 d0 ce 62 9e 04 06 63 54 79 e6 d2 8f b1 4e 94 bb f9 67 ce 5c 3d f9 d9 db 36 bf 3c 14 51 07 2e da cb 06 95 2c 30 34 43 e6 16 89 24 a3 1f bb 74 57 d7 e3 cf d8 ba be b1 6e d9 db 01 fe e4 dd 3c a8 c3 3c df 57 b2 b6 72 a6 26 cd 8b ad e3 b4 a1 10 54 10 cc a4 bc 93 5c 31 df 76 2e bf d8 77 bd dc a6 2f 08 ee 6f bd f6 b5 db ff 3f 2b d2 af 1c eb e7 36 41 b7 e8 b6 ac c8 14 49 e0 46 bb 95 ff 81 44 3a 1c 66 f3 41 1d e9 94 aa bb a8 f2 f0 43 22 5f 3f db 9d d7 c6 6d f2 56 ac 77 52 47 7f 33 ab 9e eb 35 51 5c 89 42 69 56 48 a4 fb 85 42 a9 53 a8 c3 7a d4 4e 77 70 e5 43 ff a9 e5 2f 7f f8 ab 6f 45 b8 4d 73 e8 da c9 d8 90 30 10 18 d9 90 c3 b4 8c 59 b3 1c 4e f7 84 57 24 ea 2e ca f2 44 c7 4f 08 f3 b5 47 fd 02 7f b7 e9 46 5a 81 98 04 73 b4 14 35 07 06 14 8b 66 69 Data Ascii: fbcTyNg\=6<Q.,04C$tWn<<Wr&T\1v.w/o?+6AIFD:fAC"_?mVwRG35Q\BiVHBSzNwpC/oEMs0YNW$.DOGFZs5fi
2024-04-19 14:06:53 UTC	569	IN	Data Raw: 22 0e ad e2 51 48 51 44 9a ad 18 4a 30 0f d4 61 7c d4 d8 e9 2f 98 df f2 36 6f b3 e2 4a 91 c2 62 5a 36 0e 65 3a e0 a2 3d d4 a2 c4 1a 36 d6 ee d6 ec ef fa 2f 9d 6e 3a 9c 78 49 b6 4e a6 03 4a 3b 4c 53 1c 22 6c 4c bb 7a a2 10 66 0c cd b4 39 35 53 33 5b 54 44 9d e6 58 6f 4c ec 93 43 27 1a 6a 93 e2 11 d5 50 ad 58 6b 8d 3a ad f6 c3 42 c2 b2 68 96 90 8d 55 f3 64 cb c4 aa 22 6a 8d 2b ab f6 84 66 c1 bd cb 04 43 51 5c 90 10 1b a2 a0 6a 8d ba b1 5e da 43 4f 2b 03 c2 b6 a5 5d 81 91 58 55 7c 63 e5 9e 91 93 ff f1 06 81 b0 ed aa f9 78 43 49 d3 28 d6 b5 be db e6 da 17 da f7 95 ac 43 22 67 db 9e 1e 87 4a 18 cc eb 77 db 37 13 65 7a 42 9a 46 2d 12 eb 04 81 81 30 7f 66 dd 94 fb c2 d6 2f 87 f6 18 66 c8 24 61 d4 1a b5 56 54 9f ed a9 39 b1 f4 96 60 81 42 e1 23 b5 52 6b 1c ed a5 Data Ascii: "QHQDJ0a\|/6oJbZ6e:=6/n:xINJ;LS"lLzf95S3[TDXoLC'jPXk:BhUd"j+fCQ\j^CO+]XU\|cxCI(C"gJw7ezBF-0f/f$aVT9`B#Rk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.6	50075	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	1552	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7592 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=2uuinniaxkc5 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOaiH8YvO_H7HxZtX6YQSW50fZvjkExH6e11dRr8xe5J3t7QJKYmrqDQi7ZQSSiL03F-Jq77V-5AKGcVBZWY; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:06:55 UTC	7592	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 36 79 39 5f 33 6d 2d 65 34 5f 54 34 31 4c 66 59 6f 79 46 6f 7a 73 73 57 63 54 32 78 6a 6e 4b 52 79 4c 4b 63 6e 59 38 74 58 68 37 45 38 70 79 34 32 57 4b 55 57 54 4c 4d 30 6f 53 46 70 77 51 38 37 58 6e 6e 47 61 45 51 30 7a 55 30 66 77 59 32 54 4d 73 7a 63 70 42 32 56 74 74 6c 6d 36 6c 65 58 49 75 41 4b 49 39 4d 6a 5a 4d 63 64 2d 46 6c 48 6f 66 45 58 6f 4c 34 44 36 54 55 30 34 58 59 70 6a 78 42 63 43 36 59 62 50 31 75 64 4f 5f 76 39 4d 62 34 72 47 33 44 39 6c 52 4f 44 48 48 6a 4a 4c 34 6a 67 46 4b 6c 47 42 4e 63 69 41 43 42 6b 43 73 66 72 4e 70 74 38 41 45 50 71 30 59 31 6b 49 50 78 5a 68 6e 61 78 39 65 65 59 4a 6a 41 4a 78 66 42 2d 52 73 2d 59 6f Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA6y9_3m-e4_T41LfYoyFozssWcT2xjnKRyLKcnY8tXh7E8py42WKUWTLM0oSFpwQ87XnnGaEQ0zU0fwY2TMszcpB2Vttlm6leXIuAKI9MjZMcd-FlHofEXoL4D6TU04XYpjxBcC6YbP1udO_v9Mb4rG3D9lRODHHjJL4jgFKlGBNciACBkCsfrNpt8AEPq0Y1kIPxZhnax9eeYJjAJxfB-Rs-Yo
2024-04-19 14:06:55 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:06:55 GMT Expires: Fri, 19 Apr 2024 14:06:55 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOahAvZyr0H0NRCnjg-4-dMJTRBiLvcPTNs2ukbQS8YRK9joXovvE-UQMrhWL6kaD8Q2KdwpXNKLEFUSZkP8;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:06:55 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:55 UTC	559	IN	Data Raw: 61 36 32 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 37 78 44 50 54 41 2d 43 59 55 79 6a 39 37 5f 49 61 30 57 75 44 34 70 64 76 38 68 69 2d 35 64 6a 6a 41 51 2d 50 62 78 38 4b 69 41 58 6e 39 58 57 4b 31 69 70 55 62 74 79 57 6a 47 57 53 71 78 4b 75 72 71 68 4f 4a 4b 61 71 79 74 67 2d 33 50 52 56 67 6d 5f 6c 63 6b 37 43 72 48 49 4a 4d 43 62 64 59 58 61 65 5f 6f 6e 56 7a 4b 6f 50 72 72 6f 6a 47 34 61 72 6c 47 76 37 52 39 64 64 31 41 5f 5f 6e 35 70 6d 48 6a 78 67 67 4d 4d 70 32 51 71 6d 76 6c 54 5a 5f 2d 76 45 70 48 58 71 58 38 6d 57 54 6f 75 6f 6a 50 4a 6f 62 43 39 71 44 59 69 6f 64 48 5f 71 79 6b 62 77 48 70 65 6c 6e 74 39 48 49 55 64 56 38 77 6c 70 45 69 6e 47 68 6e 30 74 49 44 64 68 52 51 78 34 74 5f 35 4a 36 57 4b 53 7a 34 Data Ascii: a62)]}'["rresp","03AFcWeA7xDPTA-CYUyj97_Ia0WuD4pdv8hi-5djjAQ-Pbx8KiAXn9XWK1ipUbtyWjGWSqxKurqhOJKaqytg-3PRVgm_lck7CrHIJMCbdYXae_onVzKoPrrojG4arlGv7R9dd1A__n5pmHjxggMMp2QqmvlTZ_-vEpHXqX8mWTouojPJobC9qDYiodH_qykbwHpelnt9HIUdV8wlpEinGhn0tIDdhRQx4t_5J6WKSz4
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 48 35 62 70 35 50 35 6d 38 34 4b 68 50 4c 64 4b 41 5a 4a 62 4c 4b 5a 63 66 2d 45 2d 43 7a 51 53 72 73 75 68 4e 5a 57 31 57 7a 38 37 4d 70 30 6a 48 35 65 57 30 44 66 6d 69 4a 78 55 70 42 4f 4a 66 51 35 59 37 6f 70 6e 58 64 4e 4a 69 72 46 45 70 57 47 35 6c 48 39 49 48 5a 44 4b 77 5a 33 4d 59 69 36 49 64 4d 68 5a 4e 53 79 47 67 4e 49 36 4a 59 66 32 35 2d 6c 6f 56 55 78 47 4b 6f 78 77 56 51 41 38 4d 42 4a 50 32 56 65 75 4c 58 59 6d 48 45 6a 6e 52 5f 42 70 67 71 65 49 55 7a 61 59 4f 53 37 57 41 37 6c 77 4f 6b 6e 6e 65 42 4e 46 55 54 72 6c 42 2d 56 57 5f 68 79 69 43 32 54 71 7a 62 5a 72 78 58 6c 51 35 7a 2d 41 36 61 58 48 76 54 66 34 42 36 4f 41 67 4d 32 32 4c 30 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: H5bp5P5m84KhPLdKAZJbLKZcf-E-CzQSrsuhNZW1Wz87Mp0jH5eW0DfmiJxUpBOJfQ5Y7opnXdNJirFEpWG5lH9IHZDKwZ3MYi6IdMhZNSyGgNI6JYf25-loVUxGKoxwVQA8MBJP2VeuLXYmHEjnR_BpgqeIUzaYOS7WA7lwOknneBNFUTrlB-VW_hyiC2TqzbZrxXlQ5z-A6aXHvTf4B6OAgM22L0",null,120,null,null,null,["bgdat
2024-04-19 14:06:55 UTC	851	IN	Data Raw: 46 4e 65 6a 5a 45 53 44 68 50 57 54 52 7a 53 55 46 42 55 33 46 31 4c 79 38 34 57 45 74 53 5a 56 46 49 52 44 56 74 4d 57 70 57 56 48 55 72 5a 6b 31 58 53 57 6c 53 55 57 68 59 61 57 68 47 62 46 55 79 64 33 59 78 4d 6d 78 48 52 33 4d 78 59 7a 46 4b 55 32 70 61 4d 43 74 6e 53 6a 6c 74 4d 57 68 76 56 32 45 79 4c 30 39 68 4f 44 42 4b 62 33 4a 6d 55 47 74 33 53 6d 30 31 62 6a 68 57 5a 46 6f 33 4e 54 59 77 52 46 46 4a 55 45 4e 47 53 79 38 7a 56 56 5a 51 63 56 6c 6b 56 55 4a 33 62 57 74 61 61 6e 6c 53 56 44 68 6a 52 32 68 30 56 45 49 78 4d 32 31 59 51 32 4e 61 56 30 52 69 56 32 46 74 65 45 4d 72 57 54 42 71 57 58 67 77 54 44 4e 70 55 69 39 46 53 6d 34 72 65 6d 4e 47 52 47 35 45 5a 6a 46 5a 54 48 4a 56 64 33 46 35 53 31 49 30 53 33 70 6b 63 48 56 75 59 58 56 4d 53 Data Ascii: FNejZESDhPWTRzSUFBU3F1Ly84WEtSZVFIRDVtMWpWVHUrZk1XSWlSUWhYaWhGbFUyd3YxMmxHR3MxYzFKU2paMCtnSjltMWhvV2EyL09hODBKb3JmUGt3Sm01bjhWZFo3NTYwRFFJUENGSy8zVVZQcVlkVUJ3bWtaanlSVDhjR2h0VEIxM21YQ2NaV0RiV2FteEMrWTBqWXgwTDNpUi9FSm4remNGRG5EZjFZTHJVd3F5S1I0S3pkcHVuYXVMS
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 31 36 37 35 0d 0a 53 55 6d 6c 51 57 56 42 4d 63 54 4a 43 52 32 4a 4d 65 46 67 32 55 46 68 54 4d 45 4e 44 63 6a 42 6b 57 6e 5a 4a 61 32 46 32 4e 48 46 6c 59 33 56 47 55 7a 55 7a 53 54 6b 35 5a 47 5a 6f 61 32 78 59 4d 6d 31 71 54 48 42 43 52 33 49 30 56 6b 59 77 4d 31 42 70 4e 6d 4e 58 55 55 6c 49 4d 6e 64 6c 65 47 5a 76 59 7a 55 79 4c 30 34 31 4f 57 4e 4d 57 55 35 30 51 6c 68 74 59 7a 46 58 55 7a 49 34 54 33 4e 49 4d 55 4d 33 5a 31 4e 68 56 32 52 5a 63 6c 68 75 4e 55 70 71 57 44 64 78 59 57 74 76 53 6a 64 76 54 46 5a 43 54 53 38 79 4d 6d 35 77 53 58 5a 70 64 54 42 32 55 56 5a 79 64 6c 56 6f 54 6d 78 61 53 6b 35 35 53 45 68 31 57 46 56 32 61 46 49 33 52 30 52 45 64 46 67 7a 54 48 4a 70 65 48 67 31 55 32 39 35 61 6e 46 61 4e 30 68 4a 4e 43 38 79 57 58 67 77 Data Ascii: 1675SUmlQWVBMcTJCR2JMeFg2UFhTMENDcjBkWnZJa2F2NHFlY3VGUzUzSTk5ZGZoa2xYMm1qTHBCR3I0VkYwM1BpNmNXUUlIMndleGZvYzUyL041OWNMWU50QlhtYzFXUzI4T3NIMUM3Z1NhV2RZclhuNUpqWDdxYWtvSjdvTFZCTS8yMm5wSXZpdTB2UVZydlVoTmxaSk55SEh1WFV2aFI3R0REdFgzTHJpeHg1U295anFaN0hJNC8yWXgw
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 53 33 5a 4e 52 48 46 31 64 6a 4a 56 65 58 68 54 65 54 64 61 63 6c 56 71 62 31 6b 72 64 6b 52 6e 64 46 4e 6a 55 32 5a 32 64 6d 68 70 56 55 70 57 51 6d 64 48 56 58 4e 44 5a 6e 51 78 57 58 42 4a 62 6b 45 76 65 54 4a 52 4e 6c 4a 68 4b 7a 64 4c 56 30 64 69 51 33 70 71 62 48 4a 6b 54 57 6c 47 4c 32 74 4c 52 32 45 35 61 48 4e 58 53 6b 6c 30 62 44 4a 57 4d 6b 74 77 61 48 4e 34 5a 46 67 32 4e 57 4d 77 52 54 4e 30 63 6d 49 7a 57 47 56 56 62 46 6c 70 62 47 35 72 4e 45 6c 42 55 43 74 36 63 48 67 35 4d 48 6f 35 55 48 56 78 62 33 46 4c 56 57 5a 73 54 55 6c 47 64 31 56 52 4d 31 56 72 5a 32 52 4f 4e 32 63 77 4b 30 46 4f 53 47 35 6e 52 6b 4e 77 65 56 41 30 57 6b 31 52 5a 47 73 76 59 7a 46 49 53 48 55 33 51 56 49 30 51 6d 6c 68 5a 45 35 76 57 45 68 68 65 44 64 48 65 55 74 Data Ascii: S3ZNRHF1djJVeXhTeTdaclVqb1krdkRndFNjU2Z2dmhpVUpWQmdHVXNDZnQxWXBJbkEveTJRNlJhKzdLV0diQ3pqbHJkTWlGL2tLR2E5aHNXSkl0bDJWMktwaHN4ZFg2NWMwRTN0cmIzWGVVbFlpbG5rNElBUCt6cHg5MHo5UHVxb3FLVWZsTUlGd1VRM1VrZ2RON2cwK0FOSG5nRkNweVA0Wk1RZGsvYzFISHU3QVI0QmlhZE5vWEhheDdHeUt
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 34 61 55 6c 52 53 6c 70 56 4b 7a 5a 31 5a 7a 63 31 64 6c 5a 48 56 32 78 32 61 6d 51 77 54 6d 64 53 4e 47 39 53 59 55 4e 79 54 57 68 77 56 6b 73 32 62 56 46 34 54 47 56 6d 4e 6b 31 4c 56 32 78 52 53 47 73 77 4e 6e 4e 47 55 6d 4e 42 53 47 46 44 65 6e 6c 4f 4d 47 52 6f 59 6e 4e 4c 4d 6a 55 72 4d 45 31 76 54 58 4e 45 52 6b 5a 58 62 54 4e 78 63 33 68 32 4e 6c 4e 35 63 45 46 42 62 55 31 7a 53 54 6c 4a 52 47 30 76 55 6a 4e 4b 55 53 74 36 5a 7a 4e 7a 55 31 70 6b 5a 30 74 69 51 6e 45 31 51 54 6c 46 4d 32 52 61 56 6b 4a 74 52 6c 4a 4d 4d 31 5a 4a 61 54 46 4f 4b 7a 4a 69 4d 53 39 47 57 48 56 4e 64 33 64 48 62 6b 35 79 59 6b 63 77 54 58 64 4a 5a 31 42 4e 59 6c 4d 77 63 32 5a 46 4e 47 4e 49 4b 30 64 4f 59 57 56 56 53 54 46 71 63 32 74 56 4d 6e 5a 6d 62 79 39 44 64 45 Data Ascii: 4aUlRSlpVKzZ1Zzc1dlZHV2x2amQwTmdSNG9SYUNyTWhwVks2bVF4TGVmNk1LV2xRSGswNnNGUmNBSGFDenlOMGRoYnNLMjUrME1vTXNERkZXbTNxc3h2NlN5cEFBbU1zSTlJRG0vUjNKUSt6ZzNzU1pkZ0tiQnE1QTlFM2RaVkJtRlJMM1ZJaTFOKzJiMS9GWHVNd3dHbk5yYkcwTXdJZ1BNYlMwc2ZFNGNIK0dOYWVVSTFqc2tVMnZmby9DdE
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 63 33 61 56 42 69 54 45 4e 31 59 56 52 6e 4d 58 4e 6d 55 55 56 35 5a 57 6f 31 55 30 6c 61 55 47 63 33 61 32 46 30 56 54 4d 32 4d 32 68 78 4d 6a 5a 4f 64 69 74 6f 52 31 4e 45 52 47 5a 30 5a 6e 6c 79 4e 6b 63 32 51 30 68 6c 4f 57 52 68 63 6c 4a 55 53 56 4a 42 64 7a 4e 4d 62 44 6c 47 53 6a 46 32 55 6c 42 33 55 30 59 34 61 32 74 4e 52 56 6b 79 52 45 6c 31 4d 33 70 72 4d 31 63 72 63 6a 49 77 55 33 4a 45 55 58 45 30 57 6c 52 68 55 30 6f 34 65 6b 4a 6e 65 57 68 69 54 79 39 72 4e 31 70 42 64 6a 64 34 5a 30 46 58 61 44 68 79 5a 6b 78 6c 4d 47 35 4a 61 30 74 6d 4d 58 5a 72 56 54 42 68 59 55 56 70 54 31 42 35 59 6a 42 4a 62 79 74 4c 56 46 4a 58 4b 32 52 30 64 55 31 58 63 6a 5a 7a 4b 7a 56 74 4e 45 4a 54 59 33 4a 48 59 6c 4a 43 64 58 46 48 52 45 63 72 4d 55 52 57 4c Data Ascii: c3aVBiTEN1YVRnMXNmUUV5ZWo1U0laUGc3a2F0VTM2M2hxMjZOditoR1NERGZ0ZnlyNkc2Q0hlOWRhclJUSVJBdzNMbDlGSjF2UlB3U0Y4a2tNRVkyREl1M3prM1crcjIwU3JEUXE0WlRhU0o4ekJneWhiTy9rN1pBdjd4Z0FXaDhyZkxlMG5Ja0tmMXZrVTBhYUVpT1B5YjBJbytLVFJXK2R0dU1XcjZzKzVtNEJTY3JHYlJCdXFHREcrMURWL
2024-04-19 14:06:55 UTC	737	IN	Data Raw: 54 4a 47 59 6e 52 6d 5a 6b 64 6c 62 30 70 61 61 53 73 72 56 58 70 36 59 6b 64 49 63 56 68 4a 4e 55 35 6f 54 58 68 6e 54 56 56 78 64 6b 78 57 5a 58 4a 6b 51 57 31 43 4d 47 4e 6e 4f 55 77 31 51 56 56 49 4f 54 4a 50 64 6b 56 58 62 30 5a 33 56 57 35 6a 55 57 68 77 55 6b 78 36 4d 6d 74 46 56 48 4e 70 63 54 52 76 4e 57 35 78 63 33 4d 77 4d 44 64 6e 55 7a 5a 4f 4c 32 78 58 4e 6d 31 44 5a 55 5a 6b 62 6c 42 49 65 6c 5a 46 5a 56 42 49 63 55 4e 59 62 30 31 79 64 6e 4e 46 5a 55 4e 47 4e 45 77 77 63 6d 56 33 55 7a 42 46 53 30 31 72 52 47 4d 72 5a 57 51 7a 56 6e 6c 6c 5a 57 35 4f 54 56 52 4d 52 6b 56 6f 59 55 6f 78 5a 6b 35 69 56 30 6c 6e 4e 7a 5a 71 52 6e 4e 51 56 54 64 51 51 6b 46 56 4e 6c 6c 70 51 6a 42 6c 59 6b 34 30 61 32 59 32 4e 48 70 34 63 33 52 46 63 44 56 4e Data Ascii: TJGYnRmZkdlb0paaSsrVXp6YkdIcVhJNU5oTXhnTVVxdkxWZXJkQW1CMGNnOUw1QVVIOTJPdkVXb0Z3VW5jUWhwUkx6MmtFVHNpcTRvNW5xc3MwMDdnUzZOL2xXNm1DZUZkblBIelZFZVBIcUNYb01ydnNFZUNGNEwwcmV3UzBFS01rRGMrZWQzVnllZW5OTVRMRkVoYUoxZk5iV0lnNzZqRnNQVTdQQkFVNllpQjBlYk40a2Y2NHp4c3RFcDVN
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 66 36 34 0d 0a 64 79 39 76 59 6e 49 79 63 30 4e 45 52 31 56 73 57 47 49 79 64 44 52 5a 57 6a 41 31 55 55 49 78 56 32 67 7a 55 58 6c 53 61 33 6c 56 53 54 4e 42 55 6e 46 6e 54 57 38 33 61 7a 6c 73 4e 48 70 45 4e 45 39 77 61 6b 70 53 53 48 45 32 63 48 45 32 56 7a 4e 56 53 57 64 45 56 44 46 6e 64 6d 73 77 65 6a 68 4a 64 7a 52 30 55 45 64 43 5a 6c 68 61 5a 48 46 76 62 6a 42 59 5a 6d 30 35 63 45 63 30 57 56 6c 44 59 6c 4e 49 64 6d 6c 58 52 57 56 70 4f 44 42 32 5a 69 74 45 59 6e 42 30 55 47 4a 53 51 54 56 78 55 30 46 4b 51 32 78 49 61 32 6c 35 4d 32 55 79 62 55 31 32 57 54 5a 57 64 6b 68 30 64 6c 52 36 4c 31 49 31 62 47 4e 70 5a 57 30 79 51 55 64 30 55 55 56 58 51 57 68 45 63 55 6c 57 64 57 51 7a 56 47 63 35 57 58 4e 4e 54 57 56 53 65 6d 64 32 61 6a 42 72 5a 32 Data Ascii: f64dy9vYnIyc0NER1VsWGIydDRZWjA1UUIxV2gzUXlSa3lVSTNBUnFnTW83azlsNHpENE9wakpSSHE2cHE2VzNVSWdEVDFndmswejhJdzR0UEdCZlhaZHFvbjBYZm05cEc0WVlDYlNIdmlXRWVpODB2ZitEYnB0UGJSQTVxU0FKQ2xIa2l5M2UybU12WTZWdkh0dlR6L1I1bGNpZW0yQUd0UUVXQWhEcUlWdWQzVGc5WXNNTWVSemd2ajBrZ2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.6	50078	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	506	OUT	GET /7bvRb0lYxGyYW5HwjUk0qms8SyBa_d1AM1z83WTehoi8Xkjh4tmGIWrUq-rt2MUcv34k=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9990 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:46 GMT Expires: Sat, 20 Apr 2024 11:15:46 GMT Cache-Control: public, max-age=86400, no-transform Age: 10269 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 fe 26 00 00 57 45 42 50 56 50 38 4c f2 26 00 00 2f ff c0 3f 10 09 58 92 e4 d6 6d 6a b1 02 f8 58 dd ff c2 02 21 d2 76 f2 1d d1 ff 09 c0 bf 98 99 94 e9 95 31 17 73 31 87 fd 1c 77 f7 13 90 62 f6 71 80 74 c4 d5 c7 a6 31 1e ee dd b7 e8 99 b5 5b 12 96 2b 52 6d 65 46 31 2f b5 66 99 c6 b6 46 92 ee 1c 63 53 c4 35 e7 74 3e 85 65 85 11 11 00 0e 90 02 00 1f 83 14 f3 37 29 e2 ea 7d 83 d1 17 64 5c 5d c8 b5 e8 80 0a 44 f1 1e 19 70 b3 5c a8 5a cd ec 14 76 e8 98 a1 be e3 e5 ed a7 7e ed c2 6d 24 c9 ae d2 01 a0 b5 e6 8a fc 83 c3 c4 e7 bf e3 1e ca 46 10 49 4a 36 01 43 00 50 03 d8 3f 97 01 1c 86 6d 24 49 4e fa b5 44 58 e4 1f 1b 51 50 58 fd 9f 00 fc d3 f4 27 29 c3 78 e9 e7 8f 98 31 43 e8 32 73 71 01 58 78 3a cc 5c 18 5c b9 cb c2 37 73 0e e1 f2 38 8a 10 76 e3 02 70 Data Ascii: RIFF&WEBPVP8L&/?XmjX!v1s1wbqt1[+RmeF1/fFcS5t>e7)}d\]Dp\Zv~m$FIJ6CP?m$INDXQPX')x1C2sqXx:\\7s8vp
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: db b6 bc 52 ee e7 fd be e4 cf fe e3 99 19 dc dd 1d 4a a7 72 3a 7a 4a 2a ab a8 1c 8e 80 e3 70 ab ac f3 03 70 77 87 2d 91 5f be 47 0a 2c 00 04 e8 bc 6f db b6 6d 24 0d d1 5e b5 bd c6 ee c5 dd 9a 6d 7b c9 b6 d1 6c db a1 6c 2b 71 f3 cc f2 74 42 51 5c 02 a6 5f 70 42 c0 ef fa ff 7e df ff e3 41 fe e3 81 24 43 0c ca af 3a bc e9 dc fd b5 2f 17 1a ef fc bf 67 27 c6 3d 98 23 81 53 41 90 c5 91 9e 3b a0 33 e0 6a fc 70 44 0f 72 74 8e ec b5 de ca 1f 3a 05 80 f5 3a 28 9c 0f 86 f5 33 0a 77 e1 14 2b 7d e2 3e 28 8e 54 76 fd 5f 9c e2 c9 99 72 ab 28 dc 36 5e 57 1c 4b 41 18 9f 0b 97 d2 b9 0f 01 36 45 8e f6 55 13 27 76 1e f1 5d 2d 11 f0 a2 af e0 8a fc bd 60 37 de 1d 59 e3 38 0a c8 19 95 ef 8e a3 f5 66 c8 57 a6 93 2a dd 94 01 aa 2a 20 e9 55 b3 51 8c d9 14 65 ef cd 71 25 80 40 60 Data Ascii: RJr:zJppw-_G,om$^m{ll+qtBQ\_pB~A$C:/g'=#SA;3jpDrt::(3w+}>(Tv_r(6^WKA6EU'v]-`7Y8fW* UQeq%@`
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 8b 95 75 aa 7d 77 3d 29 d7 da 4e 58 47 f1 31 c7 ee 1a 2a 0a b2 9b 41 6b 22 80 63 e2 95 22 05 03 9a 80 b7 fb c4 9c 02 21 5d a6 05 a9 b7 e4 da 8a 12 ca 6c dd 5d 4f b1 d2 ea 54 1b a4 c9 aa 50 99 54 ee 61 1c 33 90 12 d2 74 a5 76 8d b0 34 65 8d 62 1a 26 7a 3a 80 47 69 0f 18 a3 a2 bc d8 6e 08 48 59 4a 4e b0 6a 98 9f 2b 69 9d 0b 42 69 8a 51 ec 52 12 a7 20 87 a0 ed c0 0a fc 90 fa 7d 68 c5 44 45 38 09 7c 24 8f 88 1e 9c cf b1 28 a4 29 d7 16 10 d7 c9 75 59 a1 c6 5c 8b 67 75 95 7a 18 91 06 ad 64 27 02 b6 63 16 96 42 42 43 20 31 19 14 0c 06 17 33 8f a1 f7 1d 46 65 35 d7 56 55 64 f6 79 8b 6c c7 ca 51 cb 35 2e 51 64 93 f0 87 52 0e 72 d9 a7 32 5c d1 6c 2d e9 da 90 9d d2 49 d1 f6 8f 59 18 a0 43 53 08 25 d3 4c 58 7c b7 1f 4c 02 19 63 30 ce 17 9c af 20 42 a3 11 02 b0 0b 35 Data Ascii: u}w=)NXG1*Ak"c"!]l]OTPTa3tv4eb&z:GinHYJNj+iBiQR }hDE8\|$()uY\guzd'cBBC 13Fe5VUdylQ5.QdRr2\l-IYCS%LX\|Lc0 B5
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: b2 68 66 5e ab 59 2b 41 08 35 8c 93 5b cf 62 03 5e 09 31 2d 07 61 5d 67 1d 62 e2 c4 fc 7e 7b 50 13 14 86 b5 cb 2c 1b d3 09 f9 94 78 b9 16 ce 8c 8b 85 74 13 2c d9 b5 4b 11 a9 74 a4 1a 90 ce 62 45 b2 eb d7 b1 95 90 ea 04 1b 8b 40 fc 56 ad a1 b5 11 c2 6b 9e 0a 04 28 23 ee d9 b0 11 7b 86 90 e4 75 b2 11 14 11 b8 97 a3 b1 d3 8d 15 04 43 a1 6d 85 57 ad 6a 12 f3 13 d6 fc 6f 60 1f 6c a4 c4 29 01 c0 53 1c 72 fb ae 15 42 3b 64 35 67 15 92 e6 d8 12 99 d7 83 31 00 75 41 b3 1b 53 0c 43 79 9d ec 20 46 b1 02 ed 2a 72 d1 c5 40 ac 23 e6 52 d6 91 e6 5a a5 19 bc e4 0d 7b 9e 5b 5f c2 1f 34 f4 e8 98 63 77 3d 0d 22 62 55 d9 c6 cd 64 37 5e 02 a4 89 19 9a 94 6a c6 4e e2 42 96 a0 5a 20 5d 21 c7 11 75 82 b3 15 91 84 2e 92 e0 12 92 fa dd c0 9e 3f fd 25 53 13 32 4c 42 0e d9 21 dc 49 Data Ascii: hf^Y+A5[b^1-a]gb~{P,xt,KtbE@Vk(#{uCmWjo`l)SrB;d5g1uASCy F*r@#RZ{[_4cw="bUd7^jNBZ ]!u.?%S2LB!I
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: c6 91 ad 6d 99 09 58 93 ef 6e d4 46 26 be ba ee 3b cd b9 36 9d 5c 5b 81 d4 95 56 a8 48 a1 e2 2a d3 4f 55 a0 95 46 bf 1a d4 ed bb 6b e7 93 f7 12 82 cc 0b 4a 2c 7b 2e 5f 38 6c f8 6f 79 27 0c ec 91 59 83 5c 4f 25 92 17 5b 31 4f ae f5 83 71 67 f1 b3 11 82 5c 0f 92 30 fa df 2c 8e 40 43 ef a8 71 77 8d 90 52 ee 33 89 44 a5 42 82 4f ed 2a fe 19 7a 22 cd 15 29 d5 c6 fb a5 9b 6b 5d 88 aa 90 68 81 50 b4 c6 4a 2e 6e 52 b7 03 0e 92 08 75 e2 ce fe 47 24 68 3b 60 f5 b6 dd b5 c5 12 62 74 48 07 52 0c 03 b1 48 f8 f5 d8 5f da b4 92 b7 83 27 df 0a c1 d1 08 c9 0a 84 66 48 31 30 eb 52 78 57 14 59 42 23 a4 b7 dc a2 b5 be c3 91 66 af 14 d9 11 ba 78 10 2e 9d 72 3b 0e 76 05 72 f5 01 72 e9 fc e0 3f 50 8e 07 95 bc 94 af 4c 50 67 8f a9 10 3f bd fc 0e 50 a9 aa 2f d2 eb 5b 84 70 7a 3a Data Ascii: mXnF&;6\[VHOUFkJ,{._8loy'Y\O%[1Oqg\0,@CqwR3DBOz")k]hPJ.nRuG$h;`btHRH_'fH10RxWYB#fx.r;vrr?PLPg?P/[pz:
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 0f 7a 9d 2d 77 7c ae dd d3 79 b0 34 af 55 a9 b4 32 45 c3 bc 10 4a dd 12 21 a2 0a 7d 7e 2f 2a 0b 66 d1 e0 98 ad 41 29 97 b3 50 83 10 5c 74 26 41 9a 86 e6 fc 6b 8e 7f ca 10 dc 4d e0 80 06 23 ed 1d a8 a1 35 89 f9 20 45 3f 57 ad 44 ae 0c e2 a9 0d 64 60 7f 90 c5 60 14 48 45 d1 2b e7 97 ca 92 f5 a7 26 8f f1 15 a1 9b c8 2d b2 13 63 a5 04 36 08 36 b6 67 3e d3 c2 11 93 c4 15 5d f7 94 21 21 06 c9 91 2d 0a de a4 ff 19 f2 fc 56 4a e7 c7 15 ee bf d2 8e b1 71 21 93 ac 50 04 a0 bc f2 4e f9 c8 0d 79 5b 0d 59 83 53 4a 16 f2 38 d9 3e a4 a3 3b 92 31 db 3f 3f ba 6b 3e 30 99 9a 49 e8 fd fd 52 e3 00 f7 9b a9 5a 1e c5 36 37 c8 f3 f9 8e 6c 44 19 47 df b1 ce 5e 48 78 2a af d8 b5 15 57 30 c8 77 56 f0 43 05 52 b3 c2 2e 15 67 13 32 a3 28 2a a3 2c 14 bc 65 3f 7f 76 dd fa 92 fb f0 a9 Data Ascii: z-w\|y4U2EJ!}~/fA)P\t&AkM#5 E?WDd``HE+&-c66g>]!!-VJq!PNy[YSJ8>;1??k>0IRZ67lDG^HxW0wVCR.g2(*,e?v
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 0b 61 2a 44 ec 6b b6 72 3a 21 d2 74 41 81 0a fd 16 36 27 b6 1b 38 ef 21 3b 75 4e b1 3d 4b d3 40 8e 60 23 43 2a 21 96 00 97 00 f7 57 36 47 81 83 20 10 c8 1a 83 70 e5 97 9e 75 f5 e7 9e 76 b6 58 13 76 93 dd 4a 17 c5 c7 71 56 2f 40 b7 bc f4 e4 cd 1b 91 b7 ac 2a e4 d5 dd ad 90 50 93 15 8e 95 f6 35 7e ea 2c 67 79 3c 94 20 15 6e 0d 2a 50 47 b0 4b 64 c7 9a 5d f9 e9 b9 8e 78 e6 24 53 b1 87 ff df 06 ae fa b1 04 07 0c 24 e0 c0 bd c9 a2 11 41 da ca b4 22 47 71 cf e5 18 ba da 0b 4f 39 45 64 df 92 ec de 2a bf fe 6f bb 64 af 52 16 d5 47 b6 94 61 ba 38 d1 e8 29 4a 48 5b a5 e1 a9 f5 fc dd 59 83 55 7a 81 c1 7e 6e cd 01 85 b6 d8 5d c0 85 ce cc 9c ed f2 99 76 18 63 56 12 8b 60 0b 19 01 9a 22 d9 23 95 87 25 bd 58 44 91 5e a6 a6 9b 9d d8 91 ab bc f4 82 f3 ad e4 4b 96 7d 5f fd Data Ascii: aDkr:!tA6'8!;uN=K@`#C!W6G puvXvJqV/@P5~,gy< nPGKd]x$S$A"GqO9Ed*odRGa8)JH[YUz~n]vcV`"#%XD^K}_
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: d2 8a 5e 2a 3a db c0 5f 38 37 04 3d df 29 c1 a5 e4 f5 1b d0 91 9b 46 34 58 4d 85 b8 56 46 c4 41 56 36 71 f6 fa cb 51 cf 17 10 2d e0 eb ab 85 bf 5e 9d f0 13 f0 77 b5 80 90 eb e7 f1 c9 77 38 f3 e4 f0 fa 9c 38 9e 63 f3 c3 20 3c 6e db 49 f2 78 9c 4a 36 38 38 b6 5f fa fb f8 f2 fd 94 09 dc 9e c6 21 a4 24 5c 08 52 10 43 4a 4b 83 30 63 fb c7 96 e0 c7 78 dc 8e 83 ed e5 b6 6d 0f 5e 7d 14 d9 36 7b 43 e9 29 a5 07 89 2c 94 6d 75 14 b9 7d b4 8d c3 f7 5b 70 d3 a9 8b a3 35 02 1e 08 88 10 f0 6d f5 5f 2d fd ed 84 40 40 d8 f0 1b c6 05 04 ae 3e c0 ce 13 f0 ab f9 55 37 35 0f b6 2d 06 09 0f 52 f8 1b 4e e4 38 b1 8c c9 74 27 43 76 fc 54 57 05 84 f6 a1 30 e1 84 fc fb 9c 67 27 cc 4f 98 4e b8 3f bf 7a 5e dc fd 91 f1 e1 f1 e5 02 82 df 0f df ff e7 8f ce 1e fb db 26 31 35 13 c4 86 44 Data Ascii: ^*:_87=)F4XMVFAV6qQ-^ww88c <nIxJ688_!$\RCJK0cxm^}6{C),mu}[p5m_-@@>U75-RN8t'CvTW0g'ON?z^&15D
2024-04-19 14:06:55 UTC	484	IN	Data Raw: d6 ad d4 db d3 2b 8c be 9a dd 75 01 81 e4 ec ab 2c 24 41 c5 b6 e5 6d ea c2 8b d6 b3 bb 2e e6 af 17 bd 0d 8b b3 37 65 14 5a cf ee ba 92 6b 2d a4 98 a6 ea 26 63 7b 13 42 23 56 b5 bb 76 21 24 e5 12 de cf 4a 6f 53 07 97 e4 81 f9 c3 24 e1 94 99 59 cb b5 51 2b b2 a5 bd 4c 5d c5 ee da 19 b5 9e ee 48 72 c0 90 1e 75 94 c0 09 69 32 83 5b 66 56 8b ec c2 2f ba 20 46 c7 0b cd 40 d1 6a e5 46 28 4a ec 5a 88 3d ea 92 24 c8 06 ab 8b fb 77 53 62 a7 da 91 da 2b 56 97 a6 22 3b 24 d7 aa 87 25 f0 26 f4 33 95 ac 52 14 45 b6 46 34 59 f9 90 e1 ab ec 67 88 ba 09 2d 37 58 d9 df 0e 15 b0 92 12 26 d2 42 50 e0 59 b5 42 e8 c3 44 63 56 ac a6 42 c8 dd 5b de 04 93 fc 58 24 1c 18 25 84 07 41 05 c4 b1 5a 02 52 02 90 c0 37 88 c7 9e 84 f1 da 39 9a 98 4d cb 40 52 57 8d 70 ff 60 52 2d 90 18 0b Data Ascii: +u,$Am.7eZk-&c{B#Vv!$JoS$YQ+L]Hrui2[fV/ F@jF(JZ=$wSb+V";$%&3REF4Yg-7X&BPYBDcVB[X$%AZR79M@RWp`R-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.6	50076	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	505	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8966 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:34 GMT Expires: Sat, 20 Apr 2024 11:12:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 10461 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 fe 22 00 00 57 45 42 50 56 50 38 4c f1 22 00 00 2f ff c0 3f 00 09 48 92 e4 b6 91 a2 1a 20 c6 a0 f7 ff 0f 96 01 d7 5f 23 fa 3f 01 fc 23 7b a2 9f c7 07 1f 7c e8 59 1f b4 47 27 47 59 9f a7 4d 61 48 21 bb f7 38 82 3c 48 ba f0 40 01 ba 11 01 d2 2d 49 77 a2 0f 3d c9 8c 10 b2 81 ee 1e 91 09 11 48 07 d3 31 3a 9e 2c 56 f4 5a cf d4 06 40 32 b0 46 a7 06 ec 97 aa 32 33 9f f9 dc e4 57 51 95 b9 d6 1e 1c 0b a8 aa cc 4d 37 6b c3 c7 00 78 4d ca 13 c7 e4 cf ba 80 23 db 76 23 e5 e0 7f fd 9a 81 8f f7 a0 fd af 8e 90 5c 6a a9 23 48 1d 47 b2 ad 2a 8d 7f e7 20 6b ea e6 1f 13 16 82 b3 a4 dc 48 92 e4 28 89 3e 7d 83 d6 d0 ff 7f 1d 1e 6e ff 27 40 82 ff e3 4f e3 fa 6e ee eb 4e ac b5 07 cc b7 bb 76 b6 36 24 5b 28 76 72 42 b6 98 66 2e e7 06 e7 00 68 bf dd 47 34 b5 41 30 6b Data Ascii: RIFF"WEBPVP8L"/?H _#?#{\|YG'GYMaH!8<H@-Iw=H1:,VZ@2F23WQM7kxM#v#\j#HG* kH(>}n'@OnNv6$[(vrBf.hG4A0k
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 33 33 33 6f b4 66 76 44 31 33 33 43 c4 cc be cc cc 34 2c ee ee 73 8c 67 8e 34 dd 7d cd fe 4d 37 da ec 96 aa dd 06 99 99 3d d5 5b aa b2 cc 8e 5c b5 28 e3 52 b6 91 8c c7 cc ec 29 19 bb ca 21 d3 2d 99 f3 8d cc cc 8c 32 ca 90 31 4f 42 8d b6 ad 43 92 74 ee fb 22 a3 18 15 3d b6 6d db b6 6d db b6 e7 9f 6d db b6 6d db b6 23 57 46 32 e2 7b 74 6c db 56 6d 2b 63 ac bd f7 39 17 77 77 77 0b 89 88 dd 33 c8 28 80 c5 1e 52 03 ea e0 ee ee 96 ba bb c3 f3 f7 fe 95 b3 57 4c 40 03 7c 94 ff 6f ed ff 5b fb ff 66 58 b1 4f dd df 7a 2b 50 2e 50 94 a0 22 a8 10 0c 72 9b 41 3e 9d 41 06 83 dc 66 90 4f 67 90 c1 20 9f 0b 07 42 c3 29 e7 39 be 62 9a a3 b4 87 5c af 2e 7a e5 07 17 dc ff 9e 12 b4 83 19 bb 51 06 99 13 6d 21 83 01 e4 36 83 cc 89 b6 90 c1 00 72 9b 41 e6 44 5b c8 60 0b d9 16 62 Data Ascii: 333ofvD133C4,sg4}M7=[\(R)!-21OBCt"=mmmm#WF2{tlVm+c9www3(RWL@\|o[fXOz+P.P"rA>AfOg B)9b\.zQm!6rAD[`b
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: f6 8e 02 20 8d 77 f9 f6 d1 e5 7f 18 6f c8 1c 8f 8f 4b 53 19 4d 8c 77 6b 6a 3c 9a 9c 52 df cd 70 54 3c 7d 6a 99 b7 df 7d 43 8a d4 d5 4e 23 13 4f c6 91 b7 e5 9b c6 ed bb 9a 19 af 36 e5 29 a9 81 95 2e 30 96 1f 8e a8 dc 44 26 fe 62 59 0c 92 66 ea c7 7c 43 fb 28 11 a1 3a 68 95 6b fb 13 51 8f 42 64 2e f8 a8 34 54 11 44 98 6e 76 67 dc 7f 31 f9 12 2b 87 74 24 b8 86 80 60 cf 37 04 ba d9 ef d1 ec 75 21 23 c1 0d 2f 11 26 c8 84 0d eb fa cd 78 b5 09 46 cc 2e 76 52 a1 87 68 4b ae 7a cb 34 cf 92 d1 6e 6e 81 18 f5 ec fd 16 57 bd a2 5d fd e6 31 9f 1e 0d 97 37 63 b3 f6 bf ae fa 4d df 79 1e 7a 2e f2 72 41 2d b1 e0 96 7d f3 33 71 cc 13 40 51 2c bd ec 8d fa 88 50 d3 30 e9 f3 c7 55 a5 16 e9 d8 4c 31 ab 4d b8 9c 53 cd d8 45 2d 40 cc b8 7c df e3 fa 04 da cb ec 32 5b fe 44 3c 80 Data Ascii: woKSMwkj<RpT<}j}CN#O6).0D&bYf\|C(:hkQBd.4TDnvg1+t$`7u!#/&xF.vRhKz4nnW]17cMyz.rA-}3q@Q,P0UL1MSE-@\|2[D<
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: ad dc 5e 82 da 62 b2 23 8d 30 23 46 85 13 45 02 91 44 92 2c 09 52 8b 37 e2 78 c0 24 e6 fb cf 2e 0c 27 db fa 91 d5 b2 93 b8 1f 4b 70 00 72 90 92 31 a5 03 01 c6 7d 13 04 33 1f 8f 14 a5 f6 bd e9 37 81 a0 a6 d5 79 a0 01 8b 90 86 38 59 24 10 49 20 48 22 a9 d0 3e e1 e1 2d bf ee db 9c ef bd e5 61 9b 4c 71 66 c9 77 33 c9 7a 50 d8 2c 25 f2 cf 08 40 f1 3f 50 f5 3b 04 33 ad 5d de 4d 4d c2 ca 99 2b c1 e0 57 f9 31 95 c8 34 4e d9 48 02 48 40 41 55 13 a5 00 25 12 91 26 98 3c ee ee 9c 82 4b ee f5 e9 74 3f 1f 2e c5 ee 73 aa 9a 33 67 23 b3 b2 2b a9 63 60 8a c7 93 d5 ff 42 30 dd fc 83 1f a8 05 71 da c5 1a 41 97 cb 11 52 9a 8a 38 b9 63 0d 02 91 d0 0a 4a 41 14 cb ab 20 55 8a 4f b0 af c8 e7 0b 65 11 0d c4 a9 a6 35 f3 75 87 6c 16 87 94 3c 0f 66 a0 f8 4e b8 fa 29 49 50 30 15 a7 Data Ascii: ^b#0#FED,R7x$.'Kpr1}37y8Y$I H">-aLqfw3zP,%@?P;3]MM+W14NHH@AU%&<Kt?.s3g#+c`B0qAR8cJA UOe5ul<fN)IP0
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 29 83 d1 89 bc 67 99 72 43 1c d5 f5 e9 0c 47 dd ef d9 f5 b4 74 00 84 55 e6 da b6 e4 aa 6d df cd 16 08 0c 34 60 92 d1 9b 34 d8 20 7c 5b a3 f5 43 7f 30 63 88 64 e9 86 1e 53 0c 0f 7b c7 d6 5e f1 97 7a d7 53 07 64 01 98 41 05 a1 65 02 5c 42 01 79 8d b3 e2 17 be e6 bc 50 df eb 3e b6 1c 5a c5 e3 21 ac 55 89 77 de c1 1e 6f 59 f4 f7 88 5a 85 81 06 0c c9 34 d8 d6 06 0d f4 5e 42 f8 e5 96 a5 59 32 50 81 fb 6d a3 05 0e 9c 71 aa fd 65 e5 33 eb 63 20 d7 8e 99 a7 e9 48 46 19 a3 82 58 b2 2e f2 17 bc b9 ff c4 6b df fc fc e7 9c 47 e0 3f af fe 50 3f f7 2e ed 61 fc 84 10 ee 9a 03 e3 e9 53 8d 33 96 91 dd 38 fa 04 32 61 92 a9 21 d3 30 30 f4 1a 86 32 65 ea da 1f 8d 31 b1 a6 be eb ea 73 ec bf e0 74 07 db 2c c5 48 83 47 28 ca 05 c1 80 56 44 e4 0c 23 c7 18 05 ab 86 65 03 c8 05 2f Data Ascii: )grCGtUm4`4 \|[C0cdS{^zSdAe\ByP>Z!UwoYZ4^BY2Pmqe3c HFX.kG?P?.aS382a!002e1st,HG(VD#e/
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 8d 99 d9 b5 02 3a 60 84 58 2b 52 0e 98 b2 34 22 12 2a a4 64 86 8d 2b ac ac 40 bc d5 da e8 51 a5 9a 87 4c a6 72 1a 45 8f 99 b1 df 88 0a 21 2c 3b 0a 87 95 7e ff 2c 4f ff e1 3c c8 aa 20 90 8c 31 90 84 cf 98 a6 6e cb e9 88 32 9a ac f4 5b f8 35 98 76 65 0c b2 60 02 19 e8 20 20 c8 21 c8 a2 07 44 a5 1d 4c a2 cb 85 9d 4a 19 36 a5 31 de 72 05 b6 6d 7d 94 c9 8e cd f3 ad 7f 6b 86 be e7 98 41 87 8c 89 3c ee ab bb d2 2e 08 5e 71 ed df f7 9d ff 8b ac 63 ee 22 0f 45 8a b9 aa 71 66 0e 9a 92 fd 91 a6 90 e9 b5 68 ce 02 87 66 ab 89 cd 54 79 d2 10 d1 00 9d 8d 74 59 d3 13 1b c9 44 ea 04 38 ac a1 64 28 fe 9e 4c ec 87 54 de 72 e6 3e 14 a9 ab 22 61 c8 b3 06 77 b6 ff 98 75 66 7a 79 59 d7 3e 71 66 33 0a 70 d1 5f db 1d 9b 52 f4 0a ce a4 3b 1b fd 49 a8 8e d1 ff b5 e1 ff 5b 90 fa 82 Data Ascii: :`X+R4"*d+@QLrE!,;~,O< 1n2[5ve` !DLJ61rm}kA<.^qc"EqfhfTytYD8d(LTr>"awufzyY>qf3p_R;I[
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 39 20 3b be f2 ff a0 65 f6 0c b7 2f f1 86 ce 8b 43 ac aa c2 75 55 63 ef 0d 9b f3 d3 31 35 f2 c1 5d 13 fc 31 5c 83 ae 87 61 10 e7 fb 15 dd e4 cf e2 5d bd 83 33 f0 63 ef 10 d0 1f 76 40 64 88 4c 64 0f 94 89 28 8e 21 56 8c c7 66 13 4b dc 6e 71 ff 7c da 5d 0b 89 68 71 e4 99 c8 91 6c f0 c7 fd 93 c1 65 30 87 b4 b9 66 c8 62 5e a4 b4 2f 2d 53 99 10 89 1d 99 c6 80 8c 88 1b f8 1b 5e c7 8f fe fc 9e 0e 18 21 09 49 81 36 a0 b5 88 35 89 43 92 0a 8b ef ce 37 2c 33 3d cb 6d a6 6a 5b 0c 12 10 24 20 52 2f af ac 80 6f bd 5c 67 a5 0f 5e eb d8 b1 7b e7 28 61 65 50 0c 80 cb 01 01 0e 5d ce 39 77 c0 88 3d 03 5f f2 2a 1e 69 bd 26 70 0b 56 c9 81 80 11 05 49 d9 81 02 e2 3f 68 89 71 8b 5b 95 f9 1c b0 13 44 0f 18 ed b9 1f ca a3 a7 63 f9 2a 1b fd c9 70 28 55 a7 72 37 a3 8d d3 58 05 95 Data Ascii: 9 ;e/CuUc15]1\a]3cv@dLd(!VfKnq\|]hqle0fb^/-S^!I65C7,3=mj[$ R/o\g^{(aeP]9w=_i&pVI?hq[Dcp(Ur7X
2024-04-19 14:06:55 UTC	715	IN	Data Raw: 1b 7c 3c 5a 66 51 e7 52 cb e0 ab cd 96 90 c1 e5 2c 16 e0 08 0c b4 3b 22 11 b8 9c c5 02 1c 81 81 76 47 24 02 97 b3 58 80 23 30 d0 ee 88 44 e0 72 16 47 e0 08 e8 93 3f 63 64 ec 11 64 b1 19 9e 3d 4e cb ab 65 ea cd 19 70 55 f0 53 f2 60 d5 08 c8 c5 4e 3d 20 bc c5 18 01 c7 d4 03 72 b1 53 0f 08 6f 31 46 c0 31 f5 80 5c ec d4 03 c2 5b 8c 11 70 4c 3d 20 57 67 5d 0f 74 5b 8d dd 1f 9d 89 01 5e b4 72 1e bf 70 82 54 3b 4b 8a 25 64 22 30 f5 e7 fe 67 6e b7 4d fe 6f 26 05 30 c6 c7 63 34 42 0f 08 03 22 1d 81 a6 71 4c 01 94 a8 0b 46 47 0f 08 03 22 1d 81 3d c7 14 40 89 4b 8c 8e 1e 10 06 44 3a 02 7b 8e 29 80 12 97 18 1d 3d 20 6c 62 7b 97 65 ff 34 f5 ec fe 31 5b c5 e8 f7 ae 44 c3 5b 47 27 98 3a 41 e2 7b 93 8f ff 75 8d 9f 2e 2b e9 1d 88 ad b3 b8 61 47 bb 70 ce 53 38 ed c2 39 4f Data Ascii: \|<ZfQR,;"vG$X#0DrG?cdd=NepUS`N= rSo1F1\[pL= Wg]t[^rpT;K%d"0gnMo&0c4B"qLFG"=@KD:{)= lb{e41[D[G':A{u.+aGpS89O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.6	50082	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	1032	OUT	GET /_/PlayStoreUi/data/batchexecute?rpcids=qnKhOb&source-path=%2Fstore%2Fapps%2Fdev&f.sid=1808081091980566436&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58011&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535612.0.0.0
2024-04-19 14:06:55 UTC	1119	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:55 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:55 UTC	118	IN	Data Raw: 37 30 0d 0a 29 5d 7d 27 0a 0a 31 30 33 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 2c 5b 22 64 69 22 2c 32 32 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 31 2c 22 34 36 30 34 35 36 31 36 32 30 34 35 36 38 32 39 30 31 22 2c 31 30 34 5d 5d 0a 0d 0a Data Ascii: 70)]}'103[["er",null,null,null,null,400,null,null,null,3],["di",22],["af.httprm",21,"460456162045682901",104]]
2024-04-19 14:06:55 UTC	33	IN	Data Raw: 31 62 0d 0a 32 35 0a 5b 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 39 5d 5d 0a 0d 0a Data Ascii: 1b25[["e",4,null,null,139]]
2024-04-19 14:06:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.6	50081	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	510	OUT	GET /clIKJHyh6tT6e5ls3XZlTmGCe7EcQqj1QeBU9_gvfWd6b5q-KENuGJGConS9xFKm9tw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 40644 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4105 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 bc 9e 00 00 57 45 42 50 56 50 38 4c af 9e 00 00 2f 0d c2 49 00 4d 48 92 24 49 6c 1b 74 cd 8a 02 58 eb ff 3f 18 8b 01 a0 93 8f 11 fd 9f 80 fc 5f 85 1b bf 9f 8b 0f 57 47 65 24 39 64 41 22 a3 aa f1 a9 ea 25 aa c9 67 df af ac 20 e8 cc a8 0c aa 04 ad 8c 15 07 77 46 a9 71 e7 0a 02 27 e5 bc 9a c6 0b a8 ec fb de 48 55 cd af 3f 8d 31 52 23 2a a3 48 39 ca 33 2d 64 4a 5d 69 05 68 bc 0f 7c 52 b9 ff d7 66 2e f7 c6 e8 8d 24 c7 4b 6c 5b 40 8a 15 16 ad 81 20 c2 73 e6 6c 12 57 49 b4 13 2f 5f bb ad 9d d7 f9 1a 1f 00 1a 5a fb 6f d5 ac aa 54 8d 9f 07 80 dd 01 fb 0e 3b b0 03 9f ba a1 6c 36 9f 30 8f da 39 9b 37 81 24 2c 3b 70 e7 5d 00 41 93 06 a3 5a 9c 07 60 21 13 1e 52 85 d4 4a 6d 79 bb 9e 48 0a 43 22 99 4c 55 5a dd aa 32 75 ef f7 f4 e4 ec 8c 1a 61 91 5a e6 b8 c1 Data Ascii: RIFFWEBPVP8L/IMH$IltX?_WGe$9dA"%g wFq'HU?1R#*H93-dJ]ih\|Rf.$Kl[@ slWI/_ZoT;l6097$,;p]AZ`!RJmyHC"LUZ2uaZ
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: d5 75 d1 75 dd 75 dd 59 51 0e ba e1 e7 e2 e0 05 3f ca 45 37 dd 4e ee ca 8d 90 c4 84 71 52 98 fd 3a 19 c2 18 21 12 67 42 c8 c5 b7 cf 0b 7a 87 14 42 50 6e 4e ec ed b5 bd be 82 10 e8 50 48 48 42 f4 e8 01 3d 40 02 50 4b 4c 5c 5f 92 06 67 9b 99 c4 98 c4 cc ae 10 8b 00 c9 18 75 91 24 c9 65 d4 7f 2a 54 53 c1 24 ce 2e a3 cb 28 bd b1 d7 2b d0 5a 66 bb 95 34 0a 82 c0 98 20 d8 30 c1 86 09 36 82 60 85 58 23 09 31 ba be 24 89 1f 9f bf bf 8c e7 5f ca db 05 62 c6 e6 cc b3 c9 09 63 32 4b 4c 61 72 22 31 85 31 e7 04 c5 97 61 fb ce f6 17 6f 57 48 d2 a8 30 a6 82 49 12 93 04 99 54 a8 60 cc 02 21 c4 17 f1 19 b3 ad 10 62 34 19 18 00 48 00 4e 49 82 02 2d 9d da cc 91 67 9b 91 d9 21 b3 01 7b 93 5e 9d 91 81 81 7e fc 6c 3f ef 5a 20 43 c6 44 66 49 62 2a 24 26 31 26 31 c6 98 24 93 c4 Data Ascii: uuuYQ?E7NqR:!gBzBPnNPHHB=@PKL\_gu$eTS$.(+Zf4 06`X#1$_bc2KLar"11aoWH0IT`!b4HNI-g!{^~l?Z CDfIb$&1&1$
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: df 7b 86 f7 19 31 6a dc 5d 36 72 25 38 cc 78 0a 77 87 20 67 88 bb 5b cf d0 ae b5 e8 11 8b c2 29 5c c7 76 fe b8 4d ef ea b5 98 c3 2c b8 3b d4 61 c4 6a 9c c6 0b a7 17 33 4b ce 5a 4f 16 77 84 bb bb 5e db 93 87 e9 9d 15 ee 0e dd b0 82 cb 08 46 ee 2e 67 e3 ee b0 af bb 8c b0 30 7c 18 5a 72 65 08 23 77 9d b1 1e 39 41 86 6e 67 74 fd de 19 35 c9 f4 fa bd 14 b0 ff 5f a4 44 df 89 4d d8 a5 a4 c3 c2 96 12 15 b0 10 bb eb ec 53 6c 0f bb bb 51 da 0e 04 e3 ec 6e cf 53 54 b0 29 01 95 96 92 6e 58 76 17 36 67 67 46 1b ad 6d c7 36 49 d2 71 9e d7 fd e0 7d bf 40 66 44 66 21 33 c7 b6 dd 4e c5 d7 b6 f5 6b 6c db fa 6d ab 6d 23 22 33 c7 b6 ed 72 2a 2a 26 f0 bd ef 83 fb ba 62 02 bc 64 db b6 49 92 b6 6d 91 b7 7f cb f7 15 a0 fa fa 01 51 bd 04 dc 4c ee f0 c4 a7 85 43 57 78 18 98 f4 c0 Data Ascii: {1j]6r%8xw g[)\vM,;aj3KZOw^F.g0\|Zre#w9Angt5_DMSlQnST)nXv6ggFm6Iq}@fDf!3Nklmm#"3r**&bdImQLCWx
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 4f 8f 74 4b d2 d5 10 a0 8f 41 4b 17 3c 4a ee c8 0e a9 47 3a 25 77 24 2e 4e 87 2c 49 b7 74 5f e8 0e a7 19 5c 57 43 33 38 26 fe 9c 93 91 61 b4 49 5a 80 06 e8 10 31 86 fd 47 1e 3b de 2e 38 1c 6c f4 d4 59 d9 72 42 a8 f6 f9 fb cb 3f bc bf e2 d3 fb ce f3 1f 69 c7 1c 01 2a 85 d5 5d 7c 68 6c c5 cf f9 f6 8e 01 fc 71 79 a1 ea d9 8e fa 00 cb 7c de a8 b4 3a 13 61 64 81 91 91 d5 b3 b2 48 64 e8 4a 54 13 ea b4 6a 22 70 25 88 9e 95 3d 91 05 f8 4a cb c8 c2 77 3e 49 df 2d 97 26 75 a2 19 a7 b4 24 51 4b cd b8 ae 71 4a 4b 9f 2e 24 1a a9 25 68 a4 46 6a 49 c7 c8 0e 49 97 e6 05 79 c1 ae 78 33 d8 fe f1 e9 18 78 53 b4 51 70 08 6c e9 4d ee 91 d8 b8 89 21 45 a8 22 b4 92 81 b1 70 61 73 d4 98 25 46 7a 4c a0 ca dc 03 36 3c 63 39 14 2c 17 05 55 9d 9f b5 82 ab c6 df 95 6b f0 2e 05 71 45 Data Ascii: OtKAK<JG:%w$.N,It_\WC38&aIZ1G;.8lYrB?i*]\|hlqy\|:adHdJTj"p%=Jw>I-&u$QKqJK.$%hFjIIyx3xSQplM!E"pas%FzL6<c9,Uk.qE
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 6f e0 16 00 da 37 60 90 1a 00 6e 4d d3 03 3a 3a 14 3b bd 5e ad 25 a6 e6 68 63 41 ea f5 49 5a 22 db 48 c6 8d 41 af 1f ef d7 91 56 0d 5d 36 60 20 d3 e4 2c c0 fd 69 7a e8 b5 4a d4 69 b7 24 11 d9 c9 f1 a8 94 52 ab 47 2c b7 1b c6 fe b5 ee 3f e3 15 c3 ac dc 03 cf 80 db 40 e9 01 64 dd c2 67 61 9a 46 89 41 0b 61 2d b5 ca 25 e7 72 1e 8e 1b bc 34 ba d6 da 9c ef 5b 3f 3f de 70 67 91 30 7c 4f 05 07 b4 9a 3c 83 4b 69 06 e7 03 3d f8 bf 7e cf 08 8a 68 66 1b a7 2c 77 cf 40 3e cf d1 cd 43 5a d5 34 fd ee d9 27 b7 03 d5 67 8d 0b 01 7e bf 4b 18 27 f7 75 2c a5 64 fe 64 e3 a8 74 ba 3e a2 e2 87 b9 05 da 5c cb fc a7 7c d1 f6 b6 06 18 42 d5 0c 2d b6 19 93 ee 09 fb 53 43 ce 55 76 2c 72 04 50 cd 03 14 1d 19 b6 9d 6c 62 25 29 c3 d6 69 c3 8a f7 6c dd 17 1e d0 aa 40 3e 34 a9 ee a9 dd Data Ascii: o7`nM::;^%hcAIZ"HAV]6` ,izJi$RG,?@dgaFAa-%r4[??pg0\|O<Ki=~hf,w@>CZ4'g~K'u,ddt>\\|B-SCUv,rPlb%)il@>4
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: be f6 76 0a 22 99 80 fe af a0 51 06 7a 7e 5a 16 12 f1 42 7d 11 b0 9e bc 91 67 26 f4 e2 bb 3a e7 a7 1d 8b 3b 79 5f 87 72 a5 36 41 46 60 e9 02 10 dd 4e 6a ec 68 90 80 29 c0 c4 52 32 90 22 4a 4d e5 ca a4 d0 51 0d 4d 88 93 da 3a 0b 27 e0 c6 07 4b fb 28 d9 a2 00 40 67 81 f2 ba 15 57 5c 48 a0 e4 88 b0 ed 91 5a 68 9d bd 28 39 72 04 ce 3c 78 9a f3 21 ff 7a 0c 50 9a 92 b4 3d 32 77 fe 5f 40 b5 19 95 49 2a 9b 1c 55 6d 89 09 e0 eb 34 62 8c 0d 31 42 d8 ad 17 a4 ab 4a 21 51 5d 6c d1 ee ee 61 cc d8 cb f3 c4 cb c7 08 00 fa 73 f6 2e 40 a9 e1 d3 74 c4 cb 45 e7 81 81 3f d5 ab 3e fb b5 a6 be ab 5a 6f 8b 9b d8 73 40 ea c0 9b 00 a6 19 80 d4 48 4a ec 08 89 4e c0 7c 58 db 50 3d 8c 67 40 a4 e5 ac f9 65 8f 82 e2 3b af d9 3c 7c ee 40 d5 dd a9 87 10 d4 3d 64 20 a8 2a 6f 0c 53 37 c9 Data Ascii: v"Qz~ZB}g&:;y_r6AF`Njh)R2"JMQM:'K(@gW\HZh(9r<x!zP=2w_@IUm4b1BJ!Q]las.@tE?>Zos@HJN\|XP=g@e;<\|@=d oS7
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: fc cb 12 28 16 18 69 d3 94 98 a3 8e 1a d6 c3 1b 12 15 27 4c 55 8e a0 57 74 cf 1d fb d8 2c 2c a9 80 44 19 ab 78 42 04 e7 9b a7 2c a0 f8 5c b7 de c4 4c 95 e2 a9 00 bb f9 00 8c c6 50 4a 8e 79 7c b2 62 af 0f 49 58 d3 51 43 e5 db b9 45 d1 89 78 66 25 f9 ec 6c 18 cd 4c a3 85 f6 b1 b7 65 f3 50 ec 96 e2 7d e5 3b 3f 55 80 41 95 37 50 3d dc 66 66 b4 d8 a4 3b 00 7c 89 4d 0b 7a bf 2f ba 36 24 c6 52 62 50 61 cf c7 eb 2d e1 a4 e0 35 f8 3b a6 60 fd f4 71 99 cb 6a b1 2a d9 90 6a 5a 73 9f dc f4 69 f4 fc d8 bd 3f 61 22 f5 4e 65 93 8e 54 21 b9 7c 88 f8 e2 4b b0 80 d9 c8 1a 38 93 3b 07 00 de 99 ca 54 65 ba 4f 12 ff 2c f0 b0 2d 23 1f 02 00 2e b4 5f eb ab c0 15 e7 cf 23 9e 88 0d 14 fc 47 fb 57 bf a2 c2 7c 60 52 ac 92 bb 3d fb 4f 00 4e 9d bb 59 a2 94 3c cf e9 73 77 39 27 d4 9c Data Ascii: (i'LUWt,,DxB,\LPJy\|bIXQCExf%lLeP};?UA7P=ff;\|Mz/6$RbPa-5;`qj*jZsi?a"NeT!\|K8;TeO,-#._#GW\|`R=ONY<sw9'
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 63 a5 07 80 d9 57 6e a2 cf 97 0d c0 f7 ea 95 b9 0f 2b e8 62 1e 36 e5 7c 9e 51 c8 7b 00 d8 e6 ca 35 1f 03 54 d7 9a da 00 e0 01 ad 3a 56 6b 84 3e 0f e5 91 6a 2e 32 fd a5 2f 92 dd 25 ca 14 8e db b3 9a 65 cf dd de ad e1 ad b5 f1 97 56 fb a2 d2 f0 ac 13 3c 77 a1 06 00 91 cd e5 f5 63 0f ac 4e b5 a9 d0 79 fa 46 7e 8f c6 10 09 32 b5 10 3f 33 1d 2e 5e 2e 05 f6 5d 03 50 60 4d 77 11 ad 99 8f b8 08 4f 61 6d 2b 57 98 4e a2 46 11 b7 42 da 18 2c 97 4f a7 79 a4 60 90 48 67 49 c7 c5 0b c4 02 89 03 23 89 40 83 69 7f cf 1f 5e 28 6d ff 64 9c 5c 55 c8 1f cf 74 3e 84 56 6b da 17 5a 68 ec 7e f6 68 7f e2 b5 56 f1 b3 61 ec 49 b5 dd 68 a4 a0 90 46 43 aa 36 73 b3 64 7a bc cb 36 47 46 53 28 0c 5e 26 86 61 c5 bb 4e 85 7f 6a fa dd 69 e4 da 0c e8 fc 5f c9 fb 97 a0 f2 e0 9c 6d d8 55 65 Data Ascii: cWn+b6\|Q{5T:Vk>j.2/%eV<wcNyF~2?3.^.]P`MwOam+WNFB,Oy`HgI#@i^(md\Ut>VkZh~hVaIhFC6sdz6GFS(^&aNji_mUe
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 2e 44 ac 9b 4a be a1 db 1b 9f b0 56 67 cc 68 66 bd b0 f6 ae 23 bc e3 f4 89 2e bb b3 e6 8e 35 cc 10 c7 0d bf 9d 11 89 dc 23 67 ec 97 b1 2f 31 66 dc a3 db eb 33 a5 e0 59 b1 00 0c 52 68 e0 39 9c 91 27 cf a8 0f ac f1 5d 4f 57 92 5c 5e 40 f0 2e f0 61 6b 4b 12 fd bc 8f 2a 2a 52 98 2f a8 a2 c2 b4 9f 87 11 8a 62 fd 63 2a 19 c1 c9 85 3c aa a8 d8 c6 82 a7 8a 18 fb 79 9f 31 45 d2 38 ed 2c 60 b5 f0 ca 2c 07 63 0a 31 48 16 3e 7d ed 71 99 70 b7 fd d5 87 28 5d 15 e8 ff bc bf e0 5f 8d 28 7f 6e 89 01 83 95 c5 7b 9d fa 3e 5d c4 fa 23 e1 5f 6e 7d 15 c2 05 a7 58 ee a4 dc 99 0d 62 b6 7d 0c 7e b9 58 89 05 af dd cf b7 67 0c e0 93 41 53 f7 b2 3b 5d aa b0 54 b2 11 c7 2b 8c 2d 1a c0 64 69 01 7c ba bf 6b 31 54 5b d3 10 ef 88 4a 85 d2 3a 2b a5 00 68 70 90 2d 7e d7 7f f4 e0 aa 66 21 Data Ascii: .DJVghf#.5#g/1f3YRh9']OW\^@.akK*R/bc<y1E8,`,c1H>}qp(]_(n{>]#_n}Xb}~XgAS;]T+-di\|k1T[J:+hp-~f!
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: d3 5b 2f 2e 81 bc 9f 0c 77 0e 01 66 de 2d 4d ed 40 2a 83 a9 a4 e5 d7 e9 e8 64 a4 91 63 81 92 6d ba 6c 51 dd ba b0 84 ed 57 e6 54 ad f2 98 e6 3e 00 b4 21 f1 46 f5 83 8e 86 27 1e ab 65 69 4a 57 32 b5 9c d0 7f e9 f5 50 5d 54 4b d2 b5 4d d5 0f 2e 69 42 c2 a3 84 25 92 05 90 1b 1c e3 f9 ef fe db 07 3d d7 a4 c5 03 3f 54 20 db 7d d3 f4 4e 5e f4 3b 1f 2e 3c 3c dc a7 2c e1 48 14 5b 62 0f 7f 17 5f 68 8a b6 66 c4 20 ee 54 7a 44 3d a0 58 a2 55 de de 71 50 ea ef ea 96 88 c7 20 39 7b 40 21 dc 25 56 41 35 ea ff 39 9d 4d 4e 59 8e 8f af be 9c 50 16 2e 96 6b 49 12 17 b5 01 d2 c0 b6 50 d2 10 af 60 12 49 87 a0 4d 6d c0 94 01 89 5c cb ba ae c2 90 48 92 e8 a4 64 cb ae 8b 2a f9 b9 85 5d a6 cc 1d a9 c8 eb d9 f2 a5 98 28 e0 39 9a d7 c4 93 f4 3c 82 67 b8 d8 3d 09 97 e3 ea 4a 1d d5 Data Ascii: [/.wf-M@dcmlQWT>!F'eiJW2P]TKM.iB%=?T }N^;.<<,H[b_hf TzD=XUqP 9{@!%VA59MNYP.kIP`IMm\Hd](9<g=J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.6	50077	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	506	OUT	GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13528 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4105 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 d0 34 00 00 57 45 42 50 56 50 38 4c c3 34 00 00 2f ff c0 3f 00 09 46 6e db 46 82 e3 b4 45 e1 f4 ff 0f de e0 39 cd 35 a2 ff 13 80 3f 1a 9f 21 2d e3 22 b2 40 43 e8 42 92 08 83 70 9d 24 89 f4 a9 aa 70 cc b7 b8 55 d5 38 21 9e f4 b4 c6 18 dd a6 2d 47 ef 1d d0 4b 3c 48 fa 6c ad be 03 e5 10 f9 20 da ba e3 5e 64 8c 4b 19 b4 47 3f c2 91 9c ad b5 4b 2f 03 c8 39 67 bf 92 86 20 1f 68 49 14 85 23 3d 3f 75 01 47 b2 6d 55 55 17 72 0a f8 ee ee 32 ff c1 69 a4 f7 dc c3 cd 48 1d 47 b2 ad 2a fd ff c7 dd 1d a2 60 49 fe 71 b8 bb eb c2 8d 24 49 8e 2a 2a 99 3d 2d 17 4f c3 9a 04 96 86 fe 4f 80 52 c1 66 49 01 b0 9b aa 47 4d 68 40 c1 fe b7 8b 84 49 ca 24 65 c8 cc 8c 7c 57 35 11 c0 c4 4e ca 80 20 00 94 40 a9 00 8b 5e 00 98 10 0c 58 b0 00 b9 56 02 c8 08 55 b8 ad 75 cc 36 Data Ascii: RIFF4WEBPVP8L4/?FnFE95?!-"@CBp$pU8!-GK<Hl ^dKG?K/9g hI#=?uGmUUr2iHG`Iq$I*=-OORfIGMh@I$e\|W5N @^XVUu6
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: de 5f cd ad 0e db b6 6d 7b 04 a7 1d 33 43 66 cc 36 43 b6 6d 5b dd b6 dd 6b af ad fe f5 ff bf ef 89 09 e0 9a ed bf 6c db b6 9b 31 a7 6a 21 89 d5 12 96 5c 04 e6 70 1c 97 53 a8 50 5d d7 f5 1e 60 ad a3 18 be 4c 1c 87 73 d8 b4 c1 3f ee d4 f0 9f 92 69 a7 c2 03 76 fa c7 33 85 95 92 e9 a0 9d 2e ba 68 a3 8a e1 64 b2 62 38 74 d2 49 37 35 fd c7 25 7a a1 17 ed b4 c3 e3 18 7a 4a 87 4e b8 f1 a5 0b fe a8 73 38 29 38 14 a5 d0 a8 2f 35 6c d4 e1 38 08 a7 d1 a8 eb 82 de a8 9c c0 48 61 53 f7 18 e4 d6 b6 ed 5a cd 5a 07 0f a1 4d 7d 17 d4 45 15 54 01 35 10 51 02 55 90 ca 46 5e 7a 77 41 8e 24 49 92 12 91 0b 7f 44 40 7f 71 78 23 c5 7d ed 74 c4 04 18 80 95 fe 5f e9 ff 95 fe 7f 8b aa 63 03 34 f5 a2 17 c4 eb 98 21 4e e2 12 17 b9 d4 05 2f a4 54 41 98 93 cf 48 1a 2c a1 58 86 db 84 0e Data Ascii: _m{3Cf6Cm[kl1j!\pSP]`Ls?iv3.hdb8tI75%zzJNs8)8/5l8HaSZZM}ET5QUF^zwA$ID@qx#}t_c4!N/TAH,X
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 6b 9d 82 8e 60 8b 56 92 20 d9 eb 0e d4 7d 61 fc 50 41 8e 9f 98 22 0b 96 35 57 df 9f 52 9b 66 48 80 48 64 4a 36 0e f7 3c c4 7b b7 da 07 38 42 04 e3 75 7f d6 4f fd b2 4e bd da 40 c0 1d b7 ab e9 5f 6e b0 d9 82 95 99 f7 43 de f5 b4 14 9d 51 9e 9d 67 6c 40 6c 63 c3 0e ab db 20 ef a9 62 da 80 60 af 7b 71 cd 3d bf 1e e6 2b 24 1f cd 99 a4 ee e6 62 57 4d d7 d2 a7 f9 b0 40 21 46 17 df cc df 43 6e 07 b9 5d 8f e3 ae 7d 4c 4d 7a 92 85 79 cd 35 7b ad 11 b5 4a de cb 68 1b 6c 10 09 ef 67 c9 b1 19 7d 8e 8c 2c da c6 06 c4 3e b2 be bb b9 65 51 11 c4 7b 9d 28 99 12 e8 78 27 44 2e 80 83 0f 15 09 51 39 b5 57 e6 5e ee 6e 97 bb 46 25 58 b6 6e 84 19 1f 63 5d 0e b8 cd 8d 60 b4 10 cf 26 03 7a f8 f8 86 c5 44 71 cc c1 d2 d7 24 8c 2c b8 75 16 f3 9b b3 66 94 84 48 54 2c f3 f9 d4 44 55 Data Ascii: k`V }aPA"5WRfHHdJ6<{8BuON@_nCQgl@lc b`{q=+$bWM@!FCn]}LMzy5{Jhlg},>eQ{(x'D.Q9W^nF%Xnc]`&zDq$,ufHT,DU
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 63 1f d0 b0 c8 b5 cf 69 03 58 a7 35 59 05 8d fb ae b1 07 d0 8a a1 31 83 29 df fe bd fa 37 a4 1e d4 45 98 6d 6b 21 f7 b2 67 f2 71 07 77 bc c6 eb db bd b8 6e 17 c8 18 0b 2d e9 99 7b c3 4a 4c 7d 2a 55 91 54 4b 0c 8e 1b 76 19 cd 62 1b 17 79 0f 99 8a 11 6d ba ef 21 1a a5 d5 ab 19 01 ad c4 2d 92 68 18 58 6d 7b 40 ae b2 b7 7f f2 ef 79 19 27 ea 62 bb ac be 6c ef fb 74 c3 5a 26 88 30 08 88 a8 b1 d4 fa 9c a0 b5 c4 29 3e ac 4a d7 ef 5b 07 25 31 e9 7c 55 77 7a 9d bd aa d7 c2 04 2b 4d 25 57 d4 28 63 7b 68 27 f6 73 66 55 5a 35 9a 8a 5d d0 1a 01 f6 b9 ac e4 a3 ef 0e 20 6d 76 de a1 31 ef 18 a2 55 5a 63 98 88 65 fb 9d 92 92 91 7c 2d 7a 45 19 fb d2 5e d7 6a 48 f3 70 cf 71 cf 59 bb d7 fb fe 7a af f7 5a c3 ef 11 ff f1 77 8a f7 fe c9 a3 17 90 55 38 ec 4d 22 f4 6a 48 94 26 2f Data Ascii: ciX5Y1)7Emk!gqwn-{JL}*UTKvbym!-hXm{@y'bltZ&0)>J[%1\|Uwz+M%W(c{h'sfUZ5] mv1UZce\|-zE^jHpqYzZwU8M"jH&/
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 19 f5 63 a9 73 bd 76 df 71 56 92 c5 f1 5f 6c 88 12 ff a9 5e 31 2e d6 59 f7 a2 b1 47 69 22 4a e3 16 40 2b 6b 32 6e 71 29 a1 bb a5 49 77 4c 36 0a 39 1a 06 a6 73 75 ac 2a 34 f1 4a 7f 94 f5 a3 57 c3 f4 e7 9c d2 22 f4 7f 2c 7f af 7c 29 cb cb fd 78 6a 2f 65 f1 25 7d 59 f8 ed cb 13 96 4f 4b f1 dd fd 27 f7 d2 ed fb 59 48 ab 96 4e be 21 1c 89 f9 f0 74 33 3b 59 1c 76 c5 b2 f0 dc 3c cd 51 80 21 be 2a 5b 50 d4 4a ec a8 55 9b 85 e6 ba 37 95 30 da 28 39 2c 87 c1 fc b9 ac 29 56 90 a9 74 aa 2a 68 c5 87 fd cb bd 74 1d 4c df ab ee d7 c6 35 ce 97 85 cb 1a cb f2 25 fd 4b 59 96 85 4f d7 58 7c 29 ee 3f 7d 3a 22 3f cd 9f 96 db ab b3 00 78 69 3e 8b 71 c6 d9 2a 71 4c a0 1e 92 43 eb 70 bb e0 9d 6d a1 16 a6 20 ef 22 32 a6 27 83 59 a8 58 dc 08 0c f1 d8 42 fb 30 8a 34 b3 4e 3c 0a ad Data Ascii: csvqV_l^1.YGi"J@+k2nq)IwL69su4JW",\|)xj/e%}YOK'YHN!t3;Yv<Q![PJU70(9,)VthtL5%KYOX\|)?}:"?xi>qqLCpm "2'YXB04N<
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 40 46 ed 9e c3 d0 0c 83 1b 31 f3 d9 30 18 79 6f a6 42 2b df e6 8c fd 6c 18 65 4c 33 16 02 93 e9 35 79 f0 c3 1f c6 1f 76 01 4c 9f 95 d3 09 a4 4a 89 5c 80 4a 85 48 fa 10 7d 34 c9 63 0f 6f c0 89 8f 5e ca a7 02 5e 8a e7 69 9e 77 6d c3 f0 8b c7 57 c9 08 6e f4 2e d1 cd f3 1c 99 39 a9 f4 6b 8c 20 c8 98 07 62 16 eb b4 b2 dd 7f 53 d0 3c 78 0f 41 33 8a c6 7b ec f1 b9 80 a9 dd 99 be 4a 58 bc 0f 50 91 fe e3 4f 6c b4 ed b5 e6 1d 52 8c d4 10 4f e4 a0 01 38 13 b7 1a 54 e3 a3 d2 d0 30 97 8b ba de 9e d8 b6 e0 b3 3b 2c e6 56 84 d3 b0 3e fb a7 87 a4 26 ef 12 dd f1 2f 2d 7b aa 1a 7a 64 e4 b8 c2 ba c9 9e f5 dd bc 8d b2 33 4c 58 91 be a6 9d 36 7d 05 3b 5b 49 1b c2 ca c8 47 d9 4f a3 81 11 08 b6 56 fa 59 7d a8 1a b7 da 55 e6 bd 42 8d ad 95 db 54 12 72 94 68 0e 0c 62 22 e8 ab a8 Data Ascii: @F10yoB+leL35yvLJ\JH}4co^^iwmWn.9k bS<xA3{JXPOlRO8T0;,V>&/-{zd3LX6};[IGOVY}UBTrhb"
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: e6 26 e3 bc 61 75 1f bb 82 e6 26 eb 46 c3 1b 32 ec 0f 3b 89 a5 23 d1 83 9a ce 36 ef f5 43 31 a1 6c 7f b0 27 35 87 a8 66 18 93 06 72 9d 0f 06 a6 c0 86 23 68 67 f8 e7 57 d9 43 3f b5 45 3e bb 55 76 37 47 56 14 a5 56 e3 42 46 62 5b f8 11 5a 9b be de 2f 31 ea 74 4d 7b 35 c9 10 34 ac 9b ac a6 22 07 cd 1b ad f4 06 26 6c 24 5a a7 d5 1b 32 b7 b1 4b 40 f7 d1 b8 b9 9f 01 d3 8f 62 12 51 17 c0 f9 c0 45 43 26 7d e5 81 4c 36 52 a5 a3 72 aa 22 a9 9b da 43 f1 99 f1 4b 5f d6 63 76 60 7d 99 85 5b d0 1c bd 95 94 d8 ea 3e 9b 84 bb 17 25 93 80 cf 4d d6 0d f1 48 43 21 f3 06 32 24 63 4d 31 f2 91 8f a5 d1 dc 64 1d 93 a1 a0 e5 30 cc 6b 7d 43 87 c7 b6 dd 6c de e1 f9 58 b5 58 47 2f d3 e0 34 68 c8 4c a9 7b 33 b7 b3 32 a0 23 a4 b0 36 42 c6 e7 16 bf cb 28 53 6c fd ee ec 91 63 2f d5 6f Data Ascii: &au&F2;#6C1l'5fr#hgWC?E>Uv7GVVBFb[Z/1tM{54"&l$Z2K@bQEC&}L6Rr"CK_cv`}[>%MHC!2$cM1d0k}ClXXG/4hL{32#6B(Slc/o
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: af 21 59 17 df 5c d5 54 bf 8e bd f5 e2 56 df 9f d8 0e 37 4d 39 d2 8d a8 19 89 3d a6 3d 6a 94 1a 32 dd 8c 6e 34 84 d1 63 d7 7a 85 d3 64 b8 09 eb 46 f3 56 64 74 8b 1b 75 1f 32 a0 69 f1 59 c9 96 cc 57 3c ed f7 c6 75 30 3d f7 6a cc 6c a3 36 cd 5d 10 31 85 db a8 e9 78 af 38 02 06 b4 a0 0b d5 11 32 4c b2 de 40 a3 b8 6d f1 12 07 31 83 70 4a a2 45 ba 19 29 c1 b5 d8 5a 25 4a 89 b6 e8 f9 00 73 99 cc 4d 46 37 43 de e6 6e de 14 76 d8 c8 87 1b b2 6e 98 9c 86 79 83 49 ce 7c b7 a8 e7 ad 47 7c fd 45 f3 a6 ba 99 6e 15 88 95 3a 81 5a 77 8e e1 d5 11 54 4e 04 a3 76 9a cb 24 1f 75 74 bb eb ef d2 d4 16 d3 82 63 36 1e 9b fd 9b 5f 68 88 5c 3e 54 09 2e 1e 77 b4 9f 21 37 1a 02 43 08 73 ad f9 38 e2 c6 c3 4d a5 d1 0d eb 26 cc 69 6d 69 be de 42 9b 02 29 19 20 61 68 ef d2 c1 ff 99 b7 Data Ascii: !Y\TV7M9==j2n4czdFVdtu2iYW<u0=jl6]1x82L@m1pJE)Z%JsMF7CnvnyI\|G\|En:ZwTNv$utc6_h\>T.w!7Cs8M&imiB) ah
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 3e cd bc dd 8d 0a 92 4e 1a 90 0e 40 45 f0 33 d3 09 5c f7 1e 4e 40 65 14 ce 80 38 1b ad 5f 48 8f f8 6c f9 d3 83 f1 50 7c 17 8b e1 cc 96 7f b7 39 b3 89 0f 23 79 83 11 37 3d f9 cc 69 d0 dc 1a 20 61 6e 42 18 2d 8e 47 86 09 19 72 33 04 6a 45 20 4c c6 03 18 3a 38 88 3a ec c7 9b b6 1c ea e4 61 8e e7 90 94 03 9c 70 1c aa 43 e0 c3 a1 86 43 0d 9d 85 1a b0 4a 83 a6 c6 4f 8f d0 63 0a bd d7 ac 85 89 e1 5f 6e 54 4c 21 09 2e e6 6f 53 fc 96 70 38 87 01 3e 67 d2 9c 06 8d 98 2c a6 50 69 20 43 20 73 99 d5 a9 d5 2b 87 3a ad dc 02 61 fd df 84 2c 8e d6 27 61 fa 61 74 d5 64 0d 87 e3 84 e0 c4 f1 01 d4 38 02 a2 e2 44 25 3c a4 a0 06 be 22 c9 9b 75 fd a2 6f b3 17 7d 57 bc ab 04 ea 2d 6e 42 24 03 ec 16 14 d2 e9 5c 52 ae 0c 76 85 91 d1 50 51 03 68 5a 1a 23 b1 56 ed 2a c8 a8 d6 5c 86 Data Ascii: >N@E3\N@e8_HlP\|9#y7=i anB-Gr3jE L:8:apCCJOc_nTL!.oSp8>g,Pi C s+:a,'aatd8D%<"uo}W-nB$\RvPQhZ#V*\
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 99 f4 e5 ed 8a f3 af 98 ef d4 4b c5 4a a8 8d 18 d7 a5 4c a1 cc 0a d4 3c b3 22 3c f0 f0 18 1e 40 75 ab 54 4e a2 ee 41 85 b7 d3 e2 1c b3 8f 0d 4f 92 f0 c0 05 f1 df 9f 60 0d 2c 60 9c 6e 11 1b e7 b3 f2 30 3e 1b 63 14 e6 78 95 42 e8 58 b8 3a c4 71 3e 9f d2 51 2a 9f 4a c5 49 6d 4c fe 32 c6 ee 18 59 27 f1 0b 78 9c 7c c1 05 5c a7 8f 31 49 c5 99 c4 22 f1 c0 17 c6 8d 9f fe fd 8f d0 bd 54 d2 20 92 4e a8 28 07 d7 c8 77 c5 33 f1 12 05 a8 4f 57 8c 6e b3 ad 90 9d 6e 55 99 0b e2 80 87 8f 2b 86 83 23 9e d0 09 c2 83 71 21 29 22 20 aa 05 6f 84 86 ef 0b 90 c9 99 2b 38 ea e1 be d5 53 ad c0 89 67 f1 cf 03 79 77 23 7b ff 55 08 1d 0b 37 9f 3a cd 8d a3 fc c7 e4 c3 50 49 5d c5 a0 86 8b e3 38 cf 8b 29 ee a6 0c 72 8a bb a9 ce a7 e8 e6 b8 9c 8a bb 62 38 ee e8 99 1f 88 27 60 0b a4 e3 Data Ascii: KJL<"<@uTNAO`,`n0>cxBX:q>Q*JImL2Y'x\|\1I"T N(w3OWnnU+#q!)" o+8Sgyw#{U7:PI]8)rb8'`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.6	50080	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	504	OUT	GET /9kABykeGovHPy-dN19lRxxnCp8IZK3Pkl8qLFNxrEe-hhKVZeiyhTBEIRUt6t-vhxQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6354 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:12:05 GMT Expires: Sat, 20 Apr 2024 13:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 3290 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	722	IN	Data Raw: 52 49 46 46 ca 18 00 00 57 45 42 50 56 50 38 4c bd 18 00 00 2f ff c0 3f 00 09 47 92 e4 b6 4d 61 21 88 de 5a e8 ff 0f 66 02 9d ce 11 fd 9f 00 fb 9b bd e0 da 78 7c 0f 1b c0 16 de 2e 0f 78 27 eb ef d7 42 2e 28 22 c8 e8 5b 66 09 4d 94 e8 f2 06 96 04 44 19 94 6a 40 11 98 80 c4 03 bd 14 2d b3 02 d1 06 28 53 04 80 36 00 aa 4c 0d 62 a8 cc 4c b4 23 73 65 56 5c a6 de cc 8c 2c 19 2a 3b 27 0f 99 7b 9d 06 ab 7b 38 f5 e4 1e 37 fe d7 05 1c d9 b6 db 36 a7 c0 60 fe 50 e9 3b 67 1b 8b f2 fe 6b 97 2a dd 33 00 8e b5 e3 b6 91 1c 89 68 ac b7 b5 77 17 c0 e4 1f df f9 97 e3 48 92 1c 25 4f 01 6f e2 fe 57 68 e9 bf 3d 67 4a ff 27 40 c2 bf f9 52 97 f4 34 ff 9e c7 6f 9f a0 37 74 fb af e3 51 d4 45 1e 75 7c bd 58 68 8c d9 53 01 a0 cb 00 49 92 1c ad f7 d6 31 80 10 42 34 1a 09 90 6c 50 98 Data Ascii: RIFFWEBPVP8L/?GMa!Zfx\|.x'B.("[fMDj@-(S6LbL#seV\,;'{{876`P;gk3hwH%OoWh=gJ'@R4o7tQEu\|XhSI1B4lP
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 0a 41 96 4a a6 ac f3 7f 75 ee 5e 1c 82 16 da aa 5f 3e 07 e3 6f 14 97 c6 84 22 4b fe b9 aa 59 65 81 31 b0 e4 d0 a2 6d db 94 24 ad 40 da 81 17 51 b6 6d db b6 6d db b6 6d eb cf b6 6d 75 87 1d 91 b6 8d 17 41 c7 b6 ed 36 76 74 ee 03 c1 47 56 ad 6f 22 e5 1a 88 4f 35 4e c5 9a 92 f7 5e ea 26 01 12 c0 8b 09 70 80 09 ff 4f f8 7f 22 a9 41 f6 da 16 e8 7b 2c e2 02 9b b0 91 da d0 de aa 65 53 2c fd 0c f6 f9 ed 45 d8 a4 b6 a9 1f fd 67 f1 9e a9 5d 94 b3 b7 b6 c5 6b fa 57 19 0e bf b4 8b 9d b6 2d dd f5 7d 65 40 27 0b ea 79 97 5e bf a6 e1 a7 6b 46 c5 f5 b3 b9 61 ae ec 6f 4f 29 e9 78 9c 16 5b c3 84 52 1b 35 3b e2 e4 c3 64 2f 19 f6 31 98 b1 df 3e ab 2e 6c 7c 17 6c 68 81 ca 04 2a f2 e9 3d 06 1e 51 a9 1f 36 6f c1 ef 67 b4 24 40 8e fd bc cf 91 e0 f7 b3 0c f8 a2 a4 79 db 9f 4d b3 Data Ascii: AJu^_>o"KYe1m$@QmmmmuA6vtGVo"O5N^&pO"A{,eS,Eg]kW-}e@'y^kFaoO)x[R5;d/1>.l\|lh*=Q6og$@yM
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 20 54 5b 8d af 26 03 6d 64 34 8a 40 2b c9 58 0c eb 78 fa bc 20 66 f1 9b f0 a1 f7 db f7 2b 28 7c b9 63 cb b3 91 70 5c 4c ae de f9 81 c7 32 12 a7 2f a6 37 9c 32 12 f8 c0 c7 e5 fb 4c 6c a8 ea 27 7c 1a ef fa 34 a0 2a 46 7b fe eb a6 e7 99 88 aa 39 13 19 3c c0 87 df 6f bf ed cd 77 df ea 7a 1e 6f 82 85 57 b7 b5 ef 70 3c 9b 63 a7 db 91 e3 4b d3 ab b7 7d c8 77 7e fc e0 f5 9d fa 0f 03 ce 07 be cf 3d bd ff 23 4e c6 bb 22 df fe d6 d3 6f 7a 6d fb f8 3f 0a df e5 dd b3 ef 78 fb c9 3b 3f 0d e5 92 69 29 d5 4f a7 4d c5 ac e9 31 6d 7d a8 f9 5b 5e 59 23 d6 d4 e1 fe fb ef 07 38 6e 3e 97 9e 26 58 3e 98 36 90 2d 61 19 54 34 15 f2 40 0a 03 0c a3 b5 c2 6a c0 8e a2 6f ce ce 83 05 dc f8 f3 7f 0b 56 38 3a ee 84 4d e5 5e 11 73 f6 16 6f 8e 11 28 c7 b9 d7 ae c8 c7 0e b6 38 41 fe a9 34 Data Ascii: T[&md4@+Xx f+(\|cp\L2/72Ll'\|4*F{9<owzoWp<cK}w~=#N"ozm?x;?i)OM1m}[^Y#8n>&X>6-aT4@joV8:M^so(8A4
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: d5 4d 9c 12 80 b5 f0 8f 35 e5 51 b5 1a 2c 4a 68 fd 85 ce 98 22 94 54 59 13 00 18 3e 5b 5e d7 85 3f 5d 14 dd 6b 04 98 ae 40 4b 9f 47 93 dd b8 35 8f 5c 7e 6f 48 ab 2b 2c 5f b7 b8 ae c7 1b 53 65 0d 51 6d 4f 64 bf 83 6c 14 9d 77 b5 0b d5 4d 7c 90 04 06 a6 56 6a 5c b8 4d 77 cc 07 8d 0c 4a d0 f8 cc 97 73 ea 84 e6 82 d5 84 04 6d 3e 65 52 49 4d 1f 41 b8 e8 b1 74 1a 3b 18 ea cb ee d8 01 08 6a d8 74 1b e1 9b a7 34 57 3a 1d 03 76 14 5b 5d 2b 0b 5d 71 e5 00 16 b5 21 68 b0 f6 cc a7 18 b7 46 83 57 c6 f7 bb 63 11 e6 2a b4 14 39 a5 68 cd 68 99 4e 5f 34 09 1b cf 79 48 0d 78 25 3c de 69 e9 2a 9e b4 7a 8a 97 09 cb 58 0e 75 95 85 78 ce c5 88 81 45 2d 44 bb 67 85 97 bf f9 7f 6d 4b 65 d9 4a fa e9 6a e9 cb 15 13 68 48 19 fd d8 3f 3a a3 77 81 53 e6 46 2a 4d 58 fb 40 69 75 57 f5 Data Ascii: M5Q,Jh"TY>[^?]k@KG5\~oH+,_SeQmOdlwM\|Vj\MwJsm>eRIMAt;jt4W:v[]+]q!hFWc9hhN_4yHx%<izXuxE-DgmKeJjhH?:wSF*MX@iuW
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 61 8c 1f 47 b4 09 29 62 fd 4e c6 b1 2d 71 8f 60 06 28 41 e3 57 b0 d5 1a 8e a8 fc 3a e3 ce 47 73 5c b6 09 ac e6 74 89 f1 a3 51 63 f1 f9 69 1b 31 90 4a 7e 97 de 67 12 34 42 63 65 21 fd 8f f9 5d f1 82 ed 5c a9 22 68 31 ac 98 d3 65 f2 e8 b2 76 1e d1 66 2f f9 bd e1 94 2f 50 9c 1a 0c cd 0a 66 db a3 b7 fc 5e b5 e7 e6 7c 0b 24 86 5b 18 ae 86 6b cd a4 35 53 a3 81 b5 96 d9 5b fe 2b 79 3d d8 4b f5 ca c3 00 cd e4 67 36 9e 3c f3 1a 48 51 3b 6c 07 02 ad c5 70 35 ba 6a 33 29 86 c7 b1 18 d7 3a 12 aa f5 0b fe e6 d5 ee ae f3 30 03 dc c9 3a f6 f7 d7 be 19 79 b5 3a da 22 7a 47 73 f9 15 2d 33 69 d8 8c 6f 09 a1 68 7e f4 97 fe 5d 5f be fa f3 6d e2 95 2d fa de 1b a7 bf 90 46 0c 13 de f1 95 ef 74 f7 c3 d7 38 b5 ba e8 4c 9c 8f fa 9e 1b 7c 49 cd f0 34 92 91 95 46 cd a6 16 e3 2b 31 Data Ascii: aG)bN-q`(AW:Gs\tQci1J~g4Bce!]\"h1evf//Pf^\|$[k5S[+y=Kg6<HQ;lp5j3):0:y:"zGs-3ioh~]_m-Ft8L\|I4F+1
2024-04-19 14:06:55 UTC	612	IN	Data Raw: 87 fe ff 6f 17 75 38 38 2c 87 65 b1 5c 17 7e f6 d3 3b 78 be 9c 0e cb 96 0f b7 9e f7 c5 b2 3c a0 e3 c5 f5 e0 6f 9e 53 3d bd 1d 1e 7c d2 cf fe dc 9b 2d df dd 3e 3c f7 fc f0 e2 e0 b0 2c d8 e1 7a f0 5f ce 93 e5 a9 ad 96 c5 19 2d b6 fc 96 33 be cd 61 81 42 73 2d ac 57 e9 11 3c ed 6e b1 0b ed f0 72 87 2d cb 72 d8 c6 0b ca 70 87 eb 81 d7 f1 d1 a8 9e 96 be e8 72 58 fa ad 9b e5 80 05 e5 da f8 ba fc df e5 29 2d 70 aa c3 d2 1f 6c 99 e5 60 72 87 eb c2 ab 78 14 ef e4 29 d1 69 0f 7d 59 0f 8b be 2c 8b 65 ec da f8 5f 2f 64 4b 4f 6d 58 96 7e 3a b0 38 b8 6e 9e e3 02 de a8 8b 9e be c0 72 bd 38 2c eb 1b e3 40 2d 58 6a c1 e1 7a b1 2d bd 31 58 8a 05 0e ae 97 f7 87 2d bf 51 46 77 e8 ae 9d 7d f1 d3 f7 ed 87 eb de 75 bf ef c2 c3 57 79 bf 9b 2d a3 50 30 67 45 df 47 ee da b7 39 fb Data Ascii: ou88,e\~;x<oS=\|-><,z_-3aBs-W<nr-rprX)-pl`rx)i}Y,e_/dKOmX~:8nr8,@-Xjz-1X-QFw}uWy-P0gEG9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.6	50079	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	506	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:55 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 14592 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9598 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:55 UTC	721	IN	Data Raw: 52 49 46 46 f8 38 00 00 57 45 42 50 56 50 38 4c ec 38 00 00 2f ff c0 3f 00 4d 40 72 1b c9 91 84 c8 8c 34 e5 fe ff e0 ac ee aa 99 35 e7 88 fe 4f 00 fe d7 32 06 c0 8f 98 89 08 79 49 87 98 98 88 35 90 37 cc 58 cc 5a 6b 0d e4 81 aa 59 a6 d8 b6 35 55 90 07 46 3e b5 a6 55 de b5 ec 4f ed 61 c8 1b 91 ac 22 63 8c d1 b4 e2 84 9e 11 63 16 a8 02 38 72 32 29 5b 0c ef 37 dc c1 f9 54 4f 7a 77 77 79 c5 83 b1 19 3b d9 f0 08 0b 60 d1 28 ee 07 06 2c 33 80 1a c1 cd 7a 05 b1 aa 3a 11 11 24 e9 be f4 95 9b 99 ce a9 da d3 d2 49 d2 f5 00 a6 35 33 3d a2 e8 c1 56 7b 66 a6 45 26 b5 9e e5 36 22 d7 9a 77 e0 1a 22 21 6b ce 5b 00 56 ac 59 ef fd 43 17 72 1c 49 72 24 c9 e5 e5 ec ff 6f f3 65 85 44 62 48 1c 6f 9c 3a bd d5 2d ad 0c 4b 92 64 55 55 e2 0e 8d 3b 9c fd 2f 8c 2f e7 b9 06 1c c9 b6 Data Ascii: RIFF8WEBPVP8L8/?M@r45O2yI57XZkY5UF>UOa"cc8r2)[7TOzwwy;`(,3z:$I53=V{fE&6"w"!k[VYCrIr$oeDbHo:-KdUU;//
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: c8 f9 92 33 db fb b6 c0 3d d9 1e e8 06 77 54 70 0b db 56 ce aa a9 1b 52 5b 97 d4 b2 4b 60 33 b4 98 1c 36 42 4d 1e 51 41 6a 8e dc 59 0e 29 b7 96 73 71 77 43 f1 60 c5 af 8d 37 ff bf 55 92 ec 1c a8 6a 9a c6 e1 59 66 66 14 33 33 33 33 33 33 33 59 97 99 19 97 99 99 69 96 79 77 b0 7b 66 67 ba a7 ab bb aa ce 31 16 b4 db 73 aa da bb fb 73 37 01 85 42 39 d4 f3 c8 7a 2d 3d 47 2c 55 0a 6f 04 72 ef 4d 43 6e 2b 01 6c 71 b9 7f 57 95 80 28 8a cd 43 ee c8 6c 77 2c 81 fb 8a d5 22 97 3a 05 d9 74 29 02 b9 eb 8e db 62 ad 7b a2 10 43 0e 98 c0 35 77 dc 71 5b ac 1c 4e 5c d7 14 43 bb 6d be 79 a8 43 50 2a 9b c2 d8 62 a6 d7 dd 04 84 31 c8 65 d6 d8 4a e1 b8 77 12 10 8c 2b 53 16 4b 31 c8 be ee a4 20 86 d7 bc e3 52 a0 6d db b4 1c ed 7d 1e ea ab 2a b6 ed b6 6d db b6 6d 77 ff 42 46 db Data Ascii: 3=wTpVR[K`36BMQAjY)sqwC`7UjYff3333333Yiyw{fg1ss7B9z-=G,UorMCn+lqW(Clw,":t)b{C5wq[N\CmyCPb1eJw+SK1 Rm}mmwBF
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: b0 73 62 86 f1 ec d2 1b 05 08 f0 cf 06 2a e9 6c d3 fa 1c fc 87 4d d5 66 7f e1 96 ca f6 ae 55 6a 4c 03 d8 d2 8e 5f 9a 94 53 fd 08 01 81 c5 24 3f dc c3 2f cd a7 15 25 27 42 e1 d9 b6 c6 41 00 11 04 91 b0 5c 4b 87 d5 a9 a3 73 e4 24 1c 35 cb 3b 70 8b 37 99 67 4c 2d 05 05 14 4c c9 f4 5a c6 fe 73 c6 c7 40 ca 90 5c ea 37 6f 68 3d 34 b7 61 b6 3c 70 55 e9 d1 87 ab a5 7d 00 1c 20 11 71 41 14 8b 53 7a 3c 47 6c cc 49 ed c9 e6 c6 d5 7a 8d a9 4c cf a4 dc 0f a1 80 82 c5 1c 34 66 74 4d 38 0a 85 a8 5b 80 68 42 b9 4f f6 d0 26 aa b5 e7 f9 dc d1 f4 81 11 04 22 80 0b 9a 45 91 e6 22 ee 61 74 e2 d0 20 13 e3 64 6b 33 2c b7 ac 59 1d 10 f4 5a 50 21 02 1c 30 1d eb b7 d9 52 8d 29 4c 66 8d c6 cb 0c 60 13 85 44 50 d9 17 eb f7 fe 4a f4 d1 74 93 3e 12 62 e6 f2 bd ab de b6 5e 16 84 6b 6c Data Ascii: sb*lMfUjL_S$?/%'BA\Ks$5;p7gL-LZs@\7oh=4a<pU} qASz<GlIzL4ftM8[hBO&"E"at dk3,YZP!0R)Lf`DPJt>b^kl
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 5e 84 49 c3 ca 48 04 01 22 4e 64 17 e9 08 27 fd e7 d4 dd 95 0d 7c e3 cd d1 0f f0 97 35 5a 39 a8 08 00 c3 39 4a 16 25 66 8e 3e 38 ba a5 42 c1 07 73 3c 0b c1 33 4a 81 f6 4c 90 94 03 68 bd 5b fa 77 08 08 18 1c 80 35 f6 58 6f cb db eb d2 bd aa ed 41 b6 b0 d7 8d 20 40 10 20 22 0b c6 3b 3b 6d a6 27 cf a4 b5 c9 8c f7 3d ca 7f 9a fe cb f8 8f 62 ef 55 9f cf 46 2e a8 b5 00 30 83 82 cc cf 7a 0e 06 81 fa 16 2b 72 32 40 5f 94 e0 69 23 7b 59 57 94 a0 36 42 00 71 46 2f 0a 88 b1 4d bf b5 b7 ee 6d e3 f6 e2 9b ad ed f3 3a ff 78 f9 c7 d3 29 eb 2b b3 fd c4 e1 3b e4 f6 31 d6 fe af 7f d0 99 65 7d ae 53 4a 86 b1 e0 ee ac 41 8e 49 6d e7 3b a1 c2 17 cd ef 41 69 6e 00 1e 42 82 6a 4d f1 c7 de 68 41 52 60 e1 12 2d 44 68 84 63 ad d6 bd d4 57 58 71 5c 3b a8 d6 f6 79 b5 fb 73 da 8f d6 Data Ascii: ^IH"Nd'\|5Z99J%f>8Bs<3JLh[w5XoA @ ";;m'=bUF.0z+r2@_i#{YW6BqF/Mm:x)+;1e}SJAIm;AinBjMhAR`-DhcWXq\;ys
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: b1 a8 ef 30 e3 9c d9 51 10 a9 97 01 c1 2e 88 5c 75 f1 0a 03 6d 4b ac 48 d8 2e c3 9c 14 36 6a 0f d1 6a 93 10 e5 b4 9e 3f fe 28 0a 24 22 d4 47 1f d7 fa 6b e4 bc 38 fc ee ae 9d a6 38 08 5f 7f da 03 c9 08 9f b6 fe 0a 34 24 24 97 51 73 65 88 cb 17 66 d4 77 83 c5 6a 8e 9f 7b d3 51 32 67 df 22 e8 03 44 27 d8 4c f2 8c c1 dc a3 85 01 8e 28 84 51 00 53 46 6b ad c5 fd e2 77 8e 3b ad 75 b5 ee bd 7a 4e ed b2 35 00 82 db de 29 db a9 1b a4 f7 7d 7c cf af 7f 4f 4d 29 25 71 b5 ae fc ce d6 bc f9 4d 75 82 5a be da 6b fa be bd 37 dd 8d 0a d6 98 4e f7 c2 ab 07 17 77 f3 f9 e8 e1 88 53 65 93 22 90 01 30 0a 05 2d c8 26 b3 1d 38 1a af 36 8e d2 36 1c 08 74 53 0e 20 70 fa fa 49 f3 80 f7 7f 9e dc 7f 92 7e 48 b5 84 84 6f 2e cb 0c e6 da 8c 52 6b c5 30 b3 71 38 86 72 a1 2a 97 4d 50 fc Data Ascii: 0Q.\umKH.6jj?($"Gk88_4$$Qsefwj{Q2g"D'L(QSFkw;uzN5)}\|OM)%qMuZk7NwSe"0-&866tS pI~Ho.Rk0q8r*MP
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 6f 5b 9a b4 86 86 c6 a6 e9 f2 73 da be 97 de bb ba 7b df 8d e9 d2 b0 6f 3b ff 7c 34 5d cc eb 78 92 c8 e5 cd 96 24 ee d5 df af 24 b8 5f a9 fb c5 17 8e 3a e2 f8 4a fb e7 3b 9e 39 d2 2f 7d b7 9f f9 da 6f f6 ea eb 46 b1 e0 82 1d 39 40 7c b1 87 75 ef fd 03 68 67 68 2b 53 07 76 f4 f1 ab 7b d7 1b dd ba 4f 45 f7 74 69 5a 35 8d d6 55 ad bc 6e bb 45 2e 91 1b 7a f5 5e fb 6e c8 60 6d ca e5 d0 63 7d 1f 63 64 5a 17 ba 84 42 42 22 cf c9 75 bc 58 8f fb 9f e0 a8 b3 24 2e 78 c3 70 e4 3f fd 98 07 89 8f d2 4e d8 47 80 00 e1 ec 9d 29 6d d7 5d 5a 57 b7 b1 6f d5 b4 1d 9a 7d 2b d5 4e f2 ba 44 f2 88 24 31 62 ca 17 6d d9 27 91 44 14 c5 5c 0c a7 eb 58 64 4c 02 a0 14 ea a4 bd 3e fe 29 87 5e 9c cf 4a a3 15 b4 c9 e6 6a 0e ff 9a 71 1f 59 7a 88 b6 2b 40 1c c4 69 d5 fc 81 ea b6 b7 56 e7 Data Ascii: o[s{o;\|4]x$$_:J;9/}oF9@\|uhgh+Sv{OEtiZ5UnE.z^n`mc}cdZBB"uX$.xp?NG)m]ZWo}+ND$1bm'D\XdL>)^JjqYz+@iV
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 49 56 d6 79 20 a2 65 2b 7d e0 91 0f 59 8d 69 0f 9c 3c 2c 7d 64 75 9e 5c c5 2c d4 1a a4 b5 29 21 4d 1a 9d 7f da da 2a c4 53 b1 e3 67 dd 7f f1 cf e4 75 db 7b 1e c9 bf 38 6a ed ae 0f 82 65 0c 77 b8 c3 3d dc 6e 49 00 7d 9c 70 86 77 47 43 2f 40 cb 9a 4b f4 e3 3d 6b b1 be 7d 69 5b 3d bd bf b6 9c d4 e7 50 d2 64 32 5a 8b cb 35 ef 47 3c aa fe 3f 1d da d1 7c af f3 2a 89 f7 d7 9a 36 57 18 c3 48 05 87 3b dc 91 ab 02 5c 3d 4e be a2 76 14 87 68 ef 44 01 d0 03 9c 97 a0 e2 64 8b b2 b6 59 9a 95 38 ba d2 a0 b5 e8 d7 16 95 24 e3 29 35 5a a0 f6 ad b6 bd 9a 7b 5e 1e be 22 49 2c 55 f5 79 31 22 2e d7 86 70 5c c1 fd 8a dc e4 10 8f 93 3c 35 50 61 05 c2 a5 f6 b9 54 00 ca 51 67 a2 4d 2c 39 bc 59 c9 49 43 19 47 02 1d e5 23 9e d3 26 66 11 11 ae ef be d7 25 79 bc e6 3d 47 55 9c 75 7e Data Ascii: IVy e+}Yi<,}du\,)!MSgu{8jew=nI}pwGC/@K=k}i[=Pd2Z5G<?\|6WH;\=NvhDdY8$)5Z{^"I,Uy1".p\<5PaTQgM,9YICG#&f%y=GUu~
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 4c 37 ae 0c 19 c7 e0 24 07 70 f8 ee 01 e0 f9 8f 87 ed df cd 9f 84 95 c8 48 ea 96 24 43 ee b7 32 3c c4 83 60 18 24 98 19 d6 be 10 33 e5 de d9 fd da b0 4c 47 93 e9 37 a8 08 54 a1 0c 5c 21 8c 9c fb f8 7e 08 08 15 d2 dc c4 4d 9d 47 bd eb 4c b1 1e 09 bb 75 ba ec 09 5c f8 2e de 77 cf 7a 6c 7f ae 2d 22 94 44 c8 3d 49 c4 52 5b 92 48 ea cf 54 a4 11 c1 2e 2b d3 ba 75 f5 82 c9 99 e1 85 c3 69 98 e5 9e 91 b6 90 4e d4 37 ea b1 01 78 51 8d aa 57 33 cd b7 4e c2 60 d3 ec f1 7e 55 b5 a7 86 b8 a8 81 3c 8c 5e 1a 05 c8 00 7f e6 26 6e 91 4c 92 e0 8a eb f1 c5 12 c9 83 78 48 7a 17 fe 7f b1 a3 35 ea 7b 19 31 13 6e 91 d9 b7 4c d9 24 9f 37 e0 5c ea d6 d5 15 bc 12 05 19 a4 b8 60 43 1b 7d 50 e1 7c d4 ad d0 d5 95 88 8e e5 78 bf e6 d2 df c0 bb 04 5e 97 24 be 9d 71 f5 22 15 12 41 12 93 Data Ascii: L7$pH$C2<`$3LG7T\!~MGLu\.wzl-"D=IR[HT.+uiN7xQW3N`~U<^&nLxHz5{1nL$7\`C}P\|x^$q"A
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 71 1c 97 b1 8e e3 38 ae 47 94 f4 11 cb f2 ea 72 3d 76 8b 72 5b 97 34 8e e9 5c 96 b2 5f ca 3e dd ea b8 90 87 bd a5 3f c1 83 07 ca 92 9e 6f 33 c0 8d c3 7e 65 d6 97 7f 14 71 38 7c 14 b4 fe a2 a9 69 75 b2 ac 57 bb 92 c1 20 e6 7e 34 6f e5 3d 55 eb 97 2f c5 e9 d4 60 64 b3 bb 06 c6 f3 1e b9 32 21 82 90 91 71 1c cb 07 eb b8 dc a6 69 91 7a 5b 5e 5f 1f 96 61 ac 69 7c ef 1b e3 a1 a4 43 49 e7 6e dc 95 f5 39 04 7d 89 7a 27 f9 3c 4d da 87 bb f2 e0 f9 b4 ab e9 2f 2e d4 2b d5 d6 08 c0 e8 53 4c 1b 39 30 4c 9d 66 d7 55 7b 95 c3 cd dd 75 e4 4a a5 52 39 bf 9e d3 e6 a7 af 3c f7 58 91 b7 77 78 1a 81 d7 d5 7f 11 32 0f 42 c4 65 e4 36 d5 0f d6 f9 30 f6 7a bb 3c d3 71 44 92 94 ae a5 07 39 dc ee eb 52 d2 94 4a 59 3f 5c 97 d2 d7 17 cc 9b de 6a f7 f3 7d bf bd de d1 db e7 c3 d1 96 97 Data Ascii: q8Gr=vr[4\_>?o3~eq8\|iuW ~4o=U/`d2!qiz[^_ai\|CIn9}z'<M/.+SL90LfU{uJR9<Xwx2Be60z<qD9RJY?\j}
2024-04-19 14:06:55 UTC	1255	IN	Data Raw: 1a b9 4c 05 63 1f 5e 5e e6 32 a4 21 e7 9c cb cb cb 8b b2 db 1f 0f d4 cc bb d4 d2 94 8b 37 fe a1 6a 07 92 ca 71 c5 92 81 00 45 8e 02 58 7e a6 d5 26 10 6e 13 2c 27 8e db bb 77 8e da 0e 07 c5 50 c7 60 9f a5 04 05 0d 3e 6a 4e 9e 42 09 15 89 29 fe f8 18 dc f6 3e 7d 3f 83 49 05 32 f4 f6 86 f9 e3 fd f9 fa b8 3f ca 98 ee 52 4e d8 a7 eb fd 1e 09 a5 22 15 0c c9 73 7a f7 be 94 32 94 8b 72 f1 30 ec f7 25 a3 bc 3c 5e 88 ae 07 e4 77 7e fe 77 ee d6 1d 5d cb 9d 61 2a d4 31 b5 64 c9 3c 47 43 61 f4 2d 3f 08 48 e6 27 79 10 1f 57 ba 03 92 5b 7d b9 fd 95 43 36 7a d3 98 8d f2 e9 93 c5 1d e2 12 04 96 b3 18 3f 28 78 c4 5b 1c 1f 21 10 19 70 73 35 51 2d eb 0d 07 2e fb 77 f7 fa 97 e3 fe 23 d7 29 61 87 e5 d5 f5 1a 5a 50 90 d2 a1 60 a8 d3 52 86 8b 21 fb f1 98 9f e7 9c 33 f6 65 bf 1f Data Ascii: Lc^^2!7jqEX~&n,'wP`>jNB)>}?I2?RN"sz2r0%<^w~w]a*1d<GCa-?H'yW[}C6z?(x[!ps5Q-.w#)aZP`R!3e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.6	50084	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	979	OUT	GET /_/PlayStoreUi/browserinfo?f.sid=1808081091980566436&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=158011&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535612.0.0.0
2024-04-19 14:06:55 UTC	1139	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:06:55 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:55 UTC	116	IN	Data Raw: 38 32 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 39 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 39 2c 22 36 32 37 38 37 32 37 35 31 39 39 30 32 35 37 35 33 33 34 22 2c 31 30 34 5d 2c 5b 22 65 22 2c Data Ascii: 82)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",9],["af.httprm",9,"6278727519902575334",104],["e",
2024-04-19 14:06:55 UTC	20	IN	Data Raw: 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 30 5d 5d 5d 0d 0a Data Ascii: 4,null,null,130]]]
2024-04-19 14:06:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.6	50085	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	510	OUT	GET /jUZSvHttqxttvLF_ifw1Jxs_2du_jSaOJt2A3iOtFyDwkGidOpQkKjlltdAgNnRySsw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 187116 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4105 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	720	IN	Data Raw: 52 49 46 46 e4 da 02 00 57 45 42 50 56 50 38 4c d8 da 02 00 2f 0d c2 49 00 4d 50 10 c0 36 6c 1b 05 90 61 d8 40 ef ff 0f 16 ed e4 f6 82 88 fe 4f 80 24 25 de 25 29 ca b3 12 79 29 89 94 c4 b6 32 5a 4a 62 29 52 ec 64 cb 43 5e 39 d6 1e 3d c5 af 76 ed 89 9c 24 92 ad d1 c3 1d 27 96 9c dd 77 ac 7d 4b 34 66 1f a4 41 89 14 e5 5b c7 49 a2 cd ce b3 94 c1 49 62 65 da df 39 c9 65 65 74 12 eb 0b c5 9b a4 21 91 b7 44 7a 48 22 0d c5 b7 6d 81 4b b1 a4 33 ca e0 44 7b e2 cc e7 a0 24 e4 37 c7 6a 5b e6 8d 14 db f4 ad 48 77 ae c4 d9 2f 9b d2 70 80 7c b1 1f 07 b3 db d9 cb f6 86 77 5d 89 92 c4 ce 75 1b b4 5d 92 2c b1 5e 81 53 9c 28 21 c9 b6 65 09 16 4a 24 c9 b4 ef 38 24 b1 88 ef a9 1f 90 03 a1 d9 8e 6d c7 24 be 5d 00 0e 32 4a bc d9 bd 0c 14 36 08 02 d9 4e f9 51 24 3f 2d d9 92 03 Data Ascii: RIFFWEBPVP8L/IMP6la@O$%%)y)2ZJb)RdC^9=v$'w}K4fA[IIbe9eet!DzH"mK3D{$7j[Hw/p\|w]u],^S(!eJ$8$m$]2J6NQ$?-
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: bf 05 de fb eb 3a 4d 72 91 34 45 23 84 08 16 42 1c 78 b4 6d 5b 75 63 db b6 4a ad 7d 18 a6 c2 02 4b 43 b2 23 a1 62 32 33 e3 cf 3b ad cf 58 a9 4a 66 2f 66 f0 e8 a3 f7 9f 91 db 48 8a dc 30 b4 74 da 47 a0 18 5a f2 8e 9a cc 1c f6 de 39 f6 6e 18 56 ca 2b a4 a0 58 01 06 0a 04 89 4c 1a a8 15 1a ee 52 4c 44 a4 48 ab 53 2b 10 8a 99 86 e1 61 74 74 c3 66 22 45 5a 02 28 c4 04 82 14 88 48 11 31 4c 0c 9b 88 21 6e 00 74 e8 20 13 04 a3 78 47 31 29 7a 14 bd 16 a5 a8 49 43 10 00 28 86 46 d1 10 d0 30 80 20 00 41 6a 52 33 31 a4 08 22 82 81 d9 0c a9 5b dd 90 48 91 52 00 00 44 c4 44 44 66 22 22 76 1b de ec 0d 02 50 30 60 00 99 bc 0b 86 d9 c5 0e 80 58 45 a3 30 44 33 a4 21 0d e9 0b 99 14 6b 98 61 d8 0c 2b 56 2b 00 62 c3 87 38 8c 0e 36 29 1d a4 5e bc 03 7b 93 09 66 18 52 a4 a0 58 Data Ascii: :Mr4E#Bxm[ucJ}KC#b23;XJf/fH0tGZ9nV+XLRLDHS+attf"EZ(H1L!nt xG1)zIC(F0 AjR31"[HRDDDf""vP0`XE0D3!ka+V+b86)^{fRX
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 93 e9 86 d5 4c 28 68 6f 7a 34 3d a4 07 d2 f4 a9 e9 de ea 32 94 5a cf b5 5e aa 99 b7 f0 d2 74 6f 7a e5 35 7b 05 28 d4 3e 16 ea ca 34 4c 43 19 a7 3a 4f 94 ea 8f f5 4d fe f1 60 23 07 10 60 42 97 22 62 08 62 53 41 77 ac f9 d4 ea 34 4e f0 e3 c1 28 43 a1 de d7 ba 8e 75 a3 6e 63 dd 28 15 28 56 60 0a 2e 18 65 ac 8d 52 a7 5a e7 5a c6 c2 f4 58 57 ea dc 04 35 de e2 eb e8 db c8 94 37 b1 00 ea 00 a5 10 79 17 9b 60 c5 b5 83 52 04 60 3f d9 71 81 01 0c 0a b0 9a 20 62 3d cc 14 50 5c bb dd 5d 64 d2 30 cd 6e 32 99 50 7c b2 a0 3b 1a bc c3 3b 66 6f 32 60 29 26 48 ad c0 30 87 74 58 ad 53 2b 28 30 cc 2c 30 17 c3 10 31 31 57 60 35 c3 8a 21 18 10 2b 36 41 74 c1 a4 a8 19 e6 10 cc 6b f9 dd 79 a8 e3 9f 95 47 7d e2 0d de 0d c3 74 33 3b 14 16 2c f4 85 61 5e 0d 41 1c d6 61 18 32 01 98 Data Ascii: L(hoz4=2Z^toz5{(>4LC:OM`#`B"bbSAw4N(Cunc((V`.eRZZXW57y`R`?q b=P\]d0n2P\|;;fo2`)&H0tXS+(0,011W`5!+6AtkyG}t3;,a^Aa2
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 38 4e 04 61 f5 d7 31 b3 c8 62 bf fa eb e2 f9 52 77 0b 16 8b 90 6b a6 c9 22 e7 ca 7f 7a 1e e9 52 56 09 89 ca ea 2e a4 49 c8 ff da 32 a4 c9 63 66 91 e7 91 9a d1 91 bb 84 44 e5 2f ed 87 e7 4c 93 e6 f2 0f e3 cb e6 f3 26 4d 16 59 e5 5c 8f 7c 1f be dd 86 41 bf 45 7f 46 bf 47 7f 46 7f 66 1c b3 d7 8f fe 3b 7d b1 1a c7 7c 1c 53 fd 19 be e8 c3 df 47 12 a2 23 ab 1c 2b e9 bb 40 f8 2e 24 fd b5 92 26 95 97 21 33 cf ef d2 e4 73 27 dc ae b2 af a4 57 21 e9 32 2a 59 69 12 12 6e 3e b2 db 56 fe d6 b2 af a4 ab c5 55 54 d2 ed 98 09 59 a4 55 6e 23 63 3c be 3c 8c fa 3b e3 40 bf 66 1c 4f c6 38 d1 ef 67 63 4c f4 5b be 3b 4c ce 9a 8f 63 36 8e f9 38 e6 77 fb 90 70 1f f5 af 90 ac 34 49 09 09 49 b9 cb 2a ab 34 09 b9 cb 2a b7 71 ff 7d 72 26 51 69 f2 fd 3b c2 fd 2a 21 d7 cc 2a 21 ab 84 Data Ascii: 8Na1bRwk"zRV.I2cfD/L&MY\\|AEFGFf;}\|SG#+@.$&!3s'W!2Yin>VUTYUn#c<<;@fO8gcL[;Lc68wp4II4q}r&Qi;!*!
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: ee 19 c9 f8 39 73 ea 5a eb f7 fb 7e b7 7b 08 b4 37 d7 76 f3 b7 06 6c db 96 bd 6d a4 fb 7e 5e f8 be ff d7 2f b0 6c 99 19 e2 d8 71 e2 60 31 dc e9 b6 1d 66 da 61 66 e6 76 3b a5 c1 2e 17 96 86 b7 ed d1 85 76 78 3a 4c 4d 9a 42 92 06 9c 98 41 92 6d 99 24 8b 7e f8 be f7 7d 9f 87 b3 24 db aa 6d db 76 22 4a 6b bd 8f 31 e7 82 7d f6 39 97 1f 33 53 4e 9c 63 66 a6 9f 60 66 29 a9 5f 50 8a 59 29 66 66 78 cc ef 89 0f ef bd d6 9a 73 8e 31 7a 6f 25 1c b1 6d e3 48 9a b2 d7 2f ce 66 7b df a7 3f 6c ff cf 46 fe ff ef f6 78 24 69 da 8e 67 d6 b6 ed a7 bd 4f db b6 6d db b6 6d db 5c ef bc d6 98 dd 59 63 b0 9c 1d d6 c9 23 b9 1f af 4c 1e 69 9b 99 e9 df 7e a8 6d 3b b6 db b6 ad e3 ba df ef ff 2b da b0 6d 23 b2 3d 32 db 36 22 db 36 32 db b6 95 75 db 36 46 6d ac ae f5 ff be f7 b9 3c 47 Data Ascii: 9sZ~{7vlm~^/lq`1fafv;.vx:LMBAm$~}$mv"Jk1}93SNcf`f)_PY)ffxs1zo%mH/f{?lFx$igOmm\Yc#Li~m;+m#=26"62u6Fm<G
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: a7 96 12 46 82 db 49 9e 16 4c d9 b4 d7 01 a8 ad 2d 0f b5 39 c9 28 78 97 1a c2 c1 a2 74 02 e4 20 5d 5f 6e 0f fa 41 79 e8 b4 11 d6 2b 6d 65 40 09 68 42 dc 46 08 5f 96 04 80 f0 7d fa 4a 0c 80 29 5a 16 9d d8 d9 6f 01 d0 56 ea f9 f6 c9 37 5e 72 f1 b6 16 7e f8 0c de 63 47 76 d0 42 dd 31 30 6d 82 b6 62 9b f6 46 9f af 41 0e 64 13 95 25 76 18 b5 ae 76 88 64 1c d3 d8 2e dd 27 75 14 a4 7d 9c 63 28 68 39 b9 d3 75 df 27 af 0b 16 2a 7b 03 c3 a1 41 50 14 b8 b7 ca 01 f3 9e 03 37 22 36 9d c1 0d ad e6 66 c8 01 54 d0 3c 6b 2d 65 ad 15 45 45 c1 c3 6a 68 d2 1b 80 c5 50 35 03 e5 7e 9f 92 82 70 83 5c ca 57 4f 55 36 05 0f e2 2b 03 cf 5c 46 87 62 23 92 c5 4b 2d 24 e9 09 82 09 ac b7 6f ae 6f ee eb 4b 6f ad 21 74 c2 f2 96 5e 24 46 8d 9a 24 89 9c 35 6b bc 4b a7 dc e2 11 87 ae 2c 58 Data Ascii: FIL-9(xt ]_nAy+me@hBF_}J)ZoV7^r~cGvB10mbFAd%vvd.'u}c(h9u'*{AP7"6fT<k-eEEjhP5~p\WOU6+\Fb#K-$ooKo!t^$F$5kK,X
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: d3 c2 1c f4 87 f5 da 06 c7 0d b5 25 59 9a ed 8a 06 02 55 82 1d 6b bc 86 4d 5b 1e 6c 3c 24 54 9f 25 d6 4e 76 bd 6e 2d 1e 4c 0f 03 74 b6 2d 32 5b b8 23 17 23 83 92 5d cf de a8 a1 b8 0b b3 b6 ee a8 f5 51 eb c5 50 13 85 9e b5 3d 7e fe f7 bf 3d fc e4 ed ef f4 dc 71 6b a0 30 e2 8e 7b 99 98 07 a7 63 54 62 0e 45 74 f5 be c6 ba 77 86 f4 6c e5 65 2e 1b 21 5a 8d 36 20 90 da 59 8a 90 9a 0e de df c9 e9 a1 8e 87 ab 26 ac c3 56 e9 56 4b 0a 6e e3 87 d1 46 d9 ab 8e ac 6b 34 61 97 a2 c2 a0 7a 28 d0 ec f4 de c7 8c e2 ca 9b 69 81 4b f2 d9 3e b9 d4 b6 16 b0 38 8f c1 e3 c8 e8 a0 f0 a6 a1 70 94 ad 98 d6 64 41 0b 19 7d 3f ee de 26 34 52 34 34 01 e3 20 c2 a5 f2 76 2a 91 b4 3c 66 c9 14 47 21 ea ab ad 16 e0 f3 c2 9b 0e ba 00 c2 bb 87 df e3 d4 c5 98 50 1d 8e 38 8c d3 a0 5e 31 bf 91 Data Ascii: %YUkM[l<$T%Nvn-Lt-2[##]QP=~=qk0{cTbEtwle.!Z6 Y&VVKnFk4az(iK>8pdA}?&4R44 v*<fG!P8^1
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 13 37 38 fe 6d 61 16 dc 53 da 71 8f e9 3b 8c 34 a0 c6 9b a2 96 ec b5 9e 8f 2e 45 da 2c 6d d7 4e 9b d9 6e 9d c7 7b 51 24 13 05 6e df be df fd e5 6b b3 d7 ce 17 c2 d5 b8 8d 63 0e a0 78 69 d2 7a 6f 67 ee 0a 24 69 78 57 fd 4e 47 76 d6 fa ea f0 e1 46 ed 6a 3d bb 8e 1c e6 fa c3 1f f2 11 ef 03 bc dc 2e af 6d 4b 09 9e dc 51 81 7b df 3a 03 aa db 35 1c c7 2a a6 11 a0 ab 2a 7a bf 67 5d 95 b1 e8 b4 91 aa 60 5e dc 8d 5b 29 43 c6 2c e5 96 e5 ac 6a 85 01 03 38 75 ed c1 a6 13 ab 07 af c3 a4 d9 b6 ff e7 f6 b5 b5 b2 e0 6d 13 0b 9d 88 a5 91 49 a1 4a 76 a9 9c e9 46 82 03 7a 7d bc 84 35 1e 33 dd 84 cb b5 c3 e9 0d 6e bd 35 7b 09 dd c0 e8 96 40 06 2a 62 33 de 8c 12 8d 78 22 b0 77 df 0f 9d c8 d8 0a 55 cf 56 e5 09 da b9 f6 e6 c3 4d 22 8b f4 fa 9c 5b 9a 7d 77 b9 9e 2b 50 dc 9d fe Data Ascii: 78maSq;4.E,mNn{Q$nkcxizog$ixWNGvFj=.mKQ{:5*zg]`^[)C,j8umIJvFz}53n5{@b3x"wUVM"[}w+P
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 51 ae 9d 37 39 a9 39 0d ef 0e 4c 82 dc 8f bc df c6 6f db 54 9d 81 8c 36 c2 c5 d6 05 bc 56 b4 9b 8c 5f 84 99 e6 99 3f b8 9b 5e da dd fe 73 37 af 68 25 85 08 02 3d 13 1b b8 a3 45 9b 4f 7f c7 6c 94 38 2b 3a c5 0d 6e 69 b1 49 0e 6b e9 97 82 fb 54 98 46 34 19 32 50 1a 4d 43 39 17 32 c7 56 6e 8b df 8f bd af 7d bc 42 7a b1 9d 6a 04 5a 78 2c 12 d1 e6 3e 2e c6 e9 5f ff 5b 4f fc 08 a6 01 00 df 76 95 1e 01 78 0a 57 63 e3 d6 96 3f f6 bd 95 f2 91 b9 9e a2 a9 23 0e 7c a5 fd cc ef 72 6c ef ce 7a 2d ed c0 c4 f7 dc fa ea 5f 6e f7 27 4e 93 d3 a8 2f 9d 79 fb b0 a5 f2 c6 e6 43 c1 10 a4 95 cd 94 3c 1d 35 49 b1 1f 6e 87 78 eb 44 8f b2 24 35 68 9e de 7a a1 5c f9 56 1f aa 7d be ba dd 26 a9 10 ef 0e a6 e9 8b 81 e6 ab f3 da 4d 56 3e 7a 86 91 48 fd ff a7 21 83 70 5a be 34 e7 c4 1a Data Ascii: Q799LoT6V_?^s7h%=EOl8+:niIkTF42PMC92Vn}BzjZx,>._[OvxWc?#\|rlz-_n'N/yC<5InxD$5hz\V}&MV>zH!pZ4
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: d1 42 79 f0 2e d2 58 6a 6c 56 71 c3 12 96 cb 11 f6 eb 3b e7 4d 80 4d 32 a2 a8 b3 d6 1d 2f 98 99 08 a2 63 ed 24 6f 03 d0 88 d8 e2 49 c3 22 25 35 72 50 d1 9a 64 74 54 6a b1 ad 45 0d d9 55 7d c0 af a5 b8 e7 38 23 11 09 87 20 22 a7 92 a9 02 f3 59 f2 29 03 a7 e2 b5 4f d8 a0 6a 09 16 c4 f7 34 3d 9f af 71 49 ca 4a d4 bb de 7a 83 75 0e 47 78 09 06 5b 69 24 07 8b 6e be db 1a 88 0d 21 65 6b 59 b4 b5 c4 a5 5a b8 e9 2d d6 e8 e9 3d e9 cd a6 62 9a 4e 57 be 20 72 50 6a 7b 12 47 02 9f 8a 94 24 16 ce 4c 9c 8a 9c 73 92 33 23 bd a9 60 21 23 75 29 70 9b 29 83 21 a0 91 80 82 f1 d4 98 4f 91 c2 84 7c 48 67 08 14 67 de c9 e9 70 79 fa 2a a3 59 3e c2 6b 5d 2a cd ee 28 cc 47 1d 3d a5 23 34 d2 50 33 a3 30 62 b2 80 26 68 ba 0c 59 cc 2e 5f 78 2f e6 6f 01 4c ae 38 d6 58 48 0a 23 f4 11 Data Ascii: By.XjlVq;MM2/c$oI"%5rPdtTjEU}8# "Y)Oj4=qIJzuGx[i$n!ekYZ-=bNW rPj{G$Ls3#`!#u)p)!O\|HggpyY>k](G=#4P30b&hY._x/oL8XH#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.6	50086	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	510	OUT	GET /U7fw6rbhxAsW-A213aSU5OxrZ4_Y1CwVBfd5Z4fWigb75K5efqpqe-u5GO7vwtSJVeo=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 185044 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4105 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	720	IN	Data Raw: 52 49 46 46 cc d2 02 00 57 45 42 50 56 50 38 4c bf d2 02 00 2f 0d c2 49 00 4d 40 0c 80 36 6c 33 70 08 09 74 ff 1f 6c 3b cd 76 41 44 ff 27 40 92 12 cf 92 14 65 af 44 1e 4a 22 25 b1 ad 2c 2d 25 b1 14 29 76 32 65 93 47 8e 35 47 bb f8 d1 ac 39 91 93 44 b2 b5 f4 e2 8e 13 4b ce ec 3b d6 3c 25 5a 66 5e 48 0b 25 52 94 6f 1d 27 89 26 3b 7b 29 0b 27 89 95 d5 fc cc 49 2e 2b 4b 29 b1 f4 4c f1 24 69 91 c8 53 22 4d 52 92 48 96 a5 e2 db b6 c0 95 58 d2 19 65 e1 44 73 e2 ac cf 85 72 8b fc e6 18 6d cb 47 52 6c d3 b7 22 dd b9 12 67 be 6c 4a 11 c9 05 37 6b 66 b6 33 8b 2d 60 b7 66 53 24 89 9d eb 36 68 9b c4 c0 d1 92 6f c4 89 56 2d 47 c9 12 64 59 10 26 7c c7 21 89 57 e9 95 57 64 49 b6 2c 49 b6 2c 71 3b b6 9d 93 ed 1b 25 23 c9 4e 64 93 30 66 1b d3 5d b4 80 d7 22 41 b6 20 5a 74 Data Ascii: RIFFWEBPVP8L/IM@6l3ptl;vAD'@eDJ"%,-%)v2eG5G9DK;<%Zf^H%Ro'&;{)'I.+K)L$iS"MRHXeDsrmGRl"glJ7kf3-`fS$6hoV-GdY&\|!WWdI,I,q;%#Nd0f]"A Zt
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 76 64 ce b9 64 fa 44 7a 6b ad ff 0a db b6 6d 98 74 cf 3b 50 4c 9a 76 91 aa 2d f4 b8 0c 4e 5c 82 20 4a 79 85 14 14 2b 90 09 05 86 c5 66 35 a9 16 aa 7c 5a 09 31 b1 62 cd 41 b5 c0 28 16 aa 4c 6e c1 c0 19 c4 42 ac 58 d3 10 0a 09 11 91 14 98 58 31 09 42 82 98 49 60 0e 41 18 30 c0 66 18 41 71 91 12 52 f4 2a 7a 2f 4a 51 b5 9a 61 08 42 31 a9 15 35 43 6a 81 60 18 82 61 55 ab 86 04 56 0c 13 23 90 c5 02 eb 8c ce c0 62 c5 4a 81 20 88 98 84 98 d8 42 4c 4c 89 c9 5b bc 89 08 52 64 42 20 d8 ec 62 04 a1 98 22 08 66 16 b5 42 33 35 b0 9a d5 ac ff d8 ac 44 2d b4 20 16 44 89 6a 81 60 36 b9 9b 1e 0c 88 59 19 60 9d c5 45 88 37 9b 11 5a 60 c5 8a 94 28 81 88 95 10 11 d1 02 53 4d 91 09 82 14 c1 8a 14 59 94 20 08 c4 90 6a 54 8d 52 c4 19 08 5b 4a f4 bf a8 46 cd 66 aa 61 62 62 25 88 Data Ascii: vddDzkmt;PLv-N\ Jy+f5\|Z1bA(LnBXX1BI`A0fAqR*z/JQaB15Cj`aUV#bJ BLL[RdB b"fB35D- Dj`6Y`E7Z`(SMY jTR[JFfabb%
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: fa bd e9 bd eb 63 d6 5d fc cb ae 0f 9c d2 87 74 97 9a 68 d2 87 44 3b 06 06 06 ec f6 cb ed 76 ee f5 05 86 18 e1 b4 0d 9c 81 61 b8 c8 e4 9b 5c 7a 1d 75 12 bf 9e 4d 65 ae 5d f5 5d ad 7b ab 7b 2b ad 0e 95 a6 67 d7 d3 90 05 29 32 bd 94 3a d5 ba d6 d2 8a a6 a7 a9 d6 2e ff e1 be de fe a5 35 4e 29 b3 ee b3 5e 8f 6a 3f 73 4a b1 aa be ae e2 8b ee 52 5e 8e b5 19 17 76 c8 46 65 4d ad 3e aa 87 bd d9 64 d2 29 48 29 c4 66 36 23 88 4f a1 14 43 88 6f 76 e2 6f 44 37 3d 8c d4 26 8b aa 61 62 84 d3 90 92 2a 71 51 b1 59 2d 24 55 5c c5 66 88 a6 df 7f de bf fd 63 67 2a 96 f4 a5 ca ec f1 a8 fd 5f 75 29 52 d5 ac ff 7e 59 9f f4 e7 2e da 17 3b 06 76 08 65 6d aa 4d 0c 9b 10 29 66 6f 56 35 35 08 dd ea 51 1d 54 0b 82 20 8c 82 70 0b 5b 60 7a e8 e1 2e 44 d5 88 12 98 2d 0c 31 a2 11 13 02 Data Ascii: c]thD;va\zuMe]]{{+g)2:.5N)^j?sJR^vFeM>d)H)f6#OCovoD7=&abqQY-$U\fcg_u)R~Y.;vemM)foV55QT p[`z.D-1
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 03 e9 b7 0a 0d 95 31 30 73 96 8b 86 40 c3 ab 5a 31 43 fa 3a 90 7e 8a c5 e7 1f c2 db 77 ae b7 c9 ef 95 ea a4 69 31 c5 a2 9b ae 41 60 c1 39 b8 c3 9b 1e d6 81 f0 5b ac fb 40 2e 16 24 e8 04 12 0f ac 58 d1 10 78 60 c5 d7 8d 3f 3b 77 88 45 43 e2 db ce 8a 15 e1 66 45 e0 1c ac 68 58 11 f8 fa a4 ad eb 86 97 31 79 86 37 05 85 cd b6 58 f1 c0 36 89 c5 39 2e 7f 3c 09 04 1a 02 01 fa 07 81 c0 62 0c 84 fb 40 a3 c0 af 8d 40 e0 1e cc 0e 1d 85 f0 d1 47 ce ce 49 e0 eb fe 71 60 f5 c1 c7 d8 cc 41 c3 c7 b8 0b 34 8c 39 06 de dd a2 be 59 f0 fb f9 ed 8a d5 db 73 dc e6 3a 0f cc 90 8b c5 9f 81 40 20 17 0d 0d 7d 71 0d fa a2 f9 64 a5 f0 49 b8 88 45 2e 62 7d fb 7d 67 9f 04 ee f0 40 58 f7 c5 8a 66 7a 20 10 68 68 f0 f8 31 17 b9 ee de d4 d7 14 8b 80 c2 0c 1f e3 93 7d bc 11 eb 9e 21 b1 6d Data Ascii: 10s@Z1C:~wi1A`9[@.$Xx`?;wECfEhX1y7X69.<b@@GIq`A49Ys:@ }qdIE.b}}g@Xfz hh1}!m
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 66 86 70 3a 1d 3b cc 66 3b 31 c8 96 31 b6 98 59 97 19 0e ee bd ab 7e bf f5 2a 4e 3a 33 6b 45 7f 73 c0 f6 df b9 dc b4 da ef f7 5f e5 5d bb 4c 93 34 92 46 bd cb 2a ee 25 14 57 82 9d e0 d0 12 3a a4 51 72 20 3d d4 1c 0e 3d b4 24 90 f6 39 5f 62 48 c1 a1 86 03 27 f4 de c1 05 6c 63 35 cb b6 a4 51 d7 8c da 8c 34 75 ef b7 ac b5 fe bc 6d db 56 6d 47 b2 d4 5a 1f 73 ed bd 0f 48 32 99 39 bb 07 73 c4 4d 66 66 66 fc 85 5b f2 89 99 99 99 f9 07 18 df 98 39 f3 32 53 b8 07 ba 87 87 99 74 a4 73 36 ac 39 47 b8 82 24 2b 6a 06 30 77 f2 46 f0 36 f8 ef 8b d6 b6 65 73 5b db ba ef e7 fd 7e 2c 66 52 81 b0 c4 92 85 96 31 30 92 c1 bc 36 33 33 1e 31 33 33 33 33 8f d0 48 e2 38 46 d9 b2 18 4a 52 95 8a 54 a0 62 fc f1 fb de e7 6e 4b ce 58 87 e3 98 02 ff ff 8f 46 e4 f3 bf bb e7 ee 7f 67 24 Data Ascii: fp:;f;11Y~N:3kEs_]L4F%W:Qr ==$9_bH'lc5Q4umVmGZsH29sMfff[92Sts69G$+j0wF6es[~,fR1063313333H8FJRTbnKXFg$
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 96 64 14 bc 4b 0d e1 60 51 16 1a 91 bd 74 3d 1a 37 fa 51 79 e8 f4 11 b6 2b 6d 65 40 09 68 42 dc 66 08 5f 2e 24 21 e3 ef d9 17 02 48 9c 51 e3 a2 d3 36 f7 c1 08 cc 2b f5 7c fb e4 9b 2f b9 78 db 0a 3f 72 82 07 d2 08 19 6a 4b 1b e3 88 68 13 b4 15 db 55 1b 7d be 05 3b a0 9b 89 99 82 e3 69 e8 c6 3e 53 a8 38 c6 75 ab ef c7 e9 c4 38 4c 2f 4e 4b 3a 3c fd c3 fd de d7 5f 17 11 47 76 43 e1 49 83 a0 28 70 6f 93 03 e6 3d 07 6e 44 6c 3a 93 9b 5a cb dd 90 03 a8 a0 79 b6 5a cb 5a 2f 8a 8a 82 87 d5 d1 a4 37 00 8b a1 ea 06 0a bd 57 e9 13 c9 01 79 28 5f 23 4d d9 14 3c 88 af 9c f8 e4 e7 28 24 83 42 0e 5e 6a 21 c9 48 10 2c 60 9d 3f 54 7d 77 4f 59 7a e4 40 d2 09 cb 5b 7a 91 18 35 6a 92 24 72 d6 ac f1 2e 9d 72 8b 47 1c ba b2 60 d5 1d 37 08 9f 34 2b 05 82 5d 0d f2 27 b1 22 17 8b Data Ascii: dK`Qt=7Qy+me@hBf_.$!HQ6+\|/x?rjKhU};i>S8u8L/NK:<_GvCI(po=nDl:ZyZZ/7Wy(_#M<($B^j!H,`?T}wOYz@[z5j$r.rG`74+]'"
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: d0 98 e8 82 57 33 b4 e5 c1 c6 43 42 8d 59 63 ed 64 d7 eb de e2 c1 8c 30 10 57 d7 6a ce 88 6f a4 34 e5 44 c9 56 32 05 05 8a 9b c1 da b6 a3 36 46 6d 14 43 4d 69 92 31 32 c0 9b de bb 1f fd dc 73 ee f2 f4 b8 75 50 18 71 c7 bd 4c cc f3 87 b3 ac c1 1d 92 e2 ee 7b 0d ba ef 6a d8 d3 c6 e5 2e 83 32 a1 4e 5b 10 40 c3 d5 2c c4 68 76 f0 7d e7 0f 2f 78 76 f2 a8 33 1e 87 ad 31 ac 95 14 dc e6 0f a3 8d 52 ab 8d ac 6b 34 61 97 a2 c2 a0 46 28 d0 ec 8c de c7 cc e2 ca 9b 69 85 4b f2 d9 3e b9 d4 f6 16 b0 38 b7 89 67 a5 4c 9d 28 3c 34 29 1c 65 2f a6 37 59 d0 e2 1c ed af ea 87 81 20 26 20 04 8c 83 08 97 ca db a9 44 12 61 3a 78 28 2b 95 44 7b f5 d5 03 7c 5e 78 d3 41 17 40 78 f7 e5 f7 71 da 62 4c a8 01 47 1c c6 e9 50 17 51 0f 42 2d 5c c5 d1 23 1c 95 1c bc 82 39 43 7d b3 6e 7c f3 Data Ascii: W3CBYcd0Wjo4DV26FmCMi12suPqL{j.2N[@,hv}/xv31Rk4aF(iK>8gL(<4)e/7Y & Da:x(+D{\|^xA@xqbLGPQB-\#9C}n\|
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 29 6a c9 b6 75 7f ea 52 4a 0c d2 38 36 6d 66 d5 06 4f f7 a2 48 26 0a dc fe f2 7e 8f 97 af dd de 3a 5f 98 7e 8c d7 78 ea 23 44 7a b5 e9 d7 3b ec 79 52 20 c9 cc da 9a df e9 c8 ce da 58 03 3e dc 44 b2 52 4e ad e3 86 e2 ea f3 53 7d a6 ec 01 5e 6f 97 d7 be a5 04 cf ee a8 d8 7d 81 0e 10 f5 ba 4f df 31 0b 6c 4a a2 2a 0b bf d8 9c 2a 15 49 b6 88 95 70 be 7f 1b af 32 34 14 2e f2 ca f4 68 da 60 c0 00 4e 5b 35 d8 74 62 8d e0 75 98 34 fb f6 bf df be b5 5e 16 bc ed 62 a1 13 b1 34 32 29 54 c9 2e 95 b3 dc 48 70 40 6f 8f 97 30 65 4d 07 1d c2 c3 95 c8 39 1a dc 46 eb f6 1a ba 81 d1 6d 49 02 b0 90 a1 6e ce 32 35 e2 89 c0 de 7f 3f 74 22 63 2e d4 72 ce 15 1f 8d f9 3c 76 b7 c3 4d 22 8b f4 f6 9c 5b 9a ba bb 5c 2f 15 28 ee 4e 7f 72 a1 a0 dd a2 ab af 3f 67 5a ec dc 28 30 b9 b8 ea Data Ascii: )juRJ86mfOH&~:_~x#Dz;yR X>DRNS}^o}O1lJ**Ip24.h`N[5tbu4^b42)T.Hp@o0eM9FmIn25?t"c.r<vM"[\/(Nr?gZ(0
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 33 3f 8c ae 0a 1b 06 6a 10 5d 6c 43 c0 5b 45 bb cb fc 45 74 d0 bc e7 97 b6 ee fc b6 f9 b6 bb 57 b4 92 42 04 81 9e 89 01 b6 82 c5 70 96 67 cc 99 25 ce 86 4e 71 93 5b 5b 6c 92 c3 5a fb a5 e0 3e 15 a6 93 20 27 01 b8 9c 36 9b c8 f3 c0 c0 55 c4 63 f4 be ea 9e 78 78 85 f4 62 3b d5 0c b4 f0 58 42 05 ac ed c8 20 71 ea f7 fd a7 13 1e 85 cb 00 80 6f 55 a5 47 00 21 e2 6b 83 f1 6a 47 78 3c 6c 1b e6 c7 dc f5 91 60 a2 0e ac ac bf f5 d7 f8 3a e8 6a 6b 63 9f 1c fc 9e 3f 7e fa 2f b6 ff 93 9e 93 6c 9a 2d 4f de 7e dd 52 79 63 f3 a1 60 08 d2 c6 6e 4a 9e 81 9a a4 d8 8f b7 43 bc 0d a2 47 59 93 1a 34 cf 68 a3 50 ae 7c 6b 0f 55 9d df dc ee 93 54 b0 67 3d 34 cb 62 42 d4 55 f8 d6 2d 56 3e 7a a6 91 48 fd 5f a7 09 cd f8 b0 fe b2 79 4e d0 b8 8a 29 cd 92 69 80 bc 8a de be c0 b2 60 32 Data Ascii: 3?j]lC[EEtWBpg%Nq[[lZ> '6Ucxxb;XB qoUG!kjGx<l`:jkc?~/l-O~Ryc`nJCGY4hP\|kUTg=4bBU-V>zH_yN)i`2
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 3a 30 53 20 1a 15 73 f4 da 90 cc 1c 2f 98 1b 11 44 c7 da 49 de 26 a0 11 b1 c5 93 86 45 4a ea e4 a0 a2 75 c9 e8 a8 d4 62 db 8a 1a d6 dd f8 ba af 35 79 f3 9d 52 48 c4 93 52 48 32 ca 59 09 e6 b3 e6 53 26 4e c5 ab 4e d8 a4 66 09 16 c4 f7 34 23 9f af 79 49 ca 4a b4 bb d1 4a c0 da 27 a7 f0 21 31 31 4a 23 39 58 74 f3 dd de 40 0c 24 29 20 e7 a8 39 3c 2f d5 c3 4d 6f b1 66 4f ef 49 6f 86 91 63 7a b8 b3 48 12 8c b0 4b 13 11 e0 02 a2 21 88 4f 3a 3d 0b bd 3c e5 c9 48 6f 2a 58 c8 4c 5b 0a dc 6e 94 c1 10 d0 48 40 c9 f1 a1 41 98 85 96 3a c9 90 c1 14 28 ce 6d 27 67 c0 e5 19 ab 8c 66 fd 08 6f 75 a9 34 d5 51 98 8f 3a 7a ca 40 e8 a4 a1 66 46 61 c4 64 01 5d d0 74 19 b2 98 2a 5f 78 2f e6 b7 00 26 3f 78 3a 30 31 2c 95 68 54 18 38 fe c4 40 de 5f 4c 17 52 87 03 c7 d2 bc 19 54 8b Data Ascii: :0S s/DI&EJub5yRHRH2YS&NNf4#yIJJ'!11J#9Xt@$) 9</MofOIoczHK!O:=<HoXL[nH@A:(m'gfou4Q:z@fFad]t_x/&?x:01,hT8@_LRT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.6	50087	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	505	OUT	GET /z5YSgrDgdBbVQejCzipNpUkLnRLYVUrHDLFpe4ZDz9lLZ-dM0XaUaYyv2X9gwzV-iEU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5880 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform Age: 9599 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	722	IN	Data Raw: 52 49 46 46 f0 16 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c a8 16 00 00 2f ff c0 3f 00 09 47 6e db 48 12 ec 42 50 48 d9 fd ff 07 d7 3e eb 35 a2 ff 13 80 3f b9 9c e0 12 19 11 68 11 08 a0 8d c5 25 45 14 cc 5b 66 ee d5 20 40 40 09 33 33 22 b7 68 4c 47 b1 d1 cf 48 66 6e a9 5e d3 07 f0 cc a7 f8 4a 79 a2 de a1 24 af d8 1a 72 66 ca f6 92 25 61 e5 b1 24 ad 60 e8 9c f5 3e b0 6b 2f f0 10 af f9 d6 aa cb ad 6f bb 80 23 d9 b6 6a a5 bf fb e7 44 14 e1 09 b1 f9 8f 4d b3 ab 78 ea 44 92 24 21 ca 40 21 4b 22 5b f2 ff 57 21 51 a8 8b 0b b7 91 24 bb 4a 9b 5f 20 9e 48 60 2c 6c f2 8f 8a 00 30 fa 3f 01 0a ff e3 2d 43 02 04 5d 96 19 02 60 75 95 2f b7 96 6b d4 c6 ef be 0b 8c fd b9 18 60 30 c0 48 a6 04 01 00 06 03 1c 00 d6 cc 08 20 68 93 31 Data Ascii: RIFFWEBPVP8XVP8L/?GnHBPH>5?h%E[f @@33"hLGHfn^Jy$rf%a$`>k/o#jDMxD$!@!K"[W!Q$J_ H`,l0?-C]`u/k`0H h1
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: a0 6a bc 94 7f 04 0d 7c c6 e0 f7 3a 83 45 79 4f 04 d4 3f 1e ca 2f 82 a6 6c 50 33 00 39 69 50 33 8e 1f 74 1c b4 91 e4 48 ee bd f4 4f e1 f9 a3 7b 04 79 da 41 1b 49 8e 54 dd 17 f8 93 7b 2c f9 bb 62 02 1c c0 78 ff 8f f7 ff 78 ff 8f bb e1 0d 2f bb 1f 7f ae 5f 7e bf 5f 59 fb 29 e9 e4 95 e4 55 1c 82 16 5f 81 f2 ca 8f 57 cc 3d 3a 29 32 4b 27 5f 21 ed 2d fd 80 c7 a7 e2 be ed 03 7a 17 7a 43 6c dc 45 c9 13 c5 ab e4 ab 9b fa 91 73 4e 76 9d 5d 92 9d 3c f6 c2 bf 63 f7 e7 d7 ab af 82 0d 15 74 52 41 09 4a 14 b6 31 1d b6 e9 36 36 28 41 89 d2 77 94 ed 51 f5 ae 43 50 42 11 25 14 a9 31 9f c4 6f 79 d7 6b 4e 38 e5 01 d9 24 35 1a 5d 71 8f 9a a8 ea 12 b6 b1 79 15 28 41 05 15 d4 0a 45 14 a2 44 17 a2 b0 8d 8d f1 53 21 a8 40 05 25 ba 10 85 d4 98 62 29 6c d3 8d 1a b3 bc cb ee 49 87 Data Ascii: j\|:EyO?/lP39iP3tHO{yAIT{,bxx/_~_Y)U_W=:)2K'_!-zzClEsNv]<ctRAJ166(AwQCPB%1oykN8$5]qy(AEDS!@%b)lI
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 45 2f 02 94 aa e0 9b f1 8e dd 9f 55 0a 5a 5f 11 3a 25 6c 1a 16 8d 31 03 19 c6 42 e2 2c 7b 85 22 3a 64 d7 27 25 74 b2 ae 6c d2 da 11 bf 80 4c 0b 5f 4b bb 6d fb cf eb fb 71 fd 55 3f 0a 9d 1d 14 cb 93 0d 4a 50 9e 4d c3 4b cf 22 e9 a3 a0 80 58 85 41 fb f7 b5 cb ee 52 21 15 05 74 fe d1 9e 89 35 eb f5 43 3f bc 1d 3a 3b 36 22 57 1a 76 a8 b1 a6 65 29 42 1f 75 9e 55 c2 dc 96 8d 92 73 4c e6 d9 6b 16 29 0a 28 8d 8b e9 0b 0b 3e f0 3a 4e f4 7c b4 05 81 16 5a 63 50 82 f2 ec d6 fa 70 1a 25 4c 60 67 ed 85 cc 76 93 a4 f1 eb 39 97 ee aa 8a 27 9a 30 02 b6 a0 e4 46 5a 54 ba 25 b5 14 1f 9d 25 8b 05 99 08 20 de e0 a2 b3 22 7a 1a 44 01 76 0c 92 5b 1d e4 66 25 b2 05 dc fd 64 cf f2 c7 25 ce ee 59 ee d4 de 33 0a 3f 27 02 e0 98 fe 6e 93 4e 5e a8 af 66 68 f4 52 99 97 29 ac 9f 9d 55 Data Ascii: E/UZ_:%l1B,{":d'%tlL_KmqU?JPMK"XAR!t5C?:;6"Wve)BuUsLk)(>:N\|ZcPp%L`gv9'0FZT%% "zDv[f%d%Y3?'nN^fhR)U
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 28 39 0b 34 14 36 12 db 86 84 8f c7 08 cf 4e 93 35 a1 c4 ad b5 50 b7 96 c4 79 36 c0 d6 67 cc cb ea 62 9a 03 1e 76 a3 5d 64 4f c0 a6 7b b6 50 19 2a 03 71 9e dd 60 61 c4 ff db 40 c3 40 72 34 63 01 ee 25 53 14 c9 6c ac 69 4c 83 12 f4 34 42 21 f9 29 bf 42 f2 02 4a 1d ed 42 6b 97 6b 26 24 27 0b b0 f7 50 0b 0d 54 50 82 cb 99 56 38 62 33 e3 aa 5a e8 92 38 de 86 e4 09 24 ea b0 0a d4 42 03 15 94 e0 22 39 8d 36 f0 12 a4 ee a5 18 59 0a f7 a3 61 2c a6 ba c2 da 0b 62 ba bc e1 85 e8 69 08 17 30 62 03 3a b1 03 72 34 5a 0a a2 00 44 b9 55 63 33 54 50 82 12 ea 34 e3 82 21 cf 29 46 cc ed ed 68 0d 48 e9 80 30 a5 16 ea d6 9a 2e 42 9d 68 2f c8 98 11 d9 74 8d 25 8e b7 22 4f 20 09 30 2d 54 86 0a 45 58 45 21 d9 67 41 b0 5d d7 d8 2e 3e 93 05 72 3c ab a1 7a 02 dd f8 11 15 68 42 09 Data Ascii: (946N5Py6gbv]dO{P*q`a@@r4c%SliL4B!)BJBkk&$'PTPV8b3Z8$B"96Ya,bi0b:r4ZDUc3TP4!)FhH0.Bh/t%"O 0-TEXE!gA].>r<zhB
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 5d 7b cc 11 07 53 e4 1a 06 18 56 dd 1e af 19 27 da c0 c0 67 e2 e5 35 58 9c b4 06 45 62 ba d4 5d 84 ae 7e 03 5b 7d e0 92 61 cf 36 8a 67 0a 1f 22 59 63 6f 06 24 1e f6 3e 1e f6 7e d0 1b ca 13 d4 ca fd 6a d4 73 a3 3a 01 06 eb ea 3d a8 40 03 e5 59 11 04 f0 fd 6c 61 03 12 a6 ef e4 a8 7c e6 8c 49 91 03 58 f5 c7 51 0b 2a 0e aa 4d 42 05 2a 28 59 85 a8 e1 25 6b 80 60 9a 71 b6 9c f0 53 cb b3 8a 1c 39 7d f7 4a d9 e2 46 5c 9b 0f e1 1d 1a 63 03 95 a5 08 05 be 08 b2 e1 ff fd e9 4f c7 c5 5a ac f6 e8 c3 bd d7 dc 7b 1f 77 fa 38 7c 6a 74 f7 ff 33 31 63 6d 5f 6e 7e 55 e3 9e 97 04 77 1b 7a 4f 96 ba 27 d4 3d be 00 53 de 7e 7b ca 61 fd ef 4f bc fa af 6e b2 70 ff db bb e7 fd be ff c9 73 ef 8f e4 8d 29 25 ce e5 aa 83 d2 a8 cf 1f 9b 94 e2 55 62 f4 3c bf 7e f9 d5 fc 4c 5b f4 ab c7 Data Ascii: ]{SV'g5XEb]~[}a6g"Yco$>~js:=@Yla\|IXQMB(Y%k`qS9}JF\cOZ{w8\|jt31cm_n~UwzO'=S~{aOnps)%Ub<~L[
2024-04-19 14:06:56 UTC	138	IN	Data Raw: 27 f4 2c 6d d9 06 f9 84 d9 5b 1d 45 29 8e 14 ee d6 42 9c 79 11 c0 02 58 a0 e0 a9 57 94 52 4a 04 82 cc 67 66 61 4e 83 62 f6 54 ac fc 89 fa 44 18 64 56 ca 27 0c 8f 2d 51 f4 c7 1f 7f 44 90 cc 7b a8 b7 5f 7a 0b ef 2d a8 8c 22 01 81 d5 7e 4e 3d 18 80 08 24 e8 e3 6d fd b5 ff c7 fb ff 2f d4 06 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: ',m[E)ByXWRJgfaNbTDdV'-QD{_z-"~N=$m/EXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.6	50089	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	505	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5890 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:15:54 GMT Expires: Sat, 20 Apr 2024 11:15:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 10262 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	721	IN	Data Raw: 52 49 46 46 fa 16 00 00 57 45 42 50 56 50 38 4c ed 16 00 00 2f ff c0 3f 00 09 58 92 e4 d6 6d 6a 77 01 d1 28 c0 f7 3f b0 1e 00 6d 27 df 11 fd 9f 00 fc 9b 95 3d 6b 50 37 75 c7 0e 5b fc b8 da a0 53 e2 7c bc 1e d4 83 74 f7 f0 15 e1 7e 54 8e 84 67 46 00 e1 8b e4 84 3b 60 51 b9 c3 cd 54 da 72 b0 b4 4e 55 53 45 93 7c 55 e5 90 48 93 fb 22 39 23 09 b4 d8 00 48 80 36 dc 2f b2 06 0c 00 12 67 45 60 e0 32 eb 33 20 cd e5 c5 d3 1e 77 bd ab 17 8d ff eb 02 72 6c db a6 ad d1 7c f8 d8 df 36 f3 8f e8 47 60 1b 87 9f 6d 38 8e 64 bb 56 ea 9b d0 8d 9e be b7 f3 3d fb 5f 13 31 22 44 44 6e db 48 72 24 de bd 34 b5 a7 ca 7a 7c fe 11 5d 08 67 be 04 fa 3f 01 12 fe cd f7 8d 72 fc 0a fa 68 d1 f6 41 de bf c2 e6 d4 e3 e9 d2 b0 ee 82 76 ab 4b c3 37 64 4a b6 a3 4f 84 15 2b c0 7c 20 8d 9e 75 Data Ascii: RIFFWEBPVP8L/?Xmjw(?m'=kP7u[S\|t~TgF;`QTrNUSE\|UH"9#H6/gE`23 wrl\|6G`m8dV=_1"DDnHr$4z\|]g?rhAvK7dJO+\| u
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 52 35 b6 6d db b6 6d db b6 6d db b6 6d db 6c db aa 4a a7 cb 94 43 db b6 a9 3d fb dc 8f 23 1f 7e db b6 6d b3 8b 93 2a bd ed a4 67 9b fc 55 ac ca b6 f9 db b6 6d ff df bb 27 26 60 07 de f1 ff 3b fe 7f 27 a9 41 0e da 39 60 1c b0 88 4b 38 13 9e f1 33 9c 67 ea dc 3a 33 c6 05 38 e4 d7 97 f2 fd 59 c6 bf b6 14 bf bd c3 a5 2d 93 d5 1b d9 e2 a8 67 e8 0c bd 91 f1 d7 9c b8 ff dc e2 d3 79 3f ce cd cd 38 54 01 19 3b 1a 1d 9a 7e aa ea ef 66 ad cb 5b b6 ab 69 dd be 9a c9 d9 43 46 bd e6 f9 b1 fe 7c 32 c2 e4 51 d2 45 0c cb 5f ce 5e b2 91 c1 f2 4a 9f 82 e4 20 c5 b5 a5 a0 58 16 77 9d d4 14 41 ef 2f 69 a8 2c a5 af 28 a5 ff 7a b2 b2 fc e4 09 70 b5 28 4d 4e 60 79 e0 fe 52 ac b9 0e eb af c9 aa 50 21 0e f3 f5 a5 70 d4 c8 b2 ea 14 d5 cc 66 ea ef 85 c2 1d 65 b5 c9 9e dc 6b 39 48 39 Data Ascii: R5mmmmlJC=#~m*gUm'&`;'A9`K83g:38Y-gy?8T;~f[iCF\|2QE_^J XwA/i,(zp(MN`yRP!pfek9H9
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: e2 c7 9a 3f ce c8 22 63 3b ee a8 3c a4 0b a2 9f 51 44 77 23 36 19 b3 46 c4 be b5 ea ff cf ef 70 a3 f7 fb df ed 7f d4 4e 26 7f f4 d5 d2 77 7c 38 fa 66 e9 fa 0c 08 aa 43 ed 3a a5 b3 a6 7f d8 d5 e9 e3 1e da b8 c8 f0 eb 3f 95 3f 59 fe 0f d5 ab 55 f4 2b c1 48 cc db 11 d3 81 f4 18 67 fa 75 66 7a 5b 24 9f 93 6a c1 4a 4a 38 37 d7 5b d9 5d 99 4b 8a 54 43 c0 d4 24 6c 83 87 3d 1d c6 d1 88 02 c0 cb 2b 8e 5d b4 eb 28 6d ac a2 7f 12 d3 99 35 b7 aa 17 88 49 93 33 2d 2e d6 3d ff c8 5b 17 54 f0 fa 11 0a 93 24 14 0c 98 1a d7 ac 5f 88 f8 05 da b4 a2 6e 75 93 07 fc 98 3a 2b 52 da 50 d1 3f 69 8b c4 dc fd df a5 5f cd 64 79 5a 99 98 a9 e6 a8 b7 0f 96 6f 02 8d 94 24 5e 5a 28 fd 46 18 63 04 4a 0d e3 f8 79 cc cf 09 d4 59 0b dd dd 2b 27 2a 26 e8 0e 0c ed 76 3c e9 ae db 6a f6 96 6e Data Ascii: ?"c;<QDw#6FpN&w\|8fC:??YU+Hgufz[$jJJ87[]KTC$l=+](m5I3-.=[T$_nu:+RP?i_dyZo$^Z(FcJyY+'*&v<jn
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: d2 bb fe a5 9f bf 7f 98 67 ef 2d ae 7e 27 8c e7 c9 a9 94 e8 47 5b 26 4b 1b d3 3c 1f 27 28 3f 6e 9f 66 3c b2 56 6e b4 eb 7d a5 a0 15 11 8a d8 33 94 b6 10 d4 85 e3 5c de 59 ff 69 dd d9 e3 d5 e2 7e b9 ef fd f5 8b 88 07 d9 a2 67 ff 2c c5 d1 f3 b4 88 b6 18 b0 e9 6f fa 51 c4 e4 b6 53 6f 81 f1 6d f7 74 cc 87 fd 1f 60 74 8b 53 a3 c8 60 45 28 19 e6 71 a0 08 dc e9 6f fa a9 b5 f2 c5 8a ad 72 e6 12 e4 78 f1 f2 82 6d 61 02 8d 31 41 e9 46 61 50 04 95 71 72 3f 8f 82 22 b0 e8 47 3f 54 2c 63 f8 79 c6 25 13 e3 3f 2a 61 a5 47 d8 57 c7 c0 22 aa 70 22 ba 81 40 b1 98 cb a5 c8 c0 b2 79 d2 28 e1 63 a5 6f c7 9c 5a 43 fd c6 81 3a 15 8d 2f 0f 44 09 11 c3 c9 89 50 24 94 b6 c8 c2 96 e3 3c 52 ba cb a6 9f ea 6d 6b 05 2e cb 4f 9f 4b e3 8a 03 55 aa 5e 5f 47 6e 9a cc ae 13 2a cb 4b af cc Data Ascii: g-~'G[&K<'(?nf<Vn}3\Yi~g,oQSomt`tS`E(qorxma1AFaPqr?"G?T,cy%?aGW"p"@y(coZC:/DP$<Rmk.OKU^_GnK
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 0a 51 08 65 04 a5 0d 4a b0 d9 33 f6 cf 62 cc a4 0a a1 48 33 19 8a 28 84 92 2c 6c da 50 08 9b f6 ae d7 66 22 8b d9 7c 22 a6 0b 27 82 12 dd 40 ec 19 dd a8 68 4f da e0 16 d2 6c 0b ea 76 1e ad 09 45 28 9c b4 a5 5b 44 77 21 d5 44 1b 44 7b d2 46 3f da 3a c1 c6 98 45 02 d1 9e 5e 23 da 60 d5 56 06 52 26 8b c1 a6 5d ec 79 4b 86 f6 4b 60 33 9f ff 77 09 8a d7 08 45 50 84 32 2c b6 73 a4 0d 85 28 ed 49 37 b8 35 7d 82 0d 99 4b 35 44 f7 a4 2d dd d2 96 0c 1c 4d 16 41 ec 1b fd 74 4e da 8d 0c b5 cc a3 2f 49 54 87 a8 55 5b a4 c1 c2 06 69 04 9b f6 d4 09 dc 12 6d b4 a5 5b 32 8f 3e 7b fa e1 92 47 85 13 d1 86 b2 e7 22 e5 09 cb be 81 5b d3 03 02 29 e1 3f 0c f5 79 70 ac b9 f1 b9 c3 ec b8 2f 4e da 22 f6 2c 21 65 ba 9a d2 3d f5 70 8b 74 4e 10 6d 2a 18 6f e2 f1 e7 ce a4 e5 89 d6 47 Data Ascii: QeJ3bH3(,lPf"\|"'@hOlvE([Dw!DD{F?:E^#`VR&]yKK`3wEP2,s(I75}K5D-MAtN/ITU[im[2>{G"[)?yp/N",!e=ptNm*oG
2024-04-19 14:06:56 UTC	149	IN	Data Raw: 88 f1 ee 75 0e 10 86 78 6c 2e cd d7 1b 49 9f 9b f7 43 e3 60 bf f7 4f 7e 7d a7 f0 b1 76 f1 22 fc 10 24 c6 21 1a 23 43 92 2c 0e f7 ba 93 cf ad ff 74 63 0c 07 fa c6 87 ae df cd f5 90 43 75 64 8c 71 33 32 c6 61 72 73 f3 81 5c 27 87 cb 30 6e 6e 46 de bd 19 e3 10 0d e3 83 0f 6e 86 24 0e f7 40 ae df 82 e1 30 0f 37 1f 7c f0 c1 18 0e f7 0e 1b 92 77 df 8d 71 98 0c 37 1f dc dc 8c 71 b8 24 ae af af 93 e1 70 47 e4 80 71 3c 72 f4 8e ff df f1 ff 1f 88 19 00 Data Ascii: uxl.IC`O~}v"$!#C,tcCudq32ars\'0nnFn$@07\|wq7q$pGq<r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.6	50088	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	504	OUT	GET /IEfDtMttybHdnlOTB8MPCC0E3WNLpB6YR3xs4lsYvkamZd58F0HQMtMSIWS9kZ5Alg=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5456 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 4106 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	722	IN	Data Raw: 52 49 46 46 48 15 00 00 57 45 42 50 56 50 38 4c 3b 15 00 00 2f ff c0 3f 00 2a ac d6 f6 af b6 2c e7 1a bb c3 cc 69 66 9c 7b ef 66 ee c2 03 55 7d aa aa bb 8b 99 99 99 72 8a 99 99 99 19 47 cf f9 a7 b9 f6 3c a7 5c ef 6a 17 70 d1 b9 02 86 b2 ab 5c 83 0a 33 ee 13 92 f3 90 0e 47 a6 ed b1 d3 84 e3 c8 31 e8 1e 53 b6 4a 5c c6 58 71 e4 38 92 e4 6c 47 2e ed 70 5f 40 e3 1a e3 5c 40 93 8a ca e8 4b 98 e7 06 f6 88 da 2e 2e 96 66 c0 d3 0d a0 63 d0 9c 75 54 c8 b6 cd 68 bc 81 e9 c2 91 25 c3 0d b2 c6 f4 e1 48 8e 6d f9 6f 70 e1 72 e1 73 0b 61 74 4b d6 a8 3b 38 ea a8 5c c0 0a a8 5c 40 97 0c a7 b6 9d a6 74 98 99 54 d4 0a 39 5e 61 a6 1d e6 e4 a7 c2 b0 d4 51 51 ad 82 e5 4b ce 31 5a b7 0b 27 0e 6d a6 93 00 d9 b6 69 47 7b 6c db b6 6d db 13 db b6 6d db b6 ed 7c c5 f9 88 6d db b6 29 Data Ascii: RIFFHWEBPVP8L;/?*,if{fU}rG<\jp\3G1SJ\Xq8lG.p_@\@K..fcuTh%HmoprsatK;8\\@tT9^aQQK1Z'miG{lmm\|m)
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: f2 bf c0 2f ce c6 06 68 16 4e 4d 0d 2b 2c ec 47 a7 df e7 99 d7 02 9a 0f a4 fc d2 da e1 d7 2f 40 75 25 91 34 16 2d 02 02 5c 32 b3 0b 81 20 5f 03 5b 5b 25 71 aa e9 e9 2d 9e 99 01 d9 19 94 9b 7b 2c 40 ee 26 00 27 3a 74 08 10 c3 cb ca 0a de b8 71 70 20 e6 79 b1 e0 76 cf 9e 8d aa ae 46 7f 69 ae 21 8a 7d 17 de 28 25 d3 f6 ed 63 30 b3 b7 37 42 16 59 3c 3b 4b 57 68 f7 ee e2 3f 7f 52 52 e2 ef df 13 5e bf 1e 52 0e 01 28 a7 a0 d0 35 2d ad 9e 95 55 1d 0b 8b 46 ae ae 3d b2 b3 cf bc 6c 69 89 d5 94 96 96 8b b6 4f 4a aa 63 66 b6 b5 89 bb 7b 8f b4 34 47 26 63 d6 e0 20 a2 bc 8a 4a 54 00 b0 f7 12 a9 a6 a5 85 1e b1 36 49 ea 9e 3d 1e 88 1a 9a 9b 03 00 54 d1 d2 d2 19 40 a1 7b f7 88 2d bc 55 56 4a 0a e8 6e 01 10 00 5a c4 97 82 b6 23 03 be ef 6a b1 60 7e a0 7d 6c ec b4 8e 0e aa Data Ascii: /hNM+,G/@u%4-\2 _[[%q-{,@&':tqp yvFi!}(%c07BY<;KWh?RR^R(5-UF=liOJcf{4G&c JT6I=T@{-UVJnZ#j`~}l
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: b4 b8 50 1c 58 72 59 9f 08 1b 94 e7 3b 78 50 00 78 e1 fb f7 d1 99 09 91 92 fb 1d e6 1f 03 5b 8a bc 78 21 00 74 b1 87 04 26 cb 57 56 bc 4c 0a 7b 62 7d 3d 00 40 56 ca e6 cd 9c 92 4d 71 c0 39 ff c4 64 9f 28 19 37 de 4e d4 23 23 43 d3 1e 53 f4 2b 49 ae 6c 89 c8 95 d8 74 08 0e f6 38 5d c8 3f 2b 30 a5 5d 78 b8 43 db 8d 9d 89 44 49 67 02 41 a3 76 56 1a 38 3a 12 1c 0c f8 3c 60 ca a7 0a 00 99 f3 aa 00 70 fe 48 f0 eb 45 0d 9c 9d 7d 85 f3 1b 39 3b 03 93 fd d9 de 9a be 3d 13 13 9b c5 73 73 b4 12 e3 27 d9 b9 53 b2 7c 79 99 7a 41 4e ec 82 b3 2e 0d 6c 9e 5d 23 c1 bb 23 c5 7e ff 2e fa e5 0b 7a 7d 56 b8 e8 3e 4c 16 4e 4f ab 7b 33 f6 4f 0e 04 a6 bc 20 ed 2f 49 4e 68 6c 04 00 18 5e 5a 7a 8b 00 a5 b3 d6 36 20 00 70 f6 b5 25 37 0f 04 0d 42 6e 14 78 49 74 a4 4d 80 4f 36 f4 a5 Data Ascii: PXrY;xPx[x!t&WVL{b}=@VMq9d(7N##CS+Ilt8]?+0]xCDIgAvV8:<`pHE}9;=ss'S\|yzAN.l]##~.z}V>LNO{3O /INhl^Zz6 p%7BnxItMO6
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 4f 61 9c 5b 22 10 08 d6 47 38 ca 6e e1 ee 0e 72 9c df c1 c6 20 56 31 26 26 92 08 65 57 9e 81 61 52 b9 ba b1 b1 91 49 5d 6f 36 be ae 4e a5 bd fd fc 8f 1e d1 6e fd 74 8a 89 89 a4 6c db 86 57 94 ff c9 13 5a 0b d8 25 29 29 fc 52 0a 5b 6e 50 8a 87 87 d4 a8 62 47 87 59 59 5d 1d e4 65 af 28 b6 e7 a3 7f c0 36 ee 66 1d 1a af 0f 63 df 84 dc 52 61 98 98 77 ae c7 f0 ee 5c 74 73 2a a9 ab 03 35 73 86 87 dd c7 57 94 4c 07 f7 5d 41 6c 4f 14 fe f4 09 e4 e6 b1 b1 e6 49 af a0 a2 82 eb 45 a3 69 f2 c1 5e 6a 1e 69 bd 19 7d ea 45 00 de 0c 50 33 ba ba c6 54 54 8c a9 ac 9c d6 de 8e 8d 69 66 0e 0c 20 d7 40 01 28 f0 fc 39 4b 45 7b 46 12 ca fa c2 a7 c6 d4 b3 b5 f5 d1 11 a0 7b 7e 90 9d 3b b2 b1 ff 3c 7f 6c 0c 53 4e 4c cc 22 a1 de 1a 7c d8 9e 59 59 23 8a 8b 01 49 df cc cc 18 7a bd be Data Ascii: Oa["G8nr V1&&eWaRI]o6NntlWZ%))R[nPbGYY]e(6fcRaw\ts*5sWL]AlOIEi^ji}EP3TTif @(9KE{F{~;<lSNL"\|YY#Iz
2024-04-19 14:06:56 UTC	969	IN	Data Raw: fc f1 b7 40 a0 9d c6 93 ca 0d 90 3b 29 29 2e ee 71 ee b4 8f 89 91 84 c3 36 92 9b 03 ba 90 48 48 15 e4 c2 13 96 19 0b 3e 4d 16 fe cc 5f 2d 63 63 9f 52 91 71 99 57 3c 07 a0 f9 2f 97 2b 31 02 70 0a 26 a6 80 1b 57 5d 2d 3d 1d 19 10 17 ba f5 aa da da 11 4b 6a dd 57 8b 96 2c 2d 8d 2a 2b 7b 4f 34 bf 3f b5 a3 43 92 e5 d3 ab 4e d9 b4 c9 b7 bd e6 de de 57 92 2c 9a 9a a2 36 69 2f e5 c7 d4 a6 5e 5e 48 45 e7 8a 2a d2 de 7a c0 fd b4 26 8f 87 ae 2a bd 8c 00 04 55 4f 47 ce ab 52 fc fc 40 0d b6 a6 90 fb 86 18 e2 ad d3 4c ed 80 cd 00 00 db 3d 7d 2a 00 96 21 86 d8 eb ce c3 2a da 28 00 ca 9c 82 fd e8 40 db 81 89 49 00 e4 49 ac 44 42 ba ed 1a fb 0a 60 ca 49 b6 6e 8d 73 bf 91 a3 23 00 40 f1 6f df c8 ef c2 eb 94 94 24 69 e2 e1 e1 55 94 91 61 98 d5 f0 da 46 45 49 5a 47 44 b8 8a Data Ascii: @;)).q6HH>M_-ccRqW</+1p&W]-=KjW,-+{O4?CNW,6i/^^HEz&UOGR@L=}!*(@IIDB`Ins#@o$iUaFEIZGD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.6	50090	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:55 UTC	505	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9308 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform Age: 4106 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	722	IN	Data Raw: 52 49 46 46 54 24 00 00 57 45 42 50 56 50 38 4c 48 24 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 a0 72 da bd fe ff c3 33 59 fa d4 d7 88 fe 4f 00 1f 7c bd 06 31 a5 8c 98 11 95 18 a9 c7 6a 48 2d 5a e4 4e e0 ac 88 b2 13 62 aa e8 48 d6 dd b1 fd 03 2b a1 6f 37 d4 c3 76 e5 59 03 80 0b c7 31 03 9c ff d8 63 48 95 d8 26 24 25 d8 7e 09 78 5a cf d3 f9 ae 0b 38 8e 24 49 6e f2 01 04 ff ff 1c 3e 81 b6 ac d4 b5 18 34 16 8d 36 75 5f 73 90 b2 24 d3 71 24 db 4a d5 38 4b 42 38 61 90 7f 24 ac f8 ee ae 05 ab b1 6d 59 d1 d2 c0 17 fe 15 a1 80 54 10 f0 72 de 65 1e ba d3 ff 09 40 7f 6c 08 82 e0 37 82 20 10 91 60 67 2f 5d 2b 90 1e 44 82 e0 3a 7b 49 7a 20 08 02 82 bd 76 59 a3 d1 20 3e a0 7f 11 3d 10 04 91 ad d4 05 9b 4b 43 44 40 e8 f1 7c 52 1b 08 21 d9 5a 63 79 dc 90 31 00 02 02 44 0e Data Ascii: RIFFT$WEBPVP8LH$/?M8rFr3YO\|1jH-ZNbH+o7vY1cH&$%~xZ8$In>46u_s$q$J8KB8a$mYTre@l7 `g/]+D:{Iz vY >=KCD@\|R!Zcy1D
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: df f7 27 e5 f6 d8 b6 6d db b6 6d db b6 6d db b6 6d db 9e ea 4a 52 8c ff ef 7b b4 24 49 52 ed 58 11 d5 f7 5e c1 30 33 6c 65 b6 f0 76 c1 cc 7c a5 c7 bc 36 c6 2f 66 18 96 74 4e 77 06 44 db 56 ea 46 37 8f 1a 21 cd 8d 41 40 9b 99 0f f0 01 27 fc e5 a4 ff 38 e9 3f 4e fa 8f 93 79 e1 d8 3f cc f7 b3 38 da 17 ab 39 f6 17 f3 3f 7b ec 37 2b 25 cb 53 29 7f 67 df 02 f4 4d 6b df 14 87 e6 60 78 16 c7 e7 66 a8 bb 86 7a da f8 0c 8e cc ec 09 13 73 bf 6e ff f2 9f 47 7f e1 e3 53 3f 76 cc e5 5f e4 94 8f 39 70 d0 06 07 6c 54 0a ca c0 18 e3 81 89 5d 2c c0 51 7c d8 59 3c 60 65 67 66 5e 9c f0 50 ac f0 b3 df cc 3f f8 40 be ff 1a 97 f1 f2 1c e6 89 13 bc 0a c8 f8 64 25 bc 14 17 aa 8c 2a 29 e0 a3 77 e6 09 7b fb 80 05 96 83 d3 72 c2 42 69 d0 1f f9 70 fa c6 f5 f9 39 cc 43 1f 9c b3 33 56 Data Ascii: 'mmmmJR{$IRX^03lev\|6/ftNwDVF7!A@'8?Ny?89?{7+%S)gMk`xfzsnGS?v_9plT],Q\|Y<`egf^P?@d%*)w{rBip9C3V
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 43 db b9 18 20 32 90 5e ee 14 de 77 61 5b 06 7e ee 83 fc c0 9d fc d0 b5 cd 21 fb ff ef f4 61 50 77 e6 c4 72 61 00 95 6e 97 da 59 6a 5a 82 6e b7 d6 8c 7a 96 a1 16 65 44 28 4e dd 46 bc 09 ea 30 6e 56 19 32 4b f8 ea db ff 6a 0d 38 fe 3f df 71 57 be eb d8 a2 cb 9d 29 76 61 98 f4 70 8b 9d 2a df 10 d9 8b 01 a2 6e bc a4 2c c1 4e 97 d5 d9 3c 2a b1 d3 97 45 e4 12 8b 2c 61 53 1f 59 66 91 21 09 2b 59 a2 9e b1 79 5a 00 2e fc 21 5f 7d 02 3f f5 58 1d 22 b9 49 5a 81 3a b3 46 01 4c dd a8 02 a3 a2 74 99 71 1c 5c c5 96 22 dd b1 f1 b1 8b d8 c5 82 66 96 42 69 80 60 74 86 8a 89 57 9c fc df 9a c7 85 e5 a3 2b a5 dc 34 72 56 61 b8 1a 18 be 87 d4 fb ae 48 15 95 05 f0 c4 4b 45 b1 17 f2 ee a0 1e e3 30 8d 0c be 09 39 09 22 32 c0 1c 2e d4 59 db 58 2e f3 6d 37 f0 93 8f d5 fb 11 df b7 Data Ascii: C 2^wa[~!aPwranYjZnzeD(NF0nV2Kj8?qW)vapn,N<E,aSYf!+YyZ.!_}?X"IZ:FLtq\"fBi`tW+4rVaHKE09"2.YX.m7
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: fc c2 c3 8b fc f7 f8 73 52 82 7a d9 24 ee 8f 97 a0 19 9f 3b 1c a8 97 dc c2 9a 25 0e 64 0d 46 55 78 8c 69 29 90 00 c8 a4 b6 15 9d 66 99 ed b1 c1 aa 42 ee de 5c 63 d0 9d ea 61 ac 43 e9 b9 ac b9 95 51 93 93 23 ee 00 25 9c 9c 9f 17 dc 58 0f 5c a5 9a 15 8f 58 af aa 60 25 58 37 a3 fb 66 a2 f1 e4 5e 91 65 50 45 5b 3a 30 4a 0a 34 d8 b2 a2 2c 30 55 45 77 a5 26 43 26 7e f7 4c 4b 9e 40 1c 1f 51 26 70 18 3c e7 2c f3 24 f9 c0 06 aa ce 76 54 34 5e 89 22 4c ce ca 6b 5f ae a3 f3 b4 a6 c4 d8 6c f5 88 03 47 b5 82 41 b4 c5 85 47 9a 71 c8 b4 b3 97 01 06 a2 f5 50 d3 05 19 24 0a f5 76 b8 29 a6 6a d9 c6 82 3a ba 19 98 44 4c 01 54 2b 4f c4 05 38 ea 1c 05 47 1a 5f 08 3d b7 45 e0 3b 1d fc e0 96 bc e9 09 87 e3 d6 69 46 3c e3 00 97 28 2e 5f e4 58 03 a5 36 47 a2 a5 1a 4d 35 f9 04 12 Data Ascii: sRz$;%dFUxi)fB\caCQ#%X\X`%X7f^ePE[:0J4,0UEw&C&~LK@Q&p<,$vT4^"Lk_lGAGqP$v)j:DLT+O8G_=E;iF<(._X6GM5
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 19 42 4f 31 21 80 7e 36 25 36 be af a8 a3 23 9d c3 0f dd 63 ba be d2 25 4b e1 08 2b 2d 94 79 a1 6d 1e 62 6e bb 90 ca 88 4f 38 3d af 3a 6d d5 68 f8 8c 5f f9 63 de 75 d9 25 9e 30 cc b8 c7 09 5b c1 da 6f 2c 39 8a ad 30 b7 26 32 9e 53 10 53 c6 14 3a e8 11 2d b0 51 c3 48 fb 5f 69 00 ec bb 96 22 da 0a ff b8 b2 0c 91 c8 df a2 ad 86 45 2e f4 78 4e 59 18 a9 8f ec 67 78 da d6 e8 1f 1a 7f f5 f5 ec 14 f5 8a 9a 9c 50 5f 11 28 8b 18 74 f1 ad 69 86 1b 04 81 1d 62 05 e8 bd 7d d4 9c 86 31 47 f7 00 04 9a 1d 7d c5 37 98 4a 3a 43 9a c7 32 e5 ca 2e 7c 91 66 19 23 e3 7f 8b 34 1f 78 3a c3 bb 9f 1d d6 bc f9 84 d3 c6 ab 4f df 68 2c b6 dd d8 7f e5 0e ec 2e 7c b8 ef 84 e7 51 f6 2c 9a bb c1 48 47 74 cd c2 9f d8 70 6d 0a 5b a6 e3 ee 11 9c c5 3e f0 0c 1f d9 cc 8a 97 d9 c2 66 4b 98 a8 Data Ascii: BO1!~6%6#c%K+-ymbnO8=:mh_cu%0[o,90&2SS:-QH_i"E.xNYgxP_(tib}1G}7J:C2.\|f#4x:Oh,.\|Q,HGtpm[>fK
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 67 a3 b0 bb 7f bd 2b 3a 29 cb a3 a3 f9 29 dc 50 fa a8 b4 05 6a 29 8f 4b 1a a8 b2 39 b9 40 dc b0 64 6f 5f fc de 45 ac 2e fc 10 ba d9 61 68 c6 3e 7a 6f 1f 55 9f 85 d1 a4 af c4 00 74 00 91 6c 96 a8 2e b3 9e 82 62 dd 17 db 62 a8 c0 29 66 5e 1d 1b e7 f6 df 53 f4 5a ef d6 64 40 2a e8 dc 99 cb 79 2e 1a 26 50 ca c1 b1 ec 96 67 05 03 63 60 56 f5 ca cc 10 1c 8b 20 45 00 a9 6f 56 47 ad cf 46 df d1 0b 43 ee 05 ba 55 c9 5c 1d e7 ea 3c 7c 2f 78 db cf e0 14 ea af 7a 28 47 91 25 05 34 c3 df ff f3 12 2d ed a6 ab 48 37 c8 83 9a 5a 7b a4 71 2a 40 74 a4 fb d6 1f b2 ba 46 56 a6 e3 28 63 2c a3 90 ae ee 17 f7 65 8c 27 93 9e a9 91 80 38 1d e4 9d c3 91 5b 6b 9b 43 51 52 d4 ac b3 d6 28 d3 0d a3 28 8a ba 79 52 96 2e 1c 40 67 51 24 83 1a 3d bf 0b 24 51 e3 76 70 dc c3 7d 53 5f eb ae Data Ascii: g+:))Pj)K9@do_E.ah>zoUtl.bb)f^SZd@y.&Pgc`V EoVGFCU\<\|/xz(G%4-H7Z{q@tFV(c,e'8[kCQR((yR.@gQ$=$Qvp}S_
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: d3 80 4d 2b 3c d9 1e 23 b3 64 d4 d5 1e 68 65 2e 85 9b d9 67 d3 a2 16 14 9b a1 99 9e 93 a5 42 52 ad 08 54 41 78 3d c1 56 63 3b e8 87 5e 76 68 76 a8 83 4b e4 02 74 a0 34 8a 5a be ec dc cf aa ac db 31 a9 46 82 00 f2 d9 3d ef 9a 97 2f 29 5d b0 0b 00 a1 87 6a 86 31 e9 fe f6 3f 85 81 58 66 0d 37 04 8e 86 db 2e 68 c6 84 b7 2b 5a 8f 4a 55 88 93 d7 ae 30 bd 5f 07 e0 88 ad 7c 42 19 56 f5 5c 24 8a d2 41 f8 c9 43 71 ff b5 8f 7d ed b2 8e 81 86 7f a0 ff dc e3 c3 33 fd ed e7 ed 32 57 0c b8 97 8f c7 ea ae 8b 32 1a a8 ad 69 8a 55 3d 83 db ce d0 30 73 f5 ab 50 35 26 2e ab 9f 3d 55 95 44 ae f5 b1 91 4d 82 38 60 d4 01 07 97 e0 22 08 cb 5a 3e e7 f4 2f 1f 3a ff 4c 31 51 83 57 05 58 be 3b 7e c5 6b 4b 8d a3 13 e5 fd e9 be 9b 23 78 f5 3a 7f 63 9a f7 7e ee 94 6b a2 57 74 f6 3c c5 Data Ascii: M+<#dhe.gBRTAx=Vc;^vhvKt4Z1F=/)]j1?Xf7.h+ZJU0_\|BV\$ACq}32W2iU=0sP5&.=UDM8`"Z>/:L1QWX;~kK#x:c~kWt<
2024-04-19 14:06:56 UTC	1056	IN	Data Raw: 3a a9 9d 56 4a 35 6b 49 31 48 12 a5 54 0e 0b b1 a6 1e fa 78 fc d9 4f ad 39 7b f5 87 43 56 45 bb 00 c3 67 5d 43 52 d2 fd ec 96 e5 05 6d f4 f4 e6 29 78 a6 db b2 bf 76 27 a4 8b fc 9e 2e bf 8a 0f 2d d3 67 0e 64 74 81 ed 3e 1d 4f 38 27 d1 9c 6b b9 2a 6e c7 44 a4 c8 61 6d fb 6e ee a2 75 e1 c6 a7 fd 99 a9 7c 7a d2 af 2d ad 31 ad e9 cc 44 32 fe 8f c5 79 26 81 86 c8 c5 86 9b a1 90 92 c6 ed 7c fa 65 b9 0c 0f b5 8b 51 cd ca ec 14 f4 ed 5a 48 a9 de cf db 02 58 2d fc a8 67 cb a1 25 37 27 37 72 74 86 a9 90 16 f9 44 0e 54 6d 69 ea 7f 3d 49 35 7f 1e 13 29 65 b1 76 7c 27 7f c1 ee c0 cd 8f 17 9e 7e de 9f d6 e3 0f 9e 8d 6c 1f 76 1f 56 17 4c 13 6f 6a b1 4d 19 51 ae 35 9a ad 13 ff 3e 19 88 bd 4c dd 76 5c 97 d5 a6 5a 20 19 4e 41 2a ec 6b c2 c7 2a 84 55 c7 bc 2d 9f df 1b dd f7 Data Ascii: :VJ5kI1HTxO9{CVEg]CRm)xv'.-gdt>O8'knDamnu\|z-1D2y&\|eQZHX-g%7'7rtDTmi=I5)ev\|'~lvVLojMQ5>Lv\Z NAk*U-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.6	50091	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:56 UTC	505	OUT	GET /6pTX4OILXTxazqad66oiVfG4x2KpYn4kIPgdzOe173tT0oHr2ThwpBhMyzzzxWq_r6M=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8092 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:11:51 GMT Expires: Sat, 20 Apr 2024 12:11:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 6905 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	722	IN	Data Raw: 52 49 46 46 94 1f 00 00 57 45 42 50 56 50 38 4c 88 1f 00 00 2f ff c0 3f 00 4d 40 72 db 48 92 04 85 02 b5 45 ce ff 1f 5c 59 51 39 fb 35 a2 ff 13 c0 7f 72 dc aa 80 cc 25 ea 13 99 0b ec 91 f9 4a 99 3e 90 d9 11 0a 0a a8 2d 62 46 46 a3 ee 5a e0 be 48 85 52 5b 44 34 ca aa 82 5c e7 24 e2 b3 9c 8c a7 f1 06 b4 dc c7 ba 2a 55 22 9e e2 6b 81 d3 6a 9d 8d b2 5c 70 36 92 7b 01 9c 0d 3b f7 64 3a ce 73 a6 fa 22 27 e8 c4 77 64 b6 5c c1 b6 6d f0 f1 19 b0 6d 4c c7 18 8b fe a6 0b 38 92 6d ab 56 1a 77 77 0d 29 e6 3f 12 42 c2 1d 11 b9 fb ff d8 3d ff a3 b1 e3 48 b6 55 a5 71 56 d4 0d e1 e5 1f 13 2b 77 b7 5b 17 29 d8 b1 6d ab 6d 76 09 e9 bf 32 83 24 af c8 8c 61 f8 73 ff 27 80 fe db fe 75 1c a4 af 50 3b 35 ef da b1 63 40 e7 c0 61 52 83 fa ed 8f 3c f8 ce 66 3b 6a 5e cf 56 cf 8f f9 Data Ascii: RIFFWEBPVP8L/?M@rHE\YQ95r%J>-bFFZHR[D4\$*U"kj\p6{;d:s"'wd\mmL8mVww)?B=HUqV+w[)mmv2$as'uP;5c@aR<f;j^V
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: a0 9f ff 3f 7a 8f db d8 b6 55 65 9f fb 3f ee 90 13 52 03 6d d0 27 25 31 a4 ee 6e ef 9d 98 00 bc d9 ff af 92 64 e7 9c 53 55 4d 33 3d b7 b7 61 98 e7 5e 31 33 33 33 33 33 4b 2e 33 33 33 33 33 33 33 2d 33 ef 30 4f f7 34 56 d5 31 aa a7 9e db dd ff aa 71 bf e6 cd e1 44 d1 62 29 86 eb 1e b3 ec 8a 40 cf 73 b2 b8 51 28 81 1a 81 4b bb 66 89 f5 73 b7 52 38 11 c8 9c 1c 94 42 bb ed b6 db 6e bb 42 97 26 02 99 72 77 12 b8 e4 8a a5 bf bb 60 ad fb 8b 42 94 85 dc eb ca dc 23 56 8d 39 a6 18 ec 72 15 c5 26 c0 ee 9a 47 ac 59 77 cc bf 58 e3 2a 06 65 71 43 d0 95 2b 73 5c 2d b9 82 4a 40 11 74 0c 25 88 a1 dc 35 65 97 a5 e7 99 f1 e4 5e a5 a0 3c a4 08 64 ae 3b 8f 7c 1c 77 5c da da b6 1d ae 98 e7 fd fe 99 49 32 59 a8 6d db 76 7b 30 76 4f 60 e1 4c ca cd ee 75 cb b6 6d db 6d 16 92 cc Data Ascii: ?zUe?Rm'%1ndSUM3=a^133333K.3333333-30O4V1qDb)@sQ(KfsR8BnB&rw`B#V9r&GYwX*eqC+s\-J@t%5e^<d;\|w\I2Ymv{0vO`Lumm
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 77 13 61 86 48 e8 ee e4 61 62 52 41 11 12 37 51 b4 70 97 9f 65 9d e3 3e 12 bc d5 34 c8 2c 4a 5c 04 7c e3 bc ef ea ab a7 f7 a2 a9 a8 b3 c1 7e b1 62 df 63 b7 5e 4a f1 08 2f 05 ba 88 77 f1 b1 be 91 28 41 31 47 9c 9b 3d f1 e7 bb 6a 35 a5 63 9e e6 80 68 28 9f 75 1c 05 5c 42 2e 84 8e 1a a7 a8 34 65 40 25 21 41 0b b4 ca 4b cd bb ef c3 f5 1a 72 3c f1 fd 89 d8 59 4d 27 ea 56 cc 41 69 c8 23 33 17 c1 9d bd 6c 1f 54 aa dd 15 88 bc 23 aa 77 fe 6d fc 5a 7f 9f fc d0 45 fd 98 78 1c b0 0f 89 01 d4 7d cc b7 4d c8 69 5b 4b a7 46 7b 29 4c 1e d9 27 e7 03 22 cd 26 14 56 67 5c 17 74 56 e9 61 21 d0 0c 4f 2f 44 20 63 01 f0 c7 0b 06 b6 19 46 45 60 ef f3 57 78 a0 ef 1a f7 6c bb 1b 54 0f 28 25 3b 85 b6 9a 80 6c 90 41 ec 01 0a 13 4e 61 1c d2 44 50 70 c6 19 a6 f1 89 e1 a4 4e 66 b4 be Data Ascii: waHabRA7Qpe>4,J\\|~bc^J/w(A1G=j5ch(u\B.4e@%!AKr<YM'VAi#3lT#wmZEx}Mi[KF{)L'"&Vg\tVa!O/D cFE`WxlT(%;lANaDPpNf
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 9e c6 b9 2c 07 96 39 11 e1 a9 5d 04 77 c6 89 6e f5 01 a0 c0 fa 51 fa a9 7f 9a d8 2d 6c 71 f5 84 3d 6c 81 a3 30 11 65 bc bd 76 68 ee 6c 01 e8 18 6c db 84 54 2f 0d 57 dd 93 65 3e fd 3d 9b 5b 67 8a 68 c3 c4 b6 1b 47 d5 53 80 f4 87 d8 44 28 5b 9c 4e 03 97 c6 f8 26 b5 75 74 5a 26 d4 4d f2 35 15 3b 97 e5 46 61 6a 37 c3 28 1e 13 4f 03 96 2c e2 e2 58 32 14 10 fb 48 8c 32 b4 b5 1e 2d f6 e5 47 4b 3b e5 a2 28 e6 11 c2 30 94 79 74 e0 df 7f d7 5b 1f 29 35 27 50 95 51 63 cc e9 a8 22 c4 87 b7 f8 67 78 b7 79 b0 97 61 ae ba e5 88 0b b1 50 3a a1 73 e2 7b d2 92 e6 25 82 89 cd b8 98 e6 21 bf 4e fe f2 27 5f e0 45 5c 2a 1e ab 00 e8 51 d6 a9 c6 1a 9b b9 c7 d8 fa 2c 65 cd 03 ad c5 ba 24 9e d5 51 3d cd e7 ad 06 5a c0 79 b0 a7 b6 8e ba 17 f2 42 9d fe 5e e5 ae 60 98 10 9b 61 60 42 Data Ascii: ,9]wnQ-lq=l0evhllT/We>=[ghGSD([N&utZ&M5;Faj7(O,X2H2-GK;(0yt[)5'PQc"gxyaP:s{%!N'_E\*Q,e$Q=ZyB^`a`B
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 7e 38 1d f2 ae 8b 9c af c9 97 36 fd 14 8e da d0 dd 7a 25 02 55 a1 5b 6e 43 58 3d 64 8d 7f 23 9a 73 e8 86 77 1b 9f 5c 75 d3 26 42 37 75 37 dd d2 4e c3 22 a6 e5 0a 50 55 39 10 ea 6a b8 e7 9f 18 96 2b 56 6c 90 2b a1 9b 98 73 73 f5 68 ea 45 b9 c5 26 2a 6e 21 21 29 92 7c 79 ee 44 18 46 ba 72 68 53 85 6e 62 b2 0e 8a 30 67 55 e8 6e fb 2d 4a 88 2a 42 9c cf c2 b0 06 24 90 61 e9 a7 1b c3 38 a0 4d 42 ff ac 7b a3 5b 84 36 f4 f7 98 14 41 d4 dd ac de 95 6a ba 21 21 da 98 d9 5b d3 30 1d 9e c6 67 fd 34 0e 26 a1 ad 12 93 42 28 51 45 29 ea 40 97 48 30 e1 49 a6 2b c7 a0 9d c6 25 98 aa f4 23 26 8a 50 16 bb 87 51 b3 a2 81 4b 12 4a 3c 8c 72 94 ae 38 85 fe 19 93 ec 95 70 70 31 51 04 c5 26 aa 4e 1a 73 84 47 10 68 bc 7c d0 2f fd 94 da 38 40 e8 6e 98 a2 b4 85 9d 29 45 2f 1c 49 11 Data Ascii: ~86z%U[nCX=d#sw\u&B7u7N"PU9j+Vl+sshE&n!!)\|yDFrhSnb0gUn-JB$a8MB{[6Aj!![0g4&B(QE)@H0I+%#&PQKJ<r8pp1Q&NsGh\|/8@n)E/I
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: a6 cf d5 98 bd 6a cd 82 d1 6b 0a 4c 15 ba 39 64 80 98 a0 04 4c 45 50 08 c8 0b 0b 49 a0 04 14 61 03 66 31 73 c7 cc 90 6e d2 cd 87 d2 0a 70 18 02 9c 34 6b 7f f0 15 32 2b b7 fc 34 10 41 c4 1d ae 3a 56 03 c1 4c 16 9d 98 b4 c0 94 a1 5b 36 52 00 72 08 8a 10 a6 42 28 6e b5 e9 8e 24 50 04 12 8a 28 9a 66 fa 7f e8 73 15 2b fb af 1a 1b 52 50 64 ab 01 57 b5 6c bc df b5 77 22 e9 7f 72 cb 5b 82 88 44 84 ba 46 af f6 fd 0f 4f f2 d9 db fb 26 42 10 d2 11 91 5e 83 fb cc 33 ac 3e 92 f4 b1 7c aa 6a 11 aa e3 40 54 b5 8b 07 75 8b 36 6c 68 82 49 11 a8 5b 6d 72 61 f1 40 a0 02 66 89 e2 01 b3 91 36 93 f1 3d 81 b9 5f 89 4d 63 44 63 a4 20 40 23 6d f5 c1 fd 45 c7 58 38 75 cb 5b 5e 44 04 51 47 29 3f e4 9f 5d ed 75 14 25 62 83 a1 5b 1f fc 83 bf 7f e7 ad 8e e2 bf fe d1 c7 1c 55 bc f6 65 Data Ascii: jkL9dLEPIaf1snp4k2+4A:VL[6RrB(n$P(fs+RPdWlw"r[DFO&B^3>\|j@Tu6lhI[mra@f6=_McDc @#mEX8u[^DQG)?]u%b[Ue
2024-04-19 14:06:56 UTC	1095	IN	Data Raw: 56 d9 64 8d 9b 04 db 00 49 44 48 3e 57 22 49 44 64 16 0c e7 dd 94 be 65 5e 6b b2 19 43 41 50 dc 96 f7 ee 56 73 8d 70 95 6e 48 50 6c f2 01 24 25 11 61 d7 f5 2b 42 af 67 71 29 fd 09 ea 08 a9 4b e3 49 6a dc 5d 2a 68 96 f3 3c 22 99 94 ac 88 a4 94 92 68 7c dc 0c 05 6a 7c 3f a5 6f c0 d5 06 4d 85 94 2e 4e 98 d8 4a ff de b5 30 2d 3d 5a f0 8c 82 b7 55 4a 29 09 c9 29 91 94 52 f6 0c 8c 8f ef da b1 de 79 a7 92 bf 37 17 3f 95 ea df 2c 8a bb 8e eb 77 65 6b ef 01 be 6e c4 f3 3c 6f ab ef 13 11 28 29 01 49 e9 fb 5d 0b 3e 77 7c 7c fc 80 e1 71 09 c9 37 68 f6 63 e8 13 35 78 d7 62 f0 7a ba 13 c9 1e 0d cd a5 88 1a de 56 cf 0b 34 7c d1 56 29 09 49 eb 2a f3 fe fe fe 3e d3 c5 8d 8b 3b f5 9b ef 34 6d 7e b8 88 b0 8a ab 21 b5 f6 0b 21 dd 3e ed fe d3 23 3d f0 cc 5d be 93 45 3b b4 02 Data Ascii: VdIDH>W"IDde^kCAPVspnHPl$%a+Bgq)KIj]h<"h\|j\|?oM.NJ0-=ZUJ))Ry7?,wekn<o()I]>w\|\|q7hc5xbzV4\|V)I>;4m~!!>#=]E;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.6	50094	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:56 UTC	505	OUT	GET /wzuhOux_qLUogHofG-ZJLMaFsGfBmKJgMQwB6qAVWAb9jH6y-y7VZEKRxCxERUU5gd0=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 26572 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4106 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	721	IN	Data Raw: 52 49 46 46 c4 67 00 00 57 45 42 50 56 50 38 4c b7 67 00 00 2f ff c0 3f 10 09 89 6d 23 49 92 84 8c 88 c9 0a 75 af ff 0e cf b3 cf 9d 01 11 fd 9f 80 f9 ef de bf 60 3b 92 98 99 fc 88 cd 32 4f 64 92 1f 00 6c a4 99 da f3 b1 98 7d f8 de 85 53 29 65 0a 33 3b a3 57 50 60 27 d7 25 41 dd 42 3c 7a 25 9a 25 c0 2b ce 6e 59 7a de d1 d2 ab b4 af 7c d6 da 0f 56 e0 5e d7 45 a5 35 0f 8e dd 45 ef 1e b0 b4 57 2b 79 68 99 f6 9c be d1 a3 5d 2f 75 6f 9d 24 6d 6b 5b 6f dc 76 81 b6 12 2d 0f b6 2d 7d b3 0c b0 5d 2c 91 73 8e 6d cf cc 8b b9 e7 e3 fb 9e 0f 6f bf 50 d6 4d 86 a6 d5 61 77 9d 3c a6 d2 2b fa bc 2c 48 ec 7a b7 e9 e4 9d bb 14 c8 ae d4 c5 2d c0 7e bd 1a 25 cc b1 49 25 2d c6 0c 96 de 4c 96 2d c0 56 5e 9a 43 2a 7f 62 28 b6 a9 ce 8c d7 d8 fe 64 92 69 e0 9c a3 53 a6 65 bf 31 21 Data Ascii: RIFFgWEBPVP8Lg/?m#Iu`;2Odl}S)e3;WP`'%AB<z%%+nYz\|V^E5EW+yh]/uo$mk[ov--}],smoPMaw<+,Hz-~%I%-L-V^C*b(diSe1!
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 62 02 78 55 b1 4f 45 8f 9a 35 0d 06 1a e3 9c c6 18 d3 39 e6 28 41 09 47 73 0f 2e 16 e1 a1 ee 60 19 3d 8c 0d a6 30 67 f8 23 46 25 be c5 22 ed df 2b 49 76 fe e7 64 56 8f f7 de 7b 79 ef bd 5b 82 37 d7 73 79 ef bd f7 de 7b 83 bd 76 e0 dd 38 79 ef cd f5 f7 b6 af ae ca 73 64 d8 97 99 27 2f bb bf 2d c8 bb 0d 24 9d 35 34 bd 21 f6 c1 2f e2 b2 b3 85 4f 6e 03 77 0d b2 5b 48 3c 34 61 d3 0f d7 16 86 ca 52 ef 7d 6f a1 69 0b 0e 1d a4 88 a3 2d 14 99 b8 dc 62 45 a4 1c 4d aa 86 4d 9b de 10 12 fe 64 16 a0 44 13 51 48 a6 40 e2 8a b8 96 8a 7a 53 4c 71 56 a0 88 ba 34 b7 30 b4 57 70 98 bc 2b 6d 41 50 82 df 1a 8a 4a d0 1e 19 9a a0 71 af 21 e1 e0 a1 82 b9 86 a2 82 42 4d 65 12 24 4e aa 2d 1c 3a da 80 85 de 95 bc c7 bd 01 99 a2 33 4b 98 4b 0f 54 08 52 ae 6d 5b b5 ad f4 b9 ce fd 6e Data Ascii: bxUOE59(AGs.`=0g#F%"+IvdV{y[7sy{v8ysd'/-$54!/Onw[H<4aR}oi-bEMMdDQH@zSLqV40Wp+mAPJq!BMe$N-:3KKTRm[n
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: bb e2 25 d7 f0 61 f8 85 55 2e 3b ef 17 cc 98 39 ef cf 71 8b 87 c5 47 a0 53 c2 ed 61 e1 eb da d3 ed 8e 3e e2 43 e7 b7 c7 cf 9c 12 d4 f6 83 de 75 3b 60 80 3f 1e 18 ce d3 35 ea 1c 3e d3 96 fe 98 37 3b fd 92 db 5d db 97 25 bb a5 8b 2d 73 ee 00 6e b8 91 22 c2 71 75 0c d9 d1 03 56 dd c8 63 db 1b 6e 60 73 7e bb ee b7 30 d6 0a 75 12 13 85 3a 9e 3a 01 76 cc a8 55 ad 1a 34 56 7c 66 8a 4f 9c 69 40 15 76 c4 aa 55 d6 8e cc cc 29 84 b3 de eb 4b 9c 8d 85 43 d3 e6 bc a5 e1 c6 40 1b 57 b3 dd 8d af 9c 2e 7e 5e 8c bd 14 d5 a2 af 39 44 99 fa 70 f5 b8 c6 e3 b1 97 8a af 1e e7 e0 96 4e c9 87 ed c6 67 c1 61 9d cd e4 88 11 ab 96 55 cb c0 2e d2 1a 58 31 5c ab 5a 27 c8 34 c6 ee 63 54 5f af 75 f2 55 0f bd ba 77 7d b9 ef 4e a1 76 f2 89 c1 cc 78 31 7b 70 81 da 1a 0d 0f 45 a1 bb 62 56 Data Ascii: %aU.;9qGSa>Cu;`?5>7;]%-sn"quVcn`s~0u::vU4V\|fOi@vU)KC@W.~^9DpNgaU.X1\Z'4cT_uUw}Nvx1{pEbV
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: bb 7c 73 91 76 f8 68 9a 1c 9a a9 a7 2f 1f ed 23 04 78 82 93 2f 7b 2c 0d 0b 57 4d b9 5e 58 e5 46 0e 3b 9f 88 5f b0 03 d8 c1 4e 11 10 c5 fa 2b f5 7b 1b 50 14 7c 1f 3a d9 25 22 0a e9 62 c8 7c a7 b2 22 a3 2f be 75 9f 2b fc 22 78 05 3d 05 f4 e5 9b 72 fa 66 b7 f3 dd f7 51 e8 a3 73 ee de cd 0a 67 75 71 dc e6 94 57 fe cd a1 39 9d 22 58 d3 9a fe 50 d3 8f 5e 61 e9 12 21 a4 b8 11 2a 9e 72 dd fd 5c 0c 5e 9a af 2d 87 92 12 ba 63 00 cc 9d 6c 73 89 c8 4e 04 71 de 07 01 c1 8b f8 74 d3 f9 f3 27 74 1e 81 1b f7 86 f0 20 c8 c1 2b ce 15 9a 5b 72 df 16 45 af 5a 5f f4 28 c0 83 2d 3c df 74 21 88 c8 2c 51 f7 75 76 07 17 2a 45 15 d7 ad cb 5a f0 d8 fb 26 c7 d6 f5 eb be 41 ae 3e 54 4c 47 ee 66 de ca e2 19 e1 6e 71 22 78 9e 7e c7 8d 72 7b 5a bb 43 87 2b 7b d9 7c af f4 37 0b bf c1 5d Data Ascii: \|svh/#x/{,WM^XF;_N+{P\|:%"b\|"/u+"x=rfQsguqW9"XP^a!r\^-clsNqt't +[rEZ_(-<t!,QuvEZ&A>TLGfnq"x~r{ZC+{\|7]
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 3b 31 c6 f7 bf 2c bf 39 d3 7a 97 24 c4 bf ad 9f dc f2 f3 f5 b9 5e a8 7c fc ee b6 cd f1 1d 5f e9 dc d4 2c 20 d4 fe 70 a0 16 a5 3c d9 ec b0 88 2f 36 05 d7 b7 d6 ce 66 b8 fa 1a 63 90 07 5f 23 c2 a2 75 b6 5e 84 77 45 9f 75 c7 1b d8 e8 e3 98 db 89 4d 91 71 3d 26 9d fd f0 f6 49 61 fd f4 e0 ac ac 09 6b 99 86 a2 63 59 29 a5 09 ca 2b 6f c6 b5 06 0e 5b 41 50 3e 99 cc 1e f0 8b 68 0a 8b d5 4a 79 d5 9f 00 f1 fa 89 32 46 d6 97 6f 8d de bd 45 38 88 da f1 13 11 89 3b 8f ba 35 ca 2b fc f6 e8 9c 0f 49 6d c2 ec 66 f6 56 df 16 df 77 5e 85 b8 65 51 9b 3e db 50 b4 9f d3 a5 f6 67 4e c2 43 c8 8c 76 4e 19 71 d6 59 b3 4a 34 96 43 5a 26 58 2c e3 59 7b a3 be 9a 4f 0d e9 78 ec ac 3b 8c cd 6a f7 e4 c6 d8 77 59 21 3d d9 5b 4a 36 76 55 1d b9 dd ef 61 63 37 76 c3 61 7a 2d 6f bd 58 43 e2 Data Ascii: ;1,9z$^\|_, p</6fc_#u^wEuMq=&IakcY)+o[AP>hJy2FoE8;5+ImfVw^eQ>PgNCvNqYJ4CZ&X,Y{Ox;jwY!=[J6vUac7vaz-oXC
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: b3 59 71 03 57 fd 02 34 7a 6b 00 bf e8 53 42 a0 e8 b3 2b 16 b7 8a ab 3e 8e 61 51 dc 68 ad 6f ce e9 b7 64 48 df 15 3c b0 b0 3a d3 0b 22 a7 22 a7 79 ce 22 fb b0 b8 c1 80 75 10 67 5a 7f cc 6c 43 2b c0 da 38 e1 72 b1 f8 2a 84 f8 69 ac c4 ab 20 2c ae 7c 1c bc b7 57 07 23 41 89 8a c1 84 07 29 4c 70 4a ba 83 4f 7d 1c ae b0 1b 78 11 9b d2 53 58 67 9d 57 0b 77 de e7 6a 2b a9 0a 2b 73 19 42 b0 9d 3c 0a 49 1c 2e 6e e8 66 45 a1 33 f3 78 03 da 2f 42 d1 8a 36 64 21 46 6b af 8c 9d 72 be d0 f2 78 6c a6 01 5e 86 f8 ee 1c 2d 62 4c 66 78 1f 08 48 af 08 f9 7b ea 00 22 af e5 dc 82 1a a3 e5 79 2d 18 ac 03 34 e8 f4 07 4f e0 06 ac bb f7 f2 24 96 27 d9 0f 2f 76 e5 83 5b 65 2b 15 1b f3 3b eb 55 a1 32 15 5b eb fd b4 dc 05 25 24 36 cc b0 81 10 e2 b0 d5 61 f4 43 25 6b b1 3a 61 dd 6d Data Ascii: YqW4zkSB+>aQhodH<:""y"ugZlC+8r*i ,\|W#A)LpJO}xSXgWwj++sB<I.nfE3x/B6d!Fkrxl^-bLfxH{"y-4O$'/v[e+;U2[%$6aC%k:am
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: d3 2e 8e 8b 98 82 02 17 3b 44 c1 01 66 09 d4 1e 17 87 1d bb f7 97 89 70 a8 81 1f 06 e9 65 6e 3f 14 ce 14 57 18 b7 f9 b8 48 0b 68 5b 67 dd ef 42 2d b6 34 ae cd c7 ed 14 c4 cf c2 c9 a8 74 62 8d b8 60 39 2e 2d 9d 5d c7 56 d2 69 69 41 08 f9 40 16 cc f4 a1 8b 6d 6c 31 01 69 b5 0b b7 40 61 f9 a5 00 60 89 b7 f1 36 34 58 3b a7 a6 03 62 f2 a4 e6 91 3a 04 16 b5 22 56 6b 20 e6 27 fc bc 33 20 c0 2e 48 8c c0 5a f5 ac e9 80 1d 21 d9 02 5c 07 98 02 7c db 24 36 17 91 5d 00 13 c2 54 82 b5 b9 be 42 d3 1d 1f 68 d7 4f d2 d6 ba d4 59 88 83 9d c6 8e ae b4 ee 4f 4a d7 e1 e2 01 9b 88 dd 9a 07 d6 25 96 22 e9 b0 1d bb 2e 94 20 9d 83 7b e9 02 02 db d0 b3 93 d2 19 b6 88 49 9d ef bd 8d 63 07 d6 61 7f 2f a1 6c b2 96 81 a8 d4 8c 01 42 cb 6c 16 10 09 98 75 e8 64 c3 3a 03 d8 b6 50 43 0d Data Ascii: .;Dfpen?WHh[gB-4tb`9.-]ViiA@ml1i@a`64X;b:"Vk '3 .HZ!\\|$6]TBhOYOJ%". {Ica/lBlud:PC
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: eb cc 41 f2 5e 69 2b 5e 74 19 fb 85 e5 e6 90 30 8d 5b 76 8b 35 89 d2 3a cf e2 19 71 96 4b a6 ae 05 0d 98 4f 33 94 fc e2 ad c6 80 c4 36 31 b1 d0 3e b6 79 ef c8 00 53 1c d6 e6 9a 99 45 b9 c4 8b d7 4e 34 37 53 c8 7b 73 93 3f 7e c3 b5 42 b4 4d 8d 6a 7f 4e 86 31 c6 28 49 cb c3 59 ac 59 a2 38 3e ea 16 49 d7 99 2b 49 aa 77 5b 56 79 ec d0 d4 5b 33 eb ba 0f 70 61 8d 72 ba eb cc dd 9d d2 6b 9c b5 89 51 f5 f8 5a 62 9b 88 74 c6 d7 9d 55 14 dd b5 7c f8 93 d3 3f 69 cc 96 ff fd 13 5d df b9 78 26 df 7c a9 3f 88 5b 6c cc ed a6 e5 42 b2 bc 8e a5 ce 8a 5b 73 9b 85 76 26 be be 79 87 2a 0c 6c 8f 39 1f 4c 22 98 71 a6 75 ae 01 6c 4a eb e3 b2 37 d4 bd eb 8b 99 56 d9 56 93 69 6e e9 a1 77 bd 0f 66 1b f2 ce f7 7d 6e 94 77 bd 20 ce 5c ca da a5 47 6f 30 da f5 74 63 3b 7f 30 0f 48 08 Data Ascii: A^i+^t0[v5:qKO361>ySEN47S{s?~BMjN1(IYY8>I+Iw[Vy[3parkQZbtU\|?i]x&\|?[lB[sv&y*l9L"qulJ7VVinwf}nw \Go0tc;0H
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 04 7d 3c 2b e4 9d 76 38 e0 9d 98 dc d7 74 2e c1 52 60 5d 5f 5b d1 f7 19 2b 9c be e2 58 59 77 b3 2a 70 37 28 32 9b 4c bd bd b3 dd 42 84 79 2f ca 61 17 7d f4 ce 73 67 cf 62 ad 2f 1c dd c3 ce 38 e6 3e e3 d3 dc b1 b9 45 df fa 75 46 21 c6 4d 91 28 16 d5 75 31 c5 bb c7 b6 c7 6d 3b 47 e4 3c 79 87 8f 06 89 c3 90 18 93 48 f0 75 26 26 f6 bb 24 7e 52 de 7e 90 2c 93 ba c7 6f 44 44 ae b0 bb 4c f9 dd f8 62 b3 5e 17 d7 c5 ad ae 15 f5 42 a6 8b 6f dd 04 fc 93 05 84 32 5f a0 bd b9 e6 d3 64 36 a8 b1 32 4e f7 19 32 f6 a6 cd 3c 45 cb ed c3 ea f9 ea 62 d3 3e c9 6e 6a ef bc 97 1c af 37 be 0d e6 30 9f d6 e2 bd 5d 0b 2b 7d bc 3a 41 ab 9c db b2 76 b6 b3 2c 78 aa ad fa 55 76 b1 ec 77 a6 b4 11 07 e9 a6 fd 36 49 86 ef 0b be f7 fd ce 6e 4b b6 65 bf c3 5a 75 94 61 95 9b 5f f8 33 8f 87 Data Ascii: }<+v8t.R`]_[+XYw*p7(2LBy/a}sgb/8>EuF!M(u1m;G<yHu&&$~R~,oDDLb^Bo2_d62N2<Eb>nj70]+}:Av,xUvw6InKeZua_3
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: e3 af 83 89 8f e5 fd 6f 8c eb ee b7 ff 79 ce be 97 ab 6d bc e8 b1 d8 82 b4 55 9e c2 7a 95 6a 3c 71 e8 b7 4a 59 d4 c7 41 fa ed a3 54 9e 00 60 83 81 52 62 71 76 11 a2 79 1a 14 c4 c2 fd 79 08 b7 e6 d6 fb db be e8 53 13 5b 13 62 8b 2f fa 10 7b f0 69 3f 11 ac c1 98 7a a1 62 63 c6 57 ba 33 6a 1c 92 e0 bf 19 6a 65 82 ad 41 af 59 db 6b 7c 1e d7 e3 ad c0 d6 eb fa e5 3b be 61 3d be b6 ef 77 ba 7e fd 93 6d 6d 0c 5b 63 c6 d2 42 0c b1 ea 68 a7 53 53 d7 79 58 98 19 45 82 da a8 f3 9f 6f fd 6d bc 33 a1 47 9c 4d 51 a4 ea bf 14 c7 28 d6 ae 68 71 a9 75 e2 8a 98 d8 ae 9d 85 d8 e0 b0 5b b2 69 a0 0f 33 6f b7 3d c5 65 ef 0e ad 55 a0 50 f9 ac 4f db 7b fc f9 57 5b e5 ad fd 0a 5c eb e8 b1 e6 48 15 c1 33 56 14 c6 9c 63 12 3b 6f 8f cb 35 f5 ae 0e 2d c6 18 fb ed 5a ea 2b 53 53 7b 19 Data Ascii: oymUzj<qJYAT`RbqvyyS[b/{i?zbcW3jjeAYk\|;a=w~mm[cBhSSyXEom3GMQ(hqu[i3o=eUPO{W[\H3Vc;o5-Z+SS{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.6	50092	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:56 UTC	505	OUT	GET /3Wr_nlhRHjIGfPd-BNUbgffLfxPPqNW8GFPscqnQ4t2aPRyKlFMuXT4yhb-PSMsHgss=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 5298 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:21:03 GMT Expires: Sat, 20 Apr 2024 10:21:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 13553 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	721	IN	Data Raw: 52 49 46 46 aa 14 00 00 57 45 42 50 56 50 38 4c 9d 14 00 00 2f ff c0 3f 00 09 47 6e db 48 12 9c 2a 4f 75 60 ff ff c3 bd 24 35 db 39 a2 ff 13 80 bf 79 b8 36 0b 1e b5 28 44 94 e2 ed 7c 8a 9e 71 92 4e af e3 e8 10 cf 2b 33 b9 98 27 01 f0 33 29 49 24 e5 be 49 49 94 d4 11 a4 62 8e 0d 52 2a 62 46 6c 8a 47 2e 51 a1 b9 83 27 ec 81 32 81 b1 81 64 92 ec 9a 00 20 9c d3 2d 97 32 00 db b9 07 1e bb 6e 5b 1c 25 55 96 1f 9d 9d 85 ff 75 01 37 b6 6d 57 cd 1a 22 0f 77 88 08 7f a8 02 d4 7f 2d bf 00 b9 c8 7b 3d 73 f1 31 ec 48 b6 55 2b fd dc df 5b 4f 71 58 21 90 7f 4c fa e9 14 1c 49 b6 5d 35 8d 27 e3 e1 5f a6 91 8d ec fe 57 45 a8 4c fd 9f 00 09 57 b3 71 29 2d f3 fa b8 34 dd a6 cc d7 af f7 d7 c4 ce 44 7e 50 e2 f0 52 45 ec c7 e9 e2 b0 23 40 7d 57 f1 dc 9e 1a ed 23 dc 40 4a 29 55 Data Ascii: RIFFWEBPVP8L/?GnHOu`$59y6(D\|qN+3'3)I$IIbRbFlG.Q'2d -2n[%Uu7mW"w-{=s1HU+[OqX!LI]5'_WELWq)-4D~PRE#@}W#@J)U
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: ad cb b5 8a b2 ce 8a fd 00 c1 9d c3 7b 66 2b 92 1c 5b db d6 36 7a de 4f 92 39 cc 69 87 eb 59 ce 74 cc cc b4 02 2a c7 ed 94 b4 8a a9 e6 cc 06 98 99 d9 20 cb fe bf 4f 72 24 49 8e e4 44 66 cf f4 ec f1 3b 09 4e 14 c8 77 10 00 12 e1 c9 f4 e0 1c 18 d6 95 31 01 21 30 e8 ff 41 ff 0f 26 55 00 89 35 0f 00 17 63 02 22 9e a3 44 9c 79 a1 50 64 ce 07 62 dc 43 01 11 3f 25 97 f2 a2 15 e6 b6 c9 8b 87 4b 29 63 aa ec fa e7 da 5d 8e d0 a4 4c a9 7b a8 04 bc c8 8a a8 bb f6 ea ec 0f 72 b9 32 57 ab f4 bd 87 8b 40 59 86 76 9f e9 34 d3 d9 67 c7 f9 6c f2 cd 48 2c 89 27 0b f3 12 b7 0f 75 3b 13 51 0f fc f9 cf 0f 18 e4 d1 6c 38 6a 9d d3 2e a3 6c 16 e2 39 08 3c e8 10 0b 61 b4 70 c4 ff 22 38 68 a1 b3 ad 10 00 12 4b d2 11 ec 15 85 88 92 f0 2b e7 9f 89 f2 54 88 63 71 8f ff cf 02 41 69 18 Data Ascii: {f+[6zO9iYt* Or$IDf;Nw1!0A&U5c"DyPdbC?%K)c]L{r2W@Yv4glH,'u;Ql8j.l9<ap"8hK+TcqAi
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 79 7a bb f0 8d d3 fd 77 7d 74 50 9d ee 0f e1 9b e6 e7 ef 58 5d df c9 68 3f be f4 0d f5 e5 27 a8 ee 58 ea cf e7 d6 16 a7 c9 92 52 e7 14 cb 69 d2 7b 86 e3 8b c7 07 cb bb e9 70 c1 7b bd 97 c2 5a 4b 37 ae 4f c2 cd bf 5f d4 f1 e5 bd 52 f8 9f 3f 6d ef 23 fa e9 4d f6 aa 98 a7 ca 3c b6 4c 0d cc 26 10 8b b9 c9 5a fb c8 4f 51 95 3a 90 a5 60 60 6a df 13 19 a0 f7 88 7e e9 4f 1c 98 2e f3 fd 93 2d bb 5b bd 5b cc 51 d6 5f eb a9 54 ab 30 c6 08 57 d1 2d ab a3 bf 6b e7 eb c0 8e 3a 1f ce 36 ee 6c 82 58 59 c3 2d 67 57 dc e5 53 9f 12 31 58 a6 c5 ca 18 2b 12 dd 58 8c ad 1d b7 1c b8 64 1d 77 7f 55 5f 75 d6 ce ca 42 c5 c9 b2 de b5 b5 6b a7 c5 64 43 21 4b 81 e9 f6 a7 b8 dd 27 e6 91 75 a2 5f a1 6a 45 c1 58 1f d8 b7 52 3a eb a7 bc 0b 4f ff 85 fa a1 d1 40 bf 84 b2 ea 20 d6 07 76 db Data Ascii: yzw}tPX]h?'XRi{p{ZK7O_R?m#M<L&ZOQ:``j~O.-[[Q_T0W-k:6lXY-gWS1X+XdwU_uBkdC!K'u_jEXR:O@ v
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 5a d2 3e e8 85 d8 67 52 54 5b 64 ca 42 f7 72 d9 46 aa 98 0c fd 2c bc b2 32 51 37 04 d7 86 18 58 84 6e 74 bd 47 14 99 14 17 2b d3 5c 6c e8 69 ed a1 3f 67 d6 28 35 81 01 6b bf 74 6c bb ee 97 92 89 d1 44 f7 42 b2 91 32 31 16 a2 fb 32 fe d1 ca 2a a6 02 ac d5 66 46 27 47 71 fa 75 24 93 01 d1 cd 14 6a 1b 05 d1 8f ee 1c 38 d6 70 29 6d 28 f1 7d 27 f7 f9 47 7f 2e 5e 8a b5 73 10 65 23 1f 31 dc 32 da ac 98 2e fa 51 31 bd 63 47 39 be 2f c7 fd 20 56 0f a4 6c e6 8c a1 9b de d4 1f 2b 8e 51 4d a8 30 f1 f1 4b 7d 4a 7f a2 4d 67 22 8a c8 36 ba 1e da e8 ce 68 53 d6 06 42 89 89 d8 f9 24 97 ef 5f 3f 63 94 7e b4 d1 5e 8a 28 42 d9 d0 d1 8f ee 20 b2 84 28 c2 24 94 e9 9c ae 7d 9c df fb 13 fd 12 6d 28 f3 ba a1 fa d3 ea d4 8a 44 09 57 82 62 3b 13 aa 97 9b fd 48 71 d1 9d 1c 0a 51 5c Data Ascii: Z>gRT[dBrF,2Q7XntG+\li?g(5ktlDB212*fF'Gqu$j8p)m(}'G.^se#12.Q1cG9/ Vl+QM0K}JMg"6hSB$_?c~^(B ($}m(DWb;HqQ\
2024-04-19 14:06:56 UTC	812	IN	Data Raw: 75 fc 45 ee 2a d3 34 77 b0 3f d8 f2 1f 5f 0f 55 a1 e7 07 ba ae 8d ae f9 24 04 c4 83 b1 7b 14 ea 91 a9 7e c1 b9 c1 dd 1e 01 3c 42 56 15 57 d7 d4 14 e5 85 b2 5a 18 e5 19 35 d6 ae d9 f4 38 3f 0e cc 08 98 77 04 d2 de 21 43 23 6e 18 27 66 d8 78 78 d8 68 43 3d 1e 89 23 a3 7e 91 e4 ce da 5a 21 4c 52 1f 0a a1 6d 86 93 b5 4e 87 54 d9 d6 9d 58 c7 23 61 24 7a e6 bc bc 9b 3a 65 7a 87 96 4e b2 a1 75 74 39 a9 ab 28 0f 07 31 aa c3 3a fb 6f e8 64 2a a2 1e 07 66 04 7a 16 ce 77 83 45 65 d4 3c 39 f4 d0 2c 9b c6 7f 87 6c c0 90 b5 2e 84 d0 cb 35 cb c3 e7 d3 c7 1e 05 7a 24 3c 63 dc b5 b4 94 43 dd 33 7d 46 50 c4 7c 26 14 ff dd f2 ad 75 6d cc 0e 46 67 e4 51 40 47 e6 79 67 ee 27 19 e8 75 d6 98 8a a9 7b 8e a8 18 24 f5 b2 36 d4 5a 1f 38 1e 05 e6 cd cf f0 c1 5d 01 49 b5 a9 0c 4f b6 Data Ascii: uE4w?_U${~<BVWZ58?w!C#n'fxxhC=#~Z!LRmNTX#a$z:ezNut9(1:odfzwEe<9,l.5z$<cC3}FP\|&umFgQ@Gyg'u{$6Z8]IO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.6	50093	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:56 UTC	505	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:56 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10968 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:26:57 GMT Expires: Sat, 20 Apr 2024 11:26:57 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 9599 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:56 UTC	721	IN	Data Raw: 52 49 46 46 d0 2a 00 00 57 45 42 50 56 50 38 4c c3 2a 00 00 2f ff c0 3f 00 09 49 6e 23 49 92 04 33 73 8f ee 08 f3 fe ff 83 63 ed 65 e6 1c d1 ff 09 c0 ff 7b dc 95 e6 dc 93 77 9e 24 ad fc 62 09 c0 06 f0 c0 06 e0 de 33 6d 65 1e b1 a6 65 6c a4 33 1e 30 f3 3b 02 60 25 e0 e5 8d 84 08 82 e5 09 c0 0d 29 04 09 32 33 6d 49 77 04 be 25 18 10 eb cc 3a 42 04 24 81 65 00 06 30 cc 33 00 35 31 a5 0f 23 c7 8b 99 fc 94 94 39 69 b7 f6 64 12 c8 a5 fb 05 0b 40 55 ef 03 ad bd f1 42 7d 8c d1 da 18 8f 80 c5 18 ad a5 75 c3 c5 a9 79 f1 55 37 55 37 0f bf ef 7f 71 01 b7 91 24 47 52 de d3 41 1d 2b f1 f9 97 15 ef bf 49 67 c0 6b 33 d3 ad 9d ec 34 92 6d a9 6a 76 14 75 e4 93 47 92 7f 54 fc 25 04 84 e3 48 92 1c 25 ef 0e cd e9 17 2f a2 ac c0 7f 93 30 a1 ff 13 40 82 3b fa c4 09 30 26 4c 01 Data Ascii: RIFFWEBPVP8L/?In#I3sce{w$b3meel30;`%)23mIw%:B$e0351#9id@UB}uyU7U7q$GRA+Igk34mjvuGT%H%/0@;0&L
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 5e 01 5d 3d 59 2c 13 3d 66 66 66 66 66 69 98 a1 a1 78 29 b2 3b b2 15 11 6e ff 2e 50 fe c2 0d 06 52 17 c8 0b b4 af 03 30 fe 7d bd f4 f7 04 62 69 c9 2d 91 5b ef c9 64 8b 71 d1 0d 7f 9f 5c 79 cc dc 3a 40 88 ae 20 d9 cc 52 9f 60 5c 3d 1d 82 4d bd 3d 81 dc 71 f5 fa 02 7b 00 5d 82 5d b9 58 ae 04 48 92 4c db aa 83 6b 7c db b6 6d db b6 6d db b6 6d db b6 6d f3 e2 d9 f6 7b 07 ef ca ad 6d 5b d5 96 b5 ce 7d 1f 99 3b 14 41 11 ee 12 d1 91 35 42 ce a0 06 77 77 22 77 d7 8f fb ee 39 31 01 7a ad fd 57 65 eb 56 6a d4 5c df 76 77 39 b8 bb 44 ee 0e 11 b7 c4 f5 91 11 bb fb f1 73 3e 9b 35 82 b9 36 ba 17 f1 8b a4 3b c3 21 de f2 0f fe c8 48 ff 58 b8 2f 61 e0 cc a0 92 8e 8c b0 1a 29 19 79 25 85 33 83 91 ac f0 ac 10 5f 8d 4c 57 80 3b 3f 24 a3 9d 94 cc 9d 9e 74 5c fb 55 e0 85 7b 05 Data Ascii: ^]=Y,=fffffix);n.PR0}bi-[dq\y:@ R`\=M=q{]]XHLk\|mmmm{m[};A5Bww"w91zWeVj\vw9Ds>56;!HX/a)y%3_LW;?$t\U{
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: e5 43 95 28 29 d4 0c 06 f4 bf f2 9a 67 d7 ab d0 6a 90 36 5d 49 cc 90 89 9b 10 66 88 19 2c c1 e2 fc 1a ce 50 0b ee 0c 51 0b a9 f3 60 a9 33 be fd ed 4e 97 92 c9 27 a8 50 f4 11 aa 93 a2 44 81 51 97 83 a1 8c 8f 32 85 4c 6e 84 30 23 a6 90 29 cc 88 e9 40 94 85 83 e0 85 28 61 95 20 47 46 06 58 14 54 14 29 8a 28 58 c5 7e 1c ae 0c bd b6 90 c9 4d 70 33 45 26 61 11 16 ac 1c 88 5a 48 11 1e 43 8a b0 ca 36 85 8d 01 26 05 07 4a 8a 12 45 55 30 58 e8 8d 32 b0 42 26 84 1b 53 04 61 11 99 44 66 21 2c a4 08 2f 84 12 56 09 29 56 d9 82 21 0a 0e 8a 14 25 8a 0a 18 1c 3c 93 22 c4 a3 b0 10 b1 9d 21 66 10 21 93 30 6f 48 59 48 11 6a 91 12 56 11 52 ac 69 60 02 43 85 12 45 71 a0 c2 00 0e dc 40 09 85 b7 24 07 41 01 84 0b e4 51 40 8e a0 00 c2 05 37 e2 b6 29 82 45 5c 9f 62 d9 55 45 41 0c Data Ascii: C()gj6]If,PQ`3N'PDQ2Ln0#)@(a GFXT)(X~Mp3E&aZHC6&JEU0X2B&SaDf!,/V)V!%<"!f!0oHYHjVRi`CEq@$AQ@7)E\bUEA
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: b2 94 5c 3b bb c8 d3 29 5a 87 03 9f 17 0e c2 0b 52 c2 aa aa c2 41 89 a2 70 50 14 45 0c 60 40 ca 95 1f 79 bf 37 bb c3 cd cf ad e1 c0 91 9b 17 0e 84 17 a2 82 55 86 07 25 85 c2 41 51 94 28 30 cc 8a cb ae 94 ca a4 20 26 07 33 3d 8a 8e 58 0a 19 96 75 2c c9 94 8d c6 6c b6 e6 27 53 c8 d6 c2 f4 8e d5 d7 e3 fd f5 f5 dc 8f 8b d6 8f e0 09 38 10 8f 21 2a 58 25 38 50 52 28 0e 94 42 45 81 61 96 6e 6e c4 15 84 bd 60 4a 00 8f 7c 5b f7 3d e1 63 6e 45 27 54 06 74 00 84 44 67 b6 c2 0a b3 6a 95 ce b1 58 cd b0 cd f8 37 1f cc d7 d3 3c da 91 53 0c 29 6e fc 56 84 c7 90 12 bc 10 39 0e 4a 0a 85 83 a2 28 51 30 8c a6 54 c4 15 06 be 8d f8 c8 1d 76 70 ff e3 76 a0 05 36 12 c1 d3 44 45 b4 88 85 a8 4d 4f b0 7a 97 f0 2d 5e ba 92 7a 76 4a 3b 82 b4 90 20 8a f0 18 52 c2 2a 41 a1 a4 50 dc 19 Data Ascii: \;)ZRApPE`@y7U%AQ(0 &3=Xu,l'S8!X%8PR(BEann`J\|[=cnE'TtDgjX7<S)nV9J(Q0Tvpv6DEMOz-^zvJ; RAP
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 4c 68 b9 9c 31 e2 7d d9 c8 aa 2c 33 16 0f be d8 08 fa 59 d5 89 ff c9 a7 c0 a5 c3 5e c0 8a d2 80 60 17 11 98 10 66 10 f2 e1 2c 29 d7 57 a0 28 52 cc 23 02 b9 b6 47 90 05 b0 e7 2c 50 99 87 5b bc 19 1e 94 65 74 25 24 17 06 44 29 94 28 29 52 9c 3a 9c c6 b1 dd 11 98 9f 4a 8a ca a0 28 9c ae 7e c1 97 45 be 08 41 52 e9 8c af b9 c4 fa 4d 6b 41 1e 6e 78 11 0d 0b 45 2a 97 02 9f 9d e2 2b 28 72 98 43 89 88 9d 6c 86 d3 38 54 a5 a8 78 f0 89 b3 7f ed f9 f5 cb 56 57 57 48 b9 e4 53 a9 81 69 2c 6c cc 0a bf 94 39 c0 a6 5a 51 91 cf ec 29 da cd 09 11 41 44 4a 34 b9 b0 0d cc 1c 29 2a b0 36 a1 04 27 85 8a f2 7a cc af 3e de 7f d5 e4 76 ad 63 ad 23 59 a9 64 53 38 8e 05 72 ad f2 73 4d 12 0b 51 49 97 4f 46 4e a5 14 79 69 c9 c3 61 47 bb 36 64 42 51 51 ee 5d 02 b1 bd fd 44 b3 f8 d3 7c Data Ascii: Lh1},3Y^`f,)W(R#G,P[et%$D)()R:J(~EARMkAnxE+(rCl8TxVWWHSi,l9ZQ)ADJ4)6'z>vc#YdS8rsMQIOFNyiaG6dBQQ]D\|
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 60 1e 94 c9 c0 26 0c da 9b 21 91 09 0c e5 93 d6 b2 fd 0d 32 9d e0 61 1a 92 87 fe 9b 7f 0e cc 6b 4f 38 13 59 fc 43 0e db f1 48 82 a7 05 a3 5e 9a 8d d7 87 b2 28 3f 72 45 7f 24 f7 3a 74 20 89 ea 44 b0 10 82 19 79 ca 59 52 78 a1 38 00 9b 30 16 76 65 61 0b 59 18 db a3 c7 21 1d a4 63 be a3 a0 3d ca c8 8b 86 31 01 42 a2 93 e1 4d 5d 2e 72 89 82 7f 3a a7 b7 3c 59 c5 8c 12 89 05 c6 82 24 76 9b 10 2c c4 60 11 6f e0 0b 7c 6d bf 90 29 e6 c1 b7 ce 14 8c 49 b5 1f 57 03 76 5a f7 34 0c 92 09 25 d6 21 c5 dc e9 9d 05 33 2c ec c6 43 9a 98 82 25 01 3f 37 8f f3 fd 8f ba f0 9e d6 8e 74 8c 34 13 f3 1d ba 83 29 73 9f 82 70 97 25 ac 3f d0 7d 7f 24 16 0e 1e 83 a8 c0 6b 7c c0 73 c7 81 2d 19 98 7d 2d 32 49 99 b6 2d 25 fb 1d 06 cd b9 68 86 bf df 1e aa d6 3f 7f d7 4a 39 85 af 6f 7f ca Data Ascii: `&!2akO8YCH^(?rE$:t DyYRx80veaY!c=1BM].r:<Y$v,`o\|m)IWvZ4%!3,C%?7t4)sp%?}$k\|s-}-2I-%h?J9o
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 48 88 2d 01 a6 84 a1 34 7b 3e 26 6d 30 c7 dd 30 21 de 18 1b 31 9d c0 d6 36 4d d3 dd bb 2f 60 3e 2a f9 98 f4 d9 f9 b4 4e 83 ed e0 ff f2 55 ce cf 5e d1 3a 4c 75 9a 86 61 02 58 b7 be 06 c9 24 46 87 7d e4 41 5b 1c 1f d2 72 00 6c 65 6d 55 8b a7 37 42 71 89 23 0b 69 88 e9 cd 1b ff b9 de bd 37 3d 7c b8 5e 94 0e d3 2f 7c 19 7e 9c f2 91 69 ef fc 25 77 90 75 ef 45 e6 3b 3e af 7e a5 6f 32 d4 c1 cb 30 4d b7 93 b6 b4 9a db 56 60 48 a9 11 39 c2 b1 58 db 3b 61 22 9b 56 d4 41 8b 26 97 c0 45 b2 d6 1a b3 d9 63 9d 22 ca c6 33 d1 7f 11 b3 ba 24 87 1c 06 99 a2 e1 9c 3e 96 1f 9d a7 9f 91 97 9f 35 3f db 9c de 6a 97 c2 57 7a c7 b7 fb 50 5d bd 64 cf bd 57 b0 85 20 16 75 27 d6 4e 44 f2 ce d9 1f 0d 6b 00 b9 81 0e 25 41 a2 0f 1f 3f 2c d0 d0 3a 78 23 7c f5 89 75 b7 5d ed c2 c9 c7 1c Data Ascii: H-4{>&m00!16M/`>*NU^:LuaX$F}A[rlemU7Bq#i7=\|^/\|~i%wuE;>~o20MV`H9X;a"VA&Ec"3$>5?jWzP]dW u'NDk%A?,:x#\|u]
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 46 13 76 b9 2d eb eb 0c ba 2f ec d2 a2 73 7f ad ff e5 43 4a 65 ae 0e 78 42 b2 8a 63 48 ee b8 fd 71 cf 94 f4 d0 c1 a6 24 63 a9 7f e0 29 fd 6d eb eb 31 c0 00 13 08 d6 5e a2 80 90 eb 40 27 41 8e 5b 2e 77 ac 38 75 9d 76 f6 8a d3 cf 95 12 7b b1 2d 32 e4 29 6b 97 4f 07 79 3a d0 db 85 76 5b a8 4b 58 d5 63 34 b7 9a 23 12 56 b1 47 c6 9e 6a ec b1 ef 69 15 4b 93 1b 93 c1 f0 41 7f e0 89 f2 8c 25 6a 78 08 cc 83 ac b3 83 30 50 72 fb bc d1 0a 6c 2e 4f f3 1d 0b 3d e6 c9 be 53 b2 1a 2c 2a 32 37 81 15 c8 4e 18 ae f5 d1 17 db 85 c1 af d5 91 5f da 32 ed 3a 76 16 29 6c f3 70 1e 0b 7b ef 41 82 02 c3 ef 6e 19 8c 0a 6c 6f 21 4f dc 39 27 1c 60 2c 20 e5 21 39 10 45 8c 42 28 09 37 49 c2 c9 85 7e 67 cd cb f3 49 b7 fe 52 2d a5 6e e5 b0 67 54 60 25 65 79 8c d5 19 89 7e b9 69 ee d5 52 Data Ascii: Fv-/sCJexBcHq$c)m1^@'A[.w8uv{-2)kOy:v[KXc4#VGjiKA%jx0Prl.O=S,*27N_2:v)lp{Anlo!O9'`, !9EB(7I~gIR-ngT`%ey~iR
2024-04-19 14:06:56 UTC	1255	IN	Data Raw: 8e 64 49 3c b8 39 ce 72 42 87 e3 33 54 d4 c6 a4 94 33 ba 28 95 b6 e3 e4 a8 02 07 30 f8 03 3f e4 c9 f8 25 95 5a 7d ce b9 27 a4 15 45 a7 cc 9d fb 9f f3 e6 07 03 b6 ab 06 7e 50 1a d1 83 7d 6f 1f 14 d2 81 f2 a0 74 b8 d7 ac 79 0c 53 4a 19 6c d8 6b 8e ec b3 cf 7b 71 a4 ca d1 62 3f e0 0c e5 d8 50 93 42 9f 27 62 06 87 c6 68 67 64 a9 df f9 19 66 91 f0 d9 26 69 f3 ac a7 7f 6e 40 cb ea c6 12 de 7c 56 0f bd 58 72 99 92 0c 2c 0a 79 eb 20 83 1c 25 ad fd e0 29 8c 9a 82 31 60 ae 9a 85 a3 6c 9b ca a7 b3 08 45 28 98 0e a8 a8 d3 a1 ac a6 3a 62 56 eb 83 af ae 77 bd bd 26 9a 64 47 5d b1 cf b9 e2 dc b1 5f 83 da dd 5c 94 05 39 a6 fb d5 aa b3 c6 23 ef 74 70 cc e1 80 39 b2 19 99 66 0f c6 60 ac 41 4e a6 9c ad 21 95 38 51 0e f2 5a 84 b4 28 42 5a 52 52 f2 6d d5 68 e3 01 b0 ca 83 ff Data Ascii: dI<9rB3T3(0?%Z}'E~P}otySJlk{qb?PB'bhgdf&in@\|VXr,y %)1`lE(:bVw&dG]_\9#tp9f`AN!8QZ(BZRRmh
2024-04-19 14:06:56 UTC	207	IN	Data Raw: 68 b4 67 19 be b3 78 ee e7 e7 ce b3 6f a6 e3 72 c7 cf 6a c7 7d 5b 7c 03 77 0c a3 3b 1d f1 f4 14 ef ee ee 7e ee e7 16 91 0e 3a 3a d2 a4 75 e8 f4 d3 b3 a7 de b4 74 36 1d d2 d2 3a 8d 48 37 d2 4f cf d9 b4 e8 a4 e9 6c 3a a3 8e 6d ba 3d e9 90 6f 3e e5 5d 46 f2 cd 7c f3 e9 49 10 1d 5a 74 b4 74 3a 8d b8 d8 82 86 18 b7 6d e8 e8 68 c3 74 34 82 de 18 35 69 a1 d3 3c f7 73 9e e2 5d 9f 8b 3a 36 1d 5a 3a a4 0d 5b 3a 3a 74 c8 73 5a 3f d1 b1 6d 41 0b 3a 9b 86 74 90 e7 f4 53 eb 0b 74 3a 2d 1a dd fd d4 f2 ae 23 22 1d 3a 3a 3a 9d 0e 3a ee dd d1 b1 ed 6c 3a 1d c3 16 1d 0f d8 71 b9 49 c7 b8 a3 d3 2d f4 bb ef af f8 bf cf ff 7d ad 04 00 Data Ascii: hgxorj}[\|w;~::ut6:H7Ol:m=o>]F\|IZtt:mht45i<s]:6Z:[::tsZ?mA:tSt:-#"::::l:qI-}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.6	50096	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	505	OUT	GET /PH-2iORSfQs-iizoHzePXBaJCXml443pgoC14-lZESLFIp78A4SvxLKUVv1FyIQFtC8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3812 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:30 GMT Expires: Sat, 20 Apr 2024 12:58:30 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4107 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	722	IN	Data Raw: 52 49 46 46 dc 0e 00 00 57 45 42 50 56 50 38 4c d0 0e 00 00 2f ff c0 3f 00 4d 38 72 db 46 92 e0 96 66 9f ff 7f b8 dd b5 9c fa 1a d1 ff 09 c8 4d 3f 36 81 6e 01 d5 0d 60 5d 06 f6 63 82 e8 09 ec 4c 70 32 01 3b 30 04 24 2a d8 59 12 c5 ce cc df 02 76 a6 5e 4a 02 76 e6 a2 06 ec ac 88 ca bb b1 26 5e b3 2a 17 ac 4b 61 47 54 f6 c4 ec ba a7 0b a8 b1 6d cb 8a 76 fe 31 02 bd 04 b3 7a 01 b4 fb e3 53 58 24 6e db c8 68 2a ec ff 5f 37 3c 7c f0 80 e3 48 92 a4 a6 f0 00 ff ad 4b de e7 bc 01 29 fa 3f 01 e9 47 7f 5b 67 dd b9 33 98 13 00 a6 04 7f 30 40 4c 00 80 00 7a 1d 18 7a 8f b7 6d 8d 40 00 10 ff 9e ae 03 29 c5 d0 02 77 61 c9 20 9d 39 94 12 ee c2 6a a4 fd e3 87 15 7a 8a b0 24 a4 c3 6f ad e0 ab 3b b1 42 c7 d6 c1 4d 00 21 a1 76 52 14 00 03 30 91 ce ad ca 9e 00 80 80 74 56 80 Data Ascii: RIFFWEBPVP8L/?M8rFfM?6n`]cLp2;0$Yv^Jv&^KaGTmv1zSX$nh*_7<\|HK)?G[g30@Lzzm@)wa 9jz$o;BM!vR0tV
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 34 07 85 9a ec a9 fd d3 73 c7 65 a6 b4 43 a2 28 04 c2 3e fb 69 8f f3 f9 40 69 96 69 c0 c5 e6 dc 22 f6 8f 88 de c5 48 2e 48 52 60 dc 48 b5 57 0a 42 4e 8c 3d e3 be fa 39 7a 0f ef e7 85 d4 ac c9 9e b9 5c 59 f7 73 45 9c 3b 71 a0 50 a1 8c c4 35 69 b5 e7 32 30 3a b1 47 dc 48 8e 7f 74 76 79 a7 2c 15 9e 6b 54 89 ad ca c6 08 98 f7 84 fb 4f e3 dd b2 90 96 32 26 c9 98 0c 0c 69 9c 36 9c 49 0b 21 b9 16 e2 ca 78 d3 37 fb c1 ab 38 76 cd 24 b4 43 33 3d cf 19 8a 72 e3 fa bc 72 f3 3e 70 43 ce 1c b3 71 25 2a 51 13 cc b6 4d 9c 71 41 60 98 d6 93 07 7f fb 6b 7f 1f 38 f6 de 8f 36 ce 9a a3 34 33 54 23 e0 95 66 91 da 37 bf fc e5 db c3 79 f7 bb 72 5b 74 54 c3 52 86 6b 90 5c 2c 0c 04 46 61 60 c5 40 48 6e 5c 7f eb 26 73 ed 7a 37 26 aa 0e 37 a4 43 4d a6 01 c5 8a 82 a1 a3 34 93 b4 40 Data Ascii: 4seC(>i@ii"H.HR`HWBN=9z\YsE;qP5i20:GHtvy,kTO2&i6I!x78v$C3=rr>pCq%*QMqA`k8643T#f7yr[tTRk\,Fa`@Hn\&sz7&7CM4@
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: a5 bb f7 e7 7d f8 7b 4f d3 ad 9f cd f7 a7 83 66 c1 d0 ce 62 9e 04 06 63 54 79 e6 d2 8f b1 4e 94 bb f9 67 ce 5c 3d f9 d9 db 36 bf 3c 14 51 07 2e da cb 06 95 2c 30 34 43 e6 16 89 24 a3 1f bb 74 57 d7 e3 cf d8 ba be b1 6e d9 db 01 fe e4 dd 3c a8 c3 3c df 57 b2 b6 72 a6 26 cd 8b ad e3 b4 a1 10 54 10 cc a4 bc 93 5c 31 df 76 2e bf d8 77 bd dc a6 2f 08 ee 6f bd f6 b5 db ff 3f 2b d2 af 1c eb e7 36 41 b7 e8 b6 ac c8 14 49 e0 46 bb 95 ff 81 44 3a 1c 66 f3 41 1d e9 94 aa bb a8 f2 f0 43 22 5f 3f db 9d d7 c6 6d f2 56 ac 77 52 47 7f 33 ab 9e eb 35 51 5c 89 42 69 56 48 a4 fb 85 42 a9 53 a8 c3 7a d4 4e 77 70 e5 43 ff a9 e5 2f 7f f8 ab 6f 45 b8 4d 73 e8 da c9 d8 90 30 10 18 d9 90 c3 b4 8c 59 b3 1c 4e f7 84 57 24 ea 2e ca f2 44 c7 4f 08 f3 b5 47 fd 02 7f b7 e9 46 5a 81 98 Data Ascii: }{OfbcTyNg\=6<Q.,04C$tWn<<Wr&T\1v.w/o?+6AIFD:fAC"_?mVwRG35Q\BiVHBSzNwpC/oEMs0YNW$.DOGFZ
2024-04-19 14:06:57 UTC	580	IN	Data Raw: 4d ab ec f6 d7 9a 2f a0 e5 15 6a 22 0e ad e2 51 48 51 44 9a ad 18 4a 30 0f d4 61 7c d4 d8 e9 2f 98 df f2 36 6f b3 e2 4a 91 c2 62 5a 36 0e 65 3a e0 a2 3d d4 a2 c4 1a 36 d6 ee d6 ec ef fa 2f 9d 6e 3a 9c 78 49 b6 4e a6 03 4a 3b 4c 53 1c 22 6c 4c bb 7a a2 10 66 0c cd b4 39 35 53 33 5b 54 44 9d e6 58 6f 4c ec 93 43 27 1a 6a 93 e2 11 d5 50 ad 58 6b 8d 3a ad f6 c3 42 c2 b2 68 96 90 8d 55 f3 64 cb c4 aa 22 6a 8d 2b ab f6 84 66 c1 bd cb 04 43 51 5c 90 10 1b a2 a0 6a 8d ba b1 5e da 43 4f 2b 03 c2 b6 a5 5d 81 91 58 55 7c 63 e5 9e 91 93 ff f1 06 81 b0 ed aa f9 78 43 49 d3 28 d6 b5 be db e6 da 17 da f7 95 ac 43 22 67 db 9e 1e 87 4a 18 cc eb 77 db 37 13 65 7a 42 9a 46 2d 12 eb 04 81 81 30 7f 66 dd 94 fb c2 d6 2f 87 f6 18 66 c8 24 61 d4 1a b5 56 54 9f ed a9 39 b1 f4 96 Data Ascii: M/j"QHQDJ0a\|/6oJbZ6e:=6/n:xINJ;LS"lLzf95S3[TDXoLC'jPXk:BhUd"j+fCQ\j^CO+]XU\|cxCI(C"gJw7ezBF-0f/f$aVT9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.6	50095	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:57 UTC	506	OUT	GET /UJ30yiWUe0-y1UzPCwMPRsKmAvcC4Q_tMlvL413TRPg0ySO1YhAlwBTbxMsJElGmAzx_=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:06:57 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 41480 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:37 GMT Expires: Sat, 20 Apr 2024 12:46:37 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4820 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:06:57 UTC	721	IN	Data Raw: 52 49 46 46 00 a2 00 00 57 45 42 50 56 50 38 4c f3 a1 00 00 2f ff c0 3f 00 09 88 91 e4 86 6d 06 80 f1 87 07 ad fe 0b a6 9c b4 10 d1 ff 09 88 93 11 fb 99 01 06 92 99 91 b2 33 9b 4c 38 e7 44 64 26 33 33 cc 6c 8e 21 7b f2 86 ca 43 be ec 4c 66 6e 4e 42 66 fc 48 07 a8 93 99 19 c3 5b 4f 66 e6 31 38 06 98 ac 31 6d b4 3d c0 c9 cc 99 f1 e0 2e c0 16 b8 0d d2 b0 63 32 3b f3 b4 f6 03 7b ec dd b5 1b 90 66 a6 39 e9 cc 44 0a 0d 70 b5 b9 3b 27 ba cf e4 35 46 12 38 76 eb 01 81 ed 47 ea ee 04 a6 17 4c fb 91 bc 00 5d d9 20 a9 79 f1 de 06 a4 45 ed 32 b0 3c 99 09 cc de fe f1 d0 76 bf d8 4e 4a e3 dd b5 1b a0 1d 4f 7c 1e ee af 6d 03 11 11 6d ef 2e b8 fc 3c e8 c5 75 fe f0 3c 62 77 ed 63 00 09 9e f2 49 c3 e7 42 62 b5 b6 9f 8b 07 6c 7b ed 3d 11 b1 e8 76 f9 e1 76 45 d4 d7 9f 9d 19 Data Ascii: RIFFWEBPVP8L/?m3L8Dd&33l!{CLfnNBfH[Of181m=.c2;{f9Dp;'5F8vGL] yE2<vNJO\|mm.<u<bwcIBbl{=vvE
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 38 6f 6a 22 bc 34 6b b1 16 21 44 01 61 b4 c0 57 1e 78 e0 27 f9 eb 1f 3f 09 8d 7d 06 53 03 97 f7 87 3b 35 a9 36 65 a5 7f 5e ff 6c 3e f0 c6 03 2c 09 21 04 84 13 8d e4 dc 3c c0 c3 9d 4c ea 8e 72 e1 fb ca b1 43 6c a0 20 00 05 73 07 9f 06 44 96 ec 97 76 4c 79 c8 ae cb 6a ca 92 1b dc 71 47 b9 2c 00 01 81 c2 7e 86 ff fc a4 d1 08 a1 17 91 18 c6 f0 4e ff 7e f3 ca 96 46 e3 a2 ea b5 59 3a a4 50 4a a0 28 14 1c e0 40 08 0f 34 c2 d6 a0 4d 7a 76 91 59 9b d5 9c 71 3f b3 fe 3c f1 13 73 e6 cb 00 28 90 02 00 a5 ef e0 fa 33 e1 85 17 42 d8 ce ae 5e be b6 07 8d 46 9b 75 31 6e b3 b8 59 3c c4 cf b3 c7 f3 b1 05 0c 03 86 f3 0c 3b 7e f2 70 b4 fc 68 cb 9a 07 1a 2d ba e8 fa 3e 58 4d be 1a 2e f6 ab 0b 0b 25 1d 21 20 a0 14 14 00 9e ef 11 7b 12 61 cf 9e d0 da 2e 4a 2d 8f e6 c7 00 c0 05 Data Ascii: 8oj"4k!DaWx'?}S;56e^l>,!<LrCl sDvLyjqG,~N~FY:PJ(@4MzvYq?<s(3B^Fu1nY<;~ph->XM.%! {a.J-
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 68 d2 d8 70 d2 49 4b ac 07 6d 28 5c 57 20 78 68 d0 25 96 41 a7 60 c0 9d 54 b0 e6 2d c8 d2 84 07 17 5d 70 d3 58 74 c1 3f dd 87 1d ac 0d 45 75 03 c7 9f 93 34 17 4c 1a cf 23 b4 03 2a e5 27 3d d7 20 53 54 de d0 6c 98 74 27 6c b1 1c 74 6d 28 98 4b 5e a2 de 1b e8 4d d3 12 0c 9a 30 e4 95 83 1e 0b fc d6 b6 ed da 95 6d 5b a5 d4 36 00 ac 88 d8 9c 33 89 6f 07 b6 01 5b dd 56 70 af b6 0b db 9f ad 6e 89 13 69 11 60 8e de aa df da b6 55 db b6 6d 2b a5 5c 27 e3 66 26 07 18 9c 40 7f d0 b1 ed 08 4b 5b da 2a 9d 33 69 8d 9a 62 02 fe 83 be bc 80 67 30 ff 64 00 cf ee 62 a4 08 17 f1 4c 9e 54 7a e2 97 df 80 27 67 31 af 12 3c 85 9e 26 4f 75 59 cc af cf f1 34 56 a6 62 85 1f f0 9c df 41 cf aa b5 95 a0 98 56 2b e0 12 3c ef 29 80 7a ea 2e 43 c0 63 45 ef 6f aa dc bf d3 00 7e 10 f0 00 Data Ascii: hpIKm(\W xh%A`T-]pXt?Eu4L#'= STlt'ltm(K^M0m[63o[Vpni`Um+\'f&@K[3ibg0dbLTz'g1<&OuY4VbAV+<)z.CcEo~
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 71 02 4e 90 81 df 67 02 c9 ce ac 1b b3 cd 43 e0 6e 48 0f 01 cc 34 e0 97 17 a0 77 90 04 18 2f 14 c2 13 3a cf 36 43 bc ef e7 1c e9 98 06 21 17 50 3c 5e 98 5f 69 9a d3 07 16 80 27 98 6b 9d 82 1d a8 3c 1f 7d 1d cc 6b 93 58 ee d5 5f 34 01 19 90 9f 2d 13 63 ae 0c 17 24 42 55 98 1e 00 51 00 1a 33 aa 19 3d 84 38 1d 63 07 84 c0 93 0a 60 e6 cd 34 68 81 06 02 7a 4f 67 79 80 e7 54 2c 16 c0 cb 83 fb e4 22 d8 8c 26 7d dd 27 68 a1 2f b1 1d 00 b7 e7 15 60 f2 b4 76 a6 2b 5a b8 fa 85 a9 4b 13 68 0b 86 fb 70 bb 37 ab b0 58 6b 02 99 78 b4 09 9e a9 02 01 ca 09 81 0d cb 36 10 40 cf 03 e8 00 9a ac 2c 16 9b 99 b5 bb f1 8c 06 d4 dc 0b cb 09 c0 cb bf 32 26 b3 69 13 8a 00 02 88 a8 5a 30 62 3a ee af 45 48 d2 19 c0 1b f8 8a 5a 6a 70 c3 0f b7 0e 88 6d 81 46 72 74 db a8 4b f4 6e c0 d0 Data Ascii: qNgCnH4w/:6C!P<^_i'k<}kX_4-c$BUQ3=8c`4hzOgyT,"&}'h/`v+ZKhp7Xkx6@,2&iZ0b:EHZjpmFrtKn
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: b7 5c 53 33 05 5e 00 cc 6c f3 84 3f 79 8e 39 6b 65 70 22 b9 b0 00 65 b2 35 48 e0 40 94 54 25 50 35 de 05 07 85 80 48 20 a6 1d 30 57 0a 39 62 b6 07 3f 1b 03 e0 02 8b 69 6e 80 d3 6a 42 05 15 40 a0 04 af ba 4f ce 67 73 f0 64 bd 00 40 9a a4 d8 16 0c 61 fa ba 50 81 c1 34 87 16 6a 21 41 13 91 b9 95 79 a5 06 90 bf f5 ef 11 02 4f d4 6c c8 8d 83 12 48 4c bf 50 7f e3 46 bf 8b a4 0a f4 00 4f a6 32 90 89 c0 62 b1 3a 78 30 0d 0f 4f 08 c0 d8 98 5a 10 4f 28 64 10 b3 2b 4b 7d 9b 5c 5b 73 40 cd c0 2b 77 c2 18 63 30 2b b1 fc c5 cc 6e b6 41 f6 9c 68 e7 24 bc 10 3e 43 43 f7 9a 48 13 56 21 76 6f aa ff 95 e7 7f e6 d1 3f a5 fd 21 09 15 43 55 01 14 a8 b2 11 40 ef c0 57 01 05 d8 42 c6 73 1d 1e 9a a3 59 9a 14 df df 3e c4 9b 32 91 37 33 5b c1 f0 b8 4f be 03 2c 2c be 4c 2a 90 25 67 Data Ascii: \S3^l?y9kep"e5H@T%P5H 0W9b?injB@Ogsd@aP4j!AyOlHLPFO2b:x0OZO(d+K}\[s@+wc0+nAh$>CCHV!vo?!CU@WBsY>273[O,,L*%g
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 90 09 54 ad 0e 20 94 23 b1 96 84 77 a6 27 b3 15 3d 73 c6 40 9f 41 3f df ad 49 dd fb 73 7c fe 13 b3 59 d5 cc 84 04 90 be 32 7d 03 fd 86 02 c5 00 78 58 50 cc 0b 75 e6 3e 75 91 7f 22 99 69 c5 02 70 77 9f 01 6a ae 60 44 05 cf 8e b2 a1 07 b0 8c 82 c8 6c b9 d5 9d 37 af 5e 5e ef 74 b9 5d 8a 9b 53 9a 87 f1 a9 d4 c9 66 33 d1 ae 1f f5 cd 0a 8d 39 e2 92 56 7d d9 22 fa da c5 86 6f 1a 14 d3 cc 73 25 94 94 fd cc 7f f9 5b c9 df cd 0a 96 9f 69 77 e6 bb 59 f4 5d 2c bf 55 cd ac 7a 32 9b 16 3e a9 c1 90 8c 13 f0 83 69 26 12 6c 40 ff 31 9c 7a 11 33 89 04 63 50 66 5e 63 d3 64 55 a8 f1 be 1d 2d 45 62 33 9f 0d 30 aa 6f fb f0 da aa 7a 29 ac 7e 3c d1 ed 22 d5 55 0a 73 bb 4b fd 28 86 4e 78 ed 46 6f 17 a4 68 d0 c6 8d 94 cb b6 35 f4 bc 8f fb 85 b0 1d c8 5d 96 92 50 fd 7a 54 93 b4 7d Data Ascii: T #w'=s@A?Is\|Y2}xXPu>u"ipwj`Dl7^^t]Sf39V}"os%[iwY],Uz2>i&l@1z3cPf^cdU-Eb30oz)~<"UsK(NxFoh5]PzT}
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 1e 8d 62 d9 14 30 98 06 04 d4 e0 3b 30 27 63 04 3c 93 9a f1 dc 56 93 d9 0d f6 60 0b a8 30 40 28 e4 a3 24 ae ae 9e 42 08 06 f0 6c 2c 6a 5c c0 7c ba a8 b1 af e0 7d f4 83 69 c7 20 a4 2a 02 45 f3 45 d5 d9 6e 7c 49 52 25 5b d2 07 d4 85 6e 9e 83 67 96 0c ad c0 65 19 41 f6 b1 49 dd 4a b0 be 58 21 74 ca 84 14 18 3f dd 27 dc 19 7d 36 1e 30 0e 3c ce 1b fb bd 5c 1d ec 4a af 81 20 20 01 76 5a 03 0a a8 d5 f0 8e 65 40 62 fe 84 7c 99 21 18 4f c2 6c f1 3a 11 68 a1 00 e4 c7 04 0c 60 66 eb ba 8f ec 74 f1 b0 00 ec 7a 79 9d 4b ff 10 e9 73 e5 96 8c e3 04 34 76 24 7a 83 38 e8 35 c1 26 6f b0 b1 4f f7 83 ad d9 95 e9 f6 c6 61 d7 88 ce 7a b4 3a 80 87 2d a3 b3 69 65 6a 3f a9 69 b2 67 98 2c ed 76 5d 7c bc 9b 91 99 99 ea cb 50 c4 c1 d8 c7 78 fd 7e 2a dc dc 3f fc f5 63 3d 78 3a 99 42 Data Ascii: b0;0'c<V`0@($Bl,j\\|}i EEn\|IR%[ngeAIJX!t?'}60<\J vZe@b\|!Ol:h`ftzyKs4v$z85&oOaz:-iej?ig,v]\|Px~?c=x:B
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 0d 62 81 19 83 31 66 c6 18 c0 60 58 70 48 62 b9 cc 72 27 1d 76 fb c4 90 c6 36 09 fb 14 6a 12 b8 86 9f fe 92 41 6c a5 15 8b 8e ee 5a 48 0b a7 67 af 6b bf 05 bc 8e db d2 5b b6 4d 32 c1 2f 7d a3 b5 ad 4e db e4 dd 53 97 7d c6 0a 9f 57 c9 2c 55 41 b6 71 99 d5 21 ec 02 7f 0b b7 f8 07 7a a3 98 88 fe 5e 74 64 60 cc 75 da 85 7a 0d bc 04 9f 02 c7 c3 2a e6 6f 0d 7b 6c 8c 81 d9 70 c1 fa 68 40 d5 49 ff 3f 7e 01 09 0a d8 0a 7a 67 d6 14 d3 15 8a 2c 4d c5 b4 53 33 d3 5f f7 2d 00 32 4f 01 63 8a de c7 00 b4 e9 78 53 e7 4a 89 53 73 4d a2 c1 0f 5a d7 f7 55 ad 4a 80 88 01 21 55 1d cd b9 3d b9 76 1e 2f 7b 21 5e bd a7 87 15 e7 32 e6 a2 2e 82 0e 8f 48 64 bd db cc 0b ee 08 38 a7 14 82 52 87 51 0e 7d 86 b1 3b f7 d1 9b 2e e1 04 95 28 ee 3c eb b1 5a 32 c1 ae 75 95 a9 b7 d3 ed f6 a6 Data Ascii: b1f`XpHbr'v6jAlZHgk[M2/}NS}W,UAq!z^td`uz*o{lph@I?~zg,MS3_-2OcxSJSsMZUJ!U=v/{!^2.Hd8RQ};.(<Z2u
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: 6b cd 7e 1c 22 3a da ec 24 b7 f7 f7 f7 74 85 44 96 83 b5 b7 5d 67 d5 37 47 12 c0 fb a6 db ec 6f 8e 7d 21 03 23 b4 da 98 e2 ae ba 07 5d ce 35 39 41 80 c2 fe d6 50 c6 c0 1d 56 5e c0 26 bf c9 3d f0 cb 32 a1 90 14 8c e1 b4 86 14 78 c4 56 87 de 13 99 8f 6c 6c 21 a1 1c 98 14 15 b6 af c0 31 02 c4 84 4f bf 76 59 e2 5a a7 13 51 95 17 5d 7f a2 11 58 e4 10 7c 6b fb 60 68 6f 04 58 aa 4b 05 2b c6 31 3b f5 3f 5d 2b 5a 05 ad 98 4f 07 30 d8 cd e2 d6 bf b5 14 51 2c 22 06 6c 4b 66 50 c6 72 5a e9 0c dd 8b 7e f3 70 63 4c 5f a9 45 3a 8c 32 75 0a 2a f8 58 6d e2 00 68 88 84 2c 67 ba 78 54 47 56 7a 1b bc fc 5e 71 cc 9a fc c2 54 d6 50 16 cd 66 63 2e 85 78 30 bd b0 b0 20 45 20 af fa 35 14 c5 44 6f e9 24 0c bb 54 ae f5 c2 b4 f9 2f 36 ff ff c9 1a d0 6b 63 b8 81 e5 f4 02 5b d0 a1 03 Data Ascii: k~":$tD]g7Go}!#]59APV^&=2xVll!1OvYZQ]X\|k`hoXK+1;?]+ZO0Q,"lKfPrZ~pcL_E:2u*Xmh,gxTGVz^qTPfc.x0 E 5Do$T/6kc[
2024-04-19 14:06:57 UTC	1255	IN	Data Raw: ae 73 cd ab c7 db ff 66 b9 0b 65 11 59 a9 ee 5c b7 14 08 10 4a 96 9e f2 29 00 9f 27 60 cb 0d 9e b9 76 c0 9e 74 e0 2b 08 f0 c7 fc 88 a5 87 dd 23 c6 3e dc 7c af 0b fc f7 f3 f9 17 bf 31 c3 77 6d d8 7b bf 6b 8b 8e 63 cb e1 7a ef d1 92 74 44 1c 5d e3 c4 5b da e2 58 19 1d a5 a2 59 4a 4d d9 f0 13 75 bc ad f5 f2 93 20 ca a3 56 1d fe 4c 71 f3 35 61 91 87 08 3a c2 69 21 06 27 30 b6 14 43 d4 cc 73 4c 1e 65 1a b2 a8 55 83 0e c7 80 04 6b 29 d2 bd 7a 86 63 8a 05 b3 fa ba 2f 2d 09 a3 f7 b6 50 40 00 90 c0 17 25 d8 b5 7d 3b 5a 8d ff 7e 31 47 2e b4 43 06 7c dc 6b 05 1b 53 c1 ee 57 fb 90 ba 78 fc ec be fd c0 2f 14 d3 ad 2d ff ac e2 38 2b af cd 2f f0 77 2f d4 a3 20 ed 77 95 0e 94 12 80 11 e6 de 6f 19 f8 42 a6 72 80 2d 84 f9 b2 81 01 d5 ff 89 7f 12 15 04 7a 08 93 d1 21 04 20 Data Ascii: sfeY\J)'`vt+#>\|1wm{kcztD][XYJMu VLq5a:i!'0CsLeUk)zc/-P@%};Z~1G.C\|kSWx/-8+/w/ woBr-z!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.6	50098	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:06:58 UTC	771	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahAvZyr0H0NRCnjg-4-dMJTRBiLvcPTNs2ukbQS8YRK9joXovvE-UQMrhWL6kaD8Q2KdwpXNKLEFUSZkP8; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:06:58 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:06:58 GMT Expires: Fri, 19 Apr 2024 14:06:58 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:06:58 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:06:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.6	50104	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1081	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 498 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:31:10 GMT Expires: Sat, 20 Apr 2024 13:31:10 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2150 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	498	IN	Data Raw: 52 49 46 46 ea 01 00 00 57 45 42 50 56 50 38 4c de 01 00 00 2f ff c0 3f 10 4f c1 a0 6d 23 49 9e 99 65 71 34 8f fb 7f 57 1a 08 da b6 8d 33 2a e3 0f 71 3f 82 b6 6d e3 ae 2c ce 1f d7 99 4c 63 1b 49 92 93 46 cb a0 09 8f 10 30 f1 c1 d2 1a 02 50 22 40 88 34 ff c6 bd b5 b4 39 70 f9 4d ac e0 b7 3e 6b db 77 16 5a ef 9a a9 5b 95 2a 51 0d a2 40 10 3a 15 2e 2d fe 00 6b 01 41 18 d0 e1 2b 22 4c ff d3 07 f8 21 c1 b6 6d b5 6d 64 fa 37 f7 86 e1 eb 7f 85 19 e6 3f 4b fb 41 51 8a e8 ff 04 0c 8b ff 17 ff cf 47 dc 7e de 5f 5c 57 2b 6f 8f e2 b5 7e bd 69 bd 55 33 ef 8e 11 ad af cb 5e 4d bd 3b 21 62 f5 36 8d d5 1a 11 91 fa 99 aa b5 77 27 12 11 a7 d5 55 35 49 44 98 5e ba 51 22 82 b4 e9 d5 2a 11 31 7a 1f ed 12 11 a2 c7 6e 98 88 08 9d 37 cb 44 04 a8 55 d3 44 c4 a7 1a 27 22 7b 22 b2 Data Ascii: RIFFWEBPVP8L/?Om#Ieq4W3q?m,LcIF0P"@49pM>kwZ[Q@:.-kA+"L!mmd7?KAQG~_\W+o~iU3^M;!b6w'U5ID^Q"*1zn7DUD'"{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.6	50107	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1082	OUT	GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:00 GMT Server: fife Content-Length: 532 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	532	IN	Data Raw: 52 49 46 46 0c 02 00 00 57 45 42 50 56 50 38 4c 00 02 00 00 2f ff c0 3f 10 3f c1 2a 92 a4 56 73 e1 9f ec 02 d9 b8 43 40 78 d1 86 80 a0 c8 ff d1 d8 34 92 e4 a8 fb 7c 7e 3a 1a cf 1f d7 a7 6e 18 d5 b6 b5 63 7f ff e8 a4 95 00 6a 69 a0 82 99 00 df d4 d4 0b 00 6c 20 81 0c fa 7f e6 48 0b a6 cb 27 3e bf 4f 3c 7e dd 3a 5f fb f8 d1 7e 70 0e 25 25 25 01 48 40 28 e8 b7 20 70 5f c9 d9 95 91 f5 89 a2 59 8f 32 5c f9 e1 87 e7 45 80 40 12 24 4a 92 dc b6 15 95 0e bb ce 36 01 52 d2 3a c7 ff ff 49 16 4a 05 e0 1c de 23 23 fa 3f 01 dd e2 ff c5 ff f3 11 b7 6f 87 ab 3e 96 72 bc 6c af f5 63 9f 52 8a c5 dc 9f a9 b5 be 6e 87 58 d4 fd 39 d4 56 2f 63 2c ec fe 9c 50 4b 7d 8e b1 40 84 da 69 75 17 8b 44 a8 99 ee 53 a1 08 35 d2 66 88 a5 22 d4 46 af a9 5c 84 9a e8 58 32 42 2d 74 53 34 42 Data Ascii: RIFFWEBPVP8L/??*VsC@x4\|~:ncjil H'>O<~:_~p%%%H@( p_Y2\E@$J6R:IJ##?o>rlcRnX9V/c,PK}@iuDS5f"F\X2B-tS4B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.6	50103	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1081	OUT	GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:00 GMT Server: fife Content-Length: 458 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	458	IN	Data Raw: 52 49 46 46 c2 01 00 00 57 45 42 50 56 50 38 4c b5 01 00 00 2f ff c0 3f 10 37 a1 a8 91 a4 a8 b9 f1 ef 07 21 d8 e0 3f b4 0d 03 69 db c4 c1 fd 7b dd 76 01 41 91 ff a3 b1 8d 24 c9 49 ff a3 55 2a c4 48 78 d8 32 8a 37 01 f7 02 c0 08 09 32 b4 fe e5 88 10 7f f0 a4 58 84 f3 26 9a 9c 6e 61 b1 43 c0 0f 01 a5 40 1e f8 64 81 04 47 41 01 c4 65 7d d8 6c 1d 15 05 15 90 20 db 76 db 36 50 c3 87 ba dc bb fd 5c de db ff 3a 25 fc ff 53 89 88 fe 4f 40 19 fe 1f fe 9f 8e b8 7c ba 3e 6c 5a 2f eb 67 bc e6 0f 6b 33 6b fd f8 41 b4 de 77 d6 ba 5a bf 85 58 3d d7 d6 d9 fa 4d 21 52 1f b5 75 88 42 9c 66 db d6 25 0a 61 ba b5 4e 51 08 d2 c2 5a af 28 c4 e8 b1 63 14 42 74 d3 33 0a 11 3a 76 8d 42 80 ac 75 8d 42 7c 5a e7 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 Data Ascii: RIFFWEBPVP8L/?7!?i{vA$IU*Hx272X&naC@dGAe}l v6P\:%SO@\|>lZ/gk3kAwZX=M!RuBf%aNQZ(cBt3:vBuB\|Z(dB(dB(dB(dB(dB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.6	50105	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1081	OUT	GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:00 GMT Server: fife Content-Length: 3872 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	733	IN	Data Raw: 52 49 46 46 18 0f 00 00 57 45 42 50 56 50 38 4c 0c 0f 00 00 2f ff c0 3f 00 1e 0f db b6 1d 92 a4 6d 5b cd 75 5d bf c0 b6 6d 36 ab 7a 6c db b6 ad 54 45 8d 6d 2b 9d d5 b6 ad f1 b4 6d db ee 8e 42 66 c4 79 1e c7 79 1e 97 af b1 6d b6 1d 17 c6 33 97 59 75 2d 39 97 7d 45 8e 6d c4 5c d5 58 96 21 25 6a db 8e 47 d2 dd b6 ad f4 29 d7 be 8d b1 ed a5 3d 49 c6 33 2b b6 76 63 db b6 6d b6 6d 77 27 a5 ef 8f cb be 69 d1 b6 6d 4a 92 76 55 db 65 9b 61 23 8d 40 ea b3 6d db b6 6d db b6 ed ee b2 8d fb 5e d8 8e 48 86 ef bb a7 ff 92 d8 b6 11 24 49 ae da 00 dd 9b f1 77 2a ae bd fb ab d2 37 7c 9d e8 3f 27 fa cf 89 69 d3 6a c3 9e 6a 1f 7f 77 d8 e9 17 2a 60 13 b0 3e 00 d2 d5 17 1f bc f8 ac 72 2f 7f d8 72 fd ee 6f 30 f4 8d 4a 15 5e fd 78 33 70 f5 96 c0 ce 12 27 1a 17 3a 17 7a 20 4d f9 Data Ascii: RIFFWEBPVP8L/?m[u]m6zlTEm+mBfyym3Yu-9}Em\X!%jG)=I3+vcmmw'imJvUea#@mm^H$Iw7\|?'ijjw`>r/ro0J^x3p':z M
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 0d d2 69 32 ea 7a 00 8b 92 ed 30 d8 98 52 5d 17 b1 74 de cc dc 1c 63 9a 8c 65 7f 3a b8 97 0d 83 fb db 39 f7 31 62 14 11 dd dc 46 2b f9 e8 09 e1 31 99 97 82 81 b7 27 09 0d f3 36 2e 7c 81 54 9a 7e f6 8f 0f ad 19 01 83 c3 61 f4 5c c6 39 6c 4b de 72 42 06 33 46 31 d1 dc 4f 08 65 58 7b e3 1f 26 87 f2 33 b8 03 16 2e 87 7b 76 bb 61 a5 86 05 d3 07 0e 75 9c 4e 8e ba ef c5 00 ad ac 00 8c e0 26 16 4e 1d 9a c1 45 6d ef 27 93 7e e9 fc e1 c0 e4 62 f8 9e b4 70 38 fc ee 80 27 17 bd 60 70 e9 ec be 46 a8 a4 78 d9 f9 41 7a f9 30 b3 ae 67 c7 85 b6 64 1b 0c 3e 2e ac 66 0f 91 b4 ff 73 a7 87 85 26 27 a7 1c 44 17 73 cb 6d 9e ef 67 df c7 89 71 76 27 d7 d1 48 90 d5 23 79 31 87 27 61 78 9c 75 d8 c6 bd 8d 0b 33 54 05 85 d4 7b e9 1b 1f 66 93 9b ac bf 3f c5 68 91 ff c0 71 1a 3d 1c 0e Data Ascii: i2z0R]tce:91bF+1'6.\|T~a\9lKrB3F1OeX{&3.{vauN&NEm'~bp8'`pFxAz0gd>.fs&'Dsmgqv'H#y1'axu3T{f?hq=
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: aa dc fa 98 05 a4 e3 bc 0a f1 2a c6 30 2b 72 70 36 a2 c5 e0 52 99 17 01 62 a8 58 5d ef 97 82 ee 07 a2 88 41 53 ed e7 bf b0 c0 d4 d4 77 11 8f 1f fd 8c ca 40 31 ce c4 0c 9a 38 11 23 86 9a 32 8e b8 a0 89 53 82 c4 50 67 77 72 1d 69 41 13 a8 9e 44 74 a0 2b 68 ba ad 5f 3a 0f 4b 5f 23 98 57 31 a8 0a 9a 02 b4 57 8b 3f 69 01 eb b9 18 de 3a 5d 6c 2a df f2 70 80 0e c4 a0 89 17 91 62 a8 e7 c4 0e 9a dc 1c 81 b6 7d e8 1b be f5 b3 c5 29 b1 62 a8 8b 44 a6 00 1e cc a0 09 41 2f e0 b5 3c 29 72 d0 e4 45 8d 18 34 f1 22 5a 0c 25 ae c3 b0 b6 fa 3f 4c c4 a0 09 45 e3 a6 90 73 1d 71 74 00 27 de 25 8b 89 bc b0 c7 50 d4 38 4c bc 16 6d 07 70 a4 06 4d 9c 12 30 86 3a 7b 88 63 82 fe 33 aa 41 3a d0 82 a6 a7 6f e1 45 c0 18 2a d6 c0 57 85 64 68 6b cd cb 64 b4 fa d0 5d 16 9a fe 85 b8 54 eb Data Ascii: 0+rp6RbX]ASw@18#2SPgwriADt+h_:K_#W1W?i:]lpb})bDA/<)rE4"Z%?LEsqt'%P8LmpM0:{c3A:oE*Wdhkd]T
2024-04-19 14:07:00 UTC	629	IN	Data Raw: 2a c9 a4 c3 ef 4f 2f 85 cc 6c 61 2f ab 26 56 2b a2 a3 4c a7 cd ae f0 33 c7 50 5f 0e cb b7 29 3e a0 4a 52 31 b0 45 2c 88 7c 29 63 cf 3a 63 12 69 16 c2 97 25 7e 7c 2a 77 7e 09 ab c5 20 eb aa 24 97 ca bf 57 5a 14 89 b1 4e 8b 8a 8f 52 a6 38 86 8f 32 c6 50 1f 09 28 dc f6 ad 2a c9 a6 d5 08 30 39 dc b9 d1 d4 7c a6 04 44 7f b2 ca 6b 5f e7 2c 4e 66 21 77 64 ce 96 59 a9 4a d2 d1 70 6d 79 5e 18 0b 2b e3 ff 4f 94 11 e1 46 70 33 1d 5d 95 90 31 b3 f4 d4 ea da a5 4a f2 29 e9 d4 e8 d5 0c 75 8b d9 a3 99 52 10 4d 1a 4a eb 3d b0 85 61 04 f7 b5 68 f5 a6 f9 1b 55 49 42 7a 47 ca 6c 30 fd 9e d5 87 86 75 2d 04 3e 7e cc b7 e1 a2 f8 9c 46 bf 76 ec cb a8 92 8c 4a 7e 24 b3 24 32 43 d0 24 0b ca 6c b1 e5 19 89 6c 45 e8 f1 d9 30 87 39 68 92 6c 04 77 da 7a 13 d2 1a 16 12 38 2c fd d5 f3 Data Ascii: O/la/&V+L3P_)>JR1E,\|)c:ci%~\|w~ $WZNR82P(*09\|Dk_,Nf!wdYJpmy^+OFp3]1J)uRMJ=ahUIBzGl0u->~FvJ~$$2C$llE09hlwz8,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.6	50106	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1082	OUT	GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 882 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:28:42 GMT Expires: Sat, 20 Apr 2024 13:28:42 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2298 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	723	IN	Data Raw: 52 49 46 46 6a 03 00 00 57 45 42 50 56 50 38 4c 5d 03 00 00 2f ff c0 3f 10 b7 e2 2a 92 24 c5 aa 63 f2 af ee 5c 30 be ae bf a7 c1 40 da 36 71 70 ff 5e b7 9d 4d 23 49 8e ea f8 a3 7b 04 ff f1 85 ef dd de b0 8d 24 c9 49 bf 44 e4 42 8e 64 88 87 4d 00 6f a1 dc 4b 00 2b 24 c8 d0 fd 0c 14 c4 cf 06 45 08 04 06 44 fc 44 94 42 89 5f 3c f4 13 b7 9d 50 e8 16 a0 29 3c 10 9b ee 30 11 88 9f 95 40 08 44 a9 79 2c 10 e8 30 44 c1 ac c0 0d f1 a7 19 3c bf 62 11 ce fb 8b 36 9d 03 02 7e 08 18 05 e4 94 0c a9 e0 86 ab 00 44 48 33 db 82 9e bd 46 89 02 25 0c 12 6c 5b 52 24 45 73 dc dd 7d 06 87 ae cc 2c c9 c4 dd 21 b0 d8 ff 6e a0 b2 e4 e3 1d 11 d1 ff 09 18 19 fa 7f e8 ff ff 47 9c 78 fb e4 d1 3d d7 96 d9 a7 fe 35 f6 f2 ae 55 75 ed f1 95 fa d6 fb 07 d6 b5 6a f6 85 a9 5f bd ce 5c cb 66 Data Ascii: RIFFjWEBPVP8L]/?*$c\0@6qp^M#I{$IDBdMoK+$EDDB_<P)<0@Dy,0D<b6~DH3F%l[R$Es},!nGx=5Uuj_\f
2024-04-19 14:07:00 UTC	159	IN	Data Raw: 4a 02 93 97 85 03 46 73 3b 57 97 0e 0a 07 8d fa b0 5b cf 41 f0 0e 1c d5 32 d6 aa 2e fd 1e d6 ba ff 62 8b b5 42 14 4d ad f1 7f 78 34 d6 aa 10 b5 ed d0 7f 43 ff fd 0e 74 af eb 6c f7 3d b2 dd 66 1f 77 df 93 ae 7b da 7d 6f bb ee 55 f7 4d dc ed b8 f1 ee 93 97 b6 cb ec f3 91 1e 38 f6 a0 cb ee 8f f6 01 79 9f 75 57 f6 6e a4 1f be c9 ba 2a 7b 23 7d f1 fd 7d db 45 f6 e1 c7 91 fe 38 fa dc aa 6a 97 58 d5 bb 2f c6 46 7a e5 f8 ab a7 8f 6d 77 dc 7b f4 e4 ed c4 c8 d0 ff 43 ff ff 3f 22 00 Data Ascii: JFs;W[A2.bBMx4Ctl=fw{}oUM8yuWn*{#}}E8jX/Fzmw{C?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.6	50108	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1081	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4416 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:28:42 GMT Expires: Sat, 20 Apr 2024 13:28:42 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2298 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	722	IN	Data Raw: 52 49 46 46 38 11 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c f0 10 00 00 2f ff c0 3f 00 55 e1 8d ff 5f b5 65 39 67 78 c4 cc cc cc cc d2 30 33 33 33 33 33 33 33 33 43 33 33 73 f7 63 66 66 6c ee 36 f6 de 6b ed 73 4e 9f b3 4c b1 da 15 b3 14 01 83 ad 7a 19 c8 42 5f 7a b6 e0 78 5b 64 a9 6a 30 02 0c e0 76 0a 02 ef 78 62 8a 80 71 89 19 53 58 b2 19 23 d8 35 96 30 09 05 c0 d6 f3 9e 39 ec b6 2c b9 77 aa d4 39 a8 74 c5 16 53 0e f2 da 1f 4f 8c d6 ed 27 f4 98 59 1a 86 bf 58 3e f6 aa b1 c6 53 08 bb 4a 4b 60 0d 24 70 ed 2b 66 3a 55 cf 13 f5 b5 5e c9 1c f3 3f f2 9f fb 62 10 4b 61 90 db 59 1c 91 d7 01 88 f1 56 c9 64 f6 a6 4e 8b 65 ad 00 4e 00 a2 37 b4 3c 61 5b e3 89 75 57 04 37 04 91 27 51 00 c0 b2 b1 66 75 36 ba 25 69 67 9c 6d 73 Data Ascii: RIFF8WEBPVP8XVP8L/?U_e9gx033333333C33scffl6ksNLzB_zx[dj0vxbqSX#509,w9tSO'YX>SJK`$p+f:U^?bKaYVdNeN7<a[uW7'Qfu6%igms
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: cd a8 92 6c ed 4b 8b 7d c0 ce 2f d2 6d 16 a5 ca 25 10 48 1e db cf 2a 36 64 1f d1 1d e1 86 36 70 e8 55 1d 96 22 b6 9b 67 67 9f d8 5a 5a 91 7a c4 8e a2 1d 72 bf c5 50 84 c0 be f2 30 19 78 ec d6 5f e9 30 ef 46 36 bf 50 cb 40 fc 66 ee 5c 1e ad 88 18 87 9a 5a 27 d9 94 38 8a 81 2e e7 ef 63 3c 5e 59 01 40 20 90 bc 9d 51 c1 40 a0 66 52 e1 86 22 00 d0 d7 ff fc 0f 45 4b 14 c3 42 a2 1d a9 c7 7b 72 00 79 2c 97 14 7b a9 aa 64 21 39 dc a3 8e 43 03 20 3a 11 50 5c ff 8b 7f 35 0b d5 96 78 4c 89 ab 00 c2 bf a7 30 55 2c 04 76 5e b1 6e a8 57 b3 7a 74 ec 24 48 be bc 05 26 36 6d 09 3d f6 e8 ae 94 47 49 82 a2 33 81 60 23 be ed 8e f1 68 4f 2a c4 67 50 d4 b1 69 d8 a8 4a 78 0c a1 46 29 a4 dc ec c8 e1 6c 04 a2 3b c4 0d b7 de 35 6b 5b 5a 34 3a cf 48 f2 00 85 f5 68 4f f8 e3 14 73 4a Data Ascii: lK}/m%H6d6pU"ggZZzrP0x_0F6P@f\Z'8.c<^Y@ Q@fR"EKB{ry,{d!9C :P\5xL0U,v^nWzt$H&6m=GI3`#hOgPiJxF)l;5k[Z4:HhOsJ
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 46 31 69 c8 28 8d 09 39 9b 9c e7 df 79 7d 7f c5 0a a9 03 f0 ac 0a 5f 86 08 47 ee c9 5d cb 7d 3a 40 21 14 dd 11 22 0d 11 4d 6d c4 ef 8f de 72 e7 f5 73 56 6b 78 35 d0 8a 0d 4f 9d 8b 91 20 ce 26 f3 e3 42 19 f8 20 5a 1a a5 e8 6d 20 fd c8 9b 5f c1 f8 9e ec e1 ce 1c db 8f 35 fc d9 c1 57 2e fb e0 10 21 ce 21 75 cf d5 28 a3 69 f2 e2 b3 d2 1b 2d cc 61 32 59 98 67 3c 66 93 db c4 ec 1a ae 3c 56 48 0d fe 4f 0a 7f 93 0c f1 b2 17 2d 51 b2 96 24 5f b9 2c 52 76 47 a4 15 01 b7 d7 f9 fa ef ca 18 c7 9e d0 c3 a5 13 db 8f 35 3c 80 38 9b 5f 99 5a 2d 19 22 4e 81 73 d8 74 cb ad e1 2b 02 40 a0 8d 68 63 16 69 db 40 4d fa 50 25 ed 87 4d ab 11 fd ff 8e 1f d3 4a 6a 48 44 1d ee c6 df 33 51 20 e2 cc 4a 7f 70 eb 3d e7 61 42 65 d5 75 bf fe 5d c7 c9 59 90 7a 8b 03 9b a7 0b a3 8c 38 78 2e Data Ascii: F1i(9y}_G]}:@!"MmrsVkx5O &B Zm _5W.!!u(i-a2Yg<f<VHO-Q$_,RvG5<8_Z-"Nst+@hci@MP%MJjHD3Q Jp=aBeu]Yz8x.
2024-04-19 14:07:00 UTC	1184	IN	Data Raw: 91 1e db 6d 2b 07 42 cd 3f 0f a9 37 30 55 09 09 90 bd ea 9f 5f ad 10 c2 4e 38 72 12 8b 30 93 73 44 83 a3 d9 ad 07 4e 56 78 63 a5 35 e7 52 5d e3 c7 af 3d 34 d6 b8 44 63 76 d0 00 a7 ca cc 28 b5 d2 90 9f 06 86 f5 79 8e ee 0b 08 ac 04 42 ce 3f 0f a9 77 d8 54 03 09 31 4e 03 00 68 73 d6 39 31 73 8e cc 8c 12 15 c5 58 03 ae da ee b8 b1 a5 45 c7 92 94 cc cb 8d 08 a8 be 56 40 6a ad 9e e0 d1 cc a4 21 30 d7 f5 fc ea cb 09 52 9f 47 40 22 01 68 be 28 c3 62 14 45 d1 90 e8 67 b4 f6 07 c0 6c bb a5 83 4e e3 88 b2 07 cc 43 a6 0d 4d c8 78 55 d9 9d 35 0c d2 ef ab b2 0a 12 0c e4 a1 d2 29 73 94 1d 20 4f ee 17 88 43 66 37 eb c8 3c 9a 4d 75 f9 b3 7a 4c ad a5 d2 8d ab 46 4e 90 fe f9 15 24 9c 9e 50 ea 28 34 26 95 be 05 76 56 61 32 51 14 45 35 37 73 eb d6 29 0e ec b3 ba e1 de ab 6a Data Ascii: m+B?70U_N8r0sDNVxc5R]=4Dcv(yB?wT1Nhs91sXEV@j!0RG@"h(bEglNCMxU5)s OCf7<MuzLFN$P(4&vVa2QE57s)j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.6	50109	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1081	OUT	GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:00 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:00 GMT Server: fife Content-Length: 6458 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	733	IN	Data Raw: 52 49 46 46 32 19 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c e9 18 00 00 2f ff c0 3f 00 4d 40 6c db 48 92 04 cb be b7 3a ff 84 bb b6 ba f7 09 20 a2 ff 13 20 49 b6 3c 04 c8 b4 b3 9d 11 07 6c 24 79 8a 48 3c e1 0c fc b0 63 62 5b c6 47 3c f0 9e 9c 24 c0 40 09 27 ea 01 6c 0a 79 da 24 96 69 64 3c 6f 94 c8 ea 74 47 c9 40 b6 a9 2a b9 aa 24 28 49 95 3c f2 46 95 d2 04 0e bc 3a 01 94 12 40 6d e3 c1 02 10 40 49 35 a1 2d c9 db 7a 86 a0 d6 b2 41 ed 26 a9 a9 ad 76 bb ea 42 9a e3 11 f0 d9 aa aa ba 5c 62 50 b7 80 6e fe 4a 55 55 47 cc 74 d3 4f d3 0b 29 b7 96 1f e5 e7 ca 6a 16 70 63 db 76 d5 2c 4c e4 e9 bf 1c 2a 60 28 80 b1 11 c8 bc 48 43 24 f7 dc fd 32 39 e3 b6 6d 24 b1 82 c5 ec 7d 05 81 9f db 7f 61 5b 83 e4 46 92 1c 49 32 fd a5 9b Data Ascii: RIFF2WEBPVP8XVP8L/?M@lH: I<l$yH<cb[G<$@'ly$id<otG@$(I<F:@m@I5-zA&vB\bPnJUUGtO)jpcv,L`(HC$29m$}a[FI2
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 23 81 f6 c4 04 58 d5 b6 6d 91 24 e9 fb fe e4 82 9c e6 ee 22 35 87 30 6e 1c 1d 2a cf f2 9e c9 1e 43 43 31 53 52 c4 2f fe 3f 22 07 2a 23 ec a3 96 6b d4 e4 d5 ae d5 92 df 2b dc 3a e6 86 41 b5 92 39 96 ec 2a a6 52 cb 4c e9 96 d9 31 a3 62 46 d9 72 dd 5e 12 20 49 32 6d ab f7 fa 9e 3b cf b6 cd 6f db b6 6d db b6 6d 1b cf fe b6 6d db 36 e6 5a 92 b4 6d 5b 5a e7 7d ff 9f 04 62 27 44 91 9c ba fb d8 a6 1d 79 77 d0 6d 74 11 ee 3b 68 c7 1d f7 ea 12 74 e4 2e 1c 20 ee 01 7e fe 98 80 21 c8 fa 45 2f 5d f1 cc d9 ce 9c fe 7f 17 b8 74 ad e8 da 55 8e 31 df 39 cc 0c 97 58 d7 75 4e 73 ff 9d f7 c1 db 01 3e 7d 0f bb 22 97 bb 9c 7c bd f5 9b f7 e7 e6 c3 c5 70 c6 09 88 71 3a df 43 f4 39 59 bf 5d 85 2a 78 01 bc ea 95 a3 6c 31 21 70 44 62 33 c3 5c 65 a7 e6 e6 4a e4 f4 46 3d b7 60 74 66 Data Ascii: #Xm$"50nCC1SR/?"#k+:A9RL1bFr^ I2m;ommm6Zm[Z}b'Dywmt;ht. ~!E/]tU19XuNs>}"\|pq:C9Y]xl1!pDb3\eJF=`tf
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: e1 25 a0 52 ca 1a 9e e4 5d 04 50 ea 36 32 c7 8e 09 82 20 01 50 72 1a 1b 06 0b 83 eb 9c 49 17 91 18 e3 e7 c6 cf ed 80 fb f8 c5 fe a7 68 cf 55 d9 07 1c 98 df aa 34 f5 2c cf 1d 08 de 09 40 dd 89 f7 27 27 04 d7 96 f3 ce 54 11 89 31 7e 6e dc 80 79 2b 24 14 92 ed 4b 98 0d 3e 02 1c 2e 69 d6 f7 d4 2f fa 42 03 80 be 8f 56 ae a5 a8 0f 52 85 3f 10 b8 9a f0 10 4f 88 53 a3 4e 12 5b 2c 42 2d 21 50 ef da 9a 34 76 95 63 31 4b 4f 07 0c cd aa ef 3a 7d 6b 8c 04 d3 5f 92 42 3b c0 55 84 07 79 a2 7f 27 5d 86 1c 77 5e 2a 10 0d c6 f4 2d 13 22 85 0d 8f 33 c0 d0 c4 2d 4f 7e e8 96 7d ec e3 17 cb ff c4 84 d4 91 f3 9b 2b 09 37 7a 1a 0f c3 f1 6c d0 c5 ee ca ca 18 5e 69 5f 05 ef c7 3b c8 00 d5 5e b6 e5 b1 f3 83 82 2f 26 81 63 ef 3e dd 27 36 ec 68 eb c9 97 10 fc e6 6a d2 0f f5 5e 77 c4 Data Ascii: %R]P62 PrIhU4,@''T1~ny+$K>.i/BVR?OSN[,B-!P4vc1KO:}k_B;Uy']w^*-"3-O~}+7zl^i_;^/&c>'6hj^w
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 82 98 8d 2b 9b b7 bf 88 b7 17 02 e8 41 14 7a a4 13 aa 9d 6b 16 e9 6f 03 0e 87 67 d4 0f ad 35 01 d6 da cc 55 e9 f6 34 3e 74 6e ff 30 b7 db 97 c7 5e 08 10 ed b4 95 10 36 f5 43 0b 2f 81 30 49 20 24 b2 72 66 0f bf e5 61 a9 49 f3 c0 7c 49 dc 6a 45 5d 69 65 5b 5e 62 a8 bb 36 9c 6b eb e9 01 c4 91 77 5e 07 fb a7 f1 2c c0 c8 ea a9 b5 86 94 7e 60 10 84 30 03 cd c2 2c 48 b2 9e 86 9e 46 48 28 84 10 a4 d0 8b cc d4 a7 f1 8b 55 28 f2 a3 79 13 80 67 6d ac b2 ec 97 c2 f0 c4 f9 70 13 00 8c 8e d5 82 05 fc 6d 75 88 58 9a c9 88 c8 4a 3a 2c 04 15 20 6c 6f 03 ce e6 42 12 e0 18 bd 1a 8f 10 42 01 2d d8 6b 08 0d 8c 34 ae 8d 58 68 f1 17 5a 73 58 cf c6 fb 80 a5 f1 58 a8 26 15 96 c0 5c 6a ba 59 1c 59 38 b8 32 03 2a d1 62 0f f8 db d6 ac e9 4c f9 ce e1 92 7b 05 bf 66 1c 6b 11 88 93 09 Data Ascii: +Azkog5U4>tn0^6C/0I $rfaI\|IjE]ie[^b6kw^,~`0,HFH(U(ygmpmuXJ:, loBB-k4XhZsXX&\jYY82*bL{fk
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: 06 2e 22 e4 7c 2a 3a f6 18 46 fa e7 c2 05 93 a7 d8 e7 22 39 35 02 7b d4 91 fe b9 71 e1 d2 93 fe f2 a7 52 9b 0a 7f cd f8 0f 26 8c 68 75 dd 7c 26 30 05 6d a6 e8 3f 68 25 3d e0 6b 9e b7 e5 74 12 46 f8 a0 95 f4 80 cb e2 5d 0a cf b7 4f 6a d3 f8 a0 95 f1 6d 94 51 40 62 8a a2 df ec 23 2a b8 b1 9f c7 1d 77 97 25 1b fb 7a 79 9b d2 d3 ec 52 1a f9 b4 86 08 02 05 ca fe 45 c4 b2 04 d7 e9 f3 12 f7 59 5d 0c e8 67 ff f7 33 91 29 5a e9 71 94 1a cb 14 3c 2e 28 4a 7f 7b b5 35 a0 f2 63 07 51 b6 38 0a b6 5b 31 e0 ef 52 53 f3 99 e4 dc 22 dd 11 38 6f 45 d9 62 df a2 82 c0 9b 00 29 57 1d 04 97 ca cd 9d 81 97 81 b2 c5 7a 98 8a 01 8f f8 35 72 dd 81 71 b9 c7 ee 6b a8 2a 4e 5d 0c 67 ab b8 8a a3 6c 71 4f 97 64 6d 92 16 ad 81 72 d5 71 aa 2b dc d5 f5 c4 5b d7 53 37 1d 10 c0 8e 38 a8 3b Data Ascii: ."\|:F"95{qR&hu\|&0m?h%=ktF]OjmQ@b#w%zyREY]g3)Zq<.(J{5cQ8[1RS"8oEb)Wz5rqk*N]glqOdmrq+[S78;
2024-04-19 14:07:00 UTC	705	IN	Data Raw: ca 72 c4 58 8d a4 b3 6a 73 5b ff df d6 ff 37 5d d7 66 c5 b1 54 57 b1 9a b7 5c 70 5c 39 38 26 43 29 02 bf 51 ae 88 b7 9c a3 0a 56 eb e2 73 f6 cb d6 d3 d7 53 90 93 83 b3 ef 55 f5 72 c9 d9 96 ec 1b 6b 89 e2 dc f6 7e d7 12 17 b5 15 6b 69 6f 3a 22 6e 04 0a f5 37 9f a3 9d 2a 16 4f 77 b1 bf a0 60 de b1 b4 86 39 55 b1 6e fa 7f d3 ae 56 4b c1 fc c8 9b e6 55 ad d9 1a ed e2 f2 23 85 f2 23 17 c7 1a df ac 62 11 f6 6c bb ae ec a8 4d 3e b7 28 26 ab b5 6b d3 9e db 8c aa dd da 11 db 4e ac ae 6a 0e 5e 33 87 58 04 7e db a7 9d d8 7b aa 1d d6 56 2e 5a 9e aa e5 d8 0d 14 a6 68 a9 e0 ed cc 59 c5 71 5b ff df bc d6 31 b3 ea e1 d2 96 ea 12 a9 79 cb 05 bf f3 9d 93 a6 52 f8 cf 3d ef 92 7f a1 2e 8d 5a 17 9f f3 1d eb e9 eb a9 9a 07 76 8f c6 2e 3e 4f 75 59 b8 e4 af f6 8d b5 44 f5 dc b6 Data Ascii: rXjs[7]fTW\p\98&C)QVsSUrk~kio:"n7*Ow`9UnVKU##blM>(&kNj^3X~{V.ZhYq[1yR=.Zv.>OuYD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.6	50110	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1080	OUT	GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:00 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3702 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:02:34 GMT Expires: Sat, 20 Apr 2024 14:02:34 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 266 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:00 UTC	723	IN	Data Raw: 52 49 46 46 6e 0e 00 00 57 45 42 50 56 50 38 4c 61 0e 00 00 2f ff c0 3f 00 55 e1 b1 ff 7f dd 25 45 3f dc 5d db 5d 70 77 77 77 77 77 77 28 c1 dd b5 dd dd dd dd dd dd dd dd dd fb d6 73 ff df df ff fb c7 a1 65 11 2c c0 1d 32 d2 e2 97 17 9d e1 ae e1 0d 09 d9 00 1b 68 a2 8e c8 58 02 b9 56 d4 d1 83 53 31 ee 12 b9 7f d0 e8 9b 37 6c 80 d0 dd 23 ad 1c 22 87 54 23 77 b9 78 d6 d4 cd 20 74 87 3a e7 66 bd 04 52 cd 2a c6 a1 e8 ec b9 e7 c9 6a 03 1d 93 ba 4b 4b 88 45 d6 29 d2 1b c0 33 62 08 6d 76 e0 3e 13 61 c5 1a be e3 53 f1 44 75 26 72 9f 89 d1 70 dc dd a5 b2 b1 d8 22 4b dd 2d d2 8d 0c cf 02 6a dc dd dd 3d b3 b4 ce 33 12 b9 64 d4 39 92 23 49 52 64 2b 15 79 92 bd d3 57 fc 5f df d0 c2 40 0f 74 25 48 90 6d bb 6d 1b fe f7 fe 47 61 05 40 88 6a 56 83 7b 4b f6 bf 9a 64 29 fd Data Ascii: RIFFnWEBPVP8La/?U%E?]]pwwwwww(se,2hXVS17l#"T#wx t:fR*jKKE)3bmv>aSDu&rp"K-j=3d9#IRd+yW_@t%HmmGa@jV{Kd)
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: ed fa bd 6d 07 ea df 2e 83 05 57 80 63 6b fc db 19 8d 99 ca 61 bd 56 14 bf ad 64 ef be 18 fa be 20 ea eb 5a a5 28 71 2f 3c 39 2c 89 61 24 e5 b1 ab c8 44 5e 0f 83 67 22 64 a4 53 bf 6f 29 32 56 36 8e f2 a3 6e ab b2 99 9a ae 3c 48 b0 6a 39 f5 ff 00 90 25 56 00 3f 59 0c 3e ba 8e 28 a7 15 d3 40 f0 80 95 d3 29 8b ef 64 e0 b9 09 2f b8 c7 f5 28 af d5 49 e1 d9 d8 ea b1 b8 0a ca e4 42 ef a1 e8 4f e5 05 e9 68 ca 6e 65 32 78 94 3f f9 c9 4c 54 45 83 b0 8a 35 d0 29 c3 55 c8 36 e8 89 43 b7 11 e5 b1 2e 2b 84 55 94 41 53 8e d3 d1 e7 f2 04 ef aa 3c b6 68 42 58 45 0e e5 38 1a 16 2f cf 3f f7 67 50 1e 33 c3 b1 f2 bd cb a2 53 8e a3 61 f1 14 9d 07 3c 64 46 8a 70 3a f6 fe 58 2c 83 72 1c 0d 8b a7 69 19 2b 28 8b 1d 46 90 22 9c e6 4f ee 17 c2 51 34 2c de a2 ab 80 85 7c 28 ad 25 e1 Data Ascii: m.WckaVd Z(q/<9,a$D^g"dSo)2V6n<Hj9%V?Y>(@)d/(IBOhne2x?LTE5)U6C.+UAS<hBXE8/?gP3Sa<dFp:X,ri+(F"OQ4,\|(%
2024-04-19 14:07:00 UTC	1255	IN	Data Raw: c6 45 e4 e5 34 ef f3 b3 cc c9 b8 cf eb d3 be d4 2f aa e5 ca 81 89 02 55 46 69 96 5e 91 3d 39 24 3a 88 f8 46 6b 96 c2 f1 50 a5 49 f3 3e fc 49 12 2a a1 f9 46 9b b0 82 85 0d 1e 84 66 f9 f4 69 fc 89 7c d6 74 b6 f4 46 7e d1 6b 80 03 83 56 9e 8c a6 62 71 83 41 20 3f 82 15 95 bf 9c 4f b4 32 39 30 70 9b f4 3d d0 d4 1d 8c 18 08 22 6f 80 8d dc db 1f ba f8 f2 7f e9 bf 33 2e e9 09 34 bb ff f6 80 10 67 70 c3 7f 7d a1 2f fe 07 af f0 5d b1 df 75 6e d7 44 d3 aa 81 a0 10 71 b9 31 93 b6 d4 6b dd a5 7d da 4e 00 df 95 7a a4 67 d1 f4 18 04 88 88 fc c8 67 61 e5 f2 ad 86 d6 e9 d2 19 fe c0 6f 02 1a 45 d6 20 11 71 d9 80 8a c4 d6 4c cb de 1c fe db 04 cd 22 9f 7e 92 d3 16 2c 22 f2 8a 61 80 d5 d2 7e c1 26 5d 15 dd 98 fd e2 bb 56 4d 9a 06 0c 83 14 38 22 12 1f 53 5e 80 55 d0 5d d7 9e Data Ascii: E4/UFi^=9$:FkPI>I*Ffi\|tF~kVbqA ?O290p="o3.4gp}/]unDq1k}NzggaoE qL"~,"a~&]VM8"S^U]
2024-04-19 14:07:00 UTC	469	IN	Data Raw: 5d 2e b2 95 49 b5 c4 7b 2e 0c c7 c1 b9 91 57 3c ce 8f ab fb ad 1d 0b 7e 48 b8 77 58 50 c5 2e 23 7e 3b d7 cc ae f9 6d c4 7b f7 59 93 1e b7 93 f9 ea ee c8 2a 01 38 89 71 8f 1c a9 7e 4a bd 08 8a f9 54 21 fd 21 2c 8b a1 5b 8b 6f 7a b0 cc fd 19 21 c1 e8 0c 1a 2a 91 0d ef 9b 1a a4 78 d6 a4 5a 22 4f 43 99 b4 9e 23 fe a8 d6 86 cd 4a 60 3a 83 0b fe 66 68 3f ec b2 6e 13 23 c6 c5 42 67 d0 f0 a1 9f 68 5f 33 e6 84 3e cd 60 76 93 6a 29 48 dd cf 22 03 5d db 86 6d a9 4f c5 8f bf 42 2c 75 b9 31 c7 6b 6e 32 b4 eb 1a 93 5d 2a fe 44 82 d6 e5 c6 a9 bf fe 66 16 8d be 02 7a 18 b4 f8 a4 5a b2 f9 18 c0 8a e9 be f9 53 2d 79 59 d5 b1 7f 43 89 6b 91 40 8e bd 3b a6 bb 97 df bc aa 15 cd 99 6f 31 c2 b7 8f a7 5d c4 7a b7 39 60 85 e5 73 1c 9c ac a3 b0 ae 70 46 7b c6 08 31 09 ee 0f 0b 03 Data Ascii: ].I{.W<~HwXP.#~;m{Y8q~JT!!,[oz!xZ"OC#J`:fh?n#Bgh_3>`vj)H"]mOB,u1kn2]*DfzZS-yYCk@;o1]z9`spF{1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.6	50111	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1081	OUT	GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2070 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:28:42 GMT Expires: Sat, 20 Apr 2024 13:28:42 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2299 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	722	IN	Data Raw: 52 49 46 46 0e 08 00 00 57 45 42 50 56 50 38 4c 01 08 00 00 2f ff c0 3f 00 c7 05 39 92 24 45 52 e4 f2 ea ff 58 45 19 2a 63 e9 4e 06 c7 8d 24 29 52 f6 fa 6f e1 be ce 01 66 98 aa 64 dc b6 8d 24 6a fb 6f f6 7e ae e7 5f 6d da 06 8c 53 66 df a1 67 41 10 10 01 11 18 32 b8 10 10 85 22 94 30 04 7e 9e 21 c0 b0 d9 7e 97 e7 41 40 5a 1a 1a 14 04 99 15 c1 42 e8 86 0b 42 07 86 16 4a a0 13 41 21 4c 21 8c 41 90 e7 02 a9 50 94 06 44 71 d2 80 d0 69 a2 4c 10 20 2d 88 c1 61 f1 9f bb 71 d1 30 8d 42 99 3f 88 83 61 8a c6 80 08 95 16 05 51 10 01 99 c6 2f 5f 45 41 98 45 93 fe 26 e5 19 da 58 90 02 d2 c5 0c 0c 36 79 cf f9 18 4a a4 b2 f9 82 1c 6f 50 14 cd 1c 46 b8 11 e1 09 82 44 f8 37 90 7f 0c 60 02 81 05 04 02 81 2b f9 cf 69 cf 1c f6 0f 28 5c db 9e b6 cd 56 5a 1b 8f 1c 2a c3 98 99 Data Ascii: RIFFWEBPVP8L/?9$ERXEcN$)Rofd$jo~_mSfgA2"0~!~A@ZBBJA!L!APDqiL -aq0B?aQ/_EAE&X6yJoPFD7`+i(\VZ
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 66 4e 17 57 52 47 85 42 31 53 d4 9d 12 27 74 8a 1c bb 31 ba 44 64 21 b7 70 24 e2 e3 f0 f2 b6 f3 8d 4e 42 18 38 65 01 99 53 9a ea 97 a5 5d cc 46 f6 bc 19 6f 3a a1 7e 4f 53 09 19 ea 12 d9 c9 2d 1c 8d 28 86 2e 4e 9e 14 8a 44 76 72 65 6d 89 f9 b9 ba bc 8d dd 1a 53 2a 66 8a 9d 53 3e 74 e8 bb b8 e3 cd 94 3c 3d 17 b3 4a 73 54 e6 66 9a a4 a5 da 84 b0 75 ca 4f bf 8e 8b 3f ef d0 77 31 b3 34 2f 97 1a 79 59 54 3e 31 4a 9b 10 20 4e 91 a3 b7 d3 2e 86 a0 22 e1 f4 2f 85 87 45 e5 57 33 6d 9a 84 40 71 4a a3 0a c1 c5 3a 0b 9d 35 ed e0 1f bf eb 2c 03 42 71 ca b7 ae 01 17 c3 91 3b 6f 7b cc 03 7b c2 d3 b2 ec 22 24 39 86 ec da 35 c4 21 42 92 3d 6b 5a 18 f8 93 d8 36 58 4f 46 1d ef ea 3a 2d c0 7a b2 e7 bb 07 fa 9b da 6b 66 00 7a f3 52 75 e0 cd d2 ea 6c 38 6f 9e f9 aa dd c3 c1 a7 Data Ascii: fNWRGB1S't1Dd!p$NB8eS]Fo:~OS-(.NDvremS*fS>t<=JsTfuO?w14/yYT>1J N."/EW3m@qJ:5,Bq;o{{"$95!B=kZ6XOF:-zkfzRul8o
2024-04-19 14:07:01 UTC	93	IN	Data Raw: 31 8d e7 58 93 08 80 1a 13 40 85 75 c9 08 a8 21 c7 73 ac 4d 04 40 0d 78 a0 02 43 3c 03 36 50 81 25 9e 01 18 a8 c0 f3 78 52 a8 40 05 9e 78 86 5d 83 e7 78 24 4b 96 37 7e 41 28 2a aa 3c 15 57 24 cb 56 58 5d b3 58 0d 4b 56 2e b9 b5 5d 96 2c 5f 83 fe cf a0 ff 33 e8 ff fc ff e7 48 00 Data Ascii: 1X@u!sM@xC<6P%xR@x]x$K7~A(*<W$VX]XKV.],_3H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.6	50114	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1082	OUT	GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4004 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:55:09 GMT Expires: Sat, 20 Apr 2024 13:55:09 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 712 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	723	IN	Data Raw: 52 49 46 46 9c 0f 00 00 57 45 42 50 56 50 38 4c 8f 0f 00 00 2f ff c0 3f 10 1e db fe 3f ab 76 db ac eb 3c 42 1f a0 af d3 4f ef 7b 97 98 ed 72 1b f0 39 47 70 f6 ac 32 73 fb b4 06 9d b3 f7 7f cd da bb dc 35 f1 29 83 ec 32 4a 0a f3 91 c2 cc 39 ce 18 83 ca 52 65 0c 33 4d 58 0e 48 8c 64 5b b5 55 69 eb bb bb 0b bc f7 ee de 33 e7 3e dc 1d 82 40 76 24 49 8a 64 a5 a0 a7 c1 53 ee 49 c1 ef 7d d1 31 33 0c ef ee f0 b8 04 48 92 4c db fa b6 6d 9b 0f df b6 6d db fe cf b6 6d db b6 6d db b6 df b7 79 0b 16 24 5b 55 a3 73 cf 14 98 d7 8a 65 b2 c6 28 5c 7f 53 e3 c7 2f fc d7 4f eb c8 25 33 5d b2 ee cb af ed a7 e1 ba 87 98 97 16 c1 dc c3 d4 cb 9d e4 e1 11 40 08 f4 f2 20 79 92 ac 08 66 5e 1a a4 37 a4 9b 9f d1 51 77 16 51 97 4c 6f 44 b9 64 35 b5 db 5e ba a4 20 42 79 ab ca df e4 8a Data Ascii: RIFFWEBPVP8L/??v<BO{r9Gp2s5)2J9Re3MXHd[Ui3>@v$IdSI}13HLmmmmy$[Use(\S/O%3]@ yf^7QwQLoDd5^ By
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 31 73 7b 10 a3 27 db 85 5e 0f 8b f9 51 45 3b 33 85 18 ed 61 4b 22 6b 0d 44 16 92 71 22 35 88 6a 8c 26 e4 ee d4 9a 08 5b 77 7c f6 de bb fe b1 c2 85 08 ed 92 a1 84 6e a9 0d d6 ef de b0 2a 67 ac dd b8 fc 59 b0 fc a5 b1 12 9f dd 65 e6 74 ba fe 5f 1f ac df bd 66 55 4e 59 9d 33 86 ab 73 2e 98 98 46 01 d4 9f fc 97 85 2c 34 5e d6 8e d1 52 2f 0c 87 a7 e4 84 ce f2 20 00 5a e6 5c 32 84 81 8a b6 65 d6 6a 86 e1 f0 94 1c d3 5e ec 40 9a 90 16 5e 45 39 30 49 4f e1 4a ed 30 1c 9e 9c 63 da 2f 77 20 fd 81 af 11 0a ad c9 72 aa cb 44 bd 10 c2 46 08 0c 5d af 19 7a ba f5 a2 03 e6 dc aa 92 c0 cf 78 a5 5e e8 63 dc 13 e4 91 a0 7f 68 b6 be 18 0e 97 c7 56 3d 28 9b 4b 84 43 6e 6f 8c d1 62 35 c6 70 38 98 a8 91 11 77 b9 64 28 a7 cd 2d 13 11 db 16 22 16 8a 72 d1 ed 19 ee 13 c7 59 20 56 Data Ascii: 1s{'^QE;3aK"kDq"5j&[w\|n*gYet_fUNY3s.F,4^R/ Z\2ej^@^E90IOJ0c/w rDF]zx^chV=(KCnob5p8wd(-"rY V
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: b9 64 f4 67 74 8d a4 47 72 25 58 12 c4 dc 61 84 43 50 fd 29 1b 76 af 59 95 53 30 68 26 58 85 d1 e6 fa 00 25 f9 c2 df df eb 2a 6b e2 8d f5 4f a9 69 ce 59 5a 55 fd b9 88 1b 3a ea 2c f7 2c 60 50 eb 74 f3 3d 4c 7f 41 82 2a 09 59 a9 aa 3c 5c 7b 76 82 31 c9 f8 c5 fd cf fc c0 94 f9 06 be 65 eb 13 82 aa b8 64 45 08 91 94 33 aa fc d0 8f 4f 22 55 45 28 eb bd 18 6d 9c 1d 5d 6c e2 85 8e da 8b 1d fb 30 68 f6 d2 0a 21 42 85 80 4a 52 7d aa 28 42 95 f4 9b cd 09 0e 4c b6 cd 28 70 77 af db be 66 75 4e 81 a0 42 a8 0c a1 ae 33 a8 d2 b7 33 00 fa 9b 15 3a 3a e3 b9 61 19 82 6a 97 89 00 f2 c3 39 54 d9 ae ea 2f 80 32 0e 48 b9 5d 50 b3 18 54 3e 3b 3b 88 d7 7f 32 48 04 9d ea 94 33 27 74 f4 a9 db 37 06 10 34 17 32 c5 8b 54 07 5a 06 d9 25 13 2b 53 d6 8c 50 9d 98 46 f6 41 50 e9 ba 34 Data Ascii: dgtGr%XaCP)vYS0h&X%kOiYZU:,,`Pt=LAY<\{v1edE3O"UE(m]l0h!BJR}(BL(pwfuNB33::aj9T/2H]PT>;;2H3't742TZ%+SPFAP4
2024-04-19 14:07:01 UTC	771	IN	Data Raw: 24 f3 2f 26 ac ee 47 2e 91 bf d4 53 bf ab 2e 19 47 6a 95 dc 7b 90 16 42 cb 25 09 ab f3 a7 15 57 5e 50 5b fd ee 16 ed 55 ab 4a a6 24 25 64 26 67 c3 7b ee 5b 99 33 60 59 b4 9b 35 d6 ef 72 77 b8 e0 11 de aa e2 b7 99 c9 1f f6 78 5c c0 cf f1 6d c0 d5 21 2f a4 9a eb 77 db 25 93 77 04 99 d9 45 e8 c2 38 27 a5 ba eb 77 3d 84 5e b9 44 81 e5 4d 69 ab 62 ea 77 3f 0e 1d 7c 4f 91 e5 f2 76 cd 8c 69 dc 85 18 74 11 b2 ae 79 6f da 5e 31 8d bb 11 01 e0 c5 30 9a da d2 98 c6 5d e1 ae b3 a1 75 cd 73 a9 87 62 1a 77 87 f9 ab bd a7 d8 f2 8e 9e 8d 8d 69 dc 25 ce 3a 88 ad ab 2d a6 de 8a 6a dc 2d ae 5a d9 0b 5f 00 d7 f6 6b 70 dd 8f bb 96 ce 9f 83 37 ff 50 ea ab 9a 1f 77 6f 1f 3c b9 a1 3c bb bf 44 9b 6b 7d dc c5 a3 01 9a fe 44 a9 66 d7 f7 b8 9b 07 e7 f1 d8 f5 a9 9c 6a 7a dc d5 a5 5d Data Ascii: $/&G.S.Gj{B%W^P[UJ$%d&g{[3`Y5rwx\m!/w%wE8'w=^DMibw?\|Ovityo^10]usbwi%:-j-Z_kp7Pwo<<Dk}Dfjz]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.6	50113	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1080	OUT	GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9108 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:02:33 GMT Expires: Sat, 20 Apr 2024 14:02:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 268 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	723	IN	Data Raw: 52 49 46 46 8c 23 00 00 57 45 42 50 56 50 38 4c 80 23 00 00 2f ff c0 3f 00 4d 38 8e 24 c9 51 22 6f f6 10 db fe 5b 0c ac 40 bd 23 fa 3f 01 e9 a4 93 4e 3a e9 a4 93 4e ba ff b9 16 b4 b1 5a 52 bb 1c 43 da b6 d4 82 4c 64 57 6d 8a a5 43 b4 73 57 ea d3 ea ba 27 96 0e d1 b8 e1 86 5b 15 aa 8c 1f f1 3a 0f 55 26 33 53 65 b6 26 aa 32 13 a3 0f a6 da 8c d1 cb 93 4b 6b 43 97 a1 95 f1 65 83 20 08 82 20 88 2f b8 90 1d 49 92 22 59 6e f7 75 fa 4b 18 f6 24 60 e6 99 a6 79 12 38 8a 24 c9 aa f2 c8 89 18 09 e5 5f 15 02 10 00 ef 33 01 29 92 24 47 52 f0 47 e9 db 62 4e df 15 80 7b f4 9f 81 db 46 8a 9a c3 ec c1 e2 27 82 22 9e f9 94 79 e8 07 32 57 32 e3 0f b0 f7 22 f1 96 bd 37 96 75 88 48 86 f1 c8 77 95 22 de 2a 45 c4 c7 7b 6b d4 5b d1 ec df 58 bf 7f 7c d6 54 1f 89 08 23 c2 2e 1b 6d Data Ascii: RIFF#WEBPVP8L#/?M8$Q"o[@#?N:NZRCLdWmCsW'[:U&3Se&2KkCe /I"YnuK$`y8$_3)$GRGbN{F'"y2W2"7uHw"*E{k[X\|T#.m
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 61 4e 06 33 d2 ce df 9e d8 cd c9 f5 27 e5 2a ff 71 e5 e2 01 cb 9a 52 e2 a5 ab c2 81 5f b9 5d 72 39 5a 57 62 74 e9 5c fd aa ce 55 95 d5 56 94 6b db 56 6d 2b 63 ac 23 f7 c8 77 7f fe ea 64 40 76 44 06 49 50 76 77 bf 7a f6 94 a4 6d db 5a 27 cf fb fd 49 da a4 ee ee ed 0c 67 05 0c 99 b2 16 2e 66 6e eb 60 01 2c 81 2d c0 d8 1d 2a c8 71 cd 39 f9 bf 70 c4 46 92 d4 0c 22 6c 38 bb 6b 17 98 cd f9 ff cd f3 c6 3f fa 1f 47 e0 05 80 38 a8 e7 78 96 d1 15 4e 00 ee c3 71 d4 c7 23 a5 05 96 cf 05 08 c3 11 0f e8 de 80 17 31 4c be 94 2e f9 02 8f 87 0f ff f6 42 84 7d 66 2e a1 cb 43 fc bc 43 e0 ee de 5a e3 19 b2 2a 95 a7 18 a1 8b e7 0a a8 c0 41 86 aa 78 a3 eb f3 14 38 c6 e0 61 f9 5c 95 ce 4b 88 02 74 73 38 56 ba d0 c5 f2 b9 54 5d b0 6a 94 50 f4 e5 73 55 e8 b5 17 09 17 d0 d5 ab 90 Data Ascii: aN3'qR_]r9ZWbt\UVkVm+c#wd@vDIPvwzmZ'Ig.fn`,-q9pF"l8k?G8xNq#1L.B}f.CCZ*Ax8a\Kts8VT]jPsU
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: fe 1e 50 9b ef ba 7e 2b 89 19 a4 42 a3 03 c2 2d 83 14 cd c0 c5 c2 0c 46 49 4d 9c a1 6e c2 4f 3f 94 e7 96 76 bd f1 59 69 7c 2a 4b 97 b6 2a 74 bd 22 10 34 ba ed 8a d2 8d d5 e9 cc ab 5e 69 e5 4c 44 42 43 08 52 6f e1 84 ad 80 d3 77 b1 a7 6e 48 b3 db 9b 22 a6 a4 d4 cf 2d ed 12 aa 6e 8e 43 01 02 43 09 49 57 10 04 45 84 45 5e 4a 28 49 90 1c 0d 91 9b dd 7c 5c 1c 44 a3 3a d7 0b 0d 41 80 de 7b 37 53 86 e2 5c d5 27 90 c5 ce 7b ed c6 21 00 83 25 ed 02 42 a0 34 ea 1a 01 80 fa 31 73 54 64 3c e6 e5 62 42 63 d8 15 42 ea 33 aa 77 9d 5b 79 ae 47 39 33 ac 62 6f b8 aa 4e ed 81 8b 54 bd 76 36 ce 42 71 e7 a9 5c 56 30 e7 ac de 3a 0f 47 3d 66 ea 22 c2 b4 b3 07 12 d4 41 40 4f e7 96 9f ab c3 b1 9c f8 b9 38 0b b7 5d 7c 36 d7 fa 9c c2 de 81 78 29 de 5d b8 c2 b7 54 d9 a9 73 f6 aa 4b Data Ascii: P~+B-FIMnO?vYi\|Kt"4^iLDBCRownH"-nCCIWEE^J(I\|\D:A{7S\'{!%B41sTd<bBcB3w[yG93boNTv6Bq\V0:G=f"A@O8]\|6x)]TsK
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: fc 7d 83 79 b9 8e e3 0f f9 5a 9e 9b 76 1d 87 4a 67 17 d5 a9 3d e8 55 74 a2 76 42 be 1b d7 07 d7 7f e5 ba 42 31 b9 ec c2 89 3b d3 8b c0 f2 94 e7 e5 aa bd 3c 37 cb 05 5f ef 42 22 57 aa bd 3a 9b 18 9f fe 3e 98 fd 9d 7d 70 5d 33 5c 05 7a 4a cb 06 58 7f b6 d1 9c 67 c2 d3 86 f0 79 b9 56 fa 56 9e 9b e5 aa 8f 7a 01 fe 5e a5 2b 40 a8 76 d7 f7 9d e0 51 3d d3 e5 49 b6 26 f3 73 61 03 c6 4a 40 0b dc 14 98 9a 19 b9 68 d4 f2 dc 4c 97 db c3 c6 41 aa 0c cb 95 12 17 6d ad 24 5b 4c 14 05 a8 9f 83 64 b9 79 84 42 fa 7c 5c d4 b5 3c b7 84 2b 30 1c 8d d5 b4 3d d8 2d 7d 96 2b 0f 17 61 42 03 0e 27 f1 c3 ae 3a 16 4a a0 b3 99 91 cb 0f 42 f7 f2 dc 94 cb d4 20 24 67 53 77 1f 3c 45 2e 09 42 ae 5c 21 42 6d 41 e3 e9 51 61 66 13 cc c8 45 ab 51 9e 9b e9 6a ab 10 d5 41 97 58 89 6a 4f 99 2b Data Ascii: }yZvJg=UtvBB1;<7_B"W:>}p]3\zJXgyVVz^+@vQ=I&saJ@hLAm$[LdyB\|\<+0=-}+aB':JB $gSw<E.B\!BmAQafEQjAXjO+
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: ee 02 2f 47 84 88 26 6c e3 c0 9e 97 eb 40 07 23 ca 73 33 5d 96 cd 12 98 6a b2 5d eb f3 e9 91 d0 1e 29 41 fc fe 81 eb be 3b 98 e7 80 0b 83 a5 99 8f eb 49 c5 cb 73 b3 5c d9 a3 d1 00 15 b8 c6 90 c5 c8 7a 74 5f fd 03 29 ae 46 84 95 48 6a 6d ec 31 27 d7 8d 46 8c 92 5b d6 72 95 e4 78 f4 32 97 63 f9 bf ce 81 09 03 84 99 88 3c 6c c9 9c 5c 2b ae aa 60 04 57 2d b0 da d9 ff 54 e8 72 3b e8 dc 38 c3 aa c2 04 b9 79 90 68 9a 4a 6c 4e ae 56 9e 5b c2 65 77 c8 36 1a a0 6c 97 0b 67 ad 9b 57 1b 13 ea b7 fe 4a b6 3c b7 b4 cb d9 32 77 24 9d 28 70 01 a7 a5 7d 91 5f 43 ec 06 db cc 7e c2 9c f4 66 ea 3a 62 79 6e 09 57 2d d9 97 2d 72 85 90 d2 78 f7 31 5e 6c 32 b1 ed 26 93 48 67 12 3e 2b 97 88 d8 ca ab 3c d7 0a 3d 29 ab a6 a4 52 e4 3a 65 5a 0f dc 1a 21 51 73 50 a3 3d 3f 9d f0 39 b9 Data Ascii: /G&l@#s3]j])A;Is\zt_)FHjm1'F[rx2c<l\+`W-Tr;8yhJlNV[ew6lgWJ<2w$(p}_C~f:bynW--rx1^l2&Hg>+<=)R:eZ!QsP=?9
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 3d 2f 3c 23 0f f2 ab 43 65 18 d1 7b bd fd c6 89 d6 ac e3 ae 33 e6 bc 0c a4 90 26 b7 e2 5c 3d d4 85 7a 07 be f0 36 28 80 0d 29 01 ed 72 31 ea a7 14 58 ab 2e 33 da 89 cc 4e d2 55 08 a1 e2 e3 f0 b0 67 bc 79 41 e9 18 9c d8 10 64 e9 1e 4f 6c da 7e db 49 c5 04 36 8e 91 5b 71 ae e1 7c 70 0d 51 15 24 24 54 b5 36 51 19 e5 72 d3 4f 42 f8 50 08 4c 53 c5 c8 1e 38 d2 a0 92 3b 39 d7 c8 0f de 52 5c f6 53 94 13 a5 30 e6 04 00 43 c6 13 99 75 3c 9e fe 4d b2 97 81 5b 61 ae fa 2f d4 1e a0 9c 9b d8 bd 7f 03 2e aa 6e 4e f5 3d 60 4d 46 8f 5d a6 ce b1 ea 2f 63 8a fd d4 40 3e 29 84 74 e5 32 8b 2e 3c 75 be 84 7d 1a 31 9d 0b cc c2 c7 1a 8b 3b e6 fe cf 55 3f e7 df e3 61 4c 00 0c 8a 95 43 b5 74 6e c5 b9 aa 33 b1 8b 6b f0 93 30 e7 66 c4 77 f5 3f 4d d7 5a ca d6 cc 01 fe 5d 18 5f a2 b7 Data Ascii: =/<#Ce{3&\=z6()r1X.3NUgyAdOl~I6[q\|pQ$$T6QrOBPLS8;9R\S0Cu<M[a/.nN=`MF]/c@>)t2.<u}1;U?aLCtn3k0fw?MZ]_
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: a5 34 38 8b ba fc b9 2f fd da b3 b4 d1 05 98 53 a8 14 4d e3 e2 f7 14 13 0f e8 8e ca 0e eb 37 1e e4 56 49 71 6e e5 ae cf 2a 3c 6f 7d 15 35 62 d0 19 fb f2 4f 82 6c 57 56 ee 38 d5 69 70 c3 ef d4 2c 07 56 63 e2 a4 01 22 69 90 91 8e eb 1a 50 0e 84 45 ff 34 a0 f2 c6 93 4e 71 6e e5 ae b7 83 09 cd d0 ee 51 3b ab b4 59 2b b6 7c d7 5f fc c0 7f 0d 55 b1 b0 36 c9 48 df 53 68 c5 b8 2e 66 bb 1e f4 bf bb 50 57 95 cd 0d ca 73 2b 77 ad 08 47 95 73 b3 3c 3b 95 a1 0b 63 81 eb a4 e7 c1 2d 7f 08 d1 42 92 8a 5d e8 55 75 32 45 23 e9 11 5d 04 34 81 6f c0 de 5a 53 e7 d1 99 e2 dc 46 70 35 74 15 ab 10 3c 54 5f 1a b0 16 b9 0a 91 b2 b1 09 86 a0 05 d0 4e d6 23 f1 be c2 c8 2e 26 3b 12 74 97 d6 b7 5a 2b 8d 37 d6 d2 dc 46 74 35 3e b9 71 55 d7 c2 55 cd 56 ad cc e5 63 33 7e 08 c0 38 bd 4f Data Ascii: 48/SM7VIqn*<o}5bOlWV8ip,Vc"iPE4NqnQ;Y+\|_U6HSh.fPWs+wGs<;c-B]Uu2E#]4oZSFp5t<T_N#.&;tZ+7Ft5>qUUVc3~8O
2024-04-19 14:07:01 UTC	855	IN	Data Raw: 02 6d 25 e5 08 5c fc 26 60 a0 08 53 1a d3 f1 c1 10 a8 bf fe 7a 52 f7 21 a4 7e 52 d7 21 0e b7 0d e3 92 e5 ba 8e e3 da 7e f2 89 77 57 be 9c 14 63 18 dd 61 ba 02 06 33 80 9d fe 1b 3a 5f 07 45 a2 22 16 9c de 23 06 44 30 66 2e 45 ae 27 b5 cc b5 f7 d6 ba bb 3d 4e 51 f0 1c 4b 0c 7f b2 4a 84 3b b9 0d 5e 3f 84 b7 37 ef 90 df ef d9 77 10 c6 80 9c c2 a5 84 03 c7 13 2f de f4 a4 64 14 97 c9 5c e2 6c 76 20 32 74 b2 f0 c9 71 ce 8c df 04 41 7a 16 9c ca 04 dc f2 27 bd 29 fe 77 1b bf f0 f2 ad 3f 2a c3 44 bb 84 65 74 57 7a 6c ba 1b 0d 88 18 9e 36 88 cb 94 2e d7 8a 7b d6 08 d8 57 28 73 5d bf 07 7f 90 f2 5e a7 78 19 75 5a 15 82 01 33 0f 90 d6 9b f0 19 77 17 21 04 e3 b8 0e 07 f9 ca c6 89 5f 78 e3 d5 48 d9 a4 df f7 e9 b8 12 bf ef a0 67 cd 20 e5 ae da 1a 36 77 d3 b8 ef 31 9e 07 Data Ascii: m%\&`SzR!~R!~wWca3:_E"#D0f.E'=NQKJ;^?7w/d\lv 2tqAz')w?*DetWzl6.{W(s]^xuZ3w!_xHg 6w1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.6	50112	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:00 UTC	1080	OUT	GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 3008 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	733	IN	Data Raw: 52 49 46 46 b8 0b 00 00 57 45 42 50 56 50 38 4c ab 0b 00 00 2f ff c0 3f 00 e2 50 dc 36 92 92 f4 5f f6 31 c3 2b 22 26 80 dd b6 95 34 b6 95 8d 0c 5b 98 6c 45 c3 0e 80 46 d1 16 df 22 9d ff ff 0f d9 ce 29 6f 1d db b6 79 3c 37 b6 6d 73 f7 ec ce ac 3d e7 da f6 e1 7a ef 3d 8e 6d db b6 6d 3b 39 67 e6 57 fc bf b1 cb fb 4a 69 57 a9 58 39 e9 72 95 3a ff 2a 6c 5d e5 21 24 f5 ed e2 87 90 ca a9 ec 74 36 26 76 d2 de 57 1a c9 db ff 19 92 f3 5d db 4a c6 b6 bb 6a d6 7b cb 31 ff 80 73 e5 39 27 dc bc f6 ee 2d 36 8e ee 8d 6d db 98 aa 1e 2b e8 4e 46 16 6d db c6 de 9c da b6 ed 38 b9 5f 6c db 36 df 6a db ed 9b 6d db b6 6d db ee 87 eb ff fb bf 3f a9 fa 3f 01 72 6b db 5a 1e a7 87 e9 bf 00 4c 05 6b 16 98 99 99 99 99 19 c4 d2 a7 ef 1a 4a 70 03 5f 01 2a c0 8d 08 62 47 2a c0 3d d0 f0 Data Ascii: RIFFWEBPVP8L/?P6_1+"&4[lEF")oy<7ms=z=mm;9gWJiWX9r:l]!$t6&vW]Jj{1s9'-6m+NFm8_l6jmm??rkZLkJp_bG*=
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 56 e0 57 8f c1 99 42 a3 1f 06 8b e5 2e a2 71 b8 c1 14 e8 b2 ec c2 72 ed c6 b9 ce 43 31 85 c6 87 e1 ec 56 30 b6 46 95 01 ac f8 6e e3 5c 17 22 43 f1 9e 35 22 8b a0 c8 f9 b1 12 c6 04 bd 1b 5a ea 5a ed dd 5a 24 6e b9 17 a1 7f 83 4a b5 43 6f ce 03 71 7e 95 60 04 18 38 0a ad ee 5f c3 e1 50 7d 49 97 08 03 c4 a1 e8 f0 1b 18 36 47 16 58 23 15 81 7b 0d 11 83 79 77 fe 05 e1 a1 af cb a0 4e 10 23 39 36 60 dc 2b 13 e7 1d fe 8b c1 4d 77 26 04 89 4f 80 6e f0 ea 3c 13 35 10 9c 69 29 1a 41 52 25 8f 91 59 3d 0f ec 73 cf 38 10 d8 5f 77 32 0a 41 94 c4 44 93 d9 0e ef f6 96 5a 73 cf 58 00 6c 88 38 d0 29 8d 4e 23 fd 68 5a 11 96 db 27 d9 ef be cf 4b c1 04 71 86 4b 83 69 f3 fd 74 c1 ee f2 49 e6 bb b6 f1 84 11 27 21 d1 60 7a 71 51 45 fc 96 07 a4 cb 2b 59 ef 74 4b c9 28 20 4e 52 bc Data Ascii: VWB.qrC1V0Fn\"C5"ZZZ$nJCoq~`8_P}I6GX#{ywN#96`+Mw&On<5i)AR%Y=s8_w2ADZsXl8)N#hZ'KqKitI'!`zqQE+YtK( NR
2024-04-19 14:07:01 UTC	1020	IN	Data Raw: 65 00 c6 cf ee 25 24 a5 46 02 cc 0a a2 fd 22 bb 87 90 94 ea 30 32 06 18 76 0f 26 29 d5 19 45 a3 f2 98 2c bb 1b 93 94 aa 8c a2 11 89 9e 54 6d 20 93 06 c3 e6 c6 24 91 59 e1 a2 fd 03 9b 0b 93 14 cb 8d c2 11 79 6c 36 9b 13 93 14 4b 70 e1 b0 44 4f 2c 35 90 49 83 6e 73 1a 24 c5 52 bd 68 58 02 a3 87 6e 75 18 24 8d d0 0b 86 e5 b1 d9 ac 76 83 e4 b1 db ac 36 83 24 32 cb 5f b4 cf 09 dd 62 33 48 1a a0 03 f3 4c 6b 8b d5 20 f9 43 c1 b0 c0 65 85 8b e6 9c d0 2c 56 9d a4 01 5a c1 90 38 e6 6a f9 8b 56 6b f4 d6 5a 78 2e e2 9b c9 44 2c 16 9d 22 32 eb 8b 97 fc c5 7d 2a f8 5f 8a 26 6e b6 e8 04 d2 a0 01 b3 9e 78 d5 8f a0 18 71 a9 27 1c 30 5a a5 c9 6c 3c ac 3a 34 b9 08 0d 93 f4 28 09 cc 14 e6 9a 9d 58 32 61 b3 59 57 1b 1c 1e 21 b1 21 1a ef 71 bc 13 8d 0c 3b 1e 26 a9 31 3a a0 0e Data Ascii: e%$F"02v&)E,Tm $Yyl6KpDO,5Ins$RhXnu$v6$2_b3HLk Ce,VZ8jVkZx.D,"2}*_&nxq'0Zl<:4(X2aYW!!q;&1:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.6	50119	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	505	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 498 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:04 GMT Expires: Sat, 20 Apr 2024 10:12:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 14097 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	498	IN	Data Raw: 52 49 46 46 ea 01 00 00 57 45 42 50 56 50 38 4c de 01 00 00 2f ff c0 3f 10 4f c1 a0 6d 23 49 9e 99 65 71 34 8f fb 7f 57 1a 08 da b6 8d 33 2a e3 0f 71 3f 82 b6 6d e3 ae 2c ce 1f d7 99 4c 63 1b 49 92 93 46 cb a0 09 8f 10 30 f1 c1 d2 1a 02 50 22 40 88 34 ff c6 bd b5 b4 39 70 f9 4d ac e0 b7 3e 6b db 77 16 5a ef 9a a9 5b 95 2a 51 0d a2 40 10 3a 15 2e 2d fe 00 6b 01 41 18 d0 e1 2b 22 4c ff d3 07 f8 21 c1 b6 6d b5 6d 64 fa 37 f7 86 e1 eb 7f 85 19 e6 3f 4b fb 41 51 8a e8 ff 04 0c 8b ff 17 ff cf 47 dc 7e de 5f 5c 57 2b 6f 8f e2 b5 7e bd 69 bd 55 33 ef 8e 11 ad af cb 5e 4d bd 3b 21 62 f5 36 8d d5 1a 11 91 fa 99 aa b5 77 27 12 11 a7 d5 55 35 49 44 98 5e ba 51 22 82 b4 e9 d5 2a 11 31 7a 1f ed 12 11 a2 c7 6e 98 88 08 9d 37 cb 44 04 a8 55 d3 44 c4 a7 1a 27 22 7b 22 b2 Data Ascii: RIFFWEBPVP8L/?Om#Ieq4W3q?m,LcIF0P"@49pM>kwZ[Q@:.-kA+"L!mmd7?KAQG~_\W+o~iU3^M;!b6w'U5ID^Q"*1zn7DUD'"{"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.6	50121	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	505	OUT	GET /DG-zbXPr8LItYD8F2nD4aR_SK_jpkipLBK77YWY-F0cdJt67VFgCHZtRtjsakzTw3EM=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 458 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:00 GMT Expires: Sat, 20 Apr 2024 12:12:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 6901 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	458	IN	Data Raw: 52 49 46 46 c2 01 00 00 57 45 42 50 56 50 38 4c b5 01 00 00 2f ff c0 3f 10 37 a1 a8 91 a4 a8 b9 f1 ef 07 21 d8 e0 3f b4 0d 03 69 db c4 c1 fd 7b dd 76 01 41 91 ff a3 b1 8d 24 c9 49 ff a3 55 2a c4 48 78 d8 32 8a 37 01 f7 02 c0 08 09 32 b4 fe e5 88 10 7f f0 a4 58 84 f3 26 9a 9c 6e 61 b1 43 c0 0f 01 a5 40 1e f8 64 81 04 47 41 01 c4 65 7d d8 6c 1d 15 05 15 90 20 db 76 db 36 50 c3 87 ba dc bb fd 5c de db ff 3a 25 fc ff 53 89 88 fe 4f 40 19 fe 1f fe 9f 8e b8 7c ba 3e 6c 5a 2f eb 67 bc e6 0f 6b 33 6b fd f8 41 b4 de 77 d6 ba 5a bf 85 58 3d d7 d6 d9 fa 4d 21 52 1f b5 75 88 42 9c 66 db d6 25 0a 61 ba b5 4e 51 08 d2 c2 5a af 28 c4 e8 b1 63 14 42 74 d3 33 0a 11 3a 76 8d 42 80 ac 75 8d 42 7c 5a e7 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 f6 28 64 8f 42 Data Ascii: RIFFWEBPVP8L/?7!?i{vA$IU*Hx272X&naC@dGAe}l v6P\:%SO@\|>lZ/gk3kAwZX=M!RuBf%aNQZ(cBt3:vBuB\|Z(dB(dB(dB(dB(dB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.6	50120	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	506	OUT	GET /9bJoeaPbGTB8Tz_h4N-p-6ReRd8vSS-frZb2tmJulaGIoTKElKj3zpmcFJvnS96ANZP5=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 882 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:12:47 GMT Expires: Sat, 20 Apr 2024 11:12:47 GMT Cache-Control: public, max-age=86400, no-transform Age: 10454 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	722	IN	Data Raw: 52 49 46 46 6a 03 00 00 57 45 42 50 56 50 38 4c 5d 03 00 00 2f ff c0 3f 10 b7 e2 2a 92 24 c5 aa 63 f2 af ee 5c 30 be ae bf a7 c1 40 da 36 71 70 ff 5e b7 9d 4d 23 49 8e ea f8 a3 7b 04 ff f1 85 ef dd de b0 8d 24 c9 49 bf 44 e4 42 8e 64 88 87 4d 00 6f a1 dc 4b 00 2b 24 c8 d0 fd 0c 14 c4 cf 06 45 08 04 06 44 fc 44 94 42 89 5f 3c f4 13 b7 9d 50 e8 16 a0 29 3c 10 9b ee 30 11 88 9f 95 40 08 44 a9 79 2c 10 e8 30 44 c1 ac c0 0d f1 a7 19 3c bf 62 11 ce fb 8b 36 9d 03 02 7e 08 18 05 e4 94 0c a9 e0 86 ab 00 44 48 33 db 82 9e bd 46 89 02 25 0c 12 6c 5b 52 24 45 73 dc dd 7d 06 87 ae cc 2c c9 c4 dd 21 b0 d8 ff 6e a0 b2 e4 e3 1d 11 d1 ff 09 18 19 fa 7f e8 ff ff 47 9c 78 fb e4 d1 3d d7 96 d9 a7 fe 35 f6 f2 ae 55 75 ed f1 95 fa d6 fb 07 d6 b5 6a f6 85 a9 5f bd ce 5c cb 66 Data Ascii: RIFFjWEBPVP8L]/?*$c\0@6qp^M#I{$IDBdMoK+$EDDB_<P)<0@Dy,0D<b6~DH3F%l[R$Es},!nGx=5Uuj_\f
2024-04-19 14:07:01 UTC	160	IN	Data Raw: e2 4a 02 93 97 85 03 46 73 3b 57 97 0e 0a 07 8d fa b0 5b cf 41 f0 0e 1c d5 32 d6 aa 2e fd 1e d6 ba ff 62 8b b5 42 14 4d ad f1 7f 78 34 d6 aa 10 b5 ed d0 7f 43 ff fd 0e 74 af eb 6c f7 3d b2 dd 66 1f 77 df 93 ae 7b da 7d 6f bb ee 55 f7 4d dc ed b8 f1 ee 93 97 b6 cb ec f3 91 1e 38 f6 a0 cb ee 8f f6 01 79 9f 75 57 f6 6e a4 1f be c9 ba 2a 7b 23 7d f1 fd 7d db 45 f6 e1 c7 91 fe 38 fa dc aa 6a 97 58 d5 bb 2f c6 46 7a e5 f8 ab a7 8f 6d 77 dc 7b f4 e4 ed c4 c8 d0 ff 43 ff ff 3f 22 00 Data Ascii: JFs;W[A2.bBMx4Ctl=fw{}oUM8yuWn*{#}}E8jX/Fzmw{C?"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.6	50122	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	506	OUT	GET /keE2gN0Hqh8-Tsf_RYZ_-yS2uo6ToqYVyRBv_UZaLXsgeeHBd2YPcEUWEF4DEtfGyb1h=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 532 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:04 GMT Expires: Sat, 20 Apr 2024 10:12:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 14097 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	532	IN	Data Raw: 52 49 46 46 0c 02 00 00 57 45 42 50 56 50 38 4c 00 02 00 00 2f ff c0 3f 10 3f c1 2a 92 a4 56 73 e1 9f ec 02 d9 b8 43 40 78 d1 86 80 a0 c8 ff d1 d8 34 92 e4 a8 fb 7c 7e 3a 1a cf 1f d7 a7 6e 18 d5 b6 b5 63 7f ff e8 a4 95 00 6a 69 a0 82 99 00 df d4 d4 0b 00 6c 20 81 0c fa 7f e6 48 0b a6 cb 27 3e bf 4f 3c 7e dd 3a 5f fb f8 d1 7e 70 0e 25 25 25 01 48 40 28 e8 b7 20 70 5f c9 d9 95 91 f5 89 a2 59 8f 32 5c f9 e1 87 e7 45 80 40 12 24 4a 92 dc b6 15 95 0e bb ce 36 01 52 d2 3a c7 ff ff 49 16 4a 05 e0 1c de 23 23 fa 3f 01 dd e2 ff c5 ff f3 11 b7 6f 87 ab 3e 96 72 bc 6c af f5 63 9f 52 8a c5 dc 9f a9 b5 be 6e 87 58 d4 fd 39 d4 56 2f 63 2c ec fe 9c 50 4b 7d 8e b1 40 84 da 69 75 17 8b 44 a8 99 ee 53 a1 08 35 d2 66 88 a5 22 d4 46 af a9 5c 84 9a e8 58 32 42 2d 74 53 34 42 Data Ascii: RIFFWEBPVP8L/??*VsC@x4\|~:ncjil H'>O<~:_~p%%%H@( p_Y2\E@$J6R:IJ##?o>rlcRnX9V/c,PK}@iuDS5f"F\X2B-tS4B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.6	50123	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	505	OUT	GET /t-juVwXA8lDAk8uQ2L6d6K83jpgQoqmK1icB_l9yvhIAQ2QT_1XbRwg5IpY08906qEw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3872 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:04 GMT Expires: Sat, 20 Apr 2024 10:12:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 14097 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	721	IN	Data Raw: 52 49 46 46 18 0f 00 00 57 45 42 50 56 50 38 4c 0c 0f 00 00 2f ff c0 3f 00 1e 0f db b6 1d 92 a4 6d 5b cd 75 5d bf c0 b6 6d 36 ab 7a 6c db b6 ad 54 45 8d 6d 2b 9d d5 b6 ad f1 b4 6d db ee 8e 42 66 c4 79 1e c7 79 1e 97 af b1 6d b6 1d 17 c6 33 97 59 75 2d 39 97 7d 45 8e 6d c4 5c d5 58 96 21 25 6a db 8e 47 d2 dd b6 ad f4 29 d7 be 8d b1 ed a5 3d 49 c6 33 2b b6 76 63 db b6 6d b6 6d 77 27 a5 ef 8f cb be 69 d1 b6 6d 4a 92 76 55 db 65 9b 61 23 8d 40 ea b3 6d db b6 6d db b6 ed ee b2 8d fb 5e d8 8e 48 86 ef bb a7 ff 92 d8 b6 11 24 49 ae da 00 dd 9b f1 77 2a ae bd fb ab d2 37 7c 9d e8 3f 27 fa cf 89 69 d3 6a c3 9e 6a 1f 7f 77 d8 e9 17 2a 60 13 b0 3e 00 d2 d5 17 1f bc f8 ac 72 2f 7f d8 72 fd ee 6f 30 f4 8d 4a 15 5e fd 78 33 70 f5 96 c0 ce 12 27 1a 17 3a 17 7a 20 4d f9 Data Ascii: RIFFWEBPVP8L/?m[u]m6zlTEm+mBfyym3Yu-9}Em\X!%jG)=I3+vcmmw'imJvUea#@mm^H$Iw7\|?'ijjw`>r/ro0J^x3p':z M
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: fb ae 58 ac fb 9e ea e3 47 85 eb ee 0d d2 69 32 ea 7a 00 8b 92 ed 30 d8 98 52 5d 17 b1 74 de cc dc 1c 63 9a 8c 65 7f 3a b8 97 0d 83 fb db 39 f7 31 62 14 11 dd dc 46 2b f9 e8 09 e1 31 99 97 82 81 b7 27 09 0d f3 36 2e 7c 81 54 9a 7e f6 8f 0f ad 19 01 83 c3 61 f4 5c c6 39 6c 4b de 72 42 06 33 46 31 d1 dc 4f 08 65 58 7b e3 1f 26 87 f2 33 b8 03 16 2e 87 7b 76 bb 61 a5 86 05 d3 07 0e 75 9c 4e 8e ba ef c5 00 ad ac 00 8c e0 26 16 4e 1d 9a c1 45 6d ef 27 93 7e e9 fc e1 c0 e4 62 f8 9e b4 70 38 fc ee 80 27 17 bd 60 70 e9 ec be 46 a8 a4 78 d9 f9 41 7a f9 30 b3 ae 67 c7 85 b6 64 1b 0c 3e 2e ac 66 0f 91 b4 ff 73 a7 87 85 26 27 a7 1c 44 17 73 cb 6d 9e ef 67 df c7 89 71 76 27 d7 d1 48 90 d5 23 79 31 87 27 61 78 9c 75 d8 c6 bd 8d 0b 33 54 05 85 d4 7b e9 1b 1f 66 93 9b ac Data Ascii: XGi2z0R]tce:91bF+1'6.\|T~a\9lKrB3F1OeX{&3.{vauN&NEm'~bp8'`pFxAz0gd>.fs&'Dsmgqv'H#y1'axu3T{f
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 66 d0 c4 0b 7e 0c d5 d2 cf c8 0b 9a aa dc fa 98 05 a4 e3 bc 0a f1 2a c6 30 2b 72 70 36 a2 c5 e0 52 99 17 01 62 a8 58 5d ef 97 82 ee 07 a2 88 41 53 ed e7 bf b0 c0 d4 d4 77 11 8f 1f fd 8c ca 40 31 ce c4 0c 9a 38 11 23 86 9a 32 8e b8 a0 89 53 82 c4 50 67 77 72 1d 69 41 13 a8 9e 44 74 a0 2b 68 ba ad 5f 3a 0f 4b 5f 23 98 57 31 a8 0a 9a 02 b4 57 8b 3f 69 01 eb b9 18 de 3a 5d 6c 2a df f2 70 80 0e c4 a0 89 17 91 62 a8 e7 c4 0e 9a dc 1c 81 b6 7d e8 1b be f5 b3 c5 29 b1 62 a8 8b 44 a6 00 1e cc a0 09 41 2f e0 b5 3c 29 72 d0 e4 45 8d 18 34 f1 22 5a 0c 25 ae c3 b0 b6 fa 3f 4c c4 a0 09 45 e3 a6 90 73 1d 71 74 00 27 de 25 8b 89 bc b0 c7 50 d4 38 4c bc 16 6d 07 70 a4 06 4d 9c 12 30 86 3a 7b 88 63 82 fe 33 aa 41 3a d0 82 a6 a7 6f e1 45 c0 18 2a d6 c0 57 85 64 68 6b cd cb Data Ascii: f~0+rp6RbX]ASw@18#2SPgwriADt+h_:K_#W1W?i:]lpb})bDA/<)rE4"Z%?LEsqt'%P8LmpM0:{c3A:oE*Wdhk
2024-04-19 14:07:01 UTC	641	IN	Data Raw: 9a 73 c7 c9 09 59 3d bb 45 87 de b4 2a c9 a4 c3 ef 4f 2f 85 cc 6c 61 2f ab 26 56 2b a2 a3 4c a7 cd ae f0 33 c7 50 5f 0e cb b7 29 3e a0 4a 52 31 b0 45 2c 88 7c 29 63 cf 3a 63 12 69 16 c2 97 25 7e 7c 2a 77 7e 09 ab c5 20 eb aa 24 97 ca bf 57 5a 14 89 b1 4e 8b 8a 8f 52 a6 38 86 8f 32 c6 50 1f 09 28 dc f6 ad 2a c9 a6 d5 08 30 39 dc b9 d1 d4 7c a6 04 44 7f b2 ca 6b 5f e7 2c 4e 66 21 77 64 ce 96 59 a9 4a d2 d1 70 6d 79 5e 18 0b 2b e3 ff 4f 94 11 e1 46 70 33 1d 5d 95 90 31 b3 f4 d4 ea da a5 4a f2 29 e9 d4 e8 d5 0c 75 8b d9 a3 99 52 10 4d 1a 4a eb 3d b0 85 61 04 f7 b5 68 f5 a6 f9 1b 55 49 42 7a 47 ca 6c 30 fd 9e d5 87 86 75 2d 04 3e 7e cc b7 e1 a2 f8 9c 46 bf 76 ec cb a8 92 8c 4a 7e 24 b3 24 32 43 d0 24 0b ca 6c b1 e5 19 89 6c 45 e8 f1 d9 30 87 39 68 92 6c 04 77 Data Ascii: sY=EO/la/&V+L3P_)>JR1E,\|)c:ci%~\|w~ $WZNR82P(*09\|Dk_,Nf!wdYJpmy^+OFp3]1J)uRMJ=ahUIBzGl0u->~FvJ~$$2C$llE09hlw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.6	50118	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	505	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4416 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:17:25 GMT Expires: Sat, 20 Apr 2024 12:17:25 GMT Cache-Control: public, max-age=86400, no-transform Age: 6576 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	722	IN	Data Raw: 52 49 46 46 38 11 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c f0 10 00 00 2f ff c0 3f 00 55 e1 8d ff 5f b5 65 39 67 78 c4 cc cc cc cc d2 30 33 33 33 33 33 33 33 33 43 33 33 73 f7 63 66 66 6c ee 36 f6 de 6b ed 73 4e 9f b3 4c b1 da 15 b3 14 01 83 ad 7a 19 c8 42 5f 7a b6 e0 78 5b 64 a9 6a 30 02 0c e0 76 0a 02 ef 78 62 8a 80 71 89 19 53 58 b2 19 23 d8 35 96 30 09 05 c0 d6 f3 9e 39 ec b6 2c b9 77 aa d4 39 a8 74 c5 16 53 0e f2 da 1f 4f 8c d6 ed 27 f4 98 59 1a 86 bf 58 3e f6 aa b1 c6 53 08 bb 4a 4b 60 0d 24 70 ed 2b 66 3a 55 cf 13 f5 b5 5e c9 1c f3 3f f2 9f fb 62 10 4b 61 90 db 59 1c 91 d7 01 88 f1 56 c9 64 f6 a6 4e 8b 65 ad 00 4e 00 a2 37 b4 3c 61 5b e3 89 75 57 04 37 04 91 27 51 00 c0 b2 b1 66 75 36 ba 25 69 67 9c 6d 73 Data Ascii: RIFF8WEBPVP8XVP8L/?U_e9gx033333333C33scffl6ksNLzB_zx[dj0vxbqSX#509,w9tSO'YX>SJK`$p+f:U^?bKaYVdNeN7<a[uW7'Qfu6%igms
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: cd a8 92 6c ed 4b 8b 7d c0 ce 2f d2 6d 16 a5 ca 25 10 48 1e db cf 2a 36 64 1f d1 1d e1 86 36 70 e8 55 1d 96 22 b6 9b 67 67 9f d8 5a 5a 91 7a c4 8e a2 1d 72 bf c5 50 84 c0 be f2 30 19 78 ec d6 5f e9 30 ef 46 36 bf 50 cb 40 fc 66 ee 5c 1e ad 88 18 87 9a 5a 27 d9 94 38 8a 81 2e e7 ef 63 3c 5e 59 01 40 20 90 bc 9d 51 c1 40 a0 66 52 e1 86 22 00 d0 d7 ff fc 0f 45 4b 14 c3 42 a2 1d a9 c7 7b 72 00 79 2c 97 14 7b a9 aa 64 21 39 dc a3 8e 43 03 20 3a 11 50 5c ff 8b 7f 35 0b d5 96 78 4c 89 ab 00 c2 bf a7 30 55 2c 04 76 5e b1 6e a8 57 b3 7a 74 ec 24 48 be bc 05 26 36 6d 09 3d f6 e8 ae 94 47 49 82 a2 33 81 60 23 be ed 8e f1 68 4f 2a c4 67 50 d4 b1 69 d8 a8 4a 78 0c a1 46 29 a4 dc ec c8 e1 6c 04 a2 3b c4 0d b7 de 35 6b 5b 5a 34 3a cf 48 f2 00 85 f5 68 4f f8 e3 14 73 4a Data Ascii: lK}/m%H6d6pU"ggZZzrP0x_0F6P@f\Z'8.c<^Y@ Q@fR"EKB{ry,{d!9C :P\5xL0U,v^nWzt$H&6m=GI3`#hOgPiJxF)l;5k[Z4:HhOsJ
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 46 31 69 c8 28 8d 09 39 9b 9c e7 df 79 7d 7f c5 0a a9 03 f0 ac 0a 5f 86 08 47 ee c9 5d cb 7d 3a 40 21 14 dd 11 22 0d 11 4d 6d c4 ef 8f de 72 e7 f5 73 56 6b 78 35 d0 8a 0d 4f 9d 8b 91 20 ce 26 f3 e3 42 19 f8 20 5a 1a a5 e8 6d 20 fd c8 9b 5f c1 f8 9e ec e1 ce 1c db 8f 35 fc d9 c1 57 2e fb e0 10 21 ce 21 75 cf d5 28 a3 69 f2 e2 b3 d2 1b 2d cc 61 32 59 98 67 3c 66 93 db c4 ec 1a ae 3c 56 48 0d fe 4f 0a 7f 93 0c f1 b2 17 2d 51 b2 96 24 5f b9 2c 52 76 47 a4 15 01 b7 d7 f9 fa ef ca 18 c7 9e d0 c3 a5 13 db 8f 35 3c 80 38 9b 5f 99 5a 2d 19 22 4e 81 73 d8 74 cb ad e1 2b 02 40 a0 8d 68 63 16 69 db 40 4d fa 50 25 ed 87 4d ab 11 fd ff 8e 1f d3 4a 6a 48 44 1d ee c6 df 33 51 20 e2 cc 4a 7f 70 eb 3d e7 61 42 65 d5 75 bf fe 5d c7 c9 59 90 7a 8b 03 9b a7 0b a3 8c 38 78 2e Data Ascii: F1i(9y}_G]}:@!"MmrsVkx5O &B Zm _5W.!!u(i-a2Yg<f<VHO-Q$_,RvG5<8_Z-"Nst+@hci@MP%MJjHD3Q Jp=aBeu]Yz8x.
2024-04-19 14:07:01 UTC	1184	IN	Data Raw: 91 1e db 6d 2b 07 42 cd 3f 0f a9 37 30 55 09 09 90 bd ea 9f 5f ad 10 c2 4e 38 72 12 8b 30 93 73 44 83 a3 d9 ad 07 4e 56 78 63 a5 35 e7 52 5d e3 c7 af 3d 34 d6 b8 44 63 76 d0 00 a7 ca cc 28 b5 d2 90 9f 06 86 f5 79 8e ee 0b 08 ac 04 42 ce 3f 0f a9 77 d8 54 03 09 31 4e 03 00 68 73 d6 39 31 73 8e cc 8c 12 15 c5 58 03 ae da ee b8 b1 a5 45 c7 92 94 cc cb 8d 08 a8 be 56 40 6a ad 9e e0 d1 cc a4 21 30 d7 f5 fc ea cb 09 52 9f 47 40 22 01 68 be 28 c3 62 14 45 d1 90 e8 67 b4 f6 07 c0 6c bb a5 83 4e e3 88 b2 07 cc 43 a6 0d 4d c8 78 55 d9 9d 35 0c d2 ef ab b2 0a 12 0c e4 a1 d2 29 73 94 1d 20 4f ee 17 88 43 66 37 eb c8 3c 9a 4d 75 f9 b3 7a 4c ad a5 d2 8d ab 46 4e 90 fe f9 15 24 9c 9e 50 ea 28 34 26 95 be 05 76 56 61 32 51 14 45 35 37 73 eb d6 29 0e ec b3 ba e1 de ab 6a Data Ascii: m+B?70U_N8r0sDNVxc5R]=4Dcv(yB?wT1Nhs91sXEV@j!0RG@"h(bEglNCMxU5)s OCf7<MuzLFN$P(4&vVa2QE57s)j

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.6	50124	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1081	OUT	GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 6294 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	733	IN	Data Raw: 52 49 46 46 8e 18 00 00 57 45 42 50 56 50 38 4c 82 18 00 00 2f ff c0 3f 00 2a 2c f6 ff ad fe 24 67 f3 61 66 2a 6c 2e 68 ee aa fe d7 bf 98 99 99 99 99 19 06 aa ea f7 79 3e cf f7 fe ca cd 1a 12 47 a5 a2 18 1d 33 a8 e8 52 59 00 73 1c 53 ff c3 b4 83 a8 d9 c0 0d 6a 54 f8 9c 33 5b 98 f2 ad c2 d7 87 5a 85 99 d1 45 b1 e2 44 c7 65 64 98 23 73 a2 38 83 6a 54 14 c3 13 66 6e 15 56 ed 6e 40 45 b5 0f 94 0c 5d 9b 5d dc 30 67 0b cc 1c c5 1c c5 ac 5a b5 1a 90 e3 c2 e8 ae ca 89 ce 0a 4a 85 af 8e ca 02 fa 9c da 41 98 51 45 65 50 8d 0f f3 0e 72 b2 8a 51 41 fd 3f fd 84 99 19 14 27 57 e6 b4 0f 0f aa d0 0d ab 28 96 f7 1c 09 90 6c 9b 76 b5 63 db b6 ed e4 db b6 6d c4 b6 6d db 7c 7e b1 6d db b6 6d 13 62 00 00 49 98 ff bf eb 4d d2 a0 d3 02 2c d4 fe cb a2 6d ab 6a ab b5 db d1 6b f3 Data Ascii: RIFFWEBPVP8L/?,$gafl.hy>G3RYsSjT3[ZEDed#s8jTfnVn@E]]0gZJAQEePrQA?'W(lvcmm\|~mmbIM,mjk
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 6b 8e cd ce 01 9a b1 55 6b 79 a1 77 8c cf 42 e8 0f c9 ff 73 98 25 6b 35 b7 b1 f6 98 a8 de 55 32 77 f2 28 1f 4c 6c ce eb 33 ec 75 34 5b f1 22 07 d3 2b de 85 b1 84 14 79 6b 0b b9 ea f4 2d 0f 2c df 7d f6 f8 dc fb a8 42 07 7d 11 1e a7 36 2d 30 22 88 6d 58 0c cf 9f cb 01 83 30 e3 99 c0 4f 02 bf 2c fe b2 9d 1b 66 d6 c0 71 e4 58 4a 6c d4 f0 2e dd cb eb 2c 59 bf eb 5d 27 d8 16 54 d9 b9 db b9 ab 30 96 93 22 ed 9f 12 bd cd 20 ec 98 42 1b 10 82 73 9f 25 fc 59 41 c4 36 ad 7f 93 2c dd ba bd cb ca a3 67 e7 67 6d 04 bc 82 14 e7 1e 5f 9d d2 58 56 8a f3 bc 65 af 32 b9 ad 14 6a f2 9c 34 33 e6 38 15 9a 43 22 8c d8 fa 4d fe 32 6f d2 d9 c3 a8 ca 43 3a a9 b1 28 39 b7 b8 84 e7 40 d4 cc 9f 3d bd c7 41 f7 57 d2 35 34 3b b7 04 0b 1b 96 3d 7b 8d d9 63 c7 96 44 b9 29 74 f2 d7 38 0d Data Ascii: kUkywBs%k5U2w(Ll3u4["+yk-,}B}6-0"mX0O,fqXJl.,Y]'T0" Bs%YA6,ggm_XVe2j438C"M2oC:(9@=AW54;={cD)t8
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 6a b2 04 56 d9 ef d0 5c 9c 53 95 68 3f a6 0e 33 a0 d1 f0 36 2d 34 dc fb 0c e1 fb d9 34 b3 7c ef 41 ef 53 5c a8 f6 e1 02 a5 9e 20 9a da be 91 58 b4 58 73 1d 5a bb db db ce e9 ce ef 24 18 55 fb 68 2f ce ed 96 a8 ce a4 99 21 23 d1 35 c4 e8 b8 77 36 aa 78 d1 ce b4 ce 2d 05 8f a9 7b 6d ed 74 0e 32 61 a9 a3 b5 37 b2 2a 4b c3 72 e8 f4 a7 80 0a 9b 7c a5 d3 ce 94 e6 92 96 6a 1e fb 50 b8 fa 48 c7 6e 7d 4b 4b 21 80 9d ee b5 05 e4 dc e3 ab 93 7e 36 96 72 ba a2 c1 75 ca 5a 05 68 70 ee 93 08 a0 b5 bd 4c 70 e7 16 f5 60 9b 2f dd b8 19 18 ab e5 ad 1d 01 74 89 34 21 d2 9a 5f 5c 02 5b 71 40 53 f2 6d 61 c6 c9 b2 74 48 47 f8 98 12 e8 1a 6d 42 c8 b9 25 70 ae a5 30 9f 49 a0 b5 83 d4 b1 ec cf 9f b9 60 de 2b b8 dd 92 31 5d fd 2d 4c 3b 4f 05 14 d7 1c d7 c1 0c cd 9a 4e 1f 3e b3 92 Data Ascii: jV\Sh?36-44\|AS\ XXsZ$Uh/!#5w6x-{mt2a7*Kr\|jPHn}KK!~6ruZhpLp`/t4!_\[q@SmatHGmB%p0I`+1]-L;ON>
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: d9 09 e2 98 65 7b 7c aa 73 4f a8 49 c4 f7 10 aa 1b ff 1c 1c 4c a3 ef 43 b5 2a f0 e9 19 37 a9 69 27 51 24 df 05 b1 a3 1b c1 d9 f1 6e cb 74 ee 37 47 aa 68 3f 46 c9 c9 3d 2f 86 8a 59 4f b5 a3 69 5d 1b cc 15 20 ce dd de 53 e1 34 fa d2 17 c4 a3 c9 0e 0e 74 75 96 05 4a 30 45 72 07 15 62 88 76 d4 3b d1 03 2f 90 8f 3b f7 41 48 6b 7e 08 95 92 2b d3 07 e5 e1 dd 2e ae 73 5f 2b cc c2 85 8a 38 f7 11 71 ea b0 42 a0 8a 6a 33 42 07 f3 8b 48 6b 9e d1 b3 2b f8 99 7a 9b e9 89 74 02 30 db 2b 60 07 d3 3d c2 22 76 f4 da 4c e7 ee 95 e0 71 ae 10 a8 a2 9a 00 54 fc cc 0b 04 03 f1 11 67 3d f0 02 5d a2 83 e9 e0 a5 00 e7 f6 af 00 e6 5a 91 d6 fc e9 2a ce ed 01 6c 74 00 cc bb 20 76 74 30 d3 b9 77 bc d3 3a 98 8f 47 aa e8 ae 55 4a ee 01 8a ef 10 61 47 13 ea 12 e2 67 c3 72 26 62 6b 2e 3e Data Ascii: e{\|sOILC7i'Q$nt7Gh?F=/YOi] S4tuJ0Erbv;/;AHk~+.s_+8qBj3BHk+zt0+`="vLqTg=]Zlt vt0w:GUJaGgr&bk.>
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 20 b8 7a a8 67 50 84 73 77 0e 30 cc 2a 9a da b6 45 bc e1 62 1d 7c 94 53 ce 13 ac e5 49 89 c3 1c 7f 80 d9 33 f8 9e 88 73 0f cf 9b 15 06 cf 06 61 a9 a4 3b de a6 0e e6 fc 12 1a 29 61 e2 3a fd 31 21 10 e1 dc 8f e9 60 1e 93 e9 dc 0b 97 af ae f1 a6 27 d2 95 4c f7 24 3b 6d 68 23 96 3c 56 38 e6 4e 9d fd 73 be 73 8f 2c 5a 98 3d 83 1b 11 e7 be 4c 27 21 1b 32 e6 49 22 08 d9 41 09 af b1 0a 23 0e 20 d8 f5 55 87 f4 0c 52 9d 7b 62 7d 16 c1 ee ef bb 82 b7 3c a1 2e 33 e8 8f 8d e8 62 74 a5 30 2b f6 1e ea 81 63 3f 0e 89 a4 04 2e 25 e2 2d c7 8e c1 9b ad fe 60 e2 30 c7 7e e8 08 f5 0c 32 9d bb a3 af 16 c1 00 6c 0c 78 cb ed 5c 25 a7 18 bb bd e9 b0 56 1c 7e 37 ce 8b 22 3d 83 cc f9 d6 f8 77 23 82 0f 34 3c e9 9a 39 b0 73 38 79 8a 39 f7 25 c3 cc 9b 3c a1 9e 41 e2 7c 6b 4c 5d 2e 28 Data Ascii: zgPsw0*Eb\|SI3sa;)a:1!`'L$;mh#<V8Nss,Z=L'!2I"A# UR{b}<.3bt0+c?.%-`0~2lx\%V~7"=w#4<9s8y9%<A\|kL].(
2024-04-19 14:07:01 UTC	541	IN	Data Raw: 86 77 f6 5e ce 6b 99 d2 59 8e 5f ad c1 b9 a7 b6 15 b1 d3 32 b3 47 ae f8 c5 9c 07 b3 7c ef a9 77 8d d0 fb a2 cc 26 b1 d3 32 33 91 57 ff 1b 16 dd 03 5d 6e d8 d3 73 10 3a 25 49 1b 7c cc 21 ce ab 99 35 bc 6f 0e c9 d3 73 90 39 25 49 93 b7 b5 55 ce cb 69 65 2a 98 df 34 db 49 61 91 d3 32 b3 e1 a9 6e d3 79 3b b7 b9 29 a0 35 9a e0 61 24 4e c7 d7 e4 ff e9 bc 9f f6 ce da 2f 58 5a 28 d0 b9 6d 76 41 5f e5 ca 41 e6 4e 9d db a9 60 ce 66 b3 d8 fd 7d 27 cf b9 93 a8 47 88 73 e5 22 c3 b2 27 13 58 ef 39 b7 c9 f7 f8 dc 5f 81 2b 23 e9 e4 a9 a3 c4 7a cb b9 4d 7a 2f 53 3b 8b 2b 2f f9 f5 a6 3a 2c af d6 37 3d 07 2d 3f e4 76 9f c4 95 9f cc 9b 3a 77 ff d4 e7 85 ae e9 39 e8 f8 8f 07 f5 47 04 57 9e 32 7b e4 d8 fd 53 97 e3 4f 63 36 cb 71 6e 93 c5 7f eb ca 57 e6 4e 9e 95 da cc 0f 2d 7f Data Ascii: w^kY_2G\|w&23W]ns:%I\|!5os9%IUie*4Ia2ny;)5a$N/XZ(mvA_AN`f}'Gs"'X9_+#zMz/S;+/:,7=-?v:w9GW2{SOc6qnWN-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.6	50125	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1082	OUT	GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 23302 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	732	IN	Data Raw: 52 49 46 46 fe 5a 00 00 57 45 42 50 56 50 38 4c f1 5a 00 00 2f ff c0 3f 00 09 89 6d 1b 09 92 84 1a 69 eb d6 b3 9f 7f c2 55 d3 3f 21 44 f4 7f 02 00 05 f0 19 27 e0 04 58 40 a2 56 31 0e e1 ce 16 1e 3f 51 4e de f4 18 14 ba 3d 62 e4 09 01 b4 ea 0c c4 2c 14 33 39 00 45 88 cc f4 57 0e 3b d1 06 90 3d 49 4e 20 d1 6e d5 27 76 d7 72 8e d8 32 fd 95 a7 54 c5 bd 99 fd 1f 50 d7 1b a5 32 d8 d8 3c 28 25 09 0f 3b eb e7 6f 94 2a ef b4 bf 2a ab 94 07 cc c3 a7 03 e3 b2 aa fe 01 bf 91 ed be e9 a6 6a b1 aa 0a ae ab 2e 40 f0 7b df 4c 47 b4 8a b3 e7 de a2 00 bf 61 ab 08 5f b8 1f b4 4a 5d c0 2c dd 0d 5e 55 17 90 39 a2 0f dc 00 55 c5 63 ac aa 25 0e a0 a1 00 fa be 6f 40 f1 71 03 1a ec 76 22 6f cc 2d e8 92 83 7b 4b 86 b8 07 b3 1d 3b b3 08 82 2f e0 8a 12 e4 85 a0 11 89 f2 7d 43 14 d5 Data Ascii: RIFFZWEBPVP8LZ/?miU?!D'X@V1?QN=b,39EW;=IN n'vr2TP2<(%;o**j.@{LGa_J],^U9Uc%o@qv"o-{K;/}C
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 6d db b6 6d db b6 f6 76 e7 f9 ef de 3b 0b b4 d6 fa 5a e7 3c 07 02 7a ec c1 ac ac 46 8a 05 95 0c 75 15 69 82 63 41 97 da fb 55 76 e1 62 8b 66 27 aa 0a ab 16 34 d6 95 d9 71 a1 a3 66 46 f3 62 b2 4e cc b4 6d e3 8e 3f e0 7d 21 c8 b6 d9 4e 74 7f b9 c5 04 d8 91 fe 5f 91 bd e5 8f bb c3 8b 46 90 41 e6 9a b9 43 6c 6b 70 c8 60 01 ba 09 cb 1c 32 77 77 8d 88 dc dd 1d 6e 4f cf 39 3d 2c e0 b3 01 c2 6f 9d 6a e4 ac a0 91 a9 a9 53 f5 ca 5d c1 54 4d d4 78 48 e6 f2 8b d8 41 57 67 9d 53 e5 dc fa c5 48 fa 16 da cb 98 98 22 a5 c8 86 c0 95 24 c9 a6 55 f5 6c 7e bd fd ef cc b6 d9 6e 63 db 56 95 7b 71 0f dd e9 c0 1d 3a a0 00 a7 15 aa 81 4c 3b 70 97 d8 dd 21 72 e7 c6 04 fc df fe ff c0 7f a3 f8 af f0 5f 43 74 f4 3f f4 df f1 5f 33 fe 6b fd 57 fe 97 fe 8b 72 e4 c8 72 39 8b cf 76 b5 26 Data Ascii: mmv;Z<zFuicAUvbf'4qfFbNm?}!Nt_FAClkp`2wwnO9=,ojS]TMxHAWgSH"$Ul~ncV{q:L;p!r_Ct?_3kWrr9v&
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 47 eb a5 a3 51 44 10 21 25 19 36 4b d6 c8 35 d6 b0 64 8d 73 1f e7 b0 d4 5e e6 b9 56 cd 32 cf b5 6a 96 79 26 7b 99 d6 5e b3 4c 6b ac 61 c9 65 c9 1a 36 8b 8d 88 ec 88 10 41 87 ae f6 8e ea af a7 2f fe fd 18 cf f3 90 35 72 59 a4 0f 16 1d 4b 47 db c3 6b 5b 36 82 70 59 7f 8f af 51 1d e7 7d 56 94 0f 67 1a a9 14 8f c8 ed fd 25 ef 5d d5 14 81 10 22 64 86 94 23 05 d6 a8 32 6b 50 18 55 46 ca cc a5 94 4c 2b 0d 99 56 1a 32 2d 46 ce 62 e4 48 28 8c aa fd 64 d6 a0 ca 4c 64 1a 1b 42 8b 10 82 6a 75 37 6b ab f2 6f b3 cf c1 c9 cc 24 f3 da 65 dd d5 76 77 cf d7 3d c7 f4 da b4 3e b2 73 0e ec ee e6 5d f9 e0 4a 23 8b e7 61 74 8c f7 41 75 85 70 d9 12 36 56 1a 63 19 ab 18 95 63 31 97 a1 12 ce dc ec 69 9a 61 f2 98 19 c7 64 ce 8c 63 32 67 c6 31 99 2a bc cb ac 79 f4 2c ce dc c8 65 a8 Data Ascii: GQD!%6K5ds^V2jy&{^Lkae6A/5rYKGk[6pYQ}Vg%]"d#2kPUFL+V2-FbH(dLdBju7ko$evw=>s]J#atAup6Vcc1iadc2g1*y,e
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 0e d8 e5 52 ce 4a 4b d2 22 5a f5 bb ef 87 10 63 ad e9 1f 87 6c a1 83 54 b0 17 fb 60 27 4c 44 68 f4 4f 2c 3f b9 8d 2d 7d f6 a7 a1 ca c8 52 aa e6 92 05 a5 7c 70 73 b9 d9 ae 6c 96 cb cd 72 b9 59 2e 37 cb e5 66 bb b2 d9 5c 8f be b8 39 ab ca 2c 6a 95 91 35 94 e8 60 8b 67 4b d2 46 13 11 9a b4 c2 48 45 99 46 64 a4 0e e2 08 ef 3b f3 dd 5d a5 8f 0e 44 e5 8e 5a ec 6b b2 42 2b 11 a9 5d 56 fe 86 b0 b1 e7 67 d6 c6 ac 2c 0b 8a 72 33 6e 6c 5e 2e 2b 5f d8 54 fe 4a 5b 9c f1 2b 6d 71 c6 af b4 c5 19 bf d2 16 67 bc b0 a9 7c b9 7c 6a 97 db 8d ad a0 58 cc 5a 35 0f 73 77 e4 88 e1 bd 45 fc d9 86 17 32 ba 5b 88 e2 2d 7d e5 34 94 ca 61 08 19 ad 1d ac 3a 22 08 22 ad 71 aa 5a 24 16 21 88 f0 d3 8d 94 5f e4 31 0c d4 2a 0a e5 5f 18 2e 37 cf 11 6c 87 e7 f8 14 db f1 3a 5e df 1c 35 ee 5d Data Ascii: RJK"ZclT`'LDhO,?-}R\|pslrY.7f\9,j5`gKFHEFd;]DZkB+]Vg,r3nl^.+_TJ[+mqg\|\|jXZ5swE2[-}4a:""qZ$!_1*_.7l:^5]
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 72 e6 53 28 a3 d6 5e ec 4b 49 46 de ba 19 04 9d dd eb e7 9e e6 81 e0 75 71 59 14 a3 62 d8 62 fa 4f 22 56 4b af 39 c7 ae 5c df 2e 82 e3 f0 8a fb 70 e4 6c d9 68 97 79 63 2c 19 6b f7 ec 9d da 3d c3 e8 38 f3 30 7f 7a fb ba 1f dc 1d d1 41 a8 e8 70 d9 c2 65 0b 97 2d 5c b6 80 8a 0e 42 45 07 65 fb ba 1f e6 4f ff 5b 6e c1 8a e1 19 a6 93 67 21 59 79 ed 6a b7 f0 16 5e 2a bd a2 da 73 bb 16 50 73 29 bc 3a 32 f4 4f 7e 1d a1 9e b9 ca bc f6 62 93 46 18 8e fa b3 25 9e 02 e1 72 b8 9a 32 05 0c f6 17 67 6e 0b cf cc f0 3e 8e a8 7b e8 0a dd a1 03 1d 3a 82 08 1d 41 84 8e 20 42 47 10 a1 23 e8 d0 81 0e 1d dc ef a1 8f 23 aa c2 fb b9 c5 bf 67 a6 ee 75 ca f2 22 61 7e 28 20 4c db 56 ac ea 0e 3b 09 ed b2 26 8b ed 68 b6 08 a8 89 72 75 b3 bd e2 9b ba 57 fd bc 7a 0b 52 fb 60 4a b9 4a 1e Data Ascii: rS(^KIFuqYbbO"VK9\.plhyc,k=80zApe-\BEeO[ng!Yyj^*sPs):2O~bF%r2gn>{:A BG##gu"a~( LV;&hruWzR`JJ
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: fb 5c e4 fb d3 e7 fa 66 4f b3 3e d9 d3 ac 4f f6 34 eb 93 3d cd fa 64 3f 7c ae 6f eb 37 c4 8a a8 df 10 a2 bc 34 fe 68 3a 0e d1 8a 15 78 d7 aa af 35 ec 96 91 3b 32 96 d6 11 d1 47 5b f7 d8 c4 6f 5a 55 9f 6b 8c 8b 74 19 6c c7 e1 70 35 ad 71 5a eb 29 84 28 d7 83 84 3c 27 e4 4a 0a 8b 80 08 d1 88 e4 d5 c4 d1 15 25 b6 52 74 ad 1c 23 e7 9e 47 9a 0f 2a 96 4c 2a 96 4c 2a 96 4c 2a 96 4c 1c 69 3e e6 67 3e 73 54 a6 7a 96 8a 12 db d1 f5 09 a9 9b 88 10 2e a2 82 b6 6a 99 29 97 61 17 22 23 11 42 df e5 b1 85 af a4 72 59 3e 9e 24 6b 1c bb ad 44 47 53 2d 90 21 ad 31 ea c2 c8 9a 54 10 25 44 0b a1 b3 25 f5 59 1c a1 1e c7 94 51 25 3d f2 f1 c0 9c aa 94 2c cb f5 e5 fa 72 7d b9 be 28 59 b5 4a e5 9c b6 87 4c 8f 47 54 e5 31 ad 50 9f 45 e9 ea d5 9d 22 44 07 0e 31 ad 62 25 09 35 14 29 Data Ascii: \fO>O4=d?\|o74h:x5;2G[oZUktlp5qZ)(<'J%Rt#GLLLLi>g>sTz.j)a"#BrY>$kDGS-!1T%D%YQ%=,r}(YJLGT1PE"D1b%5)
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: cb 10 9e 81 e7 de 91 f7 56 e3 6d f6 9c 3f e4 cb ed 62 55 99 6b 65 c4 33 df 87 68 9f 0c 94 9e 6b 55 66 e6 60 8c 9c 6a 87 a8 e8 a0 7f c4 4b 1d 8f 3a 72 a7 28 ff e4 af 8a ed 07 ee 74 fd e8 ce 35 a5 89 f2 4f a6 24 59 99 72 51 59 aa 52 55 a9 4a 6b 2d 55 e5 a8 52 95 aa 4a 55 5a b9 e4 da ad 69 24 52 7e e0 66 69 f5 39 fd fb 73 ff f1 d3 da 08 cf ed 69 c3 e6 66 99 1e 69 46 76 95 38 9a 46 1c 81 2a 16 56 e5 be 08 57 5b 1c fa 58 f3 51 1e 7b 4a 1f 0c 92 03 0e 79 66 76 7e fa 6f 6f 5b 50 ee 3e 98 57 32 8b cc b1 56 8c 5a 35 57 05 8c 38 e3 61 18 51 31 b1 7f 9d 86 61 c4 19 0f c3 88 0a 56 cd 25 7e 99 2a 6b 40 e6 9f 1b 09 e1 13 a7 cb 1f 53 ff 1c 5e a3 78 6e 65 bb b2 51 94 5a 73 cb 99 db d2 41 45 36 51 21 d6 5c cb 9c 95 94 e8 2b e5 fd 69 0a f6 ca 52 6e 3e bd 5e c6 11 fc b6 1f Data Ascii: Vm?bUke3hkUf`jK:r(t5O$YrQYRUJk-URJUZi$R~fi9sifiFv8FVW[XQ{Jyfv~oo[P>W2VZ5W8aQ1aV%~k@S^xneQZsAE6Q!\+iRn>^
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 5a 14 a5 a6 07 33 1f 73 66 96 0a 2c 21 4a 94 10 dd 41 08 b4 b0 75 e8 08 5b 87 16 02 2d 04 c1 21 38 88 8e 77 61 95 f1 c8 87 95 35 2b a7 52 43 b1 c9 8e 08 11 ad 0b 1d fb 57 4c ab 8e 91 35 a4 74 59 bc 63 69 3d 7a dc 09 f1 11 c7 fb 24 3b 03 87 8f d6 58 52 88 f7 f4 ee 6e dd 21 08 04 d6 28 92 65 a6 ac 95 54 96 22 94 10 1d 2e a3 c3 65 b4 9b 99 46 36 3f 69 64 fb 27 03 41 07 42 8b 26 b0 4a 3d 4c f9 50 d2 a3 a4 3a 8d 4d 0a 1d 81 d6 9a f9 15 b3 ab 58 8c 74 bd 88 e9 75 ef 57 f5 37 1d 17 a1 0f 1e ee e3 2b 4c 97 79 91 c6 c1 f4 7d f6 c1 dd 3b 84 a6 db d2 46 19 c5 54 e7 5c 66 ca 29 02 07 11 ba 43 6f b4 8c 5e 49 67 f4 73 11 8b f5 d4 5b bd ac d0 5b bd ac d0 b1 58 4f 1d 8b 95 f8 61 25 1d 6d 1b ed 32 02 a1 a2 cc b4 ab 34 96 a9 4e 43 8a 95 3a ba 31 95 5f b1 ed 17 9e 85 24 a1 Data Ascii: Z3sf,!JAu[-!8wa5+RCWL5tYci=z$;XRn!(eT".eF6?id'AB&J=LP:MXtuW7+Ly};FT\f)Co^Igs[[XOa%m24NC:1_$
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 1e 52 4b fe 87 80 57 2a a8 e8 38 f2 c8 a3 0e cf f3 50 af fb 3f d6 ea f2 f3 9e 72 f2 33 67 d4 17 fe 33 a3 be f0 9f bf 23 77 7e de 6f f9 56 7f fa af 7b 8d 23 aa 38 8e 43 04 5c b1 a0 22 e4 43 93 ba d3 29 54 cc 1a 88 24 b7 1f b2 5d 0d ca b4 72 57 55 2c 68 81 32 67 c6 a8 ac aa 68 ff f6 ee 0a d7 8b 5a f3 51 ec cb ed 16 a5 33 c6 96 15 1d 35 ea 28 b3 24 ae 52 32 12 74 ad 3a d2 30 de 72 fc fe 4d 44 cc 3d f9 ac fa f1 47 7e d6 69 9e 52 9d e6 29 1d df 3f 16 9f c7 f1 23 cd cf 6d 9b f3 6f 3d 7d a7 37 77 8d 04 7d 0e 8d eb 1d 9c 98 6a 54 15 8a 78 b6 24 6d 04 51 41 9a 8f 5c 06 32 b2 31 d5 61 3c 94 dd af e8 8e 0e 21 ca ce 94 ec 2b a9 d0 1a cb 6f 8c 4f 1b 99 ef d3 52 dd 42 4b 1f c6 ff 40 bf 5f e4 fb e0 f7 f9 3c 3c a7 59 2b ac d6 71 84 03 0e 0e 38 38 e8 38 c2 b3 75 1c 87 e7 Data Ascii: RKW*8P?r3g3#w~oV{#8C\"C)T$]rWU,h2ghZQ35($R2t:0rMD=G~iR)?#mo=}7w}jTx$mQA\21a<!+oORBK@_<<Y+q888u
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: df 79 23 e0 fb 1b eb 77 ef c3 7b 7e 80 55 83 8d af b4 bf a2 ad b7 36 50 ae 6e 36 db 33 7f aa 0c ee 9c ae 26 12 c5 c8 91 f9 fc 8a 8c 46 4d c0 90 0b 76 a4 e9 21 f1 30 25 1e a6 34 b1 4b 94 61 34 b5 db 57 ec 41 96 bb fb 60 f9 60 f9 db 33 77 55 c5 f3 06 d2 2e 60 b3 d5 7c 7f d6 6f b9 5d 3a fc 8e 6f f3 9d f2 d3 ed c2 50 19 2f d1 23 b6 e0 ae 88 66 fe 5f 32 e0 41 50 2a 2a a0 a2 02 2a 2a 28 0f 2b e0 81 ef 36 44 a1 bb bd b7 6d d3 dc ad 90 48 e9 ea 11 2d cd e9 69 62 b3 b9 ba ea 02 67 4b cb e2 f2 4b 57 a5 df a7 c3 e1 e6 b2 63 55 98 de 19 e8 6e e2 27 bc 21 1c d3 88 b3 11 32 ba 09 a9 9b 90 ba 21 38 c0 24 8c a6 36 74 eb 9e b6 8c 9c e3 a5 94 61 20 83 8e e3 78 3f c7 ce 3d 97 d6 17 77 e6 fd 4e a8 a5 66 84 3d 8f 32 75 7a fa e8 c0 aa 11 19 44 47 5f 46 04 86 9a c2 8a 10 a2 23 Data Ascii: y#w{~U6Pn63&FMv!0%4Ka4WA``3wU.`\|o]:oP/#f_2AP****(+6DmH-ibgKKWcUn'!2!8$6ta x?=wNf=2uzDG_F#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.6	50126	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1080	OUT	GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 4932 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	733	IN	Data Raw: 52 49 46 46 3c 13 00 00 57 45 42 50 56 50 38 4c 30 13 00 00 2f ff c0 3f 00 09 87 8d 24 49 8d 76 a6 f1 37 ce 3f 62 c4 32 12 01 44 f4 7f 02 e6 09 25 e9 cb 67 a2 46 92 e8 b6 d3 cc 8c 2b 8f 9d bf 6e d3 69 70 17 5a 86 94 85 cb ca b6 97 0d d1 6a ad d1 d6 4b 34 97 ef f1 a5 24 99 ad 92 4e 82 bb 7c 6b 22 65 7d dc 45 b4 60 ca bd e0 f2 b7 05 4c 59 b8 0b 2d b3 80 1d d9 b6 69 ab 9f 6d 7b 07 f0 fc c5 fc a3 b2 16 ea be 00 dc 46 92 a4 48 79 7c 22 3f ff c4 88 e7 bf 49 6f 01 83 e8 36 92 24 45 ca 88 17 f1 98 a1 e3 a5 f7 df a2 35 61 4d e8 ff 04 e0 3f dc 1c 3e ab 86 4d fd bb fe dd fb d5 43 4c f4 43 7b 7d 5f aa b0 68 00 f3 a5 cf b5 6e 3a fa 97 db 72 f9 7e b2 54 6d 2e 1d 7f 26 fd 66 9a 37 fb cf c3 ff 77 df 77 f2 e0 a8 6a 1e b5 41 72 5d 33 48 93 ee 43 61 40 b3 43 36 89 d1 44 c8 Data Ascii: RIFF<WEBPVP8L0/?$Iv7?b2D%gF+nipZjK4$N\|k"e}E`LY-im{FHy\|"?Io6$E5aM?>MCLC{}_hn:r~Tm.&f7wwjAr]3HCa@C6D
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 46 28 98 e9 cd 24 88 f4 b4 51 77 e2 b1 6f 7d b5 ce 35 18 c5 07 00 53 c9 3d ec e8 b1 6f ff 64 76 33 55 af 98 92 f0 b5 38 92 7d e0 be 51 f1 17 79 de f1 d8 4f ae ae df 45 a4 47 0f 89 66 b9 5b a3 bd c0 2f 00 00 0f 10 1c 78 25 8e cb ac 36 df d7 7c b3 79 10 4c 01 de a8 2b 17 12 f0 a0 51 3f b8 5e 59 62 77 1f bd d2 be 42 d2 c3 77 70 5c fc 10 01 c0 53 c6 33 1f 8e 8b 3b d9 03 10 12 38 66 3a c5 f4 8d 03 40 28 ee a4 ac 30 cc 73 e4 3a f8 01 00 00 a4 03 b8 2f 4e 26 99 22 32 9a 24 02 00 02 e1 91 fb 81 8b 44 fe 00 21 ba 0d a1 e4 ca f5 d6 07 9b c5 7f 39 4f 8e 9b e8 fc ea b3 46 7b f4 b2 bd 6e 59 5d 58 d9 82 27 7b 61 db 5d 67 bd 0e 56 98 9f 5e fa f8 58 17 2f 6d f2 a8 88 4e 2b 6d 6e 5a 6d 6f 43 cb ad 4e 49 a2 61 11 f8 2a 9f 6e ab 3d b1 33 6b c7 cd 54 a3 95 e8 b7 4a d5 b9 66 Data Ascii: F($Qwo}5S=odv3U8}QyOEGf[/x%6\|yL+Q?^YbwBwp\S3;8f:@(0s:/N&"2$D!9OF{nY]X'{a]gV^X/mN+mnZmoCNIa*n=3kTJf
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 44 44 f3 00 94 60 3c fa cd fb d8 f2 99 27 e3 9b f1 19 d3 3b b3 a6 99 6d 87 57 d5 1a 1d eb f7 63 53 83 1c 82 2c 51 e7 b0 71 8f 5f 5a ba d5 2f 83 ff ae db f0 c4 9d 8d 2e 46 af ff 59 a5 a4 14 e5 e6 ab 9e b8 1e 6b ba fd 9c c6 25 81 b2 54 52 b1 77 bd e3 1d 2a a1 6f 6d 8b f8 20 dd 3e ff 92 48 25 d3 a2 4d a0 b6 ca 93 ad 6c 7c a9 06 a6 6c f2 a0 49 6e 1d ce 91 3c 14 a9 0f dd 02 b6 dc 69 cd fb 0f a7 af d2 89 65 e3 35 9f 70 10 ed b8 63 20 11 00 9c bc 91 83 97 7a fc 97 c4 1c 70 b4 89 bc 7e f7 fb ef 26 a8 da eb c6 db 47 bd f8 ce b1 37 5f 6f b0 5e d6 b7 f3 c6 5d 0f df 51 9d 2a 9b 3a 20 5e c7 ea 8f 4e 11 d1 43 5e fa e0 ca 59 76 c7 75 56 ae 92 e3 5e 5d 15 18 7d 8f 08 6e cb 8e 71 bb ae 14 5c 60 42 91 6b f9 e2 9f 7f 42 b7 c6 27 4f fd 5f 9c a9 6a 43 06 4f 8d be 55 bb 78 56 Data Ascii: DD`<';mWcS,Qq_Z/.FYk%TRwom >H%Ml\|lIn<ie5pc zp~&G7_o^]Q: ^NC^YvuV^]}nq\`BkB'O_jCOUxV
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: f5 3f c7 56 83 75 17 92 24 1c 41 17 9f 99 82 09 17 f8 cc 67 86 84 a4 af 01 d3 00 ed b9 cd a6 00 1b c0 e4 dd 76 ea 4c e1 31 a5 1b 52 d2 1c 5a fb 8c 98 82 2e 6e 08 1c f3 af a0 42 05 80 66 68 4c 32 80 24 82 7f c3 fb 17 37 84 8f 06 e2 a2 03 95 fc 83 df d4 10 ab 9e 90 66 82 74 22 12 57 31 05 04 5f ef 9d b8 11 d6 ac 44 76 bb 69 15 b9 c9 5d 3a e9 10 09 91 00 48 ee 8e eb f2 89 db 36 a3 84 d8 6e 1f f1 17 9b 50 e4 be 8f 0d 94 10 dc ee 25 31 e3 c3 12 81 e9 2d 0b 1b 02 b7 dc 8a e0 8c 51 35 13 1b 4c 68 95 f9 ca fa f2 f6 bf bb 02 3a 79 16 3f 22 fb df b7 ff fc be 64 a4 ea a4 c4 be 0c 53 e0 06 c0 bb a9 37 3d ae eb 1e 22 07 03 ca c2 86 48 5f 78 f4 2f 57 81 1d 00 54 a6 ba 27 24 e7 13 18 59 16 e4 38 cd 33 23 27 c7 a9 78 16 eb 55 00 ac 43 4c c9 a7 68 88 67 24 cf 19 80 1b bb Data Ascii: ?Vu$AgvL1RZ.nBfhL2$7ft"W1_Dvi]:H6nP%1-Q5Lh:y?"dS7="H_x/WT'$Y83#'xUCLhg$
2024-04-19 14:07:01 UTC	434	IN	Data Raw: 01 72 92 f1 bc d3 36 38 d5 46 99 c7 c1 62 0c 5e 0a 5d c7 79 4e 40 53 7f b7 34 61 d1 9d b2 ed 9c 35 dc 2a e4 47 62 17 1e 7c 4a e9 3a 63 25 e4 85 87 c9 08 8b 24 3a cc 2d c1 5e 08 25 38 4f 3b 65 7a 26 4a 3f 73 80 89 16 f2 ba b3 84 06 45 e8 14 cb 3b db 40 16 c2 21 38 ac 38 67 d5 cf 58 29 49 42 36 84 a6 24 3a b2 67 b3 d2 ee 28 14 ab bd c5 42 e3 a7 68 74 d5 af 80 7d 4f 22 c2 65 4d 99 b2 07 70 0a 51 2e e7 f6 a9 be 00 7b 2c 61 31 fe bd 7b e0 cb 95 43 34 14 c6 a6 69 ed 65 69 0d c6 b4 96 f6 25 01 87 31 02 b2 5a fa fe 8b 73 75 c1 8c ed f3 6e af fb 54 3f d0 d0 f4 af fe d4 1c 17 c6 79 e5 e0 ec f6 d9 8b 6c de fe d3 5e f1 ce 08 36 c0 d9 cb 5f a9 c0 e6 fb bf 1a 57 56 47 64 0e 51 bf 2b d9 eb 65 5b f1 a8 73 ef 25 d7 0e 40 be cf 52 00 bd 15 c6 96 e8 ae 79 d7 b9 f7 5f 06 ae Data Ascii: r68Fb^]yN@S4a5*Gb\|J:c%$:-^%8O;ez&J?sE;@!88gX)IB6$:g(Bht}O"eMpQ.{,a1{C4iei%1ZsunT?yl^6_WVGdQ+e[s%@Ry_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.6	50127	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1080	OUT	GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 48322 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:22:23 GMT Expires: Sat, 20 Apr 2024 13:22:23 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2678 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	721	IN	Data Raw: 52 49 46 46 ba bc 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 71 bc 00 00 2f ff c0 3f 10 4d 38 6c 80 36 6c 84 4d 09 23 ff 5f dc 34 6d b7 1d 10 d1 ff 09 00 1a 80 6d 49 c3 b6 6c 0f 7b e8 00 40 12 dd 89 6d 1f 92 e4 11 db 1a b1 92 84 64 b7 13 d9 49 24 1d d6 b0 95 c4 4e 12 b2 6c 7b 61 1f 4a 62 c7 49 86 ed c4 fc 2c 92 93 4f f1 39 5a a4 16 4e 9c 44 52 e2 61 5b 49 16 de 4e 44 db 92 e4 67 43 ef f2 02 7f 91 24 b8 2e 36 97 68 fe 49 00 13 3f cd eb e6 ba aa 58 7c bd 16 b5 57 64 6d 90 c5 35 5e e7 c3 c5 eb 7a 68 f7 56 dd 2a 92 38 61 45 dc 21 9e 9d d8 e4 c3 e0 f7 f6 6b 13 2f ce 09 cc 02 d7 20 2f 08 9e 48 a2 8a 0f 16 b7 fb 89 fd 5e e0 a9 89 ee 5e 40 8e 24 d9 55 94 f1 fc 37 f2 07 67 d8 45 eb db 88 2f 02 03 dc b6 8d 24 49 32 6b f7 3e Data Ascii: RIFFWEBPVP8XVP8Lq/?M8l6lM#_4mmIl{@mdI$Nl{aJbI,O9ZNDRa[INDgC$.6hI?X\|Wdm5^zhV*8aE!k/ /H^^@$U7gE/$I2k>
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: c4 38 76 59 8e 6c c0 fd 90 d3 e1 2b 02 0b 70 eb 23 e8 04 04 6f be 1b ae 55 d3 10 de 0d 86 37 95 3b d7 50 e8 2e 66 58 1d 39 39 57 ba 01 7d 8b 37 7c 8c a1 c6 85 d4 c1 8e 44 48 e1 3b 92 6d d5 b6 6d db f2 c8 63 a2 06 73 2e 66 46 fd ff 97 02 cc 8a cc 35 4a f2 5c db b6 6a db 92 6d 95 d2 fa 9c eb a0 31 a9 c0 66 2a 30 5b e8 48 6a 1a 98 00 6c 1a 58 d8 d2 09 19 2d 9a a3 15 a9 db b6 2d 7f 72 ce 5d 93 bb bf b3 b6 64 d9 87 67 27 39 54 97 ea 90 7e 89 3c 6b bf e3 f7 17 a0 f5 c7 f1 e2 ae 89 63 ee 61 02 78 2d fb 27 c9 91 6d c9 dd 43 59 a7 e7 e1 2b 8c df ff c3 cd 2b 15 ee 3d 4f eb 0b fc f1 c5 8e c5 5a e4 5a 37 46 60 58 53 38 b5 29 f5 14 47 24 ed 08 03 63 e3 3d e6 a6 09 02 8c 40 78 93 bb 77 5c 45 8a 3c 82 c4 48 0a 8c 82 ad 9e d4 c2 41 08 47 37 d1 43 a2 a4 2a 11 0e 22 f9 43 Data Ascii: 8vYl+p#oU7;P.fX99W}7\|DH;mmcs.fF5J\jm1f0[HjlX--r]dg'9T~<kcax-'mCY++=OZZ7F`XS8)G$c=@xw\E<HAG7C"C
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 6e b9 28 4e e3 2f ff f9 fb f3 fe a3 fb 4a ff e4 bf cf ec c5 fd 53 72 ca 4f 7e 7f 98 fb d8 b5 4a 9f f4 76 4b 20 dd c7 25 76 cb 42 d8 44 ad c2 5b c6 83 e5 29 b3 e4 11 b2 ad 8f 8d ac 5e 72 bb 64 0a 75 a1 36 97 aa e8 97 4a da a8 e4 38 fe 49 58 f2 62 b7 37 38 bb d1 f4 f7 f8 4d 2f 95 27 e3 92 f3 52 46 54 64 bc dc a0 b0 e9 c6 67 cb 97 9e 1c 37 e5 c0 0f 76 fd 54 97 2c f6 a6 f7 2d c8 9c 79 9b b6 d5 6a af 63 1c f5 52 65 45 21 59 81 a5 dc 5a 16 f5 90 96 74 79 e2 1a ca 7a 07 ad fc b4 16 05 ba a8 a1 a5 6e 3b 49 83 80 4b bb 85 c5 90 f0 4c d9 2f 8b 3c 2c b6 d1 c4 25 aa 90 94 13 81 d9 17 37 3f 6d 4c 04 7f 8f 7f aa aa b7 08 e2 a8 07 7d 04 7f 4b 7f fa 51 bf 75 f3 e7 5f f4 a2 fc 14 9c f6 a3 df 1d 9d b6 2f 3d 34 f5 28 a5 0c 29 4a 1b 4b 82 10 9c d0 bb 9c 9d 99 3e ae b0 4f 7c Data Ascii: n(N/JSrO~JvK %vBD[)^rdu6J8IXb78M/'RFTdg7vT,-yjcReE!YZtyzn;IKL/<,%7?mL}KQu_/=4()JK>O\|
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: a4 75 4c 75 6c f9 3e 2a b2 5f 2e 37 8d 0c 2e 08 12 ba c8 f4 9b 91 8d 42 7f a1 9c 97 6e d9 5d 8d 8f 4b 9f 4e bc 85 cb 01 0d 60 c7 13 6e a9 70 05 a5 8c 8a f0 62 47 7a 6f 9e 77 65 96 bd 2c 8b 2c f6 cc c3 60 f1 02 a8 4b fe b8 11 3c 97 80 62 fa 96 96 4f 89 11 bc 90 51 13 5d d2 9b e7 5f 7c d1 59 2b 4e 2c f8 cb 09 6d 83 b0 45 7f 9f d6 9c 79 89 7a 9d 82 c9 79 4d 6c 6d c7 25 f0 9c 50 76 8d 7a 42 bb d5 e4 42 b5 0c 55 eb d0 2e d9 88 34 dd 8e 3c 5c bb 91 1d d1 8e bd 40 77 f3 36 e3 50 e3 81 ab 26 ed 2b 2d a7 fc e4 fb 43 17 1a ec 3e 98 f7 c9 b3 2a 53 ab 96 ce b9 43 b0 4e 3c 28 8f 29 0d e8 e4 18 4f 83 a4 e9 75 54 dc c3 78 ed 87 79 7e a7 cc 5d de 2f 77 27 38 66 a7 d3 d0 44 72 d1 ea 0d f2 c1 15 bd 80 a5 fb 7d 3d bb 5e 38 be a5 be de 39 fd c2 4b 50 85 61 2a b4 f6 27 ae 89 Data Ascii: uLul>_.7.Bn]KN`npbGzowe,,`K<bOQ]_\|Y+N,mEyzyMlm%PvzBBU.4<\@w6P&+-C>SCN<()OuTxy~]/w'8fDr}=^89KPa*'
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 3a b6 dc 7b 93 fe e0 e8 98 65 58 06 54 74 87 16 99 2b 65 8b 52 5d 44 cd c8 19 8c 64 bc 6c 63 49 49 85 a2 47 0c 84 6e c6 35 5b 6a 31 b1 97 54 5b 06 05 7b 5a e8 cc 90 be b4 e9 38 f6 1f 4a db 4d 98 b7 1c 93 33 ce 69 6c 69 10 1c 2f ca 80 0a ec 51 28 9b 32 f6 49 b0 c0 d9 7b 1b c9 95 b5 c2 c5 61 6d f4 ab b5 11 90 da a1 c5 97 8b 1d ec eb c7 05 c2 ec fe 1a 77 1b a0 66 c6 b6 57 10 84 6a c0 be bd 3f a8 2a 99 c4 fc fa 66 19 8b 2e 2e ab 20 ad 5b 16 57 c3 27 9f ce 13 1e 15 5d a1 37 10 7f 93 2c 7f 99 7b 29 43 7b 8b 23 d7 65 01 8d 67 42 09 41 66 13 e0 1b b0 39 5d 76 4e 0a 56 f8 9d 28 a8 d6 4f 7b 8d 2e 24 68 e4 92 0b 58 0e 68 05 5c de 5a 02 a1 a0 4f 51 52 88 7c 80 74 2f 13 c3 a8 49 9d e7 fc 69 4c c3 a6 48 4f 06 45 10 06 6b f9 e1 d6 9f a0 96 eb 77 ed 20 f7 43 a9 83 24 c8 Data Ascii: :{eXTt+eR]DdlcIIGn5[j1T[{Z8JM3ili/Q(2I{amwfWj?*f.. [W']7,{)C{#egBAf9]vNV(O{.$hXh\ZOQR\|t/IiLHOEkw C$
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: b3 97 49 03 7c ae 72 50 6a cb a2 05 5b c8 8c ca cc 34 b9 d3 92 1c 98 45 91 1b 3f d5 5f 68 3d d6 00 88 0c 6d 5f 98 94 a2 c8 c4 8b 5a 7b 04 05 a1 13 6e 4a b6 fc 1c 87 7a e4 6d 9c e1 45 b9 44 ca af d7 c4 fe 3d 7f b1 6b 5a 64 95 bc 92 2f ae d8 83 6c 71 82 20 77 ee 5f 2e 9b 7e d3 27 9b 06 f8 77 5e e0 71 87 01 2e 55 2e b5 17 2d 8f a6 2c a5 76 2e fb f2 bb 3b 69 75 b6 6f 75 0f da 1a c9 e3 79 e8 e0 37 a1 58 5a 78 74 82 95 43 f6 f5 c7 94 ea 20 f9 84 bf 6c 1e 2e c3 c6 33 87 5a 12 6d 51 c8 a8 90 42 03 91 7e e0 f6 de 85 33 2b 03 da 1a 76 7a 4c 2d 7c 9d 39 65 5d 81 4c c1 b0 90 8e 43 51 30 6e b0 8e 68 e9 bd 94 68 29 53 c5 df ee 05 32 78 b5 ec 17 2f d5 4b f5 67 b6 22 45 28 74 44 28 b7 7a a5 79 d1 ce e3 4f 96 b0 93 32 bc 07 35 90 84 b1 b1 db 1f ea b9 7f 42 8b 56 10 ee 10 Data Ascii: I\|rPj[4E?_h=m_Z{nJzmED=kZd/lq w_.~'w^q.U.-,v.;iuouy7XZxtC l.3ZmQB~3+vzL-\|9e]LCQ0nhh)S2x/Kg"E(tD(zyO25BV
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 4e 3f 10 d9 1e d8 80 18 21 2c 1c 54 36 b6 d6 d6 ec 4e 7d 29 bf 06 95 d4 ea 55 5d 84 25 97 6e 55 f1 0c 40 f8 89 83 1c b2 26 93 23 c7 9d d1 47 9c e1 0d 20 af 2d 72 ba e0 60 8f 0d 04 27 db 72 4a 5e 0e d9 48 67 e6 b1 02 5e 16 cb 81 a6 ba 62 ba 41 de 01 b9 28 de 0e 2a f5 e5 1d a1 6f 2b 20 97 a5 bc d3 dc 3c ca e7 4d 1b 7b 7e 03 30 f7 93 00 2a 4b f7 71 2f 6c c8 58 5c bf 28 cb 22 12 7a 80 25 c4 31 0d cb fb 22 6c d8 d3 f7 a3 ff c5 3f e4 c7 54 2f af 96 c5 fa a1 f6 03 67 62 0c e4 a1 b3 a5 56 d9 a8 ec 97 3c 14 b8 bf e9 25 16 35 41 10 0c 09 e3 1b 4b 46 cc 5a dd 0e 64 5b 5b c2 cb be 8c 28 94 2d 16 71 08 77 10 5e 0e b9 97 4a 29 24 c4 f6 0b e0 b3 b1 f6 d3 62 69 b1 73 95 8d 59 11 e3 48 5f 2f 84 d4 78 4a 69 81 ad 44 2b c3 22 a9 47 9e 70 f0 d3 1f 1a 19 16 65 63 89 cc a7 fe Data Ascii: N?!,T6N})U]%nU@&#G -r`'rJ^Hg^bA(o+ <M{~0Kq/lX\("z%1"l?T/gbV<%5AKFZd[[(-qw^J)$bisYH_/xJiD+"Gpec
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 24 1e 82 fb 0f 9a a6 fb ca 89 25 f3 e8 30 5c 6e ad 2d 79 6c 69 58 fe f0 48 d7 96 a9 c9 39 65 6f 58 28 f3 b9 9f 44 cf 60 b6 3a 6d 81 79 09 65 c6 e3 91 20 3e 81 35 d6 06 27 c1 38 32 e4 9c 13 96 a2 cc 44 8f c2 b2 df 21 ce f3 e9 9d 0b 2f 5c 0e 7f 96 72 d4 c6 32 78 99 ba d2 7a 4e 08 a0 69 4e 52 a7 c1 36 1a 2e 39 57 84 09 6b b5 b0 45 fd 7a 45 58 39 b8 94 67 a6 2c 6d 5a 8e db f7 30 4e 87 65 26 99 43 c2 0c b6 48 ba b8 50 e9 b4 62 b8 ec 97 f6 ab f5 50 84 1a 6f e7 ad 78 23 6c 27 00 a0 92 8f 5f 6e 67 5b 9b f1 35 81 58 fe 51 28 f2 a7 6d 13 85 51 c9 0c ff bd 85 ab 4e bd 25 ba e4 e5 b8 ad 8b 60 68 ae 77 f5 f1 fb 1f 1e fc 9d df 45 4d 76 27 dd 57 a8 b9 3d b4 17 6d 40 1f 43 76 55 95 22 08 fc 4a 71 3e ac 84 99 7f 40 b2 29 cc 66 3b d0 e0 f1 68 2f 5b ce e3 ab 32 07 ff 01 47 Data Ascii: $%0\n-yliXH9eoX(D`:mye >5'82D!/\r2xzNiNR6.9WkEzEX9g,mZ0Ne&CHPbPox#l'_ng[5XQ(mQN%`hwEMv'W=m@CvU"Jq>@)f;h/[2G
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: a3 a6 29 64 d8 b4 91 a1 6d 5f b2 20 b0 14 ca 25 cb e7 0a 9c 0c a0 f4 d3 0b c2 6c c1 2c 96 c5 38 8b f7 71 45 d0 29 8f 56 4a 1b e6 9d c4 5b e6 88 f5 43 b9 a8 ac fb 9a 91 d2 c9 39 ee 06 d4 ce ec 50 57 78 f0 b3 17 5f 56 cb b0 70 ce 3b eb a7 fe 80 e3 27 04 1b 07 f3 5d ce dd f2 8d 6d c2 72 0f be 57 2c 7e 21 13 52 3c a3 b8 aa 39 a7 e1 a5 94 23 c6 e8 49 fd 99 65 a1 94 7c 49 e7 4d 36 42 86 9a 68 44 0e 25 53 4d a5 01 78 26 cb a5 62 bf ef a5 dc 99 92 6c e3 1e e4 59 b3 1a eb d2 92 12 7c 2a 17 87 5b 16 5f 6f 84 9d b3 aa 36 b6 a5 b1 d5 99 36 fd aa 0e b7 0c 9c ae 70 ff 87 b7 e7 98 3e 2b 47 ef 9b d1 68 a0 b2 9c 9f b4 a3 c0 7c 1d 36 8e 7c 68 fe b8 c9 d1 e9 20 25 bb 7e e7 ab a6 3d 5a 1d 66 d8 25 51 69 96 a3 48 da d1 bf 24 04 b9 e7 a8 be 8c ad 8d c2 c3 b4 ac b4 fe 86 31 b2 Data Ascii: )dm_ %l,8qE)VJ[C9PWx_Vp;']mrW,~!R<9#Ie\|IM6BhD%SMx&blY\|*[_o66p>+Gh\|6\|h %~=Zf%QiH$1
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 22 de 5e bf 1a 70 ce a2 51 a4 ca 21 2a 7c 42 d6 c7 b6 5f 68 41 3f 8f 09 cd 30 56 1a a0 58 3e bc fb 3a eb 30 2c d8 64 45 81 88 72 5b 96 9f 86 50 16 8c f5 05 97 fe 43 70 d2 f9 b2 67 a8 ba 16 ee f8 e0 66 5c 7b 54 c9 f2 61 13 c9 1e 28 8b d8 d0 65 e9 27 c9 35 f8 24 90 59 1e 16 7f b9 76 86 cd f6 be 7a af 24 d5 1c a8 ab ce b6 f7 ef 1f aa 2a 43 c1 62 70 4e f2 06 2b 97 56 64 2d 2e 4b 63 73 5b 2e 8e 08 d5 13 07 84 96 68 ea 35 46 e6 71 ad f8 a5 45 7b 7c 6a ac 6b e2 f6 68 5c 7a 69 0f 4d 73 96 07 f0 9c e1 04 a7 7c 19 5d c6 1c 65 c6 55 4a 84 dc 48 47 5b 19 0f 65 e2 36 85 2d f3 a6 38 9d 7f 98 20 f6 cb 58 d5 e3 2f 34 70 d6 04 64 aa bb a7 ec ab ba 39 86 ee 74 2c 74 0b 53 42 cc 87 4b f7 a9 a5 42 14 05 02 5f c2 87 7e b3 cc 4b 8b 22 38 39 37 74 f1 39 6e 2e 0c 4b 96 3f 3e c6 Data Ascii: "^pQ!\|B_hA?0VX>:0,dEr[PCpgf\{Ta(e'5$Yvz$CbpN+Vd-.Kcs[.h5FqE{\|jkh\ziMs\|]eUJHG[e6-8 X/4pd9t,tSBKB_~K"897t9n.K?>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.6	50128	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1081	OUT	GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:01 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:01 GMT Server: fife Content-Length: 1842 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	733	IN	Data Raw: 52 49 46 46 2a 07 00 00 57 45 42 50 56 50 38 4c 1d 07 00 00 2f ff c0 3f 00 85 3d e8 ff df b5 6d 3e 7f 25 e9 de 7b 0f dc bd 77 ab d1 dd aa bb a5 7f 85 6a e1 4e dc a9 6c 65 ef 04 75 e2 89 17 78 72 99 5a 3d 8d ab 3e 80 c1 fc 8c 46 cc 85 13 e6 20 1e c8 e4 cc 19 72 87 25 dc 9f 6a a4 f4 d3 25 ff f8 fe f8 7e be df 6e 47 f4 7f 02 e8 92 ff 2f f9 5f 4d 97 0a f3 c9 18 8e fd ce d3 0a 6b 7f 74 47 e4 ac d6 ac 94 b2 33 71 c4 60 bf cb 01 02 df 3a aa 17 d5 e3 69 23 8c 83 f7 bb df 07 76 fe bd da 2d 17 e6 93 31 1c f3 5f f5 c5 e7 40 13 1f 55 ab 95 4a 6e 2e 81 18 ec 77 39 40 9e 1e 53 71 aa c7 d3 46 04 07 7d bd ef 03 79 e7 54 63 b9 30 3f 7b 08 c7 fc 57 39 2f 07 2e 7f c5 de 4a 25 37 97 08 63 e8 ce 2b 1d c0 75 91 a9 ba 31 f4 8b 2f 82 22 ee e3 e8 d8 8f 41 29 3b 17 d9 e9 07 ae 9f Data Ascii: RIFF*WEBPVP8L/?=m>%{wjNleuxrZ=>F r%j%~nG/_MktG3q`:i#v-1_@UJn.w9@SqF}yTc0?{W9/.J%7c+u1/"A);
2024-04-19 14:07:01 UTC	1109	IN	Data Raw: 10 31 66 a4 f2 25 93 9a 7c a7 12 b5 ad ef f7 0f 62 38 9e 4c e7 2a 26 c9 36 ae 20 cf 69 75 df 11 1c c3 70 62 36 73 bc 5a 27 e9 67 f8 7b 46 c7 06 6f 00 31 62 cc 65 0b 35 62 38 cf db 0f 8e 12 ff bc 6d 23 15 64 ed 67 a4 7b 29 ed 7b 5a fb e8 ff 65 30 4b b9 74 32 8e 38 e8 ef 6b af ea 51 f1 a8 11 43 0c f9 3c 4e 07 58 9e d5 a1 bd 20 34 a1 7a d5 e3 99 23 47 04 2d 82 e0 19 e5 5a 2a cc 27 e3 88 81 01 f7 fb 60 ed 82 18 10 7d 41 91 a6 a7 42 de de 36 68 f8 1b 85 8c 8a fa 21 29 d1 03 20 7c b7 88 77 0b ea 26 25 ea 04 1b 96 05 80 c0 37 6d 8e 66 49 89 76 80 1d 5b ec 37 91 a7 c6 2b 47 0d ec f9 40 e3 1e 8b 8c 7b 3f df 88 3a a9 53 c4 26 50 6e d8 9a b5 7c d4 82 a9 50 b7 d9 a5 45 14 51 5d d9 ba ec 02 0f 08 33 95 ed e7 b6 81 b2 ae 98 85 c7 0f 87 c3 db 6e 74 be 44 58 ab ae 5c 64 Data Ascii: 1f%\|b8L&6 iupb6sZ'g{Fo1be5b8m#dg{){Ze0Kt28kQC<NX 4z#G-Z'`}AB6h!) \|w&%7mfIv[7+G@{?:S&Pn\|PEQ]3ntDX\d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.6	50129	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	504	OUT	GET /ni3wAWWlHftm10UY13L40-OnqARy_MZqyB5ppIBHgXBf47YQT1h-72fkBvGmt5D65Q=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3702 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:41 GMT Expires: Sat, 20 Apr 2024 11:17:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 10160 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	721	IN	Data Raw: 52 49 46 46 6e 0e 00 00 57 45 42 50 56 50 38 4c 61 0e 00 00 2f ff c0 3f 00 55 e1 b1 ff 7f dd 25 45 3f dc 5d db 5d 70 77 77 77 77 77 77 28 c1 dd b5 dd dd dd dd dd dd dd dd dd fb d6 73 ff df df ff fb c7 a1 65 11 2c c0 1d 32 d2 e2 97 17 9d e1 ae e1 0d 09 d9 00 1b 68 a2 8e c8 58 02 b9 56 d4 d1 83 53 31 ee 12 b9 7f d0 e8 9b 37 6c 80 d0 dd 23 ad 1c 22 87 54 23 77 b9 78 d6 d4 cd 20 74 87 3a e7 66 bd 04 52 cd 2a c6 a1 e8 ec b9 e7 c9 6a 03 1d 93 ba 4b 4b 88 45 d6 29 d2 1b c0 33 62 08 6d 76 e0 3e 13 61 c5 1a be e3 53 f1 44 75 26 72 9f 89 d1 70 dc dd a5 b2 b1 d8 22 4b dd 2d d2 8d 0c cf 02 6a dc dd dd 3d b3 b4 ce 33 12 b9 64 d4 39 92 23 49 52 64 2b 15 79 92 bd d3 57 fc 5f df d0 c2 40 0f 74 25 48 90 6d bb 6d 1b fe f7 fe 47 61 05 40 88 6a 56 83 7b 4b f6 bf 9a 64 29 fd Data Ascii: RIFFnWEBPVP8La/?U%E?]]pwwwwww(se,2hXVS17l#"T#wx t:fR*jKKE)3bmv>aSDu&rp"K-j=3d9#IRd+yW_@t%HmmGa@jV{Kd)
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 60 3c ed fa bd 6d 07 ea df 2e 83 05 57 80 63 6b fc db 19 8d 99 ca 61 bd 56 14 bf ad 64 ef be 18 fa be 20 ea eb 5a a5 28 71 2f 3c 39 2c 89 61 24 e5 b1 ab c8 44 5e 0f 83 67 22 64 a4 53 bf 6f 29 32 56 36 8e f2 a3 6e ab b2 99 9a ae 3c 48 b0 6a 39 f5 ff 00 90 25 56 00 3f 59 0c 3e ba 8e 28 a7 15 d3 40 f0 80 95 d3 29 8b ef 64 e0 b9 09 2f b8 c7 f5 28 af d5 49 e1 d9 d8 ea b1 b8 0a ca e4 42 ef a1 e8 4f e5 05 e9 68 ca 6e 65 32 78 94 3f f9 c9 4c 54 45 83 b0 8a 35 d0 29 c3 55 c8 36 e8 89 43 b7 11 e5 b1 2e 2b 84 55 94 41 53 8e d3 d1 e7 f2 04 ef aa 3c b6 68 42 58 45 0e e5 38 1a 16 2f cf 3f f7 67 50 1e 33 c3 b1 f2 bd cb a2 53 8e a3 61 f1 14 9d 07 3c 64 46 8a 70 3a f6 fe 58 2c 83 72 1c 0d 8b a7 69 19 2b 28 8b 1d 46 90 22 9c e6 4f ee 17 c2 51 34 2c de a2 ab 80 85 7c 28 ad Data Ascii: `<m.WckaVd Z(q/<9,a$D^g"dSo)2V6n<Hj9%V?Y>(@)d/(IBOhne2x?LTE5)U6C.+UAS<hBXE8/?gP3Sa<dFp:X,ri+(F"OQ4,\|(
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 8a 06 c6 45 e4 e5 34 ef f3 b3 cc c9 b8 cf eb d3 be d4 2f aa e5 ca 81 89 02 55 46 69 96 5e 91 3d 39 24 3a 88 f8 46 6b 96 c2 f1 50 a5 49 f3 3e fc 49 12 2a a1 f9 46 9b b0 82 85 0d 1e 84 66 f9 f4 69 fc 89 7c d6 74 b6 f4 46 7e d1 6b 80 03 83 56 9e 8c a6 62 71 83 41 20 3f 82 15 95 bf 9c 4f b4 32 39 30 70 9b f4 3d d0 d4 1d 8c 18 08 22 6f 80 8d dc db 1f ba f8 f2 7f e9 bf 33 2e e9 09 34 bb ff f6 80 10 67 70 c3 7f 7d a1 2f fe 07 af f0 5d b1 df 75 6e d7 44 d3 aa 81 a0 10 71 b9 31 93 b6 d4 6b dd a5 7d da 4e 00 df 95 7a a4 67 d1 f4 18 04 88 88 fc c8 67 61 e5 f2 ad 86 d6 e9 d2 19 fe c0 6f 02 1a 45 d6 20 11 71 d9 80 8a c4 d6 4c cb de 1c fe db 04 cd 22 9f 7e 92 d3 16 2c 22 f2 8a 61 80 d5 d2 7e c1 26 5d 15 dd 98 fd e2 bb 56 4d 9a 06 0c 83 14 38 22 12 1f 53 5e 80 55 d0 5d Data Ascii: E4/UFi^=9$:FkPI>I*Ffi\|tF~kVbqA ?O290p="o3.4gp}/]unDq1k}NzggaoE qL"~,"a~&]VM8"S^U]
2024-04-19 14:07:01 UTC	471	IN	Data Raw: 44 ff 5d 2e b2 95 49 b5 c4 7b 2e 0c c7 c1 b9 91 57 3c ce 8f ab fb ad 1d 0b 7e 48 b8 77 58 50 c5 2e 23 7e 3b d7 cc ae f9 6d c4 7b f7 59 93 1e b7 93 f9 ea ee c8 2a 01 38 89 71 8f 1c a9 7e 4a bd 08 8a f9 54 21 fd 21 2c 8b a1 5b 8b 6f 7a b0 cc fd 19 21 c1 e8 0c 1a 2a 91 0d ef 9b 1a a4 78 d6 a4 5a 22 4f 43 99 b4 9e 23 fe a8 d6 86 cd 4a 60 3a 83 0b fe 66 68 3f ec b2 6e 13 23 c6 c5 42 67 d0 f0 a1 9f 68 5f 33 e6 84 3e cd 60 76 93 6a 29 48 dd cf 22 03 5d db 86 6d a9 4f c5 8f bf 42 2c 75 b9 31 c7 6b 6e 32 b4 eb 1a 93 5d 2a fe 44 82 d6 e5 c6 a9 bf fe 66 16 8d be 02 7a 18 b4 f8 a4 5a b2 f9 18 c0 8a e9 be f9 53 2d 79 59 d5 b1 7f 43 89 6b 91 40 8e bd 3b a6 bb 97 df bc aa 15 cd 99 6f 31 c2 b7 8f a7 5d c4 7a b7 39 60 85 e5 73 1c 9c ac a3 b0 ae 70 46 7b c6 08 31 09 ee 0f Data Ascii: D].I{.W<~HwXP.#~;m{Y8q~JT!!,[oz!xZ"OC#J`:fh?n#Bgh_3>`vj)H"]mOB,u1kn2]*DfzZS-yYCk@;o1]z9`spF{1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.6	50132	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	505	OUT	GET /DsaAne9_Rmh8Fd9RFQEPkXFN-8C-TwipEt6QkO2i34Tt2j5paRpSVGFQl4JOJ-wcg98=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6458 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:06:57 GMT Expires: Sat, 20 Apr 2024 14:06:57 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	725	IN	Data Raw: 52 49 46 46 32 19 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c e9 18 00 00 2f ff c0 3f 00 4d 40 6c db 48 92 04 cb be b7 3a ff 84 bb b6 ba f7 09 20 a2 ff 13 20 49 b6 3c 04 c8 b4 b3 9d 11 07 6c 24 79 8a 48 3c e1 0c fc b0 63 62 5b c6 47 3c f0 9e 9c 24 c0 40 09 27 ea 01 6c 0a 79 da 24 96 69 64 3c 6f 94 c8 ea 74 47 c9 40 b6 a9 2a b9 aa 24 28 49 95 3c f2 46 95 d2 04 0e bc 3a 01 94 12 40 6d e3 c1 02 10 40 49 35 a1 2d c9 db 7a 86 a0 d6 b2 41 ed 26 a9 a9 ad 76 bb ea 42 9a e3 11 f0 d9 aa aa ba 5c 62 50 b7 80 6e fe 4a 55 55 47 cc 74 d3 4f d3 0b 29 b7 96 1f e5 e7 ca 6a 16 70 63 db 76 d5 2c 4c e4 e9 bf 1c 2a 60 28 80 b1 11 c8 bc 48 43 24 f7 dc fd 32 39 e3 b6 6d 24 b1 82 c5 ec 7d 05 81 9f db 7f 61 5b 83 e4 46 92 1c 49 32 fd a5 9b Data Ascii: RIFF2WEBPVP8XVP8L/?M@lH: I<l$yH<cb[G<$@'ly$id<otG@$(I<F:@m@I5-zA&vB\bPnJUUGtO)jpcv,L`(HC$29m$}a[FI2
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 88 41 06 92 90 84 a6 8c 23 81 f6 c4 04 58 d5 b6 6d 91 24 e9 fb fe e4 82 9c e6 ee 22 35 87 30 6e 1c 1d 2a cf f2 9e c9 1e 43 43 31 53 52 c4 2f fe 3f 22 07 2a 23 ec a3 96 6b d4 e4 d5 ae d5 92 df 2b dc 3a e6 86 41 b5 92 39 96 ec 2a a6 52 cb 4c e9 96 d9 31 a3 62 46 d9 72 dd 5e 12 20 49 32 6d ab f7 fa 9e 3b cf b6 cd 6f db b6 6d db b6 6d 1b cf fe b6 6d db 36 e6 5a 92 b4 6d 5b 5a e7 7d ff 9f 04 62 27 44 91 9c ba fb d8 a6 1d 79 77 d0 6d 74 11 ee 3b 68 c7 1d f7 ea 12 74 e4 2e 1c 20 ee 01 7e fe 98 80 21 c8 fa 45 2f 5d f1 cc d9 ce 9c fe 7f 17 b8 74 ad e8 da 55 8e 31 df 39 cc 0c 97 58 d7 75 4e 73 ff 9d f7 c1 db 01 3e 7d 0f bb 22 97 bb 9c 7c bd f5 9b f7 e7 e6 c3 c5 70 c6 09 88 71 3a df 43 f4 39 59 bf 5d 85 2a 78 01 bc ea 95 a3 6c 31 21 70 44 62 33 c3 5c 65 a7 e6 e6 4a Data Ascii: A#Xm$"50nCC1SR/?"#k+:A9RL1bFr^ I2m;ommm6Zm[Z}b'Dywmt;ht. ~!E/]tU19XuNs>}"\|pq:C9Y]xl1!pDb3\eJ
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 5c 32 5b 20 a1 d1 3a d3 e1 25 a0 52 ca 1a 9e e4 5d 04 50 ea 36 32 c7 8e 09 82 20 01 50 72 1a 1b 06 0b 83 eb 9c 49 17 91 18 e3 e7 c6 cf ed 80 fb f8 c5 fe a7 68 cf 55 d9 07 1c 98 df aa 34 f5 2c cf 1d 08 de 09 40 dd 89 f7 27 27 04 d7 96 f3 ce 54 11 89 31 7e 6e dc 80 79 2b 24 14 92 ed 4b 98 0d 3e 02 1c 2e 69 d6 f7 d4 2f fa 42 03 80 be 8f 56 ae a5 a8 0f 52 85 3f 10 b8 9a f0 10 4f 88 53 a3 4e 12 5b 2c 42 2d 21 50 ef da 9a 34 76 95 63 31 4b 4f 07 0c cd aa ef 3a 7d 6b 8c 04 d3 5f 92 42 3b c0 55 84 07 79 a2 7f 27 5d 86 1c 77 5e 2a 10 0d c6 f4 2d 13 22 85 0d 8f 33 c0 d0 c4 2d 4f 7e e8 96 7d ec e3 17 cb ff c4 84 d4 91 f3 9b 2b 09 37 7a 1a 0f c3 f1 6c d0 c5 ee ca ca 18 5e 69 5f 05 ef c7 3b c8 00 d5 5e b6 e5 b1 f3 83 82 2f 26 81 63 ef 3e dd 27 36 ec 68 eb c9 97 10 fc Data Ascii: \2[ :%R]P62 PrIhU4,@''T1~ny+$K>.i/BVR?OSN[,B-!P4vc1KO:}k_B;Uy']w^*-"3-O~}+7zl^i_;^/&c>'6h
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 98 60 69 b1 52 72 5d 54 82 98 8d 2b 9b b7 bf 88 b7 17 02 e8 41 14 7a a4 13 aa 9d 6b 16 e9 6f 03 0e 87 67 d4 0f ad 35 01 d6 da cc 55 e9 f6 34 3e 74 6e ff 30 b7 db 97 c7 5e 08 10 ed b4 95 10 36 f5 43 0b 2f 81 30 49 20 24 b2 72 66 0f bf e5 61 a9 49 f3 c0 7c 49 dc 6a 45 5d 69 65 5b 5e 62 a8 bb 36 9c 6b eb e9 01 c4 91 77 5e 07 fb a7 f1 2c c0 c8 ea a9 b5 86 94 7e 60 10 84 30 03 cd c2 2c 48 b2 9e 86 9e 46 48 28 84 10 a4 d0 8b cc d4 a7 f1 8b 55 28 f2 a3 79 13 80 67 6d ac b2 ec 97 c2 f0 c4 f9 70 13 00 8c 8e d5 82 05 fc 6d 75 88 58 9a c9 88 c8 4a 3a 2c 04 15 20 6c 6f 03 ce e6 42 12 e0 18 bd 1a 8f 10 42 01 2d d8 6b 08 0d 8c 34 ae 8d 58 68 f1 17 5a 73 58 cf c6 fb 80 a5 f1 58 a8 26 15 96 c0 5c 6a ba 59 1c 59 38 b8 32 03 2a d1 62 0f f8 db d6 ac e9 4c f9 ce e1 92 7b 05 Data Ascii: `iRr]T+Azkog5U4>tn0^6C/0I $rfaI\|IjE]ie[^b6kw^,~`0,HFH(U(ygmpmuXJ:, loBB-k4XhZsXX&\jYY82*bL{
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 7b 1b 99 25 01 85 be 6e 06 2e 22 e4 7c 2a 3a f6 18 46 fa e7 c2 05 93 a7 d8 e7 22 39 35 02 7b d4 91 fe b9 71 e1 d2 93 fe f2 a7 52 9b 0a 7f cd f8 0f 26 8c 68 75 dd 7c 26 30 05 6d a6 e8 3f 68 25 3d e0 6b 9e b7 e5 74 12 46 f8 a0 95 f4 80 cb e2 5d 0a cf b7 4f 6a d3 f8 a0 95 f1 6d 94 51 40 62 8a a2 df ec 23 2a b8 b1 9f c7 1d 77 97 25 1b fb 7a 79 9b d2 d3 ec 52 1a f9 b4 86 08 02 05 ca fe 45 c4 b2 04 d7 e9 f3 12 f7 59 5d 0c e8 67 ff f7 33 91 29 5a e9 71 94 1a cb 14 3c 2e 28 4a 7f 7b b5 35 a0 f2 63 07 51 b6 38 0a b6 5b 31 e0 ef 52 53 f3 99 e4 dc 22 dd 11 38 6f 45 d9 62 df a2 82 c0 9b 00 29 57 1d 04 97 ca cd 9d 81 97 81 b2 c5 7a 98 8a 01 8f f8 35 72 dd 81 71 b9 c7 ee 6b a8 2a 4e 5d 0c 67 ab b8 8a a3 6c 71 4f 97 64 6d 92 16 ad 81 72 d5 71 aa 2b dc d5 f5 c4 5b d7 53 Data Ascii: {%n."\|:F"95{qR&hu\|&0m?h%=ktF]OjmQ@b#w%zyREY]g3)Zq<.(J{5cQ8[1RS"8oEb)Wz5rqk*N]glqOdmrq+[S
2024-04-19 14:07:01 UTC	713	IN	Data Raw: a4 ca 31 e2 6c 7c 38 47 ca 72 c4 58 8d a4 b3 6a 73 5b ff df d6 ff 37 5d d7 66 c5 b1 54 57 b1 9a b7 5c 70 5c 39 38 26 43 29 02 bf 51 ae 88 b7 9c a3 0a 56 eb e2 73 f6 cb d6 d3 d7 53 90 93 83 b3 ef 55 f5 72 c9 d9 96 ec 1b 6b 89 e2 dc f6 7e d7 12 17 b5 15 6b 69 6f 3a 22 6e 04 0a f5 37 9f a3 9d 2a 16 4f 77 b1 bf a0 60 de b1 b4 86 39 55 b1 6e fa 7f d3 ae 56 4b c1 fc c8 9b e6 55 ad d9 1a ed e2 f2 23 85 f2 23 17 c7 1a df ac 62 11 f6 6c bb ae ec a8 4d 3e b7 28 26 ab b5 6b d3 9e db 8c aa dd da 11 db 4e ac ae 6a 0e 5e 33 87 58 04 7e db a7 9d d8 7b aa 1d d6 56 2e 5a 9e aa e5 d8 0d 14 a6 68 a9 e0 ed cc 59 c5 71 5b ff df bc d6 31 b3 ea e1 d2 96 ea 12 a9 79 cb 05 bf f3 9d 93 a6 52 f8 cf 3d ef 92 7f a1 2e 8d 5a 17 9f f3 1d eb e9 eb a9 9a 07 76 8f c6 2e 3e 4f 75 59 b8 e4 Data Ascii: 1l\|8GrXjs[7]fTW\p\98&C)QVsSUrk~kio:"n7*Ow`9UnVKU##blM>(&kNj^3X~{V.ZhYq[1yR=.Zv.>OuY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.6	50130	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	505	OUT	GET /b1-MIBjlMD9kvl0Okeglm9BL9ejRpOXMio303W0tiLb8Ul5WuVzBDoDKgGRcALOsCdw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2070 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:12:00 GMT Expires: Sat, 20 Apr 2024 12:12:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 6901 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	722	IN	Data Raw: 52 49 46 46 0e 08 00 00 57 45 42 50 56 50 38 4c 01 08 00 00 2f ff c0 3f 00 c7 05 39 92 24 45 52 e4 f2 ea ff 58 45 19 2a 63 e9 4e 06 c7 8d 24 29 52 f6 fa 6f e1 be ce 01 66 98 aa 64 dc b6 8d 24 6a fb 6f f6 7e ae e7 5f 6d da 06 8c 53 66 df a1 67 41 10 10 01 11 18 32 b8 10 10 85 22 94 30 04 7e 9e 21 c0 b0 d9 7e 97 e7 41 40 5a 1a 1a 14 04 99 15 c1 42 e8 86 0b 42 07 86 16 4a a0 13 41 21 4c 21 8c 41 90 e7 02 a9 50 94 06 44 71 d2 80 d0 69 a2 4c 10 20 2d 88 c1 61 f1 9f bb 71 d1 30 8d 42 99 3f 88 83 61 8a c6 80 08 95 16 05 51 10 01 99 c6 2f 5f 45 41 98 45 93 fe 26 e5 19 da 58 90 02 d2 c5 0c 0c 36 79 cf f9 18 4a a4 b2 f9 82 1c 6f 50 14 cd 1c 46 b8 11 e1 09 82 44 f8 37 90 7f 0c 60 02 81 05 04 02 81 2b f9 cf 69 cf 1c f6 0f 28 5c db 9e b6 cd 56 5a 1b 8f 1c 2a c3 98 99 Data Ascii: RIFFWEBPVP8L/?9$ERXEcN$)Rofd$jo~_mSfgA2"0~!~A@ZBBJA!L!APDqiL -aq0B?aQ/_EAE&X6yJoPFD7`+i(\VZ
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 66 4e 17 57 52 47 85 42 31 53 d4 9d 12 27 74 8a 1c bb 31 ba 44 64 21 b7 70 24 e2 e3 f0 f2 b6 f3 8d 4e 42 18 38 65 01 99 53 9a ea 97 a5 5d cc 46 f6 bc 19 6f 3a a1 7e 4f 53 09 19 ea 12 d9 c9 2d 1c 8d 28 86 2e 4e 9e 14 8a 44 76 72 65 6d 89 f9 b9 ba bc 8d dd 1a 53 2a 66 8a 9d 53 3e 74 e8 bb b8 e3 cd 94 3c 3d 17 b3 4a 73 54 e6 66 9a a4 a5 da 84 b0 75 ca 4f bf 8e 8b 3f ef d0 77 31 b3 34 2f 97 1a 79 59 54 3e 31 4a 9b 10 20 4e 91 a3 b7 d3 2e 86 a0 22 e1 f4 2f 85 87 45 e5 57 33 6d 9a 84 40 71 4a a3 0a c1 c5 3a 0b 9d 35 ed e0 1f bf eb 2c 03 42 71 ca b7 ae 01 17 c3 91 3b 6f 7b cc 03 7b c2 d3 b2 ec 22 24 39 86 ec da 35 c4 21 42 92 3d 6b 5a 18 f8 93 d8 36 58 4f 46 1d ef ea 3a 2d c0 7a b2 e7 bb 07 fa 9b da 6b 66 00 7a f3 52 75 e0 cd d2 ea 6c 38 6f 9e f9 aa dd c3 c1 a7 Data Ascii: fNWRGB1S't1Dd!p$NB8eS]Fo:~OS-(.NDvremS*fS>t<=JsTfuO?w14/yYT>1J N."/EW3m@qJ:5,Bq;o{{"$95!B=kZ6XOF:-zkfzRul8o
2024-04-19 14:07:01 UTC	93	IN	Data Raw: 31 8d e7 58 93 08 80 1a 13 40 85 75 c9 08 a8 21 c7 73 ac 4d 04 40 0d 78 a0 02 43 3c 03 36 50 81 25 9e 01 18 a8 c0 f3 78 52 a8 40 05 9e 78 86 5d 83 e7 78 24 4b 96 37 7e 41 28 2a aa 3c 15 57 24 cb 56 58 5d b3 58 0d 4b 56 2e b9 b5 5d 96 2c 5f 83 fe cf a0 ff 33 e8 ff fc ff e7 48 00 Data Ascii: 1X@u!sM@xC<6P%xR@x]x$K7~A(*<W$VX]XKV.],_3H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.6	50131	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	506	OUT	GET /pjUulZ-Vdo7qPKxk3IRhnk8SORPlgSydSyYEjm7fGcoXO8wDyYisWXwQqEjMryZ_sqK2=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4004 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:29:11 GMT Expires: Sat, 20 Apr 2024 13:29:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 2270 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	722	IN	Data Raw: 52 49 46 46 9c 0f 00 00 57 45 42 50 56 50 38 4c 8f 0f 00 00 2f ff c0 3f 10 1e db fe 3f ab 76 db ac eb 3c 42 1f a0 af d3 4f ef 7b 97 98 ed 72 1b f0 39 47 70 f6 ac 32 73 fb b4 06 9d b3 f7 7f cd da bb dc 35 f1 29 83 ec 32 4a 0a f3 91 c2 cc 39 ce 18 83 ca 52 65 0c 33 4d 58 0e 48 8c 64 5b b5 55 69 eb bb bb 0b bc f7 ee de 33 e7 3e dc 1d 82 40 76 24 49 8a 64 a5 a0 a7 c1 53 ee 49 c1 ef 7d d1 31 33 0c ef ee f0 b8 04 48 92 4c db fa b6 6d 9b 0f df b6 6d db fe cf b6 6d db b6 6d db b6 df b7 79 0b 16 24 5b 55 a3 73 cf 14 98 d7 8a 65 b2 c6 28 5c 7f 53 e3 c7 2f fc d7 4f eb c8 25 33 5d b2 ee cb af ed a7 e1 ba 87 98 97 16 c1 dc c3 d4 cb 9d e4 e1 11 40 08 f4 f2 20 79 92 ac 08 66 5e 1a a4 37 a4 9b 9f d1 51 77 16 51 97 4c 6f 44 b9 64 35 b5 db 5e ba a4 20 42 79 ab ca df e4 8a Data Ascii: RIFFWEBPVP8L/??v<BO{r9Gp2s5)2J9Re3MXHd[Ui3>@v$IdSI}13HLmmmmy$[Use(\S/O%3]@ yf^7QwQLoDd5^ By
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: ee 31 73 7b 10 a3 27 db 85 5e 0f 8b f9 51 45 3b 33 85 18 ed 61 4b 22 6b 0d 44 16 92 71 22 35 88 6a 8c 26 e4 ee d4 9a 08 5b 77 7c f6 de bb fe b1 c2 85 08 ed 92 a1 84 6e a9 0d d6 ef de b0 2a 67 ac dd b8 fc 59 b0 fc a5 b1 12 9f dd 65 e6 74 ba fe 5f 1f ac df bd 66 55 4e 59 9d 33 86 ab 73 2e 98 98 46 01 d4 9f fc 97 85 2c 34 5e d6 8e d1 52 2f 0c 87 a7 e4 84 ce f2 20 00 5a e6 5c 32 84 81 8a b6 65 d6 6a 86 e1 f0 94 1c d3 5e ec 40 9a 90 16 5e 45 39 30 49 4f e1 4a ed 30 1c 9e 9c 63 da 2f 77 20 fd 81 af 11 0a ad c9 72 aa cb 44 bd 10 c2 46 08 0c 5d af 19 7a ba f5 a2 03 e6 dc aa 92 c0 cf 78 a5 5e e8 63 dc 13 e4 91 a0 7f 68 b6 be 18 0e 97 c7 56 3d 28 9b 4b 84 43 6e 6f 8c d1 62 35 c6 70 38 98 a8 91 11 77 b9 64 28 a7 cd 2d 13 11 db 16 22 16 8a 72 d1 ed 19 ee 13 c7 59 20 Data Ascii: 1s{'^QE;3aK"kDq"5j&[w\|n*gYet_fUNY3s.F,4^R/ Z\2ej^@^E90IOJ0c/w rDF]zx^chV=(KCnob5p8wd(-"rY
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 75 b9 64 f4 67 74 8d a4 47 72 25 58 12 c4 dc 61 84 43 50 fd 29 1b 76 af 59 95 53 30 68 26 58 85 d1 e6 fa 00 25 f9 c2 df df eb 2a 6b e2 8d f5 4f a9 69 ce 59 5a 55 fd b9 88 1b 3a ea 2c f7 2c 60 50 eb 74 f3 3d 4c 7f 41 82 2a 09 59 a9 aa 3c 5c 7b 76 82 31 c9 f8 c5 fd cf fc c0 94 f9 06 be 65 eb 13 82 aa b8 64 45 08 91 94 33 aa fc d0 8f 4f 22 55 45 28 eb bd 18 6d 9c 1d 5d 6c e2 85 8e da 8b 1d fb 30 68 f6 d2 0a 21 42 85 80 4a 52 7d aa 28 42 95 f4 9b cd 09 0e 4c b6 cd 28 70 77 af db be 66 75 4e 81 a0 42 a8 0c a1 ae 33 a8 d2 b7 33 00 fa 9b 15 3a 3a e3 b9 61 19 82 6a 97 89 00 f2 c3 39 54 d9 ae ea 2f 80 32 0e 48 b9 5d 50 b3 18 54 3e 3b 3b 88 d7 7f 32 48 04 9d ea 94 33 27 74 f4 a9 db 37 06 10 34 17 32 c5 8b 54 07 5a 06 d9 25 13 2b 53 d6 8c 50 9d 98 46 f6 41 50 e9 ba Data Ascii: udgtGr%XaCP)vYS0h&X%kOiYZU:,,`Pt=LAY<\{v1edE3O"UE(m]l0h!BJR}(BL(pwfuNB33::aj9T/2H]PT>;;2H3't742TZ%+SPFAP
2024-04-19 14:07:01 UTC	772	IN	Data Raw: 5b 24 f3 2f 26 ac ee 47 2e 91 bf d4 53 bf ab 2e 19 47 6a 95 dc 7b 90 16 42 cb 25 09 ab f3 a7 15 57 5e 50 5b fd ee 16 ed 55 ab 4a a6 24 25 64 26 67 c3 7b ee 5b 99 33 60 59 b4 9b 35 d6 ef 72 77 b8 e0 11 de aa e2 b7 99 c9 1f f6 78 5c c0 cf f1 6d c0 d5 21 2f a4 9a eb 77 db 25 93 77 04 99 d9 45 e8 c2 38 27 a5 ba eb 77 3d 84 5e b9 44 81 e5 4d 69 ab 62 ea 77 3f 0e 1d 7c 4f 91 e5 f2 76 cd 8c 69 dc 85 18 74 11 b2 ae 79 6f da 5e 31 8d bb 11 01 e0 c5 30 9a da d2 98 c6 5d e1 ae b3 a1 75 cd 73 a9 87 62 1a 77 87 f9 ab bd a7 d8 f2 8e 9e 8d 8d 69 dc 25 ce 3a 88 ad ab 2d a6 de 8a 6a dc 2d ae 5a d9 0b 5f 00 d7 f6 6b 70 dd 8f bb 96 ce 9f 83 37 ff 50 ea ab 9a 1f 77 6f 1f 3c b9 a1 3c bb bf 44 9b 6b 7d dc c5 a3 01 9a fe 44 a9 66 d7 f7 b8 9b 07 e7 f1 d8 f5 a9 9c 6a 7a dc d5 a5 Data Ascii: [$/&G.S.Gj{B%W^P[UJ$%d&g{[3`Y5rwx\m!/w%wE8'w=^DMibw?\|Ovityo^10]usbwi%:-j-Z_kp7Pwo<<Dk}Dfjz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.6	50133	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	504	OUT	GET /B5AENJqFOd91t5cWZLTQbVUm7iDWzYVM1n0Pe2RI_46dhlWMtVAUBioUvy4YMXWdwA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3008 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:12:05 GMT Expires: Sat, 20 Apr 2024 10:12:05 GMT Cache-Control: public, max-age=86400, no-transform Age: 14096 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	721	IN	Data Raw: 52 49 46 46 b8 0b 00 00 57 45 42 50 56 50 38 4c ab 0b 00 00 2f ff c0 3f 00 e2 50 dc 36 92 92 f4 5f f6 31 c3 2b 22 26 80 dd b6 95 34 b6 95 8d 0c 5b 98 6c 45 c3 0e 80 46 d1 16 df 22 9d ff ff 0f d9 ce 29 6f 1d db b6 79 3c 37 b6 6d 73 f7 ec ce ac 3d e7 da f6 e1 7a ef 3d 8e 6d db b6 6d 3b 39 67 e6 57 fc bf b1 cb fb 4a 69 57 a9 58 39 e9 72 95 3a ff 2a 6c 5d e5 21 24 f5 ed e2 87 90 ca a9 ec 74 36 26 76 d2 de 57 1a c9 db ff 19 92 f3 5d db 4a c6 b6 bb 6a d6 7b cb 31 ff 80 73 e5 39 27 dc bc f6 ee 2d 36 8e ee 8d 6d db 98 aa 1e 2b e8 4e 46 16 6d db c6 de 9c da b6 ed 38 b9 5f 6c db 36 df 6a db ed 9b 6d db b6 6d db ee 87 eb ff fb bf 3f a9 fa 3f 01 72 6b db 5a 1e a7 87 e9 bf 00 4c 05 6b 16 98 99 99 99 99 19 c4 d2 a7 ef 1a 4a 70 03 5f 01 2a c0 8d 08 62 47 2a c0 3d d0 f0 Data Ascii: RIFFWEBPVP8L/?P6_1+"&4[lEF")oy<7ms=z=mm;9gWJiWX9r:l]!$t6&vW]Jj{1s9'-6m+NFm8_l6jmm??rkZLkJp_bG*=
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: f8 7d 0b 8e 4b ab 67 80 b1 74 61 b9 56 e0 57 8f c1 99 42 a3 1f 06 8b e5 2e a2 71 b8 c1 14 e8 b2 ec c2 72 ed c6 b9 ce 43 31 85 c6 87 e1 ec 56 30 b6 46 95 01 ac f8 6e e3 5c 17 22 43 f1 9e 35 22 8b a0 c8 f9 b1 12 c6 04 bd 1b 5a ea 5a ed dd 5a 24 6e b9 17 a1 7f 83 4a b5 43 6f ce 03 71 7e 95 60 04 18 38 0a ad ee 5f c3 e1 50 7d 49 97 08 03 c4 a1 e8 f0 1b 18 36 47 16 58 23 15 81 7b 0d 11 83 79 77 fe 05 e1 a1 af cb a0 4e 10 23 39 36 60 dc 2b 13 e7 1d fe 8b c1 4d 77 26 04 89 4f 80 6e f0 ea 3c 13 35 10 9c 69 29 1a 41 52 25 8f 91 59 3d 0f ec 73 cf 38 10 d8 5f 77 32 0a 41 94 c4 44 93 d9 0e ef f6 96 5a 73 cf 58 00 6c 88 38 d0 29 8d 4e 23 fd 68 5a 11 96 db 27 d9 ef be cf 4b c1 04 71 86 4b 83 69 f3 fd 74 c1 ee f2 49 e6 bb b6 f1 84 11 27 21 d1 60 7a 71 51 45 fc 96 07 a4 Data Ascii: }KgtaVWB.qrC1V0Fn\"C5"ZZZ$nJCoq~`8_P}I6GX#{ywN#96`+Mw&On<5i)AR%Y=s8_w2ADZsXl8)N#hZ'KqKitI'!`zqQE
2024-04-19 14:07:01 UTC	1032	IN	Data Raw: e1 25 24 4d 8d a4 68 d4 86 cb 0a a2 65 00 c6 cf ee 25 24 a5 46 02 cc 0a a2 fd 22 bb 87 90 94 ea 30 32 06 18 76 0f 26 29 d5 19 45 a3 f2 98 2c bb 1b 93 94 aa 8c a2 11 89 9e 54 6d 20 93 06 c3 e6 c6 24 91 59 e1 a2 fd 03 9b 0b 93 14 cb 8d c2 11 79 6c 36 9b 13 93 14 4b 70 e1 b0 44 4f 2c 35 90 49 83 6e 73 1a 24 c5 52 bd 68 58 02 a3 87 6e 75 18 24 8d d0 0b 86 e5 b1 d9 ac 76 83 e4 b1 db ac 36 83 24 32 cb 5f b4 cf 09 dd 62 33 48 1a a0 03 f3 4c 6b 8b d5 20 f9 43 c1 b0 c0 65 85 8b e6 9c d0 2c 56 9d a4 01 5a c1 90 38 e6 6a f9 8b 56 6b f4 d6 5a 78 2e e2 9b c9 44 2c 16 9d 22 32 eb 8b 97 fc c5 7d 2a f8 5f 8a 26 6e b6 e8 04 d2 a0 01 b3 9e 78 d5 8f a0 18 71 a9 27 1c 30 5a a5 c9 6c 3c ac 3a 34 b9 08 0d 93 f4 28 09 cc 14 e6 9a 9d 58 32 61 b3 59 57 1b 1c 1e 21 b1 21 1a ef 71 Data Ascii: %$Mhe%$F"02v&)E,Tm $Yyl6KpDO,5Ins$RhXnu$v6$2_b3HLk Ce,VZ8jVkZx.D,"2}*_&nxq'0Zl<:4(X2aYW!!q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.6	50134	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	504	OUT	GET /YtLBM6IPz0ZWno6QCLJVqASU0E8OLFmxd-eepUSpAEmFIQzZrq7to1VJ20s-A5iMFA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:01 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9108 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:16:32 GMT Expires: Sat, 20 Apr 2024 10:16:32 GMT Cache-Control: public, max-age=86400, no-transform Age: 13829 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:01 UTC	721	IN	Data Raw: 52 49 46 46 8c 23 00 00 57 45 42 50 56 50 38 4c 80 23 00 00 2f ff c0 3f 00 4d 38 8e 24 c9 51 22 6f f6 10 db fe 5b 0c ac 40 bd 23 fa 3f 01 e9 a4 93 4e 3a e9 a4 93 4e ba ff b9 16 b4 b1 5a 52 bb 1c 43 da b6 d4 82 4c 64 57 6d 8a a5 43 b4 73 57 ea d3 ea ba 27 96 0e d1 b8 e1 86 5b 15 aa 8c 1f f1 3a 0f 55 26 33 53 65 b6 26 aa 32 13 a3 0f a6 da 8c d1 cb 93 4b 6b 43 97 a1 95 f1 65 83 20 08 82 20 88 2f b8 90 1d 49 92 22 59 6e f7 75 fa 4b 18 f6 24 60 e6 99 a6 79 12 38 8a 24 c9 aa f2 c8 89 18 09 e5 5f 15 02 10 00 ef 33 01 29 92 24 47 52 f0 47 e9 db 62 4e df 15 80 7b f4 9f 81 db 46 8a 9a c3 ec c1 e2 27 82 22 9e f9 94 79 e8 07 32 57 32 e3 0f b0 f7 22 f1 96 bd 37 96 75 88 48 86 f1 c8 77 95 22 de 2a 45 c4 c7 7b 6b d4 5b d1 ec df 58 bf 7f 7c d6 54 1f 89 08 23 c2 2e 1b 6d Data Ascii: RIFF#WEBPVP8L#/?M8$Q"o[@#?N:NZRCLdWmCsW'[:U&3Se&2KkCe /I"YnuK$`y8$_3)$GRGbN{F'"y2W2"7uHw"*E{k[X\|T#.m
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: cc 8c 61 4e 06 33 d2 ce df 9e d8 cd c9 f5 27 e5 2a ff 71 e5 e2 01 cb 9a 52 e2 a5 ab c2 81 5f b9 5d 72 39 5a 57 62 74 e9 5c fd aa ce 55 95 d5 56 94 6b db 56 6d 2b 63 ac 23 f7 c8 77 7f fe ea 64 40 76 44 06 49 50 76 77 bf 7a f6 94 a4 6d db 5a 27 cf fb fd 49 da a4 ee ee ed 0c 67 05 0c 99 b2 16 2e 66 6e eb 60 01 2c 81 2d c0 d8 1d 2a c8 71 cd 39 f9 bf 70 c4 46 92 d4 0c 22 6c 38 bb 6b 17 98 cd f9 ff cd f3 c6 3f fa 1f 47 e0 05 80 38 a8 e7 78 96 d1 15 4e 00 ee c3 71 d4 c7 23 a5 05 96 cf 05 08 c3 11 0f e8 de 80 17 31 4c be 94 2e f9 02 8f 87 0f ff f6 42 84 7d 66 2e a1 cb 43 fc bc 43 e0 ee de 5a e3 19 b2 2a 95 a7 18 a1 8b e7 0a a8 c0 41 86 aa 78 a3 eb f3 14 38 c6 e0 61 f9 5c 95 ce 4b 88 02 74 73 38 56 ba d0 c5 f2 b9 54 5d b0 6a 94 50 f4 e5 73 55 e8 b5 17 09 17 d0 d5 Data Ascii: aN3'qR_]r9ZWbt\UVkVm+c#wd@vDIPvwzmZ'Ig.fn`,-q9pF"l8k?G8xNq#1L.B}f.CCZ*Ax8a\Kts8VT]jPsU
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: 57 47 fe 1e 50 9b ef ba 7e 2b 89 19 a4 42 a3 03 c2 2d 83 14 cd c0 c5 c2 0c 46 49 4d 9c a1 6e c2 4f 3f 94 e7 96 76 bd f1 59 69 7c 2a 4b 97 b6 2a 74 bd 22 10 34 ba ed 8a d2 8d d5 e9 cc ab 5e 69 e5 4c 44 42 43 08 52 6f e1 84 ad 80 d3 77 b1 a7 6e 48 b3 db 9b 22 a6 a4 d4 cf 2d ed 12 aa 6e 8e 43 01 02 43 09 49 57 10 04 45 84 45 5e 4a 28 49 90 1c 0d 91 9b dd 7c 5c 1c 44 a3 3a d7 0b 0d 41 80 de 7b 37 53 86 e2 5c d5 27 90 c5 ce 7b ed c6 21 00 83 25 ed 02 42 a0 34 ea 1a 01 80 fa 31 73 54 64 3c e6 e5 62 42 63 d8 15 42 ea 33 aa 77 9d 5b 79 ae 47 39 33 ac 62 6f b8 aa 4e ed 81 8b 54 bd 76 36 ce 42 71 e7 a9 5c 56 30 e7 ac de 3a 0f 47 3d 66 ea 22 c2 b4 b3 07 12 d4 41 40 4f e7 96 9f ab c3 b1 9c f8 b9 38 0b b7 5d 7c 36 d7 fa 9c c2 de 81 78 29 de 5d b8 c2 b7 54 d9 a9 73 f6 Data Ascii: WGP~+B-FIMnO?vYi\|Kt"4^iLDBCRownH"-nCCIWEE^J(I\|\D:A{7S\'{!%B41sTd<bBcB3w[yG93boNTv6Bq\V0:G=f"A@O8]\|6x)]Ts
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: e2 a3 fc 7d 83 79 b9 8e e3 0f f9 5a 9e 9b 76 1d 87 4a 67 17 d5 a9 3d e8 55 74 a2 76 42 be 1b d7 07 d7 7f e5 ba 42 31 b9 ec c2 89 3b d3 8b c0 f2 94 e7 e5 aa bd 3c 37 cb 05 5f ef 42 22 57 aa bd 3a 9b 18 9f fe 3e 98 fd 9d 7d 70 5d 33 5c 05 7a 4a cb 06 58 7f b6 d1 9c 67 c2 d3 86 f0 79 b9 56 fa 56 9e 9b e5 aa 8f 7a 01 fe 5e a5 2b 40 a8 76 d7 f7 9d e0 51 3d d3 e5 49 b6 26 f3 73 61 03 c6 4a 40 0b dc 14 98 9a 19 b9 68 d4 f2 dc 4c 97 db c3 c6 41 aa 0c cb 95 12 17 6d ad 24 5b 4c 14 05 a8 9f 83 64 b9 79 84 42 fa 7c 5c d4 b5 3c b7 84 2b 30 1c 8d d5 b4 3d d8 2d 7d 96 2b 0f 17 61 42 03 0e 27 f1 c3 ae 3a 16 4a a0 b3 99 91 cb 0f 42 f7 f2 dc 94 cb d4 20 24 67 53 77 1f 3c 45 2e 09 42 ae 5c 21 42 6d 41 e3 e9 51 61 66 13 cc c8 45 ab 51 9e 9b e9 6a ab 10 d5 41 97 58 89 6a 4f Data Ascii: }yZvJg=UtvBB1;<7_B"W:>}p]3\zJXgyVVz^+@vQ=I&saJ@hLAm$[LdyB\|\<+0=-}+aB':JB $gSw<E.B\!BmAQafEQjAXjO
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: eb 37 ee 02 2f 47 84 88 26 6c e3 c0 9e 97 eb 40 07 23 ca 73 33 5d 96 cd 12 98 6a b2 5d eb f3 e9 91 d0 1e 29 41 fc fe 81 eb be 3b 98 e7 80 0b 83 a5 99 8f eb 49 c5 cb 73 b3 5c d9 a3 d1 00 15 b8 c6 90 c5 c8 7a 74 5f fd 03 29 ae 46 84 95 48 6a 6d ec 31 27 d7 8d 46 8c 92 5b d6 72 95 e4 78 f4 32 97 63 f9 bf ce 81 09 03 84 99 88 3c 6c c9 9c 5c 2b ae aa 60 04 57 2d b0 da d9 ff 54 e8 72 3b e8 dc 38 c3 aa c2 04 b9 79 90 68 9a 4a 6c 4e ae 56 9e 5b c2 65 77 c8 36 1a a0 6c 97 0b 67 ad 9b 57 1b 13 ea b7 fe 4a b6 3c b7 b4 cb d9 32 77 24 9d 28 70 01 a7 a5 7d 91 5f 43 ec 06 db cc 7e c2 9c f4 66 ea 3a 62 79 6e 09 57 2d d9 97 2d 72 85 90 d2 78 f7 31 5e 6c 32 b1 ed 26 93 48 67 12 3e 2b 97 88 d8 ca ab 3c d7 0a 3d 29 ab a6 a4 52 e4 3a 65 5a 0f dc 1a 21 51 73 50 a3 3d 3f 9d f0 Data Ascii: 7/G&l@#s3]j])A;Is\zt_)FHjm1'F[rx2c<l\+`W-Tr;8yhJlNV[ew6lgWJ<2w$(p}_C~f:bynW--rx1^l2&Hg>+<=)R:eZ!QsP=?
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: f2 a2 3d 2f 3c 23 0f f2 ab 43 65 18 d1 7b bd fd c6 89 d6 ac e3 ae 33 e6 bc 0c a4 90 26 b7 e2 5c 3d d4 85 7a 07 be f0 36 28 80 0d 29 01 ed 72 31 ea a7 14 58 ab 2e 33 da 89 cc 4e d2 55 08 a1 e2 e3 f0 b0 67 bc 79 41 e9 18 9c d8 10 64 e9 1e 4f 6c da 7e db 49 c5 04 36 8e 91 5b 71 ae e1 7c 70 0d 51 15 24 24 54 b5 36 51 19 e5 72 d3 4f 42 f8 50 08 4c 53 c5 c8 1e 38 d2 a0 92 3b 39 d7 c8 0f de 52 5c f6 53 94 13 a5 30 e6 04 00 43 c6 13 99 75 3c 9e fe 4d b2 97 81 5b 61 ae fa 2f d4 1e a0 9c 9b d8 bd 7f 03 2e aa 6e 4e f5 3d 60 4d 46 8f 5d a6 ce b1 ea 2f 63 8a fd d4 40 3e 29 84 74 e5 32 8b 2e 3c 75 be 84 7d 1a 31 9d 0b cc c2 c7 1a 8b 3b e6 fe cf 55 3f e7 df e3 61 4c 00 0c 8a 95 43 b5 74 6e c5 b9 aa 33 b1 8b 6b f0 93 30 e7 66 c4 77 f5 3f 4d d7 5a ca d6 cc 01 fe 5d 18 5f Data Ascii: =/<#Ce{3&\=z6()r1X.3NUgyAdOl~I6[q\|pQ$$T6QrOBPLS8;9R\S0Cu<M[a/.nN=`MF]/c@>)t2.<u}1;U?aLCtn3k0fw?MZ]_
2024-04-19 14:07:01 UTC	1255	IN	Data Raw: c8 77 a5 34 38 8b ba fc b9 2f fd da b3 b4 d1 05 98 53 a8 14 4d e3 e2 f7 14 13 0f e8 8e ca 0e eb 37 1e e4 56 49 71 6e e5 ae cf 2a 3c 6f 7d 15 35 62 d0 19 fb f2 4f 82 6c 57 56 ee 38 d5 69 70 c3 ef d4 2c 07 56 63 e2 a4 01 22 69 90 91 8e eb 1a 50 0e 84 45 ff 34 a0 f2 c6 93 4e 71 6e e5 ae b7 83 09 cd d0 ee 51 3b ab b4 59 2b b6 7c d7 5f fc c0 7f 0d 55 b1 b0 36 c9 48 df 53 68 c5 b8 2e 66 bb 1e f4 bf bb 50 57 95 cd 0d ca 73 2b 77 ad 08 47 95 73 b3 3c 3b 95 a1 0b 63 81 eb a4 e7 c1 2d 7f 08 d1 42 92 8a 5d e8 55 75 32 45 23 e9 11 5d 04 34 81 6f c0 de 5a 53 e7 d1 99 e2 dc 46 70 35 74 15 ab 10 3c 54 5f 1a b0 16 b9 0a 91 b2 b1 09 86 a0 05 d0 4e d6 23 f1 be c2 c8 2e 26 3b 12 74 97 d6 b7 5a 2b 8d 37 d6 d2 dc 46 74 35 3e b9 71 55 d7 c2 55 cd 56 ad cc e5 63 33 7e 08 c0 38 Data Ascii: w48/SM7VIqn*<o}5bOlWV8ip,Vc"iPE4NqnQ;Y+\|_U6HSh.fPWs+wGs<;c-B]Uu2E#]4oZSFp5t<T_N#.&;tZ+7Ft5>qUUVc3~8
2024-04-19 14:07:01 UTC	857	IN	Data Raw: b6 d0 02 6d 25 e5 08 5c fc 26 60 a0 08 53 1a d3 f1 c1 10 a8 bf fe 7a 52 f7 21 a4 7e 52 d7 21 0e b7 0d e3 92 e5 ba 8e e3 da 7e f2 89 77 57 be 9c 14 63 18 dd 61 ba 02 06 33 80 9d fe 1b 3a 5f 07 45 a2 22 16 9c de 23 06 44 30 66 2e 45 ae 27 b5 cc b5 f7 d6 ba bb 3d 4e 51 f0 1c 4b 0c 7f b2 4a 84 3b b9 0d 5e 3f 84 b7 37 ef 90 df ef d9 77 10 c6 80 9c c2 a5 84 03 c7 13 2f de f4 a4 64 14 97 c9 5c e2 6c 76 20 32 74 b2 f0 c9 71 ce 8c df 04 41 7a 16 9c ca 04 dc f2 27 bd 29 fe 77 1b bf f0 f2 ad 3f 2a c3 44 bb 84 65 74 57 7a 6c ba 1b 0d 88 18 9e 36 88 cb 94 2e d7 8a 7b d6 08 d8 57 28 73 5d bf 07 7f 90 f2 5e a7 78 19 75 5a 15 82 01 33 0f 90 d6 9b f0 19 77 17 21 04 e3 b8 0e 07 f9 ca c6 89 5f 78 e3 d5 48 d9 a4 df f7 e9 b8 12 bf ef a0 67 cd 20 e5 ae da 1a 36 77 d3 b8 ef 31 Data Ascii: m%\&`SzR!~R!~wWca3:_E"#D0f.E'=NQKJ;^?7w/d\lv 2tqAz')w?*DetWzl6.{W(s]^xuZ3w!_xHg 6w1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.6	50099	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:01 UTC	1146	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:02 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:02 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-GoU-3ZI7nYZ9aoUm7bdRiw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.6	50137	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	505	OUT	GET /kfg71sF9VqFDT9eQVjDe62PPgEZYSX3e3la5C6ESnC9dZ-ND1p0lzoDYI7AMyrjO4fA=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:02 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6294 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:06:58 GMT Expires: Sat, 20 Apr 2024 14:06:58 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:02 UTC	725	IN	Data Raw: 52 49 46 46 8e 18 00 00 57 45 42 50 56 50 38 4c 82 18 00 00 2f ff c0 3f 00 2a 2c f6 ff ad fe 24 67 f3 61 66 2a 6c 2e 68 ee aa fe d7 bf 98 99 99 99 99 19 06 aa ea f7 79 3e cf f7 fe ca cd 1a 12 47 a5 a2 18 1d 33 a8 e8 52 59 00 73 1c 53 ff c3 b4 83 a8 d9 c0 0d 6a 54 f8 9c 33 5b 98 f2 ad c2 d7 87 5a 85 99 d1 45 b1 e2 44 c7 65 64 98 23 73 a2 38 83 6a 54 14 c3 13 66 6e 15 56 ed 6e 40 45 b5 0f 94 0c 5d 9b 5d dc 30 67 0b cc 1c c5 1c c5 ac 5a b5 1a 90 e3 c2 e8 ae ca 89 ce 0a 4a 85 af 8e ca 02 fa 9c da 41 98 51 45 65 50 8d 0f f3 0e 72 b2 8a 51 41 fd 3f fd 84 99 19 14 27 57 e6 b4 0f 0f aa d0 0d ab 28 96 f7 1c 09 90 6c 9b 76 b5 63 db b6 ed e4 db b6 6d c4 b6 6d db 7c 7e b1 6d db b6 6d 13 62 00 00 49 98 ff bf eb 4d d2 a0 d3 02 2c d4 fe cb a2 6d ab 6a ab b5 db d1 6b f3 Data Ascii: RIFFWEBPVP8L/?,$gafl.hy>G3RYsSjT3[ZEDed#s8jTfnVn@E]]0gZJAQEePrQA?'W(lvcmm\|~mmbIM,mjk
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 3b f9 69 9c 06 37 68 11 6b 8e cd ce 01 9a b1 55 6b 79 a1 77 8c cf 42 e8 0f c9 ff 73 98 25 6b 35 b7 b1 f6 98 a8 de 55 32 77 f2 28 1f 4c 6c ce eb 33 ec 75 34 5b f1 22 07 d3 2b de 85 b1 84 14 79 6b 0b b9 ea f4 2d 0f 2c df 7d f6 f8 dc fb a8 42 07 7d 11 1e a7 36 2d 30 22 88 6d 58 0c cf 9f cb 01 83 30 e3 99 c0 4f 02 bf 2c fe b2 9d 1b 66 d6 c0 71 e4 58 4a 6c d4 f0 2e dd cb eb 2c 59 bf eb 5d 27 d8 16 54 d9 b9 db b9 ab 30 96 93 22 ed 9f 12 bd cd 20 ec 98 42 1b 10 82 73 9f 25 fc 59 41 c4 36 ad 7f 93 2c dd ba bd cb ca a3 67 e7 67 6d 04 bc 82 14 e7 1e 5f 9d d2 58 56 8a f3 bc 65 af 32 b9 ad 14 6a f2 9c 34 33 e6 38 15 9a 43 22 8c d8 fa 4d fe 32 6f d2 d9 c3 a8 ca 43 3a a9 b1 28 39 b7 b8 84 e7 40 d4 cc 9f 3d bd c7 41 f7 57 d2 35 34 3b b7 04 0b 1b 96 3d 7b 8d d9 63 c7 96 Data Ascii: ;i7hkUkywBs%k5U2w(Ll3u4["+yk-,}B}6-0"mX0O,fqXJl.,Y]'T0" Bs%YA6,ggm_XVe2j438C"M2oC:(9@=AW54;={c
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 54 c7 9e cd c9 9c de 54 6a b2 04 56 d9 ef d0 5c 9c 53 95 68 3f a6 0e 33 a0 d1 f0 36 2d 34 dc fb 0c e1 fb d9 34 b3 7c ef 41 ef 53 5c a8 f6 e1 02 a5 9e 20 9a da be 91 58 b4 58 73 1d 5a bb db db ce e9 ce ef 24 18 55 fb 68 2f ce ed 96 a8 ce a4 99 21 23 d1 35 c4 e8 b8 77 36 aa 78 d1 ce b4 ce 2d 05 8f a9 7b 6d ed 74 0e 32 61 a9 a3 b5 37 b2 2a 4b c3 72 e8 f4 a7 80 0a 9b 7c a5 d3 ce 94 e6 92 96 6a 1e fb 50 b8 fa 48 c7 6e 7d 4b 4b 21 80 9d ee b5 05 e4 dc e3 ab 93 7e 36 96 72 ba a2 c1 75 ca 5a 05 68 70 ee 93 08 a0 b5 bd 4c 70 e7 16 f5 60 9b 2f dd b8 19 18 ab e5 ad 1d 01 74 89 34 21 d2 9a 5f 5c 02 5b 71 40 53 f2 6d 61 c6 c9 b2 74 48 47 f8 98 12 e8 1a 6d 42 c8 b9 25 70 ae a5 30 9f 49 a0 b5 83 d4 b1 ec cf 9f b9 60 de 2b b8 dd 92 31 5d fd 2d 4c 3b 4f 05 14 d7 1c d7 c1 Data Ascii: TTjV\Sh?36-44\|AS\ XXsZ$Uh/!#5w6x-{mt2a7*Kr\|jPHn}KK!~6ruZhpLp`/t4!_\[q@SmatHGmB%p0I`+1]-L;O
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: dc a7 5b 87 0e 72 49 5a d9 09 e2 98 65 7b 7c aa 73 4f a8 49 c4 f7 10 aa 1b ff 1c 1c 4c a3 ef 43 b5 2a f0 e9 19 37 a9 69 27 51 24 df 05 b1 a3 1b c1 d9 f1 6e cb 74 ee 37 47 aa 68 3f 46 c9 c9 3d 2f 86 8a 59 4f b5 a3 69 5d 1b cc 15 20 ce dd de 53 e1 34 fa d2 17 c4 a3 c9 0e 0e 74 75 96 05 4a 30 45 72 07 15 62 88 76 d4 3b d1 03 2f 90 8f 3b f7 41 48 6b 7e 08 95 92 2b d3 07 e5 e1 dd 2e ae 73 5f 2b cc c2 85 8a 38 f7 11 71 ea b0 42 a0 8a 6a 33 42 07 f3 8b 48 6b 9e d1 b3 2b f8 99 7a 9b e9 89 74 02 30 db 2b 60 07 d3 3d c2 22 76 f4 da 4c e7 ee 95 e0 71 ae 10 a8 a2 9a 00 54 fc cc 0b 04 03 f1 11 67 3d f0 02 5d a2 83 e9 e0 a5 00 e7 f6 af 00 e6 5a 91 d6 fc e9 2a ce ed 01 6c 74 00 cc bb 20 76 74 30 d3 b9 77 bc d3 3a 98 8f 47 aa e8 ae 55 4a ee 01 8a ef 10 61 47 13 ea 12 e2 Data Ascii: [rIZe{\|sOILC7i'Q$nt7Gh?F=/YOi] S4tuJ0Erbv;/;AHk~+.s_+8qBj3BHk+zt0+`="vLqTg=]Zlt vt0w:GUJaG
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 34 6e 0d 18 27 80 20 0e 20 b8 7a a8 67 50 84 73 77 0e 30 cc 2a 9a da b6 45 bc e1 62 1d 7c 94 53 ce 13 ac e5 49 89 c3 1c 7f 80 d9 33 f8 9e 88 73 0f cf 9b 15 06 cf 06 61 a9 a4 3b de a6 0e e6 fc 12 1a 29 61 e2 3a fd 31 21 10 e1 dc 8f e9 60 1e 93 e9 dc 0b 97 af ae f1 a6 27 d2 95 4c f7 24 3b 6d 68 23 96 3c 56 38 e6 4e 9d fd 73 be 73 8f 2c 5a 98 3d 83 1b 11 e7 be 4c 27 21 1b 32 e6 49 22 08 d9 41 09 af b1 0a 23 0e 20 d8 f5 55 87 f4 0c 52 9d 7b 62 7d 16 c1 ee ef bb 82 b7 3c a1 2e 33 e8 8f 8d e8 62 74 a5 30 2b f6 1e ea 81 63 3f 0e 89 a4 04 2e 25 e2 2d c7 8e c1 9b ad fe 60 e2 30 c7 7e e8 08 f5 0c 32 9d bb a3 af 16 c1 00 6c 0c 78 cb ed 5c 25 a7 18 bb bd e9 b0 56 1c 7e 37 ce 8b 22 3d 83 cc f9 d6 f8 77 23 82 0f 34 3c e9 9a 39 b0 73 38 79 8a 39 f7 25 c3 cc 9b 3c a1 9e Data Ascii: 4n' zgPsw0*Eb\|SI3sa;)a:1!`'L$;mh#<V8Nss,Z=L'!2I"A# UR{b}<.3bt0+c?.%-`0~2lx\%V~7"=w#4<9s8y9%<
2024-04-19 14:07:02 UTC	549	IN	Data Raw: 5a 9e 3e 39 86 e0 29 49 86 77 f6 5e ce 6b 99 d2 59 8e 5f ad c1 b9 a7 b6 15 b1 d3 32 b3 47 ae f8 c5 9c 07 b3 7c ef a9 77 8d d0 fb a2 cc 26 b1 d3 32 33 91 57 ff 1b 16 dd 03 5d 6e d8 d3 73 10 3a 25 49 1b 7c cc 21 ce ab 99 35 bc 6f 0e c9 d3 73 90 39 25 49 93 b7 b5 55 ce cb 69 65 2a 98 df 34 db 49 61 91 d3 32 b3 e1 a9 6e d3 79 3b b7 b9 29 a0 35 9a e0 61 24 4e c7 d7 e4 ff e9 bc 9f f6 ce da 2f 58 5a 28 d0 b9 6d 76 41 5f e5 ca 41 e6 4e 9d db a9 60 ce 66 b3 d8 fd 7d 27 cf b9 93 a8 47 88 73 e5 22 c3 b2 27 13 58 ef 39 b7 c9 f7 f8 dc 5f 81 2b 23 e9 e4 a9 a3 c4 7a cb b9 4d 7a 2f 53 3b 8b 2b 2f f9 f5 a6 3a 2c af d6 37 3d 07 2d 3f e4 76 9f c4 95 9f cc 9b 3a 77 ff d4 e7 85 ae e9 39 e8 f8 8f 07 f5 47 04 57 9e 32 7b e4 d8 fd 53 97 e3 4f 63 36 cb 71 6e 93 c5 7f eb ca 57 e6 Data Ascii: Z>9)Iw^kY_2G\|w&23W]ns:%I\|!5os9%IUie*4Ia2ny;)5a$N/XZ(mvA_AN`f}'Gs"'X9_+#zMz/S;+/:,7=-?v:w9GW2{SOc6qnW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.6	50142	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	506	OUT	GET /LPje8jSAa7MHJt4xaJUXn-aYy7LfFyKbc0HJuuf3c5__k7_9DbOJkwlVHvrdQ--kDvYp=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:02 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 23302 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:06:58 GMT Expires: Sat, 20 Apr 2024 14:06:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 4 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:02 UTC	724	IN	Data Raw: 52 49 46 46 fe 5a 00 00 57 45 42 50 56 50 38 4c f1 5a 00 00 2f ff c0 3f 00 09 89 6d 1b 09 92 84 1a 69 eb d6 b3 9f 7f c2 55 d3 3f 21 44 f4 7f 02 00 05 f0 19 27 e0 04 58 40 a2 56 31 0e e1 ce 16 1e 3f 51 4e de f4 18 14 ba 3d 62 e4 09 01 b4 ea 0c c4 2c 14 33 39 00 45 88 cc f4 57 0e 3b d1 06 90 3d 49 4e 20 d1 6e d5 27 76 d7 72 8e d8 32 fd 95 a7 54 c5 bd 99 fd 1f 50 d7 1b a5 32 d8 d8 3c 28 25 09 0f 3b eb e7 6f 94 2a ef b4 bf 2a ab 94 07 cc c3 a7 03 e3 b2 aa fe 01 bf 91 ed be e9 a6 6a b1 aa 0a ae ab 2e 40 f0 7b df 4c 47 b4 8a b3 e7 de a2 00 bf 61 ab 08 5f b8 1f b4 4a 5d c0 2c dd 0d 5e 55 17 90 39 a2 0f dc 00 55 c5 63 ac aa 25 0e a0 a1 00 fa be 6f 40 f1 71 03 1a ec 76 22 6f cc 2d e8 92 83 7b 4b 86 b8 07 b3 1d 3b b3 08 82 2f e0 8a 12 e4 85 a0 11 89 f2 7d 43 14 d5 Data Ascii: RIFFZWEBPVP8LZ/?miU?!D'X@V1?QN=b,39EW;=IN n'vr2TP2<(%;o**j.@{LGa_J],^U9Uc%o@qv"o-{K;/}C
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 97 77 b6 73 c6 0b 7a 6d 6d db b6 6d db b6 f6 76 e7 f9 ef de 3b 0b b4 d6 fa 5a e7 3c 07 02 7a ec c1 ac ac 46 8a 05 95 0c 75 15 69 82 63 41 97 da fb 55 76 e1 62 8b 66 27 aa 0a ab 16 34 d6 95 d9 71 a1 a3 66 46 f3 62 b2 4e cc b4 6d e3 8e 3f e0 7d 21 c8 b6 d9 4e 74 7f b9 c5 04 d8 91 fe 5f 91 bd e5 8f bb c3 8b 46 90 41 e6 9a b9 43 6c 6b 70 c8 60 01 ba 09 cb 1c 32 77 77 8d 88 dc dd 1d 6e 4f cf 39 3d 2c e0 b3 01 c2 6f 9d 6a e4 ac a0 91 a9 a9 53 f5 ca 5d c1 54 4d d4 78 48 e6 f2 8b d8 41 57 67 9d 53 e5 dc fa c5 48 fa 16 da cb 98 98 22 a5 c8 86 c0 95 24 c9 a6 55 f5 6c 7e bd fd ef cc b6 d9 6e 63 db 56 95 7b 71 0f dd e9 c0 1d 3a a0 00 a7 15 aa 81 4c 3b 70 97 d8 dd 21 72 e7 c6 04 fc df fe ff c0 7f a3 f8 af f0 5f 43 74 f4 3f f4 df f1 5f 33 fe 6b fd 57 fe 97 fe 8b 72 e4 Data Ascii: wszmmmv;Z<zFuicAUvbf'4qfFbNm?}!Nt_FAClkp`2wwnO9=,ojS]TMxHAWgSH"$Ul~ncV{q:L;p!r_Ct?_3kWr
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 39 8f 3c de 73 cb af b8 47 eb a5 a3 51 44 10 21 25 19 36 4b d6 c8 35 d6 b0 64 8d 73 1f e7 b0 d4 5e e6 b9 56 cd 32 cf b5 6a 96 79 26 7b 99 d6 5e b3 4c 6b ac 61 c9 65 c9 1a 36 8b 8d 88 ec 88 10 41 87 ae f6 8e ea af a7 2f fe fd 18 cf f3 90 35 72 59 a4 0f 16 1d 4b 47 db c3 6b 5b 36 82 70 59 7f 8f af 51 1d e7 7d 56 94 0f 67 1a a9 14 8f c8 ed fd 25 ef 5d d5 14 81 10 22 64 86 94 23 05 d6 a8 32 6b 50 18 55 46 ca cc a5 94 4c 2b 0d 99 56 1a 32 2d 46 ce 62 e4 48 28 8c aa fd 64 d6 a0 ca 4c 64 1a 1b 42 8b 10 82 6a 75 37 6b ab f2 6f b3 cf c1 c9 cc 24 f3 da 65 dd d5 76 77 cf d7 3d c7 f4 da b4 3e b2 73 0e ec ee e6 5d f9 e0 4a 23 8b e7 61 74 8c f7 41 75 85 70 d9 12 36 56 1a 63 19 ab 18 95 63 31 97 a1 12 ce dc ec 69 9a 61 f2 98 19 c7 64 ce 8c 63 32 67 c6 31 99 2a bc cb ac Data Ascii: 9<sGQD!%6K5ds^V2jy&{^Lkae6A/5rYKGk[6pYQ}Vg%]"d#2kPUFL+V2-FbH(dLdBju7ko$evw=>s]J#atAup6Vcc1iadc2g1*
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: d6 db 0f d9 ae 46 44 a1 0e d8 e5 52 ce 4a 4b d2 22 5a f5 bb ef 87 10 63 ad e9 1f 87 6c a1 83 54 b0 17 fb 60 27 4c 44 68 f4 4f 2c 3f b9 8d 2d 7d f6 a7 a1 ca c8 52 aa e6 92 05 a5 7c 70 73 b9 d9 ae 6c 96 cb cd 72 b9 59 2e 37 cb e5 66 bb b2 d9 5c 8f be b8 39 ab ca 2c 6a 95 91 35 94 e8 60 8b 67 4b d2 46 13 11 9a b4 c2 48 45 99 46 64 a4 0e e2 08 ef 3b f3 dd 5d a5 8f 0e 44 e5 8e 5a ec 6b b2 42 2b 11 a9 5d 56 fe 86 b0 b1 e7 67 d6 c6 ac 2c 0b 8a 72 33 6e 6c 5e 2e 2b 5f d8 54 fe 4a 5b 9c f1 2b 6d 71 c6 af b4 c5 19 bf d2 16 67 bc b0 a9 7c b9 7c 6a 97 db 8d ad a0 58 cc 5a 35 0f 73 77 e4 88 e1 bd 45 fc d9 86 17 32 ba 5b 88 e2 2d 7d e5 34 94 ca 61 08 19 ad 1d ac 3a 22 08 22 ad 71 aa 5a 24 16 21 88 f0 d3 8d 94 5f e4 31 0c d4 2a 0a e5 5f 18 2e 37 cf 11 6c 87 e7 f8 14 db Data Ascii: FDRJK"ZclT`'LDhO,?-}R\|pslrY.7f\9,j5`gKFHEFd;]DZkB+]Vg,r3nl^.+_TJ[+mqg\|\|jXZ5swE2[-}4a:""qZ$!_1*_.7l
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 79 94 8a 26 53 6e fd 95 72 e6 53 28 a3 d6 5e ec 4b 49 46 de ba 19 04 9d dd eb e7 9e e6 81 e0 75 71 59 14 a3 62 d8 62 fa 4f 22 56 4b af 39 c7 ae 5c df 2e 82 e3 f0 8a fb 70 e4 6c d9 68 97 79 63 2c 19 6b f7 ec 9d da 3d c3 e8 38 f3 30 7f 7a fb ba 1f dc 1d d1 41 a8 e8 70 d9 c2 65 0b 97 2d 5c b6 80 8a 0e 42 45 07 65 fb ba 1f e6 4f ff 5b 6e c1 8a e1 19 a6 93 67 21 59 79 ed 6a b7 f0 16 5e 2a bd a2 da 73 bb 16 50 73 29 bc 3a 32 f4 4f 7e 1d a1 9e b9 ca bc f6 62 93 46 18 8e fa b3 25 9e 02 e1 72 b8 9a 32 05 0c f6 17 67 6e 0b cf cc f0 3e 8e a8 7b e8 0a dd a1 03 1d 3a 82 08 1d 41 84 8e 20 42 47 10 a1 23 e8 d0 81 0e 1d dc ef a1 8f 23 aa c2 fb b9 c5 bf 67 a6 ee 75 ca f2 22 61 7e 28 20 4c db 56 ac ea 0e 3b 09 ed b2 26 8b ed 68 b6 08 a8 89 72 75 b3 bd e2 9b ba 57 fd bc 7a Data Ascii: y&SnrS(^KIFuqYbbO"VK9\.plhyc,k=80zApe-\BEeO[ng!Yyj^*sPs):2O~bF%r2gn>{:A BG##gu"a~( LV;&hruWz
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 26 b5 46 79 bd 04 e5 bd fb 5c e4 fb d3 e7 fa 66 4f b3 3e d9 d3 ac 4f f6 34 eb 93 3d cd fa 64 3f 7c ae 6f eb 37 c4 8a a8 df 10 a2 bc 34 fe 68 3a 0e d1 8a 15 78 d7 aa af 35 ec 96 91 3b 32 96 d6 11 d1 47 5b f7 d8 c4 6f 5a 55 9f 6b 8c 8b 74 19 6c c7 e1 70 35 ad 71 5a eb 29 84 28 d7 83 84 3c 27 e4 4a 0a 8b 80 08 d1 88 e4 d5 c4 d1 15 25 b6 52 74 ad 1c 23 e7 9e 47 9a 0f 2a 96 4c 2a 96 4c 2a 96 4c 2a 96 4c 1c 69 3e e6 67 3e 73 54 a6 7a 96 8a 12 db d1 f5 09 a9 9b 88 10 2e a2 82 b6 6a 99 29 97 61 17 22 23 11 42 df e5 b1 85 af a4 72 59 3e 9e 24 6b 1c bb ad 44 47 53 2d 90 21 ad 31 ea c2 c8 9a 54 10 25 44 0b a1 b3 25 f5 59 1c a1 1e c7 94 51 25 3d f2 f1 c0 9c aa 94 2c cb f5 e5 fa 72 7d b9 be 28 59 b5 4a e5 9c b6 87 4c 8f 47 54 e5 31 ad 50 9f 45 e9 ea d5 9d 22 44 07 0e Data Ascii: &Fy\fO>O4=d?\|o74h:x5;2G[oZUktlp5qZ)(<'J%Rt#GLLLLi>g>sTz.j)a"#BrY>$kDGS-!1T%D%YQ%=,r}(YJLGT1PE"D
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 90 73 48 43 0e b7 ff 89 cb 10 9e 81 e7 de 91 f7 56 e3 6d f6 9c 3f e4 cb ed 62 55 99 6b 65 c4 33 df 87 68 9f 0c 94 9e 6b 55 66 e6 60 8c 9c 6a 87 a8 e8 a0 7f c4 4b 1d 8f 3a 72 a7 28 ff e4 af 8a ed 07 ee 74 fd e8 ce 35 a5 89 f2 4f a6 24 59 99 72 51 59 aa 52 55 a9 4a 6b 2d 55 e5 a8 52 95 aa 4a 55 5a b9 e4 da ad 69 24 52 7e e0 66 69 f5 39 fd fb 73 ff f1 d3 da 08 cf ed 69 c3 e6 66 99 1e 69 46 76 95 38 9a 46 1c 81 2a 16 56 e5 be 08 57 5b 1c fa 58 f3 51 1e 7b 4a 1f 0c 92 03 0e 79 66 76 7e fa 6f 6f 5b 50 ee 3e 98 57 32 8b cc b1 56 8c 5a 35 57 05 8c 38 e3 61 18 51 31 b1 7f 9d 86 61 c4 19 0f c3 88 0a 56 cd 25 7e 99 2a 6b 40 e6 9f 1b 09 e1 13 a7 cb 1f 53 ff 1c 5e a3 78 6e 65 bb b2 51 94 5a 73 cb 99 db d2 41 45 36 51 21 d6 5c cb 9c 95 94 e8 2b e5 fd 69 0a f6 ca 52 6e Data Ascii: sHCVm?bUke3hkUf`jK:r(t5O$YrQYRUJk-URJUZi$R~fi9sifiFv8FVW[XQ{Jyfv~oo[P>W2VZ5W8aQ1aV%~k@S^xneQZsAE6Q!\+iRn
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 9a 44 74 77 6b 62 23 43 5a 14 a5 a6 07 33 1f 73 66 96 0a 2c 21 4a 94 10 dd 41 08 b4 b0 75 e8 08 5b 87 16 02 2d 04 c1 21 38 88 8e 77 61 95 f1 c8 87 95 35 2b a7 52 43 b1 c9 8e 08 11 ad 0b 1d fb 57 4c ab 8e 91 35 a4 74 59 bc 63 69 3d 7a dc 09 f1 11 c7 fb 24 3b 03 87 8f d6 58 52 88 f7 f4 ee 6e dd 21 08 04 d6 28 92 65 a6 ac 95 54 96 22 94 10 1d 2e a3 c3 65 b4 9b 99 46 36 3f 69 64 fb 27 03 41 07 42 8b 26 b0 4a 3d 4c f9 50 d2 a3 a4 3a 8d 4d 0a 1d 81 d6 9a f9 15 b3 ab 58 8c 74 bd 88 e9 75 ef 57 f5 37 1d 17 a1 0f 1e ee e3 2b 4c 97 79 91 c6 c1 f4 7d f6 c1 dd 3b 84 a6 db d2 46 19 c5 54 e7 5c 66 ca 29 02 07 11 ba 43 6f b4 8c 5e 49 67 f4 73 11 8b f5 d4 5b bd ac d0 5b bd ac d0 b1 58 4f 1d 8b 95 f8 61 25 1d 6d 1b ed 32 02 a1 a2 cc b4 ab 34 96 a9 4e 43 8a 95 3a ba 31 95 Data Ascii: Dtwkb#CZ3sf,!JAu[-!8wa5+RCWL5tYci=z$;XRn!(eT".eF6?id'AB&J=LP:MXtuW7+Ly};FT\f)Co^Igs[[XOa%m24NC:1
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 99 de 38 8a a8 f9 fa 4c 1e 52 4b fe 87 80 57 2a a8 e8 38 f2 c8 a3 0e cf f3 50 af fb 3f d6 ea f2 f3 9e 72 f2 33 67 d4 17 fe 33 a3 be f0 9f bf 23 77 7e de 6f f9 56 7f fa af 7b 8d 23 aa 38 8e 43 04 5c b1 a0 22 e4 43 93 ba d3 29 54 cc 1a 88 24 b7 1f b2 5d 0d ca b4 72 57 55 2c 68 81 32 67 c6 a8 ac aa 68 ff f6 ee 0a d7 8b 5a f3 51 ec cb ed 16 a5 33 c6 96 15 1d 35 ea 28 b3 24 ae 52 32 12 74 ad 3a d2 30 de 72 fc fe 4d 44 cc 3d f9 ac fa f1 47 7e d6 69 9e 52 9d e6 29 1d df 3f 16 9f c7 f1 23 cd cf 6d 9b f3 6f 3d 7d a7 37 77 8d 04 7d 0e 8d eb 1d 9c 98 6a 54 15 8a 78 b6 24 6d 04 51 41 9a 8f 5c 06 32 b2 31 d5 61 3c 94 dd af e8 8e 0e 21 ca ce 94 ec 2b a9 d0 1a cb 6f 8c 4f 1b 99 ef d3 52 dd 42 4b 1f c6 ff 40 bf 5f e4 fb e0 f7 f9 3c 3c a7 59 2b ac d6 71 84 03 0e 0e 38 38 Data Ascii: 8LRKW*8P?r3g3#w~oV{#8C\"C)T$]rWU,h2ghZQ35($R2t:0rMD=G~iR)?#mo=}7w}jTx$mQA\21a<!+oORBK@_<<Y+q88
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: f9 b3 f5 2b eb fc 8b f4 df 79 23 e0 fb 1b eb 77 ef c3 7b 7e 80 55 83 8d af b4 bf a2 ad b7 36 50 ae 6e 36 db 33 7f aa 0c ee 9c ae 26 12 c5 c8 91 f9 fc 8a 8c 46 4d c0 90 0b 76 a4 e9 21 f1 30 25 1e a6 34 b1 4b 94 61 34 b5 db 57 ec 41 96 bb fb 60 f9 60 f9 db 33 77 55 c5 f3 06 d2 2e 60 b3 d5 7c 7f d6 6f b9 5d 3a fc 8e 6f f3 9d f2 d3 ed c2 50 19 2f d1 23 b6 e0 ae 88 66 fe 5f 32 e0 41 50 2a 2a a0 a2 02 2a 2a 28 0f 2b e0 81 ef 36 44 a1 bb bd b7 6d d3 dc ad 90 48 e9 ea 11 2d cd e9 69 62 b3 b9 ba ea 02 67 4b cb e2 f2 4b 57 a5 df a7 c3 e1 e6 b2 63 55 98 de 19 e8 6e e2 27 bc 21 1c d3 88 b3 11 32 ba 09 a9 9b 90 ba 21 38 c0 24 8c a6 36 74 eb 9e b6 8c 9c e3 a5 94 61 20 83 8e e3 78 3f c7 ce 3d 97 d6 17 77 e6 fd 4e a8 a5 66 84 3d 8f 32 75 7a fa e8 c0 aa 11 19 44 47 5f 46 Data Ascii: +y#w{~U6Pn63&FMv!0%4Ka4WA``3wU.`\|o]:oP/#f_2AP****(+6DmH-ibgKKWcUn'!2!8$6ta x?=wNf=2uzDG_F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.6	50138	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	504	OUT	GET /EQ8s_EFKWDgDQxwE_eseKUq-jCsYiR9gOVzV1RSpJBFgmkqSgSH4-w8IyTW-FuYliQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:02 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4932 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:17:16 GMT Expires: Sat, 20 Apr 2024 11:17:16 GMT Cache-Control: public, max-age=86400, no-transform Age: 10186 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:02 UTC	721	IN	Data Raw: 52 49 46 46 3c 13 00 00 57 45 42 50 56 50 38 4c 30 13 00 00 2f ff c0 3f 00 09 87 8d 24 49 8d 76 a6 f1 37 ce 3f 62 c4 32 12 01 44 f4 7f 02 e6 09 25 e9 cb 67 a2 46 92 e8 b6 d3 cc 8c 2b 8f 9d bf 6e d3 69 70 17 5a 86 94 85 cb ca b6 97 0d d1 6a ad d1 d6 4b 34 97 ef f1 a5 24 99 ad 92 4e 82 bb 7c 6b 22 65 7d dc 45 b4 60 ca bd e0 f2 b7 05 4c 59 b8 0b 2d b3 80 1d d9 b6 69 ab 9f 6d 7b 07 f0 fc c5 fc a3 b2 16 ea be 00 dc 46 92 a4 48 79 7c 22 3f ff c4 88 e7 bf 49 6f 01 83 e8 36 92 24 45 ca 88 17 f1 98 a1 e3 a5 f7 df a2 35 61 4d e8 ff 04 e0 3f dc 1c 3e ab 86 4d fd bb fe dd fb d5 43 4c f4 43 7b 7d 5f aa b0 68 00 f3 a5 cf b5 6e 3a fa 97 db 72 f9 7e b2 54 6d 2e 1d 7f 26 fd 66 9a 37 fb cf c3 ff 77 df 77 f2 e0 a8 6a 1e b5 41 72 5d 33 48 93 ee 43 61 40 b3 43 36 89 d1 44 c8 Data Ascii: RIFF<WEBPVP8L0/?$Iv7?b2D%gF+nipZjK4$N\|k"e}E`LY-im{FHy\|"?Io6$E5aM?>MCLC{}_hn:r~Tm.&f7wwjAr]3HCa@C6D
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 3a 93 0c 19 5e 19 21 1d a5 45 c1 1b 46 28 98 e9 cd 24 88 f4 b4 51 77 e2 b1 6f 7d b5 ce 35 18 c5 07 00 53 c9 3d ec e8 b1 6f ff 64 76 33 55 af 98 92 f0 b5 38 92 7d e0 be 51 f1 17 79 de f1 d8 4f ae ae df 45 a4 47 0f 89 66 b9 5b a3 bd c0 2f 00 00 0f 10 1c 78 25 8e cb ac 36 df d7 7c b3 79 10 4c 01 de a8 2b 17 12 f0 a0 51 3f b8 5e 59 62 77 1f bd d2 be 42 d2 c3 77 70 5c fc 10 01 c0 53 c6 33 1f 8e 8b 3b d9 03 10 12 38 66 3a c5 f4 8d 03 40 28 ee a4 ac 30 cc 73 e4 3a f8 01 00 00 a4 03 b8 2f 4e 26 99 22 32 9a 24 02 00 02 e1 91 fb 81 8b 44 fe 00 21 ba 0d a1 e4 ca f5 d6 07 9b c5 7f 39 4f 8e 9b e8 fc ea b3 46 7b f4 b2 bd 6e 59 5d 58 d9 82 27 7b 61 db 5d 67 bd 0e 56 98 9f 5e fa f8 58 17 2f 6d f2 a8 88 4e 2b 6d 6e 5a 6d 6f 43 cb ad 4e 49 a2 61 11 f8 2a 9f 6e ab 3d b1 33 Data Ascii: :^!EF($Qwo}5S=odv3U8}QyOEGf[/x%6\|yL+Q?^YbwBwp\S3;8f:@(0s:/N&"2$D!9OF{nY]X'{a]gV^X/mN+mnZmoCNIa*n=3
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 53 f1 47 40 f4 77 65 ba f0 da e1 c7 44 44 f3 00 94 60 3c fa cd fb d8 f2 99 27 e3 9b f1 19 d3 3b b3 a6 99 6d 87 57 d5 1a 1d eb f7 63 53 83 1c 82 2c 51 e7 b0 71 8f 5f 5a ba d5 2f 83 ff ae db f0 c4 9d 8d 2e 46 af ff 59 a5 a4 14 e5 e6 ab 9e b8 1e 6b ba fd 9c c6 25 81 b2 54 52 b1 77 bd e3 1d 2a a1 6f 6d 8b f8 20 dd 3e ff 92 48 25 d3 a2 4d a0 b6 ca 93 ad 6c 7c a9 06 a6 6c f2 a0 49 6e 1d ce 91 3c 14 a9 0f dd 02 b6 dc 69 cd fb 0f a7 af d2 89 65 e3 35 9f 70 10 ed b8 63 20 11 00 9c bc 91 83 97 7a fc 97 c4 1c 70 b4 89 bc 7e f7 fb ef 26 a8 da eb c6 db 47 bd f8 ce b1 37 5f 6f b0 5e d6 b7 f3 c6 5d 0f df 51 9d 2a 9b 3a 20 5e c7 ea 8f 4e 11 d1 43 5e fa e0 ca 59 76 c7 75 56 ae 92 e3 5e 5d 15 18 7d 8f 08 6e cb 8e 71 bb ae 14 5c 60 42 91 6b f9 e2 9f 7f 42 b7 c6 27 4f fd 5f Data Ascii: SG@weDD`<';mWcS,Qq_Z/.FYk%TRwom >H%Ml\|lIn<ie5pc zp~&G7_o^]Q: ^NC^YvuV^]}nq\`BkB'O_
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 79 f2 99 95 60 d0 39 f8 04 80 21 a9 f5 3f c7 56 83 75 17 92 24 1c 41 17 9f 99 82 09 17 f8 cc 67 86 84 a4 af 01 d3 00 ed b9 cd a6 00 1b c0 e4 dd 76 ea 4c e1 31 a5 1b 52 d2 1c 5a fb 8c 98 82 2e 6e 08 1c f3 af a0 42 05 80 66 68 4c 32 80 24 82 7f c3 fb 17 37 84 8f 06 e2 a2 03 95 fc 83 df d4 10 ab 9e 90 66 82 74 22 12 57 31 05 04 5f ef 9d b8 11 d6 ac 44 76 bb 69 15 b9 c9 5d 3a e9 10 09 91 00 48 ee 8e eb f2 89 db 36 a3 84 d8 6e 1f f1 17 9b 50 e4 be 8f 0d 94 10 dc ee 25 31 e3 c3 12 81 e9 2d 0b 1b 02 b7 dc 8a e0 8c 51 35 13 1b 4c 68 95 f9 ca fa f2 f6 bf bb 02 3a 79 16 3f 22 fb df b7 ff fc be 64 a4 ea a4 c4 be 0c 53 e0 06 c0 bb a9 37 3d ae eb 1e 22 07 03 ca c2 86 48 5f 78 f4 2f 57 81 1d 00 54 a6 ba 27 24 e7 13 18 59 16 e4 38 cd 33 23 27 c7 a9 78 16 eb 55 00 ac 43 Data Ascii: y`9!?Vu$AgvL1RZ.nBfhL2$7ft"W1_Dvi]:H6nP%1-Q5Lh:y?"dS7="H_x/WT'$Y83#'xUC
2024-04-19 14:07:02 UTC	446	IN	Data Raw: 78 71 73 20 19 12 ca 2a 38 2f bb 3e 01 72 92 f1 bc d3 36 38 d5 46 99 c7 c1 62 0c 5e 0a 5d c7 79 4e 40 53 7f b7 34 61 d1 9d b2 ed 9c 35 dc 2a e4 47 62 17 1e 7c 4a e9 3a 63 25 e4 85 87 c9 08 8b 24 3a cc 2d c1 5e 08 25 38 4f 3b 65 7a 26 4a 3f 73 80 89 16 f2 ba b3 84 06 45 e8 14 cb 3b db 40 16 c2 21 38 ac 38 67 d5 cf 58 29 49 42 36 84 a6 24 3a b2 67 b3 d2 ee 28 14 ab bd c5 42 e3 a7 68 74 d5 af 80 7d 4f 22 c2 65 4d 99 b2 07 70 0a 51 2e e7 f6 a9 be 00 7b 2c 61 31 fe bd 7b e0 cb 95 43 34 14 c6 a6 69 ed 65 69 0d c6 b4 96 f6 25 01 87 31 02 b2 5a fa fe 8b 73 75 c1 8c ed f3 6e af fb 54 3f d0 d0 f4 af fe d4 1c 17 c6 79 e5 e0 ec f6 d9 8b 6c de fe d3 5e f1 ce 08 36 c0 d9 cb 5f a9 c0 e6 fb bf 1a 57 56 47 64 0e 51 bf 2b d9 eb 65 5b f1 a8 73 ef 25 d7 0e 40 be cf 52 00 bd Data Ascii: xqs 8/>r68Fb^]yN@S4a5Gb\|J:c%$:-^%8O;ez&J?sE;@!88gX)IB6$:g(Bht}O"eMpQ.{,a1{C4iei%1ZsunT?yl^6_WVGdQ+e[s%@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.6	50141	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	505	OUT	GET /N_m_Czcw6IVn4NDaN8M7wmmLEBYu72cnfcYpHkTrF2BGC7tQuAypLtMbicKU4GqIst8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:02 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1842 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:06:58 GMT Expires: Sat, 20 Apr 2024 14:06:58 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:02 UTC	725	IN	Data Raw: 52 49 46 46 2a 07 00 00 57 45 42 50 56 50 38 4c 1d 07 00 00 2f ff c0 3f 00 85 3d e8 ff df b5 6d 3e 7f 25 e9 de 7b 0f dc bd 77 ab d1 dd aa bb a5 7f 85 6a e1 4e dc a9 6c 65 ef 04 75 e2 89 17 78 72 99 5a 3d 8d ab 3e 80 c1 fc 8c 46 cc 85 13 e6 20 1e c8 e4 cc 19 72 87 25 dc 9f 6a a4 f4 d3 25 ff f8 fe f8 7e be df 6e 47 f4 7f 02 e8 92 ff 2f f9 5f 4d 97 0a f3 c9 18 8e fd ce d3 0a 6b 7f 74 47 e4 ac d6 ac 94 b2 33 71 c4 60 bf cb 01 02 df 3a aa 17 d5 e3 69 23 8c 83 f7 bb df 07 76 fe bd da 2d 17 e6 93 31 1c f3 5f f5 c5 e7 40 13 1f 55 ab 95 4a 6e 2e 81 18 ec 77 39 40 9e 1e 53 71 aa c7 d3 46 04 07 7d bd ef 03 79 e7 54 63 b9 30 3f 7b 08 c7 fc 57 39 2f 07 2e 7f c5 de 4a 25 37 97 08 63 e8 ce 2b 1d c0 75 91 a9 ba 31 f4 8b 2f 82 22 ee e3 e8 d8 8f 41 29 3b 17 d9 e9 07 ae 9f Data Ascii: RIFF*WEBPVP8L/?=m>%{wjNleuxrZ=>F r%j%~nG/_MktG3q`:i#v-1_@UJn.w9@SqF}yTc0?{W9/.J%7c+u1/"A);
2024-04-19 14:07:02 UTC	1117	IN	Data Raw: b2 b7 a2 bd cf 75 95 6f 10 31 66 a4 f2 25 93 9a 7c a7 12 b5 ad ef f7 0f 62 38 9e 4c e7 2a 26 c9 36 ae 20 cf 69 75 df 11 1c c3 70 62 36 73 bc 5a 27 e9 67 f8 7b 46 c7 06 6f 00 31 62 cc 65 0b 35 62 38 cf db 0f 8e 12 ff bc 6d 23 15 64 ed 67 a4 7b 29 ed 7b 5a fb e8 ff 65 30 4b b9 74 32 8e 38 e8 ef 6b af ea 51 f1 a8 11 43 0c f9 3c 4e 07 58 9e d5 a1 bd 20 34 a1 7a d5 e3 99 23 47 04 2d 82 e0 19 e5 5a 2a cc 27 e3 88 81 01 f7 fb 60 ed 82 18 10 7d 41 91 a6 a7 42 de de 36 68 f8 1b 85 8c 8a fa 21 29 d1 03 20 7c b7 88 77 0b ea 26 25 ea 04 1b 96 05 80 c0 37 6d 8e 66 49 89 76 80 1d 5b ec 37 91 a7 c6 2b 47 0d ec f9 40 e3 1e 8b 8c 7b 3f df 88 3a a9 53 c4 26 50 6e d8 9a b5 7c d4 82 a9 50 b7 d9 a5 45 14 51 5d d9 ba ec 02 0f 08 33 95 ed e7 b6 81 b2 ae 98 85 c7 0f 87 c3 db 6e Data Ascii: uo1f%\|b8L&6 iupb6sZ'g{Fo1be5b8m#dg{){Ze0Kt28kQC<NX 4z#G-Z'`}AB6h!) \|w&%7mfIv[7+G@{?:S&Pn\|PEQ]3n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.6	50143	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	504	OUT	GET /8cT0Y4kkdFuywFo8SxjC7Kv6I3fl2vUitoT9WDDlpZ4fTlV9oHuOnh8rF26ox1H4Mw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:02 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 48322 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:21:03 GMT Expires: Sat, 20 Apr 2024 10:21:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 13559 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:02 UTC	720	IN	Data Raw: 52 49 46 46 ba bc 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 71 bc 00 00 2f ff c0 3f 10 4d 38 6c 80 36 6c 84 4d 09 23 ff 5f dc 34 6d b7 1d 10 d1 ff 09 00 1a 80 6d 49 c3 b6 6c 0f 7b e8 00 40 12 dd 89 6d 1f 92 e4 11 db 1a b1 92 84 64 b7 13 d9 49 24 1d d6 b0 95 c4 4e 12 b2 6c 7b 61 1f 4a 62 c7 49 86 ed c4 fc 2c 92 93 4f f1 39 5a a4 16 4e 9c 44 52 e2 61 5b 49 16 de 4e 44 db 92 e4 67 43 ef f2 02 7f 91 24 b8 2e 36 97 68 fe 49 00 13 3f cd eb e6 ba aa 58 7c bd 16 b5 57 64 6d 90 c5 35 5e e7 c3 c5 eb 7a 68 f7 56 dd 2a 92 38 61 45 dc 21 9e 9d d8 e4 c3 e0 f7 f6 6b 13 2f ce 09 cc 02 d7 20 2f 08 9e 48 a2 8a 0f 16 b7 fb 89 fd 5e e0 a9 89 ee 5e 40 8e 24 d9 55 94 f1 fc 37 f2 07 67 d8 45 eb db 88 2f 02 03 dc b6 8d 24 49 32 6b f7 3e Data Ascii: RIFFWEBPVP8XVP8Lq/?M8l6lM#_4mmIl{@mdI$Nl{aJbI,O9ZNDRa[INDgC$.6hI?X\|Wdm5^zhV*8aE!k/ /H^^@$U7gE/$I2k>
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 3c c4 38 76 59 8e 6c c0 fd 90 d3 e1 2b 02 0b 70 eb 23 e8 04 04 6f be 1b ae 55 d3 10 de 0d 86 37 95 3b d7 50 e8 2e 66 58 1d 39 39 57 ba 01 7d 8b 37 7c 8c a1 c6 85 d4 c1 8e 44 48 e1 3b 92 6d d5 b6 6d db f2 c8 63 a2 06 73 2e 66 46 fd ff 97 02 cc 8a cc 35 4a f2 5c db b6 6a db 92 6d 95 d2 fa 9c eb a0 31 a9 c0 66 2a 30 5b e8 48 6a 1a 98 00 6c 1a 58 d8 d2 09 19 2d 9a a3 15 a9 db b6 2d 7f 72 ce 5d 93 bb bf b3 b6 64 d9 87 67 27 39 54 97 ea 90 7e 89 3c 6b bf e3 f7 17 a0 f5 c7 f1 e2 ae 89 63 ee 61 02 78 2d fb 27 c9 91 6d c9 dd 43 59 a7 e7 e1 2b 8c df ff c3 cd 2b 15 ee 3d 4f eb 0b fc f1 c5 8e c5 5a e4 5a 37 46 60 58 53 38 b5 29 f5 14 47 24 ed 08 03 63 e3 3d e6 a6 09 02 8c 40 78 93 bb 77 5c 45 8a 3c 82 c4 48 0a 8c 82 ad 9e d4 c2 41 08 47 37 d1 43 a2 a4 2a 11 0e 22 f9 Data Ascii: <8vYl+p#oU7;P.fX99W}7\|DH;mmcs.fF5J\jm1f0[HjlX--r]dg'9T~<kcax-'mCY++=OZZ7F`XS8)G$c=@xw\E<HAG7C"
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 92 6e b9 28 4e e3 2f ff f9 fb f3 fe a3 fb 4a ff e4 bf cf ec c5 fd 53 72 ca 4f 7e 7f 98 fb d8 b5 4a 9f f4 76 4b 20 dd c7 25 76 cb 42 d8 44 ad c2 5b c6 83 e5 29 b3 e4 11 b2 ad 8f 8d ac 5e 72 bb 64 0a 75 a1 36 97 aa e8 97 4a da a8 e4 38 fe 49 58 f2 62 b7 37 38 bb d1 f4 f7 f8 4d 2f 95 27 e3 92 f3 52 46 54 64 bc dc a0 b0 e9 c6 67 cb 97 9e 1c 37 e5 c0 0f 76 fd 54 97 2c f6 a6 f7 2d c8 9c 79 9b b6 d5 6a af 63 1c f5 52 65 45 21 59 81 a5 dc 5a 16 f5 90 96 74 79 e2 1a ca 7a 07 ad fc b4 16 05 ba a8 a1 a5 6e 3b 49 83 80 4b bb 85 c5 90 f0 4c d9 2f 8b 3c 2c b6 d1 c4 25 aa 90 94 13 81 d9 17 37 3f 6d 4c 04 7f 8f 7f aa aa b7 08 e2 a8 07 7d 04 7f 4b 7f fa 51 bf 75 f3 e7 5f f4 a2 fc 14 9c f6 a3 df 1d 9d b6 2f 3d 34 f5 28 a5 0c 29 4a 1b 4b 82 10 9c d0 bb 9c 9d 99 3e ae b0 4f Data Ascii: n(N/JSrO~JvK %vBD[)^rdu6J8IXb78M/'RFTdg7vT,-yjcReE!YZtyzn;IKL/<,%7?mL}KQu_/=4()JK>O
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: f6 a4 75 4c 75 6c f9 3e 2a b2 5f 2e 37 8d 0c 2e 08 12 ba c8 f4 9b 91 8d 42 7f a1 9c 97 6e d9 5d 8d 8f 4b 9f 4e bc 85 cb 01 0d 60 c7 13 6e a9 70 05 a5 8c 8a f0 62 47 7a 6f 9e 77 65 96 bd 2c 8b 2c f6 cc c3 60 f1 02 a8 4b fe b8 11 3c 97 80 62 fa 96 96 4f 89 11 bc 90 51 13 5d d2 9b e7 5f 7c d1 59 2b 4e 2c f8 cb 09 6d 83 b0 45 7f 9f d6 9c 79 89 7a 9d 82 c9 79 4d 6c 6d c7 25 f0 9c 50 76 8d 7a 42 bb d5 e4 42 b5 0c 55 eb d0 2e d9 88 34 dd 8e 3c 5c bb 91 1d d1 8e bd 40 77 f3 36 e3 50 e3 81 ab 26 ed 2b 2d a7 fc e4 fb 43 17 1a ec 3e 98 f7 c9 b3 2a 53 ab 96 ce b9 43 b0 4e 3c 28 8f 29 0d e8 e4 18 4f 83 a4 e9 75 54 dc c3 78 ed 87 79 7e a7 cc 5d de 2f 77 27 38 66 a7 d3 d0 44 72 d1 ea 0d f2 c1 15 bd 80 a5 fb 7d 3d bb 5e 38 be a5 be de 39 fd c2 4b 50 85 61 2a b4 f6 27 ae Data Ascii: uLul>_.7.Bn]KN`npbGzowe,,`K<bOQ]_\|Y+N,mEyzyMlm%PvzBBU.4<\@w6P&+-C>SCN<()OuTxy~]/w'8fDr}=^89KPa*'
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: ed 3a b6 dc 7b 93 fe e0 e8 98 65 58 06 54 74 87 16 99 2b 65 8b 52 5d 44 cd c8 19 8c 64 bc 6c 63 49 49 85 a2 47 0c 84 6e c6 35 5b 6a 31 b1 97 54 5b 06 05 7b 5a e8 cc 90 be b4 e9 38 f6 1f 4a db 4d 98 b7 1c 93 33 ce 69 6c 69 10 1c 2f ca 80 0a ec 51 28 9b 32 f6 49 b0 c0 d9 7b 1b c9 95 b5 c2 c5 61 6d f4 ab b5 11 90 da a1 c5 97 8b 1d ec eb c7 05 c2 ec fe 1a 77 1b a0 66 c6 b6 57 10 84 6a c0 be bd 3f a8 2a 99 c4 fc fa 66 19 8b 2e 2e ab 20 ad 5b 16 57 c3 27 9f ce 13 1e 15 5d a1 37 10 7f 93 2c 7f 99 7b 29 43 7b 8b 23 d7 65 01 8d 67 42 09 41 66 13 e0 1b b0 39 5d 76 4e 0a 56 f8 9d 28 a8 d6 4f 7b 8d 2e 24 68 e4 92 0b 58 0e 68 05 5c de 5a 02 a1 a0 4f 51 52 88 7c 80 74 2f 13 c3 a8 49 9d e7 fc 69 4c c3 a6 48 4f 06 45 10 06 6b f9 e1 d6 9f a0 96 eb 77 ed 20 f7 43 a9 83 24 Data Ascii: :{eXTt+eR]DdlcIIGn5[j1T[{Z8JM3ili/Q(2I{amwfWj?*f.. [W']7,{)C{#egBAf9]vNV(O{.$hXh\ZOQR\|t/IiLHOEkw C$
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 69 b3 97 49 03 7c ae 72 50 6a cb a2 05 5b c8 8c ca cc 34 b9 d3 92 1c 98 45 91 1b 3f d5 5f 68 3d d6 00 88 0c 6d 5f 98 94 a2 c8 c4 8b 5a 7b 04 05 a1 13 6e 4a b6 fc 1c 87 7a e4 6d 9c e1 45 b9 44 ca af d7 c4 fe 3d 7f b1 6b 5a 64 95 bc 92 2f ae d8 83 6c 71 82 20 77 ee 5f 2e 9b 7e d3 27 9b 06 f8 77 5e e0 71 87 01 2e 55 2e b5 17 2d 8f a6 2c a5 76 2e fb f2 bb 3b 69 75 b6 6f 75 0f da 1a c9 e3 79 e8 e0 37 a1 58 5a 78 74 82 95 43 f6 f5 c7 94 ea 20 f9 84 bf 6c 1e 2e c3 c6 33 87 5a 12 6d 51 c8 a8 90 42 03 91 7e e0 f6 de 85 33 2b 03 da 1a 76 7a 4c 2d 7c 9d 39 65 5d 81 4c c1 b0 90 8e 43 51 30 6e b0 8e 68 e9 bd 94 68 29 53 c5 df ee 05 32 78 b5 ec 17 2f d5 4b f5 67 b6 22 45 28 74 44 28 b7 7a a5 79 d1 ce e3 4f 96 b0 93 32 bc 07 35 90 84 b1 b1 db 1f ea b9 7f 42 8b 56 10 ee Data Ascii: iI\|rPj[4E?_h=m_Z{nJzmED=kZd/lq w_.~'w^q.U.-,v.;iuouy7XZxtC l.3ZmQB~3+vzL-\|9e]LCQ0nhh)S2x/Kg"E(tD(zyO25BV
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 2b 4e 3f 10 d9 1e d8 80 18 21 2c 1c 54 36 b6 d6 d6 ec 4e 7d 29 bf 06 95 d4 ea 55 5d 84 25 97 6e 55 f1 0c 40 f8 89 83 1c b2 26 93 23 c7 9d d1 47 9c e1 0d 20 af 2d 72 ba e0 60 8f 0d 04 27 db 72 4a 5e 0e d9 48 67 e6 b1 02 5e 16 cb 81 a6 ba 62 ba 41 de 01 b9 28 de 0e 2a f5 e5 1d a1 6f 2b 20 97 a5 bc d3 dc 3c ca e7 4d 1b 7b 7e 03 30 f7 93 00 2a 4b f7 71 2f 6c c8 58 5c bf 28 cb 22 12 7a 80 25 c4 31 0d cb fb 22 6c d8 d3 f7 a3 ff c5 3f e4 c7 54 2f af 96 c5 fa a1 f6 03 67 62 0c e4 a1 b3 a5 56 d9 a8 ec 97 3c 14 b8 bf e9 25 16 35 41 10 0c 09 e3 1b 4b 46 cc 5a dd 0e 64 5b 5b c2 cb be 8c 28 94 2d 16 71 08 77 10 5e 0e b9 97 4a 29 24 c4 f6 0b e0 b3 b1 f6 d3 62 69 b1 73 95 8d 59 11 e3 48 5f 2f 84 d4 78 4a 69 81 ad 44 2b c3 22 a9 47 9e 70 f0 d3 1f 1a 19 16 65 63 89 cc a7 Data Ascii: +N?!,T6N})U]%nU@&#G -r`'rJ^Hg^bA(o+ <M{~0Kq/lX\("z%1"l?T/gbV<%5AKFZd[[(-qw^J)$bisYH_/xJiD+"Gpec
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: c2 24 1e 82 fb 0f 9a a6 fb ca 89 25 f3 e8 30 5c 6e ad 2d 79 6c 69 58 fe f0 48 d7 96 a9 c9 39 65 6f 58 28 f3 b9 9f 44 cf 60 b6 3a 6d 81 79 09 65 c6 e3 91 20 3e 81 35 d6 06 27 c1 38 32 e4 9c 13 96 a2 cc 44 8f c2 b2 df 21 ce f3 e9 9d 0b 2f 5c 0e 7f 96 72 d4 c6 32 78 99 ba d2 7a 4e 08 a0 69 4e 52 a7 c1 36 1a 2e 39 57 84 09 6b b5 b0 45 fd 7a 45 58 39 b8 94 67 a6 2c 6d 5a 8e db f7 30 4e 87 65 26 99 43 c2 0c b6 48 ba b8 50 e9 b4 62 b8 ec 97 f6 ab f5 50 84 1a 6f e7 ad 78 23 6c 27 00 a0 92 8f 5f 6e 67 5b 9b f1 35 81 58 fe 51 28 f2 a7 6d 13 85 51 c9 0c ff bd 85 ab 4e bd 25 ba e4 e5 b8 ad 8b 60 68 ae 77 f5 f1 fb 1f 1e fc 9d df 45 4d 76 27 dd 57 a8 b9 3d b4 17 6d 40 1f 43 76 55 95 22 08 fc 4a 71 3e ac 84 99 7f 40 b2 29 cc 66 3b d0 e0 f1 68 2f 5b ce e3 ab 32 07 ff 01 Data Ascii: $%0\n-yliXH9eoX(D`:mye >5'82D!/\r2xzNiNR6.9WkEzEX9g,mZ0Ne&CHPbPox#l'_ng[5XQ(mQN%`hwEMv'W=m@CvU"Jq>@)f;h/[2
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 60 a3 a6 29 64 d8 b4 91 a1 6d 5f b2 20 b0 14 ca 25 cb e7 0a 9c 0c a0 f4 d3 0b c2 6c c1 2c 96 c5 38 8b f7 71 45 d0 29 8f 56 4a 1b e6 9d c4 5b e6 88 f5 43 b9 a8 ac fb 9a 91 d2 c9 39 ee 06 d4 ce ec 50 57 78 f0 b3 17 5f 56 cb b0 70 ce 3b eb a7 fe 80 e3 27 04 1b 07 f3 5d ce dd f2 8d 6d c2 72 0f be 57 2c 7e 21 13 52 3c a3 b8 aa 39 a7 e1 a5 94 23 c6 e8 49 fd 99 65 a1 94 7c 49 e7 4d 36 42 86 9a 68 44 0e 25 53 4d a5 01 78 26 cb a5 62 bf ef a5 dc 99 92 6c e3 1e e4 59 b3 1a eb d2 92 12 7c 2a 17 87 5b 16 5f 6f 84 9d b3 aa 36 b6 a5 b1 d5 99 36 fd aa 0e b7 0c 9c ae 70 ff 87 b7 e7 98 3e 2b 47 ef 9b d1 68 a0 b2 9c 9f b4 a3 c0 7c 1d 36 8e 7c 68 fe b8 c9 d1 e9 20 25 bb 7e e7 ab a6 3d 5a 1d 66 d8 25 51 69 96 a3 48 da d1 bf 24 04 b9 e7 a8 be 8c ad 8d c2 c3 b4 ac b4 fe 86 31 Data Ascii: `)dm_ %l,8qE)VJ[C9PWx_Vp;']mrW,~!R<9#Ie\|IM6BhD%SMx&blY\|*[_o66p>+Gh\|6\|h %~=Zf%QiH$1
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 06 22 de 5e bf 1a 70 ce a2 51 a4 ca 21 2a 7c 42 d6 c7 b6 5f 68 41 3f 8f 09 cd 30 56 1a a0 58 3e bc fb 3a eb 30 2c d8 64 45 81 88 72 5b 96 9f 86 50 16 8c f5 05 97 fe 43 70 d2 f9 b2 67 a8 ba 16 ee f8 e0 66 5c 7b 54 c9 f2 61 13 c9 1e 28 8b d8 d0 65 e9 27 c9 35 f8 24 90 59 1e 16 7f b9 76 86 cd f6 be 7a af 24 d5 1c a8 ab ce b6 f7 ef 1f aa 2a 43 c1 62 70 4e f2 06 2b 97 56 64 2d 2e 4b 63 73 5b 2e 8e 08 d5 13 07 84 96 68 ea 35 46 e6 71 ad f8 a5 45 7b 7c 6a ac 6b e2 f6 68 5c 7a 69 0f 4d 73 96 07 f0 9c e1 04 a7 7c 19 5d c6 1c 65 c6 55 4a 84 dc 48 47 5b 19 0f 65 e2 36 85 2d f3 a6 38 9d 7f 98 20 f6 cb 58 d5 e3 2f 34 70 d6 04 64 aa bb a7 ec ab ba 39 86 ee 74 2c 74 0b 53 42 cc 87 4b f7 a9 a5 42 14 05 02 5f c2 87 7e b3 cc 4b 8b 22 38 39 37 74 f1 39 6e 2e 0c 4b 96 3f 3e Data Ascii: "^pQ!\|B_hA?0VX>:0,dEr[PCpgf\{Ta(e'5$Yvz$CbpN+Vd-.Kcs[.h5FqE{\|jkh\ziMs\|]eUJHG[e6-8 X/4pd9t,tSBKB_~K"897t9n.K?>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.6	50145	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:02 UTC	1558	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=u05dyj9dvlk0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahAvZyr0H0NRCnjg-4-dMJTRBiLvcPTNs2ukbQS8YRK9joXovvE-UQMrhWL6kaD8Q2KdwpXNKLEFUSZkP8; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:02 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:02 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-sbQwkqoClFF_nUz6DuCyUg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:02 UTC	364	IN	Data Raw: 32 61 66 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af4<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 62 51 77 6b 71 6f 43 6c 46 46 5f 6e 55 7a 36 44 75 43 79 55 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="sbQwkqoClFF_nUz6DuCyUg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 53 78 5f 76 6c 34 37 54 53 46 62 70 37 51 44 51 58 72 44 56 57 70 56 70 34 6f 2d 58 6b 75 6c 71 39 30 67 33 5f 36 48 6c 57 4a 2d 63 74 4f 79 65 42 31 37 42 34 65 5a 7a 42 70 47 41 46 56 36 38 76 72 6f 74 49 47 71 67 65 44 45 37 79 58 4d 5a 75 2d 5f 57 42 52 79 57 4e 34 38 69 33 6d 7a 64 5f 4b 78 39 6f 68 66 49 59 66 33 62 72 66 43 7a 67 5a 70 31 73 4b 78 57 7a 77 41 4e 57 72 65 71 34 55 44 5f 34 6b 33 43 69 2d 4e 36 49 77 58 6d 71 68 47 33 66 57 61 55 31 4c 4b 75 67 68 48 6f 51 70 58 76 58 54 6a 4e 34 66 5f 6c 6e 73 77 59 6d 4e 69 49 6e 59 45 65 44 36 4b 5a 64 44 6a 4c 4c 48 51 61 35 7a 4d 55 38 6c 38 43 4b 68 4c 36 32 57 52 61 50 66 38 74 37 76 63 54 69 53 71 56 66 4c 56 6a 66 59 35 44 58 34 77 51 4e 51 73 41 33 6d 42 33 62 52 4d 79 5a 76 6d 53 50 52 5f Data Ascii: Sx_vl47TSFbp7QDQXrDVWpVp4o-Xkulq90g3_6HlWJ-ctOyeB17B4eZzBpGAFV68vrotIGqgeDE7yXMZu-_WBRyWN48i3mzd_Kx9ohfIYf3brfCzgZp1sKxWzwANWreq4UD_4k3Ci-N6IwXmqhG3fWaU1LKughHoQpXvXTjN4f_lnswYmNiInYEeD6KZdDjLLHQa5zMU8l8CKhL62WRaPf8t7vcTiSqVfLVjfY5DX4wQNQsA3mB3bRMyZvmSPR_
2024-04-19 14:07:02 UTC	1255	IN	Data Raw: 78 66 69 69 32 48 55 61 52 61 61 52 38 6d 44 39 6e 2d 53 59 48 6c 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 73 62 51 77 6b 71 6f 43 6c 46 46 5f 6e 55 7a 36 44 75 43 79 55 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: xfii2HUaRaaR8mD9n-SYHlQ"><script type="text/javascript" nonce="sbQwkqoClFF_nUz6DuCyUg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:07:02 UTC	600	IN	Data Raw: 51 30 63 55 4a 52 53 46 46 48 55 33 64 68 57 57 6c 6b 51 7a 5a 74 54 47 52 57 64 6c 4d 79 52 6b 45 79 64 6e 6c 44 59 7a 4e 47 54 56 64 6d 56 32 6c 61 4e 47 6f 72 4e 6e 56 58 57 54 4e 6c 56 48 4e 4e 56 45 39 58 4e 6e 46 49 52 6e 52 75 54 55 6b 77 64 58 6c 71 51 33 56 72 64 57 56 6a 65 6b 73 34 59 57 63 76 57 56 4e 6b 62 7a 6c 42 64 30 56 6e 59 57 70 51 56 69 39 6a 54 6e 5a 33 52 58 64 7a 55 32 4e 58 62 58 42 68 62 6b 64 4c 54 6c 70 58 62 33 56 4e 63 46 5a 77 53 30 56 5a 53 55 74 79 52 6a 6c 4b 62 58 55 30 63 57 39 78 63 6a 5a 72 64 47 59 79 52 46 46 53 51 6c 68 4f 62 47 52 6b 61 6a 52 7a 55 55 78 6e 4c 32 64 56 53 30 5a 49 5a 47 5a 34 5a 6c 64 78 4e 56 64 4d 63 32 68 36 56 6a 45 76 65 6a 5a 6f 63 55 74 73 59 31 5a 4f 55 45 6c 4d 4c 30 35 4b 4e 45 68 54 5a Data Ascii: Q0cUJRSFFHU3dhWWlkQzZtTGRWdlMyRkEydnlDYzNGTVdmV2laNGorNnVXWTNlVHNNVE9XNnFIRnRuTUkwdXlqQ3VrdWVjeks4YWcvWVNkbzlBd0VnYWpQVi9jTnZ3RXdzU2NXbXBhbkdLTlpXb3VNcFZwS0VZSUtyRjlKbXU0cW9xcjZrdGYyRFFSQlhObGRkajRzUUxnL2dVS0ZIZGZ4ZldxNVdMc2h6VjEvejZocUtsY1ZOUElML05KNEhTZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.6	50153	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:03 UTC	1552	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7865 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=u05dyj9dvlk0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahAvZyr0H0NRCnjg-4-dMJTRBiLvcPTNs2ukbQS8YRK9joXovvE-UQMrhWL6kaD8Q2KdwpXNKLEFUSZkP8; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:03 UTC	7865	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 35 56 32 59 63 58 62 41 48 73 49 47 30 75 7a 32 78 77 79 6d 47 55 6f 65 30 69 62 6e 70 42 35 73 4b 63 69 53 6c 31 64 36 5a 46 62 55 47 53 56 6e 33 4c 58 43 6d 74 37 33 75 77 6f 78 65 39 34 64 6f 36 62 2d 6c 43 62 66 39 36 7a 2d 34 50 65 44 7a 32 6e 54 56 4b 50 31 69 37 68 6d 53 68 72 44 45 51 52 36 7a 59 49 5a 44 32 70 43 6c 67 63 2d 4e 4d 65 6f 39 5a 31 6b 75 62 48 4d 72 47 55 5f 73 74 63 42 4e 74 4c 65 6c 69 56 72 6a 6b 45 49 65 70 5f 4f 48 4b 6c 79 53 47 5a 71 50 46 4f 58 55 41 35 71 6a 4a 51 59 6a 42 47 70 6b 43 72 62 66 37 38 5a 58 51 51 68 37 50 67 38 61 6c 57 5a 59 4d 36 66 59 30 2d 72 52 66 67 30 57 45 36 68 4f 61 39 73 36 50 39 6e 56 54 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA5V2YcXbAHsIG0uz2xwymGUoe0ibnpB5sKciSl1d6ZFbUGSVn3LXCmt73uwoxe94do6b-lCbf96z-4PeDz2nTVKP1i7hmShrDEQR6zYIZD2pClgc-NMeo9Z1kubHMrGU_stcBNtLeliVrjkEIep_OHKlySGZqPFOXUA5qjJQYjBGpkCrbf78ZXQQh7Pg8alWZYM6fY0-rRfg0WE6hOa9s6P9nVT
2024-04-19 14:07:03 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:07:03 GMT Expires: Fri, 19 Apr 2024 14:07:03 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:07:03 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:03 UTC	559	IN	Data Raw: 61 36 33 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 35 4b 49 55 35 51 7a 4b 54 6b 67 65 35 5a 38 5a 6d 70 37 42 53 30 33 6c 4c 73 56 43 45 6e 47 31 4e 6f 79 45 35 49 4f 45 5f 63 30 73 71 5a 73 32 67 50 31 63 73 63 52 2d 52 61 55 57 2d 6c 37 74 72 58 52 4b 71 64 30 67 76 79 4e 70 61 61 62 68 6f 58 79 59 34 5a 48 78 52 4c 6d 41 35 6e 55 63 33 4a 72 35 75 79 30 31 48 4f 48 6a 34 66 52 4e 77 41 76 31 5f 48 35 32 5a 51 6d 45 38 65 6e 32 50 67 5f 4b 63 53 38 4f 50 65 37 39 49 75 73 73 4a 6a 4a 44 56 54 56 65 48 54 51 4b 66 63 74 69 51 37 61 4e 61 39 72 71 4c 74 7a 4b 67 5a 71 4d 32 4c 45 65 4d 4c 7a 73 51 47 36 54 75 71 63 6f 67 69 6e 43 68 57 56 7a 55 45 75 62 61 30 33 37 74 79 74 4b 61 73 66 6c 75 75 77 34 78 31 32 79 42 70 76 Data Ascii: a63)]}'["rresp","03AFcWeA5KIU5QzKTkge5Z8Zmp7BS03lLsVCEnG1NoyE5IOE_c0sqZs2gP1cscR-RaUW-l7trXRKqd0gvyNpaabhoXyY4ZHxRLmA5nUc3Jr5uy01HOHj4fRNwAv1_H52ZQmE8en2Pg_KcS8OPe79IussJjJDVTVeHTQKfctiQ7aNa9rqLtzKgZqM2LEeMLzsQG6TuqcoginChWVzUEuba037tytKasfluuw4x12yBpv
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 5a 7a 54 46 4a 79 32 34 2d 41 45 45 37 6e 4e 37 6d 73 53 41 4a 31 51 53 63 57 65 38 74 46 7a 43 30 4f 37 65 45 45 76 78 64 36 55 52 61 4c 46 57 46 44 6b 34 54 55 58 61 4c 4b 4a 6c 4a 4e 35 4e 75 43 71 79 33 30 35 49 51 77 68 6a 78 51 6a 35 4e 56 70 4c 45 53 54 53 33 4c 38 66 50 39 49 43 4b 6a 50 4c 36 65 62 33 62 6a 55 33 37 4b 4d 62 4c 6d 36 6e 4e 50 50 6f 4f 32 30 30 33 35 50 6d 66 2d 53 72 71 30 76 72 75 38 53 6a 38 37 6b 31 42 37 4a 49 7a 4c 76 39 65 4e 4f 50 31 4e 42 4b 45 54 41 6d 36 47 2d 66 39 5a 59 46 75 4f 34 44 4b 45 58 31 74 32 38 58 72 74 46 4f 4b 35 33 56 44 33 6e 36 31 68 62 75 6d 46 71 74 30 78 38 6d 31 6a 4a 7a 59 48 58 6c 57 38 4c 44 79 47 59 71 72 5f 41 34 64 6f 6f 65 57 75 2d 48 45 5f 4f 32 72 76 65 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e Data Ascii: ZzTFJy24-AEE7nN7msSAJ1QScWe8tFzC0O7eEEvxd6URaLFWFDk4TUXaLKJlJN5NuCqy305IQwhjxQj5NVpLESTS3L8fP9ICKjPL6eb3bjU37KMbLm6nNPPoO20035Pmf-Srq0vru8Sj87k1B7JIzLv9eNOP1NBKETAm6G-f9ZYFuO4DKEX1t28XrtFOK53VD3n61hbumFqt0x8m1jJzYHXlW8LDyGYqr_A4dooeWu-HE_O2rve",null,120,n
2024-04-19 14:07:03 UTC	852	IN	Data Raw: 6d 63 78 54 32 4e 35 4d 55 73 35 53 6e 56 4f 54 6e 5a 76 55 6c 6c 71 4d 6b 31 53 4e 57 4e 74 53 48 52 72 64 47 4e 6b 56 6c 46 78 56 30 31 59 64 33 70 5a 64 56 70 43 61 57 64 78 51 30 6f 72 64 6e 5a 4b 55 55 70 6f 59 57 46 49 55 54 52 7a 4e 57 6c 53 64 32 68 70 63 58 4a 70 62 6a 52 73 4e 47 39 76 4d 6a 6c 79 61 30 35 36 62 55 52 43 4e 6c 51 72 5a 54 55 7a 59 58 41 35 4e 30 70 6a 64 6e 6c 43 63 56 64 48 61 6b 39 51 4f 46 4e 58 55 58 52 31 62 55 46 4f 62 6a 42 70 61 46 56 75 51 6d 4a 47 53 6d 64 46 4d 6e 56 4b 62 47 4a 31 56 32 39 74 5a 48 4a 76 65 48 56 71 54 58 59 79 53 46 67 78 64 58 68 49 51 57 5a 59 57 6b 39 79 62 6e 68 43 55 33 42 47 4d 47 68 4c 4e 55 4e 4c 59 32 56 4a 4f 54 56 73 64 6d 68 76 61 30 78 57 54 57 52 45 51 58 68 68 62 45 30 7a 56 31 64 78 Data Ascii: mcxT2N5MUs5SnVOTnZvUllqMk1SNWNtSHRrdGNkVlFxV01Yd3pZdVpCaWdxQ0ordnZKUUpoYWFIUTRzNWlSd2hpcXJpbjRsNG9vMjlya056bURCNlQrZTUzYXA5N0pjdnlCcVdHak9QOFNXUXR1bUFObjBpaFVuQmJGSmdFMnVKbGJ1V29tZHJveHVqTXYySFgxdXhIQWZYWk9ybnhCU3BGMGhLNUNLY2VJOTVsdmhva0xWTWREQXhhbE0zV1dx
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 31 36 38 31 0d 0a 32 51 6d 64 43 62 33 46 57 55 33 6c 5a 4e 32 34 77 61 46 52 7a 57 55 5a 36 55 32 52 4f 56 6a 4a 58 65 45 70 45 62 53 39 6a 52 53 74 7a 63 30 39 4a 53 6d 64 56 62 6d 68 42 4d 47 70 4b 54 31 70 34 59 30 39 56 63 7a 5a 73 4b 7a 68 4b 61 30 4a 69 61 30 38 35 4e 48 56 31 61 55 6c 31 53 7a 42 6e 55 33 5a 31 56 48 68 4c 56 58 46 55 54 30 74 59 4d 6e 67 31 53 56 70 76 52 33 46 76 59 57 46 58 4b 30 68 47 59 6d 4a 6c 55 55 5a 54 65 6c 51 78 4f 55 4a 36 53 44 5a 43 4f 45 74 30 4c 30 52 61 55 47 74 48 61 46 6c 77 4d 46 5a 70 65 6b 74 78 4e 33 63 77 52 55 67 33 4e 46 64 43 59 7a 63 33 62 6d 77 77 4e 47 52 34 65 57 70 57 61 6c 55 79 59 7a 56 6d 5a 57 4d 77 4e 45 4a 32 61 58 6c 55 5a 32 64 7a 59 30 52 70 52 6e 5a 53 56 6e 4a 57 62 6b 39 68 53 6e 56 52 Data Ascii: 16812QmdCb3FWU3lZN24waFRzWUZ6U2ROVjJXeEpEbS9jRStzc09JSmdVbmhBMGpKT1p4Y09VczZsKzhKa0Jia085NHV1aUl1SzBnU3Z1VHhLVXFUT0tYMng1SVpvR3FvYWFXK0hGYmJlUUZTelQxOUJ6SDZCOEt0L0RaUGtHaFlwMFZpektxN3cwRUg3NFdCYzc3bmwwNGR4eWpWalUyYzVmZWMwNEJ2aXlUZ2dzY0RpRnZSVnJWbk9hSnVR
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 4e 58 52 49 56 30 56 32 61 46 6c 51 52 6c 55 72 53 32 4e 69 56 44 68 73 56 6c 68 79 56 47 30 35 63 54 6c 45 5a 56 70 73 59 54 4a 31 4e 6b 56 35 51 6c 45 34 53 32 70 73 5a 6d 46 44 57 47 52 6d 64 55 78 61 4b 32 68 4a 54 32 52 68 55 31 42 6c 52 58 56 73 5a 30 52 47 54 47 74 5a 56 45 74 31 4e 48 70 57 59 6c 4e 56 61 6b 64 6a 4d 6a 42 44 52 44 4e 52 63 31 68 47 55 30 74 31 64 30 63 32 4e 6c 42 4f 5a 58 4e 47 62 6e 4a 30 51 7a 68 45 56 46 67 33 56 31 68 33 5a 55 74 71 64 58 52 77 55 6b 70 6c 4f 57 67 33 53 58 6c 6c 4e 57 31 51 5a 33 41 30 4e 58 5a 5a 56 57 52 6c 54 48 70 4e 5a 6c 68 48 54 47 5a 42 64 48 46 30 52 30 35 49 55 30 52 4a 4d 44 64 74 56 45 31 50 4e 48 6c 46 52 33 56 5a 63 6b 59 30 4c 32 5a 57 55 55 68 48 4d 7a 5a 6d 52 55 56 50 54 47 31 54 61 57 4a Data Ascii: NXRIV0V2aFlQRlUrS2NiVDhsVlhyVG05cTlEZVpsYTJ1NkV5QlE4S2psZmFDWGRmdUxaK2hJT2RhU1BlRXVsZ0RGTGtZVEt1NHpWYlNVakdjMjBDRDNRc1hGU0t1d0c2NlBOZXNGbnJ0QzhEVFg3V1h3ZUtqdXRwUkplOWg3SXllNW1QZ3A0NXZZVWRlTHpNZlhHTGZBdHF0R05IU0RJMDdtVE1PNHlFR3VZckY0L2ZWUUhHMzZmRUVPTG1TaWJ
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 46 64 56 64 52 55 7a 56 4f 54 44 49 30 56 33 70 7a 64 56 64 61 63 57 4d 30 51 56 5a 6a 51 31 49 79 57 45 64 6f 63 6e 42 59 51 6e 70 4d 51 6b 56 47 62 30 70 6e 4e 56 5a 79 61 54 49 30 4c 30 39 54 65 47 39 5a 59 6a 63 79 4c 30 34 32 53 44 64 77 61 30 74 32 4d 6a 4a 33 5a 55 73 72 5a 31 70 36 51 33 70 36 62 6d 6c 4b 52 6d 46 4a 51 56 56 72 5a 47 56 4d 52 31 70 4d 4f 46 68 31 57 45 55 33 51 55 31 48 63 6a 68 79 64 58 68 76 57 6e 70 59 51 32 52 45 56 55 31 79 64 45 35 58 4b 30 68 56 61 46 5a 5a 4e 54 46 57 57 44 52 72 4e 55 68 52 56 57 52 6d 64 69 39 6b 5a 6e 4e 6f 63 32 74 76 4b 32 4a 71 55 55 49 76 57 56 5a 69 54 54 56 59 4c 33 68 35 62 46 46 46 4e 57 67 76 52 6a 46 75 4e 54 52 6c 51 57 46 6f 59 6e 56 4c 51 56 68 77 52 55 70 32 55 55 6b 76 53 6d 46 74 57 6d Data Ascii: FdVdRUzVOTDI0V3pzdVdacWM0QVZjQ1IyWEdocnBYQnpMQkVGb0pnNVZyaTI0L09TeG9ZYjcyL042SDdwa0t2MjJ3ZUsrZ1p6Q3p6bmlKRmFJQVVrZGVMR1pMOFh1WEU3QU1HcjhydXhvWnpYQ2REVU1ydE5XK0hVaFZZNTFWWDRrNUhRVWRmdi9kZnNoc2tvK2JqUUIvWVZiTTVYL3h5bFFFNWgvRjFuNTRlQWFoYnVLQVhwRUp2UUkvSmFtWm
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 4a 53 54 45 31 54 64 33 42 4c 55 55 6c 43 51 6e 4a 4a 4f 56 42 52 53 6b 4e 70 4f 58 6c 4a 51 32 4e 4f 53 6e 64 71 59 56 6c 73 5a 55 31 46 4e 6c 42 4c 5a 47 39 4c 59 7a 64 35 53 7a 46 6a 54 69 74 56 55 57 56 57 4f 57 49 33 65 6c 46 33 56 44 56 77 65 58 70 30 4d 33 42 4c 56 56 42 71 53 6b 74 77 63 6b 52 51 63 31 4e 55 62 6a 52 4d 5a 44 41 35 61 6e 5a 6b 51 6a 42 35 56 6d 70 45 51 6a 64 48 55 57 52 78 55 6a 4a 6d 64 31 55 78 5a 32 52 6d 53 54 52 71 53 44 56 50 64 7a 51 78 63 6b 68 70 57 56 6b 31 61 44 49 31 4e 32 68 4a 54 45 68 6e 64 56 45 76 51 6a 63 79 52 6d 78 53 53 33 4a 70 4f 54 46 33 62 6d 6c 56 54 30 5a 48 56 55 64 73 52 56 4a 57 54 54 49 30 53 45 39 6a 63 54 46 46 4e 54 42 4a 59 32 6c 6a 61 6c 46 58 61 56 52 53 52 47 4e 55 63 6c 42 58 56 44 6c 71 53 Data Ascii: JSTE1Td3BLUUlCQnJJOVBRSkNpOXlJQ2NOSndqYVlsZU1FNlBLZG9LYzd5SzFjTitVUWVWOWI3elF3VDVweXp0M3BLVVBqSktwckRQc1NUbjRMZDA5anZkQjB5VmpEQjdHUWRxUjJmd1UxZ2RmSTRqSDVPdzQxckhpWVk1aDI1N2hJTEhndVEvQjcyRmxSS3JpOTF3bmlVT0ZHVUdsRVJWTTI0SE9jcTFFNTBJY2ljalFXaVRSRGNUclBXVDlqS
2024-04-19 14:07:03 UTC	749	IN	Data Raw: 45 4e 69 4d 6a 68 36 52 44 68 32 4c 33 56 78 64 57 64 68 62 44 68 4a 5a 6d 52 46 53 6b 64 54 4d 48 4e 4d 52 6d 70 33 5a 32 6c 34 59 31 5a 55 51 6d 68 56 51 33 4e 35 64 45 4e 44 53 6d 59 7a 51 6c 68 6c 5a 6d 52 47 5a 55 30 72 4d 55 70 59 61 6d 51 79 56 6e 4a 53 64 57 39 42 4f 48 52 5a 5a 6c 64 4a 57 46 64 47 64 44 46 75 63 6c 51 79 57 46 68 50 4e 31 6c 6a 57 55 31 69 57 57 4e 47 55 6e 45 79 4e 45 4a 6a 52 6c 5a 5a 5a 44 64 52 64 56 5a 75 65 6b 56 6e 59 7a 6c 61 56 6e 49 35 53 56 4d 76 56 56 4a 78 4e 45 56 42 64 32 46 6c 63 47 46 74 4f 47 34 7a 62 55 74 31 62 6d 74 57 4e 44 4a 76 57 6e 64 42 64 30 52 4c 53 46 46 54 59 57 59 76 61 47 74 48 52 55 64 59 54 45 6c 73 53 6a 46 6d 64 30 56 4d 55 44 46 49 61 53 74 59 53 58 4a 6a 5a 33 52 4c 65 54 6c 71 54 6b 34 35 Data Ascii: ENiMjh6RDh2L3VxdWdhbDhJZmRFSkdTMHNMRmp3Z2l4Y1ZUQmhVQ3N5dENDSmYzQlhlZmRGZU0rMUpYamQyVnJSdW9BOHRZZldJWFdGdDFuclQyWFhPN1ljWU1iWWNGUnEyNEJjRlZZZDdRdVZuekVnYzlaVnI5SVMvVVJxNEVBd2FlcGFtOG4zbUt1bmtWNDJvWndBd0RLSFFTYWYvaGtHRUdYTElsSjFmd0VMUDFIaStYSXJjZ3RLeTlqTk45
2024-04-19 14:07:03 UTC	1255	IN	Data Raw: 31 30 33 38 0d 0a 53 45 6c 4a 4f 57 35 47 54 47 39 54 61 33 46 6a 4e 69 39 44 51 6b 78 31 4e 33 64 43 61 33 68 32 54 32 5a 79 63 45 4d 76 4e 6d 6c 6c 53 30 46 76 53 46 5a 35 61 46 42 45 4d 48 42 6a 53 55 5a 35 4f 57 63 78 52 33 4a 6c 5a 55 51 76 55 6a 42 68 63 33 4e 47 63 45 70 33 62 7a 41 32 55 58 4e 6b 55 6c 56 76 62 57 74 69 4c 33 67 33 53 56 6c 4d 55 47 4e 52 53 31 56 73 59 33 4e 69 4f 57 51 31 5a 33 64 5a 65 45 4a 42 4e 6e 6c 59 64 31 68 53 5a 57 38 7a 64 47 5a 73 5a 45 6f 30 4e 47 64 36 62 57 74 34 53 48 67 32 55 30 68 77 61 6c 4e 76 59 55 39 79 4f 47 64 68 56 55 31 43 53 31 70 68 4d 46 42 68 55 55 4a 77 4b 30 68 44 53 30 52 73 57 56 59 32 64 57 35 74 52 58 5a 61 56 45 5a 45 61 47 6c 49 53 32 78 32 51 32 56 6b 64 6b 31 50 65 58 46 76 55 6d 4e 6c 4e Data Ascii: 1038SElJOW5GTG9Ta3FjNi9DQkx1N3dCa3h2T2ZycEMvNmllS0FvSFZ5aFBEMHBjSUZ5OWcxR3JlZUQvUjBhc3NGcEp3bzA2UXNkUlVvbWtiL3g3SVlMUGNRS1VsY3NiOWQ1Z3dZeEJBNnlYd1hSZW8zdGZsZEo0NGd6bWt4SHg2U0hwalNvYU9yOGdhVU1CS1phMFBhUUJwK0hDS0RsWVY2dW5tRXZaVEZEaGlIS2x2Q2Vkdk1PeXFvUmNlN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.6	50154	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1546	OUT	POST /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 2034 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/x-protobuf sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=u05dyj9dvlk0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:04 UTC	2034	OUT	Data Raw: 0a 28 36 4c 63 41 32 74 45 5a 41 41 41 41 41 4a 6a 37 46 54 59 54 46 39 63 5a 34 4e 4c 33 53 68 67 42 43 42 66 6b 57 6f 76 30 12 a4 0f 30 33 41 46 63 57 65 41 35 56 32 59 63 58 62 41 48 73 49 47 30 75 7a 32 78 77 79 6d 47 55 6f 65 30 69 62 6e 70 42 35 73 4b 63 69 53 6c 31 64 36 5a 46 62 55 47 53 56 6e 33 4c 58 43 6d 74 37 33 75 77 6f 78 65 39 34 64 6f 36 62 2d 6c 43 62 66 39 36 7a 2d 34 50 65 44 7a 32 6e 54 56 4b 50 31 69 37 68 6d 53 68 72 44 45 51 52 36 7a 59 49 5a 44 32 70 43 6c 67 63 2d 4e 4d 65 6f 39 5a 31 6b 75 62 48 4d 72 47 55 5f 73 74 63 42 4e 74 4c 65 6c 69 56 72 6a 6b 45 49 65 70 5f 4f 48 4b 6c 79 53 47 5a 71 50 46 4f 58 55 41 35 71 6a 4a 51 59 6a 42 47 70 6b 43 72 62 66 37 38 5a 58 51 51 68 37 50 67 38 61 6c 57 5a 59 4d 36 66 59 30 2d 72 52 66 Data Ascii: (6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov003AFcWeA5V2YcXbAHsIG0uz2xwymGUoe0ibnpB5sKciSl1d6ZFbUGSVn3LXCmt73uwoxe94do6b-lCbf96z-4PeDz2nTVKP1i7hmShrDEQR6zYIZD2pClgc-NMeo9Z1kubHMrGU_stcBNtLeliVrjkEIep_OHKlySGZqPFOXUA5qjJQYjBGpkCrbf78ZXQQh7Pg8alWZYM6fY0-rRf
2024-04-19 14:07:04 UTC	417	IN	HTTP/1.1 200 OK Content-Type: application/binary Date: Fri, 19 Apr 2024 14:07:04 GMT Expires: Fri, 19 Apr 2024 14:07:04 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Content-Length: 0 Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
236	192.168.2.6	50156	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	1053	OUT	GET /_/PlayStoreUi/data/batchexecute?rpcids=w3QCWb&source-path=%2Fstore%2Fapps%2Fcategory%2FPRODUCTIVITY&f.sid=-2785155342641865316&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58022&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535622.0.0.0
2024-04-19 14:07:04 UTC	1119	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:04 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:04 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 31 30 34 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 2c 5b 22 64 69 22 2c 31 33 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 31 32 2c 22 33 35 31 32 39 32 35 34 37 34 38 37 39 39 39 30 31 30 30 22 2c 31 30 36 5d 5d 0a 0d 0a Data Ascii: 71)]}'104[["er",null,null,null,null,400,null,null,null,3],["di",13],["af.httprm",12,"3512925474879990100",106]]
2024-04-19 14:07:04 UTC	33	IN	Data Raw: 31 62 0d 0a 32 35 0a 5b 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 34 30 5d 5d 0a 0d 0a Data Ascii: 1b25[["e",4,null,null,140]]
2024-04-19 14:07:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
237	192.168.2.6	50157	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:04 UTC	771	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:04 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:04 GMT Expires: Fri, 19 Apr 2024 14:07:04 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:04 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:07:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
238	192.168.2.6	50163	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1079	OUT	GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 962 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:42:46 GMT Expires: Sat, 20 Apr 2024 13:42:46 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1459 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	723	IN	Data Raw: 52 49 46 46 ba 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 71 03 00 00 2f 3f c0 0f 10 77 06 31 92 6c d5 4a 9f ff 3f 0e f9 a7 e8 ee 70 ee 59 2c 08 48 91 24 39 92 bc e6 b4 42 72 20 8e ff f3 c0 e8 9e e9 80 d8 48 92 22 29 ea 9e c9 7f 1b 99 f9 67 ba 1c c5 b6 5b 37 47 52 fe db f0 08 80 ac 03 a4 c8 4b 21 04 6a 35 01 85 92 c0 89 09 81 0b 89 c2 8d 40 22 51 08 24 02 0b a2 44 81 28 6c 40 c4 44 eb 83 05 e1 b2 d8 52 d2 72 08 0c 29 81 96 14 42 54 08 41 18 5c d8 88 0a 17 42 d8 21 84 a8 b0 11 42 d4 46 08 85 f8 5f 21 84 42 88 5a 2c 9b c1 90 c1 50 0b a1 a8 45 bf 0f 77 6c 8e 38 7c be 50 47 9c ec 2b 35 71 b6 6e 1c bb 94 b7 3a 9c 73 06 c3 de 79 a2 ee a3 44 89 e8 37 da 68 fc d1 d1 46 63 a0 31 f0 43 97 8c 37 df ef 8d c7 77 7d ae 4f 76 Data Ascii: RIFFWEBPVP8X??VP8Lq/?w1lJ?pY,H$9Br H")g[7GRK!j5@"Q$D(l@DRr)BTA\B!BF_!BZ,PEwl8\|PG+5qn:syD7hFc1C7w}Ov
2024-04-19 14:07:05 UTC	239	IN	Data Raw: 3b 5c e2 32 45 3d a5 02 28 55 40 aa 00 cc e2 79 02 f8 a6 f2 5c 00 df 25 1e 2f af 67 f1 8f 9f 5f 8b 04 70 da 55 79 27 80 0f 12 79 ba 16 ff d7 4c e5 ad 00 48 29 cd 80 e3 2f b8 d2 1b 01 7c 96 24 27 10 d1 95 5c 2d 37 af d3 8d bb 4f 23 0c 4a f9 02 70 25 1e 77 89 88 6b f1 38 11 93 fb f1 6b 02 17 b9 c4 65 8a 81 b9 4c d1 87 3f 16 c0 03 66 cb c7 f7 af 6e 0b e0 9c 6b 8d fc ac c7 cc 28 8c a6 d0 ef 5e 84 01 28 34 a0 2c 23 33 85 ab 94 65 64 02 c8 79 d9 9e 49 cb 32 32 53 b8 26 c3 7f 3b 8b 31 2f 2e 9a 5a e6 d5 8e a6 ba 79 35 a2 a1 d6 a6 b5 a1 a8 ab b8 66 51 d5 e8 a8 62 6c 0b 73 5a c6 55 0a f9 03 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: ;\2E=(U@y\%/g_pUy'yLH)/\|$'\-7O#Jp%wk8keL?fnk(^(4,#3edyI22S&;1/.Zy5fQblsZUEXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
239	192.168.2.6	50162	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1080	OUT	GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 896 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:42:46 GMT Expires: Sat, 20 Apr 2024 13:42:46 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1459 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	723	IN	Data Raw: 52 49 46 46 78 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 30 03 00 00 2f 3f c0 0f 00 05 25 da b6 8d cd d5 6a 25 79 b6 dd b5 d5 b5 fd 5a b6 6d c4 b6 6d db b6 8d b2 5d 15 3b f9 8d aa f7 ef c6 bd df f7 dd ff af 5e 5a 11 fd 9f 00 5d c0 d8 52 b7 7b f3 ce ea 54 ab 29 fb 03 fb 17 79 ad 22 f4 1e 7e 9f 3e 91 7b 95 98 ef 8e 9c 31 e6 23 cc bc 5c ab 06 98 19 93 99 5c 0c 30 a5 d7 77 3f 0f 5e 7b 32 57 62 c0 6d 67 e4 1d c1 e7 1b 65 b9 f1 1b d0 2c ef 03 f8 ff 3b 93 03 87 80 e3 f2 3c f6 1e c0 35 b3 8b ea 6b 77 f6 03 b8 33 99 b5 4c 4f 18 2e 7b 6a 30 e6 3e d9 9b c7 00 77 67 a9 fc 17 80 63 b6 95 98 f3 e4 b7 18 e8 99 8d d8 97 58 65 96 de 0a d0 39 2a ff f9 40 bd bb c3 d8 7f 34 7e 03 78 ae 41 d6 74 d4 43 03 e0 07 67 27 00 a6 1f 80 ae Data Ascii: RIFFxWEBPVP8X??VP8L0/?%j%yZmm];^Z]R{T)y"~>{1#\\0w?^{2Wbmge,;<5kw3LO.{j0>wgcXe9*@4~xAtCg'
2024-04-19 14:07:05 UTC	173	IN	Data Raw: 95 c5 9e 40 b1 af f9 98 2b 65 3d 62 fc 5e a1 ec de 0d 8c 69 f6 d8 87 39 38 25 fb 50 e8 99 51 b6 93 77 01 f4 db 59 5b 5f 34 e7 7a 80 f7 8e c9 f3 28 70 48 d9 cf fc 8d ff 03 f2 4e 03 bf 2a 27 cb de f0 13 91 f7 e9 2b 81 58 6e 48 27 d7 0e fe f9 bb 5e 53 00 16 a7 2c d1 e9 00 d5 ca f1 3c cc 8f c7 cc 18 f9 36 66 a5 72 fe c4 d3 f8 7d 2f a4 d6 98 f7 85 c7 1f 65 6a ad a9 ea 5d 9b f7 d4 fd af 0b 18 01 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: @+e=b^i98%PQwY[_4z(pHN'+XnH'^S,<6fr}/ej]EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
240	192.168.2.6	50164	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1080	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1162 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:14:22 GMT Expires: Sat, 20 Apr 2024 10:14:22 GMT Cache-Control: public, max-age=86400, no-transform Age: 13963 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	721	IN	Data Raw: 52 49 46 46 82 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 3a 04 00 00 2f 3f c0 0f 00 e7 27 21 92 24 47 92 62 f9 93 3a 42 5a df ed 4c fa 89 7f 0e 92 22 49 92 24 49 bd 8f e7 b2 5a fe 38 96 c1 d9 1d 26 21 92 24 47 92 a2 9f 3f a7 47 a4 f5 ff 4c a7 cf 7f ca ca 1f 09 15 68 e9 1d 11 86 0a 88 40 2a e0 3f 7b 8d 98 a9 04 b2 9b b0 30 44 05 a0 02 1a 02 95 00 44 30 42 0c 41 f4 39 e6 da 63 88 86 84 dd f8 b2 d8 0d 04 cf 40 20 a1 4f f6 44 43 40 84 3e d9 93 40 2a a1 6f 06 9b 76 cc 25 c4 50 f4 4d 3b 6c 16 d0 d8 d1 20 fb 4c 68 b1 ac ab 0b e9 81 30 ce bb 16 8d be b9 74 1c bd 2a c4 80 06 b4 74 e9 62 34 26 c1 d8 0d 08 70 00 18 5d 84 07 33 20 84 80 96 cb e2 9b 99 99 96 0e 02 c2 60 fa 1e e7 2e 03 34 a4 83 9c 7b cd ac a9 c0 c2 66 11 ba Data Ascii: RIFFWEBPVP8X??VP8L:/?'!$Gb:BZL"I$IZ8&!$G?GLh@?{0DD0BA9c@ ODC@>@ov%PM;l Lh0t*tb4&p]3 `.4{f
2024-04-19 14:07:05 UTC	441	IN	Data Raw: 19 86 ec 17 b8 2c b5 f6 b5 c1 c0 7a 63 00 ec e5 a8 e0 1a ed be 9d 75 f8 1e 53 ce 49 85 ca 99 86 6a a0 c7 9c 14 40 77 d3 52 18 11 b1 36 c6 68 a6 72 a6 76 3c 70 a4 fb 71 7d 00 2b 84 88 52 16 4e 89 88 45 84 89 88 58 44 84 4b 56 eb 47 a2 fb 6a 1b 26 01 d8 c7 11 51 fa d9 43 cb 1e fe c5 d4 f0 eb 37 df fc ff 47 b6 99 f8 cd bb e6 ce bd fb 71 2e 95 fe 0b bd 52 71 17 00 18 ec 1b 88 48 ee 54 89 52 fb 59 7d 6a a2 54 d5 8e ba 59 2e 49 12 55 f5 bb 2d 95 1d 8d 15 c6 cf 06 d0 47 98 f2 e6 26 33 5e da 55 4d b7 b9 e4 fd 6f 8e 51 bb 58 99 96 2c 5d fb d6 5a 2e d9 08 dc 2b 53 01 f4 fc 81 29 4b 2d 30 be d3 ce 3e a7 de 95 b0 93 fa 5e 4f 53 ab b4 30 95 5a 5f 83 cc 91 c2 d4 da 22 ab 93 c9 3e a7 de 66 b9 3e b9 cf 4c 4b 96 7f f8 de 17 69 a9 c8 fd d5 05 58 ef af c0 d4 5a 72 fa 2d 7f Data Ascii: ,zcuSIj@wR6hrv<pq}+RNEXDKVGj&QC7Gq.RqHTRY}jTY.IU-G&3^UMoQX,]Z.+S)K-0>^OS0Z_">f>LKiXZr-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
241	192.168.2.6	50161	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1080	OUT	GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 1124 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 5c 04 00 00 57 45 42 50 56 50 38 20 50 04 00 00 d0 16 00 9d 01 2a 40 00 40 00 3e 61 28 8f 45 a4 22 a1 14 06 fc 40 06 04 b2 80 62 f4 c3 2c 20 66 93 d3 bf 27 f8 ac c4 0b e1 5f 4e fe e3 f9 55 f9 25 ac 27 fc 97 fb 2f e5 6f 00 4f 1e fe a5 fe 3b f2 df 98 0e f4 1f ce ff d7 79 39 78 03 7c af fd 37 b0 07 f2 7f ef bf f1 7d 92 ff 89 ff 6b f7 33 ec fb f2 df eb 3f f1 3f c8 fc 01 ff 1d fe 85 fe 97 f3 87 fc 47 cb 37 ac bf da 5f 62 3f d3 94 e3 22 fd a6 bf 15 27 0f 9f 9f 3b 8f e5 2b d4 d3 72 7a cd 37 ff 3c 4e 75 74 fa 27 36 bc ef a7 98 a9 7f b3 0b 9a 62 ec 69 24 ca 66 47 72 f6 45 87 d1 5f f5 5f 03 e1 a8 b5 8d 7a 57 26 f1 2b 66 40 00 fe fd 28 d2 f2 3b 08 6e c3 95 69 10 45 de f5 e5 5d d1 9c a6 a1 73 83 5a 86 e9 ba bb f8 8f e6 d4 fc df bf d7 09 3b 59 88 2e 35 de Data Ascii: RIFF\WEBPVP8 P*@@>a(E"@b, f'_NU%'/oO;y9x\|7}k3??G7_b?"';+rz7<Nut'6bi$fGrE__zW&+f@(;niE]sZ;Y.5
2024-04-19 14:07:05 UTC	391	IN	Data Raw: 44 a9 a5 a2 92 a7 00 8f f9 14 83 12 2f d8 58 20 21 3d 6b 29 b2 78 1e c2 fe 16 f2 5b 16 b6 f6 9c 61 10 f3 f8 5b 8b 2c 5e d5 c4 7a 78 88 22 44 b8 d0 e5 57 2e 84 eb 0a da a9 53 8a 77 87 33 d4 c6 0e ea 0d 54 d2 d6 c3 a1 a9 7f f3 96 be 79 d2 e1 ca 89 56 27 f8 60 dc 80 fe 5f bb ff c9 86 f0 11 ea 56 1f 8e 5b cd 47 a7 f4 1a 04 19 9a d6 e9 e5 ad d5 67 e4 7a ca 72 e4 9e 37 d1 c5 ff 63 b6 1a c1 5a 8f ae 33 bb 7e e6 ab 0b 07 d9 c1 d0 eb 6a 35 6d fb e5 39 fe b0 f8 a4 e0 08 73 9c cb 7c 19 61 4e ab 51 2d d4 3e c9 9a 8f c7 43 d2 45 ab f4 ba 33 86 a7 8e b9 88 16 ef 14 d5 f8 e1 39 ac 06 76 b9 5c 31 5e 2f e1 c2 c1 ce ef a1 7b 1f e1 f0 26 67 7f 7d b1 15 0b 6a de 25 81 88 f4 ad 53 e7 c2 2b fd 5a b5 95 94 7d 85 d4 db 95 c2 be 24 63 c8 25 f5 24 19 ec d4 a0 48 44 ec 73 30 5c ab Data Ascii: D/X !=k)x[a[,^zx"DW.Sw3TyV'`_V[Ggzr7cZ3~j5m9s\|aNQ->CE39v\1^/{&g}j%S+Z}$c%$HDs0\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
242	192.168.2.6	50160	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1080	OUT	GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 2544 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	733	IN	Data Raw: 52 49 46 46 e8 09 00 00 57 45 42 50 56 50 38 4c dc 09 00 00 2f 3f c0 0f 10 4d 28 68 db c8 f9 dc f8 d5 f2 27 fc 0f 22 a2 ff 13 c0 3f 21 4d 65 06 98 91 09 20 3d 71 94 69 90 44 3a 33 24 3d 5f 2f 0c b2 8d 54 7f ca 11 7c 1e e2 20 14 b4 6d 23 87 7c ff c1 08 43 46 92 04 d5 cf f9 cb 3d 41 13 dc 3f 42 ff 85 04 09 76 87 60 bb 7d 97 fa 7d 87 a8 df 01 10 11 ca 37 27 8d 12 44 f4 68 3a 48 4a 34 8d 71 90 bf 1f f1 02 a0 24 0e 03 69 db 34 fe 6d ef d7 10 11 13 50 69 c2 6a c4 b0 1c d1 db 8e ac 6d ab 6d 2b f3 f8 b9 b8 3b 44 96 4a 0f 4e 1b 68 01 39 bd a1 03 b4 80 26 dc 1e e0 ee ee ee 1c 5b 33 58 6b 9f bd d6 95 7c a0 91 cb 57 7f cd 64 36 80 3a d9 aa 55 f5 23 99 43 e6 ee 4e fa 23 a9 c3 2e b2 2f 24 72 56 4d bc 0b ee 4e 03 76 91 d3 0a c8 91 24 29 92 3c 16 ee 24 e0 d3 5f 3a c6 17 Data Ascii: RIFFWEBPVP8L/?M(h'"?!Me =qiD:3$=_/T\| m#\|CF=A?Bv`}}7'Dh:HJ4q$i4mPijmm+;DJNh9&[3Xk\|Wd6:U#CN#./$rVMNv$)<$_:
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 4a 33 03 40 8f 41 b7 10 d0 68 1e f6 c9 72 10 03 25 91 08 71 00 00 17 bf 73 fd e6 5a f8 ff 65 00 34 36 80 b0 02 94 c7 a1 23 be 4d 53 72 6d fe 21 9f 2c 09 b5 10 0c 00 ba 20 16 ce 00 78 e9 2d f1 02 9c 01 67 60 44 bb 0f 44 8b a3 67 d6 16 b7 24 cb 83 3f 6a 59 00 96 62 ed a7 50 fb 86 9b c0 fc 00 a1 a2 e8 b2 b1 f8 04 38 76 41 6b 6c 61 9d e4 03 df 6b 79 0b f0 20 00 b7 78 fc c1 2b e2 66 b0 70 88 50 39 e8 d2 65 c1 09 d8 e3 17 88 a6 b4 b5 2c d6 3c e0 bd 74 bc 2c bd 88 89 5c c0 26 00 bc ae a3 3b e0 e6 b0 30 5c 2c ba 68 fe 05 e0 d8 25 18 2d 4c b6 f7 7b c3 0a b3 21 2e de 50 f3 0e f2 03 ea 57 da 86 c2 ba ab 7d a2 a4 43 a7 a0 d1 74 63 50 70 9f 1e ac 42 93 0a d0 00 0c 93 33 1f 0b 95 61 c7 01 f7 76 6f 55 d7 ec 74 80 41 00 40 32 65 5a 46 c1 f6 01 a0 bc 00 62 a3 f5 82 2c 06 Data Ascii: J3@Ahr%qsZe46#MSrm!, x-g`DDg$?jYbP8vAklaky x+fpP9e,<t,\&;0\,h%-L{!.PW}CtcPpB3avoUtA@2eZFb,
2024-04-19 14:07:05 UTC	556	IN	Data Raw: 29 8b ca 80 0d 59 05 fa bb 39 63 30 60 6e 12 4e 9c 52 df c6 ad 1e 9f c0 ad ef 8f 9c b0 97 1c 2d ca 58 6b ad 61 38 00 4c b1 43 13 ba 8a e1 99 07 ce cb 77 0b 46 8d e6 01 0b 30 15 28 e6 aa dd 0b 09 e3 99 5b bf 34 3b 8c d9 21 2a b7 b9 3d 78 65 d6 e7 5f c7 ca 59 31 6b a8 47 45 09 a1 6a 1b 53 58 dc 60 e8 16 86 f0 29 61 fc 8f a6 a3 5e 04 c6 fe cf c4 55 61 d4 12 5c 4a e8 98 b1 42 f9 d9 cf b8 69 6b 1f 9d 89 fa ab 7f fc 23 c5 a2 b4 99 9a cd b0 19 b1 69 a1 99 ef 2b 67 95 c4 aa 90 2f e0 03 12 c9 fd 28 5a b0 16 a2 c4 31 93 da 1f f8 2d 67 c4 e9 c6 fb 6b f7 4f ed 8c aa 3f c4 47 9d eb b0 df 26 1a 8d a1 d1 09 dd a2 f1 7f 06 2a c0 96 44 92 5a 13 60 c1 8c 68 89 08 f1 bf bf 24 99 39 97 1c 45 20 98 62 8a 29 cc ff 9a 4e 61 28 06 be 14 84 4f 03 2e 94 08 a7 0f 80 c8 b3 5f 36 7c Data Ascii: )Y9c0`nNR-Xka8LCwF0([4;!=xe_Y1kGEjSX`)a^Ua\JBik#i+g/(Z1-gkO?G&DZ`h$9E b)Na(O._6\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
243	192.168.2.6	50159	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1080	OUT	GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 870 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	734	IN	Data Raw: 52 49 46 46 5e 03 00 00 57 45 42 50 56 50 38 4c 52 03 00 00 2f 3f c0 0f 10 2f e5 20 92 24 45 ca bd 3b 9d 6f fc 3d 30 c3 4c 3f 89 70 dc 48 92 22 c5 ee f1 8b fd b7 ed 9c e0 9b db 74 10 49 92 22 e5 ec 9f ca d7 fe 1a 98 61 a6 5d c7 b6 ad 26 2b ee 9e e0 d4 c0 d0 7f 23 54 91 5f 1c 84 04 49 24 e9 0e 90 1e 29 4a 4c 48 a8 0d 6a b4 68 10 20 40 8a 33 22 54 d8 23 43 1a 73 8d 88 88 88 48 f1 d5 2f 20 22 22 da a8 46 f5 d7 c6 df 43 1b 29 22 4a eb 46 69 22 a2 6a 11 6d 54 2d 22 a2 8d aa dd fb 28 ed f0 bf 6a a3 6a 4f 3f ce 5f 03 94 36 22 22 22 70 0b 7f 12 20 41 40 7e f8 e0 bf 71 ba 3f fc a2 7e cc 25 af 48 91 36 93 c5 c4 50 26 cb 6c 67 9e 36 03 43 59 6c 86 52 c7 97 14 b7 c7 c7 f1 fb 56 da f8 b7 e7 f7 eb d1 4f 1f 96 e7 78 79 ac c6 bd 8f 36 ce 3d 3c 7c b5 20 8e dd ac 3b d8 38 Data Ascii: RIFF^WEBPVP8LR/?/ $E;o=0L?pH"tI"a]&+#T_I$)JLHjh @3"T#CsH/ ""FC)"JFi"jmT-"(jjO?_6"""p A@~q?~%H6P&lg6CYlRVOxy6=<\| ;8
2024-04-19 14:07:05 UTC	136	IN	Data Raw: a0 f2 38 11 6a 65 02 1c 26 a9 a2 9f 65 81 26 2e 46 98 99 04 ea d0 13 00 b8 ee 51 ce a8 eb d7 35 42 a5 74 97 99 45 3a 40 0c 0b 47 72 4b 4b 0a 01 00 4e 12 3a a2 ac 63 b4 e7 86 0e 28 73 6e b2 40 a4 1a 80 62 53 c2 53 25 94 cc 84 88 28 3c 0d a1 84 9a 0a 81 de 12 9a b2 fc 3f a3 25 e7 16 5c 58 d2 db e7 c2 aa de 0e 17 76 eb 05 fa ec 0b af 5f c3 66 eb 42 db 03 6b dd 12 b6 6c 67 60 ed eb 76 cd db 33 b7 67 43 40 0d Data Ascii: 8je&e&.FQ5BtE:@GrKKN:c(sn@bSS%(<?%\Xv_fBklg`v3gC@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
244	192.168.2.6	50166	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1080	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 238 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:49:32 GMT Expires: Sat, 20 Apr 2024 13:49:32 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1053 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	238	IN	Data Raw: 52 49 46 46 e6 00 00 00 57 45 42 50 56 50 38 4c da 00 00 00 2f 3f c0 0f 10 9f a0 28 92 14 67 08 6f fc ab c0 0c 16 ce 43 0e 36 14 32 92 24 55 16 66 45 4e fd 2c ce e4 1d 04 6d db c6 d2 f8 a3 1c 8d 7f 31 c8 36 52 4f e3 fc ce e3 cd 3f c0 4f 5f 33 67 93 e3 74 60 ce 11 ad 42 a8 f6 93 1f 90 97 a7 ad 85 3c e7 cb f5 81 71 24 c9 69 c4 2c 99 f2 0f 96 7d 5a b3 5f 11 fd 67 e4 b6 6d 24 aa 9d 7d e6 38 e8 1b d8 ff 98 2b 79 bf 68 90 7c ca 04 a1 b3 40 25 93 f4 0d 70 64 a2 76 1c 47 9b c6 c1 e6 71 ac c5 38 d4 72 1c 69 35 0e b4 1e 47 19 fa 55 9d 01 20 8e 8d 22 40 75 8f 49 13 02 d3 9c 90 be 16 25 e4 6e 42 81 2f 2b 42 9f fe b5 85 43 5f d3 17 a4 04 e5 eb 47 be 76 fc 7f f7 5b 2b b5 0a 60 d9 9b ea 24 8f 58 f8 56 1d 16 c7 7e c7 18 Data Ascii: RIFFWEBPVP8L/?(goC62$UfEN,m16RO?O_3gt`B<q$i,}Z_gm$}8+yh\|@%pdvGq8ri5GU "@uI%nB/+BC_Gv[+`$XV~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
245	192.168.2.6	50167	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1080	OUT	GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:05 GMT Server: fife Content-Length: 696 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	696	IN	Data Raw: 52 49 46 46 b0 02 00 00 57 45 42 50 56 50 38 4c a4 02 00 00 2f 3f c0 0f 00 d7 05 29 92 24 47 52 d4 da 2e 7f 1c 8b eb 9e f2 a7 7b ca 69 40 8e 24 49 91 14 cb a0 bf 72 cc fb 64 3c e8 ca 70 14 49 92 a0 64 1f b2 f0 af 88 d7 1d b0 35 ff c1 26 a0 00 32 02 b3 15 22 44 40 8e 84 49 40 b2 a6 62 49 46 a1 83 46 ff 80 a4 6e 00 53 9b e5 a8 83 00 92 04 94 80 a4 4e 04 52 37 0d b8 7b 29 dc a6 f3 7d fe 01 19 61 4d 22 30 e7 3f 99 95 24 92 80 04 24 3a a9 48 18 a2 03 52 27 0b 91 a4 0c 49 12 50 37 4c 6d d6 43 4d 32 ce 72 44 30 23 24 d9 24 22 8c 30 18 30 af f9 e5 67 da 48 30 85 84 21 c7 43 a3 62 64 c2 30 87 a3 df b9 fa 7f d7 97 f3 8c 4a 3f c4 64 c0 c8 a3 ff f2 73 ff 2b 20 39 82 90 49 6e 35 13 7e 26 7f f7 09 e7 84 67 e6 6f fe b6 89 80 8b 44 00 40 16 96 2c 2c 01 4b 2e 72 c1 1f c7 Data Ascii: RIFFWEBPVP8L/?)$GR.{i@$Ird<pId5&2"D@I@bIFFnSNR7{)}aM"0?$$:HR'IP7LmCM2rD0#$$"00gH0!Cbd0J?ds+ 9In5~&goD@,,K.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
246	192.168.2.6	50168	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1079	OUT	GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:05 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2666 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:58:45 GMT Expires: Sat, 20 Apr 2024 13:58:45 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 500 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:05 UTC	723	IN	Data Raw: 52 49 46 46 62 0a 00 00 57 45 42 50 56 50 38 4c 56 0a 00 00 2f 3f c0 0f 00 09 06 6d 23 39 d2 b4 dd bd c6 1f f0 3f 88 88 fe 87 ce 41 55 95 04 d8 33 4b c7 2f 1c b2 2d 92 33 2d cf ef a1 37 a7 00 74 37 3e f4 59 b0 69 24 c9 51 e9 22 7f 37 fc 91 be cb 9e 84 d2 b6 91 24 df 8b 07 1e 9c fe 0b 3c cc b6 91 24 45 e5 1d d3 ff 9b 98 7f 74 17 42 ff 13 01 41 d4 80 50 10 01 15 00 09 98 17 d1 8b 00 04 48 c5 d4 1f 08 81 60 de df bd 5d 60 2b c5 d4 ff d2 e7 ef 13 36 00 85 09 84 c2 af f8 c5 41 90 6d b3 fa 63 ff 10 11 31 01 e9 93 90 db 29 d3 a7 a2 a5 eb b7 d9 36 5b 92 64 db 72 4f be 55 69 1d 5a 7f 05 5a 86 56 c2 09 f7 bc a0 25 78 24 28 ee c7 07 67 4c 02 eb ab c3 94 70 60 50 a1 41 df ef 17 93 a1 01 c7 e0 52 82 e4 0a 26 86 53 2e 46 08 d2 28 86 41 db 36 82 92 3e a7 c7 f1 e4 9f ce Data Ascii: RIFFbWEBPVP8LV/?m#9?AU3K/-3-7t7>Yi$Q"7$<$EtBAPH`]`+6Amc1)6[drOUiZZV%x$(gLp`PAR&S.F(A6>
2024-04-19 14:07:05 UTC	1255	IN	Data Raw: 16 29 17 9d 1e 85 4c 0e 94 59 99 e9 1d 38 6e 8d df cd ee 41 41 e1 e0 8d 91 71 a3 d9 dd 3c 81 84 5c bd 08 60 1c 6a a6 ef 80 b0 85 ad f9 55 82 03 48 48 ce d0 90 a0 91 11 32 05 52 87 96 ea 92 da 3b a3 5b b3 d2 89 f0 c6 70 1c 84 51 96 da 23 00 57 80 7a 09 81 e4 d1 93 07 92 86 d2 67 24 0f 32 14 17 de 14 20 0c 51 14 25 12 c3 ab bd 45 82 79 01 54 d1 a4 c9 dd 21 d4 43 8f 2c 4a 4f fc a2 87 5e 42 04 c2 c1 ac 00 e4 90 db 57 68 51 a2 b4 85 76 2e ee be 5b 88 de 02 7a 3c 3a d4 d1 03 38 85 61 6f a8 09 72 07 03 c1 5a 63 d2 4b 81 a8 e8 15 6d 12 72 21 2f 01 5d 43 76 3a eb 69 04 b5 88 10 23 cd a0 c8 a1 ab 5b e5 76 b3 ca 24 7a 89 76 4e 35 4c 35 85 90 5c cc d7 a8 35 63 da e4 b1 6a d2 2b 40 50 72 06 13 dc ed 0e e6 59 7b c8 d7 32 49 a2 0a 26 b9 66 2c df a3 7f 07 f6 7d 50 6b 1d Data Ascii: )LY8nAAq<\`jUHH2R;[pQ#Wzg$2 Q%EyT!C,JO^BWhQv.[z<:8aorZcKmr!/]Cv:i#[v$zvN5L5\5cj+@PrY{2I&f,}Pk
2024-04-19 14:07:05 UTC	688	IN	Data Raw: 80 d3 6c 18 96 7e 42 f5 e8 7b 39 0f b2 27 79 bc 8b 64 bb 7e a8 a3 7b fb f6 fe 21 d7 4d 48 df 97 76 a5 fc f5 d7 1f 0c 70 7c 0b d7 39 6e 36 f8 fb 4e 98 13 a2 e9 f2 32 96 bc a4 e7 9a 24 4f 44 9c ef 55 c8 d1 b2 e7 b0 b6 31 fe 6a 7b 36 77 4b 15 fd e3 39 7e 75 fd d5 55 53 97 2c 2f 5c 56 3d 5e bf 76 bd 71 c1 ff a4 25 67 ab c9 62 0a a6 40 45 d5 1e 55 bb 23 b2 92 6e dc c6 d6 c8 38 13 e3 ff bf 51 f5 ba 3d 36 2f 09 d6 2f 60 c7 22 dd e9 4f 1b 9a ff 19 9b 83 85 91 ee ba ed 7a 71 33 65 87 dc 6e c9 8a 48 bb 5f 79 3e 91 db 52 53 4a 4c 6f 66 1c 57 dc af 5b a0 19 b5 3d 6b fc ed df 9f 9f 4e 4f cb a3 c6 c8 9f e4 e5 cd c5 d8 a7 cb 49 d5 43 b4 d2 7b dc 9e 07 df 7a 56 42 0b 8e 1e b8 c3 bb 72 c7 53 bd ed 7e b8 e5 e6 eb 07 f2 7f 25 cc 77 db 63 13 2f 6f 2b d7 6d d7 5d 8c 28 93 ec Data Ascii: l~B{9'yd~{!MHvp\|9n6N2$ODU1j{6wK9~uUS,/\V=^vq%gb@EU#n8Q=6//`"Ozq3enH_y>RSJLofW[=kNOIC{zVBrS~%wc/o+m](

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
247	192.168.2.6	50169	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1081	OUT	GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 33182 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 96 81 00 00 57 45 42 50 56 50 38 4c 89 81 00 00 2f ff c0 3f 00 09 88 11 d8 c6 6d 0e 04 0c 11 64 ba ff c0 ca d3 11 22 fa 3f 01 63 a8 20 d3 a2 79 8e 9d 04 49 9c c4 e9 91 29 eb 1c 52 ea 6e db 4f 6e e5 6e 4a 04 00 bb 65 fb b2 dd 59 00 17 58 6f d8 ad ee 4f c6 a5 4a b3 77 17 80 16 30 fb 4d 39 b8 ab d2 4f ef 16 60 15 de ef 5f 64 b3 85 bf 4b 97 51 92 f4 06 80 6c 27 e7 54 49 52 55 95 70 e9 8d 20 75 c2 f4 07 54 11 80 6e d2 d2 9b a4 41 7a 46 4a 15 00 5c d2 89 24 99 53 ed c4 65 2a 34 9b 7c a7 37 b2 4f 12 7b 66 a6 8a 24 f4 9e b6 25 c9 9d 13 9f 99 0c ef 92 d8 92 00 e0 d2 49 c7 98 89 38 34 25 35 09 2c 6e 49 dd ad 14 49 3d 23 92 00 fe 5e f8 b6 d4 dd 48 73 28 04 5f d7 a5 e8 b0 3b 43 8e 16 bf 7b ed e3 ee d6 d8 83 ff 5c 60 c6 1d 7b 66 f8 c3 eb f5 c2 df 12 ea d3 Data Ascii: RIFFWEBPVP8L/?md"?c yI)RnOnnJeYXoOJw0M9O`_dKQl'TIRUp uTnAzFJ\$Se*4\|7O{f$%I84%5,nII=#^Hs(_;C{\`{f
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c3 05 c3 56 00 58 44 fe 1f df 8f e1 63 f8 f2 02 0a 01 f2 98 57 40 f2 c4 36 e7 fc 00 c0 70 44 06 34 8d 58 2c 63 f1 b0 78 79 79 7c fd c6 81 7f 4e b7 c3 65 c8 10 e7 96 cd 06 c3 26 02 40 2c 96 b1 c5 22 f2 c3 0f ff c8 c7 eb fc 35 7c 7c ff af f4 f2 9d 94 21 c7 34 c3 05 3e 34 97 b0 5a 3f c1 c9 d6 7f 5f 0d 0c 87 e0 93 39 b2 5a b7 5a ad 56 2b e0 be f8 ef 39 49 63 c0 17 29 e0 f2 12 11 39 4a ad 56 6b 0e 63 c0 80 e1 46 00 44 00 18 30 0c 1b 6c db 11 b1 c0 c8 06 82 01 40 04 3e 3d c4 66 91 22 22 06 5c 07 00 e4 18 6e 82 88 c8 4c c4 10 81 0d 00 32 02 50 00 82 3b 39 10 d8 04 36 38 09 ae cb d8 ef f3 e4 0d 08 00 88 18 22 42 89 00 10 00 22 0e 2c 63 8b cd b1 59 00 d9 1b 22 b2 13 f8 08 1f 6e 00 0c c3 00 6c 30 08 30 6c 80 01 d8 00 c3 ed 3e 00 c0 46 00 88 00 c0 30 00 50 87 84 36 Data Ascii: VXDcW@6pD4X,cxyy\|Ne&@,"5\|\|!4>4Z?_9ZZV+9Ic)9JVkcFD0l@>=f""\nL2P;968"B",cY"nl00l>F0P6
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 61 ab f3 b1 be e6 4c a8 33 ac 21 7a c4 fd 55 19 37 ac 8f 92 6a de 1e 7e ff 89 f9 99 95 d6 8f ac b1 a1 92 da a3 a6 0d b8 a0 c5 1e ee 48 08 6c 0d f7 56 84 d0 fa 3b e9 9d 0c be 1a 1a 39 25 fb fd a9 8a 92 3b d2 50 b0 db d6 1e 67 61 56 94 df b3 ef 76 ec 76 1e a5 ec d3 9b ca 03 e9 74 cb b4 28 27 2d 56 b1 b7 f5 f1 4c ec 76 92 33 21 5f f0 dd ed 9a f0 66 64 da 89 85 cc a0 6a d5 a9 b4 5e cf cc b3 b7 5a 8c 7c cb dd c1 1d b3 30 ec 29 77 90 e4 bd e0 33 73 0c 0f c7 fe 11 09 e9 f6 61 08 64 ae 76 4d 63 ff 38 74 ef 46 bd f8 a4 18 3d 1a 79 ef 8e d2 e9 9a fb 4b 7a 74 7d 3d 5f de 7b 23 32 66 14 de c8 44 14 d9 1e 3f c8 8c aa 05 4b b9 66 62 a9 fd 3c d8 f6 86 52 be 9d 32 a5 64 59 90 b9 d8 7b 6f 50 26 d1 62 26 24 19 08 bb 9d f2 ae a9 f4 b8 c8 b7 64 30 c4 bd 46 23 b3 ec 6e 5d 32 Data Ascii: aL3!zU7j~HlV;9%;PgaVvvt('-VLv3!_fdj^Z\|0)w3sadvMc8tF=yKzt}=_{#2fD?Kfb<R2dY{oP&b&$d0F#n]2
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 94 1a fa 1b fd 43 a1 28 a5 8b 76 fd 55 34 64 0c 69 a7 da 3b 9f e8 26 ed 6d 3c 4a bb 25 cf d7 25 90 eb f7 86 7a 90 e9 3a f6 33 73 3d f7 56 9e 9e 58 99 df f8 99 23 ad 4c 4f 99 1e 66 be a6 5a 85 cc 4b e6 8e 4b 6b 5a 87 fc fe dd ee 5f d3 c8 68 41 77 13 22 ee 70 4b c8 fe e4 09 d9 1b 0b dd fd 60 6d ba 34 dd 6f 9d 86 4f 0c af 1f 28 3e 13 4f e9 c7 da 88 d1 76 4a ef 6c 4b 22 33 cb 8b 84 ee 6d 60 ad 4d 89 e5 49 dc 3b 93 9c ec 9d 79 26 01 a5 ce a5 2c ec 2d 16 39 82 7a 70 bd 5f af 14 a8 a5 58 16 44 26 2c a0 28 be ae b2 d0 46 a5 50 44 44 b2 35 80 c5 7c 6b 80 a4 30 08 10 18 02 a2 85 a1 fd 96 3f 79 7d d4 c8 ce 46 f4 56 7f ac 16 d8 23 25 d2 b3 2d e4 eb 8c 4e ba db 3b c9 0d 77 90 ef 4e d9 fb 01 59 a9 92 c4 a9 9f 1c 89 13 f1 46 59 b8 41 6b 81 81 53 f7 57 e5 fa 80 1e f0 7c Data Ascii: C(vU4di;&m<J%%z:3s=VX#LOfZKKkZ_hAw"pK`m4oO(>OvJlK"3m`MI;y&,-9zp_XD&,(FPDD5\|k0?y}FV#%-N;wNYFYAkSW\|
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ed 37 c8 cc e5 3a 4a b6 37 ad 2f bb 5a dd f3 81 56 14 69 f4 80 99 d2 e3 1c b9 cb c7 74 1c c9 60 a7 ad 3a 2f b2 c6 86 4a e5 54 55 37 1c 80 70 01 e7 f1 57 e0 4d 49 ae 5c 9a ef ad 47 84 a1 f8 6c af ff b1 c3 e6 30 4c 1f 0d dd 5b 19 43 73 af 15 01 05 3d 68 59 d9 ff dc 4d c3 8d 8c 34 3d cc 4a 3b 69 fd 95 cd 64 64 e5 83 59 9d cf 57 9f 4e d7 d1 7b 27 56 fd 25 6b 1b 9b dc 9e a3 5f 04 86 eb 82 bd bd 66 0f ec 93 70 52 ac db 62 6f 99 01 6a c0 42 57 77 d3 b4 de e3 d4 d3 c3 a4 23 e0 71 55 5d 65 77 37 6d 04 f7 26 53 35 dc ae 5b e8 76 5d 81 4c 8c cb c9 6d 8f 46 9a a4 dd 8f b2 90 6d c8 8b 6d ec 86 ad 36 db b7 3f e7 62 ed 4d a6 d5 1a 1e 92 82 4b 25 f4 d8 19 99 e1 9b e1 aa 60 32 f8 4e d1 81 00 f6 fa 3f 3f fe 31 18 a6 4f e8 e6 bb 9e fe 62 fd a3 19 7a 85 0e 9d 59 99 d9 dd 43 Data Ascii: 7:J7/ZVit`:/JTU7pWMI\Gl0L[Cs=hYM4=J;iddYWN{'V%k_fpRbojBWw#qU]ew7m&S5[v]LmFmm6?bMK%`2N??1ObzYC
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 97 6b 3e 57 8b 6e e8 4d 4b 74 0f ee b9 6a ec 3c 5b 16 76 d6 48 0f b0 49 86 6b b2 87 9f 59 e9 e7 ae 0f 3c 5f d5 af cb 7a a7 87 ff 62 e0 fa dc 36 84 c7 0b eb 15 fd 82 96 cc 30 c4 6e 65 2c dd 31 bd 0e c4 94 5c 2c 8d 5b 64 dd f3 c1 c7 1a fb 9d 75 8f 33 da 40 8d d3 f3 b7 7e e6 bd 78 ec be 41 6d 1d ba d2 6b da ab 69 85 d6 ed ee f9 eb 87 bf fb e8 eb 47 5f df fd 0f ff 79 ba 37 fd 46 91 63 73 2e 46 23 c8 53 a9 36 6d 96 c8 86 8f ff 1f 55 a9 f4 03 8c 67 5d de ac 0f 54 7b c9 15 d7 4a be a7 ef b9 c6 f7 64 7d 58 5f da 0c fc 86 41 55 59 b0 3c 4c 7c b8 79 bc f7 be 57 77 77 f3 68 6e 8f 33 e9 ab 01 32 3a 1e f3 2b 8b 74 4d 5b fe e6 14 0d 5c 84 83 0e f5 0a 61 4c 5f cd 68 6d ae 33 b6 b6 40 2d db ae e1 e7 ba 60 32 25 23 2a 17 0b 14 03 05 c1 60 ca 89 97 d7 19 ec 44 39 90 f1 78 Data Ascii: k>WnMKtj<[vHIkY<_zb60ne,1\,[du3@~xAmkiG_y7Fcs.F#S6mUg]T{Jd}X_AUY<L\|yWwwhn32:+tM[\aL_hm3@-`2%#*`D9x
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 45 0e 03 f7 13 76 52 fc f0 e4 4e 2f f6 36 08 b2 68 22 7b a5 e0 79 8a eb 54 04 d4 a1 cb 24 71 76 0f c0 90 4c 40 55 a4 aa 42 1e 02 5a ac ca b1 ce b3 1c 01 b0 c3 1a 97 37 e1 be 80 6c 91 6f 79 21 c7 96 ba 2f e8 a9 d3 cf 5c 16 55 be 79 d6 33 d5 96 06 8c 8b 42 92 0b 93 a5 14 24 7c a9 dc 82 ec e1 90 7e 5d 6b 75 a6 d0 8e ce 13 a3 81 14 62 e3 b4 25 77 1b 6a 83 5d 12 85 87 8c b0 2b ca 33 b2 c3 92 2e ff ed 76 dc 5e f3 f1 ae 75 19 43 78 a8 cb 7b ce 9c 1f 4e 6f 1d c8 2c 9d 8c 46 32 f3 9d 8b 22 2e 0f 4f 7f 4b ed 67 76 ae 37 35 d0 28 da e3 8f 97 e2 e9 4e 74 41 c4 8a 45 1c 07 22 e8 75 5b 60 d0 0d e7 30 a7 b5 a0 ad d3 e3 e0 2d b0 89 71 af 8f f1 e6 93 02 10 94 24 ab ab 19 c0 8e 5b 3b e9 47 77 d9 57 f6 78 ce ec 71 ea 6f d6 a3 9b 39 b6 ba 52 d3 3c 55 96 5b 76 80 53 cd 57 5f Data Ascii: EvRN/6h"{yT$qvL@UBZ7loy!/\Uy3B$\|~]kub%wj]+3.v^uCx{No,F2".OKgv75(NtAE"u[`0-q$[;GwWxqo9R<U[vSW_
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c6 85 14 47 e6 27 ac 67 d1 10 35 94 f0 5c 49 50 5b 0a 6e c7 5b e4 bc 83 48 38 e2 dc 01 31 09 19 ad a9 60 80 cf fe ee 13 ec 8a 87 13 34 ef 01 20 40 d4 05 68 9e 22 ef 45 2d 80 72 ca d3 bf 50 55 b2 f7 be bc e7 6a 38 66 68 b0 38 d6 7f 1a ff fd 46 62 f7 c0 d6 97 7c f6 76 94 e5 03 f2 65 3d a2 98 02 46 df e7 49 4c a8 b3 05 70 8e 4b 9b d8 e7 dc eb ff a4 4a 1c 05 e5 1a 40 53 e7 82 f4 30 16 00 51 b8 dc 14 c1 aa 5a 37 f6 58 fc f7 c8 e8 1e 39 dd e3 a8 b9 96 75 15 f9 e5 f5 34 ea 8c 1c 49 d2 30 33 7d 9b b7 c7 2a a8 81 a4 e8 5d be 32 01 2c 12 05 c0 32 31 0b 48 4e af 62 80 2f 95 3a ee 20 e0 01 d3 c9 f8 04 83 69 1e 14 00 08 00 d0 3c 15 79 0a 94 c1 4e 7f 75 25 37 b6 a8 b7 21 c1 7f fa fc dc 3d 3c 1c f6 ee ec d2 8d b4 fd 2b cf 04 0d 1a 6b 5f e3 09 d4 f4 58 a9 c7 4c 3d e1 e1 Data Ascii: G'g5\IP[n[H81`4 @h"E-rPUj8fh8Fb\|ve=FILpKJ@S0QZ7X9u4I03}*]2,21HNb/: i<yNu%7!=<+k_XL=
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 4a 06 40 f0 80 a4 15 41 85 83 01 35 5b c7 df 64 02 04 10 c8 92 da b5 32 9f f2 6d ff 31 b0 e9 54 13 2e 7d fe a9 ff f0 09 e0 2b bc b0 2f 8e 88 b3 64 bf 35 9f 64 da e7 c4 71 cd 6f 2c 0b 25 f3 f5 73 a4 99 3c d3 35 42 74 9e 35 23 4e 1f 2b 09 83 3b 6a 5d 40 b9 9b cb 31 45 f8 e2 74 f9 54 9e 25 57 fb dd 44 d4 f4 b1 86 ac fd a5 53 09 96 62 99 a2 78 1b 8b dc 60 05 04 d5 45 82 2a f7 93 02 66 90 99 0a 4c 8c 0b d5 c9 f6 e7 a6 db de 85 df 05 7f e5 7b e1 41 88 27 80 8e 76 7c 13 a7 3a a4 56 5a 2b 26 29 5f 97 7a b0 2c 0f 53 f2 ac 15 6b 91 c9 13 2e 4f 37 ce 6a 91 58 2b e4 00 8a 83 52 2c 36 ac 3e f3 59 dc 61 ec 3b 3a db 36 4b 77 d4 3c 24 7b 30 da 90 35 b6 81 c2 41 5b b8 de a3 89 f9 35 ca 2f a4 e8 45 42 5f 7a f7 fc 9f 22 0b 32 41 31 7a 94 81 b7 0d 4d 77 b5 5d 04 ce 1b df 62 Data Ascii: J@A5[d2m1T.}+/d5dqo,%s<5Bt5#N+;j]@1EtT%WDSbx`E*fL{A'v\|:VZ+&)_z,Sk.O7jX+R,6>Ya;:6Kw<${05A[5/EB_z"2A1zMw]b
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: a9 85 56 09 9b e3 6b 77 e8 15 2c 5f b3 f7 81 cb 6f c1 6e ae b8 f1 71 1f 0e fa 6d df 56 cf 6a 76 00 17 05 9c 44 40 90 ac 1d c1 00 7a a3 fc b3 eb 7e 97 e4 85 0e 7e 78 ee d4 fa 46 b1 e1 74 78 eb db 54 1b 02 be 50 ef 35 72 11 a8 b8 3e c9 dd 06 41 ee b2 f3 cd 62 f9 66 66 b9 3e e7 c5 c8 07 1d ec 9e b2 32 f6 2d ce ad d4 e7 19 7e 3b d4 08 7c ae 35 ee a0 d6 ef 9a c6 bd 76 59 b0 27 a1 23 6e 7d 04 cd da 63 19 9e 0b 1b 69 ac c3 d8 5d 03 30 31 5a e5 66 00 ff a9 2b 1e bf 93 db bb 3f 07 86 c5 d7 ac eb f3 7b 84 eb 5b 76 70 f8 d8 ff 1f 02 fe 19 66 ec 24 29 33 17 b1 82 54 b9 ab 37 61 59 8f 8a bc 84 f9 51 fd e2 91 a1 03 48 ee d3 22 a6 4f 95 34 2a ac 29 c7 3e 56 2d 8f 9f ed 33 c5 88 1b 5b 83 dc 36 4d 8c c8 6e a8 2a 7f aa fb 65 d1 1a b0 8c 93 77 a7 f7 09 08 0b fc c9 1b f0 9f Data Ascii: Vkw,_onqmVjvD@z~~xFtxTP5r>Abff>2-~;\|5vY'#n}ci]01Zf+?{[vpf$)3T7aYQH"O4)>V-3[6Mnew

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
248	192.168.2.6	50170	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1081	OUT	GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10942 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:46:31 GMT Expires: Sat, 20 Apr 2024 13:46:31 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1235 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	721	IN	Data Raw: 52 49 46 46 b6 2a 00 00 57 45 42 50 56 50 38 4c aa 2a 00 00 2f ff c0 3f 00 09 46 6e 23 49 51 55 35 3d 40 0d ff 7f f0 da ac e7 88 fe 4f 00 fe b5 00 64 5c 30 4b 00 62 ac e3 16 2f 20 01 4c f4 45 ba 4a 57 e9 2a 5d a5 2d 97 d8 f6 81 a1 4a 7b 2e 21 b9 43 96 6d 2e 75 e3 38 8e 24 35 4d 35 18 c7 88 04 24 0d 53 4d 8b c8 04 ba a4 09 b5 11 81 b5 84 ea cc ce de bb 70 e1 0a 97 9a f4 05 36 6c 1b f6 a1 04 90 00 72 63 73 23 01 24 4e 2e 7d ab af de 33 2f bb 7e 01 39 92 24 45 92 db e1 d0 a3 ec 5e 7c 57 07 fa 8b 88 53 dd bd b3 12 40 91 24 c9 91 e4 ab 17 26 5c 18 ff 7f dd 8a 53 e8 0c 8e 24 49 8a 24 5f 06 09 35 0c 71 f9 58 bb ff bf ea ec ac ff 0c dc 36 52 d4 39 cc 51 16 ee 13 38 43 51 e8 30 c7 31 7e 86 92 23 5c 04 60 05 4b 75 f8 37 df 3e bf c5 2f 3f df 54 97 a4 ba 00 60 d5 e1 Data Ascii: RIFFWEBPVP8L/?Fn#IQU5=@Od\0Kb/ LEJW*]-J{.!Cm.u8$5M5$SMp6lrcs#$N.}3/~9$E^\|WS@$&\S$I$_5qX6R9Q8CQ01~#\`Ku7>/?T`
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 86 7b cf 04 2d d8 b6 dd b6 0d c0 a2 06 6b dd 83 f7 50 f8 20 29 f9 b5 34 ff df 22 49 ca f3 3c 99 59 2d 3b 3d 3e eb be 8b bb 3b bc 04 e7 1d 70 e5 05 f0 16 08 6e 9c dc e1 c6 c9 dd dd 1d c6 dd 5d da aa 2a 9f 07 e9 ca 9e ad 89 bd ff b0 39 e2 19 49 22 0f ee 6b 15 1d 49 e4 21 d1 93 76 4c 4c 24 3a 47 bc 70 9e 13 ee 50 91 68 62 a7 21 3a b0 8a c4 ed a8 1d 2b 89 bb af 54 e0 ee ce 90 17 3a d8 ff 1f 92 a4 ef f7 57 d5 ff 6a bb 7b 7b d6 46 f7 d9 b6 7d 91 32 3b f6 5d 76 97 19 91 6d 84 1b d9 b6 cd b1 7a d4 a8 ae fa ff e8 46 b6 ad da 76 c6 98 fb dc 77 df 67 12 47 c0 9e 4a 9e 3c f6 14 8e c2 51 08 ca 41 16 c6 c0 16 33 bd 7b ce 9a c1 88 6d 23 45 99 e5 a3 ee 1e f3 ff 27 0f e5 cc f9 04 8e 40 ce 17 cf e5 05 70 31 c5 04 50 22 9e cb e7 3a 90 83 50 70 a9 8a da 94 a3 5c 44 57 db 59 Data Ascii: {-kP )4"I<Y-;=>;pn]*9I"kI!vLL$:GpPhb!:+T:Wj{{F}2;]vmzFvwgGJ<QA3{m#E'@p1P":Pp\DWY
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 94 c9 d4 93 81 8a 63 db b6 9d a6 09 bd cf 25 d7 b3 c6 e5 cb 13 51 e8 f6 f4 2e 24 09 a0 3c 08 c1 31 83 a2 8c 66 76 ea 40 26 49 92 a8 01 f4 3f 17 e7 8c 71 f9 f9 49 53 9c 5d 28 7b e1 4a 1a d2 d6 66 b0 68 c0 46 39 69 2c 1a 74 ad 42 ad a7 8a de e7 52 09 fa a5 fc 06 34 ef 97 49 ee 4a 6e 14 c0 51 0b ba 61 0a ca 6a af 7a 0d f1 00 12 85 9d d5 73 07 84 42 b9 5c 44 de 03 57 92 24 20 0e ed cb a7 b3 89 57 5e bc f7 2c fb af f7 44 82 24 01 bd cf 25 78 00 a7 44 d6 ce 50 f2 50 82 b5 94 dc 95 24 b0 6d 14 47 ba f5 8b c3 04 94 d9 3e db 76 67 b9 02 db b6 ed 84 de e7 92 1d d8 03 db 82 05 3d 93 c8 31 4c 1f 5c 29 88 69 fb c9 39 c2 fb a2 ec 36 6a b1 f3 37 96 66 90 29 00 7a 9f 8b c7 ce c6 2b 57 0c 02 43 0e ce 55 7b e1 4a f2 67 67 db e7 66 8b db 05 85 e5 25 44 d2 7a 09 f9 6e d6 00 Data Ascii: c%Q.$<1fv@&I?qIS]({JfhF9i,tBR4IJnQajzsB\DW$ W^,D$%xDPP$mG>vg=1L\)i96j7f)z+WCU{Jggf%Dzn
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 6b 6e 9f 4b 4a 97 3a 46 41 b1 c8 eb f2 0b 93 53 9e 96 2b 2c 25 85 cb 29 6b e8 02 f7 95 44 2f 3c 17 25 8f 30 b7 cf 25 b5 cb 2d 32 0a 0f 0a 11 81 c9 e5 34 b9 6b 1d 47 98 f7 24 6f 33 c2 47 56 43 cd fb 9c 0b 16 35 2c a6 4c 51 87 1a da bd ab 34 b9 a8 95 64 b3 33 e0 22 a4 f6 b9 24 75 09 c3 02 e2 bb 4c d2 17 77 68 1a 97 47 1d ac b0 27 bb bd 64 44 05 de b7 5c e2 0e 5b 80 29 38 0a 91 06 a4 42 96 5e ba 77 15 68 f8 9d c7 7e ed e0 c3 e1 ca 92 19 6a 58 e3 da 3e 97 74 ae 25 de 2e 69 e8 9d 2a 14 c9 5d 2b 15 e6 3d c9 1d 3c bb ba a1 ac 7d ce c5 a2 ca 88 13 56 5e 03 4f 7a 17 ee 7b aa 77 32 15 33 51 4f 9f 73 51 43 83 e3 ba 82 e1 42 55 02 eb 42 21 bd 8b 52 e6 44 6f e3 c5 59 44 2e 4b 9f 73 71 59 fb c2 14 e4 14 3b 14 2f 42 90 dc e5 6f ee 30 27 5b d0 f1 a5 e7 b9 ec 0c 8c 3b 30 Data Ascii: knKJ:FAS+,%)kD/<%0%-24kG$o3GVC5,LQ4d3"$uLwhG'dD\[)8B^wh~jX>t%.i*]+=<}V^Oz{w23QOsQCBUB!RDoYD.KsqY;/Bo0'[;0
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 27 62 66 60 61 2e 3d c9 cd 81 12 ac 15 0f e2 59 22 db 26 eb d0 55 26 65 75 d5 58 2f 31 57 15 b4 64 73 d1 05 bc c1 ad b2 15 ea 12 c9 25 7d 6e 4b a4 35 5a 64 1d 05 67 e5 6a 0a 74 e9 92 df c4 1b 72 5e 50 d5 64 ff 42 75 19 75 f3 ce 48 1b 72 49 9e 9b c5 7b 61 ac 99 2c 94 40 d7 b1 6b f1 86 97 58 cc cc dc d7 54 77 bc 18 b0 ae 6b c3 5b a2 72 8b e5 92 3c b7 65 42 71 b1 76 26 35 1c 8d 86 b4 30 75 ed 32 f0 1c 7d 7b 51 9d 26 25 d5 c0 bb 3d 0f cf cf eb d4 b8 c6 5c 9d 89 29 cc 25 7d 6e 67 8e cb 1b a0 42 43 b7 2e 5b b4 61 90 dc c1 7d 11 8e 3f 9b ec 55 47 70 6f a2 14 c0 db e7 d2 b9 0b d9 2a 03 41 b4 a3 77 ea f2 c0 e3 f9 cc 9f a2 4e 32 65 ce 2b c1 57 8d 55 de ab dc b4 61 5c de d0 24 ae 3c e7 b9 9c d3 72 52 dd 81 67 06 87 e8 27 dc 67 34 c8 a5 37 b9 19 1a c9 a8 34 e4 05 a5 Data Ascii: 'bf`a.=Y"&U&euX/1Wds%}nK5Zdgjtr^PdBuuHrI{a,@kXTwk[r<eBqv&50u2}{Q&%=\)%}ngBC.[a}?UGpo*AwN2e+WUa\$<rRg'g474
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 47 cb 84 90 86 e3 47 2c d1 eb ad 70 23 f3 bb 49 56 ef f3 ec 72 f1 ec f7 ae ce 23 07 29 7d 39 f1 1f 59 9c 20 96 52 de 6d dc 57 8c 9c a1 40 4a a8 cc b3 ac 70 96 a6 a1 88 cc 27 78 45 a3 b9 24 cf 6d ac 98 f0 68 70 55 ea 2e 7c 5b 44 de a5 eb ce 5b 31 50 cd fe 4d 99 4c 34 94 f6 08 4d 6c 5a 04 8d 84 32 52 ca 24 35 32 cc 31 e7 66 e7 9f 75 4f db c3 2b 13 ef 0d 4c cd 70 ef 97 11 d5 4f f4 22 ca 76 04 49 32 2d 21 5b d0 5c 42 bb 04 a6 4e 88 d0 1c 0b 65 6a a9 ed da 94 4b f2 dc 36 c8 c1 7e dc d9 21 7a dd 20 bc b0 d1 b5 ab 30 1b 8a d4 9a 72 eb 42 2b ae 2d b2 9c 6c 82 4c fa f7 5a 4b 44 86 70 40 5d 96 5d 78 79 ae ff d4 a0 00 ff 2f 93 f3 4c 10 08 76 93 79 9f e6 a7 ee 50 c1 4b 20 fb b4 78 a6 fc 78 de 78 11 c2 5a aa e7 11 17 de 76 6e 2a 87 d9 b5 bf 5d 45 5f 2a 87 1a d4 ba 91 Data Ascii: GG,p#IVr#)}9Y RmW@Jp'xE$mhpU.\|[D[1PML4MlZ2R$521fuO+LpO"vI2-![\BNejK6~!z 0rB+-lLZKDp@]]xy/LvyPK xxxZvn]E_
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: e7 fc df e2 fe 8d ae ce 9d 6e 7b 5e 11 dc eb b6 d7 dd e1 dd b1 7b 3e 58 72 ea f5 eb ad 7c b1 a5 32 4d 5d bb 26 7c 7e 40 b3 7e 9e c1 2c 4d d3 7e 73 6a b5 dd f2 67 8e c0 92 2f 87 1f 7f bc ff d2 4a 29 80 f4 64 28 a5 9d d8 98 4b fa dc 34 6a 02 35 54 ae a1 22 d5 29 5c bb fd 4f d7 c7 9e ef 76 0e ff 7f b4 d7 3f 32 22 5a 2e 3a d9 00 f3 1d 67 1c c6 28 39 58 49 2a 95 41 a4 12 1e f3 e4 a8 b0 14 c7 11 1d 78 07 31 ae f2 e1 65 34 03 33 3e 5c cf e6 55 05 7f c4 50 bf 44 b0 18 0c 6c c2 a1 9a 5a 15 7e fe 3c 63 0a 3c cc a3 53 7a 94 67 e9 3c f5 ef 77 ff 5d 7d de 56 6b 9f 4b f7 2e 09 c1 c1 54 9c a3 2f 06 4a c1 02 dd 94 c2 35 61 8a 72 34 5c 3e 3a 87 5e d6 27 f6 72 54 d1 4c c6 1e 51 64 d1 22 62 30 01 a4 cc 28 93 71 4c 45 90 c8 ae f4 68 0b 0a 52 8a 50 86 c2 90 70 85 03 9c fc 48 Data Ascii: n{^{>Xr\|2M]&\|~@~,M~sjg/J)d(K4j5T")\Ov?2"Z.:g(9XI*Ax1e43>\UPDlZ~<c<Szg<w]}VkK.T/J5ar4\>:^'rTLQd"b0(qLEhRPpH
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 73 d7 08 1e e7 3f 70 f7 ca 8e 7d 3f 4a ca 95 fa e3 55 c0 a9 36 dd 37 22 e8 9e 14 a9 31 2c 86 10 b1 8a 9c 4f cd 09 a7 70 08 55 db e7 92 ce e5 f5 c9 14 b4 41 15 e3 51 e1 ac 35 63 24 74 9d c4 5d 97 2c 7f 1a ee 29 29 16 d5 15 53 24 97 b7 65 aa a7 df f3 e0 52 80 5b ff f8 ec f6 17 60 65 ef 65 ca 15 e9 19 36 dc fb 69 db 2c 34 6e 75 86 55 af d5 a4 04 e4 43 bd 9d ca 49 9e db e7 92 ce 55 33 1b 30 72 c8 8c 55 8e 4b 08 d8 c2 04 dc 81 4c 4d ea 9a 9f 39 c1 07 fd 7f 5a 53 d0 cb f0 fe 5e e1 df b6 2c d8 db d2 d9 32 4e 51 e1 8a da 09 34 98 13 dd 75 41 cf 5c 65 d3 e5 ac 4f e7 68 7a 75 d2 65 d1 dd d5 71 50 12 72 74 79 d0 a3 f5 7e d4 43 a8 a7 91 53 a1 f6 3a 17 46 b1 81 e4 c9 34 3d e5 54 9f 9c 2f 20 b4 33 fb 78 17 ae 7b 3a 17 d3 fd 69 27 7c 12 55 73 9c cc 28 c3 1a 5c f5 df 72 Data Ascii: s?p}?JU67"1,OpUAQ5c$t],))S$eR[`ee6i,4nuUCIU30rUKLM9ZS^,2NQ4uA\eOhzueqPrty~CS:F4=T/ 3x{:i'\|Us(\r
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: b9 53 02 77 bf 73 31 58 26 94 59 ac 99 82 71 23 7e fc 37 b3 7b 6b d7 f0 e4 f2 56 ae ad c1 35 0b cf 4e 05 22 78 25 09 1f 74 cd 2e 72 98 1b dc 0b 65 dd da e7 92 da 95 a1 52 98 5b 8c db 77 e5 f2 33 5d 95 37 a1 d8 59 a3 ae 59 74 32 19 5b 05 d9 58 8b c8 79 8f ba 0b 15 67 16 ee b7 f6 b9 24 74 d5 c0 06 c4 05 81 8d a4 ae 95 5c eb 57 1e df 06 ce 99 ed d1 79 b4 f3 e6 df 25 d9 46 a5 2a 0a fe af 7e ee e9 fd 73 ee 1e 5c 7d 97 46 5d b1 3e fa e5 6d 21 f3 d6 3e 97 d4 ae 1e 8f eb 7b fe f9 57 fd 81 63 7e cd 2a a7 63 08 a6 19 31 57 65 de 9e 2d 02 ff 5a af 7f f8 e8 55 97 d0 e5 0d 2f d2 7c 6e e4 8f ac bf 7c f7 16 53 cd ed 73 49 ec 0a b3 88 8f cb bf c8 fa 4b 67 2e 3f cb b5 92 3d fb f2 a7 3f 3f e1 73 da 90 64 ec 95 ef 5f 18 a0 b4 cb 3f fc 37 a1 ab f1 fc 80 6f da 5f 1f e2 fe 59 Data Ascii: Sws1X&Yq#~7{kV5N"x%t.reR[w3]7YYt2[Xyg$t\Wy%F~s\}F]>m!>{Wc~c1We-ZU/\|n\|SsIKg.?=??sd_?7o_Y
2024-04-19 14:07:06 UTC	181	IN	Data Raw: 94 a2 4c 99 ea 94 8c b4 d5 2b 93 10 28 5b de b9 5d 2e 57 25 18 97 6f e8 a9 35 53 c9 62 9d e4 7a bd 6c ae 8c 18 97 37 61 5c 9a c6 e5 83 fe 7a c7 c8 97 cb 75 b7 e0 b4 64 c0 28 20 54 83 58 0e 5e a9 8c 35 a3 97 cc 35 0a cf 86 98 87 c6 9f cb 1f 83 f3 f6 9d eb e5 72 9d a2 89 b7 0d a5 32 02 77 b2 1c 97 8f 9d a7 5e 36 97 a9 e8 85 ca 88 9a 14 02 2c 16 8e db 5f 3c 57 d3 ff 97 5f 70 5e 3e a9 f4 39 d3 e5 73 39 c0 84 62 d1 f3 f2 c9 29 1e ec b7 2f 9d eb 9c d9 50 22 f3 c5 72 5d dc b9 a3 f5 e0 94 d8 59 49 61 2d 17 d3 e5 40 83 21 b0 5c 4c 97 5f fa f7 01 Data Ascii: L+([].W%o5Sbzl7a\zud( TX^55r2w^6,_<W_p^>9s9b)/P"r]YIa-@!\L_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
249	192.168.2.6	50171	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:05 UTC	1081	OUT	GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 3346 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	733	IN	Data Raw: 52 49 46 46 0a 0d 00 00 57 45 42 50 56 50 38 4c fd 0c 00 00 2f ff c0 3f 00 e6 50 dc b6 8d 23 ef 3f 76 fa d5 6f 44 4c 00 af af 75 19 13 76 24 a4 39 13 8f 31 02 8c d0 bb 1f 09 64 54 23 60 52 c8 07 cd f2 ba 1a fb 4e 3a d2 b6 2d ba 94 83 93 b9 bb bb bb 5b 53 45 e4 ee ee 0e b9 87 ee 0e c7 0d 77 3f 6e 33 c7 cf 19 77 77 77 39 d6 68 cb 3b ff d7 2f ee a1 93 39 69 0f 12 4f 8a c3 22 88 59 c1 40 46 11 6a a3 8d 6e c0 f9 33 34 a2 88 88 89 58 80 4b ee d2 3b 98 2d 60 3b 70 36 30 a4 d4 8f 45 6c 80 46 7a 0b f8 59 0a 3b 20 eb e8 43 53 aa be ec 8f 66 0f a4 53 72 6d db 3a b6 e7 54 7f 8f d8 b6 93 6b f0 4d b8 4c 9d d6 76 ba d4 4e 6d db bd 9d 2a df 3e af 3e 7f cf fb 1d 49 80 24 c9 b4 ad 7e b6 6d db ef 9c 67 db e6 b7 6d db b6 6d db b6 ff b3 6d db f6 99 fe 4f 00 dd e8 ff 17 5b 59 Data Ascii: RIFFWEBPVP8L/?P#?voDLuv$91dT#`RN:-[SEw?n3www9h;/9iO"Y@Fjn34XK;-`;p60ElFzY; CSfSrm:TkMLvNm*>>I$~mgmmmO[Y
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: dd d6 7b 06 25 df 6e 3d 5e 7a 6e d4 d3 da 6e 00 68 6c d0 e0 ab 51 70 49 f5 cc 57 1a 0a a1 cb 97 95 af 14 5b a5 e2 23 b0 43 61 fc b8 de 89 21 a5 36 f0 6c 66 50 28 bf f8 5d a1 05 4b 98 09 c6 c7 47 b6 54 64 0d 3a f2 2f 0a e7 47 91 37 46 94 d8 a4 df c7 01 87 01 a1 33 c6 bc ac 0e ab 56 75 45 1e 28 a4 b2 20 6f f5 d7 a4 9f 67 bb 41 a1 d6 5c dd 55 a7 f5 3e a6 b0 2e a8 58 74 74 57 84 bf 3c c0 b8 ed a9 ff 9f ce ea bc 52 2c b9 28 b4 3c 13 ad 26 52 67 e5 f6 0d 1f 71 c0 f1 93 26 8d 8d 93 56 ef 5f 43 8d cf e5 35 bf 54 d4 f8 54 96 3d 18 21 c8 46 8b c2 6b 8d 7a 5c 92 6a fd ac 89 39 7c da 97 ac 7c 88 f5 25 a7 36 6d bc c8 70 fd 15 89 45 6e 7d e1 8d 23 45 fb b9 e2 e9 05 d0 b2 a6 c3 49 4e 4e 3d 1a be ef 80 17 99 06 cc 0b 0e 5e 1f 1d bc 21 66 87 41 ab 23 fd c8 cb 97 2c ca 3c Data Ascii: {%n=^znnhlQpIW[#Ca!6lfP(]KGTd:/G7F3VuE( ogA\U>.XttW<R,(<&Rgq&V_C5TT=!Fkz\j9\|\|%6mpEn}#EINN=^!fA#,<
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 1a 74 a4 a2 3c 83 7f 7d 02 80 7a 03 5e 23 18 26 52 35 3f 19 00 f1 48 e4 a0 e2 88 de f7 7e 01 40 17 26 0c 92 48 d6 f7 b0 2d 40 1c a8 ea b4 58 e4 24 a4 64 92 61 e1 b8 d8 0b 86 af 04 19 9d 1c 95 c7 f4 7f fd 0b 29 7e 90 44 b4 09 df 8f 01 0e 03 e1 b6 46 3f 6f 18 be bd 10 50 8f 40 c1 61 2e d1 b0 cb 4a db 40 2c 6c 36 90 18 c6 f3 be 07 d4 3e 50 c5 1a c9 86 25 53 8e c8 0d 08 7b 73 f9 05 86 35 2b c6 34 38 b9 6e 3e 88 f4 49 74 ec 00 00 66 80 10 4f 45 e1 98 39 f3 24 98 11 d9 62 a6 72 12 f1 26 7c ad 44 82 8b b8 c3 f6 71 14 bf 76 e7 c1 a0 50 02 33 00 84 b7 ea 7d 20 1e 0e be 9c 04 a0 c3 a4 c5 06 f5 3d 68 54 b1 c8 b0 f0 2a 30 5a 55 6d 26 1f f6 de ef 5f 08 9b d1 6d bd 51 d5 a1 32 a5 51 d9 06 c8 48 6c 31 65 11 c1 07 29 c1 88 5f 0e 93 34 23 02 d5 8d e8 7f bb 10 c8 f7 a9 29 Data Ascii: t<}z^#&R5?H~@&H-@X$da)~DF?oP@a.J@,l6>P%S{s5+48n>ItfOE9$br&\|DqvP3} =hT*0ZUm&_mQ2QHl1e)_4#)
2024-04-19 14:07:06 UTC	103	IN	Data Raw: a4 5a 9e 4e 51 cc c7 58 71 bb 60 1b 4c 02 a6 1b a5 ed 2e 45 f3 fd 65 ed c9 1d aa c1 84 bc cd 0c 3b 52 50 de de 3c 44 51 5d cf f3 4a da e3 bc aa 6d ab ba 6e 18 86 ae ab 6a 5e d5 2a 65 8f 1b 79 25 c5 78 43 2f ab e9 c9 55 fc 47 19 fb 52 d6 be 1e 5e d5 7f d5 f0 a4 46 5e c1 07 ed e5 ff bd fc bf 97 ff 77 bf 12 00 Data Ascii: ZNQXq`L.Ee;RP<DQ]Jmnj^*ey%xC/UGR^F^w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
250	192.168.2.6	50172	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1080	OUT	GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 48232 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 60 bc 00 00 57 45 42 50 56 50 38 4c 53 bc 00 00 2f ff c0 3f 10 4d 48 0c c0 36 6e a3 00 7c 44 10 ee fe 03 cb be 5b 21 a2 ff 13 60 e3 dd 99 07 93 35 59 da c5 27 cd 01 26 98 01 b6 24 cd 48 bb 67 37 59 55 d4 40 3a 87 23 ed 6e 95 76 b5 bb aa dd a9 12 4d a9 07 09 00 81 41 d6 9b 76 47 12 b5 a1 a6 6f 30 6c e3 73 75 2e 26 38 34 6d 82 c6 bf 5a 71 09 c8 43 fb ef 8f 20 03 55 15 11 06 dc ad 15 95 99 49 e3 f5 21 aa 24 05 00 6e 6b f7 7f 48 b2 2a 24 d8 96 a4 a5 94 dc 2f 5f 71 01 ae 97 89 66 7d 3d e4 73 4e 84 22 c2 1c 69 73 02 d4 75 80 78 6c e4 2a 04 00 0a 69 30 d1 94 0d 00 7f 4f 44 20 69 00 30 47 12 20 89 3c b8 9f e7 01 e0 bb 8a 6e 65 e7 24 49 bc 3f 0f 6e 92 55 45 b6 66 26 93 19 0c 74 6f 4b 2f f3 e6 ba 90 99 87 00 ba 4b f1 92 ac 8b 95 2f 1c d0 00 5a 62 06 90 Data Ascii: RIFF`WEBPVP8LS/?MH6n\|D[!`5Y'&$Hg7YU@:#nvMAvGo0lsu.&84mZqC UI!$nkH$/_qf}=sN"isuxli0OD i0G <ne$I?nUEf&toK/K/Zb
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 83 17 ce d2 f5 31 63 1b 25 a4 11 f0 50 77 75 57 77 fd 83 d3 f5 4c d6 58 5e c8 1a a5 cc 17 b7 e3 c7 3f 95 6c 90 12 52 1a 11 60 0c 20 c3 60 80 94 2c b2 b2 fe 36 97 9f 77 df b8 76 ff ed a1 7f 05 1a c9 5d bd ba cb bf fd 20 40 04 c0 00 63 72 f5 42 29 a5 34 66 76 03 00 be ef f8 bf 57 b6 6c a3 57 7a a5 94 63 40 30 00 80 e4 43 3e bc f0 4b d2 1a 2b 2b a5 4f db 32 ef 3c 7b 25 df f7 d0 f5 e1 34 25 cb f2 52 fe 0c 10 31 27 63 32 e7 34 1b cf f5 ef fb 94 3e 88 37 bc e2 55 b2 14 5c f2 ef 09 6e 1d 24 6f f2 36 11 11 65 fd f4 da f7 38 b3 cf 3e 91 32 69 fd 7b 02 23 06 80 81 e4 26 f3 c2 6d 6e 32 19 c6 2b 1f ef 5e be bc c2 fb fc 0c 28 c9 eb 31 80 e0 64 e4 85 5d 26 37 99 94 18 be f3 f1 67 3e fe d4 db 9f 00 bc 80 af 89 2c 93 74 3f 18 91 01 30 13 bc 70 9d 9b 0c 43 c9 db d7 de bf Data Ascii: 1c%PwuWwLX^?lR` `,6wv] @crB)4fvWlWzc@0C>K++O2<{%4%R1'c24>7U\n$o6e8>2i{#&mn2+^(1d]&7g>,t?0pC
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 70 b7 c4 59 38 24 33 97 3d c2 dd dd dd 5d 02 27 70 18 56 e3 6c 9c 33 f5 86 6d db b1 37 fa ff 6d fb 71 e1 be ef 78 9a 36 4d 91 b6 33 9d 76 8c c7 b6 6d db b6 6d db 36 df 7d 8c 77 b6 3f 9f b1 3d ed 93 22 68 92 3b 17 ce 73 c7 fc ff ff 39 49 92 5e af cf f7 17 c8 8c 54 b9 a6 7a 6c db d6 6d e6 b6 fc 23 7c dc 93 75 b6 6d db b6 ed 6d bb 2a 9d 59 e9 88 f8 be 05 04 45 fe 8f 36 01 7a ec ff 5f 6f 4b 53 f6 39 55 85 bb bb 4b e4 92 32 00 87 08 52 a2 26 73 87 8c 09 b8 13 75 47 78 44 e8 ee ee ee ee 0e 4f dd b3 83 b3 ef bd a7 2d 7f cf 02 87 b4 99 00 13 78 d2 27 fd e2 bf 04 fb a7 1d 7e db d2 4e b1 94 98 b5 2a dd 58 aa 15 fe 71 be 38 ec 21 b0 d1 21 68 a5 b8 bb 6c 9c 8d 53 11 6b 55 fa c7 a9 f4 09 bb 52 74 0a ee 4e 7a 09 db 25 a4 d3 ef 08 08 3b c6 5d d3 27 6d 4b b1 5f fa 9f c7 Data Ascii: pY8$3=]'pVl3m7mqx6M3vmm6}w?="h;s9I^Tzlm#\|ummYE6z_oKS9UK2R&suGxDO-x'~NXq8!!hlSkURtNz%;]'mK_
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: d5 88 e5 34 dd 4d 93 6a 6f 76 37 99 78 b3 62 a3 23 8d bb 66 da 78 33 2c fc 84 de 08 2a f0 7a dc b5 88 13 7c be a2 ad b2 95 ad ac b7 d5 e1 0c 08 ef 7f a1 0a 0a 02 28 df 55 1c 4f d3 25 29 9b ab 0a 7b f1 b4 70 e6 02 79 d0 ac 80 ca eb 9f e5 54 1a b1 81 34 96 e8 10 9f 23 0f aa 58 46 d8 45 bd 3c aa 74 87 be 6f ca 75 6c 4c 23 2c 03 57 dc ca 28 95 2c 31 8e 3b 75 0d 54 d3 18 f3 92 fb ce 8f 7a ea 76 d3 02 91 8b 71 f3 46 b5 51 89 cf 5a 9f c6 6e 4e 4c 9d a5 f3 13 b3 ee 83 aa 5b c7 fc 72 32 68 fd ef bc 3a 78 cc 9d c7 9b 7d f5 95 de c6 8d f3 b1 3e 7f ad 38 17 e7 d9 c6 53 91 bb 19 4d 16 79 b5 7d 31 ea 47 6f 77 f8 ac 41 d1 2a 3d 19 f4 03 dd 39 f6 b8 ba 71 82 3f 93 ce e1 1d 42 4b 32 3e fa 95 79 1f f6 41 2f a4 36 5b 28 51 54 cb 4f 94 cb 56 d9 cb e9 d1 f4 fc 0c 2f b6 17 03 Data Ascii: 4Mjov7xb#fx3,z\|(UO%){pyT4#XFE<toulL#,W(,1;uTzvqFQZnNL[r2h:x}>8SMy}1GowA=9q?BK2>yA/6[(QTOV/
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 6f 52 c5 f0 3a 97 81 74 49 9e fd 81 c3 61 31 6f 22 8a 63 f9 e8 2d 1c 72 5c c2 42 ac 6b 92 2e 0a be 27 aa e1 65 d2 89 8f 97 ed 23 0d 2a 2e 76 31 74 76 aa a7 31 9f fc 9b 88 8d c5 da 38 f6 67 ce 93 f6 1c 47 9b e7 01 f4 a0 c9 e7 3f d2 7c 6f c5 f6 cc 53 b3 c9 a6 62 76 7a 41 da 39 7a f3 8c 56 9f d5 30 43 9b bd e2 4b 8b ec a1 74 24 80 e6 64 66 ba 6d 7e bb 21 88 b7 22 eb a0 0c 3e eb 43 1a 46 fc a4 fc ce ff 8d d8 b8 23 b4 ce d8 1e 78 66 1b 4b c6 61 24 78 34 4b fb 78 02 93 cb 14 87 f6 03 97 0f b3 fa d3 c2 d8 8d 3f 3e 51 42 d7 27 be 14 ba e3 a7 bc be e6 e6 76 11 ad bc c1 ab f5 2b 34 12 21 fa 1e 0d d4 9d 9b 54 c7 97 a7 fb 3f e1 a4 6f 57 d3 f9 c9 fa e9 f8 c6 72 5b c6 a5 f8 d2 fa 91 9e a2 8b d1 38 3f ff c8 db d9 b0 90 62 8c e9 12 cd c6 3c 61 3d 98 e6 8f e6 c9 c4 ac ad Data Ascii: oR:tIa1o"c-r\Bk.'e#*.v1tv18gG?\|oSbvzA9zV0CKt$dfm~!">CF#xfKa$x4Kx?>QB'v+4!T?oWr[8?b<a=
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c1 10 2b 14 1d 22 9a 12 a8 ad b5 42 58 67 35 1b fc e5 6e 6a 8a a9 bb c0 3e ef 1f 4f ed ce 32 62 b6 3e c0 da 4e d1 f0 dd 84 68 7b d9 c8 31 16 69 1c bf 45 85 4f 31 ae 85 66 7f 37 0a 3d 7d 34 88 ba b0 e4 f5 58 8e b1 e8 6c 1c c7 33 fc d2 9b 6d 7f de 9f 6b 33 65 e4 c3 ae b3 77 4d 44 26 8f 46 cb 71 db c9 77 88 56 6c ef ff 08 0f 9a 63 54 ca c2 88 45 f1 08 9b ac 83 ae c3 4c d0 c9 af f5 2e 3e d5 ad 6d a8 f0 a7 2d 59 55 c1 f2 7e 23 36 15 26 ba 7f b7 d7 79 2e 3e ed c9 d9 74 36 6b ee cd 6f 67 13 4b c5 2c 62 b5 6d cc 5a a0 2a cb ff ca 97 e2 02 a5 6f ac 28 66 8d b3 49 53 2b c3 fe 58 bf c4 13 f9 a0 a3 79 13 cb de 92 f5 cf fb e6 8d cc b6 7b 33 3f aa d7 9c ee 51 6c 34 1b 15 25 c6 cf 61 e4 2b 44 4e 95 57 fe a4 37 e3 38 6e 5f ea 7d 6c a2 d1 d9 2f f5 5f 7c d9 6f fa fe 5d 58 Data Ascii: +"BXg5nj>O2b>Nh{1iEO1f7=}4Xl3mk3ewMD&FqwVlcTEL.>m-YU~#6&y.>t6kogK,bmZ*o(fIS+Xy{3?Ql4%a+DNW78n_}l/_\|o]X
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: cd af f1 45 ff 5c cd dd 5e 56 a1 00 aa 00 5a 48 be 9a 44 47 a1 af 1b 05 cb b9 23 4c 04 f3 3a e0 81 bd 46 d0 e6 0c 06 ba 29 9e bc 1b f6 21 cf 33 e8 e8 48 88 a0 d0 da d8 d7 15 24 0a ac eb 6f cf 2d 6e b5 bb 72 36 9e dd ef 32 9d 98 ec 3c f9 d9 3a 9c 79 d4 66 eb c6 18 c7 c2 3a 22 9d be ed e7 8d b4 bf 34 9d 75 14 30 de 2c 9a 7f 2d 8f 5a 6f cf 7f a4 ec fb 49 cc 30 f4 62 3a 17 97 75 51 8c 54 84 04 ba a5 4e a0 fe d8 19 01 c7 71 48 81 c0 75 5c f1 05 f4 50 5c 09 0e f5 47 f2 8a 34 44 c4 be 4f 30 83 41 2c 37 84 98 e2 93 37 b3 45 6b 2e c5 53 ce 8b d7 54 d9 47 54 9f b6 89 eb 8a 06 47 b0 a1 c0 4a ea 9a 97 73 7e f7 5c 00 74 56 dc a5 ca 16 86 20 bc 27 ec 1f 3a 50 f9 3e 68 ca 1d 82 85 cd 1d 7d 2f dd 30 26 df c6 93 c1 4b 67 de 13 7e ee 43 16 54 36 1f aa 9f 86 73 7c f4 50 23 Data Ascii: E\^VZHDG#L:F)!3H$o-nr62<:yf:"4u0,-ZoI0b:uQTNqHu\P\G4DO0A,77Ek.STGTGJs~\tV ':P>h}/0&Kg~CT6s\|P#
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 72 b9 3e cd 5e 7d bf 65 f9 c6 a7 75 da dd 47 8a 6b 48 b0 8c 23 b2 01 4b 44 42 b7 f6 e5 6f 69 97 eb ee b2 e7 0c 39 fb a1 fb f9 cc 57 ab 64 95 f4 19 ea 0f 30 89 7a 43 30 02 86 b4 70 d4 c2 d2 4e 4f ff 06 5a 85 02 dd ea 0a 7f 18 6f 17 48 b1 08 b4 de a4 2c da 6d f3 ae c7 fa fe 97 2a db 71 e1 90 e0 91 f5 36 d9 d4 3c dc d6 4f 67 bf c2 78 c4 4f 17 4b 8c ac 46 86 e5 7a 4c d8 a6 7a a2 d9 a3 36 15 e6 7b 31 41 8a 11 ab d2 5d 22 b2 d5 6d 7f 4d 2b 4c b6 79 f3 ee 7a 92 2b a4 30 4d 17 ff 92 cc a3 c9 7a 14 39 36 f3 78 12 a4 9d ee 02 48 d2 e0 ae 19 a0 ce 73 31 58 13 4f 0f 24 19 f6 85 5a 2c 87 3c 19 66 89 ff 74 6a 14 4d 4f 96 ca c0 57 73 e6 71 6e d9 46 73 d6 33 bb b9 de 31 00 d9 02 12 b7 f9 e5 51 93 6f d3 90 b3 65 26 ac 06 1e 24 3f bc 13 92 1d 73 60 1a c8 fe 75 2b 1c 89 1a Data Ascii: r>^}euGkH#KDBoi9Wd0zC0pNOZoH,m*q6<OgxOKFzLz6{1A]"mM+Lyz+0Mz96xHs1XO$Z,<ftjMOWsqnFs31Qoe&$?s`u+
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 72 46 4e c6 8b ed e9 09 c0 f4 58 fb 0e a6 e2 3c 09 cf f6 30 1c e5 4b 57 aa 6b 0a e8 26 af da 23 92 0d 23 83 97 0d 42 9b 48 02 ac 7f 52 f9 f5 02 e1 a2 ac c7 b1 5e 0f 5f 05 07 77 31 e7 6c 9d 27 19 6f 7a 8b b3 fa e7 fe 7e f4 74 b9 47 f8 5a 92 ae 96 9a e5 f3 8b 07 a8 26 cf 89 81 b2 29 bd 2b cf b1 0b fd 06 2e 05 60 12 23 cf 56 6c 4d 73 62 70 c9 20 1a 3a 5d c0 2d 47 0e 09 6f e8 6e 98 db 04 1e a9 c2 77 ab 89 c7 ef 1c d1 73 4d c1 1b ba 48 56 23 96 2f 1e c1 cc 80 3c cc 57 87 71 0d 99 0e 9f d8 a8 46 b1 c0 21 ee 7b 78 75 7e fb e2 c3 7b 94 8b 41 a5 1c 36 97 5e 4f 45 94 dd bd 9e b2 c6 57 cb b8 62 70 12 cb 45 aa dd db 87 b1 ef 81 92 2c 71 7e ac fd e6 97 a4 db 48 8f 23 ff 7a 61 f3 bb a0 35 51 c9 19 b5 22 42 3d cc 96 18 66 6f 9d 93 d9 d2 d6 02 50 a0 7e 27 60 36 5a 2d e3 Data Ascii: rFNX<0KWk&##BHR^_w1l'oz~tGZ&)+.`#VlMsbp :]-GonwsMHV#/<WqF!{xu~{A6^OEWbpE,q~H#za5Q"B=foP~'`6Z-
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: de 2f d2 d4 af ec df b2 48 b9 14 53 a1 49 fd 7c 0c 92 ae 3c e3 b1 a2 b6 54 0e e9 e0 fe 9e 6f c4 f0 70 6c 77 df 41 c9 17 3d 09 bb 28 83 99 89 d9 51 3b 3d b6 ca 55 16 f4 70 95 f8 76 18 40 a9 d3 65 96 20 17 a5 89 75 23 3c 3f c6 c1 22 25 24 61 ba d7 a6 1b 07 21 fc df fe a2 ef 67 7d 94 d1 10 3c e5 0f cb b6 8c 7b 48 c4 da bc e4 3f ab ce 2a 98 44 e0 3a 61 92 2e c8 6a 94 6c e1 77 88 62 66 ea 8f 3d 58 e5 bd a4 a9 60 0b 31 1d e7 60 19 b7 64 2a 4c 91 99 78 f4 03 ac de 65 ce 42 c7 2a b1 f3 75 4d c4 cd e1 1a 2a b1 4a 91 9b a4 d5 dd af f9 a8 68 45 1b cd be de c9 53 77 ee 70 12 89 27 19 38 f1 66 2e c8 88 54 a8 43 b3 cd d4 82 ca 5b 51 d1 9d 26 85 e6 23 74 9e 66 dd 22 9d c5 4d 49 e0 5a 58 6c da 0d ac af 07 1a a3 f2 e4 1e 33 cb 6a c6 30 3b f2 ec da f9 da 35 88 a6 fd 05 40 Data Ascii: /HSI\|<ToplwA=(Q;=Upv@e u#<?"%$a!g}<{H?D:a.jlwbf=X`1`dLxeBuMJhESwp'8f.TC[Q&#tf"MIZXl3j0;5@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
251	192.168.2.6	50173	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1082	OUT	GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 4318 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	733	IN	Data Raw: 52 49 46 46 d6 10 00 00 57 45 42 50 56 50 38 4c c9 10 00 00 2f ff c0 3f 10 55 e1 b1 b6 6d 99 24 47 7b 95 d7 cc cc cc 8c c5 25 ac 52 09 0a 45 75 54 5c ca a6 6c 66 e6 ee ac 66 e6 ee 30 1a 3e f8 bf ef 0f 4f 60 a3 a5 a3 0d e8 b4 9f a2 3a 29 8c 30 43 4c 8b 60 66 9b 59 32 99 29 3b 04 19 4a eb f7 64 f7 0a b4 05 56 7b b2 58 2e cb ab 10 66 88 ea 88 d6 c0 0c 1b e8 2d 48 6e 9b 02 4f 61 a9 52 ac 58 84 3c 59 4c 75 b4 04 79 b2 18 fc 12 4b 15 c2 c8 1d c8 d4 12 b4 05 de 82 5c 7e eb a4 38 5b 10 27 cd d8 80 68 0b 34 e0 09 dc f1 aa 76 f0 1a c2 52 c5 60 c6 e0 7f 4a f6 ec 63 76 30 1b 00 73 56 90 82 18 aa f9 87 ff 6d 0c 59 2c b2 64 0e cf 2c 60 cc 31 c5 7f 9c 38 0d 71 9a 76 30 e8 ce 06 24 08 00 58 46 52 9f bc b6 3b b6 e7 6c df ad ad 1b ac 8d b1 3a ec ec 44 75 bb c3 3b 87 91 e4 Data Ascii: RIFFWEBPVP8L/?Um$G{%REuT\lff0>O`:)0CL`fY2);JdV{X.f-HnOaRX<YLuyK\~8['h4vR`Jcv0sVmY,d,`18qv0$XFR;l:Du;
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 71 d3 b4 51 4d f3 c9 34 d4 e8 c7 d0 41 c4 56 a2 ff 85 6a 6e 85 d4 51 bd 84 29 8c 80 a8 b5 cc 1a 57 9b ad 27 d4 cf ea 83 4d 36 4e 10 b9 a7 6f 43 31 b7 4a 6a 67 9c 9c eb 3a 70 71 80 d8 c3 5d 05 2f 75 63 46 d5 2c d5 12 15 c3 53 0c c4 5f 30 82 b7 5b b2 95 d4 cb 3c 4a ea 47 5f e4 81 0c 5d df 98 83 03 b5 32 69 35 9c 58 03 39 ea df 4a 4b 19 75 52 f7 e1 f0 5a 20 cd dc 6a e7 9b 1a d9 f8 e1 64 80 4c 13 67 5c ae 23 d4 c6 32 6d 31 c6 b6 ea dd 52 80 5c cd 81 66 9b 0e ea a2 c3 e0 13 1f 13 64 eb ca 59 b2 25 d4 44 bb 9c be 0d 15 28 f2 f3 ba e6 70 38 b4 b0 ae 08 88 f4 6e 79 2c d6 4a ea a1 5d 4e 08 38 d7 02 6d f3 7b 72 be 82 d1 5e 6d 8f 01 e7 aa 61 87 ba b5 46 e8 ff ac 35 ec d0 67 90 e9 aa 4b 37 fe 9b bf 27 e7 c3 e8 cd 5a e4 69 9c 81 a3 ed 62 ad a4 16 3a e4 84 80 e7 48 b1 Data Ascii: qQM4AVjnQ)W'M6NoC1Jjg:pq]/ucF,S_0[<JG_]2i5X9JKuRZ jdLg\#2m1R\fdY%D(p8ny,J]N8m{r^maF5gK7'Zib:H
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: a2 52 57 c1 3f 4b 71 10 06 ae b5 81 66 2b f1 2d 26 53 21 50 b7 4e 7c 23 0a 4f d3 40 b6 c1 3f 16 de 84 20 38 e9 79 5a 23 f9 66 43 cb 95 41 ba 9e 67 0b af ec 87 21 44 cd 0a de 88 6c da 3a c4 41 be da 20 d3 8d e8 96 eb 8a 13 03 f5 40 95 d3 05 89 6f d4 97 f1 d5 1f dd 48 08 ee b0 b0 9c 04 37 03 00 83 5e 72 6e 8e c8 b6 92 38 3c 20 e3 82 49 31 08 ae 1e 63 ae 4c cd 31 82 ad 43 e2 05 24 ea d6 77 03 29 a7 8e 20 b8 a1 47 3e 1a 35 e7 0f 91 b5 09 c8 49 ef d3 f4 12 db 0f ba 81 7a e6 12 cf 89 68 df 99 20 e9 60 47 a1 ed cf a0 16 1a e3 d5 80 c4 6d 02 b2 ca 9f 02 05 a1 8d 0d 5c 31 35 e7 2e 88 16 97 e9 5b 20 eb 92 17 0a 6d 93 db 4b 8a da 1d 76 48 d4 80 71 1e 69 39 7e 4f 68 b7 0b d3 0a ff 16 12 b7 d2 a5 65 65 89 6c e9 66 8a 02 ed 92 17 12 7d a8 08 e4 9d d5 51 60 73 11 2a a2 Data Ascii: RW?Kqf+-&S!PN\|#O@? 8yZ#fCAg!Dl:A @oH7^rn8< I1cL1C$w) G>5Izh `Gm\15.[ mKvHqi9~Oheelf}Q`s*
2024-04-19 14:07:06 UTC	1075	IN	Data Raw: f3 a8 48 f3 ea 71 8b 9e de 09 a5 67 45 57 a3 80 93 55 9d 57 53 86 56 38 0d 1b 90 ea a8 bf 86 10 d0 ef dd 52 35 cc 1b f9 41 68 b8 40 47 03 d7 18 70 ae b8 b2 12 cc 2e ab 23 d5 7f 35 80 be f5 8d 25 9f 93 0a 80 82 6d d3 c0 ff a9 16 59 e2 3a 6f 7a f0 b3 47 41 aa ed fd 16 83 40 1b 54 03 e0 9e 11 01 0d c4 69 eb e0 29 b6 b8 2a 29 9a 8a 0d 48 77 a3 9f d0 80 61 e6 02 12 a9 03 fd 63 ff 48 05 b1 7e da 9c d8 63 71 e3 5a b3 fa f5 f2 3f 48 f9 3f 4d 60 18 68 83 ea 00 1c 39 cb b6 12 1d bc 51 eb 13 3b 75 2e 5c dd 79 1f af 3c 2c d2 de 7a cc 18 c0 32 73 df 6a 01 02 23 fd e8 28 21 2e db 16 bf 92 17 4b 59 8c 74 d3 5d 76 49 65 f0 84 d4 df 99 04 96 81 36 a8 1a c0 73 60 5a 88 38 0b 86 4d 85 26 ff 7a 29 9d 9a 9e e7 6b 51 27 76 2c 2c 13 d2 9f 85 40 b7 be 1b b0 b4 82 fb 56 11 e0 3c Data Ascii: HqgEWUWSV8R5Ah@Gp.#5%mY:ozGA@Ti)*)HwacH~cqZ?H?M`h9Q;u.\y<,z2sj#(!.KYt]vIe6s`Z8M&z)kQ'v,,@V<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
252	192.168.2.6	50174	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1080	OUT	GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 41526 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 2e a2 00 00 57 45 42 50 56 50 38 4c 22 a2 00 00 2f ff c0 3f 10 4d 40 8c 6c 37 6e 33 20 a0 8f f0 01 e9 bf 60 1e be 1a 88 e8 ff 04 98 99 db db 23 22 cc ed fd a1 88 78 6e ba 97 ee 0b c6 18 c3 bb 67 44 84 6c db 6d 56 bb 35 86 5b 97 5d b6 bb 90 94 92 52 4f 6a b8 5d 57 7b 6a 9f 48 f9 52 b7 0b 60 93 29 16 ef 0b 77 01 d2 23 00 09 d4 6e d7 62 f9 93 40 20 91 ce b5 40 62 9f 20 d0 04 a4 c3 7a c8 4c 40 62 5d 72 11 92 12 24 e9 e1 28 70 7b 63 b0 8a 04 f0 e7 1d 13 10 6b e6 78 47 2d c7 4f 69 be 12 9b 9e b9 4c 80 bf 5d ed ea 00 20 81 94 a7 5e f6 3d 93 e3 a9 5f 79 3e c6 2a 04 87 b2 75 bc b0 3d f4 a6 76 63 82 60 be 50 76 d9 3b 5b ab de 31 ca d6 09 a2 ea ff 1d e3 79 24 8d 65 8c cd 78 05 60 44 48 3a 98 f9 45 55 21 99 47 98 99 9d 6e 6b 6b f6 3b dd 77 11 6f f0 d5 6c Data Ascii: RIFF.WEBPVP8L"/?M@l7n3 `#"xngDlmV5[]ROj]W{jHR`)w#nb@ @b zL@b]r$(p{ckxG-OiL] ^=_y>*u=vc`Pv;[1y$ex`DH:EU!Gnkk;wol
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 48 2a 48 24 72 9c 0e 4a 87 e4 00 0e 20 7a 4a 72 00 fb 50 12 89 a4 1e f9 28 66 b0 3e 43 22 2d 5d 3a 24 1b d5 84 0c 1c 40 60 3b cf 60 86 97 1d aa 4c 44 6e 47 20 d4 76 b5 5d 05 02 f5 90 a3 2d 31 a4 4a 4f 04 11 6c 0f 26 82 cd 85 cd bc 06 c1 11 04 02 81 cd bc 99 f7 5d f0 cc 39 0a a4 a5 25 eb 11 ae 0a 02 01 b9 d5 2d a5 63 cd cc 92 91 3f 48 24 55 3a 13 93 30 41 5a d2 6d 2b b6 62 3d 47 38 1a a2 a1 b8 2a 46 41 41 41 e1 6e 72 f3 51 08 54 54 00 04 2a bd 40 45 c5 af 63 ef 8f a4 75 5e c5 85 0b 0a af e2 8a 7b b3 68 1f 8f d1 5f c8 fb e3 d8 ac 75 72 f3 39 af e2 c2 85 4b e3 32 70 b1 75 b8 a3 cc ca 2f fd 15 68 8d 62 5f a5 2a 1e e1 55 1c b5 4a e3 3d 37 dd e1 11 9b d9 40 7f 89 6e c3 63 8c 2b c6 18 6f be e4 31 1e 63 fc 97 a8 d2 27 d9 91 18 63 6a 44 d2 14 a6 ff 84 3f c7 a8 2f Data Ascii: HH$rJ zJrP(f>C"-]:$@`;`LDnG v]-1JOl&]9%-c?H$U:0AZm+b=G8FAAAnrQTT@Ecu^{h_ur9K2pu/hb_UJ=7@nc+o1c'cjD?/
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 0a 11 42 28 6c db 06 69 c7 7b 80 3e b0 f6 fe bf ea c8 cd f9 1f b8 0e 96 f1 61 1f f5 4d f4 59 5f 44 5f 6c 5f 07 3f 4d 9f 86 93 d9 0b e7 9c 7f b9 6f e1 ca 6a 3d 61 ba 1a 5d b9 70 c3 34 3b 1d e9 6a 65 d5 9a 7a b6 10 86 25 b9 5a 70 4a cb e0 e2 6d 18 3c e1 c4 45 2b 9c cc a8 b2 42 2e ba 61 4e 5c 5a 50 36 cc e4 a6 e0 6e 38 0b b2 b4 70 35 92 e4 46 92 1c 49 72 8f ac ae d9 b9 f7 09 78 72 9f 0a 9c b3 d9 a9 90 1d 49 92 25 29 19 59 d5 bb f7 e2 a1 03 fa 8b 81 10 08 c0 2f fc 1d ec 4e 77 25 a3 da b6 95 6c 2c 00 fd d3 10 c0 61 ca 8c 02 ee a2 30 69 03 26 9d b7 28 02 58 ac 3c f1 47 de 32 76 97 8b 55 7b fb d9 65 5e 28 2b cd 8c 31 95 13 08 10 96 57 35 e0 13 e3 b2 3e 20 5b 21 49 9f 1b d6 09 4f 7c 24 cf 54 f7 de c0 9a e8 86 ba e8 13 7a 34 84 5e 85 ca 1f 34 e9 4f 70 12 20 1a b6 Data Ascii: B(li{>aMY_D_l_?Moj=a]p4;jez%ZpJm<E+B.aN\ZP6n8p5FIrxrI%)Y/Nw%l,a0i&(X<G2vU{e^(+1W5> [!IO\|$Tz4^4Op
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ca 45 92 c7 53 93 b6 e3 65 bc 7a b7 01 9c b5 ba 75 2f 84 db 94 49 b9 dd 09 c8 6d a9 a5 aa 1f 8c b8 ac 46 ce 50 6e 30 0a 39 a4 ba b7 32 75 32 c7 1e ee 02 52 98 d1 60 56 96 7d 63 e2 69 34 73 e4 46 22 85 98 47 79 d5 0b 72 ba 81 2d 37 27 25 4e 84 da ed a6 bd e9 d4 27 d4 37 f0 18 92 f3 4a 03 a0 70 d9 7e b5 db c8 c6 f5 12 80 41 c9 6a 4b ed 24 54 ce 22 14 fa 8f f3 5b fe 68 df cb b7 82 91 ea 0d ae 44 13 c4 1c 1d 15 29 4f 60 8b b6 31 d5 76 47 aa 49 5a c2 5b 7f a3 3a 33 e8 cd 8c ac db 23 6e 3d 15 d9 d9 d1 9a 83 99 90 aa fa 13 bb 0e 57 ca 4e 36 9c f0 ba 35 5d c3 89 f5 33 c8 39 2b b0 c7 a0 a1 23 e8 64 a3 c1 b6 9d 0d 6b 29 bb b9 d1 b4 40 94 cb 97 3d 23 c5 6e 0e 53 aa 6a fb 6c b7 3a 8d 6c d5 47 54 a0 c5 6c 23 5b bd 92 ed d7 45 dd 1e a4 ac 3f e1 96 e1 5e f8 8e 20 6f 55 Data Ascii: ESezu/ImFPn092u2R`V}ci4sF"Gyr-7'%N'7Jp~AjK$T"[hD)O`1vGIZ[:3#n=WN65]39+#dk)@=#nSjl:lGTl#[E?^ oU
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: eb 9e 87 46 b7 33 9e c7 2d 04 00 33 57 a7 68 4b 10 4a e9 42 2b 28 43 ef 12 74 e0 79 ba 18 96 0d 20 10 a3 6d 8c b7 57 67 a3 50 dc ed dc 46 c1 46 2b 34 8e a1 3e 36 ae 1b 86 14 45 c9 8d 95 50 cd 42 8c 0a 17 00 2a 64 bb a4 db b6 e1 28 96 c8 2b 8f 77 19 32 d6 8b fd c2 ba 8b b0 eb 91 e4 2c 6a 23 cb d7 62 8e b2 33 44 99 97 63 db 38 83 a4 c0 42 4c 8b 9e a4 d6 c6 0a 8c 34 d2 65 fe 59 3d 99 e9 52 39 d0 f0 6f 2f 2f a6 1b 47 4d 70 b8 06 a6 66 0b ba 28 02 44 02 84 03 94 02 a4 1c 34 d2 3b 76 69 1b be e7 6a 8c ac 99 7a 7b 3a a1 57 8b 15 83 a6 66 30 a7 5d 3a f4 dc 13 1f 73 e9 4d 48 19 6c a6 54 ab 8a 57 48 23 9d 1d 00 db 59 7d 5a bd 6c 1a 50 f6 d2 2b c2 54 07 af 86 6f 00 93 bb 62 22 8a b0 a2 02 a0 f8 39 a0 e6 1b c0 94 2d a1 66 3e 6a 49 48 84 ed ef b7 ba 16 84 2d 60 00 33 Data Ascii: F3-3WhKJB+(Cty mWgPFF+4>6EPB*d(+w2,j#b3Dc8BL4eY=R9o//GMpf(D4;vijz{:Wf0]:sMHlTWH#Y}ZlP+Tob"9-f>jIH-`3
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ba 9c 75 6e 86 96 98 25 19 77 98 59 a3 a2 88 26 ac 0d 63 61 60 22 61 21 54 91 44 2c c2 2d 2c 52 d2 41 16 7c 6c 77 29 54 c2 d1 a5 66 c5 0f 7c 79 9a ec ad 14 f0 f5 5e fb 84 80 4e a0 08 dd 88 e0 29 ac 7e ca 9c 74 7b 71 3a 4e c6 89 b8 f0 2a b8 12 2e 8d bf 99 a0 8d 7c 79 a3 31 87 8e b6 fc b6 fa 53 ff 37 ef 0c 0c aa 95 60 b8 98 5e 84 d2 e8 a6 71 bc 67 c9 05 27 12 05 33 05 33 87 70 16 53 c1 0c 91 cd 82 dd 5c 8f 97 c7 70 66 d7 13 e5 5a a4 1c d2 09 3a 66 60 1b d6 2c af 56 ab 63 65 19 f1 3c b9 5d d0 5a 1d 3b 5c d2 ca f6 a9 57 7a 84 a3 0e 17 1b 55 68 f5 19 aa 9a 36 f7 36 b9 bf b0 05 28 51 6c 7d b9 65 c4 90 46 a5 46 a7 30 4d 2d f2 a3 31 8a 24 c1 42 6c 24 69 b9 cd 47 ce c4 6c c5 58 43 ce 1d 95 31 db 55 09 52 1a f2 07 9d 1a 8b a2 4a 31 bf c0 e7 7c 4e d7 bf f0 23 d0 bf Data Ascii: un%wY&ca`"a!TD,-,RA\|lw)Tf\|y^N)~t{q:N*.\|y1S7`^qg'33pS\pfZ:f`,Vce<]Z;\WzUh66(Ql}eFF0M-1$Bl$iGlXC1URJ1\|N#
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 3b 74 77 d8 7e 6e 4c 32 45 30 7f e0 e1 cc 3d b1 6c 1d 16 e8 32 1a b5 7a 0e 7a b5 9c 57 b3 a5 95 dc c0 9c cd 95 84 9c 9a 6d 7b 59 ae 2d aa 1e 26 6e 6d c8 b6 b7 c8 51 73 24 4a 76 8b 22 47 b9 d1 2a d9 5e cd b1 31 6c cf ab 43 56 c5 a3 82 19 4b 9e d2 28 88 80 36 55 b1 6d d8 58 d0 5f 01 ff 5e 73 bd 9b a5 89 b7 3f 15 ea 0f d7 e3 00 2d 3b c0 59 e4 42 4c f6 a2 af 21 d2 77 60 bb 63 9c fd 55 f2 93 7f 62 8f 0f 29 82 50 f4 ba a0 5e ec 83 62 1a fb d3 c1 40 b0 64 fc 0c 53 66 86 7c c5 c3 7e 4d 36 73 c9 f9 01 a7 3d 60 75 7b 9c 6e 8f 9c 2d 5c 7f 83 61 d1 b1 fb ae a9 56 19 52 2a ad a2 c6 08 9e e1 07 60 54 56 57 fc 27 a1 62 40 0d 07 01 54 a3 74 8e 2f d7 fb 80 ab de ec e9 f3 e7 3c 92 7f 2a a4 d7 79 e4 38 b1 78 61 13 e2 b6 38 2b d2 c6 91 9b 48 46 39 42 62 f4 a0 60 9b 6d 38 1a Data Ascii: ;tw~nL2E0=l2zzWm{Y-&nmQs$Jv"G^1lCVK(6UmX_^s?-;YBL!w`cUb)P^b@dSf\|~M6s=`u{n-\aVR`TVW'b@Tt/<*y8xa8+HF9Bb`m8
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: b4 c0 0b b0 c7 15 aa 32 94 4e 92 33 4d dc 26 92 f6 08 24 b1 19 bf 2e 3a f9 70 6c 3e a8 43 dc f9 20 01 c0 07 dd b3 69 f7 2f 58 24 0a b0 98 46 22 10 d1 fa 84 21 4c d4 0e 7a c0 40 8b 01 0c bc 81 f1 30 d0 8b 36 61 99 81 f1 06 11 47 0e 9b 88 47 30 71 ef 08 98 3c 0b 4a c9 fa f6 bf e4 ff ea eb 97 1f 3d 3e fe e8 91 c3 ff 7f 87 d9 ff fa a7 a6 bf fe 81 f5 9b df 90 3f ff 29 f9 eb 5f 6b fe e3 df cd ff d5 ef 1c ff cb bb 1d f9 ab d1 82 7d 6b e6 0d 4f 40 d4 24 91 6b 56 7a 28 48 2d 87 ab 5f 69 cf f9 64 18 30 85 e4 13 b7 5a 97 5d f0 a1 2e f2 28 66 51 6c 24 84 d0 c3 9c 51 aa cf 44 64 03 ad 8d 46 56 1c 54 1b fb 23 dd 63 11 76 58 05 65 7f a8 f8 51 5b 72 80 86 b0 21 da ba 87 22 15 3a 69 eb ac 08 88 48 b4 8a 45 92 94 63 d9 1e b0 1f 49 78 7e 4b 58 7c 90 84 d0 b8 ad 63 55 17 53 Data Ascii: 2N3M&$.:pl>C i/X$F"!Lz@06aGG0q<J=>?)_k}kO@$kVz(H-_id0Z].(fQl$QDdFVT#cvXeQ[r!":iHEcIx~KX\|cUS
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: f9 e8 4e d6 26 a7 93 86 61 6a 6c d7 63 3a 98 ed f6 48 c0 19 86 2d dc ef 6b 6d 89 1d d2 b3 da 49 36 e4 8f 0f dd 04 62 1d 8b 35 84 02 17 2c 2e 98 02 04 ad 57 c4 c5 7d 6a ab 60 73 3b 71 2c b7 4f 49 06 96 12 5f a9 41 13 e8 af b8 f3 be 9a ba fa d8 cf 9d ef 6c 2c 6e d4 5b dc 1e f4 50 54 a7 79 b2 2d 49 17 e4 77 e7 71 3e 6e 98 90 48 3a 25 b7 b1 a4 e4 55 4c 90 41 ea 68 ca 3d ce 25 fb 27 30 97 ec 63 b5 20 27 ec e1 36 57 03 87 2b 2c d6 5f 33 b8 c1 53 20 73 af 72 a9 18 4a 81 10 a6 85 50 e0 09 2d ea 3d e7 bb df d3 2e 8e 56 dc d9 be df 31 62 ee 1b f7 af 70 ef 85 98 d1 00 a6 5b f5 61 e2 8b 00 aa d8 9f 31 88 2b 07 45 2c ba 80 81 19 c6 f7 c7 b8 69 fc ab 01 50 af 41 a9 2a ac c6 8d c8 95 1c 8d 74 fd 58 48 9c 10 57 88 49 c0 89 92 24 03 c9 e8 da 04 1b 91 1e 08 0f 84 2b 69 93 Data Ascii: N&ajlc:H-kmI6b5,.W}j`s;q,OI_Al,n[PTy-Iwq>nH:%ULAh=%'0c '6W+,_3S srJP-=.V1bp[a1+E,iPA*tXHWI$+i
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: aa fa fb 5e 92 0f 3c 95 e4 2e 7e 95 db ec c4 f3 f0 6d e9 a1 b4 74 1d ef 0d aa 6f 97 e1 fb e2 3d bc 7d 63 e4 e4 37 cf 94 e4 eb 04 dd 52 8c 4c 52 c6 eb 2b 6f fe 6b 47 1d 93 7c 1a be fe 9c 1c 17 e0 83 8e 0b af 5e bf 70 e6 d2 19 ee df 4f a1 fb 3f 55 b3 0f 47 b0 c2 27 ec c9 27 3c 53 7b ef 95 de e4 c8 f9 b7 ce 5c 90 bb fc bd b7 fe f5 c3 ec 1b b3 7a 90 cb 0e 3d 19 f6 44 47 f4 c7 07 db b4 da ee 14 18 ec 4a e4 df 32 6f b5 a1 8e 75 9a c3 8f a8 20 83 39 a2 aa 15 23 8b d6 d3 c4 59 a4 5e fd 32 39 a5 ad f2 21 73 da 21 c9 8a 53 cb 8a 9c b2 b2 2d 27 18 29 8f 91 62 6d 6b 53 57 ed d4 3f 99 65 f4 ca 6e 2f 27 eb 19 e8 0e 23 84 88 ff 56 db 7c be fa 83 3e 40 7a 56 e1 3f 8b 48 90 7d f4 83 39 a2 52 a8 70 14 5c 28 c0 27 5d 6e fd 16 5c 00 ed eb 9c d2 65 87 8c 6e 83 79 91 48 9f 48 Data Ascii: ^<.~mto=}c7RLR+okG\|^pO?UG''<S{\z=DGJ2ou 9#Y^29!s!S-')bmkSW?en/'#V\|>@zV?H}9Rp\(']n\enyHH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
253	192.168.2.6	50175	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1082	OUT	GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 2940 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	733	IN	Data Raw: 52 49 46 46 74 0b 00 00 57 45 42 50 56 50 38 4c 68 0b 00 00 2f ff c0 3f 00 1e 7b ff ff a9 6d 23 3d ff 87 53 f2 8c 02 05 87 b1 90 94 c2 6e 4a 61 76 c3 2e 26 f2 57 33 3f fd b5 7b 4c f3 72 97 79 b7 dc 39 a6 dc 6b 8e 61 0e 16 8f 19 7c e4 65 5e fd 96 b2 bc 2b 81 b6 6d d3 ad 4e 6d 3b b6 9d f4 db b6 6d db b6 6d db 46 6c d5 b6 6d db 76 ff fb 2f 89 6d 24 47 92 14 75 26 d6 9b 9b db ac ce e8 ac 7f 99 28 f6 f5 31 ff f9 98 ff e8 4f c0 95 38 61 97 82 b3 65 25 71 3d 76 29 13 48 c4 16 b0 e9 49 6d 8f bb 35 47 22 07 13 46 52 86 53 86 93 8e c7 1e 8e e8 d1 ec ba 96 9e b2 19 ac b0 0e 98 31 4a c0 f6 02 f6 bd 1f 4d cf 0d e6 46 56 d1 64 41 af be 76 cd 26 10 5e 85 98 7c bc d9 f4 fc 81 18 0e a7 f9 a6 ce df c5 94 45 99 30 06 49 d9 6d a5 0f 25 73 1e ca a8 36 83 c4 c7 de 3b d9 08 1d Data Ascii: RIFFtWEBPVP8Lh/?{m#=SnJav.&W3?{Lry9ka\|e^+mNm;mmFlmv/m$Gu&(1O8ae%q=v)HIm5G"FRS1JMFVdAv&^\|E0Im%s6;
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 85 22 8c b1 2c 4b 6d d1 31 9a 05 61 aa d8 38 67 47 d2 e3 a9 f6 2e 48 60 08 5d 12 e1 e6 dc 95 f6 57 30 3a c5 f7 90 8a f0 ea fc 83 f2 d0 f2 2c 5b 41 6b e9 61 b2 d5 30 0f b5 e9 29 01 87 d2 94 65 f5 32 86 f0 55 e1 e5 1c d4 f6 87 f8 d8 e9 36 55 c0 05 f0 fe 64 a1 95 50 5b 26 b4 b9 21 08 8f 9e f3 75 b4 23 69 b0 d5 78 40 d2 e8 0c 5a ed ba c9 10 0e 7e 17 be 67 23 10 fb 3f c0 18 88 a7 d3 da bf 61 08 a0 80 fd 19 cd cc b9 41 53 22 92 0b 65 c0 10 c6 73 56 28 24 ed 27 60 6b f7 bd 57 89 e4 c1 6e 31 86 f6 17 12 ed 1c dc be 40 65 ed 9d cc d6 e3 36 92 70 cb c5 02 91 cd 56 fc 3e ca 8e 67 c3 38 f8 45 f8 d3 58 74 1c 8b c5 b0 f7 c5 0a de b9 1f 77 fc 82 31 53 66 68 2c 3a 72 83 f8 87 d0 85 72 5b 9c dd ca 5b a7 b0 d9 fa 38 43 b8 cd 46 74 8d f2 61 e1 4c 61 d1 f1 09 0c 6d 8f 25 76 Data Ascii: ",Km1a8gG.H`]W0:,[Aka0)e2U6UdP[&!u#ix@Z~g#?aAS"esV($'`kWn1@e6pV>g8EXtw1Sfh,:rr[[8CFtaLam%v
2024-04-19 14:07:06 UTC	952	IN	Data Raw: 2c 99 bf 38 9e 33 92 3a 94 74 3c e6 53 a7 f5 ad 91 94 2f 4f e6 cf 94 ad 71 08 11 92 c2 2b 99 d1 2c 15 a1 75 24 57 69 23 f4 c9 b5 84 96 14 de 66 38 f8 59 4b 68 49 e1 d9 b7 29 5b 6f 4b aa 16 eb fb 3b e6 2f 76 e9 07 35 29 3c 49 0b 60 b2 58 3f a8 49 e1 05 7c 7b 48 ad dd 22 27 85 57 b2 ad e7 b4 83 9e 71 04 02 55 ee f9 91 66 8b a0 5b b1 02 ae 39 1a ae 17 51 a4 f0 74 a8 41 5b ce 2c f7 51 c4 74 89 d1 ea 14 a9 5b 5e d0 69 e1 53 78 9a bc db a4 ed 41 6e 58 1f a0 29 3c ad f4 fd 72 bb 91 14 7d a0 6a 1c c1 af cd 73 da bc 49 ba c6 11 48 bc fd bb 26 60 53 78 ba 3d d1 13 43 ae d7 68 87 70 eb 96 a8 60 69 9f cb 9c 64 ab a9 e1 3f ba d9 80 59 b3 8a 9e cd a7 6e e7 d3 f9 23 e1 4c 8e da 9e 4a 8c 6e b3 a5 28 da 7c ea f5 b6 76 df 65 82 54 06 81 40 af d9 52 14 d1 25 be 47 a7 ad 47 Data Ascii: ,83:t<S/Oq+,u$Wi#f8YKhI)[oK;/v5)<I`X?I\|{H"'WqUf[9QtA[,Qt[^iSxAnX)<r}jsIH&`Sx=Chp`id?Yn#LJn(\|veT@R%GG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
254	192.168.2.6	50176	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1081	OUT	GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 7576 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	733	IN	Data Raw: 52 49 46 46 90 1d 00 00 57 45 42 50 56 50 38 4c 84 1d 00 00 2f ff c0 3f 00 09 48 92 e4 c6 8d a2 d1 80 01 04 f0 ff 0f 73 9f f5 1a d1 ff 09 c0 ff d2 7d a2 97 48 b8 cb 00 d5 1b 24 a1 ee 31 20 f4 8c 18 3f 1e 01 80 96 7a b4 f6 c1 32 95 5b b2 21 e2 80 0d 72 ab 3c c2 92 a4 c8 41 d5 02 6a f9 a6 34 93 2f 44 3c 1e a5 18 df 98 11 d3 3e 01 50 80 54 27 ee 2c a5 aa 66 7d 4b cc 6e 4c 7b a8 30 99 34 79 a0 c4 34 22 02 00 79 04 9d 61 c2 1b 50 d5 41 23 b2 ef 6c 76 bf fa 63 2f a0 48 92 ac da ca 78 8a 4f 3c 66 b8 b4 ff 75 3d f9 15 da 7b c8 3d ab c6 6d db 88 53 91 b1 d7 ff df 78 8e 41 01 47 92 24 45 92 77 55 93 ad 34 e2 ee 1e 33 9f c4 f8 ff 27 a1 d0 ff 09 50 0f f1 49 92 d4 3d 67 f0 c5 9b 6a 04 41 62 cb 1e d4 27 28 00 30 8d bb 18 65 2d cb 08 82 05 00 cb 9a bd fb 08 06 9d 55 1e Data Ascii: RIFFWEBPVP8L/?Hs}H$1 ?z2[!r<Aj4/D<>PT',f}KnL{04y4"yaPA#lvc/HxO<fu={=mSxAG$EwU43'PI=gjAb'(0e-U
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 20 06 68 34 bf b5 c6 a4 26 6b db 88 03 50 cb 3f da a5 16 d6 8a c4 02 92 24 49 52 6c 27 b3 aa 07 c4 bc e3 15 f3 4a 57 d6 09 74 00 9d 80 99 99 3f 4a ea 99 ee aa 94 5b db b6 aa 2d 6b ed 7b df af fd 38 10 51 00 44 e4 d4 e0 b1 77 41 6e b5 f1 67 c8 93 1d 13 20 01 26 f9 7f 92 ff 27 f9 5f c7 6b 29 6f 24 d8 40 ac 89 70 35 85 8d 94 37 e2 6f a6 cc c3 6d 89 a8 97 2b 00 dc 34 74 92 e4 26 2d 8e c6 d1 64 24 d0 38 95 36 b1 78 62 71 27 52 3b 8e ba 5d a0 00 d1 b1 14 8e a4 b0 37 07 36 e6 ff f5 78 9b c3 cb 63 e3 30 78 4c 1c 56 0e 13 87 ce a1 31 84 83 08 00 86 92 20 24 11 97 a8 91 88 8a 04 1f 2e 11 11 a9 10 b9 95 45 76 16 83 f3 19 95 42 c3 6c ba 33 f4 2e 4b 40 e1 d2 e9 44 f7 7f ae de ea b3 2f ae f5 ea 0e df 99 5d 23 38 53 8b 3f 80 ee a2 1e 82 2f 12 15 09 7f 2f 40 b5 8f 33 79 Data Ascii: h4&kP?$IRl'JWt?J[-k{8QDwAng &'_k)o$@p57om+4t&-d$86xbq'R;]76xc0xLV1 $.EvBl3.K@D/]#8S?//@3y
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: c7 c2 80 4a 26 5f 6f c5 9c 1e a2 a1 f3 8b 74 03 d6 62 ac 62 80 40 53 d2 0e b6 8d cf e4 8c 6a 23 45 0e f9 82 e4 52 9b 08 c9 64 1a cf c7 95 86 40 a8 32 1a b4 c7 6a d8 95 60 99 ae a7 36 64 61 59 f8 e0 da 41 9f 03 b5 73 16 39 a9 81 22 59 eb e4 0e 7a c6 b9 3d 4e db 13 01 39 62 46 60 f8 b3 39 4b 05 fd fa 9b 76 ae d5 23 41 b2 a5 b9 1c c9 e3 35 06 69 92 98 00 89 09 09 26 40 9a 80 4c f2 41 9a 58 c8 a4 eb d7 e6 6a 54 16 81 62 8a ca b4 ef ab ce 5a 07 8d 8b 71 21 c4 14 81 1d 0c 09 11 06 a9 a9 4c af c9 71 5f 80 08 8b a4 5b 3a 01 5c d8 d3 bd 7f c0 23 2c d3 5a 00 25 63 59 16 06 61 85 73 97 01 8b c8 60 94 45 be 9e 0f d5 88 63 98 ba 8c 8c bb cc 33 2e 46 ca 88 0a b2 63 1c 33 b5 01 21 a9 56 33 bd 06 bc 34 b4 18 27 5f 68 10 83 4b ff 16 62 a4 37 fb 3e 2e 65 35 20 73 e5 49 e2 Data Ascii: J&_otbb@Sj#ERd@2j`6daYAs9"Yz=N9bF`9Kv#A5i&@LAXjTbZq!Lq_[:\#,Z%cYas`Ec3.Fc3!V34'_hKb7>.e5 sI
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 74 f8 85 f4 15 ca 1f 06 21 d8 2e 62 ea 14 71 1c d3 4a 66 36 44 08 1e 0e 31 9a ce f0 e6 4c 8a e5 4c 34 28 33 88 be cf 15 f2 40 f2 b2 6e e7 0c 85 69 80 4b 78 e0 e6 5c 18 cf 80 8c 3c ba d1 a7 df 4f 30 89 5c 7a cd 62 d6 53 51 ee 05 2f 80 9d 8b 01 02 25 a6 80 f2 66 4f 6c 16 4b 0e 2c 30 e3 8e c3 6b 04 3b c8 54 a8 da 11 29 7d 2d 52 c0 ea 0b 64 54 4d a7 a0 30 25 08 d2 40 ff fb a3 36 fc 02 b2 c6 b9 e5 f6 b6 aa 8e 12 7a 65 72 b4 31 d0 0f 15 db cf ba 83 0b 52 a8 c5 ec c4 62 80 40 89 14 c6 c7 df 7e af ef 21 79 c0 22 3d 56 f6 d1 2b ba 18 82 49 78 18 09 fa 41 65 dc 0f 12 bb 81 77 77 48 00 89 4e 90 fa 29 23 b9 95 b3 31 21 f3 21 07 ae ed 63 f4 a9 0a 35 1c da 3b 06 a8 60 6d cc da e4 13 23 77 54 a8 8d da bc f1 a7 6b f4 4f ff 78 64 3e fd a7 2b a1 c6 78 7f 87 32 41 40 42 41 Data Ascii: t!.bqJf6D1LL4(3@niKx\<O0\zbSQ/%fOlK,0k;T)}-RdTM0%@6zer1Rb@~!y"=V+IxAewwHN)#1!!c5;`m#wTkOxd>+x2A@BA
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ad 6d 6d 40 0d 5b b2 08 ad 8e 2d 84 41 06 0c 72 c6 ea 80 5b f3 cd 23 7d d6 c9 fd a6 1a 24 d5 30 83 56 80 0b 22 83 d9 d9 02 f0 9c f3 3f 79 e1 f5 75 40 8d 12 b1 39 05 b1 02 81 e9 04 04 88 0c 42 2c e7 4d e3 dc a9 e3 d4 d1 63 ba 2f 5e 77 18 d5 a2 95 00 a1 60 67 03 42 d0 df d2 c5 8d be f0 c6 5a 85 ec 8f 6c 6b 43 2b 67 93 b1 ed 1d 20 03 28 cf b5 f5 d7 e7 9d df d7 67 d8 9f 1e 31 5f ec 40 2b 24 8c 72 18 ab b0 b3 25 2e 68 8e 39 99 f8 11 5c 00 2a 2d 83 93 d4 9d 88 65 13 32 01 d8 14 30 d4 08 73 3e 6a de ff c4 bb 80 ad 16 24 d6 89 b4 12 2a 0d 31 04 66 bb d9 b1 ce 08 eb b4 ea cf e1 0d a8 75 df b8 c6 4e 2b a4 85 e6 ea 1a 50 00 42 02 6a 64 3e 6f 40 ed 17 8a f5 06 43 19 f7 a9 06 64 74 19 b4 92 4c 98 96 b0 0c 66 bb e6 ff 56 fd 63 74 b2 d5 a6 0a 42 46 76 53 87 56 30 47 92 Data Ascii: mm@[-Ar[#}$0V"?yu@9B,Mc/^w`gBZlkC+g (g1_@+$r%.h9\-e20s>j$1fuN+PBjd>o@CdtLfVctBFvSV0G
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 65 85 01 fa 03 f0 a7 55 36 a6 6e 2d fd ad ad 6c b8 81 91 4b 3a 71 97 26 26 f7 07 d6 8d 26 8f 8a e1 60 98 90 4e d2 24 06 fb 88 52 fe 76 44 6b 67 f6 e6 18 81 3f dd 08 af 95 32 12 a1 02 b5 64 bf 7e f4 bc 65 4f d6 35 d3 35 8f 57 1c e1 c9 c4 43 78 ed 7f 1b 48 13 f3 d4 1d 95 07 78 6c ee e9 db ff f1 b7 72 9c 90 1c 6d 60 ba b6 cb 00 16 b8 cb 16 1c 61 97 e2 52 99 65 36 92 6f 9e 1d 94 73 e0 3c b8 b1 2a 5e d1 a3 80 05 1a 3f 49 ea 3d 5b 1c 59 0f 7d ef b7 bc fb 42 af f6 99 c7 ea 9a e1 8e db dd 25 f8 69 b5 67 a7 63 7d ea ad 2a e0 78 42 9a 44 5b 91 5f c1 39 c8 b1 28 ca 25 d3 91 8b da 68 a3 64 97 55 99 b9 ac ca 9b e3 f1 a7 e2 ac 7c 0c 86 43 29 9c 0a 20 34 76 5b 38 dd 0f 6f 85 de 0f 98 f6 a4 47 1c 51 f8 42 b6 7b ff 67 a3 8d 04 97 80 e4 b7 e6 68 c4 47 9e 15 97 fe 1b dc 4f Data Ascii: eU6n-lK:q&&&`N$RvDkg?2d~eO55WCxHxlrm`aRe6os<^?I=[Y}B%igc}xBD[_9(%hdU\|C) 4v[8oGQB{ghGO
2024-04-19 14:07:06 UTC	568	IN	Data Raw: 44 bd 2a 19 4a 79 be 94 3e da 46 74 00 22 6c 82 ab 2f 73 55 6e 74 3b b8 85 05 03 a4 3e 62 d5 e7 12 e1 f3 0a c3 83 5f 71 8c 60 d5 da 89 08 02 03 be aa 89 a8 22 67 c9 3d 9f 5d 69 d3 42 50 db 81 71 c2 7a ec 45 74 7f a1 d1 4c 89 d2 38 b7 87 87 d6 0c 6c 37 d8 c6 46 5b f5 a8 17 de 72 fb f3 d7 de 97 0d 8a 27 29 fd dc ed 83 97 a9 ef 2f 00 0f 25 21 65 95 4d b0 05 bb 2e 3a c0 01 04 ee b3 1a d5 db b9 64 9b 7b cb 7d 8f 80 ec e3 b9 bb 2c 9f de a2 7d 39 27 91 e0 2e 1e 43 41 78 6a f1 d3 7e 7e 9d 12 36 c0 b7 ec 31 dd b0 11 36 6d e3 2b a1 5b 5f f5 d9 ce 7b 9c fd fa ba 8b af 20 7d ab 05 d7 f1 7f 6f 5a cf 6c 14 69 99 7d 94 f3 eb e6 85 f8 f0 b7 ca 62 76 89 63 0e 47 0d 8b 98 61 13 80 8d 3f f8 e4 09 3e e8 dc af 77 99 9f f1 65 ff 41 1c 5a c9 3e be 03 3f cc eb c4 83 80 5b 21 78 Data Ascii: D*Jy>Ft"l/sUnt;>b_q`"g=]iBPqzEtL8l7F[r')/%!eM.:d{},}9'.CAxj~~616m+[_{ }oZli}bvcGa?>weAZ>?[!x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
255	192.168.2.6	50177	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1080	OUT	GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 22360 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:59:44 GMT Expires: Sat, 20 Apr 2024 13:59:44 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 442 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	722	IN	Data Raw: 52 49 46 46 50 57 00 00 57 45 42 50 56 50 38 4c 43 57 00 00 2f ff c0 3f 10 4d 38 6e 24 49 91 94 55 75 58 7b fe 1b 3c 70 fc 8f e8 ff 04 80 cd a6 b6 99 fb a9 96 b4 4d 81 04 8f 43 32 53 89 4a 24 50 b2 95 45 ab 69 eb e1 66 bb 64 03 bc e1 58 92 0d d1 55 02 49 c5 ea 61 4d 27 3a 43 ab 21 69 a1 c5 6a 37 44 ab 09 49 d9 f7 e3 aa 9c 01 fb 76 e3 95 7e 5c 93 80 5f e7 24 67 c0 b6 5f 76 7e 93 7d e6 9d 83 df 06 64 26 38 40 50 42 e9 86 b0 81 80 56 59 48 02 6b 62 e4 6a c2 0e 24 92 18 a5 4a a2 75 34 4b d0 13 65 90 16 4e 34 26 24 b5 24 34 66 a1 00 4e 02 a4 6e 71 26 99 05 b0 1d c6 d6 06 68 a5 85 f9 ef 7d 57 df c7 db f2 ae 23 79 cf f1 36 58 48 70 24 49 b1 9d 30 33 fb fe 47 63 b6 3f 8c 9e a8 f5 54 6a d3 ec 7b 2b f9 02 92 54 db 6e 24 e9 20 82 e0 13 08 f1 cb d7 30 f6 bf 98 5a 41 Data Ascii: RIFFPWWEBPVP8LCW/?M8n$IUuX{<pMC2SJ$PEifdXUIaM':C!ij7DIv~\_$g_v~}d&8@PBVYHkbj$Ju4KeN4&$$4fNnq&h}W#y6XHp$I03Gc?Tj{+Tn$ 0ZA
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: d8 76 c9 70 fb 91 f9 c2 4c a7 43 0f c7 40 09 34 f0 7d c7 dc e9 86 88 d0 17 33 3e d3 85 c2 00 74 65 f2 47 df 33 41 17 49 44 15 c8 77 4e 00 ec 61 42 b3 43 b4 d2 61 4e 0b ec 25 8a 28 22 d9 30 ca 5c f2 3a 2f f3 ad 21 e7 f6 f9 de 5f 39 b6 92 bf 65 43 5b 6b 7b 32 d6 51 ac 23 6b 59 a2 e5 75 06 03 f2 15 29 91 95 05 68 c8 d2 58 4e b6 d6 ca 49 95 b6 a5 ad c3 ad b5 18 5a 24 81 89 b8 25 92 2f 89 18 0c 26 24 26 22 02 c9 c1 20 39 27 12 b7 24 86 bc 65 30 2c 24 48 d2 a9 75 41 00 b0 c8 00 41 82 42 01 48 d2 89 f5 99 45 06 08 f8 8b 64 67 27 9d 5c 17 84 33 19 00 40 3a d3 0a 67 32 60 2e ab 75 93 7f 30 79 fb d1 3b de 01 af ce af bb 27 f5 89 03 20 0e c7 6d 23 39 92 94 7f d8 ed 77 cf 7c 23 62 02 78 b5 95 ea 82 94 96 6b b6 13 07 76 c1 30 1d ec 3e 4e 0f b6 a9 d8 cf f8 e4 02 82 2d Data Ascii: vpLC@4}3>teG3AIDwNaBCaN%("0\:/!_9eC[k{2Q#kYu)hXNIZ$%/&$&" 9'$e0,$HuAABHEdg'\3@:g2`.u0y;' m#9w\|#bxkv0>N-
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: d0 4c 96 d6 31 2a 60 3a bc 28 da e4 b2 04 ae 66 8a ed 05 3b 05 44 81 85 59 a0 a4 29 47 b0 23 9b 88 e6 4a ca 08 57 73 d4 6f c8 ee 5b 95 72 10 c5 00 6a c2 fe 12 46 02 27 5c 61 fd f1 cf 6b 64 1c c6 1a 00 e6 92 2a 64 55 2c ae 42 83 13 20 08 15 d8 2d 60 8b 2a f8 2a 91 02 c3 6a d8 bf 22 d4 24 6b 58 62 97 87 fe 01 7c d5 61 75 1c 9a 82 e9 05 60 bb 42 76 4b 00 e1 ec 36 08 ca 60 af c4 9b 2e c7 9f 0b b3 a4 f2 af af 9c 17 98 02 94 1f b3 d4 66 7a 97 a1 23 09 bd 4c d8 13 26 c2 8a f0 98 b0 24 54 23 0f 89 4d eb 3d 69 46 46 cf 13 02 82 0f 70 9b 77 47 10 e5 57 97 67 10 b3 b9 5f b0 27 01 56 d8 a0 51 94 82 90 d7 9d 22 9e 09 88 04 61 40 2d 44 1a c0 ae 43 05 e9 32 b6 d6 5f 7d 30 3e 10 e4 ce 9b a7 be d4 8e a7 a8 ea 20 cb 3e 0e 09 e3 89 f7 9f bc d4 ec 8d 1b ce 2f 8f 5d 5e e9 ca Data Ascii: L1`:(f;DY)G#JWso[rjF'\akddU,B -`**j"$kXb\|au`BvK6`.fz#L&$T#M=iFFpwGWg_'VQ"a@-DC2_}0> >/]^
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: b8 20 a2 ee b1 ca 97 ec b2 67 4c ab 30 a9 14 a0 5c 03 37 9d 6e 9f 9b 9d 43 3c 20 12 f9 4a 8d 81 43 ea 29 10 17 bb 80 51 22 a8 0b 34 0e 0f 45 9a d3 09 1b 05 99 51 8b ff 6a d8 5c 1c 5c 5c 5f 6f 04 c2 a8 10 34 09 34 13 0f 8f 66 a7 7d 15 34 4a 72 47 29 25 28 81 0b a7 31 82 b7 32 20 5c 44 f2 37 c2 af 7e 11 eb 9b bc e6 71 f7 a1 25 9c 11 a2 05 48 97 a2 49 6e 6c 3d 33 46 be a0 c1 a2 03 5b 07 6e bb f2 ac a1 03 00 f4 cc 8c 9e 74 1a 01 e8 a9 9d 11 e7 c7 b5 ac 41 bd b2 39 66 71 52 ea cf 97 f2 26 1d 9a ab a0 80 6b 5c 58 7b eb 60 51 33 0c 0f 88 3a 05 ef d4 9c ab b9 00 dc 20 dc 66 91 55 c2 12 09 38 5a 56 31 2a 21 dc 6d cf b9 14 65 55 d8 55 3e a6 0e 57 40 dd 29 81 d9 e0 17 c2 c5 76 ae 6c db 62 5f 14 c2 e5 8d de 78 95 5f 53 1a e0 52 d5 7c 43 08 2a de ed bc 8a 4d ad 43 89 Data Ascii: gL0\7nC< JC)Q"4EQj\\\_o44f}4JrG)%(12 \D7~q%HInl=3F[ntA9fqR&k\X{`Q3: fU8ZV1!meUU>W@)vlb_x_SR\|CMC
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 93 92 c8 1e f2 3f 02 4a 88 2a ee fa 8f bb d5 4c 14 77 eb d6 63 bb cd b5 a8 44 2a cd 80 72 d0 30 7c c4 69 a8 00 a1 37 b0 ab 18 4c 44 60 1a fe dc 9d 74 f3 26 77 8e 0f e6 c2 97 42 b6 c2 28 34 98 a7 7e f3 60 24 0f 53 23 34 41 93 a3 e4 6a 31 b9 cd 73 2a 37 9d e3 8b 3d 76 fa 0a 9b cd 71 9b 13 7e 29 45 b0 e9 5c 0b 69 53 09 e5 a6 91 b1 cb a2 77 d5 cc f9 5a 0f 37 dd 7a f3 e5 ff e1 08 7e 54 cb 6c 6d ed 13 11 a7 71 68 ea 69 0f df fb ba ab 6f ab ef e5 8a e3 22 cb 87 5a 2d fc cd be c7 a7 6f f9 c3 8b 6e 26 10 dc 0d af c5 f3 05 c8 e4 d8 08 6a a2 31 f6 97 e5 e2 37 66 e2 e1 40 af 6c ec b8 c0 b4 90 12 a3 5f b3 3a fd f6 4b 73 92 13 92 9c 3f 28 c1 92 66 d1 0e ae 05 1e d2 10 75 4d 98 c8 c9 07 25 65 56 fc c7 52 0d a9 cb 2b ff c7 ed 97 bb bb 9f b2 9e 95 36 e1 ae 24 51 91 f4 b7 Data Ascii: ?JLwcDr0\|i7LD`t&wB(4~`$S#4Aj1s*7=vq~)E\iSwZ7z~Tlmqhio"Z-on&j17f@l_:Ks?(fuM%eVR+6$Q
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ab 3f 13 69 d4 03 57 48 87 c2 03 67 4c cf bb e6 6e ad ae 4d f9 d4 89 a4 fb c7 5f 2b c0 e6 ba d4 01 b0 46 7d 16 c7 bd 9f e8 2d 66 1e 6f 5c b4 bd 7a 70 c3 b6 e8 bb a2 6f 8b 6c 07 9f 48 da 84 7f 51 2d 42 2d 5e b7 93 ae c9 68 0e 2d d5 5a b8 f3 35 d2 e9 ff 7b f3 55 ff f8 fb 0a 53 cc c2 5d 73 e2 81 cb 6a f9 b8 0f 47 5b 9f 06 8c 87 e8 4a e9 03 77 7c c7 13 a9 8a ef 7e f5 5e df 8d ab f2 ae 07 c1 b6 d7 36 38 1a 75 03 c7 8f 2d 21 6e 84 00 01 35 70 d8 20 60 e7 5a 55 d0 66 82 ca 44 8c 08 cc c0 d5 4b 50 97 7f 2b 49 97 38 f5 45 db df 49 5c 40 80 aa 0a f3 db f4 d3 0d 4b bd 8e c1 d5 ba 43 e5 aa 22 ad d9 74 cb 17 78 2c 3b cd 8e cf 48 de da d7 bf 72 26 2c 8b cd 15 79 6a f2 e5 8e 6a 38 b1 3f b2 86 55 32 cf 13 dd c4 c7 92 1e d7 c3 5b dc 98 b7 5b 9d 1a 9a 3a 0a b6 f1 b8 1a 27 Data Ascii: ?iWHgLnM_+F}-fo\zpolHQ-B-^h-Z5{US]sjG[Jw\|~^68u-!n5p `ZUfDKP+I8EI\@KC"tx,;Hr&,yjj8?U2[[:'
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: b5 fd 35 55 68 1e a6 93 24 2b 36 8d 02 66 4b 2a 25 f5 a7 17 b2 b9 b3 a1 b0 89 7c d5 73 da 17 ea 9b 83 c0 eb f4 b4 e6 69 3d e6 b5 68 31 c6 42 a8 f8 8a 6d f9 1b 3b f8 56 b3 1e db 16 f3 8c 93 57 9a 08 e5 74 92 60 11 4a d8 aa b4 26 74 bc f1 53 1f b8 95 de 99 4e 86 05 67 b5 81 c3 d7 32 ce 93 84 f9 a0 00 c3 b6 c7 61 e3 71 cf 65 a0 0e 84 59 3d 18 ac 15 51 94 dc c1 23 51 d0 8b 6d 9e fc fa fb 4c 72 10 52 00 42 cb 29 b8 78 1a 29 1e 9e b0 21 bf 46 af 5e a7 93 5f 23 de 7f c5 56 9d 0c 78 0e 41 24 6e 8a a1 8b f6 5e 2e 5f 44 2e 7f d9 2a 0e 9d 32 1f 2d a7 a9 7c dd fe c8 64 90 6d d7 b5 58 c5 68 be 3e bf fb c2 ad 37 1f c2 0b d5 df ba 76 fe 74 57 7f 5e 1c fa 48 3f b8 d6 b3 4d 19 68 29 2a 0a 63 66 fc e9 7c f5 2e 5e df 2a 96 f5 0e e6 86 26 57 43 96 63 42 61 1a 65 f8 13 32 fc Data Ascii: 5Uh$+6fK%\|si=h1Bm;VWt`J&tSNg2aqeY=Q#QmLrRB)x)!F^_#VxA$n^._D.2-\|dmXh>7vtW^H?Mh)cf\|.^&WCcBae2
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 19 8c 49 af 16 a2 4c 86 20 db b9 4e f2 b1 8a b1 ba 21 c7 37 69 14 1a 40 4b 2d 79 40 58 c9 20 bf bf 54 c5 20 2c 96 9d 20 05 01 be 98 2f ff c1 b1 82 6e 58 9e 9a a7 e9 5a 26 03 cd 8a 15 2e 2a 00 02 10 0d 84 e1 4f 89 fa 5e 05 00 28 65 cb fe 97 19 de 28 97 c4 47 c2 35 f1 d7 68 7c 96 94 8b 0f aa 10 1d 10 9e 24 c6 b3 19 00 15 51 3f 62 2c df f3 3d 01 41 45 45 b7 9d 3c f9 0c 8d f3 4f 6c ba 10 00 62 aa 5e 92 09 00 08 98 f1 86 32 20 a1 d9 6b 00 05 a9 4a 88 74 6d 8c c2 a5 67 04 12 3c b3 a2 e2 31 4a c5 46 63 29 ee 34 b4 a8 16 5e 23 3e 01 65 5f ab 79 c9 ec e9 06 47 79 5d 51 e2 fe a8 c1 dd e5 9b 29 42 d3 fc 8e c3 ae 4c 74 48 bc 11 bf 2c 93 ea c7 48 5e 4a 8d f7 47 e8 5a e7 50 32 08 1d 5e 2f a9 4f 87 04 e6 9d 2f 90 39 f7 1a 43 e5 38 49 49 de d5 63 ab 22 c0 84 ea a7 b6 10 Data Ascii: IL N!7i@K-y@X T , /nXZ&.*O^(e(G5h\|$Q?b,=AEE<Olb^2 kJtmg<1JFc)4^#>e_yGy]Q)BLtH,H^JGZP2^/O/9C8IIc"
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 6d c8 de f8 da 1d ef d7 7d ea ae 63 5a 8c 26 5c dc 36 91 e1 c1 c3 2f 5f 7d ee a6 f1 a8 a0 ab 60 a4 9e fa 80 94 60 a1 93 98 ab 76 ca 0f fb 8f 83 11 9c 75 d0 c3 c9 f7 7d 73 d3 7c 9e d9 8e 7f 5d a5 0a 62 29 d9 5b fe 81 00 05 74 7f 00 fe 9c 9e 6e 23 77 d3 ae b4 ad 40 5d a0 76 54 ca af 26 06 66 80 b0 7e 20 fe 2d b4 57 44 41 05 c1 05 11 1f da 5d 76 d3 8c 93 a8 8d c5 71 47 33 1d 9d bc 17 d8 b6 25 e1 e7 db 56 1b b7 b9 29 2c 88 24 e6 9a 8f f5 c7 73 af 46 35 e9 55 f7 c2 ec e8 d3 db 6b 75 12 dd ec 32 f3 59 90 1b 08 31 6b 48 7b 66 7c d2 6d 75 ea 92 14 a5 a7 de 29 35 af 66 bb 1b 83 3b b7 f4 75 97 d3 e8 6f 28 06 67 85 15 91 96 66 b8 7e e1 fc c3 45 dd cd a4 49 b4 7d 34 27 eb 66 65 a1 7c c9 b0 f8 96 8f 26 33 1c 33 98 99 a9 56 d7 4c 23 f1 39 8d d0 66 a1 62 b1 f4 20 78 a0 Data Ascii: m}cZ&\6/_}``vu}s\|]b)[tn#w@]vT&f~ -WDA]vqG3%V),$sF5Uku2Y1kH{f\|mu)5f;uo(gf~EI}4'fe\|&33VL#9fb x
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 4b 5e b4 fe 1f ed 86 f3 87 5d f7 be 46 96 94 0c ae ba 8a 45 d0 3f 6a c9 a7 4e 02 02 30 dd fe a3 d7 25 45 8d 88 e6 9e 38 d9 ac 34 f5 d4 0b 9f 93 96 f7 6b 97 00 95 4a f4 24 f1 33 b1 63 6f a6 09 60 d1 da ec 16 39 19 99 84 d7 a5 d3 5c 8e ed ae ad 54 3a fa 37 ba bb 77 e9 dc 6b 83 14 bb 48 9e 52 cf dc db 75 23 15 ac 45 26 59 c5 34 09 92 9c b1 b7 1f bd 2f a9 f9 14 59 6b 58 63 be d6 7d 76 c1 75 27 37 1b d7 bf 3a 26 df d3 4b 50 e1 7b 2c 6a ea ea f4 3b 9f ba f3 1a 53 c6 a0 1e 2e 4d 54 17 e2 07 38 9f 30 ea 9a 56 10 ee 81 59 0c 40 30 c8 b6 83 f8 ee 28 78 fe de 09 a5 3c 73 cd a0 2e 30 e4 b5 bb 16 3c 2b 32 4e 8e 62 08 33 5b b8 16 b1 dd 7c b7 48 7c fa de d3 c7 db 8e de 12 b1 d5 ba fc 86 b0 cc fb a1 99 e8 7d 16 76 98 62 fb a3 3e 24 ad b4 4a 2b d5 73 56 e9 58 6d 7f f5 5c Data Ascii: K^]FE?jN0%E84kJ$3co`9\T:7wkHRu#E&Y4/YkXc}vu'7:&KP{,j;S.MT80VY@0(x<s.0<+2Nb3[\|H\|}vb>$J+sVXm\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
256	192.168.2.6	50178	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1082	OUT	GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:06 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:06 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:06 GMT Server: fife Content-Length: 10446 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:06 UTC	732	IN	Data Raw: 52 49 46 46 c6 28 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 7e 28 00 00 2f ff c0 3f 00 55 e9 bd ff 7f 99 23 d9 a9 65 86 61 66 9e e6 56 73 8b 55 25 15 4b ea ee 1d 5c 1a e6 59 ec 59 1c 66 9e e5 dd 1e 66 86 9e 1d 5a 66 e6 1d 86 66 ee 9e 1e 66 3c 5b f5 7b 7e f5 a8 25 3d 75 af 99 6d 19 3a 28 33 93 cc f6 1f c0 32 33 db 4a da cc 6c 97 a1 43 83 0c cb b9 e9 31 33 5d 86 32 64 cc 24 b3 3d 47 06 19 64 66 28 b3 9d 3e 89 41 c1 64 8e 98 64 de d8 50 a6 39 c7 6c cb 20 c3 c5 cc f4 98 19 e6 f2 bd 3a 47 f7 1f 30 83 42 33 28 30 46 ec 27 91 99 d9 2e c3 3f 30 0a 96 da f0 0f 58 81 99 71 49 66 0e f7 31 f4 85 90 49 86 c8 d9 65 e8 b3 a1 33 99 21 c3 9f a9 cc cc 76 99 19 9e c4 d4 86 10 95 ec e5 7b c3 de 40 86 78 9c c9 a0 60 52 b3 5d c6 3f 40 Data Ascii: RIFF(WEBPVP8XVP8L~(/?U#eafVsU%K\YYffZfff<[{~%=um:(323JlC13]2d$=Gdf(>AddP9l :G0B3(0F'.?0XqIf1Ie3!v{@x`R]?@
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 36 d5 68 ae 58 45 b1 b0 54 2d 64 9f ed b5 dc 76 4a 88 52 a4 94 6c 37 33 44 d0 d5 5f b6 76 35 38 5c f5 60 4e 57 a3 ee 3c fa 6c cf 43 3f 6e 62 b6 14 25 23 b3 36 9c 2b b2 ea 66 77 3d ae a5 73 b6 33 70 2a 6a 4b 88 d3 69 1e 38 0e 1e fc e0 4b 2a ba 06 5a b1 2a 0d aa 9f d8 2e 5f 76 df 76 1e 47 72 03 03 a7 aa 5a 2a e6 95 fa 65 a5 5f 97 98 94 9b 61 8c 22 80 4f aa bd ec 6d 6a 70 78 ab bd c6 62 05 3d e1 a3 52 db b9 12 b2 0c 65 d6 6b 91 4a 92 a1 fb 3d 3f 2d 51 72 6b 0b 5c 41 57 52 78 0f 1e f2 79 89 a2 73 49 bb 4d 65 4e e9 e0 1f b7 bc 24 87 ab 36 87 98 a3 14 0f 82 4f f2 8b 12 b1 c8 f0 80 60 84 88 0a c7 6d 64 98 31 17 0f 6e 7e 6c 5d 84 51 cf 20 15 0f 23 af 76 8e ca 5c 5b 03 6f ce 6d 20 e6 2a 45 89 22 85 ec 08 19 49 af a2 f9 6d 8f 36 6a 1d 03 87 b7 1a 29 ca 3c 77 8d 60 Data Ascii: 6hXET-dvJRl73D_v58\`NW<lC?nb%#6+fw=s3pjKi8KZ._vvGrZe_a"Omjpxb=RekJ=?-Qrk\AWRxysIMeN$6O`md1n~l]Q #v\[om *E"Im6j)<w`
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 8c 01 a6 76 f0 c1 53 41 fc 7d bf a9 3a 96 24 c8 50 12 74 3d 01 24 48 33 03 d5 b5 20 8f 84 bf b8 b8 5d e6 29 72 72 db 00 76 02 8a ab 9f b3 d4 cb 96 4b 2a ff 2b e2 11 b9 5f 7a 6b a4 01 b1 b0 64 f9 be cf fa 6a 23 12 3f 5a 5b 05 c4 0c 9a ee a4 b3 0a 59 a4 7f 10 7c 65 45 96 7a b8 c0 9e 66 87 d7 f2 60 15 38 c9 9a d7 b9 42 4e e8 ce a8 cf a8 12 21 37 99 08 c5 8c 80 7d a0 e0 03 0c 1e 31 78 04 f4 70 d8 c3 06 0f 1b f4 84 87 0f aa 45 7a b9 97 36 da b4 44 c4 ea 7a 9e 8b e7 01 d1 44 83 2a c8 7b b9 f9 31 5b 58 40 8c 52 f2 3e 26 09 d9 f1 36 64 80 e2 c1 53 6b 03 c4 ec 39 cb 36 4e 2a a6 79 f0 7c c3 10 73 e6 1c 62 d3 5d 4b 74 b4 ca c7 96 01 25 da f2 e5 d4 72 b4 d9 7c 55 36 46 8b ac 44 e4 bd 4c 33 0f 88 0d 01 54 41 56 ae 0c fb 20 5a 1c d6 c6 16 d7 5b 50 92 49 db 54 2c ca fe Data Ascii: vSA}:$Pt=$H3 ])rrvK+_zkdj#?Z[Y\|eEzf`8BN!7}1xpEz6DzD{1[X@R>&6dSk96N*y\|sb]Kt%r\|U6FDL3TAV Z[PIT,
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 95 88 88 f1 7a 82 f8 f6 43 ec ea 94 90 cd 0c 42 31 a8 36 99 07 97 13 48 72 10 27 ae d9 67 db 49 79 11 72 12 63 b0 86 8d 7f 23 2c cc e9 34 29 df 51 79 45 b4 5e 0b cc 9e 42 52 ec 8b 71 10 a7 53 50 82 48 e0 21 19 39 c2 28 58 96 23 94 1c e4 32 3b 96 e8 48 33 03 4e 4e 8b bc b6 eb 84 38 75 c5 4e 05 59 09 34 43 10 3c 58 5d 7d d9 62 92 51 cf c4 18 3c ba b9 47 f9 ed b4 02 d8 3a fb fb a5 26 26 65 25 18 81 13 69 7d 35 8f 5f 0c 8b b3 a8 24 25 64 a6 8a 59 f1 e1 fe d4 61 5a 84 c4 c1 7e cd fc 82 30 a3 e4 f1 7d 4b 74 c0 89 c7 97 bd b2 00 e2 ed 88 6f ac e8 5d 12 9d 40 9a f5 48 8b 50 2d f2 ee f5 8f e3 49 72 10 23 af c3 95 55 90 e7 30 6b 89 41 dd 52 1e c4 ef cb 67 0b 51 02 b4 2f ba c6 a5 79 f0 ea f2 69 3b 6a aa f5 0d b0 c9 24 dc 91 6b 56 f3 4a ea 96 f1 21 c0 83 8c 51 a2 a0 Data Ascii: zCB16Hr'gIyrc#,4)QyE^BRqSPH!9(X#2;H3NN8uNY4C<X]}bQ<G:&&e%i}5_$%dYaZ~0}Kto]@HP-Ir#U0kARgQ/yi;j$kVJ!Q
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 80 89 1e 2d f6 ce 57 16 0a 79 ff 2f 42 a8 07 ba 10 93 98 a8 4f 64 54 be e7 83 41 b9 be 2f c4 30 36 7d 22 13 a7 fa 08 1a a1 00 6c 2d c3 5c 48 45 1c 14 16 a7 05 86 0e 1e 2d e4 c0 13 85 81 49 ac 31 ef 41 19 e1 8f 32 17 42 48 55 4e ad 32 d5 a3 05 22 04 04 ab 28 46 8b 10 42 61 61 b0 3c 0c cb 5c 28 0e 21 43 8f 10 c4 60 45 02 e7 1a e7 49 29 ca e5 b0 bc 42 db b3 ed 1f c2 c6 40 3f 79 b4 56 cd 33 ea ff b8 ef 48 51 7d 35 bb 6b df 12 b4 8c 6d 97 93 a2 12 b5 aa 56 b1 3f 76 d4 35 c8 b0 cd e1 f0 11 c2 b0 80 d0 7a bd 3c 28 dc fc 21 f4 d8 2c 31 31 01 d8 ec 37 f6 1f e4 30 9b 6d 5a 14 c6 32 8a 08 51 e1 51 1a 2d 82 e4 fc c6 fa 6b 08 0f 8f 62 94 a9 be 71 d4 35 14 72 85 d0 a2 e4 a8 ec a8 44 96 a1 f5 d7 00 49 12 ee 4f b2 99 a3 6c cc 85 90 21 e4 0c af 7a 75 b3 27 7c 1a 2f d5 6c Data Ascii: -Wy/BOdTA/06}"l-\HE-I1A2BHUN2"(FBaa<\(!C`EI)B@?yV3HQ}5kmV?v5z<(!,1170mZ2QQ-kbq5rDIOl!zu'\|/l
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 41 2c 57 31 e0 79 fa 44 a6 89 49 fe d4 aa 70 33 95 ac e0 6d ca 95 a1 6c 71 ff b6 e6 fd 86 c5 e7 f1 50 bd ce bd 09 00 36 db 52 10 95 99 61 67 90 4f df cb e4 c4 f0 19 59 72 de e5 4a 02 ee 03 a5 a2 06 de ce f0 c2 bd cf cf 2f 1d 33 43 b9 6c 67 af a8 8e be 44 6f 54 a9 87 d9 ff 71 5b db 00 da c0 a2 37 77 89 d6 29 6e 57 30 ab b1 5d c7 17 80 ea 4c e3 fb 96 08 d9 0e 79 90 9e f1 ec 7a d2 99 a0 85 0d 35 90 be ac 97 35 cd 9c 1c 60 85 0a 1e 44 47 01 4b 48 43 4c 94 20 49 19 6b a8 a7 6d ae 5c 60 90 49 34 cf ea cc 60 03 48 c8 ab 9f b3 2f c5 41 6c 04 a0 d2 05 91 42 66 46 1c 52 e1 71 f5 84 a7 1d 92 24 64 36 20 f8 63 d7 78 dc b1 d2 bb b9 9d 1a 36 39 79 76 c9 81 af b3 20 57 ca d6 23 2f 37 9f 88 6a 9b 59 7c 5e af 1b 3b fa 31 45 4c 47 06 09 96 84 ed b8 f4 4f c2 98 2a 65 f9 c1 Data Ascii: A,W1yDIp3mlqP6RagOYrJ/3ClgDoTq[7w)nW0]Lyz55`DGKHCL Ikm\`I4`H/AlBfFRq$d6 cx69yv W#/7jY\|^;1ELGO*e
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: ae 0a bd 7c 79 00 cf 88 e0 6e eb 6f 5f b9 82 83 56 1b c3 0c 05 54 7a 8e 53 4c ca d6 0c b4 3b af a9 c0 f0 89 83 1f 5d 94 4d b3 f0 62 58 d6 38 c2 4d 1c 60 c4 b5 bc 47 9a ee e6 f6 c1 f7 1a 01 7f d9 b5 37 68 6d 0b aa f4 d5 e0 7b d3 4c 29 59 25 a8 78 d0 f7 7d 03 0d d5 0e ad 49 9d b4 02 b3 b5 36 55 74 ae 5f 10 44 f5 05 fd 5c 76 df c8 22 09 73 df f1 09 a3 3d 44 6b 08 c5 8e 58 7b 03 76 66 df 5f be b9 bc 68 5d 36 cd b2 c1 de 1f 7b ef f3 4f 73 e7 7a 2f 1c b4 6e 7c dc 79 f4 ea b7 4e a9 3a b2 ff e3 69 cd 1a d8 05 3f 3a 42 25 96 f5 27 0e fe ba 9f 50 12 dc bc 50 e9 b1 02 d4 c1 d2 00 f7 d5 bd 6f 43 f1 04 cd 95 b2 5c 5b 63 0d e1 e7 dc 02 f0 22 fc dd d9 5d 30 72 a0 dd 8e 63 71 68 85 47 54 7f 7e 81 3b 8f 47 93 1c bc eb f2 bd 97 2a 19 44 f5 25 fb 6a 8e b4 54 09 71 9f b7 e7 Data Ascii: \|yno_VTzSL;]MbX8M`G7hm{L)Y%x}I6Ut_D\v"s=DkX{vf_h]6{Osz/n\|yN:i?:B%'PPoC\[c"]0rcqhGT~;G*D%jTq
2024-04-19 14:07:06 UTC	1255	IN	Data Raw: 59 3a 07 49 5e df ef 3d 60 1c 1c 60 91 5a d4 8a 96 1c de aa 2b f0 8c 32 b9 74 3d 6f 4e 18 71 b4 0c 55 e9 ba 16 29 19 14 52 72 7e f5 f3 fc fb 4a b8 8f bb 24 e4 ee 24 58 52 96 e6 c7 37 d3 80 1e 77 d2 1a 39 ea 63 2e 01 00 9d 59 71 4b 9d 3b 89 a2 14 8b e0 6c e4 7e 5c e0 c1 f5 e6 80 ca eb 28 df 49 10 47 74 e6 15 38 64 c4 9b 99 79 2d 0e b0 82 a2 82 57 7a ac 1c 8d b9 f6 8f 7a 74 9f 20 47 8c 74 48 89 be 64 aa ad 01 14 30 0d 9f 99 e0 45 97 ef a1 89 45 53 8b ef 7b db b7 7d db 4d 01 8a 6a 62 00 af 94 fc 4f 3b a6 57 6c 3d 4f 2e 28 da 9f c5 83 5b 1b 05 7e 57 40 d3 9e 43 d7 2b 85 93 8b 93 7b e4 df f1 21 f9 12 fd 48 42 92 10 25 24 2b eb f7 8a c8 62 22 b9 af f1 19 46 18 99 4d b3 76 3f ef 25 3e 00 e3 37 76 8e d6 a9 60 ef f0 5d 7d bb 30 17 b9 bd 95 39 14 82 9b f6 9c 6f 14 Data Ascii: Y:I^=``Z+2t=oNqU)Rr~J$$XR7w9c.YqK;l~\(IGt8dy-Wzzt GtHd0EES{}MjbO;Wl=O.([~W@C+{!HB%$+b"FMv?%>7v`]}09o
2024-04-19 14:07:06 UTC	929	IN	Data Raw: 76 58 a0 f7 f9 de 96 07 05 54 66 65 df 94 b2 6e 89 14 93 1c 16 f0 90 c0 2e 0e de 09 88 72 c1 9b 48 ce 0e 3f 1f 10 c1 c3 f9 26 72 b3 31 37 2c f1 ad 01 49 fa 6a 56 78 f2 35 e8 5d fa 49 e1 aa 17 5e 58 48 f7 d1 ed 14 50 35 9d 0b 1d e1 c0 6d b1 57 f3 4d 81 25 08 2a bc 06 19 92 66 43 42 07 a0 69 96 76 48 82 ae 40 44 be 82 ec 6b 70 38 c2 f5 34 0d bd 31 34 ab 91 a2 92 af 40 8c ba 82 6c 47 a1 23 db 22 43 d1 72 62 1c 6b a7 69 0b 49 92 34 ad 81 0e 45 b0 2c 4d 5b e8 6c bd c6 ae a1 69 4b b6 32 95 8a 48 24 69 a1 e9 7c 60 e4 32 9b 84 dd af 71 71 ac 8c 4c 5f da d2 9d a4 69 65 40 0d ad b2 94 89 58 d6 6e a7 2f 4d 43 6f 69 3e 2b 63 d3 8a 22 2d 34 cd b0 21 a2 b5 f4 4f a1 b9 eb b3 58 68 a0 ec ac 8a a2 69 5a 4a b6 58 68 0b 0d b9 3f 70 c6 63 30 eb 8c d5 c0 53 41 83 6a c0 c7 21 Data Ascii: vXTfen.rH?&r17,IjVx5]I^XHP5mWM%*fCBivH@Dkp8414@lG#"CrbkiI4E,M[liK2H$i\|`2qqL_ie@Xn/MCoi>+c"-4!OXhiZJXh?pc0SAj!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
257	192.168.2.6	50179	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1081	OUT	GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:07 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:07 GMT Server: fife Content-Length: 8188 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	733	IN	Data Raw: 52 49 46 46 f4 1f 00 00 57 45 42 50 56 50 38 4c e8 1f 00 00 2f ff c0 3f 10 55 07 db b6 8d 24 51 fd 97 bd ef 5d 74 97 45 c4 04 f8 5a ab 87 fe f9 36 75 91 a6 86 52 a1 92 62 75 7d 47 76 b0 61 96 c2 c4 c2 1b fd de ff 77 ec 97 fb 7f 47 6c 73 ec 99 bd 63 db b6 6d db b6 6d db b6 ad 6d 8e 3d 1b 63 db c6 b5 d6 6b bf ae eb 3a 8f e3 7c 9e af b3 9b 9c b1 53 b2 b4 93 4e d5 cc 55 c6 36 ab 94 56 99 2e 7f 43 a6 9a 7f 20 b6 93 c9 54 59 6b af d4 36 3a 3b a9 b8 bb 47 58 1d 5d dc 39 a9 6d 27 7b 0d ca a0 33 2a 27 9d 9d 2b d5 74 aa 62 db c9 35 b1 db a4 9e 95 6e d7 71 b2 b3 ab bc 5e 71 d2 da 2a 8d 5d bd ba 38 a9 6c 4e d2 db 49 c5 ce 53 c5 28 5d 19 ff 40 d6 3a e2 a4 b4 6d d7 b6 9d 54 d6 ae 62 bb ca 1f 60 3b a9 a6 8a 53 5d 7f c0 ab 8d cd b7 6d bf df 9d df e5 ac 60 97 41 f9 c6 5a Data Ascii: RIFFWEBPVP8L/?U$Q]tEZ6uRbu}GvawGlscmmm=ck:\|SNU6V.C TYk6:;GX]9m'{3'+tb5nq^q]8lNIS(]@:mTb`;S]m`AZ
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 18 cc 51 e5 63 ea 7d 95 4c ac 50 c5 90 3b 06 73 c6 49 9d 76 9b e2 76 6e 69 76 fe 43 ed 77 9b 82 8b 2a 2d d3 3b b7 34 41 dd 55 0e d5 33 07 95 4d 69 ec 93 a6 18 95 4d 79 a1 15 06 73 1a 2c 87 24 4d d3 7e 7e 59 73 9a 7b f8 a4 a9 86 06 2e 2f 4d d6 ca e4 3c 76 4a 95 96 fa d9 6d b6 b8 ab 1c ea 3b 27 d4 f9 df 55 ee 93 a6 1b b5 ef f6 85 43 ce f1 0f d2 84 bd dd d5 1c 51 c5 25 77 d2 8c 71 57 2e e5 de 01 87 74 4b 73 8e 95 d8 33 76 69 d2 4e c2 8e ad 56 2a 45 66 8d bb ce cd be f2 4d c9 d2 b4 4d 29 c7 bd 2f ea d8 1c 83 db bc 71 bf 2f 06 cf 95 26 6e e5 97 b2 89 c1 3f 98 39 85 fb 50 8f 7f b7 51 9a ba 75 6e 9f 47 cb 8a 67 ee 54 7e 29 6b cb 4a 69 1f 98 3b b7 b3 4e 2f 4d de 3f 59 91 d9 53 e7 be a9 8e 67 f6 f4 61 9f 66 cf c5 2b 9d e2 d2 ec a9 74 4a e3 09 9a 3d 0f 5f ae d9 b3 Data Ascii: Qc}LP;sIvvnivCw-;4AU3MiMys,$M~~Ys{./M<vJm;'UCQ%wqW.tKs3viNVEfMM)/q/&n?9PQunGgT~)kJi;N/M?YSgaf+tJ=_
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 43 f6 7f 0e a9 e1 1a 54 64 98 23 96 15 1e 17 1a 6f 8e 12 44 78 42 d5 e6 0a 7e 10 a4 65 97 bd 1d a0 03 2e 0e 22 30 25 0e cb 45 0d d6 60 32 9a 6b 9b 54 28 a1 2d 6e 39 a0 01 a5 e0 4f 6e a0 25 1b 80 a0 52 05 c2 09 1e ab 7d 88 fa 07 28 d1 a3 21 c7 e4 3b 2b 8b 2d 39 4c 58 85 b1 b4 7b bb 46 05 92 1b 61 6e bf 2b 25 82 ec 44 ea ba 0d e1 6f f8 9e 3b 86 03 84 24 13 94 72 f5 75 db c6 78 38 2c 24 97 89 0d 35 64 2e 62 d7 28 72 db bc 41 44 d0 65 17 48 b4 ab 09 a8 fe 04 c4 a4 ac e0 bc b2 45 1e 0a 75 f3 5e 9c 43 16 34 94 6a 8e 59 f1 a4 11 b7 8d af 1e 5c 42 1a 30 c7 bd 88 48 99 b0 ab 62 3c 30 7c c0 dd 97 1a 1e 4a 6b 9b 5b 90 06 dc 96 5a b9 31 73 0b 6a 42 9c 0a 4d 07 f9 80 88 78 5f 30 4c 84 10 f0 00 01 17 81 67 55 b8 24 47 df 3b e8 82 3f 77 ef ae 64 37 25 ac 0d 7f 51 fb 32 Data Ascii: CTd#oDxB~e."0%E`2kT(-n9On%R}(!;+-9LX{Fan+%Do;$rux8,$5d.b(rADeHEu^C4jY\B0Hb<0\|Jk[Z1sjBMx_0LgU$G;?wd7%Q2
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 58 26 0f e9 91 41 ff 46 3d 90 37 fe 0c a2 29 89 e4 55 ca 66 56 8f f4 b9 37 c3 42 67 28 14 af 4d b4 02 43 43 f0 6e 92 61 a5 9c db 0e 41 52 4c 51 20 0f e9 11 f4 e7 ca 0c af 28 6e ab 10 4b 42 4f 3f 6f 39 29 4f f3 cd 81 d8 a7 49 ff e9 01 ef 01 81 77 75 2a 64 02 ee 3b d8 a8 c0 af e2 06 4a b5 d9 2c 08 84 81 d5 7a 1b 4a b4 af e9 ce d1 08 30 8f da 6e 23 22 ee 3b 79 93 28 3e 8c 42 94 8f 1d 70 4b dc 63 81 c1 e6 2f 83 a1 b1 51 bd 09 23 36 54 49 60 33 02 01 51 81 70 e0 2f a8 8b e4 3b 95 fa 7f 51 81 ae b8 8a f1 9c 6e 54 c4 f4 10 86 17 78 e8 96 20 1e 01 b6 d5 b0 e2 29 01 8e 02 2e 01 3c cb ff 06 ca ce 2e b8 80 b0 f4 09 86 46 80 80 1f 6b 96 79 3c b4 cd 94 bf a4 b0 79 bc 88 98 3d ca bf ac f0 4f 26 6b 62 f5 f2 17 51 0e 0c 4f 01 97 a8 54 aa 77 33 8c cf 5f c3 fd f1 50 97 75 Data Ascii: X&AF=7)UfV7Bg(MCCnaARLQ (nKBO?o9)OIwu*d;J,zJ0n#";y(>BpKc/Q#6TI`3Qp/;QnTx ).<.Fky<y=O&kbQOTw3_Pu
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: dc 92 54 b4 9f 8b 1d 1f 8e 1d 6a c2 bf 18 b5 f4 9b 2c 29 c8 c7 98 31 5d 2e 69 fa 76 df 7f ba ef 3f 05 87 06 3b d7 30 7d 23 7f 74 65 fa 86 fd a2 53 30 47 6a fe cc 45 e8 d7 11 ff 6b 49 7d cc 5c 47 ec 5d 04 48 08 81 3d 84 30 6f 5d 15 31 d0 b3 9c e5 2c a6 d2 fc 60 23 ca 5e 43 fe 65 c4 89 d2 0b d3 08 50 1b 2b b4 c1 a1 05 0a f5 20 16 ad ca 04 5c bf 96 f4 d7 02 d8 98 53 96 b7 66 a9 7a b3 4d 00 6e 7a 72 2b 1c ae 54 7a 71 65 65 8a d5 16 3f 7b 23 29 21 18 22 85 eb aa 4f 92 25 9d 76 5e 4c f1 1f f9 d8 4a 08 65 56 c9 a1 1e d6 37 49 67 48 53 7d 9b 2a 92 10 c6 36 86 34 5f d0 f0 d0 21 48 92 9d 92 1d b5 86 fc 1f 4b f1 b5 a4 5f 0f 92 25 3b 9d bc 68 6d 04 5f b4 40 96 88 1d 46 4c 8f 34 4a c5 91 89 8d a1 48 37 92 a5 51 da d9 c1 f2 f3 88 af 21 7f 87 4d 4d 02 eb cd 4f 17 2f 75 Data Ascii: Tj,)1].iv?;0}#teS0GjEkI}\G]H=0o]1,`#^CeP+ \SfzMnzr+Tzqee?{#)!"O%v^LJeV7IgHS}*64_!HK_%;hm_@FL4JH7Q!MMO/u
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 6e 45 06 0d b6 1f 40 3e ed 46 92 64 e5 cc d2 d3 4b 71 f8 3b aa f4 f8 92 44 a7 20 15 ad cb d7 97 5f 9a bd a9 9d 18 7a 80 24 1a 18 e4 29 99 d3 a3 c4 e1 75 af 0e 34 38 fc a5 00 48 33 e8 2f 9f 11 2b fc eb 12 2e aa 04 1c 2c 13 8c 36 fe 75 35 62 6a 8c 36 d1 4d 60 e9 fb 77 74 46 b4 f0 d6 2e 4d 1f 04 f6 db bb 42 00 4c bf a2 4a f9 fd 49 83 37 b6 b3 b6 fc 13 2d d0 23 b5 b1 62 2c 10 76 e9 ae da a2 2b de 96 ce e4 9c e6 d8 bf a9 83 1d 88 9c 9e 4d 73 05 5a af a2 84 d5 1c bf 1c 94 1a c8 cd 5d 2e 47 88 7e 97 f0 d6 2f b3 88 18 32 ba ef dc 5c 71 72 89 10 b8 1b 05 bf 51 75 72 bd c9 3e 91 2f 81 2d 97 3f be 6b 0e fd 42 6e f7 36 ac 7f 74 b5 f7 36 3c 3b 77 a3 70 03 9d 88 92 23 ad 18 7c 8b 72 fe a5 bb 78 5a 86 00 bc 0d cb 2c 83 7f 45 91 36 a9 21 5c 52 33 1e 93 91 25 c0 11 b3 9d Data Ascii: nE@>FdKq;D _z$)u48H3/+.,6u5bj6M`wtF.MBLJI7-#b,v+MsZ].G~/2\qrQur>/-?kBn6t6<;wp#\|rxZ,E6!\R3%
2024-04-19 14:07:07 UTC	1180	IN	Data Raw: 9a 00 83 e6 cf 1e 52 4f 1b cd 9b ce 88 ae 11 f3 64 5c 5e f1 6c c6 02 75 c5 fc d5 05 51 cf 23 8b 16 4e 77 c9 cc 2d 13 37 80 c7 76 da 56 96 6f 43 5d ed 0e 5a 36 d6 80 a6 80 6d d5 48 45 53 70 1e dd d9 85 64 f8 6f 8f 82 7a 84 5c ff d5 4d 20 e2 37 26 fe 49 e4 4f 1e 47 06 c1 74 8a 03 07 86 4d 2d b3 7c b2 b8 7a a4 39 51 73 65 25 51 fb ee 38 4e ed 0f 1a f8 96 a5 f5 9b a9 1b 85 fb 95 05 3c e8 29 78 dd 10 ba e5 89 3e 45 21 ca 2e af 60 b3 fd 3b 12 dc 02 46 b6 21 ba 5c 20 2d 6a 94 52 9e d0 01 05 15 38 6f c8 ab fd da b2 c3 76 72 ce 3c 1a 98 4c cf 15 12 e6 0d 35 4c 77 eb 76 d8 4b 09 df 2f 32 1e 21 df b4 8e d8 0b 17 e1 df 2d cd 92 f0 ef 28 3b 08 50 50 0f 82 5d 82 74 ab b2 f3 ab e2 e5 6e 64 e0 90 ae c1 0e bb 8f 63 f4 a9 ff c0 b4 10 b1 d3 d3 b0 76 21 09 34 78 c0 01 ce 90 Data Ascii: ROd\^luQ#Nw-7vVoC]Z6mHESpdoz\M 7&IOGtM-\|z9Qse%Q8N<)x>E!.`;F!\ -jR8ovr<L5LwvK/2!-(;PP]tndcv!4x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
258	192.168.2.6	50180	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	768	OUT	GET /recaptcha/api2/clr?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:07 UTC	473	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:07 GMT Content-Type: text/html; charset=utf-8 Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:07 UTC	782	IN	Data Raw: 36 37 36 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 68 74 6d 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 63 Data Ascii: 676<html lang=en><meta charset=utf-8><meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"><title>Error 405 (Bad Request)!!1</title><style>*{margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;c
2024-04-19 14:07:07 UTC	879	IN	Data Raw: 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 Data Ascii: color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.google.c
2024-04-19 14:07:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
259	192.168.2.6	50181	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	1053	OUT	GET /_/PlayStoreUi/data/batchexecute?rpcids=vyAe2&source-path=%2Fstore%2Fapps%2Fcategory%2FPRODUCTIVITY&f.sid=-2785155342641865316&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=158022&rt=c HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535622.0.0.0
2024-04-19 14:07:07 UTC	1119	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:07 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:07 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 31 30 34 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 2c 5b 22 64 69 22 2c 31 33 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 31 32 2c 22 33 35 33 33 30 31 33 31 38 39 39 34 32 32 32 38 38 32 34 22 2c 31 30 34 5d 5d 0a 0d 0a Data Ascii: 71)]}'104[["er",null,null,null,null,400,null,null,null,3],["di",13],["af.httprm",12,"3533013189942228824",104]]
2024-04-19 14:07:07 UTC	33	IN	Data Raw: 31 62 0d 0a 32 35 0a 5b 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 34 30 5d 5d 0a 0d 0a Data Ascii: 1b25[["e",4,null,null,140]]
2024-04-19 14:07:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
260	192.168.2.6	50185	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	980	OUT	GET /_/PlayStoreUi/browserinfo?f.sid=-2785155342641865316&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=258022&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535622.0.0.0
2024-04-19 14:07:07 UTC	1139	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:07 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:07 UTC	116	IN	Data Raw: 38 34 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 38 37 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 38 37 2c 22 38 31 36 34 36 30 31 33 31 35 38 34 36 30 32 37 37 33 37 22 2c 31 30 35 5d 2c 5b 22 65 Data Ascii: 84)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",87],["af.httprm",87,"8164601315846027737",105],["e
2024-04-19 14:07:07 UTC	22	IN	Data Raw: 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 32 5d 5d 5d 0d 0a Data Ascii: ",4,null,null,132]]]
2024-04-19 14:07:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
261	192.168.2.6	50187	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	504	OUT	GET /6qi3w4uqKaD1c-CBdkkfO6IL0lH4OoCTEdiX0oYbLFxwfvxu1t8vuwHcagdYSFmFKmI=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 896 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 10:43:14 GMT Expires: Sat, 20 Apr 2024 10:43:14 GMT Cache-Control: public, max-age=86400, no-transform Age: 12233 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	722	IN	Data Raw: 52 49 46 46 78 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 30 03 00 00 2f 3f c0 0f 00 05 25 da b6 8d cd d5 6a 25 79 b6 dd b5 d5 b5 fd 5a b6 6d c4 b6 6d db b6 8d b2 5d 15 3b f9 8d aa f7 ef c6 bd df f7 dd ff af 5e 5a 11 fd 9f 00 5d c0 d8 52 b7 7b f3 ce ea 54 ab 29 fb 03 fb 17 79 ad 22 f4 1e 7e 9f 3e 91 7b 95 98 ef 8e 9c 31 e6 23 cc bc 5c ab 06 98 19 93 99 5c 0c 30 a5 d7 77 3f 0f 5e 7b 32 57 62 c0 6d 67 e4 1d c1 e7 1b 65 b9 f1 1b d0 2c ef 03 f8 ff 3b 93 03 87 80 e3 f2 3c f6 1e c0 35 b3 8b ea 6b 77 f6 03 b8 33 99 b5 4c 4f 18 2e 7b 6a 30 e6 3e d9 9b c7 00 77 67 a9 fc 17 80 63 b6 95 98 f3 e4 b7 18 e8 99 8d d8 97 58 65 96 de 0a d0 39 2a ff f9 40 bd bb c3 d8 7f 34 7e 03 78 ae 41 d6 74 d4 43 03 e0 07 67 27 00 a6 1f 80 ae Data Ascii: RIFFxWEBPVP8X??VP8L0/?%j%yZmm];^Z]R{T)y"~>{1#\\0w?^{2Wbmge,;<5kw3LO.{j0>wgcXe9*@4~xAtCg'
2024-04-19 14:07:07 UTC	174	IN	Data Raw: c7 95 c5 9e 40 b1 af f9 98 2b 65 3d 62 fc 5e a1 ec de 0d 8c 69 f6 d8 87 39 38 25 fb 50 e8 99 51 b6 93 77 01 f4 db 59 5b 5f 34 e7 7a 80 f7 8e c9 f3 28 70 48 d9 cf fc 8d ff 03 f2 4e 03 bf 2a 27 cb de f0 13 91 f7 e9 2b 81 58 6e 48 27 d7 0e fe f9 bb 5e 53 00 16 a7 2c d1 e9 00 d5 ca f1 3c cc 8f c7 cc 18 f9 36 66 a5 72 fe c4 d3 f8 7d 2f a4 d6 98 f7 85 c7 1f 65 6a ad a9 ea 5d 9b f7 d4 fd af 0b 18 01 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: @+e=b^i98%PQwY[_4z(pHN'+XnH'^S,<6fr}/ej]EXIF"II1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
262	192.168.2.6	50188	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	503	OUT	GET /HuveAFzGVUenSS0_hgITMW_hczQGMzmxiOVwW0F9Q5-uUkTidarGHBZtLkI5R5YYIw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 962 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:03 GMT Expires: Sat, 20 Apr 2024 14:07:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 4 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	726	IN	Data Raw: 52 49 46 46 ba 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 71 03 00 00 2f 3f c0 0f 10 77 06 31 92 6c d5 4a 9f ff 3f 0e f9 a7 e8 ee 70 ee 59 2c 08 48 91 24 39 92 bc e6 b4 42 72 20 8e ff f3 c0 e8 9e e9 80 d8 48 92 22 29 ea 9e c9 7f 1b 99 f9 67 ba 1c c5 b6 5b 37 47 52 fe db f0 08 80 ac 03 a4 c8 4b 21 04 6a 35 01 85 92 c0 89 09 81 0b 89 c2 8d 40 22 51 08 24 02 0b a2 44 81 28 6c 40 c4 44 eb 83 05 e1 b2 d8 52 d2 72 08 0c 29 81 96 14 42 54 08 41 18 5c d8 88 0a 17 42 d8 21 84 a8 b0 11 42 d4 46 08 85 f8 5f 21 84 42 88 5a 2c 9b c1 90 c1 50 0b a1 a8 45 bf 0f 77 6c 8e 38 7c be 50 47 9c ec 2b 35 71 b6 6e 1c bb 94 b7 3a 9c 73 06 c3 de 79 a2 ee a3 44 89 e8 37 da 68 fc d1 d1 46 63 a0 31 f0 43 97 8c 37 df ef 8d c7 77 7d ae 4f 76 Data Ascii: RIFFWEBPVP8X??VP8Lq/?w1lJ?pY,H$9Br H")g[7GRK!j5@"Q$D(l@DRr)BTA\B!BF_!BZ,PEwl8\|PG+5qn:syD7hFc1C7w}Ov
2024-04-19 14:07:07 UTC	236	IN	Data Raw: 32 45 3d a5 02 28 55 40 aa 00 cc e2 79 02 f8 a6 f2 5c 00 df 25 1e 2f af 67 f1 8f 9f 5f 8b 04 70 da 55 79 27 80 0f 12 79 ba 16 ff d7 4c e5 ad 00 48 29 cd 80 e3 2f b8 d2 1b 01 7c 96 24 27 10 d1 95 5c 2d 37 af d3 8d bb 4f 23 0c 4a f9 02 70 25 1e 77 89 88 6b f1 38 11 93 fb f1 6b 02 17 b9 c4 65 8a 81 b9 4c d1 87 3f 16 c0 03 66 cb c7 f7 af 6e 0b e0 9c 6b 8d fc ac c7 cc 28 8c a6 d0 ef 5e 84 01 28 34 a0 2c 23 33 85 ab 94 65 64 02 c8 79 d9 9e 49 cb 32 32 53 b8 26 c3 7f 3b 8b 31 2f 2e 9a 5a e6 d5 8e a6 ba 79 35 a2 a1 d6 a6 b5 a1 a8 ab b8 66 51 d5 e8 a8 62 6c 0b 73 5a c6 55 0a f9 03 00 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 63 61 73 61 00 00 Data Ascii: 2E=(U@y\%/g_pUy'yLH)/\|$'\-7O#Jp%wk8keL?fnk(^(4,#3edyI22S&;1/.Zy5fQblsZUEXIF"II*1Picasa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
263	192.168.2.6	50182	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	504	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1162 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:11:45 GMT Expires: Sat, 20 Apr 2024 12:11:45 GMT Cache-Control: public, max-age=86400, no-transform Age: 6922 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	722	IN	Data Raw: 52 49 46 46 82 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 3a 04 00 00 2f 3f c0 0f 00 e7 27 21 92 24 47 92 62 f9 93 3a 42 5a df ed 4c fa 89 7f 0e 92 22 49 92 24 49 bd 8f e7 b2 5a fe 38 96 c1 d9 1d 26 21 92 24 47 92 a2 9f 3f a7 47 a4 f5 ff 4c a7 cf 7f ca ca 1f 09 15 68 e9 1d 11 86 0a 88 40 2a e0 3f 7b 8d 98 a9 04 b2 9b b0 30 44 05 a0 02 1a 02 95 00 44 30 42 0c 41 f4 39 e6 da 63 88 86 84 dd f8 b2 d8 0d 04 cf 40 20 a1 4f f6 44 43 40 84 3e d9 93 40 2a a1 6f 06 9b 76 cc 25 c4 50 f4 4d 3b 6c 16 d0 d8 d1 20 fb 4c 68 b1 ac ab 0b e9 81 30 ce bb 16 8d be b9 74 1c bd 2a c4 80 06 b4 74 e9 62 34 26 c1 d8 0d 08 70 00 18 5d 84 07 33 20 84 80 96 cb e2 9b 99 99 96 0e 02 c2 60 fa 1e e7 2e 03 34 a4 83 9c 7b cd ac a9 c0 c2 66 11 ba Data Ascii: RIFFWEBPVP8X??VP8L:/?'!$Gb:BZL"I$IZ8&!$G?GLh@?{0DD0BA9c@ ODC@>@ov%PM;l Lh0t*tb4&p]3 `.4{f
2024-04-19 14:07:07 UTC	440	IN	Data Raw: 86 ec 17 b8 2c b5 f6 b5 c1 c0 7a 63 00 ec e5 a8 e0 1a ed be 9d 75 f8 1e 53 ce 49 85 ca 99 86 6a a0 c7 9c 14 40 77 d3 52 18 11 b1 36 c6 68 a6 72 a6 76 3c 70 a4 fb 71 7d 00 2b 84 88 52 16 4e 89 88 45 84 89 88 58 44 84 4b 56 eb 47 a2 fb 6a 1b 26 01 d8 c7 11 51 fa d9 43 cb 1e fe c5 d4 f0 eb 37 df fc ff 47 b6 99 f8 cd bb e6 ce bd fb 71 2e 95 fe 0b bd 52 71 17 00 18 ec 1b 88 48 ee 54 89 52 fb 59 7d 6a a2 54 d5 8e ba 59 2e 49 12 55 f5 bb 2d 95 1d 8d 15 c6 cf 06 d0 47 98 f2 e6 26 33 5e da 55 4d b7 b9 e4 fd 6f 8e 51 bb 58 99 96 2c 5d fb d6 5a 2e d9 08 dc 2b 53 01 f4 fc 81 29 4b 2d 30 be d3 ce 3e a7 de 95 b0 93 fa 5e 4f 53 ab b4 30 95 5a 5f 83 cc 91 c2 d4 da 22 ab 93 c9 3e a7 de 66 b9 3e b9 cf 4c 4b 96 7f f8 de 17 69 a9 c8 fd d5 05 58 ef af c0 d4 5a 72 fa 2d 7f a8 Data Ascii: ,zcuSIj@wR6hrv<pq}+RNEXDKVGj&QC7Gq.RqHTRY}jTY.IU-G&3^UMoQX,]Z.+S)K-0>^OS0Z_">f>LKiXZr-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
264	192.168.2.6	50183	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	504	OUT	GET /rv4R3b-JUrYGeRTAb6m1dBbPbJgj1pC31LijPfzvz65z6_8aKbKbx0MCTUxBMTUVKYA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2544 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:04 GMT Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 3 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	725	IN	Data Raw: 52 49 46 46 e8 09 00 00 57 45 42 50 56 50 38 4c dc 09 00 00 2f 3f c0 0f 10 4d 28 68 db c8 f9 dc f8 d5 f2 27 fc 0f 22 a2 ff 13 c0 3f 21 4d 65 06 98 91 09 20 3d 71 94 69 90 44 3a 33 24 3d 5f 2f 0c b2 8d 54 7f ca 11 7c 1e e2 20 14 b4 6d 23 87 7c ff c1 08 43 46 92 04 d5 cf f9 cb 3d 41 13 dc 3f 42 ff 85 04 09 76 87 60 bb 7d 97 fa 7d 87 a8 df 01 10 11 ca 37 27 8d 12 44 f4 68 3a 48 4a 34 8d 71 90 bf 1f f1 02 a0 24 0e 03 69 db 34 fe 6d ef d7 10 11 13 50 69 c2 6a c4 b0 1c d1 db 8e ac 6d ab 6d 2b f3 f8 b9 b8 3b 44 96 4a 0f 4e 1b 68 01 39 bd a1 03 b4 80 26 dc 1e e0 ee ee ee 1c 5b 33 58 6b 9f bd d6 95 7c a0 91 cb 57 7f cd 64 36 80 3a d9 aa 55 f5 23 99 43 e6 ee 4e fa 23 a9 c3 2e b2 2f 24 72 56 4d bc 0b ee 4e 03 76 91 d3 0a c8 91 24 29 92 3c 16 ee 24 e0 d3 5f 3a c6 17 Data Ascii: RIFFWEBPVP8L/?M(h'"?!Me =qiD:3$=_/T\| m#\|CF=A?Bv`}}7'Dh:HJ4q$i4mPijmm+;DJNh9&[3Xk\|Wd6:U#CN#./$rVMNv$)<$_:
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: fc d2 0e d0 f4 e3 f1 47 4a 33 03 40 8f 41 b7 10 d0 68 1e f6 c9 72 10 03 25 91 08 71 00 00 17 bf 73 fd e6 5a f8 ff 65 00 34 36 80 b0 02 94 c7 a1 23 be 4d 53 72 6d fe 21 9f 2c 09 b5 10 0c 00 ba 20 16 ce 00 78 e9 2d f1 02 9c 01 67 60 44 bb 0f 44 8b a3 67 d6 16 b7 24 cb 83 3f 6a 59 00 96 62 ed a7 50 fb 86 9b c0 fc 00 a1 a2 e8 b2 b1 f8 04 38 76 41 6b 6c 61 9d e4 03 df 6b 79 0b f0 20 00 b7 78 fc c1 2b e2 66 b0 70 88 50 39 e8 d2 65 c1 09 d8 e3 17 88 a6 b4 b5 2c d6 3c e0 bd 74 bc 2c bd 88 89 5c c0 26 00 bc ae a3 3b e0 e6 b0 30 5c 2c ba 68 fe 05 e0 d8 25 18 2d 4c b6 f7 7b c3 0a b3 21 2e de 50 f3 0e f2 03 ea 57 da 86 c2 ba ab 7d a2 a4 43 a7 a0 d1 74 63 50 70 9f 1e ac 42 93 0a d0 00 0c 93 33 1f 0b 95 61 c7 01 f7 76 6f 55 d7 ec 74 80 41 00 40 32 65 5a 46 c1 f6 01 a0 Data Ascii: GJ3@Ahr%qsZe46#MSrm!, x-g`DDg$?jYbP8vAklaky x+fpP9e,<t,\&;0\,h%-L{!.PW}CtcPpB3avoUtA@2eZF
2024-04-19 14:07:07 UTC	564	IN	Data Raw: 1d 18 cc 70 35 98 da 80 29 8b ca 80 0d 59 05 fa bb 39 63 30 60 6e 12 4e 9c 52 df c6 ad 1e 9f c0 ad ef 8f 9c b0 97 1c 2d ca 58 6b ad 61 38 00 4c b1 43 13 ba 8a e1 99 07 ce cb 77 0b 46 8d e6 01 0b 30 15 28 e6 aa dd 0b 09 e3 99 5b bf 34 3b 8c d9 21 2a b7 b9 3d 78 65 d6 e7 5f c7 ca 59 31 6b a8 47 45 09 a1 6a 1b 53 58 dc 60 e8 16 86 f0 29 61 fc 8f a6 a3 5e 04 c6 fe cf c4 55 61 d4 12 5c 4a e8 98 b1 42 f9 d9 cf b8 69 6b 1f 9d 89 fa ab 7f fc 23 c5 a2 b4 99 9a cd b0 19 b1 69 a1 99 ef 2b 67 95 c4 aa 90 2f e0 03 12 c9 fd 28 5a b0 16 a2 c4 31 93 da 1f f8 2d 67 c4 e9 c6 fb 6b f7 4f ed 8c aa 3f c4 47 9d eb b0 df 26 1a 8d a1 d1 09 dd a2 f1 7f 06 2a c0 96 44 92 5a 13 60 c1 8c 68 89 08 f1 bf bf 24 99 39 97 1c 45 20 98 62 8a 29 cc ff 9a 4e 61 28 06 be 14 84 4f 03 2e 94 08 Data Ascii: p5)Y9c0`nNR-Xka8LCwF0([4;!=xe_Y1kGEjSX`)a^Ua\JBik#i+g/(Z1-gkO?G&DZ`h$9E b)Na(O.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
265	192.168.2.6	50184	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	504	OUT	GET /dC6GlK3KxcpeDcT8QIeJDRO9MdlPg5gV3lWjhvdBRnjgAaHhvz4avmYz9RClPPfmWW4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1124 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:57:41 GMT Expires: Sat, 20 Apr 2024 12:57:41 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4166 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	722	IN	Data Raw: 52 49 46 46 5c 04 00 00 57 45 42 50 56 50 38 20 50 04 00 00 d0 16 00 9d 01 2a 40 00 40 00 3e 61 28 8f 45 a4 22 a1 14 06 fc 40 06 04 b2 80 62 f4 c3 2c 20 66 93 d3 bf 27 f8 ac c4 0b e1 5f 4e fe e3 f9 55 f9 25 ac 27 fc 97 fb 2f e5 6f 00 4f 1e fe a5 fe 3b f2 df 98 0e f4 1f ce ff d7 79 39 78 03 7c af fd 37 b0 07 f2 7f ef bf f1 7d 92 ff 89 ff 6b f7 33 ec fb f2 df eb 3f f1 3f c8 fc 01 ff 1d fe 85 fe 97 f3 87 fc 47 cb 37 ac bf da 5f 62 3f d3 94 e3 22 fd a6 bf 15 27 0f 9f 9f 3b 8f e5 2b d4 d3 72 7a cd 37 ff 3c 4e 75 74 fa 27 36 bc ef a7 98 a9 7f b3 0b 9a 62 ec 69 24 ca 66 47 72 f6 45 87 d1 5f f5 5f 03 e1 a8 b5 8d 7a 57 26 f1 2b 66 40 00 fe fd 28 d2 f2 3b 08 6e c3 95 69 10 45 de f5 e5 5d d1 9c a6 a1 73 83 5a 86 e9 ba bb f8 8f e6 d4 fc df bf d7 09 3b 59 88 2e 35 de Data Ascii: RIFF\WEBPVP8 P*@@>a(E"@b, f'_NU%'/oO;y9x\|7}k3??G7_b?"';+rz7<Nut'6bi$fGrE__zW&+f@(;niE]sZ;Y.5
2024-04-19 14:07:07 UTC	402	IN	Data Raw: 2d 54 57 25 bb 8d 60 db 30 ee c5 44 a9 a5 a2 92 a7 00 8f f9 14 83 12 2f d8 58 20 21 3d 6b 29 b2 78 1e c2 fe 16 f2 5b 16 b6 f6 9c 61 10 f3 f8 5b 8b 2c 5e d5 c4 7a 78 88 22 44 b8 d0 e5 57 2e 84 eb 0a da a9 53 8a 77 87 33 d4 c6 0e ea 0d 54 d2 d6 c3 a1 a9 7f f3 96 be 79 d2 e1 ca 89 56 27 f8 60 dc 80 fe 5f bb ff c9 86 f0 11 ea 56 1f 8e 5b cd 47 a7 f4 1a 04 19 9a d6 e9 e5 ad d5 67 e4 7a ca 72 e4 9e 37 d1 c5 ff 63 b6 1a c1 5a 8f ae 33 bb 7e e6 ab 0b 07 d9 c1 d0 eb 6a 35 6d fb e5 39 fe b0 f8 a4 e0 08 73 9c cb 7c 19 61 4e ab 51 2d d4 3e c9 9a 8f c7 43 d2 45 ab f4 ba 33 86 a7 8e b9 88 16 ef 14 d5 f8 e1 39 ac 06 76 b9 5c 31 5e 2f e1 c2 c1 ce ef a1 7b 1f e1 f0 26 67 7f 7d b1 15 0b 6a de 25 81 88 f4 ad 53 e7 c2 2b fd 5a b5 95 94 7d 85 d4 db 95 c2 be 24 63 c8 25 f5 24 Data Ascii: -TW%`0D/X !=k)x[a[,^zx"DW.Sw3TyV'`_V[Ggzr7cZ3~j5m9s\|aNQ->CE39v\1^/{&g}j%S+Z}$c%$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
266	192.168.2.6	50186	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:06 UTC	504	OUT	GET /DmOukkkgQAAuCcUDsETgEj05UQaVcrvscGHa7f9r5AtdOZaFY8uED38rruq3ZSXpca4=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 870 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:04 GMT Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	726	IN	Data Raw: 52 49 46 46 5e 03 00 00 57 45 42 50 56 50 38 4c 52 03 00 00 2f 3f c0 0f 10 2f e5 20 92 24 45 ca bd 3b 9d 6f fc 3d 30 c3 4c 3f 89 70 dc 48 92 22 c5 ee f1 8b fd b7 ed 9c e0 9b db 74 10 49 92 22 e5 ec 9f ca d7 fe 1a 98 61 a6 5d c7 b6 ad 26 2b ee 9e e0 d4 c0 d0 7f 23 54 91 5f 1c 84 04 49 24 e9 0e 90 1e 29 4a 4c 48 a8 0d 6a b4 68 10 20 40 8a 33 22 54 d8 23 43 1a 73 8d 88 88 88 48 f1 d5 2f 20 22 22 da a8 46 f5 d7 c6 df 43 1b 29 22 4a eb 46 69 22 a2 6a 11 6d 54 2d 22 a2 8d aa dd fb 28 ed f0 bf 6a a3 6a 4f 3f ce 5f 03 94 36 22 22 22 70 0b 7f 12 20 41 40 7e f8 e0 bf 71 ba 3f fc a2 7e cc 25 af 48 91 36 93 c5 c4 50 26 cb 6c 67 9e 36 03 43 59 6c 86 52 c7 97 14 b7 c7 c7 f1 fb 56 da f8 b7 e7 f7 eb d1 4f 1f 96 e7 78 79 ac c6 bd 8f 36 ce 3d 3c 7c b5 20 8e dd ac 3b d8 38 Data Ascii: RIFF^WEBPVP8LR/?/ $E;o=0L?pH"tI"a]&+#T_I$)JLHjh @3"T#CsH/ ""FC)"JFi"jmT-"(jjO?_6"""p A@~q?~%H6P&lg6CYlRVOxy6=<\| ;8
2024-04-19 14:07:07 UTC	144	IN	Data Raw: 04 65 78 61 24 3b 3f af a0 f2 38 11 6a 65 02 1c 26 a9 a2 9f 65 81 26 2e 46 98 99 04 ea d0 13 00 b8 ee 51 ce a8 eb d7 35 42 a5 74 97 99 45 3a 40 0c 0b 47 72 4b 4b 0a 01 00 4e 12 3a a2 ac 63 b4 e7 86 0e 28 73 6e b2 40 a4 1a 80 62 53 c2 53 25 94 cc 84 88 28 3c 0d a1 84 9a 0a 81 de 12 9a b2 fc 3f a3 25 e7 16 5c 58 d2 db e7 c2 aa de 0e 17 76 eb 05 fa ec 0b af 5f c3 66 eb 42 db 03 6b dd 12 b6 6c 67 60 ed eb 76 cd db 33 b7 67 43 40 0d Data Ascii: exa$;?8je&e&.FQ5BtE:@GrKKN:c(sn@bSS%(<?%\Xv_fBklg`v3gC@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
267	192.168.2.6	50191	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	504	OUT	GET /emmbClh_hm0WpWZqJ0X59B8Pz1mKoB9HVLkYMktxhGE6_-30SdGoa-BmYW73RJ8MGZQ=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 238 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:06:03 GMT Expires: Sat, 20 Apr 2024 12:06:03 GMT Cache-Control: public, max-age=86400, no-transform Age: 7264 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	238	IN	Data Raw: 52 49 46 46 e6 00 00 00 57 45 42 50 56 50 38 4c da 00 00 00 2f 3f c0 0f 10 9f a0 28 92 14 67 08 6f fc ab c0 0c 16 ce 43 0e 36 14 32 92 24 55 16 66 45 4e fd 2c ce e4 1d 04 6d db c6 d2 f8 a3 1c 8d 7f 31 c8 36 52 4f e3 fc ce e3 cd 3f c0 4f 5f 33 67 93 e3 74 60 ce 11 ad 42 a8 f6 93 1f 90 97 a7 ad 85 3c e7 cb f5 81 71 24 c9 69 c4 2c 99 f2 0f 96 7d 5a b3 5f 11 fd 67 e4 b6 6d 24 aa 9d 7d e6 38 e8 1b d8 ff 98 2b 79 bf 68 90 7c ca 04 a1 b3 40 25 93 f4 0d 70 64 a2 76 1c 47 9b c6 c1 e6 71 ac c5 38 d4 72 1c 69 35 0e b4 1e 47 19 fa 55 9d 01 20 8e 8d 22 40 75 8f 49 13 02 d3 9c 90 be 16 25 e4 6e 42 81 2f 2b 42 9f fe b5 85 43 5f d3 17 a4 04 e5 eb 47 be 76 fc 7f f7 5b 2b b5 0a 60 d9 9b ea 24 8f 58 f8 56 1d 16 c7 7e c7 18 Data Ascii: RIFFWEBPVP8L/?(goC62$UfEN,m16RO?O_3gt`B<q$i,}Z_gm$}8+yh\|@%pdvGq8ri5GU "@uI%nB/+BC_Gv[+`$XV~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
268	192.168.2.6	50192	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	504	OUT	GET /pWcADQz_SoLoCVCqznMANpCXLYnRwcVB-2zQjQDRB24h9EZec4DahXJ0cw7JJuwsAUw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 696 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:13:29 GMT Expires: Sat, 20 Apr 2024 11:13:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 10418 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	696	IN	Data Raw: 52 49 46 46 b0 02 00 00 57 45 42 50 56 50 38 4c a4 02 00 00 2f 3f c0 0f 00 d7 05 29 92 24 47 52 d4 da 2e 7f 1c 8b eb 9e f2 a7 7b ca 69 40 8e 24 49 91 14 cb a0 bf 72 cc fb 64 3c e8 ca 70 14 49 92 a0 64 1f b2 f0 af 88 d7 1d b0 35 ff c1 26 a0 00 32 02 b3 15 22 44 40 8e 84 49 40 b2 a6 62 49 46 a1 83 46 ff 80 a4 6e 00 53 9b e5 a8 83 00 92 04 94 80 a4 4e 04 52 37 0d b8 7b 29 dc a6 f3 7d fe 01 19 61 4d 22 30 e7 3f 99 95 24 92 80 04 24 3a a9 48 18 a2 03 52 27 0b 91 a4 0c 49 12 50 37 4c 6d d6 43 4d 32 ce 72 44 30 23 24 d9 24 22 8c 30 18 30 af f9 e5 67 da 48 30 85 84 21 c7 43 a3 62 64 c2 30 87 a3 df b9 fa 7f d7 97 f3 8c 4a 3f c4 64 c0 c8 a3 ff f2 73 ff 2b 20 39 82 90 49 6e 35 13 7e 26 7f f7 09 e7 84 67 e6 6f fe b6 89 80 8b 44 00 40 16 96 2c 2c 01 4b 2e 72 c1 1f c7 Data Ascii: RIFFWEBPVP8L/?)$GR.{i@$Ird<pId5&2"D@I@bIFFnSNR7{)}aM"0?$$:HR'IP7LmCM2rD0#$$"00gH0!Cbd0J?ds+ 9In5~&goD@,,K.r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
269	192.168.2.6	50196	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	503	OUT	GET /zIjprEdU_0F4wqsGb_uD9bnbBiCTw_5Sld92VIHhKZApm2I6ICv0x1MqhetxbGIteg=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2666 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:04 GMT Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	725	IN	Data Raw: 52 49 46 46 62 0a 00 00 57 45 42 50 56 50 38 4c 56 0a 00 00 2f 3f c0 0f 00 09 06 6d 23 39 d2 b4 dd bd c6 1f f0 3f 88 88 fe 87 ce 41 55 95 04 d8 33 4b c7 2f 1c b2 2d 92 33 2d cf ef a1 37 a7 00 74 37 3e f4 59 b0 69 24 c9 51 e9 22 7f 37 fc 91 be cb 9e 84 d2 b6 91 24 df 8b 07 1e 9c fe 0b 3c cc b6 91 24 45 e5 1d d3 ff 9b 98 7f 74 17 42 ff 13 01 41 d4 80 50 10 01 15 00 09 98 17 d1 8b 00 04 48 c5 d4 1f 08 81 60 de df bd 5d 60 2b c5 d4 ff d2 e7 ef 13 36 00 85 09 84 c2 af f8 c5 41 90 6d b3 fa 63 ff 10 11 31 01 e9 93 90 db 29 d3 a7 a2 a5 eb b7 d9 36 5b 92 64 db 72 4f be 55 69 1d 5a 7f 05 5a 86 56 c2 09 f7 bc a0 25 78 24 28 ee c7 07 67 4c 02 eb ab c3 94 70 60 50 a1 41 df ef 17 93 a1 01 c7 e0 52 82 e4 0a 26 86 53 2e 46 08 d2 28 86 41 db 36 82 92 3e a7 c7 f1 e4 9f ce Data Ascii: RIFFbWEBPVP8LV/?m#9?AU3K/-3-7t7>Yi$Q"7$<$EtBAPH`]`+6Amc1)6[drOUiZZV%x$(gLp`PAR&S.F(A6>
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 17 9d 1e 85 4c 0e 94 59 99 e9 1d 38 6e 8d df cd ee 41 41 e1 e0 8d 91 71 a3 d9 dd 3c 81 84 5c bd 08 60 1c 6a a6 ef 80 b0 85 ad f9 55 82 03 48 48 ce d0 90 a0 91 11 32 05 52 87 96 ea 92 da 3b a3 5b b3 d2 89 f0 c6 70 1c 84 51 96 da 23 00 57 80 7a 09 81 e4 d1 93 07 92 86 d2 67 24 0f 32 14 17 de 14 20 0c 51 14 25 12 c3 ab bd 45 82 79 01 54 d1 a4 c9 dd 21 d4 43 8f 2c 4a 4f fc a2 87 5e 42 04 c2 c1 ac 00 e4 90 db 57 68 51 a2 b4 85 76 2e ee be 5b 88 de 02 7a 3c 3a d4 d1 03 38 85 61 6f a8 09 72 07 03 c1 5a 63 d2 4b 81 a8 e8 15 6d 12 72 21 2f 01 5d 43 76 3a eb 69 04 b5 88 10 23 cd a0 c8 a1 ab 5b e5 76 b3 ca 24 7a 89 76 4e 35 4c 35 85 90 5c cc d7 a8 35 63 da e4 b1 6a d2 2b 40 50 72 06 13 dc ed 0e e6 59 7b c8 d7 32 49 a2 0a 26 b9 66 2c df a3 7f 07 f6 7d 50 6b 1d a0 26 Data Ascii: LY8nAAq<\`jUHH2R;[pQ#Wzg$2 Q%EyT!C,JO^BWhQv.[z<:8aorZcKmr!/]Cv:i#[v$zvN5L5\5cj+@PrY{2I&f,}Pk&
2024-04-19 14:07:07 UTC	686	IN	Data Raw: 6c 18 96 7e 42 f5 e8 7b 39 0f b2 27 79 bc 8b 64 bb 7e a8 a3 7b fb f6 fe 21 d7 4d 48 df 97 76 a5 fc f5 d7 1f 0c 70 7c 0b d7 39 6e 36 f8 fb 4e 98 13 a2 e9 f2 32 96 bc a4 e7 9a 24 4f 44 9c ef 55 c8 d1 b2 e7 b0 b6 31 fe 6a 7b 36 77 4b 15 fd e3 39 7e 75 fd d5 55 53 97 2c 2f 5c 56 3d 5e bf 76 bd 71 c1 ff a4 25 67 ab c9 62 0a a6 40 45 d5 1e 55 bb 23 b2 92 6e dc c6 d6 c8 38 13 e3 ff bf 51 f5 ba 3d 36 2f 09 d6 2f 60 c7 22 dd e9 4f 1b 9a ff 19 9b 83 85 91 ee ba ed 7a 71 33 65 87 dc 6e c9 8a 48 bb 5f 79 3e 91 db 52 53 4a 4c 6f 66 1c 57 dc af 5b a0 19 b5 3d 6b fc ed df 9f 9f 4e 4f cb a3 c6 c8 9f e4 e5 cd c5 d8 a7 cb 49 d5 43 b4 d2 7b dc 9e 07 df 7a 56 42 0b 8e 1e b8 c3 bb 72 c7 53 bd ed 7e b8 e5 e6 eb 07 f2 7f 25 cc 77 db 63 13 2f 6f 2b d7 6d d7 5d 8c 28 93 ec 92 0c Data Ascii: l~B{9'yd~{!MHvp\|9n6N2$ODU1j{6wK9~uUS,/\V=^vq%gb@EU#n8Q=6//`"Ozq3enH_y>RSJLofW[=kNOIC{zVBrS~%wc/o+m](

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
270	192.168.2.6	50194	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	505	OUT	GET /ORzWxi-sIo_hCgSa6uzVvBUE4osKUqRVzHnniUUxA2WXD7BnZ95BNVpWFLUTKRyJRdU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 3346 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:38:51 GMT Expires: Sat, 20 Apr 2024 12:38:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 5296 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	722	IN	Data Raw: 52 49 46 46 0a 0d 00 00 57 45 42 50 56 50 38 4c fd 0c 00 00 2f ff c0 3f 00 e6 50 dc b6 8d 23 ef 3f 76 fa d5 6f 44 4c 00 af af 75 19 13 76 24 a4 39 13 8f 31 02 8c d0 bb 1f 09 64 54 23 60 52 c8 07 cd f2 ba 1a fb 4e 3a d2 b6 2d ba 94 83 93 b9 bb bb bb 5b 53 45 e4 ee ee 0e b9 87 ee 0e c7 0d 77 3f 6e 33 c7 cf 19 77 77 77 39 d6 68 cb 3b ff d7 2f ee a1 93 39 69 0f 12 4f 8a c3 22 88 59 c1 40 46 11 6a a3 8d 6e c0 f9 33 34 a2 88 88 89 58 80 4b ee d2 3b 98 2d 60 3b 70 36 30 a4 d4 8f 45 6c 80 46 7a 0b f8 59 0a 3b 20 eb e8 43 53 aa be ec 8f 66 0f a4 53 72 6d db 3a b6 e7 54 7f 8f d8 b6 93 6b f0 4d b8 4c 9d d6 76 ba d4 4e 6d db bd 9d 2a df 3e af 3e 7f cf fb 1d 49 80 24 c9 b4 ad 7e b6 6d db ef 9c 67 db e6 b7 6d db b6 6d db b6 ff b3 6d db f6 99 fe 4f 00 dd e8 ff 17 5b 59 Data Ascii: RIFFWEBPVP8L/?P#?voDLuv$91dT#`RN:-[SEw?n3www9h;/9iO"Y@Fjn34XK;-`;p60ElFzY; CSfSrm:TkMLvNm*>>I$~mgmmmO[Y
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: b7 a4 97 92 ce 52 a9 72 f1 d5 77 dd d6 7b 06 25 df 6e 3d 5e 7a 6e d4 d3 da 6e 00 68 6c d0 e0 ab 51 70 49 f5 cc 57 1a 0a a1 cb 97 95 af 14 5b a5 e2 23 b0 43 61 fc b8 de 89 21 a5 36 f0 6c 66 50 28 bf f8 5d a1 05 4b 98 09 c6 c7 47 b6 54 64 0d 3a f2 2f 0a e7 47 91 37 46 94 d8 a4 df c7 01 87 01 a1 33 c6 bc ac 0e ab 56 75 45 1e 28 a4 b2 20 6f f5 d7 a4 9f 67 bb 41 a1 d6 5c dd 55 a7 f5 3e a6 b0 2e a8 58 74 74 57 84 bf 3c c0 b8 ed a9 ff 9f ce ea bc 52 2c b9 28 b4 3c 13 ad 26 52 67 e5 f6 0d 1f 71 c0 f1 93 26 8d 8d 93 56 ef 5f 43 8d cf e5 35 bf 54 d4 f8 54 96 3d 18 21 c8 46 8b c2 6b 8d 7a 5c 92 6a fd ac 89 39 7c da 97 ac 7c 88 f5 25 a7 36 6d bc c8 70 fd 15 89 45 6e 7d e1 8d 23 45 fb b9 e2 e9 05 d0 b2 a6 c3 49 4e 4e 3d 1a be ef 80 17 99 06 cc 0b 0e 5e 1f 1d bc 21 66 Data Ascii: Rrw{%n=^znnhlQpIW[#Ca!6lfP(]KGTd:/G7F3VuE( ogA\U>.XttW<R,(<&Rgq&V_C5TT=!Fkz\j9\|\|%6mpEn}#EINN=^!f
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: c5 a5 84 60 1d e6 ea 6f 50 04 56 1a 74 a4 a2 3c 83 7f 7d 02 80 7a 03 5e 23 18 26 52 35 3f 19 00 f1 48 e4 a0 e2 88 de f7 7e 01 40 17 26 0c 92 48 d6 f7 b0 2d 40 1c a8 ea b4 58 e4 24 a4 64 92 61 e1 b8 d8 0b 86 af 04 19 9d 1c 95 c7 f4 7f fd 0b 29 7e 90 44 b4 09 df 8f 01 0e 03 e1 b6 46 3f 6f 18 be bd 10 50 8f 40 c1 61 2e d1 b0 cb 4a db 40 2c 6c 36 90 18 c6 f3 be 07 d4 3e 50 c5 1a c9 86 25 53 8e c8 0d 08 7b 73 f9 05 86 35 2b c6 34 38 b9 6e 3e 88 f4 49 74 ec 00 00 66 80 10 4f 45 e1 98 39 f3 24 98 11 d9 62 a6 72 12 f1 26 7c ad 44 82 8b b8 c3 f6 71 14 bf 76 e7 c1 a0 50 02 33 00 84 b7 ea 7d 20 1e 0e be 9c 04 a0 c3 a4 c5 06 f5 3d 68 54 b1 c8 b0 f0 2a 30 5a 55 6d 26 1f f6 de ef 5f 08 9b d1 6d bd 51 d5 a1 32 a5 51 d9 06 c8 48 6c 31 65 11 c1 07 29 c1 88 5f 0e 93 34 23 Data Ascii: `oPVt<}z^#&R5?H~@&H-@X$da)~DF?oP@a.J@,l6>P%S{s5+48n>ItfOE9$br&\|DqvP3} =hT*0ZUm&_mQ2QHl1e)_4#
2024-04-19 14:07:07 UTC	114	IN	Data Raw: 8a e0 aa f6 cd 34 de 96 e8 3e fd a4 5a 9e 4e 51 cc c7 58 71 bb 60 1b 4c 02 a6 1b a5 ed 2e 45 f3 fd 65 ed c9 1d aa c1 84 bc cd 0c 3b 52 50 de de 3c 44 51 5d cf f3 4a da e3 bc aa 6d ab ba 6e 18 86 ae ab 6a 5e d5 2a 65 8f 1b 79 25 c5 78 43 2f ab e9 c9 55 fc 47 19 fb 52 d6 be 1e 5e d5 7f d5 f0 a4 46 5e c1 07 ed e5 ff bd fc bf 97 ff 77 bf 12 00 Data Ascii: 4>ZNQXq`L.Ee;RP<DQ]Jmnj^*ey%xC/UGR^F^w

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
271	192.168.2.6	50193	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	505	OUT	GET /EiB8nFwIAQxl8JrfoaNVIXSM7FZZ108NmJ_D0Eqyb1utmDLe3FgKU8p7OEwAhnDWzl8=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10942 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:24 GMT Expires: Sat, 20 Apr 2024 12:46:24 GMT Cache-Control: public, max-age=86400, no-transform Age: 4843 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	721	IN	Data Raw: 52 49 46 46 b6 2a 00 00 57 45 42 50 56 50 38 4c aa 2a 00 00 2f ff c0 3f 00 09 46 6e 23 49 51 55 35 3d 40 0d ff 7f f0 da ac e7 88 fe 4f 00 fe b5 00 64 5c 30 4b 00 62 ac e3 16 2f 20 01 4c f4 45 ba 4a 57 e9 2a 5d a5 2d 97 d8 f6 81 a1 4a 7b 2e 21 b9 43 96 6d 2e 75 e3 38 8e 24 35 4d 35 18 c7 88 04 24 0d 53 4d 8b c8 04 ba a4 09 b5 11 81 b5 84 ea cc ce de bb 70 e1 0a 97 9a f4 05 36 6c 1b f6 a1 04 90 00 72 63 73 23 01 24 4e 2e 7d ab af de 33 2f bb 7e 01 39 92 24 45 92 db e1 d0 a3 ec 5e 7c 57 07 fa 8b 88 53 dd bd b3 12 40 91 24 c9 91 e4 ab 17 26 5c 18 ff 7f dd 8a 53 e8 0c 8e 24 49 8a 24 5f 06 09 35 0c 71 f9 58 bb ff bf ea ec ac ff 0c dc 36 52 d4 39 cc 51 16 ee 13 38 43 51 e8 30 c7 31 7e 86 92 23 5c 04 60 05 4b 75 f8 37 df 3e bf c5 2f 3f df 54 97 a4 ba 00 60 d5 e1 Data Ascii: RIFFWEBPVP8L/?Fn#IQU5=@Od\0Kb/ LEJW*]-J{.!Cm.u8$5M5$SMp6lrcs#$N.}3/~9$E^\|WS@$&\S$I$_5qX6R9Q8CQ01~#\`Ku7>/?T`
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 86 7b cf 04 2d d8 b6 dd b6 0d c0 a2 06 6b dd 83 f7 50 f8 20 29 f9 b5 34 ff df 22 49 ca f3 3c 99 59 2d 3b 3d 3e eb be 8b bb 3b bc 04 e7 1d 70 e5 05 f0 16 08 6e 9c dc e1 c6 c9 dd dd 1d c6 dd 5d da aa 2a 9f 07 e9 ca 9e ad 89 bd ff b0 39 e2 19 49 22 0f ee 6b 15 1d 49 e4 21 d1 93 76 4c 4c 24 3a 47 bc 70 9e 13 ee 50 91 68 62 a7 21 3a b0 8a c4 ed a8 1d 2b 89 bb af 54 e0 ee ce 90 17 3a d8 ff 1f 92 a4 ef f7 57 d5 ff 6a bb 7b 7b d6 46 f7 d9 b6 7d 91 32 3b f6 5d 76 97 19 91 6d 84 1b d9 b6 cd b1 7a d4 a8 ae fa ff e8 46 b6 ad da 76 c6 98 fb dc 77 df 67 12 47 c0 9e 4a 9e 3c f6 14 8e c2 51 08 ca 41 16 c6 c0 16 33 bd 7b ce 9a c1 88 6d 23 45 99 e5 a3 ee 1e f3 ff 27 0f e5 cc f9 04 8e 40 ce 17 cf e5 05 70 31 c5 04 50 22 9e cb e7 3a 90 83 50 70 a9 8a da 94 a3 5c 44 57 db 59 Data Ascii: {-kP )4"I<Y-;=>;pn]*9I"kI!vLL$:GpPhb!:+T:Wj{{F}2;]vmzFvwgGJ<QA3{m#E'@p1P":Pp\DWY
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 94 c9 d4 93 81 8a 63 db b6 9d a6 09 bd cf 25 d7 b3 c6 e5 cb 13 51 e8 f6 f4 2e 24 09 a0 3c 08 c1 31 83 a2 8c 66 76 ea 40 26 49 92 a8 01 f4 3f 17 e7 8c 71 f9 f9 49 53 9c 5d 28 7b e1 4a 1a d2 d6 66 b0 68 c0 46 39 69 2c 1a 74 ad 42 ad a7 8a de e7 52 09 fa a5 fc 06 34 ef 97 49 ee 4a 6e 14 c0 51 0b ba 61 0a ca 6a af 7a 0d f1 00 12 85 9d d5 73 07 84 42 b9 5c 44 de 03 57 92 24 20 0e ed cb a7 b3 89 57 5e bc f7 2c fb af f7 44 82 24 01 bd cf 25 78 00 a7 44 d6 ce 50 f2 50 82 b5 94 dc 95 24 b0 6d 14 47 ba f5 8b c3 04 94 d9 3e db 76 67 b9 02 db b6 ed 84 de e7 92 1d d8 03 db 82 05 3d 93 c8 31 4c 1f 5c 29 88 69 fb c9 39 c2 fb a2 ec 36 6a b1 f3 37 96 66 90 29 00 7a 9f 8b c7 ce c6 2b 57 0c 02 43 0e ce 55 7b e1 4a f2 67 67 db e7 66 8b db 05 85 e5 25 44 d2 7a 09 f9 6e d6 00 Data Ascii: c%Q.$<1fv@&I?qIS]({JfhF9i,tBR4IJnQajzsB\DW$ W^,D$%xDPP$mG>vg=1L\)i96j7f)z+WCU{Jggf%Dzn
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 6b 6e 9f 4b 4a 97 3a 46 41 b1 c8 eb f2 0b 93 53 9e 96 2b 2c 25 85 cb 29 6b e8 02 f7 95 44 2f 3c 17 25 8f 30 b7 cf 25 b5 cb 2d 32 0a 0f 0a 11 81 c9 e5 34 b9 6b 1d 47 98 f7 24 6f 33 c2 47 56 43 cd fb 9c 0b 16 35 2c a6 4c 51 87 1a da bd ab 34 b9 a8 95 64 b3 33 e0 22 a4 f6 b9 24 75 09 c3 02 e2 bb 4c d2 17 77 68 1a 97 47 1d ac b0 27 bb bd 64 44 05 de b7 5c e2 0e 5b 80 29 38 0a 91 06 a4 42 96 5e ba 77 15 68 f8 9d c7 7e ed e0 c3 e1 ca 92 19 6a 58 e3 da 3e 97 74 ae 25 de 2e 69 e8 9d 2a 14 c9 5d 2b 15 e6 3d c9 1d 3c bb ba a1 ac 7d ce c5 a2 ca 88 13 56 5e 03 4f 7a 17 ee 7b aa 77 32 15 33 51 4f 9f 73 51 43 83 e3 ba 82 e1 42 55 02 eb 42 21 bd 8b 52 e6 44 6f e3 c5 59 44 2e 4b 9f 73 71 59 fb c2 14 e4 14 3b 14 2f 42 90 dc e5 6f ee 30 27 5b d0 f1 a5 e7 b9 ec 0c 8c 3b 30 Data Ascii: knKJ:FAS+,%)kD/<%0%-24kG$o3GVC5,LQ4d3"$uLwhG'dD\[)8B^wh~jX>t%.i*]+=<}V^Oz{w23QOsQCBUB!RDoYD.KsqY;/Bo0'[;0
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 27 62 66 60 61 2e 3d c9 cd 81 12 ac 15 0f e2 59 22 db 26 eb d0 55 26 65 75 d5 58 2f 31 57 15 b4 64 73 d1 05 bc c1 ad b2 15 ea 12 c9 25 7d 6e 4b a4 35 5a 64 1d 05 67 e5 6a 0a 74 e9 92 df c4 1b 72 5e 50 d5 64 ff 42 75 19 75 f3 ce 48 1b 72 49 9e 9b c5 7b 61 ac 99 2c 94 40 d7 b1 6b f1 86 97 58 cc cc dc d7 54 77 bc 18 b0 ae 6b c3 5b a2 72 8b e5 92 3c b7 65 42 71 b1 76 26 35 1c 8d 86 b4 30 75 ed 32 f0 1c 7d 7b 51 9d 26 25 d5 c0 bb 3d 0f cf cf eb d4 b8 c6 5c 9d 89 29 cc 25 7d 6e 67 8e cb 1b a0 42 43 b7 2e 5b b4 61 90 dc c1 7d 11 8e 3f 9b ec 55 47 70 6f a2 14 c0 db e7 d2 b9 0b d9 2a 03 41 b4 a3 77 ea f2 c0 e3 f9 cc 9f a2 4e 32 65 ce 2b c1 57 8d 55 de ab dc b4 61 5c de d0 24 ae 3c e7 b9 9c d3 72 52 dd 81 67 06 87 e8 27 dc 67 34 c8 a5 37 b9 19 1a c9 a8 34 e4 05 a5 Data Ascii: 'bf`a.=Y"&U&euX/1Wds%}nK5Zdgjtr^PdBuuHrI{a,@kXTwk[r<eBqv&50u2}{Q&%=\)%}ngBC.[a}?UGpo*AwN2e+WUa\$<rRg'g474
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 47 cb 84 90 86 e3 47 2c d1 eb ad 70 23 f3 bb 49 56 ef f3 ec 72 f1 ec f7 ae ce 23 07 29 7d 39 f1 1f 59 9c 20 96 52 de 6d dc 57 8c 9c a1 40 4a a8 cc b3 ac 70 96 a6 a1 88 cc 27 78 45 a3 b9 24 cf 6d ac 98 f0 68 70 55 ea 2e 7c 5b 44 de a5 eb ce 5b 31 50 cd fe 4d 99 4c 34 94 f6 08 4d 6c 5a 04 8d 84 32 52 ca 24 35 32 cc 31 e7 66 e7 9f 75 4f db c3 2b 13 ef 0d 4c cd 70 ef 97 11 d5 4f f4 22 ca 76 04 49 32 2d 21 5b d0 5c 42 bb 04 a6 4e 88 d0 1c 0b 65 6a a9 ed da 94 4b f2 dc 36 c8 c1 7e dc d9 21 7a dd 20 bc b0 d1 b5 ab 30 1b 8a d4 9a 72 eb 42 2b ae 2d b2 9c 6c 82 4c fa f7 5a 4b 44 86 70 40 5d 96 5d 78 79 ae ff d4 a0 00 ff 2f 93 f3 4c 10 08 76 93 79 9f e6 a7 ee 50 c1 4b 20 fb b4 78 a6 fc 78 de 78 11 c2 5a aa e7 11 17 de 76 6e 2a 87 d9 b5 bf 5d 45 5f 2a 87 1a d4 ba 91 Data Ascii: GG,p#IVr#)}9Y RmW@Jp'xE$mhpU.\|[D[1PML4MlZ2R$521fuO+LpO"vI2-![\BNejK6~!z 0rB+-lLZKDp@]]xy/LvyPK xxxZvn]E_
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: e7 fc df e2 fe 8d ae ce 9d 6e 7b 5e 11 dc eb b6 d7 dd e1 dd b1 7b 3e 58 72 ea f5 eb ad 7c b1 a5 32 4d 5d bb 26 7c 7e 40 b3 7e 9e c1 2c 4d d3 7e 73 6a b5 dd f2 67 8e c0 92 2f 87 1f 7f bc ff d2 4a 29 80 f4 64 28 a5 9d d8 98 4b fa dc 34 6a 02 35 54 ae a1 22 d5 29 5c bb fd 4f d7 c7 9e ef 76 0e ff 7f b4 d7 3f 32 22 5a 2e 3a d9 00 f3 1d 67 1c c6 28 39 58 49 2a 95 41 a4 12 1e f3 e4 a8 b0 14 c7 11 1d 78 07 31 ae f2 e1 65 34 03 33 3e 5c cf e6 55 05 7f c4 50 bf 44 b0 18 0c 6c c2 a1 9a 5a 15 7e fe 3c 63 0a 3c cc a3 53 7a 94 67 e9 3c f5 ef 77 ff 5d 7d de 56 6b 9f 4b f7 2e 09 c1 c1 54 9c a3 2f 06 4a c1 02 dd 94 c2 35 61 8a 72 34 5c 3e 3a 87 5e d6 27 f6 72 54 d1 4c c6 1e 51 64 d1 22 62 30 01 a4 cc 28 93 71 4c 45 90 c8 ae f4 68 0b 0a 52 8a 50 86 c2 90 70 85 03 9c fc 48 Data Ascii: n{^{>Xr\|2M]&\|~@~,M~sjg/J)d(K4j5T")\Ov?2"Z.:g(9XI*Ax1e43>\UPDlZ~<c<Szg<w]}VkK.T/J5ar4\>:^'rTLQd"b0(qLEhRPpH
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 73 d7 08 1e e7 3f 70 f7 ca 8e 7d 3f 4a ca 95 fa e3 55 c0 a9 36 dd 37 22 e8 9e 14 a9 31 2c 86 10 b1 8a 9c 4f cd 09 a7 70 08 55 db e7 92 ce e5 f5 c9 14 b4 41 15 e3 51 e1 ac 35 63 24 74 9d c4 5d 97 2c 7f 1a ee 29 29 16 d5 15 53 24 97 b7 65 aa a7 df f3 e0 52 80 5b ff f8 ec f6 17 60 65 ef 65 ca 15 e9 19 36 dc fb 69 db 2c 34 6e 75 86 55 af d5 a4 04 e4 43 bd 9d ca 49 9e db e7 92 ce 55 33 1b 30 72 c8 8c 55 8e 4b 08 d8 c2 04 dc 81 4c 4d ea 9a 9f 39 c1 07 fd 7f 5a 53 d0 cb f0 fe 5e e1 df b6 2c d8 db d2 d9 32 4e 51 e1 8a da 09 34 98 13 dd 75 41 cf 5c 65 d3 e5 ac 4f e7 68 7a 75 d2 65 d1 dd d5 71 50 12 72 74 79 d0 a3 f5 7e d4 43 a8 a7 91 53 a1 f6 3a 17 46 b1 81 e4 c9 34 3d e5 54 9f 9c 2f 20 b4 33 fb 78 17 ae 7b 3a 17 d3 fd 69 27 7c 12 55 73 9c cc 28 c3 1a 5c f5 df 72 Data Ascii: s?p}?JU67"1,OpUAQ5c$t],))S$eR[`ee6i,4nuUCIU30rUKLM9ZS^,2NQ4uA\eOhzueqPrty~CS:F4=T/ 3x{:i'\|Us(\r
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: b9 53 02 77 bf 73 31 58 26 94 59 ac 99 82 71 23 7e fc 37 b3 7b 6b d7 f0 e4 f2 56 ae ad c1 35 0b cf 4e 05 22 78 25 09 1f 74 cd 2e 72 98 1b dc 0b 65 dd da e7 92 da 95 a1 52 98 5b 8c db 77 e5 f2 33 5d 95 37 a1 d8 59 a3 ae 59 74 32 19 5b 05 d9 58 8b c8 79 8f ba 0b 15 67 16 ee b7 f6 b9 24 74 d5 c0 06 c4 05 81 8d a4 ae 95 5c eb 57 1e df 06 ce 99 ed d1 79 b4 f3 e6 df 25 d9 46 a5 2a 0a fe af 7e ee e9 fd 73 ee 1e 5c 7d 97 46 5d b1 3e fa e5 6d 21 f3 d6 3e 97 d4 ae 1e 8f eb 7b fe f9 57 fd 81 63 7e cd 2a a7 63 08 a6 19 31 57 65 de 9e 2d 02 ff 5a af 7f f8 e8 55 97 d0 e5 0d 2f d2 7c 6e e4 8f ac bf 7c f7 16 53 cd ed 73 49 ec 0a b3 88 8f cb bf c8 fa 4b 67 2e 3f cb b5 92 3d fb f2 a7 3f 3f e1 73 da 90 64 ec 95 ef 5f 18 a0 b4 cb 3f fc 37 a1 ab f1 fc 80 6f da 5f 1f e2 fe 59 Data Ascii: Sws1X&Yq#~7{kV5N"x%t.reR[w3]7YYt2[Xyg$t\Wy%F~s\}F]>m!>{Wc~c1We-ZU/\|n\|SsIKg.?=??sd_?7o_Y
2024-04-19 14:07:07 UTC	181	IN	Data Raw: 94 a2 4c 99 ea 94 8c b4 d5 2b 93 10 28 5b de b9 5d 2e 57 25 18 97 6f e8 a9 35 53 c9 62 9d e4 7a bd 6c ae 8c 18 97 37 61 5c 9a c6 e5 83 fe 7a c7 c8 97 cb 75 b7 e0 b4 64 c0 28 20 54 83 58 0e 5e a9 8c 35 a3 97 cc 35 0a cf 86 98 87 c6 9f cb 1f 83 f3 f6 9d eb e5 72 9d a2 89 b7 0d a5 32 02 77 b2 1c 97 8f 9d a7 5e 36 97 a9 e8 85 ca 88 9a 14 02 2c 16 8e db 5f 3c 57 d3 ff 97 5f 70 5e 3e a9 f4 39 d3 e5 73 39 c0 84 62 d1 f3 f2 c9 29 1e ec b7 2f 9d eb 9c d9 50 22 f3 c5 72 5d dc b9 a3 f5 e0 94 d8 59 49 61 2d 17 d3 e5 40 83 21 b0 5c 4c 97 5f fa f7 01 Data Ascii: L+([].W%o5Sbzl7a\zud( TX^55r2w^6,_<W_p^>9s9b)/P"r]YIa-@!\L_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
272	192.168.2.6	50195	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	505	OUT	GET /9VieFqY6BrcqBfWyNBCDptV3goYIngmpxwUWVzLOgzjmapm_cAA9hJOo4nbPZogezU4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:07 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33182 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:46:39 GMT Expires: Sat, 20 Apr 2024 12:46:39 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4828 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:07 UTC	721	IN	Data Raw: 52 49 46 46 96 81 00 00 57 45 42 50 56 50 38 4c 89 81 00 00 2f ff c0 3f 00 09 88 11 d8 c6 6d 0e 04 0c 11 64 ba ff c0 ca d3 11 22 fa 3f 01 63 a8 20 d3 a2 79 8e 9d 04 49 9c c4 e9 91 29 eb 1c 52 ea 6e db 4f 6e e5 6e 4a 04 00 bb 65 fb b2 dd 59 00 17 58 6f d8 ad ee 4f c6 a5 4a b3 77 17 80 16 30 fb 4d 39 b8 ab d2 4f ef 16 60 15 de ef 5f 64 b3 85 bf 4b 97 51 92 f4 06 80 6c 27 e7 54 49 52 55 95 70 e9 8d 20 75 c2 f4 07 54 11 80 6e d2 d2 9b a4 41 7a 46 4a 15 00 5c d2 89 24 99 53 ed c4 65 2a 34 9b 7c a7 37 b2 4f 12 7b 66 a6 8a 24 f4 9e b6 25 c9 9d 13 9f 99 0c ef 92 d8 92 00 e0 d2 49 c7 98 89 38 34 25 35 09 2c 6e 49 dd ad 14 49 3d 23 92 00 fe 5e f8 b6 d4 dd 48 73 28 04 5f d7 a5 e8 b0 3b 43 8e 16 bf 7b ed e3 ee d6 d8 83 ff 5c 60 c6 1d 7b 66 f8 c3 eb f5 c2 df 12 ea d3 Data Ascii: RIFFWEBPVP8L/?md"?c yI)RnOnnJeYXoOJw0M9O`_dKQl'TIRUp uTnAzFJ\$Se*4\|7O{f$%I84%5,nII=#^Hs(_;C{\`{f
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: af bc 33 45 46 08 21 0c 32 16 c0 c3 05 c3 56 00 58 44 fe 1f df 8f e1 63 f8 f2 02 0a 01 f2 98 57 40 f2 c4 36 e7 fc 00 c0 70 44 06 34 8d 58 2c 63 f1 b0 78 79 79 7c fd c6 81 7f 4e b7 c3 65 c8 10 e7 96 cd 06 c3 26 02 40 2c 96 b1 c5 22 f2 c3 0f ff c8 c7 eb fc 35 7c 7c ff af f4 f2 9d 94 21 c7 34 c3 05 3e 34 97 b0 5a 3f c1 c9 d6 7f 5f 0d 0c 87 e0 93 39 b2 5a b7 5a ad 56 2b e0 be f8 ef 39 49 63 c0 17 29 e0 f2 12 11 39 4a ad 56 6b 0e 63 c0 80 e1 46 00 44 00 18 30 0c 1b 6c db 11 b1 c0 c8 06 82 01 40 04 3e 3d c4 66 91 22 22 06 5c 07 00 e4 18 6e 82 88 c8 4c c4 10 81 0d 00 32 02 50 00 82 3b 39 10 d8 04 36 38 09 ae cb d8 ef f3 e4 0d 08 00 88 18 22 42 89 00 10 00 22 0e 2c 63 8b cd b1 59 00 d9 1b 22 b2 13 f8 08 1f 6e 00 0c c3 00 6c 30 08 30 6c 80 01 d8 00 c3 ed 3e 00 c0 Data Ascii: 3EF!2VXDcW@6pD4X,cxyy\|Ne&@,"5\|\|!4>4Z?_9ZZV+9Ic)9JVkcFD0l@>=f""\nL2P;968"B",cY"nl00l>
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: b8 51 f3 76 fd 62 1f b5 ab 93 ea 61 ab f3 b1 be e6 4c a8 33 ac 21 7a c4 fd 55 19 37 ac 8f 92 6a de 1e 7e ff 89 f9 99 95 d6 8f ac b1 a1 92 da a3 a6 0d b8 a0 c5 1e ee 48 08 6c 0d f7 56 84 d0 fa 3b e9 9d 0c be 1a 1a 39 25 fb fd a9 8a 92 3b d2 50 b0 db d6 1e 67 61 56 94 df b3 ef 76 ec 76 1e a5 ec d3 9b ca 03 e9 74 cb b4 28 27 2d 56 b1 b7 f5 f1 4c ec 76 92 33 21 5f f0 dd ed 9a f0 66 64 da 89 85 cc a0 6a d5 a9 b4 5e cf cc b3 b7 5a 8c 7c cb dd c1 1d b3 30 ec 29 77 90 e4 bd e0 33 73 0c 0f c7 fe 11 09 e9 f6 61 08 64 ae 76 4d 63 ff 38 74 ef 46 bd f8 a4 18 3d 1a 79 ef 8e d2 e9 9a fb 4b 7a 74 7d 3d 5f de 7b 23 32 66 14 de c8 44 14 d9 1e 3f c8 8c aa 05 4b b9 66 62 a9 fd 3c d8 f6 86 52 be 9d 32 a5 64 59 90 b9 d8 7b 6f 50 26 d1 62 26 24 19 08 bb 9d f2 ae a9 f4 b8 c8 b7 Data Ascii: QvbaL3!zU7j~HlV;9%;PgaVvvt('-VLv3!_fdj^Z\|0)w3sadvMc8tF=yKzt}=_{#2fD?Kfb<R2dY{oP&b&$
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 2f ee db ad 24 59 d9 8d 55 e5 f9 94 1a fa 1b fd 43 a1 28 a5 8b 76 fd 55 34 64 0c 69 a7 da 3b 9f e8 26 ed 6d 3c 4a bb 25 cf d7 25 90 eb f7 86 7a 90 e9 3a f6 33 73 3d f7 56 9e 9e 58 99 df f8 99 23 ad 4c 4f 99 1e 66 be a6 5a 85 cc 4b e6 8e 4b 6b 5a 87 fc fe dd ee 5f d3 c8 68 41 77 13 22 ee 70 4b c8 fe e4 09 d9 1b 0b dd fd 60 6d ba 34 dd 6f 9d 86 4f 0c af 1f 28 3e 13 4f e9 c7 da 88 d1 76 4a ef 6c 4b 22 33 cb 8b 84 ee 6d 60 ad 4d 89 e5 49 dc 3b 93 9c ec 9d 79 26 01 a5 ce a5 2c ec 2d 16 39 82 7a 70 bd 5f af 14 a8 a5 58 16 44 26 2c a0 28 be ae b2 d0 46 a5 50 44 44 b2 35 80 c5 7c 6b 80 a4 30 08 10 18 02 a2 85 a1 fd 96 3f 79 7d d4 c8 ce 46 f4 56 7f ac 16 d8 23 25 d2 b3 2d e4 eb 8c 4e ba db 3b c9 0d 77 90 ef 4e d9 fb 01 59 a9 92 c4 a9 9f 1c 89 13 f1 46 59 b8 41 6b Data Ascii: /$YUC(vU4di;&m<J%%z:3s=VX#LOfZKKkZ_hAw"pK`m4oO(>OvJlK"3m`MI;y&,-9zp_XD&,(FPDD5\|k0?y}FV#%-N;wNYFYAk
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 14 35 0c cf 47 43 f9 93 d6 4d f7 ed 37 c8 cc e5 3a 4a b6 37 ad 2f bb 5a dd f3 81 56 14 69 f4 80 99 d2 e3 1c b9 cb c7 74 1c c9 60 a7 ad 3a 2f b2 c6 86 4a e5 54 55 37 1c 80 70 01 e7 f1 57 e0 4d 49 ae 5c 9a ef ad 47 84 a1 f8 6c af ff b1 c3 e6 30 4c 1f 0d dd 5b 19 43 73 af 15 01 05 3d 68 59 d9 ff dc 4d c3 8d 8c 34 3d cc 4a 3b 69 fd 95 cd 64 64 e5 83 59 9d cf 57 9f 4e d7 d1 7b 27 56 fd 25 6b 1b 9b dc 9e a3 5f 04 86 eb 82 bd bd 66 0f ec 93 70 52 ac db 62 6f 99 01 6a c0 42 57 77 d3 b4 de e3 d4 d3 c3 a4 23 e0 71 55 5d 65 77 37 6d 04 f7 26 53 35 dc ae 5b e8 76 5d 81 4c 8c cb c9 6d 8f 46 9a a4 dd 8f b2 90 6d c8 8b 6d ec 86 ad 36 db b7 3f e7 62 ed 4d a6 d5 1a 1e 92 82 4b 25 f4 d8 19 99 e1 9b e1 aa 60 32 f8 4e d1 81 00 f6 fa 3f 3f fe 31 18 a6 4f e8 e6 bb 9e fe 62 fd Data Ascii: 5GCM7:J7/ZVit`:/JTU7pWMI\Gl0L[Cs=hYM4=J;iddYWN{'V%k_fpRbojBWw#qU]ew7m&S5[v]LmFmm6?bMK%`2N??1Ob
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: e4 17 a4 64 94 92 55 02 56 89 bc 97 6b 3e 57 8b 6e e8 4d 4b 74 0f ee b9 6a ec 3c 5b 16 76 d6 48 0f b0 49 86 6b b2 87 9f 59 e9 e7 ae 0f 3c 5f d5 af cb 7a a7 87 ff 62 e0 fa dc 36 84 c7 0b eb 15 fd 82 96 cc 30 c4 6e 65 2c dd 31 bd 0e c4 94 5c 2c 8d 5b 64 dd f3 c1 c7 1a fb 9d 75 8f 33 da 40 8d d3 f3 b7 7e e6 bd 78 ec be 41 6d 1d ba d2 6b da ab 69 85 d6 ed ee f9 eb 87 bf fb e8 eb 47 5f df fd 0f ff 79 ba 37 fd 46 91 63 73 2e 46 23 c8 53 a9 36 6d 96 c8 86 8f ff 1f 55 a9 f4 03 8c 67 5d de ac 0f 54 7b c9 15 d7 4a be a7 ef b9 c6 f7 64 7d 58 5f da 0c fc 86 41 55 59 b0 3c 4c 7c b8 79 bc f7 be 57 77 77 f3 68 6e 8f 33 e9 ab 01 32 3a 1e f3 2b 8b 74 4d 5b fe e6 14 0d 5c 84 83 0e f5 0a 61 4c 5f cd 68 6d ae 33 b6 b6 40 2d db ae e1 e7 ba 60 32 25 23 2a 17 0b 14 03 05 c1 60 Data Ascii: dUVk>WnMKtj<[vHIkY<_zb60ne,1\,[du3@~xAmkiG_y7Fcs.F#S6mUg]T{Jd}X_AUY<L\|yWwwhn32:+tM[\aL_hm3@-`2%#*`
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: bf 0e 95 62 27 96 9f 19 8f 2a b7 45 0e 03 f7 13 76 52 fc f0 e4 4e 2f f6 36 08 b2 68 22 7b a5 e0 79 8a eb 54 04 d4 a1 cb 24 71 76 0f c0 90 4c 40 55 a4 aa 42 1e 02 5a ac ca b1 ce b3 1c 01 b0 c3 1a 97 37 e1 be 80 6c 91 6f 79 21 c7 96 ba 2f e8 a9 d3 cf 5c 16 55 be 79 d6 33 d5 96 06 8c 8b 42 92 0b 93 a5 14 24 7c a9 dc 82 ec e1 90 7e 5d 6b 75 a6 d0 8e ce 13 a3 81 14 62 e3 b4 25 77 1b 6a 83 5d 12 85 87 8c b0 2b ca 33 b2 c3 92 2e ff ed 76 dc 5e f3 f1 ae 75 19 43 78 a8 cb 7b ce 9c 1f 4e 6f 1d c8 2c 9d 8c 46 32 f3 9d 8b 22 2e 0f 4f 7f 4b ed 67 76 ae 37 35 d0 28 da e3 8f 97 e2 e9 4e 74 41 c4 8a 45 1c 07 22 e8 75 5b 60 d0 0d e7 30 a7 b5 a0 ad d3 e3 e0 2d b0 89 71 af 8f f1 e6 93 02 10 94 24 ab ab 19 c0 8e 5b 3b e9 47 77 d9 57 f6 78 ce ec 71 ea 6f d6 a3 9b 39 b6 ba 52 Data Ascii: b'*EvRN/6h"{yT$qvL@UBZ7loy!/\Uy3B$\|~]kub%wj]+3.v^uCx{No,F2".OKgv75(NtAE"u[`0-q$[;GwWxqo9R
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: be 49 d7 d1 06 68 6d e9 f1 4f be c6 85 14 47 e6 27 ac 67 d1 10 35 94 f0 5c 49 50 5b 0a 6e c7 5b e4 bc 83 48 38 e2 dc 01 31 09 19 ad a9 60 80 cf fe ee 13 ec 8a 87 13 34 ef 01 20 40 d4 05 68 9e 22 ef 45 2d 80 72 ca d3 bf 50 55 b2 f7 be bc e7 6a 38 66 68 b0 38 d6 7f 1a ff fd 46 62 f7 c0 d6 97 7c f6 76 94 e5 03 f2 65 3d a2 98 02 46 df e7 49 4c a8 b3 05 70 8e 4b 9b d8 e7 dc eb ff a4 4a 1c 05 e5 1a 40 53 e7 82 f4 30 16 00 51 b8 dc 14 c1 aa 5a 37 f6 58 fc f7 c8 e8 1e 39 dd e3 a8 b9 96 75 15 f9 e5 f5 34 ea 8c 1c 49 d2 30 33 7d 9b b7 c7 2a a8 81 a4 e8 5d be 32 01 2c 12 05 c0 32 31 0b 48 4e af 62 80 2f 95 3a ee 20 e0 01 d3 c9 f8 04 83 69 1e 14 00 08 00 d0 3c 15 79 0a 94 c1 4e 7f 75 25 37 b6 a8 b7 21 c1 7f fa fc dc 3d 3c 1c f6 ee ec d2 8d b4 fd 2b cf 04 0d 1a 6b 5f Data Ascii: IhmOG'g5\IP[n[H81`4 @h"E-rPUj8fh8Fb\|ve=FILpKJ@S0QZ7X9u4I03}*]2,21HNb/: i<yNu%7!=<+k_
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 6b 3e b5 0d 0c 27 70 c9 e1 3a 92 4a 06 40 f0 80 a4 15 41 85 83 01 35 5b c7 df 64 02 04 10 c8 92 da b5 32 9f f2 6d ff 31 b0 e9 54 13 2e 7d fe a9 ff f0 09 e0 2b bc b0 2f 8e 88 b3 64 bf 35 9f 64 da e7 c4 71 cd 6f 2c 0b 25 f3 f5 73 a4 99 3c d3 35 42 74 9e 35 23 4e 1f 2b 09 83 3b 6a 5d 40 b9 9b cb 31 45 f8 e2 74 f9 54 9e 25 57 fb dd 44 d4 f4 b1 86 ac fd a5 53 09 96 62 99 a2 78 1b 8b dc 60 05 04 d5 45 82 2a f7 93 02 66 90 99 0a 4c 8c 0b d5 c9 f6 e7 a6 db de 85 df 05 7f e5 7b e1 41 88 27 80 8e 76 7c 13 a7 3a a4 56 5a 2b 26 29 5f 97 7a b0 2c 0f 53 f2 ac 15 6b 91 c9 13 2e 4f 37 ce 6a 91 58 2b e4 00 8a 83 52 2c 36 ac 3e f3 59 dc 61 ec 3b 3a db 36 4b 77 d4 3c 24 7b 30 da 90 35 b6 81 c2 41 5b b8 de a3 89 f9 35 ca 2f a4 e8 45 42 5f 7a f7 fc 9f 22 0b 32 41 31 7a 94 81 Data Ascii: k>'p:J@A5[d2m1T.}+/d5dqo,%s<5Bt5#N+;j]@1EtT%WDSbx`E*fL{A'v\|:VZ+&)_z,Sk.O7jX+R,6>Ya;:6Kw<${05A[5/EB_z"2A1z
2024-04-19 14:07:07 UTC	1255	IN	Data Raw: 7e be 3c 5c 58 58 58 4a 3b 21 c7 a9 85 56 09 9b e3 6b 77 e8 15 2c 5f b3 f7 81 cb 6f c1 6e ae b8 f1 71 1f 0e fa 6d df 56 cf 6a 76 00 17 05 9c 44 40 90 ac 1d c1 00 7a a3 fc b3 eb 7e 97 e4 85 0e 7e 78 ee d4 fa 46 b1 e1 74 78 eb db 54 1b 02 be 50 ef 35 72 11 a8 b8 3e c9 dd 06 41 ee b2 f3 cd 62 f9 66 66 b9 3e e7 c5 c8 07 1d ec 9e b2 32 f6 2d ce ad d4 e7 19 7e 3b d4 08 7c ae 35 ee a0 d6 ef 9a c6 bd 76 59 b0 27 a1 23 6e 7d 04 cd da 63 19 9e 0b 1b 69 ac c3 d8 5d 03 30 31 5a e5 66 00 ff a9 2b 1e bf 93 db bb 3f 07 86 c5 d7 ac eb f3 7b 84 eb 5b 76 70 f8 d8 ff 1f 02 fe 19 66 ec 24 29 33 17 b1 82 54 b9 ab 37 61 59 8f 8a bc 84 f9 51 fd e2 91 a1 03 48 ee d3 22 a6 4f 95 34 2a ac 29 c7 3e 56 2d 8f 9f ed 33 c5 88 1b 5b 83 dc 36 4d 8c c8 6e a8 2a 7f aa fb 65 d1 1a b0 8c 93 Data Ascii: ~<\XXXJ;!Vkw,_onqmVjvD@z~~xFtxTP5r>Abff>2-~;\|5vY'#n}ci]01Zf+?{[vpf$)3T7aYQH"O4)>V-3[6Mne

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
273	192.168.2.6	50198	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	506	OUT	GET /6Xe9DWiMC76daosOC80Im9gqe25Q9P55LxJIGPTLbcdFkMXOur4mk8jTVxoqOaiAvAG4=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 4318 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:05 GMT Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	725	IN	Data Raw: 52 49 46 46 d6 10 00 00 57 45 42 50 56 50 38 4c c9 10 00 00 2f ff c0 3f 10 55 e1 b1 b6 6d 99 24 47 7b 95 d7 cc cc cc 8c c5 25 ac 52 09 0a 45 75 54 5c ca a6 6c 66 e6 ee ac 66 e6 ee 30 1a 3e f8 bf ef 0f 4f 60 a3 a5 a3 0d e8 b4 9f a2 3a 29 8c 30 43 4c 8b 60 66 9b 59 32 99 29 3b 04 19 4a eb f7 64 f7 0a b4 05 56 7b b2 58 2e cb ab 10 66 88 ea 88 d6 c0 0c 1b e8 2d 48 6e 9b 02 4f 61 a9 52 ac 58 84 3c 59 4c 75 b4 04 79 b2 18 fc 12 4b 15 c2 c8 1d c8 d4 12 b4 05 de 82 5c 7e eb a4 38 5b 10 27 cd d8 80 68 0b 34 e0 09 dc f1 aa 76 f0 1a c2 52 c5 60 c6 e0 7f 4a f6 ec 63 76 30 1b 00 73 56 90 82 18 aa f9 87 ff 6d 0c 59 2c b2 64 0e cf 2c 60 cc 31 c5 7f 9c 38 0d 71 9a 76 30 e8 ce 06 24 08 00 58 46 52 9f bc b6 3b b6 e7 6c df ad ad 1b ac 8d b1 3a ec ec 44 75 bb c3 3b 87 91 e4 Data Ascii: RIFFWEBPVP8L/?Um$G{%REuT\lff0>O`:)0CL`fY2);JdV{X.f-HnOaRX<YLuyK\~8['h4vR`Jcv0sVmY,d,`18qv0$XFR;l:Du;
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 1f e6 0a c4 db 97 b1 38 71 d3 b4 51 4d f3 c9 34 d4 e8 c7 d0 41 c4 56 a2 ff 85 6a 6e 85 d4 51 bd 84 29 8c 80 a8 b5 cc 1a 57 9b ad 27 d4 cf ea 83 4d 36 4e 10 b9 a7 6f 43 31 b7 4a 6a 67 9c 9c eb 3a 70 71 80 d8 c3 5d 05 2f 75 63 46 d5 2c d5 12 15 c3 53 0c c4 5f 30 82 b7 5b b2 95 d4 cb 3c 4a ea 47 5f e4 81 0c 5d df 98 83 03 b5 32 69 35 9c 58 03 39 ea df 4a 4b 19 75 52 f7 e1 f0 5a 20 cd dc 6a e7 9b 1a d9 f8 e1 64 80 4c 13 67 5c ae 23 d4 c6 32 6d 31 c6 b6 ea dd 52 80 5c cd 81 66 9b 0e ea a2 c3 e0 13 1f 13 64 eb ca 59 b2 25 d4 44 bb 9c be 0d 15 28 f2 f3 ba e6 70 38 b4 b0 ae 08 88 f4 6e 79 2c d6 4a ea a1 5d 4e 08 38 d7 02 6d f3 7b 72 be 82 d1 5e 6d 8f 01 e7 aa 61 87 ba b5 46 e8 ff ac 35 ec d0 67 90 e9 aa 4b 37 fe 9b bf 27 e7 c3 e8 cd 5a e4 69 9c 81 a3 ed 62 ad a4 Data Ascii: 8qQM4AVjnQ)W'M6NoC1Jjg:pq]/ucF,S_0[<JG_]2i5X9JKuRZ jdLg\#2m1R\fdY%D(p8ny,J]N8m{r^maF5gK7'Zib
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 03 43 88 9e a7 35 92 2f a2 52 57 c1 3f 4b 71 10 06 ae b5 81 66 2b f1 2d 26 53 21 50 b7 4e 7c 23 0a 4f d3 40 b6 c1 3f 16 de 84 20 38 e9 79 5a 23 f9 66 43 cb 95 41 ba 9e 67 0b af ec 87 21 44 cd 0a de 88 6c da 3a c4 41 be da 20 d3 8d e8 96 eb 8a 13 03 f5 40 95 d3 05 89 6f d4 97 f1 d5 1f dd 48 08 ee b0 b0 9c 04 37 03 00 83 5e 72 6e 8e c8 b6 92 38 3c 20 e3 82 49 31 08 ae 1e 63 ae 4c cd 31 82 ad 43 e2 05 24 ea d6 77 03 29 a7 8e 20 b8 a1 47 3e 1a 35 e7 0f 91 b5 09 c8 49 ef d3 f4 12 db 0f ba 81 7a e6 12 cf 89 68 df 99 20 e9 60 47 a1 ed cf a0 16 1a e3 d5 80 c4 6d 02 b2 ca 9f 02 05 a1 8d 0d 5c 31 35 e7 2e 88 16 97 e9 5b 20 eb 92 17 0a 6d 93 db 4b 8a da 1d 76 48 d4 80 71 1e 69 39 7e 4f 68 b7 0b d3 0a ff 16 12 b7 d2 a5 65 65 89 6c e9 66 8a 02 ed 92 17 12 7d a8 08 e4 Data Ascii: C5/RW?Kqf+-&S!PN\|#O@? 8yZ#fCAg!Dl:A @oH7^rn8< I1cL1C$w) G>5Izh `Gm\15.[ mKvHqi9~Oheelf}
2024-04-19 14:07:08 UTC	1083	IN	Data Raw: e3 28 60 cb a8 a5 14 2b f3 a8 48 f3 ea 71 8b 9e de 09 a5 67 45 57 a3 80 93 55 9d 57 53 86 56 38 0d 1b 90 ea a8 bf 86 10 d0 ef dd 52 35 cc 1b f9 41 68 b8 40 47 03 d7 18 70 ae b8 b2 12 cc 2e ab 23 d5 7f 35 80 be f5 8d 25 9f 93 0a 80 82 6d d3 c0 ff a9 16 59 e2 3a 6f 7a f0 b3 47 41 aa ed fd 16 83 40 1b 54 03 e0 9e 11 01 0d c4 69 eb e0 29 b6 b8 2a 29 9a 8a 0d 48 77 a3 9f d0 80 61 e6 02 12 a9 03 fd 63 ff 48 05 b1 7e da 9c d8 63 71 e3 5a b3 fa f5 f2 3f 48 f9 3f 4d 60 18 68 83 ea 00 1c 39 cb b6 12 1d bc 51 eb 13 3b 75 2e 5c dd 79 1f af 3c 2c d2 de 7a cc 18 c0 32 73 df 6a 01 02 23 fd e8 28 21 2e db 16 bf 92 17 4b 59 8c 74 d3 5d 76 49 65 f0 84 d4 df 99 04 96 81 36 a8 1a c0 73 60 5a 88 38 0b 86 4d 85 26 ff 7a 29 9d 9a 9e e7 6b 51 27 76 2c 2c 13 d2 9f 85 40 b7 be 1b Data Ascii: (`+HqgEWUWSV8R5Ah@Gp.#5%mY:ozGA@Ti)*)HwacH~cqZ?H?M`h9Q;u.\y<,z2sj#(!.KYt]vIe6s`Z8M&z)kQ'v,,@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
274	192.168.2.6	50199	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	506	OUT	GET /PK1HLcCW4TQ79hTCctdiMdfMOMDOMJBg1aBHjXillo2Iv2_yR1hcWZx2OUlBi-aqvPtI=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2940 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:05 GMT Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	725	IN	Data Raw: 52 49 46 46 74 0b 00 00 57 45 42 50 56 50 38 4c 68 0b 00 00 2f ff c0 3f 00 1e 7b ff ff a9 6d 23 3d ff 87 53 f2 8c 02 05 87 b1 90 94 c2 6e 4a 61 76 c3 2e 26 f2 57 33 3f fd b5 7b 4c f3 72 97 79 b7 dc 39 a6 dc 6b 8e 61 0e 16 8f 19 7c e4 65 5e fd 96 b2 bc 2b 81 b6 6d d3 ad 4e 6d 3b b6 9d f4 db b6 6d db b6 6d db 46 6c d5 b6 6d db 76 ff fb 2f 89 6d 24 47 92 14 75 26 d6 9b 9b db ac ce e8 ac 7f 99 28 f6 f5 31 ff f9 98 ff e8 4f c0 95 38 61 97 82 b3 65 25 71 3d 76 29 13 48 c4 16 b0 e9 49 6d 8f bb 35 47 22 07 13 46 52 86 53 86 93 8e c7 1e 8e e8 d1 ec ba 96 9e b2 19 ac b0 0e 98 31 4a c0 f6 02 f6 bd 1f 4d cf 0d e6 46 56 d1 64 41 af be 76 cd 26 10 5e 85 98 7c bc d9 f4 fc 81 18 0e a7 f9 a6 ce df c5 94 45 99 30 06 49 d9 6d a5 0f 25 73 1e ca a8 36 83 c4 c7 de 3b d9 08 1d Data Ascii: RIFFtWEBPVP8Lh/?{m#=SnJav.&W3?{Lry9ka\|e^+mNm;mmFlmv/m$Gu&(1O8ae%q=v)HIm5G"FRS1JMFVdAv&^\|E0Im%s6;
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: a3 f9 0c 43 a8 74 0b f8 85 22 8c b1 2c 4b 6d d1 31 9a 05 61 aa d8 38 67 47 d2 e3 a9 f6 2e 48 60 08 5d 12 e1 e6 dc 95 f6 57 30 3a c5 f7 90 8a f0 ea fc 83 f2 d0 f2 2c 5b 41 6b e9 61 b2 d5 30 0f b5 e9 29 01 87 d2 94 65 f5 32 86 f0 55 e1 e5 1c d4 f6 87 f8 d8 e9 36 55 c0 05 f0 fe 64 a1 95 50 5b 26 b4 b9 21 08 8f 9e f3 75 b4 23 69 b0 d5 78 40 d2 e8 0c 5a ed ba c9 10 0e 7e 17 be 67 23 10 fb 3f c0 18 88 a7 d3 da bf 61 08 a0 80 fd 19 cd cc b9 41 53 22 92 0b 65 c0 10 c6 73 56 28 24 ed 27 60 6b f7 bd 57 89 e4 c1 6e 31 86 f6 17 12 ed 1c dc be 40 65 ed 9d cc d6 e3 36 92 70 cb c5 02 91 cd 56 fc 3e ca 8e 67 c3 38 f8 45 f8 d3 58 74 1c 8b c5 b0 f7 c5 0a de b9 1f 77 fc 82 31 53 66 68 2c 3a 72 83 f8 87 d0 85 72 5b 9c dd ca 5b a7 b0 d9 fa 38 43 b8 cd 46 74 8d f2 61 e1 4c 61 Data Ascii: Ct",Km1a8gG.H`]W0:,[Aka0)e2U6UdP[&!u#ix@Z~g#?aAS"esV($'`kWn1@e6pV>g8EXtw1Sfh,:rr[[8CFtaLa
2024-04-19 14:07:08 UTC	960	IN	Data Raw: 37 84 a4 f0 0a e0 77 0a 2c 99 bf 38 9e 33 92 3a 94 74 3c e6 53 a7 f5 ad 91 94 2f 4f e6 cf 94 ad 71 08 11 92 c2 2b 99 d1 2c 15 a1 75 24 57 69 23 f4 c9 b5 84 96 14 de 66 38 f8 59 4b 68 49 e1 d9 b7 29 5b 6f 4b aa 16 eb fb 3b e6 2f 76 e9 07 35 29 3c 49 0b 60 b2 58 3f a8 49 e1 05 7c 7b 48 ad dd 22 27 85 57 b2 ad e7 b4 83 9e 71 04 02 55 ee f9 91 66 8b a0 5b b1 02 ae 39 1a ae 17 51 a4 f0 74 a8 41 5b ce 2c f7 51 c4 74 89 d1 ea 14 a9 5b 5e d0 69 e1 53 78 9a bc db a4 ed 41 6e 58 1f a0 29 3c ad f4 fd 72 bb 91 14 7d a0 6a 1c c1 af cd 73 da bc 49 ba c6 11 48 bc fd bb 26 60 53 78 ba 3d d1 13 43 ae d7 68 87 70 eb 96 a8 60 69 9f cb 9c 64 ab a9 e1 3f ba d9 80 59 b3 8a 9e cd a7 6e e7 d3 f9 23 e1 4c 8e da 9e 4a 8c 6e b3 a5 28 da 7c ea f5 b6 76 df 65 82 54 06 81 40 af d9 52 Data Ascii: 7w,83:t<S/Oq+,u$Wi#f8YKhI)[oK;/v5)<I`X?I\|{H"'WqUf[9QtA[,Qt[^iSxAnX)<r}jsIH&`Sx=Chp`id?Yn#LJn(\|veT@R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
275	192.168.2.6	50200	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	504	OUT	GET /9PzlG2XGr5sQDf5925tlZhqluOreI2cwzp-FOZiuj545Kt1Gk5EE9J4IdGsD7e5xWw=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 41526 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 11:10:58 GMT Expires: Sat, 20 Apr 2024 11:10:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 10570 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	720	IN	Data Raw: 52 49 46 46 2e a2 00 00 57 45 42 50 56 50 38 4c 22 a2 00 00 2f ff c0 3f 10 4d 40 8c 6c 37 6e 33 20 a0 8f f0 01 e9 bf 60 1e be 1a 88 e8 ff 04 98 99 db db 23 22 cc ed fd a1 88 78 6e ba 97 ee 0b c6 18 c3 bb 67 44 84 6c db 6d 56 bb 35 86 5b 97 5d b6 bb 90 94 92 52 4f 6a b8 5d 57 7b 6a 9f 48 f9 52 b7 0b 60 93 29 16 ef 0b 77 01 d2 23 00 09 d4 6e d7 62 f9 93 40 20 91 ce b5 40 62 9f 20 d0 04 a4 c3 7a c8 4c 40 62 5d 72 11 92 12 24 e9 e1 28 70 7b 63 b0 8a 04 f0 e7 1d 13 10 6b e6 78 47 2d c7 4f 69 be 12 9b 9e b9 4c 80 bf 5d ed ea 00 20 81 94 a7 5e f6 3d 93 e3 a9 5f 79 3e c6 2a 04 87 b2 75 bc b0 3d f4 a6 76 63 82 60 be 50 76 d9 3b 5b ab de 31 ca d6 09 a2 ea ff 1d e3 79 24 8d 65 8c cd 78 05 60 44 48 3a 98 f9 45 55 21 99 47 98 99 9d 6e 6b 6b f6 3b dd 77 11 6f f0 d5 6c Data Ascii: RIFF.WEBPVP8L"/?M@l7n3 `#"xngDlmV5[]ROj]W{jHR`)w#nb@ @b zL@b]r$(p{ckxG-OiL] ^=_y>*u=vc`Pv;[1y$ex`DH:EU!Gnkk;wol
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 51 8f f0 87 8d 08 4c 04 81 c0 e5 0b 48 2a 48 24 72 9c 0e 4a 87 e4 00 0e 20 7a 4a 72 00 fb 50 12 89 a4 1e f9 28 66 b0 3e 43 22 2d 5d 3a 24 1b d5 84 0c 1c 40 60 3b cf 60 86 97 1d aa 4c 44 6e 47 20 d4 76 b5 5d 05 02 f5 90 a3 2d 31 a4 4a 4f 04 11 6c 0f 26 82 cd 85 cd bc 06 c1 11 04 02 81 cd bc 99 f7 5d f0 cc 39 0a a4 a5 25 eb 11 ae 0a 02 01 b9 d5 2d a5 63 cd cc 92 91 3f 48 24 55 3a 13 93 30 41 5a d2 6d 2b b6 62 3d 47 38 1a a2 a1 b8 2a 46 41 41 41 e1 6e 72 f3 51 08 54 54 00 04 2a bd 40 45 c5 af 63 ef 8f a4 75 5e c5 85 0b 0a af e2 8a 7b b3 68 1f 8f d1 5f c8 fb e3 d8 ac 75 72 f3 39 af e2 c2 85 4b e3 32 70 b1 75 b8 a3 cc ca 2f fd 15 68 8d 62 5f a5 2a 1e e1 55 1c b5 4a e3 3d 37 dd e1 11 9b d9 40 7f 89 6e c3 63 8c 2b c6 18 6f be e4 31 1e 63 fc 97 a8 d2 27 d9 91 18 Data Ascii: QLHH$rJ zJrP(f>C"-]:$@`;`LDnG v]-1JOl&]9%-c?H$U:0AZm+b=G8FAAAnrQTT@Ecu^{h_ur9K2pu/hb_UJ=7@nc+o1c'
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 00 40 12 35 8b 73 fe ff 5f 46 66 9a 0a 11 42 28 6c db 06 69 c7 7b 80 3e b0 f6 fe bf ea c8 cd f9 1f b8 0e 96 f1 61 1f f5 4d f4 59 5f 44 5f 6c 5f 07 3f 4d 9f 86 93 d9 0b e7 9c 7f b9 6f e1 ca 6a 3d 61 ba 1a 5d b9 70 c3 34 3b 1d e9 6a 65 d5 9a 7a b6 10 86 25 b9 5a 70 4a cb e0 e2 6d 18 3c e1 c4 45 2b 9c cc a8 b2 42 2e ba 61 4e 5c 5a 50 36 cc e4 a6 e0 6e 38 0b b2 b4 70 35 92 e4 46 92 1c 49 72 8f ac ae d9 b9 f7 09 78 72 9f 0a 9c b3 d9 a9 90 1d 49 92 25 29 19 59 d5 bb f7 e2 a1 03 fa 8b 81 10 08 c0 2f fc 1d ec 4e 77 25 a3 da b6 95 6c 2c 00 fd d3 10 c0 61 ca 8c 02 ee a2 30 69 03 26 9d b7 28 02 58 ac 3c f1 47 de 32 76 97 8b 55 7b fb d9 65 5e 28 2b cd 8c 31 95 13 08 10 96 57 35 e0 13 e3 b2 3e 20 5b 21 49 9f 1b d6 09 4f 7c 24 cf 54 f7 de c0 9a e8 86 ba e8 13 7a 34 84 Data Ascii: @5s_FfB(li{>aMY_D_l_?Moj=a]p4;jez%ZpJm<E+B.aN\ZP6n8p5FIrxrI%)Y/Nw%l,a0i&(X<G2vU{e^(+1W5> [!IO\|$Tz4
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 99 47 1c c7 01 1e 71 29 d9 0c db 59 ca 45 92 c7 53 93 b6 e3 65 bc 7a b7 01 9c b5 ba 75 2f 84 db 94 49 b9 dd 09 c8 6d a9 a5 aa 1f 8c b8 ac 46 ce 50 6e 30 0a 39 a4 ba b7 32 75 32 c7 1e ee 02 52 98 d1 60 56 96 7d 63 e2 69 34 73 e4 46 22 85 98 47 79 d5 0b 72 ba 81 2d 37 27 25 4e 84 da ed a6 bd e9 d4 27 d4 37 f0 18 92 f3 4a 03 a0 70 d9 7e b5 db c8 c6 f5 12 80 41 c9 6a 4b ed 24 54 ce 22 14 fa 8f f3 5b fe 68 df cb b7 82 91 ea 0d ae 44 13 c4 1c 1d 15 29 4f 60 8b b6 31 d5 76 47 aa 49 5a c2 5b 7f a3 3a 33 e8 cd 8c ac db 23 6e 3d 15 d9 d9 d1 9a 83 99 90 aa fa 13 bb 0e 57 ca 4e 36 9c f0 ba 35 5d c3 89 f5 33 c8 39 2b b0 c7 a0 a1 23 e8 64 a3 c1 b6 9d 0d 6b 29 bb b9 d1 b4 40 94 cb 97 3d 23 c5 6e 0e 53 aa 6a fb 6c b7 3a 8d 6c d5 47 54 a0 c5 6c 23 5b bd 92 ed d7 45 dd 1e Data Ascii: Gq)YESezu/ImFPn092u2R`V}ci4sF"Gyr-7'%N'7Jp~AjK$T"[hD)O`1vGIZ[:3#n=WN65]39+#dk)@=#nSjl:lGTl#[E
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 12 b3 c0 a5 2c e1 82 66 21 79 3d 2f eb 9e 87 46 b7 33 9e c7 2d 04 00 33 57 a7 68 4b 10 4a e9 42 2b 28 43 ef 12 74 e0 79 ba 18 96 0d 20 10 a3 6d 8c b7 57 67 a3 50 dc ed dc 46 c1 46 2b 34 8e a1 3e 36 ae 1b 86 14 45 c9 8d 95 50 cd 42 8c 0a 17 00 2a 64 bb a4 db b6 e1 28 96 c8 2b 8f 77 19 32 d6 8b fd c2 ba 8b b0 eb 91 e4 2c 6a 23 cb d7 62 8e b2 33 44 99 97 63 db 38 83 a4 c0 42 4c 8b 9e a4 d6 c6 0a 8c 34 d2 65 fe 59 3d 99 e9 52 39 d0 f0 6f 2f 2f a6 1b 47 4d 70 b8 06 a6 66 0b ba 28 02 44 02 84 03 94 02 a4 1c 34 d2 3b 76 69 1b be e7 6a 8c ac 99 7a 7b 3a a1 57 8b 15 83 a6 66 30 a7 5d 3a f4 dc 13 1f 73 e9 4d 48 19 6c a6 54 ab 8a 57 48 23 9d 1d 00 db 59 7d 5a bd 6c 1a 50 f6 d2 2b c2 54 07 af 86 6f 00 93 bb 62 22 8a b0 a2 02 a0 f8 39 a0 e6 1b c0 94 2d a1 66 3e 6a 49 Data Ascii: ,f!y=/F3-3WhKJB+(Cty mWgPFF+4>6EPB*d(+w2,j#b3Dc8BL4eY=R9o//GMpf(D4;vijz{:Wf0]:sMHlTWH#Y}ZlP+Tob"9-f>jI
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 46 55 bf e1 ad 0c 31 26 06 32 1c c3 ba 9c 75 6e 86 96 98 25 19 77 98 59 a3 a2 88 26 ac 0d 63 61 60 22 61 21 54 91 44 2c c2 2d 2c 52 d2 41 16 7c 6c 77 29 54 c2 d1 a5 66 c5 0f 7c 79 9a ec ad 14 f0 f5 5e fb 84 80 4e a0 08 dd 88 e0 29 ac 7e ca 9c 74 7b 71 3a 4e c6 89 b8 f0 2a b8 12 2e 8d bf 99 a0 8d 7c 79 a3 31 87 8e b6 fc b6 fa 53 ff 37 ef 0c 0c aa 95 60 b8 98 5e 84 d2 e8 a6 71 bc 67 c9 05 27 12 05 33 05 33 87 70 16 53 c1 0c 91 cd 82 dd 5c 8f 97 c7 70 66 d7 13 e5 5a a4 1c d2 09 3a 66 60 1b d6 2c af 56 ab 63 65 19 f1 3c b9 5d d0 5a 1d 3b 5c d2 ca f6 a9 57 7a 84 a3 0e 17 1b 55 68 f5 19 aa 9a 36 f7 36 b9 bf b0 05 28 51 6c 7d b9 65 c4 90 46 a5 46 a7 30 4d 2d f2 a3 31 8a 24 c1 42 6c 24 69 b9 cd 47 ce c4 6c c5 58 43 ce 1d 95 31 db 55 09 52 1a f2 07 9d 1a 8b a2 4a Data Ascii: FU1&2un%wY&ca`"a!TD,-,RA\|lw)Tf\|y^N)~t{q:N*.\|y1S7`^qg'33pS\pfZ:f`,Vce<]Z;\WzUh66(Ql}eFF0M-1$Bl$iGlXC1URJ
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: b2 e7 e4 23 b6 d6 ff 6d 81 c4 fc 56 3b 74 77 d8 7e 6e 4c 32 45 30 7f e0 e1 cc 3d b1 6c 1d 16 e8 32 1a b5 7a 0e 7a b5 9c 57 b3 a5 95 dc c0 9c cd 95 84 9c 9a 6d 7b 59 ae 2d aa 1e 26 6e 6d c8 b6 b7 c8 51 73 24 4a 76 8b 22 47 b9 d1 2a d9 5e cd b1 31 6c cf ab 43 56 c5 a3 82 19 4b 9e d2 28 88 80 36 55 b1 6d d8 58 d0 5f 01 ff 5e 73 bd 9b a5 89 b7 3f 15 ea 0f d7 e3 00 2d 3b c0 59 e4 42 4c f6 a2 af 21 d2 77 60 bb 63 9c fd 55 f2 93 7f 62 8f 0f 29 82 50 f4 ba a0 5e ec 83 62 1a fb d3 c1 40 b0 64 fc 0c 53 66 86 7c c5 c3 7e 4d 36 73 c9 f9 01 a7 3d 60 75 7b 9c 6e 8f 9c 2d 5c 7f 83 61 d1 b1 fb ae a9 56 19 52 2a ad a2 c6 08 9e e1 07 60 54 56 57 fc 27 a1 62 40 0d 07 01 54 a3 74 8e 2f d7 fb 80 ab de ec e9 f3 e7 3c 92 7f 2a a4 d7 79 e4 38 b1 78 61 13 e2 b6 38 2b d2 c6 91 9b Data Ascii: #mV;tw~nL2E0=l2zzWm{Y-&nmQs$Jv"G^1lCVK(6UmX_^s?-;YBL!w`cUb)P^b@dSf\|~M6s=`u{n-\aVR`TVW'b@Tt/<*y8xa8+
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: ea 94 30 1a 39 c0 d0 a3 21 3d 30 60 b4 c0 0b b0 c7 15 aa 32 94 4e 92 33 4d dc 26 92 f6 08 24 b1 19 bf 2e 3a f9 70 6c 3e a8 43 dc f9 20 01 c0 07 dd b3 69 f7 2f 58 24 0a b0 98 46 22 10 d1 fa 84 21 4c d4 0e 7a c0 40 8b 01 0c bc 81 f1 30 d0 8b 36 61 99 81 f1 06 11 47 0e 9b 88 47 30 71 ef 08 98 3c 0b 4a c9 fa f6 bf e4 ff ea eb 97 1f 3d 3e fe e8 91 c3 ff 7f 87 d9 ff fa a7 a6 bf fe 81 f5 9b df 90 3f ff 29 f9 eb 5f 6b fe e3 df cd ff d5 ef 1c ff cb bb 1d f9 ab d1 82 7d 6b e6 0d 4f 40 d4 24 91 6b 56 7a 28 48 2d 87 ab 5f 69 cf f9 64 18 30 85 e4 13 b7 5a 97 5d f0 a1 2e f2 28 66 51 6c 24 84 d0 c3 9c 51 aa cf 44 64 03 ad 8d 46 56 1c 54 1b fb 23 dd 63 11 76 58 05 65 7f a8 f8 51 5b 72 80 86 b0 21 da ba 87 22 15 3a 69 eb ac 08 88 48 b4 8a 45 92 94 63 d9 1e b0 1f 49 78 7e Data Ascii: 09!=0`2N3M&$.:pl>C i/X$F"!Lz@06aGG0q<J=>?)_k}kO@$kVz(H-_id0Z].(fQl$QDdFVT#cvXeQ[r!":iHEcIx~
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 2d 3b 83 76 76 30 6d 14 33 33 85 99 f9 e8 4e d6 26 a7 93 86 61 6a 6c d7 63 3a 98 ed f6 48 c0 19 86 2d dc ef 6b 6d 89 1d d2 b3 da 49 36 e4 8f 0f dd 04 62 1d 8b 35 84 02 17 2c 2e 98 02 04 ad 57 c4 c5 7d 6a ab 60 73 3b 71 2c b7 4f 49 06 96 12 5f a9 41 13 e8 af b8 f3 be 9a ba fa d8 cf 9d ef 6c 2c 6e d4 5b dc 1e f4 50 54 a7 79 b2 2d 49 17 e4 77 e7 71 3e 6e 98 90 48 3a 25 b7 b1 a4 e4 55 4c 90 41 ea 68 ca 3d ce 25 fb 27 30 97 ec 63 b5 20 27 ec e1 36 57 03 87 2b 2c d6 5f 33 b8 c1 53 20 73 af 72 a9 18 4a 81 10 a6 85 50 e0 09 2d ea 3d e7 bb df d3 2e 8e 56 dc d9 be df 31 62 ee 1b f7 af 70 ef 85 98 d1 00 a6 5b f5 61 e2 8b 00 aa d8 9f 31 88 2b 07 45 2c ba 80 81 19 c6 f7 c7 b8 69 fc ab 01 50 af 41 a9 2a ac c6 8d c8 95 1c 8d 74 fd 58 48 9c 10 57 88 49 c0 89 92 24 03 c9 Data Ascii: -;vv0m33N&ajlc:H-kmI6b5,.W}j`s;q,OI_Al,n[PTy-Iwq>nH:%ULAh=%'0c '6W+,_3S srJP-=.V1bp[a1+E,iPA*tXHWI$
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 32 01 df bd 87 e7 93 46 73 01 4e 94 aa fa fb 5e 92 0f 3c 95 e4 2e 7e 95 db ec c4 f3 f0 6d e9 a1 b4 74 1d ef 0d aa 6f 97 e1 fb e2 3d bc 7d 63 e4 e4 37 cf 94 e4 eb 04 dd 52 8c 4c 52 c6 eb 2b 6f fe 6b 47 1d 93 7c 1a be fe 9c 1c 17 e0 83 8e 0b af 5e bf 70 e6 d2 19 ee df 4f a1 fb 3f 55 b3 0f 47 b0 c2 27 ec c9 27 3c 53 7b ef 95 de e4 c8 f9 b7 ce 5c 90 bb fc bd b7 fe f5 c3 ec 1b b3 7a 90 cb 0e 3d 19 f6 44 47 f4 c7 07 db b4 da ee 14 18 ec 4a e4 df 32 6f b5 a1 8e 75 9a c3 8f a8 20 83 39 a2 aa 15 23 8b d6 d3 c4 59 a4 5e fd 32 39 a5 ad f2 21 73 da 21 c9 8a 53 cb 8a 9c b2 b2 2d 27 18 29 8f 91 62 6d 6b 53 57 ed d4 3f 99 65 f4 ca 6e 2f 27 eb 19 e8 0e 23 84 88 ff 56 db 7c be fa 83 3e 40 7a 56 e1 3f 8b 48 90 7d f4 83 39 a2 52 a8 70 14 5c 28 c0 27 5d 6e fd 16 5c 00 ed eb Data Ascii: 2FsN^<.~mto=}c7RLR+okG\|^pO?UG''<S{\z=DGJ2ou 9#Y^29!s!S-')bmkSW?en/'#V\|>@zV?H}9Rp\(']n\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
276	192.168.2.6	50202	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	504	OUT	GET /Bp1c271DS-3p9_MKUhQl4N6wiRPb4akzwKP9WdxwRQ_FWTug57HoDRzsZpm8bP0ovQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 48232 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:04 GMT Expires: Sat, 20 Apr 2024 14:07:04 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	724	IN	Data Raw: 52 49 46 46 60 bc 00 00 57 45 42 50 56 50 38 4c 53 bc 00 00 2f ff c0 3f 10 4d 48 0c c0 36 6e a3 00 7c 44 10 ee fe 03 cb be 5b 21 a2 ff 13 60 e3 dd 99 07 93 35 59 da c5 27 cd 01 26 98 01 b6 24 cd 48 bb 67 37 59 55 d4 40 3a 87 23 ed 6e 95 76 b5 bb aa dd a9 12 4d a9 07 09 00 81 41 d6 9b 76 47 12 b5 a1 a6 6f 30 6c e3 73 75 2e 26 38 34 6d 82 c6 bf 5a 71 09 c8 43 fb ef 8f 20 03 55 15 11 06 dc ad 15 95 99 49 e3 f5 21 aa 24 05 00 6e 6b f7 7f 48 b2 2a 24 d8 96 a4 a5 94 dc 2f 5f 71 01 ae 97 89 66 7d 3d e4 73 4e 84 22 c2 1c 69 73 02 d4 75 80 78 6c e4 2a 04 00 0a 69 30 d1 94 0d 00 7f 4f 44 20 69 00 30 47 12 20 89 3c b8 9f e7 01 e0 bb 8a 6e 65 e7 24 49 bc 3f 0f 6e 92 55 45 b6 66 26 93 19 0c 74 6f 4b 2f f3 e6 ba 90 99 87 00 ba 4b f1 92 ac 8b 95 2f 1c d0 00 5a 62 06 90 Data Ascii: RIFF`WEBPVP8LS/?MH6n\|D[!`5Y'&$Hg7YU@:#nvMAvGo0lsu.&84mZqC UI!$nkH$/_qf}=sN"isuxli0OD i0G <ne$I?nUEf&toK/K/Zb
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 57 dd d5 5d 0d 27 01 42 83 17 ce d2 f5 31 63 1b 25 a4 11 f0 50 77 75 57 77 fd 83 d3 f5 4c d6 58 5e c8 1a a5 cc 17 b7 e3 c7 3f 95 6c 90 12 52 1a 11 60 0c 20 c3 60 80 94 2c b2 b2 fe 36 97 9f 77 df b8 76 ff ed a1 7f 05 1a c9 5d bd ba cb bf fd 20 40 04 c0 00 63 72 f5 42 29 a5 34 66 76 03 00 be ef f8 bf 57 b6 6c a3 57 7a a5 94 63 40 30 00 80 e4 43 3e bc f0 4b d2 1a 2b 2b a5 4f db 32 ef 3c 7b 25 df f7 d0 f5 e1 34 25 cb f2 52 fe 0c 10 31 27 63 32 e7 34 1b cf f5 ef fb 94 3e 88 37 bc e2 55 b2 14 5c f2 ef 09 6e 1d 24 6f f2 36 11 11 65 fd f4 da f7 38 b3 cf 3e 91 32 69 fd 7b 02 23 06 80 81 e4 26 f3 c2 6d 6e 32 19 c6 2b 1f ef 5e be bc c2 fb fc 0c 28 c9 eb 31 80 e0 64 e4 85 5d 26 37 99 94 18 be f3 f1 67 3e fe d4 db 9f 00 bc 80 af 89 2c 93 74 3f 18 91 01 30 13 bc 70 9d Data Ascii: W]'B1c%PwuWwLX^?lR` `,6wv] @crB)4fvWlWzc@0C>K++O2<{%4%R1'c24>7U\n$o6e8>2i{#&mn2+^(1d]&7g>,t?0p
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: c0 dd da bb 13 99 f5 ab 70 b7 c4 59 38 24 33 97 3d c2 dd dd dd 5d 02 27 70 18 56 e3 6c 9c 33 f5 86 6d db b1 37 fa ff 6d fb 71 e1 be ef 78 9a 36 4d 91 b6 33 9d 76 8c c7 b6 6d db b6 6d db 36 df 7d 8c 77 b6 3f 9f b1 3d ed 93 22 68 92 3b 17 ce 73 c7 fc ff ff 39 49 92 5e af cf f7 17 c8 8c 54 b9 a6 7a 6c db d6 6d e6 b6 fc 23 7c dc 93 75 b6 6d db b6 ed 6d bb 2a 9d 59 e9 88 f8 be 05 04 45 fe 8f 36 01 7a ec ff 5f 6f 4b 53 f6 39 55 85 bb bb 4b e4 92 32 00 87 08 52 a2 26 73 87 8c 09 b8 13 75 47 78 44 e8 ee ee ee ee 0e 4f dd b3 83 b3 ef bd a7 2d 7f cf 02 87 b4 99 00 13 78 d2 27 fd e2 bf 04 fb a7 1d 7e db d2 4e b1 94 98 b5 2a dd 58 aa 15 fe 71 be 38 ec 21 b0 d1 21 68 a5 b8 bb 6c 9c 8d 53 11 6b 55 fa c7 a9 f4 09 bb 52 74 0a ee 4e 7a 09 db 25 a4 d3 ef 08 08 3b c6 5d d3 Data Ascii: pY8$3=]'pVl3m7mqx6M3vmm6}w?="h;s9I^Tzlm#\|ummYE6z_oKS9UK2R&suGxDO-x'~NXq8!!hlSkURtNz%;]
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: d9 ed ca 65 23 31 8c dd d5 88 e5 34 dd 4d 93 6a 6f 76 37 99 78 b3 62 a3 23 8d bb 66 da 78 33 2c fc 84 de 08 2a f0 7a dc b5 88 13 7c be a2 ad b2 95 ad ac b7 d5 e1 0c 08 ef 7f a1 0a 0a 02 28 df 55 1c 4f d3 25 29 9b ab 0a 7b f1 b4 70 e6 02 79 d0 ac 80 ca eb 9f e5 54 1a b1 81 34 96 e8 10 9f 23 0f aa 58 46 d8 45 bd 3c aa 74 87 be 6f ca 75 6c 4c 23 2c 03 57 dc ca 28 95 2c 31 8e 3b 75 0d 54 d3 18 f3 92 fb ce 8f 7a ea 76 d3 02 91 8b 71 f3 46 b5 51 89 cf 5a 9f c6 6e 4e 4c 9d a5 f3 13 b3 ee 83 aa 5b c7 fc 72 32 68 fd ef bc 3a 78 cc 9d c7 9b 7d f5 95 de c6 8d f3 b1 3e 7f ad 38 17 e7 d9 c6 53 91 bb 19 4d 16 79 b5 7d 31 ea 47 6f 77 f8 ac 41 d1 2a 3d 19 f4 03 dd 39 f6 b8 ba 71 82 3f 93 ce e1 1d 42 4b 32 3e fa 95 79 1f f6 41 2f a4 36 5b 28 51 54 cb 4f 94 cb 56 d9 cb e9 Data Ascii: e#14Mjov7xb#fx3,z\|(UO%){pyT4#XFE<toulL#,W(,1;uTzvqFQZnNL[r2h:x}>8SMy}1GowA=9q?BK2>yA/6[(QTOV
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 4b 9b f7 76 c1 ad 8b 85 6f 52 c5 f0 3a 97 81 74 49 9e fd 81 c3 61 31 6f 22 8a 63 f9 e8 2d 1c 72 5c c2 42 ac 6b 92 2e 0a be 27 aa e1 65 d2 89 8f 97 ed 23 0d 2a 2e 76 31 74 76 aa a7 31 9f fc 9b 88 8d c5 da 38 f6 67 ce 93 f6 1c 47 9b e7 01 f4 a0 c9 e7 3f d2 7c 6f c5 f6 cc 53 b3 c9 a6 62 76 7a 41 da 39 7a f3 8c 56 9f d5 30 43 9b bd e2 4b 8b ec a1 74 24 80 e6 64 66 ba 6d 7e bb 21 88 b7 22 eb a0 0c 3e eb 43 1a 46 fc a4 fc ce ff 8d d8 b8 23 b4 ce d8 1e 78 66 1b 4b c6 61 24 78 34 4b fb 78 02 93 cb 14 87 f6 03 97 0f b3 fa d3 c2 d8 8d 3f 3e 51 42 d7 27 be 14 ba e3 a7 bc be e6 e6 76 11 ad bc c1 ab f5 2b 34 12 21 fa 1e 0d d4 9d 9b 54 c7 97 a7 fb 3f e1 a4 6f 57 d3 f9 c9 fa e9 f8 c6 72 5b c6 a5 f8 d2 fa 91 9e a2 8b d1 38 3f ff c8 db d9 b0 90 62 8c e9 12 cd c6 3c 61 3d Data Ascii: KvoR:tIa1o"c-r\Bk.'e#*.v1tv18gG?\|oSbvzA9zV0CKt$dfm~!">CF#xfKa$x4Kx?>QB'v+4!T?oWr[8?b<a=
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 0d 71 b1 64 78 98 4d e6 c1 10 2b 14 1d 22 9a 12 a8 ad b5 42 58 67 35 1b fc e5 6e 6a 8a a9 bb c0 3e ef 1f 4f ed ce 32 62 b6 3e c0 da 4e d1 f0 dd 84 68 7b d9 c8 31 16 69 1c bf 45 85 4f 31 ae 85 66 7f 37 0a 3d 7d 34 88 ba b0 e4 f5 58 8e b1 e8 6c 1c c7 33 fc d2 9b 6d 7f de 9f 6b 33 65 e4 c3 ae b3 77 4d 44 26 8f 46 cb 71 db c9 77 88 56 6c ef ff 08 0f 9a 63 54 ca c2 88 45 f1 08 9b ac 83 ae c3 4c d0 c9 af f5 2e 3e d5 ad 6d a8 f0 a7 2d 59 55 c1 f2 7e 23 36 15 26 ba 7f b7 d7 79 2e 3e ed c9 d9 74 36 6b ee cd 6f 67 13 4b c5 2c 62 b5 6d cc 5a a0 2a cb ff ca 97 e2 02 a5 6f ac 28 66 8d b3 49 53 2b c3 fe 58 bf c4 13 f9 a0 a3 79 13 cb de 92 f5 cf fb e6 8d cc b6 7b 33 3f aa d7 9c ee 51 6c 34 1b 15 25 c6 cf 61 e4 2b 44 4e 95 57 fe a4 37 e3 38 6e 5f ea 7d 6c a2 d1 d9 2f f5 Data Ascii: qdxM+"BXg5nj>O2b>Nh{1iEO1f7=}4Xl3mk3ewMD&FqwVlcTEL.>m-YU~#6&y.>t6kogK,bmZ*o(fIS+Xy{3?Ql4%a+DNW78n_}l/
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 5e be 67 36 51 0b 5d 5d cd af f1 45 ff 5c cd dd 5e 56 a1 00 aa 00 5a 48 be 9a 44 47 a1 af 1b 05 cb b9 23 4c 04 f3 3a e0 81 bd 46 d0 e6 0c 06 ba 29 9e bc 1b f6 21 cf 33 e8 e8 48 88 a0 d0 da d8 d7 15 24 0a ac eb 6f cf 2d 6e b5 bb 72 36 9e dd ef 32 9d 98 ec 3c f9 d9 3a 9c 79 d4 66 eb c6 18 c7 c2 3a 22 9d be ed e7 8d b4 bf 34 9d 75 14 30 de 2c 9a 7f 2d 8f 5a 6f cf 7f a4 ec fb 49 cc 30 f4 62 3a 17 97 75 51 8c 54 84 04 ba a5 4e a0 fe d8 19 01 c7 71 48 81 c0 75 5c f1 05 f4 50 5c 09 0e f5 47 f2 8a 34 44 c4 be 4f 30 83 41 2c 37 84 98 e2 93 37 b3 45 6b 2e c5 53 ce 8b d7 54 d9 47 54 9f b6 89 eb 8a 06 47 b0 a1 c0 4a ea 9a 97 73 7e f7 5c 00 74 56 dc a5 ca 16 86 20 bc 27 ec 1f 3a 50 f9 3e 68 ca 1d 82 85 cd 1d 7d 2f dd 30 26 df c6 93 c1 4b 67 de 13 7e ee 43 16 54 36 1f Data Ascii: ^g6Q]]E\^VZHDG#L:F)!3H$o-nr62<:yf:"4u0,-ZoI0b:uQTNqHu\P\G4DO0A,77Ek.STGTGJs~\tV ':P>h}/0&Kg~CT6
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: a1 64 c8 84 64 11 b0 d3 72 b9 3e cd 5e 7d bf 65 f9 c6 a7 75 da dd 47 8a 6b 48 b0 8c 23 b2 01 4b 44 42 b7 f6 e5 6f 69 97 eb ee b2 e7 0c 39 fb a1 fb f9 cc 57 ab 64 95 f4 19 ea 0f 30 89 7a 43 30 02 86 b4 70 d4 c2 d2 4e 4f ff 06 5a 85 02 dd ea 0a 7f 18 6f 17 48 b1 08 b4 de a4 2c da 6d f3 ae c7 fa fe 97 2a db 71 e1 90 e0 91 f5 36 d9 d4 3c dc d6 4f 67 bf c2 78 c4 4f 17 4b 8c ac 46 86 e5 7a 4c d8 a6 7a a2 d9 a3 36 15 e6 7b 31 41 8a 11 ab d2 5d 22 b2 d5 6d 7f 4d 2b 4c b6 79 f3 ee 7a 92 2b a4 30 4d 17 ff 92 cc a3 c9 7a 14 39 36 f3 78 12 a4 9d ee 02 48 d2 e0 ae 19 a0 ce 73 31 58 13 4f 0f 24 19 f6 85 5a 2c 87 3c 19 66 89 ff 74 6a 14 4d 4f 96 ca c0 57 73 e6 71 6e d9 46 73 d6 33 bb b9 de 31 00 d9 02 12 b7 f9 e5 51 93 6f d3 90 b3 65 26 ac 06 1e 24 3f bc 13 92 1d 73 60 Data Ascii: ddr>^}euGkH#KDBoi9Wd0zC0pNOZoH,m*q6<OgxOKFzLz6{1A]"mM+Lyz+0Mz96xHs1XO$Z,<ftjMOWsqnFs31Qoe&$?s`
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: a7 2f 1e 60 95 fe bf df 72 46 4e c6 8b ed e9 09 c0 f4 58 fb 0e a6 e2 3c 09 cf f6 30 1c e5 4b 57 aa 6b 0a e8 26 af da 23 92 0d 23 83 97 0d 42 9b 48 02 ac 7f 52 f9 f5 02 e1 a2 ac c7 b1 5e 0f 5f 05 07 77 31 e7 6c 9d 27 19 6f 7a 8b b3 fa e7 fe 7e f4 74 b9 47 f8 5a 92 ae 96 9a e5 f3 8b 07 a8 26 cf 89 81 b2 29 bd 2b cf b1 0b fd 06 2e 05 60 12 23 cf 56 6c 4d 73 62 70 c9 20 1a 3a 5d c0 2d 47 0e 09 6f e8 6e 98 db 04 1e a9 c2 77 ab 89 c7 ef 1c d1 73 4d c1 1b ba 48 56 23 96 2f 1e c1 cc 80 3c cc 57 87 71 0d 99 0e 9f d8 a8 46 b1 c0 21 ee 7b 78 75 7e fb e2 c3 7b 94 8b 41 a5 1c 36 97 5e 4f 45 94 dd bd 9e b2 c6 57 cb b8 62 70 12 cb 45 aa dd db 87 b1 ef 81 92 2c 71 7e ac fd e6 97 a4 db 48 8f 23 ff 7a 61 f3 bb a0 35 51 c9 19 b5 22 42 3d cc 96 18 66 6f 9d 93 d9 d2 d6 02 50 Data Ascii: /`rFNX<0KWk&##BHR^_w1l'oz~tGZ&)+.`#VlMsbp :]-GonwsMHV#/<WqF!{xu~{A6^OEWbpE,q~H#za5Q"B=foP
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 86 a2 ef 27 6a 32 22 e3 de 2f d2 d4 af ec df b2 48 b9 14 53 a1 49 fd 7c 0c 92 ae 3c e3 b1 a2 b6 54 0e e9 e0 fe 9e 6f c4 f0 70 6c 77 df 41 c9 17 3d 09 bb 28 83 99 89 d9 51 3b 3d b6 ca 55 16 f4 70 95 f8 76 18 40 a9 d3 65 96 20 17 a5 89 75 23 3c 3f c6 c1 22 25 24 61 ba d7 a6 1b 07 21 fc df fe a2 ef 67 7d 94 d1 10 3c e5 0f cb b6 8c 7b 48 c4 da bc e4 3f ab ce 2a 98 44 e0 3a 61 92 2e c8 6a 94 6c e1 77 88 62 66 ea 8f 3d 58 e5 bd a4 a9 60 0b 31 1d e7 60 19 b7 64 2a 4c 91 99 78 f4 03 ac de 65 ce 42 c7 2a b1 f3 75 4d c4 cd e1 1a 2a b1 4a 91 9b a4 d5 dd af f9 a8 68 45 1b cd be de c9 53 77 ee 70 12 89 27 19 38 f1 66 2e c8 88 54 a8 43 b3 cd d4 82 ca 5b 51 d1 9d 26 85 e6 23 74 9e 66 dd 22 9d c5 4d 49 e0 5a 58 6c da 0d ac af 07 1a a3 f2 e4 1e 33 cb 6a c6 30 3b f2 ec da Data Ascii: 'j2"/HSI\|<ToplwA=(Q;=Upv@e u#<?"%$a!g}<{H?D:a.jlwbf=X`1`dLxeBuMJhESwp'8f.TC[Q&#tf"MIZXl3j0;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
277	192.168.2.6	50201	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:07 UTC	505	OUT	GET /ydTw_fsOTtosGmLEUlUH_l-rJoiE2gN_EYbneUPYwFqpOCj6orGRMffceZW0QHxbk5g=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 7576 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:05 GMT Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	725	IN	Data Raw: 52 49 46 46 90 1d 00 00 57 45 42 50 56 50 38 4c 84 1d 00 00 2f ff c0 3f 00 09 48 92 e4 c6 8d a2 d1 80 01 04 f0 ff 0f 73 9f f5 1a d1 ff 09 c0 ff d2 7d a2 97 48 b8 cb 00 d5 1b 24 a1 ee 31 20 f4 8c 18 3f 1e 01 80 96 7a b4 f6 c1 32 95 5b b2 21 e2 80 0d 72 ab 3c c2 92 a4 c8 41 d5 02 6a f9 a6 34 93 2f 44 3c 1e a5 18 df 98 11 d3 3e 01 50 80 54 27 ee 2c a5 aa 66 7d 4b cc 6e 4c 7b a8 30 99 34 79 a0 c4 34 22 02 00 79 04 9d 61 c2 1b 50 d5 41 23 b2 ef 6c 76 bf fa 63 2f a0 48 92 ac da ca 78 8a 4f 3c 66 b8 b4 ff 75 3d f9 15 da 7b c8 3d ab c6 6d db 88 53 91 b1 d7 ff df 78 8e 41 01 47 92 24 45 92 77 55 93 ad 34 e2 ee 1e 33 9f c4 f8 ff 27 a1 d0 ff 09 50 0f f1 49 92 d4 3d 67 f0 c5 9b 6a 04 41 62 cb 1e d4 27 28 00 30 8d bb 18 65 2d cb 08 82 05 00 cb 9a bd fb 08 06 9d 55 1e Data Ascii: RIFFWEBPVP8L/?Hs}H$1 ?z2[!r<Aj4/D<>PT',f}KnL{04y4"yaPA#lvc/HxO<fu={=mSxAG$EwU43'PI=gjAb'(0e-U
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: fe d4 5a 16 12 49 59 27 20 06 68 34 bf b5 c6 a4 26 6b db 88 03 50 cb 3f da a5 16 d6 8a c4 02 92 24 49 52 6c 27 b3 aa 07 c4 bc e3 15 f3 4a 57 d6 09 74 00 9d 80 99 99 3f 4a ea 99 ee aa 94 5b db b6 aa 2d 6b ed 7b df af fd 38 10 51 00 44 e4 d4 e0 b1 77 41 6e b5 f1 67 c8 93 1d 13 20 01 26 f9 7f 92 ff 27 f9 5f c7 6b 29 6f 24 d8 40 ac 89 70 35 85 8d 94 37 e2 6f a6 cc c3 6d 89 a8 97 2b 00 dc 34 74 92 e4 26 2d 8e c6 d1 64 24 d0 38 95 36 b1 78 62 71 27 52 3b 8e ba 5d a0 00 d1 b1 14 8e a4 b0 37 07 36 e6 ff f5 78 9b c3 cb 63 e3 30 78 4c 1c 56 0e 13 87 ce a1 31 84 83 08 00 86 92 20 24 11 97 a8 91 88 8a 04 1f 2e 11 11 a9 10 b9 95 45 76 16 83 f3 19 95 42 c3 6c ba 33 f4 2e 4b 40 e1 d2 e9 44 f7 7f ae de ea b3 2f ae f5 ea 0e df 99 5d 23 38 53 8b 3f 80 ee a2 1e 82 2f 12 15 Data Ascii: ZIY' h4&kP?$IRl'JWt?J[-k{8QDwAng &'_k)o$@p57om+4t&-d$86xbq'R;]76xc0xLV1 $.EvBl3.K@D/]#8S?/
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 50 16 91 b1 28 ca 94 2c c7 c2 80 4a 26 5f 6f c5 9c 1e a2 a1 f3 8b 74 03 d6 62 ac 62 80 40 53 d2 0e b6 8d cf e4 8c 6a 23 45 0e f9 82 e4 52 9b 08 c9 64 1a cf c7 95 86 40 a8 32 1a b4 c7 6a d8 95 60 99 ae a7 36 64 61 59 f8 e0 da 41 9f 03 b5 73 16 39 a9 81 22 59 eb e4 0e 7a c6 b9 3d 4e db 13 01 39 62 46 60 f8 b3 39 4b 05 fd fa 9b 76 ae d5 23 41 b2 a5 b9 1c c9 e3 35 06 69 92 98 00 89 09 09 26 40 9a 80 4c f2 41 9a 58 c8 a4 eb d7 e6 6a 54 16 81 62 8a ca b4 ef ab ce 5a 07 8d 8b 71 21 c4 14 81 1d 0c 09 11 06 a9 a9 4c af c9 71 5f 80 08 8b a4 5b 3a 01 5c d8 d3 bd 7f c0 23 2c d3 5a 00 25 63 59 16 06 61 85 73 97 01 8b c8 60 94 45 be 9e 0f d5 88 63 98 ba 8c 8c bb cc 33 2e 46 ca 88 0a b2 63 1c 33 b5 01 21 a9 56 33 bd 06 bc 34 b4 18 27 5f 68 10 83 4b ff 16 62 a4 37 fb 3e Data Ascii: P(,J&_otbb@Sj#ERd@2j`6daYAs9"Yz=N9bF`9Kv#A5i&@LAXjTbZq!Lq_[:\#,Z%cYas`Ec3.Fc3!V34'_hKb7>
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 34 49 ed 26 a2 32 dd cf 74 f8 85 f4 15 ca 1f 06 21 d8 2e 62 ea 14 71 1c d3 4a 66 36 44 08 1e 0e 31 9a ce f0 e6 4c 8a e5 4c 34 28 33 88 be cf 15 f2 40 f2 b2 6e e7 0c 85 69 80 4b 78 e0 e6 5c 18 cf 80 8c 3c ba d1 a7 df 4f 30 89 5c 7a cd 62 d6 53 51 ee 05 2f 80 9d 8b 01 02 25 a6 80 f2 66 4f 6c 16 4b 0e 2c 30 e3 8e c3 6b 04 3b c8 54 a8 da 11 29 7d 2d 52 c0 ea 0b 64 54 4d a7 a0 30 25 08 d2 40 ff fb a3 36 fc 02 b2 c6 b9 e5 f6 b6 aa 8e 12 7a 65 72 b4 31 d0 0f 15 db cf ba 83 0b 52 a8 c5 ec c4 62 80 40 89 14 c6 c7 df 7e af ef 21 79 c0 22 3d 56 f6 d1 2b ba 18 82 49 78 18 09 fa 41 65 dc 0f 12 bb 81 77 77 48 00 89 4e 90 fa 29 23 b9 95 b3 31 21 f3 21 07 ae ed 63 f4 a9 0a 35 1c da 3b 06 a8 60 6d cc da e4 13 23 77 54 a8 8d da bc f1 a7 6b f4 4f ff 78 64 3e fd a7 2b a1 c6 Data Ascii: 4I&2t!.bqJf6D1LL4(3@niKx\<O0\zbSQ/%fOlK,0k;T)}-RdTM0%@6zer1Rb@~!y"=V+IxAewwHN)#1!!c5;`m#wTkOxd>+
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 57 54 60 40 17 37 78 e1 ad 6d 6d 40 0d 5b b2 08 ad 8e 2d 84 41 06 0c 72 c6 ea 80 5b f3 cd 23 7d d6 c9 fd a6 1a 24 d5 30 83 56 80 0b 22 83 d9 d9 02 f0 9c f3 3f 79 e1 f5 75 40 8d 12 b1 39 05 b1 02 81 e9 04 04 88 0c 42 2c e7 4d e3 dc a9 e3 d4 d1 63 ba 2f 5e 77 18 d5 a2 95 00 a1 60 67 03 42 d0 df d2 c5 8d be f0 c6 5a 85 ec 8f 6c 6b 43 2b 67 93 b1 ed 1d 20 03 28 cf b5 f5 d7 e7 9d df d7 67 d8 9f 1e 31 5f ec 40 2b 24 8c 72 18 ab b0 b3 25 2e 68 8e 39 99 f8 11 5c 00 2a 2d 83 93 d4 9d 88 65 13 32 01 d8 14 30 d4 08 73 3e 6a de ff c4 bb 80 ad 16 24 d6 89 b4 12 2a 0d 31 04 66 bb d9 b1 ce 08 eb b4 ea cf e1 0d a8 75 df b8 c6 4e 2b a4 85 e6 ea 1a 50 00 42 02 6a 64 3e 6f 40 ed 17 8a f5 06 43 19 f7 a9 06 64 74 19 b4 92 4c 98 96 b0 0c 66 bb e6 ff 56 fd 63 74 b2 d5 a6 0a 42 Data Ascii: WT`@7xmm@[-Ar[#}$0V"?yu@9B,Mc/^w`gBZlkC+g (g1_@+$r%.h9\-e20s>j$1fuN+PBjd>o@CdtLfVctB
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: bf ec 43 23 4b 86 0d 6e 65 85 01 fa 03 f0 a7 55 36 a6 6e 2d fd ad ad 6c b8 81 91 4b 3a 71 97 26 26 f7 07 d6 8d 26 8f 8a e1 60 98 90 4e d2 24 06 fb 88 52 fe 76 44 6b 67 f6 e6 18 81 3f dd 08 af 95 32 12 a1 02 b5 64 bf 7e f4 bc 65 4f d6 35 d3 35 8f 57 1c e1 c9 c4 43 78 ed 7f 1b 48 13 f3 d4 1d 95 07 78 6c ee e9 db ff f1 b7 72 9c 90 1c 6d 60 ba b6 cb 00 16 b8 cb 16 1c 61 97 e2 52 99 65 36 92 6f 9e 1d 94 73 e0 3c b8 b1 2a 5e d1 a3 80 05 1a 3f 49 ea 3d 5b 1c 59 0f 7d ef b7 bc fb 42 af f6 99 c7 ea 9a e1 8e db dd 25 f8 69 b5 67 a7 63 7d ea ad 2a e0 78 42 9a 44 5b 91 5f c1 39 c8 b1 28 ca 25 d3 91 8b da 68 a3 64 97 55 99 b9 ac ca 9b e3 f1 a7 e2 ac 7c 0c 86 43 29 9c 0a 20 34 76 5b 38 dd 0f 6f 85 de 0f 98 f6 a4 47 1c 51 f8 42 b6 7b ff 67 a3 8d 04 97 80 e4 b7 e6 68 c4 Data Ascii: C#KneU6n-lK:q&&&`N$RvDkg?2d~eO55WCxHxlrm`aRe6os<^?I=[Y}B%igc}xBD[_9(%hdU\|C) 4v[8oGQB{gh
2024-04-19 14:07:08 UTC	576	IN	Data Raw: 74 4e 33 ef 59 8a 87 e2 44 bd 2a 19 4a 79 be 94 3e da 46 74 00 22 6c 82 ab 2f 73 55 6e 74 3b b8 85 05 03 a4 3e 62 d5 e7 12 e1 f3 0a c3 83 5f 71 8c 60 d5 da 89 08 02 03 be aa 89 a8 22 67 c9 3d 9f 5d 69 d3 42 50 db 81 71 c2 7a ec 45 74 7f a1 d1 4c 89 d2 38 b7 87 87 d6 0c 6c 37 d8 c6 46 5b f5 a8 17 de 72 fb f3 d7 de 97 0d 8a 27 29 fd dc ed 83 97 a9 ef 2f 00 0f 25 21 65 95 4d b0 05 bb 2e 3a c0 01 04 ee b3 1a d5 db b9 64 9b 7b cb 7d 8f 80 ec e3 b9 bb 2c 9f de a2 7d 39 27 91 e0 2e 1e 43 41 78 6a f1 d3 7e 7e 9d 12 36 c0 b7 ec 31 dd b0 11 36 6d e3 2b a1 5b 5f f5 d9 ce 7b 9c fd fa ba 8b af 20 7d ab 05 d7 f1 7f 6f 5a cf 6c 14 69 99 7d 94 f3 eb e6 85 f8 f0 b7 ca 62 76 89 63 0e 47 0d 8b 98 61 13 80 8d 3f f8 e4 09 3e e8 dc af 77 99 9f f1 65 ff 41 1c 5a c9 3e be 03 3f Data Ascii: tN3YD*Jy>Ft"l/sUnt;>b_q`"g=]iBPqzEtL8l7F[r')/%!eM.:d{},}9'.CAxj~~616m+[_{ }oZli}bvcGa?>weAZ>?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
278	192.168.2.6	50203	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	504	OUT	GET /yEJF79KAINQnRlOx8eGZE8ZcD6fqOMI-kdYUHz10L9wizxc8zAC1wmG3cOr_zfBCZQ=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 22360 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 12:58:41 GMT Expires: Sat, 20 Apr 2024 12:58:41 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4107 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	721	IN	Data Raw: 52 49 46 46 50 57 00 00 57 45 42 50 56 50 38 4c 43 57 00 00 2f ff c0 3f 10 4d 38 6e 24 49 91 94 55 75 58 7b fe 1b 3c 70 fc 8f e8 ff 04 80 cd a6 b6 99 fb a9 96 b4 4d 81 04 8f 43 32 53 89 4a 24 50 b2 95 45 ab 69 eb e1 66 bb 64 03 bc e1 58 92 0d d1 55 02 49 c5 ea 61 4d 27 3a 43 ab 21 69 a1 c5 6a 37 44 ab 09 49 d9 f7 e3 aa 9c 01 fb 76 e3 95 7e 5c 93 80 5f e7 24 67 c0 b6 5f 76 7e 93 7d e6 9d 83 df 06 64 26 38 40 50 42 e9 86 b0 81 80 56 59 48 02 6b 62 e4 6a c2 0e 24 92 18 a5 4a a2 75 34 4b d0 13 65 90 16 4e 34 26 24 b5 24 34 66 a1 00 4e 02 a4 6e 71 26 99 05 b0 1d c6 d6 06 68 a5 85 f9 ef 7d 57 df c7 db f2 ae 23 79 cf f1 36 58 48 70 24 49 b1 9d 30 33 fb fe 47 63 b6 3f 8c 9e a8 f5 54 6a d3 ec 7b 2b f9 02 92 54 db 6e 24 e9 20 82 e0 13 08 f1 cb d7 30 f6 bf 98 5a 41 Data Ascii: RIFFPWWEBPVP8LCW/?M8n$IUuX{<pMC2SJ$PEifdXUIaM':C!ij7DIv~\_$g_v~}d&8@PBVYHkbj$Ju4KeN4&$$4fNnq&h}W#y6XHp$I03Gc?Tj{+Tn$ 0ZA
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 71 d8 76 c9 70 fb 91 f9 c2 4c a7 43 0f c7 40 09 34 f0 7d c7 dc e9 86 88 d0 17 33 3e d3 85 c2 00 74 65 f2 47 df 33 41 17 49 44 15 c8 77 4e 00 ec 61 42 b3 43 b4 d2 61 4e 0b ec 25 8a 28 22 d9 30 ca 5c f2 3a 2f f3 ad 21 e7 f6 f9 de 5f 39 b6 92 bf 65 43 5b 6b 7b 32 d6 51 ac 23 6b 59 a2 e5 75 06 03 f2 15 29 91 95 05 68 c8 d2 58 4e b6 d6 ca 49 95 b6 a5 ad c3 ad b5 18 5a 24 81 89 b8 25 92 2f 89 18 0c 26 24 26 22 02 c9 c1 20 39 27 12 b7 24 86 bc 65 30 2c 24 48 d2 a9 75 41 00 b0 c8 00 41 82 42 01 48 d2 89 f5 99 45 06 08 f8 8b 64 67 27 9d 5c 17 84 33 19 00 40 3a d3 0a 67 32 60 2e ab 75 93 7f 30 79 fb d1 3b de 01 af ce af bb 27 f5 89 03 20 0e c7 6d 23 39 92 94 7f d8 ed 77 cf 7c 23 62 02 78 b5 95 ea 82 94 96 6b b6 13 07 76 c1 30 1d ec 3e 4e 0f b6 a9 d8 cf f8 e4 02 82 Data Ascii: qvpLC@4}3>teG3AIDwNaBCaN%("0\:/!_9eC[k{2Q#kYu)hXNIZ$%/&$&" 9'$e0,$HuAABHEdg'\3@:g2`.u0y;' m#9w\|#bxkv0>N
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 67 d0 4c 96 d6 31 2a 60 3a bc 28 da e4 b2 04 ae 66 8a ed 05 3b 05 44 81 85 59 a0 a4 29 47 b0 23 9b 88 e6 4a ca 08 57 73 d4 6f c8 ee 5b 95 72 10 c5 00 6a c2 fe 12 46 02 27 5c 61 fd f1 cf 6b 64 1c c6 1a 00 e6 92 2a 64 55 2c ae 42 83 13 20 08 15 d8 2d 60 8b 2a f8 2a 91 02 c3 6a d8 bf 22 d4 24 6b 58 62 97 87 fe 01 7c d5 61 75 1c 9a 82 e9 05 60 bb 42 76 4b 00 e1 ec 36 08 ca 60 af c4 9b 2e c7 9f 0b b3 a4 f2 af af 9c 17 98 02 94 1f b3 d4 66 7a 97 a1 23 09 bd 4c d8 13 26 c2 8a f0 98 b0 24 54 23 0f 89 4d eb 3d 69 46 46 cf 13 02 82 0f 70 9b 77 47 10 e5 57 97 67 10 b3 b9 5f b0 27 01 56 d8 a0 51 94 82 90 d7 9d 22 9e 09 88 04 61 40 2d 44 1a c0 ae 43 05 e9 32 b6 d6 5f 7d 30 3e 10 e4 ce 9b a7 be d4 8e a7 a8 ea 20 cb 3e 0e 09 e3 89 f7 9f bc d4 ec 8d 1b ce 2f 8f 5d 5e e9 Data Ascii: gL1`:(f;DY)G#JWso[rjF'\akddU,B -`**j"$kXb\|au`BvK6`.fz#L&$T#M=iFFpwGWg_'VQ"a@-DC2_}0> >/]^
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 3c b8 20 a2 ee b1 ca 97 ec b2 67 4c ab 30 a9 14 a0 5c 03 37 9d 6e 9f 9b 9d 43 3c 20 12 f9 4a 8d 81 43 ea 29 10 17 bb 80 51 22 a8 0b 34 0e 0f 45 9a d3 09 1b 05 99 51 8b ff 6a d8 5c 1c 5c 5c 5f 6f 04 c2 a8 10 34 09 34 13 0f 8f 66 a7 7d 15 34 4a 72 47 29 25 28 81 0b a7 31 82 b7 32 20 5c 44 f2 37 c2 af 7e 11 eb 9b bc e6 71 f7 a1 25 9c 11 a2 05 48 97 a2 49 6e 6c 3d 33 46 be a0 c1 a2 03 5b 07 6e bb f2 ac a1 03 00 f4 cc 8c 9e 74 1a 01 e8 a9 9d 11 e7 c7 b5 ac 41 bd b2 39 66 71 52 ea cf 97 f2 26 1d 9a ab a0 80 6b 5c 58 7b eb 60 51 33 0c 0f 88 3a 05 ef d4 9c ab b9 00 dc 20 dc 66 91 55 c2 12 09 38 5a 56 31 2a 21 dc 6d cf b9 14 65 55 d8 55 3e a6 0e 57 40 dd 29 81 d9 e0 17 c2 c5 76 ae 6c db 62 5f 14 c2 e5 8d de 78 95 5f 53 1a e0 52 d5 7c 43 08 2a de ed bc 8a 4d ad 43 Data Ascii: < gL0\7nC< JC)Q"4EQj\\\_o44f}4JrG)%(12 \D7~q%HInl=3F[ntA9fqR&k\X{`Q3: fU8ZV1!meUU>W@)vlb_x_SR\|CMC
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: a2 93 92 c8 1e f2 3f 02 4a 88 2a ee fa 8f bb d5 4c 14 77 eb d6 63 bb cd b5 a8 44 2a cd 80 72 d0 30 7c c4 69 a8 00 a1 37 b0 ab 18 4c 44 60 1a fe dc 9d 74 f3 26 77 8e 0f e6 c2 97 42 b6 c2 28 34 98 a7 7e f3 60 24 0f 53 23 34 41 93 a3 e4 6a 31 b9 cd 73 2a 37 9d e3 8b 3d 76 fa 0a 9b cd 71 9b 13 7e 29 45 b0 e9 5c 0b 69 53 09 e5 a6 91 b1 cb a2 77 d5 cc f9 5a 0f 37 dd 7a f3 e5 ff e1 08 7e 54 cb 6c 6d ed 13 11 a7 71 68 ea 69 0f df fb ba ab 6f ab ef e5 8a e3 22 cb 87 5a 2d fc cd be c7 a7 6f f9 c3 8b 6e 26 10 dc 0d af c5 f3 05 c8 e4 d8 08 6a a2 31 f6 97 e5 e2 37 66 e2 e1 40 af 6c ec b8 c0 b4 90 12 a3 5f b3 3a fd f6 4b 73 92 13 92 9c 3f 28 c1 92 66 d1 0e ae 05 1e d2 10 75 4d 98 c8 c9 07 25 65 56 fc c7 52 0d a9 cb 2b ff c7 ed 97 bb bb 9f b2 9e 95 36 e1 ae 24 51 91 f4 Data Ascii: ?JLwcDr0\|i7LD`t&wB(4~`$S#4Aj1s*7=vq~)E\iSwZ7z~Tlmqhio"Z-on&j17f@l_:Ks?(fuM%eVR+6$Q
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: e8 ab 3f 13 69 d4 03 57 48 87 c2 03 67 4c cf bb e6 6e ad ae 4d f9 d4 89 a4 fb c7 5f 2b c0 e6 ba d4 01 b0 46 7d 16 c7 bd 9f e8 2d 66 1e 6f 5c b4 bd 7a 70 c3 b6 e8 bb a2 6f 8b 6c 07 9f 48 da 84 7f 51 2d 42 2d 5e b7 93 ae c9 68 0e 2d d5 5a b8 f3 35 d2 e9 ff 7b f3 55 ff f8 fb 0a 53 cc c2 5d 73 e2 81 cb 6a f9 b8 0f 47 5b 9f 06 8c 87 e8 4a e9 03 77 7c c7 13 a9 8a ef 7e f5 5e df 8d ab f2 ae 07 c1 b6 d7 36 38 1a 75 03 c7 8f 2d 21 6e 84 00 01 35 70 d8 20 60 e7 5a 55 d0 66 82 ca 44 8c 08 cc c0 d5 4b 50 97 7f 2b 49 97 38 f5 45 db df 49 5c 40 80 aa 0a f3 db f4 d3 0d 4b bd 8e c1 d5 ba 43 e5 aa 22 ad d9 74 cb 17 78 2c 3b cd 8e cf 48 de da d7 bf 72 26 2c 8b cd 15 79 6a f2 e5 8e 6a 38 b1 3f b2 86 55 32 cf 13 dd c4 c7 92 1e d7 c3 5b dc 98 b7 5b 9d 1a 9a 3a 0a b6 f1 b8 1a Data Ascii: ?iWHgLnM_+F}-fo\zpolHQ-B-^h-Z5{US]sjG[Jw\|~^68u-!n5p `ZUfDKP+I8EI\@KC"tx,;Hr&,yjj8?U2[[:
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: e3 b5 fd 35 55 68 1e a6 93 24 2b 36 8d 02 66 4b 2a 25 f5 a7 17 b2 b9 b3 a1 b0 89 7c d5 73 da 17 ea 9b 83 c0 eb f4 b4 e6 69 3d e6 b5 68 31 c6 42 a8 f8 8a 6d f9 1b 3b f8 56 b3 1e db 16 f3 8c 93 57 9a 08 e5 74 92 60 11 4a d8 aa b4 26 74 bc f1 53 1f b8 95 de 99 4e 86 05 67 b5 81 c3 d7 32 ce 93 84 f9 a0 00 c3 b6 c7 61 e3 71 cf 65 a0 0e 84 59 3d 18 ac 15 51 94 dc c1 23 51 d0 8b 6d 9e fc fa fb 4c 72 10 52 00 42 cb 29 b8 78 1a 29 1e 9e b0 21 bf 46 af 5e a7 93 5f 23 de 7f c5 56 9d 0c 78 0e 41 24 6e 8a a1 8b f6 5e 2e 5f 44 2e 7f d9 2a 0e 9d 32 1f 2d a7 a9 7c dd fe c8 64 90 6d d7 b5 58 c5 68 be 3e bf fb c2 ad 37 1f c2 0b d5 df ba 76 fe 74 57 7f 5e 1c fa 48 3f b8 d6 b3 4d 19 68 29 2a 0a 63 66 fc e9 7c f5 2e 5e df 2a 96 f5 0e e6 86 26 57 43 96 63 42 61 1a 65 f8 13 32 Data Ascii: 5Uh$+6fK%\|si=h1Bm;VWt`J&tSNg2aqeY=Q#QmLrRB)x)!F^_#VxA$n^._D.2-\|dmXh>7vtW^H?Mh)cf\|.^&WCcBae2
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 6a 19 8c 49 af 16 a2 4c 86 20 db b9 4e f2 b1 8a b1 ba 21 c7 37 69 14 1a 40 4b 2d 79 40 58 c9 20 bf bf 54 c5 20 2c 96 9d 20 05 01 be 98 2f ff c1 b1 82 6e 58 9e 9a a7 e9 5a 26 03 cd 8a 15 2e 2a 00 02 10 0d 84 e1 4f 89 fa 5e 05 00 28 65 cb fe 97 19 de 28 97 c4 47 c2 35 f1 d7 68 7c 96 94 8b 0f aa 10 1d 10 9e 24 c6 b3 19 00 15 51 3f 62 2c df f3 3d 01 41 45 45 b7 9d 3c f9 0c 8d f3 4f 6c ba 10 00 62 aa 5e 92 09 00 08 98 f1 86 32 20 a1 d9 6b 00 05 a9 4a 88 74 6d 8c c2 a5 67 04 12 3c b3 a2 e2 31 4a c5 46 63 29 ee 34 b4 a8 16 5e 23 3e 01 65 5f ab 79 c9 ec e9 06 47 79 5d 51 e2 fe a8 c1 dd e5 9b 29 42 d3 fc 8e c3 ae 4c 74 48 bc 11 bf 2c 93 ea c7 48 5e 4a 8d f7 47 e8 5a e7 50 32 08 1d 5e 2f a9 4f 87 04 e6 9d 2f 90 39 f7 1a 43 e5 38 49 49 de d5 63 ab 22 c0 84 ea a7 b6 Data Ascii: jIL N!7i@K-y@X T , /nXZ&.*O^(e(G5h\|$Q?b,=AEE<Olb^2 kJtmg<1JFc)4^#>e_yGy]Q)BLtH,H^JGZP2^/O/9C8IIc"
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 1b 6d c8 de f8 da 1d ef d7 7d ea ae 63 5a 8c 26 5c dc 36 91 e1 c1 c3 2f 5f 7d ee a6 f1 a8 a0 ab 60 a4 9e fa 80 94 60 a1 93 98 ab 76 ca 0f fb 8f 83 11 9c 75 d0 c3 c9 f7 7d 73 d3 7c 9e d9 8e 7f 5d a5 0a 62 29 d9 5b fe 81 00 05 74 7f 00 fe 9c 9e 6e 23 77 d3 ae b4 ad 40 5d a0 76 54 ca af 26 06 66 80 b0 7e 20 fe 2d b4 57 44 41 05 c1 05 11 1f da 5d 76 d3 8c 93 a8 8d c5 71 47 33 1d 9d bc 17 d8 b6 25 e1 e7 db 56 1b b7 b9 29 2c 88 24 e6 9a 8f f5 c7 73 af 46 35 e9 55 f7 c2 ec e8 d3 db 6b 75 12 dd ec 32 f3 59 90 1b 08 31 6b 48 7b 66 7c d2 6d 75 ea 92 14 a5 a7 de 29 35 af 66 bb 1b 83 3b b7 f4 75 97 d3 e8 6f 28 06 67 85 15 91 96 66 b8 7e e1 fc c3 45 dd cd a4 49 b4 7d 34 27 eb 66 65 a1 7c c9 b0 f8 96 8f 26 33 1c 33 98 99 a9 56 d7 4c 23 f1 39 8d d0 66 a1 62 b1 f4 20 78 Data Ascii: m}cZ&\6/_}``vu}s\|]b)[tn#w@]vT&f~ -WDA]vqG3%V),$sF5Uku2Y1kH{f\|mu)5f;uo(gf~EI}4'fe\|&33VL#9fb x
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: fd 4b 5e b4 fe 1f ed 86 f3 87 5d f7 be 46 96 94 0c ae ba 8a 45 d0 3f 6a c9 a7 4e 02 02 30 dd fe a3 d7 25 45 8d 88 e6 9e 38 d9 ac 34 f5 d4 0b 9f 93 96 f7 6b 97 00 95 4a f4 24 f1 33 b1 63 6f a6 09 60 d1 da ec 16 39 19 99 84 d7 a5 d3 5c 8e ed ae ad 54 3a fa 37 ba bb 77 e9 dc 6b 83 14 bb 48 9e 52 cf dc db 75 23 15 ac 45 26 59 c5 34 09 92 9c b1 b7 1f bd 2f a9 f9 14 59 6b 58 63 be d6 7d 76 c1 75 27 37 1b d7 bf 3a 26 df d3 4b 50 e1 7b 2c 6a ea ea f4 3b 9f ba f3 1a 53 c6 a0 1e 2e 4d 54 17 e2 07 38 9f 30 ea 9a 56 10 ee 81 59 0c 40 30 c8 b6 83 f8 ee 28 78 fe de 09 a5 3c 73 cd a0 2e 30 e4 b5 bb 16 3c 2b 32 4e 8e 62 08 33 5b b8 16 b1 dd 7c b7 48 7c fa de d3 c7 db 8e de 12 b1 d5 ba fc 86 b0 cc fb a1 99 e8 7d 16 76 98 62 fb a3 3e 24 ad b4 4a 2b d5 73 56 e9 58 6d 7f f5 Data Ascii: K^]FE?jN0%E84kJ$3co`9\T:7wkHRu#E&Y4/YkXc}vu'7:&KP{,j;S.MT80VY@0(x<s.0<+2Nb3[\|H\|}vb>$J+sVXm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
279	192.168.2.6	50205	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	1081	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s124-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:08 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:08 GMT Server: fife Content-Length: 3808 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	733	IN	Data Raw: 52 49 46 46 d8 0e 00 00 57 45 42 50 56 50 38 4c cc 0e 00 00 2f 7b c0 1e 00 09 86 6d db 46 82 dc f6 be 68 ff 85 ef bf 5b 20 a2 ff 13 c0 3f eb 28 67 22 4a ed 52 50 58 17 d2 e8 d1 2b a9 24 b1 91 13 8c ea 59 a7 ed c6 7c 00 88 32 f5 cd 0b 08 f4 b3 89 e3 b3 6f 2f 1c 47 b2 ad 54 83 bb 3b ab 1b 02 f9 c7 24 df 65 8f 43 02 4c 23 c9 aa d4 fc 91 af 88 80 fc a3 42 22 91 a7 ae 1c 47 92 a4 38 f9 3a 66 46 e9 d0 7f 97 64 86 9e fd 9f 00 e2 80 4b e6 cc 84 f4 2c f1 81 50 01 00 a0 ff 16 62 ec 0a 72 01 e0 c0 0f 70 cc b9 b8 d8 40 ae 84 58 0e 80 61 ce c7 c4 c7 04 20 76 c4 0e 54 b9 63 ce c5 c6 ce 5c 40 00 60 4e b6 63 ce c7 c6 06 4a 55 2e 88 5f 4a 94 80 6a 72 df 2f 13 e4 80 d0 9d bf dc 8e 55 11 60 b9 05 44 16 03 e0 6b 62 dd 92 38 fe 16 98 c6 aa b7 7d e1 dc 1e 4c b3 b6 29 92 2c c7 Data Ascii: RIFFWEBPVP8L/{mFh[ ?(g"JRPX+$Y\|2o/GT;$eCL#B"G8:fFdK,Pbrp@Xa vTc\@`NcJU._Jjr/U`Dkb8}L),
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 18 37 4e e4 9f 0a ea 18 57 61 66 3d f4 1a e9 f7 73 ff bd fc b0 83 7e 3d f3 f2 d2 42 f6 75 05 1e 23 3f a1 b3 06 60 4e ae c1 86 ce b6 c1 49 39 ae b0 b3 ae cc ad d1 74 d5 d6 f7 91 76 bf e7 62 3f dc 96 f5 6d e7 ae 6e d9 1f 42 17 6d 77 c3 27 67 7d 1f 9d 29 0a 77 ec f0 a1 1b 6f 08 dd 79 f0 f4 f1 f7 bf f5 4f 83 b9 91 43 9f 36 b1 25 1f 53 9c 63 2f 3d 12 71 38 ab 2a ba 0d 42 c1 77 d7 ef 97 7a ce 03 fd 3a de 95 cb e2 0a 7b c9 90 aa 63 93 68 30 40 c7 f4 af 57 4a d3 c9 8f 5d 1e 06 49 e8 23 14 69 a9 87 49 94 97 d4 ff 0d 92 be 56 ea 71 10 ae 3c 51 34 18 21 06 9b ee 2a 4a 44 42 04 b2 c9 3e 38 ad 9e 69 d5 b1 44 24 35 1d 0f 0e db 93 51 2d b6 a9 07 2c 92 64 09 65 15 d5 67 ef 3f 2f 74 aa 39 8d e8 d3 0b 5a 28 12 ac 54 0d 47 42 32 b0 5b 2d 2e 51 8f bb 4b bf c0 11 79 82 d5 79 Data Ascii: 7NWaf=s~=Bu#?`NI9tvb?mnBmw'g})woyOC6%Sc/=q8Bwz:{ch0@WJ]I#iIVq<Q4!JDB>8iD$5Q-,deg?/t9Z(TGB2[-.QKyy
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 3c 16 90 2e fb 8f db d6 f3 c9 7b 4d a7 7e 4d 8a ff 5f ff b7 cf 8f c5 af 2d ec a3 2c 3c 48 df f1 43 6e 77 f7 f6 35 72 e9 52 e9 b0 cb 79 63 38 4b 19 a5 53 3a 6d 84 e2 b5 34 8c 14 4a 5a 83 fb d5 9d 51 5d 1c d4 4c 38 53 1d 0c f3 9d b2 5b 23 5e b6 75 fc ac ad 1b 4d d7 05 a0 a6 ad b6 45 ff 89 06 6b f0 be cb d7 99 3f 92 ea f6 ce 1f f3 25 47 ed df b5 32 af 8f aa 9b 61 b4 da 31 d5 28 d4 0e 6c 19 46 c1 2b 52 79 b4 89 b5 48 b4 9c 0b bd e5 45 96 bf f9 12 2b 3c 5c 2a e7 ad c8 03 6a 3a 1a 32 f9 17 77 fb 82 ae cc bd 7e 5c 10 23 e8 36 1e e4 42 75 84 86 a2 21 8a c2 52 8c b4 8a 1c 6c 21 5c 4a dd 12 4d b1 01 4f 10 be 5a b6 79 1a 6f 2e 8f a6 8b 83 85 99 ef a4 c3 69 26 64 86 82 af ba 71 fd f2 17 8f 27 5d 7d b5 ba 40 b5 d9 fa af bf eb 85 dd d7 df 1d 44 1d ba 36 22 08 20 d0 17 Data Ascii: <.{M~M_-,<HCnw5rRyc8KS:m4JZQ]L8S[#^uMEk?%G2a1(lF+RyHE+<\*j:2w~\#6Bu!Rl!\JMOZyo.i&dq']}@D6"
2024-04-19 14:07:08 UTC	565	IN	Data Raw: b4 97 c9 e1 54 43 42 cd 84 30 10 4d a4 ed e4 d7 13 d9 54 af c3 0e 34 64 fd 07 18 07 18 a3 15 69 4b a1 f0 f0 3a 43 6e 95 59 85 06 d0 e0 49 57 de fb 44 1e 97 53 4d 5f 0b f6 f0 28 ce c0 10 f1 01 7c c0 3a 53 27 b8 4d 6f 92 f2 26 b4 20 2f 0e 38 19 6a c5 1b 90 98 21 16 99 eb eb 80 74 72 8e 72 0f f8 7a ec 15 11 ce e4 f0 44 3b 47 3a 70 f8 80 8b 3e 1c 69 42 3d a9 5d f0 ff 68 66 fe 32 7d 41 94 b9 29 38 28 8a 51 39 ba 81 f7 59 9a 63 9a 59 6f c8 8f a2 a1 00 1f 5d 42 9c 26 f6 01 a3 6b d8 52 22 60 71 60 a1 32 a4 2d ae 0e 8b 10 c0 52 91 1f 95 89 72 38 ce 92 6b 30 82 07 e3 2c 80 03 e2 a8 1a 06 3b 19 c5 3f 16 6e 88 06 c8 8f 82 fb 1f 13 4d f0 d1 90 2e 96 e1 e6 92 c2 60 2c 21 24 30 ce 10 92 69 34 0c b5 65 98 1f d4 68 6a 74 f2 c7 23 88 c1 c6 eb 93 5f a8 86 a4 ad 03 eb b0 d1 Data Ascii: TCB0MT4diK:CnYIWDSM_(\|:S'Mo& /8j!trrzD;G:p>iB=]hf2}A)8(Q9YcYo]B&kR"`q`2-Rr8k0,;?nM.`,!$0i4ehjt#_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
280	192.168.2.6	50207	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	1088	OUT	GET /Yld8nGY9Bomd8JIxg7mHNFvTgP-iJvYCWkJdcmDSMz3ZWY8YlscDTJEf08WOkJ7yMWce77Dxi9g=s56-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1106 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:33 GMT Expires: Sat, 20 Apr 2024 13:53:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 815 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	723	IN	Data Raw: 52 49 46 46 4a 04 00 00 57 45 42 50 56 50 38 4c 3e 04 00 00 2f 37 c0 0d 10 ff e7 a0 8d 24 47 f2 3e 7f 1c cf f1 d2 d4 05 12 0c da 36 92 e4 39 fe 40 8e e2 b7 13 06 6d db 08 f2 f1 07 f1 38 ef ff b7 c0 91 24 49 91 e4 59 cb cc 24 ae 74 ff 7f 16 89 8c a5 b6 6d 1b 06 9e 6a ca 1b 80 20 08 82 fa 74 14 82 a0 3a 5d 50 c8 60 8d 2d 8e d2 68 0c 10 44 7e d1 16 bc 14 bf 4b 9b a6 2e 64 6b 4e ca 55 a0 51 08 8e d2 f8 76 b1 18 63 8e 29 82 a0 a2 31 44 a4 d1 f8 c3 3f be f1 6f 24 5a 7a ad 81 cb 83 f1 bf 28 ac a2 d1 52 d8 18 10 fc 2d 0a 55 36 08 82 60 84 7c c0 a1 7a 44 97 22 08 7e d1 65 44 c1 0f 6e 6b 8e d9 7d 94 d7 2a 14 73 ee d3 12 a4 a8 88 40 08 be 4a 30 ae 88 a4 42 82 c0 9f 0c 12 fc d7 56 91 be 25 55 aa 61 45 84 5a e7 3f 48 51 21 95 e2 fc 7f 44 14 26 2d 49 85 cc 66 76 1d ef Data Ascii: RIFFJWEBPVP8L>/7$G>69@m8$IY$tmj t:]P`-hD~K.dkNUQvc)1D?o$Zz(R-U6`\|zD"~eDnk}*s@J0BV%UaEZ?HQ!D&-Ifv
2024-04-19 14:07:08 UTC	383	IN	Data Raw: 10 a0 7d cf 6b 4a 93 af 44 fa c6 9c bb 18 eb 8f ff 66 76 bd 11 3e 2d fd fc fd 11 14 ad be 57 50 56 f9 78 bb 37 e2 e7 29 fe 95 fa 8c 84 38 f8 1c 7a f7 ad 21 6e db 99 ea aa e6 0f fb bd 21 79 ce 8f f0 f0 c5 05 f3 f8 d7 9c dc 9c a2 f4 e2 ea 8f a7 fd 45 34 7d c5 ed 37 e6 d5 d1 aa a4 9c e4 47 af 72 52 52 ee ac 13 51 e5 21 fa 29 c6 3d ff e6 a6 e2 9b 9e 30 2d e3 bd 0b ad 15 2c 97 1c f0 8d c4 9c e4 27 af 99 34 24 77 08 fe 42 a2 83 6f bf 37 c4 6d 65 70 21 8a 7c bb cb cb 37 2f f2 7c b3 a5 cf ef a5 9b ce 5f 3a 40 92 df 0c fa d3 ed aa aa f2 af cf f0 fd c9 8c 51 ff 4d 27 e8 bf 32 60 30 03 bf 38 bc 33 3e 27 75 03 d6 2f 80 b1 64 fc 49 8f 91 1f ee 7e 49 e0 87 0c fc f7 44 7d 5a 7e 56 56 f5 7d 9c ff b2 f1 fb 92 ca f2 da 37 6b 30 7e af 0c fe b3 3f ed f8 b2 e7 f2 f5 a3 a1 98 Data Ascii: }kJDfv>-WPVx7)8z!n!yE4}7GrRRQ!)=0-,'4$wBo7mep!\|7/\|_:@QM'2`083>'u/dI~ID}Z~VV}7k0~?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
281	192.168.2.6	50206	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	1089	OUT	GET /0Kc4kyHqyq8zcMO7lev1TyvzQeuunYD0ZC8Iv7JZiXyoZSLb4k4xDQsd-ryTsJm-dceqvFPxWOaG=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:08 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:08 GMT Server: fife Content-Length: 144 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	144	IN	Data Raw: 52 49 46 46 88 00 00 00 57 45 42 50 56 50 38 4c 7b 00 00 00 2f 17 c0 05 10 3f a0 a0 6d 1b a6 ed 0e da e1 bf 48 c8 a4 6d da 6b 7a 27 7b 26 06 99 b4 4d 7b 55 e7 fc 8b 18 99 b4 4d ce 89 9a f6 39 1b 04 40 ef fd a3 ba 11 9f 29 40 14 60 14 db 56 1b aa 0f 24 74 0b ac 4b f2 26 4a e2 7f 41 07 03 11 fd 57 db b6 0d 43 cf a9 67 90 49 d4 03 00 91 56 fa ab 7e 5e 25 39 ac 43 93 15 b3 ba 24 57 ec d5 25 79 dd f9 ff 8c 7f 3b fa 79 60 64 1c 02 00 Data Ascii: RIFFWEBPVP8L{/?mHmkz'{&M{UM9@)@`V$tK&JAWCgIV~^%9C$W%y;y`d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
282	192.168.2.6	50208	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	1088	OUT	GET /XM6MUzHrZgnqgHqbNfNd460VSiWac9xFKsYVpSU4czPoBFVFOiI-R6qVHg_NcwwGJtWjlvGnZeo=s56-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:08 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:08 GMT Server: fife Content-Length: 1370 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	733	IN	Data Raw: 52 49 46 46 52 05 00 00 57 45 42 50 56 50 38 4c 46 05 00 00 2f 37 c0 0d 10 d5 86 40 20 39 7f f0 15 22 62 02 da 50 c6 84 64 db 6e 1a c9 fb 5f 6a 31 73 be 0a 6d 59 b5 01 8d 9a 99 b1 9a 16 a0 59 a3 ba db 40 da 36 f3 af f9 4f 09 24 6d e6 fb 77 be e3 da b6 d5 04 77 ed c2 1a 70 69 20 5a 85 35 90 51 98 ba 6b 19 59 99 43 1a c0 0a 88 e2 fc 50 80 f3 18 b8 6d a4 28 d9 3d 66 ec 7e 41 b6 6d db a6 e5 7c 5a fd 40 8c 6b c6 b6 6d db b6 cd c7 ca 53 d9 b6 6d db 38 fa 84 a8 b4 63 ee 1b 94 4f 6e b9 56 6b a7 e2 ac b4 8b a0 6d db f0 87 fc 37 c9 18 b6 6d 1b 36 57 d9 91 b7 fe 33 70 db 48 51 bb bc 07 c3 8f 50 96 61 39 e9 ca 21 2c 32 26 29 c3 4f ef 3e d4 e6 75 fe ff fe 09 c6 80 a7 5e 0b cb af 32 86 95 04 38 49 06 a8 ce b7 0d 74 80 2e b0 e7 b6 bc 5e 55 00 1e 40 06 f8 5b 3e 61 85 11 Data Ascii: RIFFRWEBPVP8LF/7@ 9"bPdn_j1smYY@6O$mwwpi Z5QkYCPm(=f~Am\|Z@kmSm8cOnVkm7m6W3pHQPa9!,2&)O>u^28It.^U@[>a
2024-04-19 14:07:08 UTC	637	IN	Data Raw: 8f da 78 e1 2d e6 de bb 50 9b 97 45 91 16 70 8d 35 db 69 64 91 24 44 e9 aa 91 6d 2d 63 b1 af a5 b1 4e 22 a1 65 f8 d6 47 87 ef db 65 5f e5 1f 3c ad a3 67 9c bc b0 33 ad 1a 14 19 01 fd fe 82 1d b6 cf 88 ba d9 d7 f7 f0 dd fb 67 10 52 ac de 2f 9b 8a a9 c3 d7 4a e6 66 44 1e 24 46 8e 59 d3 04 0c 2e d5 9d 04 87 7e 6a d9 34 ae e6 e1 c3 a3 5d f3 37 1d 06 5f 52 c3 a6 da 17 6b b3 8d 6a a6 01 5f 26 07 72 6f a2 8b 60 d3 52 55 b3 0d 96 59 f3 d1 59 46 6d de c5 a9 34 36 3a d6 86 c7 af 11 29 15 e1 94 51 33 19 bb 6f 28 f7 23 d1 0d 61 4a cc 42 35 db 6d 45 96 40 49 be 82 b0 af a3 d9 87 4e a9 86 30 c5 88 2f f3 3c 0d ae e7 d2 03 39 3f 14 7d de 30 b5 2c d3 d7 ab bd d4 40 96 10 b4 b3 12 76 95 b2 a5 a2 3b 3b 35 9b 8d 6f 90 33 de 00 6b 51 4f 58 35 5a bc 0a db 0a 4c b0 e5 cb 8c 8d Data Ascii: x-PEp5id$Dm-cN"eGe_<g3gR/JfD$FY.~j4]7_Rkj_&ro`RUYYFm46:)Q3o(#aJB5mE@IN0/<9?}0,@v;;5o3kQOX5ZL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
283	192.168.2.6	50210	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	1088	OUT	GET /D8lU2BDUjyA9IkpQd5aEs5WCL4-sBw_l0qcbRvh1Fnj6KCAry9N2egg9v5BX2KayzLPJBJJPNP0=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 240 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:33 GMT Expires: Sat, 20 Apr 2024 13:53:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 815 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c dc 00 00 00 2f 17 c0 05 10 af a0 a0 8d 24 65 2f e7 df d3 e9 79 66 06 1b 8a 1a 49 52 7a fd bb 5a 33 74 f0 e6 3b 45 6d 23 39 5e fe b0 96 c8 01 b8 7b f7 a2 34 92 ad e6 fd ff 51 d1 a3 a0 02 4a a0 14 fa 37 39 e9 00 00 f8 60 3f f3 b6 f6 36 f3 68 e5 fd a7 2e a0 4a 69 a2 59 fb e8 c6 f6 9a e6 98 06 fc 48 04 20 70 ef 05 b0 3e fe 7f 2f fc 6f bd 77 34 1c 46 92 e4 34 8b b7 ab 79 cc e5 1f 2c 1e 14 40 44 ff 15 b8 6d a3 64 78 8c af d0 23 f1 a5 3c e0 23 c9 e3 ba 10 f9 46 70 0d b1 eb 6d ed 44 4d 73 72 fe 53 8a 05 96 e2 0e 23 7d cf 78 87 64 c9 e9 be 7b b3 5a aa 6b e9 06 6d 37 a7 34 77 ed 15 e5 04 d8 c0 54 9e b3 32 54 99 94 55 03 eb 91 c0 c6 f6 6f 57 32 36 f1 e0 bd 1e c8 df ff 2b 01 Data Ascii: RIFFWEBPVP8L/$e/yfIRzZ3t;Em#9^{4QJ79`?6h.JiYH p>/ow4F4y,@Dmdx#<#FpmDMsrS#}xd{Zkm74wT2TUoW26+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
284	192.168.2.6	50209	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	1088	OUT	GET /V358DKJP2RLO71dDY-utlVRUtUqd5i9peLoaLnpV7zt1J-xFk__7_sx-AymkIjt-kil_XrG3biQ=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:08 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:08 GMT Server: fife Content-Length: 190 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	190	IN	Data Raw: 52 49 46 46 b6 00 00 00 57 45 42 50 56 50 38 4c a9 00 00 00 2f 17 c0 05 10 97 a0 28 92 d4 68 fc 4b c2 07 3e 78 dd 90 d8 50 d0 48 6a b4 fe 2d a1 04 05 38 f8 a1 55 d0 b6 91 13 fe 74 8e c9 91 59 3f c2 34 00 80 34 b8 27 27 3a 3c c1 ff ff 4c 73 00 00 e0 00 02 8c 99 5b 24 86 6a 1e f7 b2 77 4f be fb fe 23 9b de ff 61 be bd e5 7f c1 ff 02 3e 57 75 ab dd 4b c1 b8 8d 24 45 bb c7 d8 7d 7d f9 a7 3b 70 f8 8e e8 ff 04 94 87 76 a2 5b 9d 25 f8 20 8b 2c 6e f2 1a f2 17 ac 6d 42 73 d6 32 ec 47 c2 86 a5 07 31 87 26 90 20 89 31 e2 f6 08 74 43 56 27 9f 3a 2b 37 4f 60 d0 ea 94 75 77 00 Data Ascii: RIFFWEBPVP8L/(hK>xPHj-8UtY?44'':<Ls[$jwO#a>WuK$E}};pv[% ,nmBs2G1& 1tCV':+7O`uw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
285	192.168.2.6	50211	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	506	OUT	GET /u1RTeZ-HJFxTOn4ok8l_EjY-XIeYZFSZMFM6T9CrI3-LESxvx4U75SconHwXXw3TCU8D=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:08 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10446 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:05 GMT Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:08 UTC	724	IN	Data Raw: 52 49 46 46 c6 28 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 ff 00 00 ff 00 00 56 50 38 4c 7e 28 00 00 2f ff c0 3f 00 55 e9 bd ff 7f 99 23 d9 a9 65 86 61 66 9e e6 56 73 8b 55 25 15 4b ea ee 1d 5c 1a e6 59 ec 59 1c 66 9e e5 dd 1e 66 86 9e 1d 5a 66 e6 1d 86 66 ee 9e 1e 66 3c 5b f5 7b 7e f5 a8 25 3d 75 af 99 6d 19 3a 28 33 93 cc f6 1f c0 32 33 db 4a da cc 6c 97 a1 43 83 0c cb b9 e9 31 33 5d 86 32 64 cc 24 b3 3d 47 06 19 64 66 28 b3 9d 3e 89 41 c1 64 8e 98 64 de d8 50 a6 39 c7 6c cb 20 c3 c5 cc f4 98 19 e6 f2 bd 3a 47 f7 1f 30 83 42 33 28 30 46 ec 27 91 99 d9 2e c3 3f 30 0a 96 da f0 0f 58 81 99 71 49 66 0e f7 31 f4 85 90 49 86 c8 d9 65 e8 b3 a1 33 99 21 c3 9f a9 cc cc 76 99 19 9e c4 d4 86 10 95 ec e5 7b c3 de 40 86 78 9c c9 a0 60 52 b3 5d c6 3f 40 Data Ascii: RIFF(WEBPVP8XVP8L~(/?U#eafVsU%K\YYffZfff<[{~%=um:(323JlC13]2d$=Gdf(>AddP9l :G0B3(0F'.?0XqIf1Ie3!v{@x`R]?@
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: b9 a6 a2 bd 62 5b 08 a0 36 d5 68 ae 58 45 b1 b0 54 2d 64 9f ed b5 dc 76 4a 88 52 a4 94 6c 37 33 44 d0 d5 5f b6 76 35 38 5c f5 60 4e 57 a3 ee 3c fa 6c cf 43 3f 6e 62 b6 14 25 23 b3 36 9c 2b b2 ea 66 77 3d ae a5 73 b6 33 70 2a 6a 4b 88 d3 69 1e 38 0e 1e fc e0 4b 2a ba 06 5a b1 2a 0d aa 9f d8 2e 5f 76 df 76 1e 47 72 03 03 a7 aa 5a 2a e6 95 fa 65 a5 5f 97 98 94 9b 61 8c 22 80 4f aa bd ec 6d 6a 70 78 ab bd c6 62 05 3d e1 a3 52 db b9 12 b2 0c 65 d6 6b 91 4a 92 a1 fb 3d 3f 2d 51 72 6b 0b 5c 41 57 52 78 0f 1e f2 79 89 a2 73 49 bb 4d 65 4e e9 e0 1f b7 bc 24 87 ab 36 87 98 a3 14 0f 82 4f f2 8b 12 b1 c8 f0 80 60 84 88 0a c7 6d 64 98 31 17 0f 6e 7e 6c 5d 84 51 cf 20 15 0f 23 af 76 8e ca 5c 5b 03 6f ce 6d 20 e6 2a 45 89 22 85 ec 08 19 49 af a2 f9 6d 8f 36 6a 1d 03 87 Data Ascii: b[6hXET-dvJRl73D_v58\`NW<lC?nb%#6+fw=s3pjKi8KZ._vvGrZe_a"Omjpxb=RekJ=?-Qrk\AWRxysIMeN$6O`md1n~l]Q #v\[om *E"Im6j
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: fb 7c 2b f0 8d 96 a0 cc 8c 01 a6 76 f0 c1 53 41 fc 7d bf a9 3a 96 24 c8 50 12 74 3d 01 24 48 33 03 d5 b5 20 8f 84 bf b8 b8 5d e6 29 72 72 db 00 76 02 8a ab 9f b3 d4 cb 96 4b 2a ff 2b e2 11 b9 5f 7a 6b a4 01 b1 b0 64 f9 be cf fa 6a 23 12 3f 5a 5b 05 c4 0c 9a ee a4 b3 0a 59 a4 7f 10 7c 65 45 96 7a b8 c0 9e 66 87 d7 f2 60 15 38 c9 9a d7 b9 42 4e e8 ce a8 cf a8 12 21 37 99 08 c5 8c 80 7d a0 e0 03 0c 1e 31 78 04 f4 70 d8 c3 06 0f 1b f4 84 87 0f aa 45 7a b9 97 36 da b4 44 c4 ea 7a 9e 8b e7 01 d1 44 83 2a c8 7b b9 f9 31 5b 58 40 8c 52 f2 3e 26 09 d9 f1 36 64 80 e2 c1 53 6b 03 c4 ec 39 cb 36 4e 2a a6 79 f0 7c c3 10 73 e6 1c 62 d3 5d 4b 74 b4 ca c7 96 01 25 da f2 e5 d4 72 b4 d9 7c 55 36 46 8b ac 44 e4 bd 4c 33 0f 88 0d 01 54 41 56 ae 0c fb 20 5a 1c d6 c6 16 d7 5b Data Ascii: \|+vSA}:$Pt=$H3 ])rrvK+_zkdj#?Z[Y\|eEzf`8BN!7}1xpEz6DzD{1[X@R>&6dSk96N*y\|sb]Kt%r\|U6FDL3TAV Z[
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 1c 56 6b 8d fd f0 ed 05 95 88 88 f1 7a 82 f8 f6 43 ec ea 94 90 cd 0c 42 31 a8 36 99 07 97 13 48 72 10 27 ae d9 67 db 49 79 11 72 12 63 b0 86 8d 7f 23 2c cc e9 34 29 df 51 79 45 b4 5e 0b cc 9e 42 52 ec 8b 71 10 a7 53 50 82 48 e0 21 19 39 c2 28 58 96 23 94 1c e4 32 3b 96 e8 48 33 03 4e 4e 8b bc b6 eb 84 38 75 c5 4e 05 59 09 34 43 10 3c 58 5d 7d d9 62 92 51 cf c4 18 3c ba b9 47 f9 ed b4 02 d8 3a fb fb a5 26 26 65 25 18 81 13 69 7d 35 8f 5f 0c 8b b3 a8 24 25 64 a6 8a 59 f1 e1 fe d4 61 5a 84 c4 c1 7e cd fc 82 30 a3 e4 f1 7d 4b 74 c0 89 c7 97 bd b2 00 e2 ed 88 6f ac e8 5d 12 9d 40 9a f5 48 8b 50 2d f2 ee f5 8f e3 49 72 10 23 af c3 95 55 90 e7 30 6b 89 41 dd 52 1e c4 ef cb 67 0b 51 02 b4 2f ba c6 a5 79 f0 ea f2 69 3b 6a aa f5 0d b0 c9 24 dc 91 6b 56 f3 4a ea 96 Data Ascii: VkzCB16Hr'gIyrc#,4)QyE^BRqSPH!9(X#2;H3NN8uNY4C<X]}bQ<G:&&e%i}5_$%dYaZ~0}Kto]@HP-Ir#U0kARgQ/yi;j$kVJ
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 7a f4 e8 81 b9 ab 7b c4 80 89 1e 2d f6 ce 57 16 0a 79 ff 2f 42 a8 07 ba 10 93 98 a8 4f 64 54 be e7 83 41 b9 be 2f c4 30 36 7d 22 13 a7 fa 08 1a a1 00 6c 2d c3 5c 48 45 1c 14 16 a7 05 86 0e 1e 2d e4 c0 13 85 81 49 ac 31 ef 41 19 e1 8f 32 17 42 48 55 4e ad 32 d5 a3 05 22 04 04 ab 28 46 8b 10 42 61 61 b0 3c 0c cb 5c 28 0e 21 43 8f 10 c4 60 45 02 e7 1a e7 49 29 ca e5 b0 bc 42 db b3 ed 1f c2 c6 40 3f 79 b4 56 cd 33 ea ff b8 ef 48 51 7d 35 bb 6b df 12 b4 8c 6d 97 93 a2 12 b5 aa 56 b1 3f 76 d4 35 c8 b0 cd e1 f0 11 c2 b0 80 d0 7a bd 3c 28 dc fc 21 f4 d8 2c 31 31 01 d8 ec 37 f6 1f e4 30 9b 6d 5a 14 c6 32 8a 08 51 e1 51 1a 2d 82 e4 fc c6 fa 6b 08 0f 8f 62 94 a9 be 71 d4 35 14 72 85 d0 a2 e4 a8 ec a8 44 96 a1 f5 d7 00 49 12 ee 4f b2 99 a3 6c cc 85 90 21 e4 0c af 7a Data Ascii: z{-Wy/BOdTA/06}"l-\HE-I1A2BHUN2"(FBaa<\(!C`EI)B@?yV3HQ}5kmV?v5z<(!,1170mZ2QQ-kbq5rDIOl!z
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: a4 3e 0c 45 7a 36 eb 71 41 2c 57 31 e0 79 fa 44 a6 89 49 fe d4 aa 70 33 95 ac e0 6d ca 95 a1 6c 71 ff b6 e6 fd 86 c5 e7 f1 50 bd ce bd 09 00 36 db 52 10 95 99 61 67 90 4f df cb e4 c4 f0 19 59 72 de e5 4a 02 ee 03 a5 a2 06 de ce f0 c2 bd cf cf 2f 1d 33 43 b9 6c 67 af a8 8e be 44 6f 54 a9 87 d9 ff 71 5b db 00 da c0 a2 37 77 89 d6 29 6e 57 30 ab b1 5d c7 17 80 ea 4c e3 fb 96 08 d9 0e 79 90 9e f1 ec 7a d2 99 a0 85 0d 35 90 be ac 97 35 cd 9c 1c 60 85 0a 1e 44 47 01 4b 48 43 4c 94 20 49 19 6b a8 a7 6d ae 5c 60 90 49 34 cf ea cc 60 03 48 c8 ab 9f b3 2f c5 41 6c 04 a0 d2 05 91 42 66 46 1c 52 e1 71 f5 84 a7 1d 92 24 64 36 20 f8 63 d7 78 dc b1 d2 bb b9 9d 1a 36 39 79 76 c9 81 af b3 20 57 ca d6 23 2f 37 9f 88 6a 9b 59 7c 5e af 1b 3b fa 31 45 4c 47 06 09 96 84 ed b8 Data Ascii: >Ez6qA,W1yDIp3mlqP6RagOYrJ/3ClgDoTq[7w)nW0]Lyz55`DGKHCL Ikm\`I4`H/AlBfFRq$d6 cx69yv W#/7jY\|^;1ELG
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 55 5f 7b 5e 4d 0e 34 79 ae 0a bd 7c 79 00 cf 88 e0 6e eb 6f 5f b9 82 83 56 1b c3 0c 05 54 7a 8e 53 4c ca d6 0c b4 3b af a9 c0 f0 89 83 1f 5d 94 4d b3 f0 62 58 d6 38 c2 4d 1c 60 c4 b5 bc 47 9a ee e6 f6 c1 f7 1a 01 7f d9 b5 37 68 6d 0b aa f4 d5 e0 7b d3 4c 29 59 25 a8 78 d0 f7 7d 03 0d d5 0e ad 49 9d b4 02 b3 b5 36 55 74 ae 5f 10 44 f5 05 fd 5c 76 df c8 22 09 73 df f1 09 a3 3d 44 6b 08 c5 8e 58 7b 03 76 66 df 5f be b9 bc 68 5d 36 cd b2 c1 de 1f 7b ef f3 4f 73 e7 7a 2f 1c b4 6e 7c dc 79 f4 ea b7 4e a9 3a b2 ff e3 69 cd 1a d8 05 3f 3a 42 25 96 f5 27 0e fe ba 9f 50 12 dc bc 50 e9 b1 02 d4 c1 d2 00 f7 d5 bd 6f 43 f1 04 cd 95 b2 5c 5b 63 0d e1 e7 dc 02 f0 22 fc dd d9 5d 30 72 a0 dd 8e 63 71 68 85 47 54 7f 7e 81 3b 8f 47 93 1c bc eb f2 bd 97 2a 19 44 f5 25 fb 6a Data Ascii: U_{^M4y\|yno_VTzSL;]MbX8M`G7hm{L)Y%x}I6Ut_D\v"s=DkX{vf_h]6{Osz/n\|yN:i?:B%'PPoC\[c"]0rcqhGT~;G*D%j
2024-04-19 14:07:08 UTC	1255	IN	Data Raw: 52 01 66 7a 54 9d d3 7d 59 3a 07 49 5e df ef 3d 60 1c 1c 60 91 5a d4 8a 96 1c de aa 2b f0 8c 32 b9 74 3d 6f 4e 18 71 b4 0c 55 e9 ba 16 29 19 14 52 72 7e f5 f3 fc fb 4a b8 8f bb 24 e4 ee 24 58 52 96 e6 c7 37 d3 80 1e 77 d2 1a 39 ea 63 2e 01 00 9d 59 71 4b 9d 3b 89 a2 14 8b e0 6c e4 7e 5c e0 c1 f5 e6 80 ca eb 28 df 49 10 47 74 e6 15 38 64 c4 9b 99 79 2d 0e b0 82 a2 82 57 7a ac 1c 8d b9 f6 8f 7a 74 9f 20 47 8c 74 48 89 be 64 aa ad 01 14 30 0d 9f 99 e0 45 97 ef a1 89 45 53 8b ef 7b db b7 7d db 4d 01 8a 6a 62 00 af 94 fc 4f 3b a6 57 6c 3d 4f 2e 28 da 9f c5 83 5b 1b 05 7e 57 40 d3 9e 43 d7 2b 85 93 8b 93 7b e4 df f1 21 f9 12 fd 48 42 92 10 25 24 2b eb f7 8a c8 62 22 b9 af f1 19 46 18 99 4d b3 76 3f ef 25 3e 00 e3 37 76 8e d6 a9 60 ef f0 5d 7d bb 30 17 b9 bd 95 Data Ascii: RfzT}Y:I^=``Z+2t=oNqU)Rr~J$$XR7w9c.YqK;l~\(IGt8dy-Wzzt GtHd0EES{}MjbO;Wl=O.([~W@C+{!HB%$+b"FMv?%>7v`]}0
2024-04-19 14:07:08 UTC	937	IN	Data Raw: 35 5c 53 40 95 73 ad 4b 76 58 a0 f7 f9 de 96 07 05 54 66 65 df 94 b2 6e 89 14 93 1c 16 f0 90 c0 2e 0e de 09 88 72 c1 9b 48 ce 0e 3f 1f 10 c1 c3 f9 26 72 b3 31 37 2c f1 ad 01 49 fa 6a 56 78 f2 35 e8 5d fa 49 e1 aa 17 5e 58 48 f7 d1 ed 14 50 35 9d 0b 1d e1 c0 6d b1 57 f3 4d 81 25 08 2a bc 06 19 92 66 43 42 07 a0 69 96 76 48 82 ae 40 44 be 82 ec 6b 70 38 c2 f5 34 0d bd 31 34 ab 91 a2 92 af 40 8c ba 82 6c 47 a1 23 db 22 43 d1 72 62 1c 6b a7 69 0b 49 92 34 ad 81 0e 45 b0 2c 4d 5b e8 6c bd c6 ae a1 69 4b b6 32 95 8a 48 24 69 a1 e9 7c 60 e4 32 9b 84 dd af 71 71 ac 8c 4c 5f da d2 9d a4 69 65 40 0d ad b2 94 89 58 d6 6e a7 2f 4d 43 6f 69 3e 2b 63 d3 8a 22 2d 34 cd b0 21 a2 b5 f4 4f a1 b9 eb b3 58 68 a0 ec ac 8a a2 69 5a 4a b6 58 68 0b 0d b9 3f 70 c6 63 30 eb 8c d5 Data Ascii: 5\S@sKvXTfen.rH?&r17,IjVx5]I^XHP5mWM%*fCBivH@Dkp8414@lG#"CrbkiI4E,M[liK2H$i\|`2qqL_ie@Xn/MCoi>+c"-4!OXhiZJXh?pc0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
286	192.168.2.6	50212	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:08 UTC	505	OUT	GET /yF_33aFN-fZEfauonfFi6mQuDBPMrDkjVCUl1Fdl0asUIP8Y3sugy7NuF2gY6vti7KU=s256-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8188 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 14:07:05 GMT Expires: Sat, 20 Apr 2024 14:07:05 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	725	IN	Data Raw: 52 49 46 46 f4 1f 00 00 57 45 42 50 56 50 38 4c e8 1f 00 00 2f ff c0 3f 10 55 07 db b6 8d 24 51 fd 97 bd ef 5d 74 97 45 c4 04 f8 5a ab 87 fe f9 36 75 91 a6 86 52 a1 92 62 75 7d 47 76 b0 61 96 c2 c4 c2 1b fd de ff 77 ec 97 fb 7f 47 6c 73 ec 99 bd 63 db b6 6d db b6 6d db b6 ad 6d 8e 3d 1b 63 db c6 b5 d6 6b bf ae eb 3a 8f e3 7c 9e af b3 9b 9c b1 53 b2 b4 93 4e d5 cc 55 c6 36 ab 94 56 99 2e 7f 43 a6 9a 7f 20 b6 93 c9 54 59 6b af d4 36 3a 3b a9 b8 bb 47 58 1d 5d dc 39 a9 6d 27 7b 0d ca a0 33 2a 27 9d 9d 2b d5 74 aa 62 db c9 35 b1 db a4 9e 95 6e d7 71 b2 b3 ab bc 5e 71 d2 da 2a 8d 5d bd ba 38 a9 6c 4e d2 db 49 c5 ce 53 c5 28 5d 19 ff 40 d6 3a e2 a4 b4 6d d7 b6 9d 54 d6 ae 62 bb ca 1f 60 3b a9 a6 8a 53 5d 7f c0 ab 8d cd b7 6d bf df 9d df e5 ac 60 97 41 f9 c6 5a Data Ascii: RIFFWEBPVP8L/?U$Q]tEZ6uRbu}GvawGlscmmm=ck:\|SNU6V.C TYk6:;GX]9m'{3'+tb5nq^q]8lNIS(]@:mTb`;S]m`AZ
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 58 0e eb 7a 35 af 32 7e 18 cc 51 e5 63 ea 7d 95 4c ac 50 c5 90 3b 06 73 c6 49 9d 76 9b e2 76 6e 69 76 fe 43 ed 77 9b 82 8b 2a 2d d3 3b b7 34 41 dd 55 0e d5 33 07 95 4d 69 ec 93 a6 18 95 4d 79 a1 15 06 73 1a 2c 87 24 4d d3 7e 7e 59 73 9a 7b f8 a4 a9 86 06 2e 2f 4d d6 ca e4 3c 76 4a 95 96 fa d9 6d b6 b8 ab 1c ea 3b 27 d4 f9 df 55 ee 93 a6 1b b5 ef f6 85 43 ce f1 0f d2 84 bd dd d5 1c 51 c5 25 77 d2 8c 71 57 2e e5 de 01 87 74 4b 73 8e 95 d8 33 76 69 d2 4e c2 8e ad 56 2a 45 66 8d bb ce cd be f2 4d c9 d2 b4 4d 29 c7 bd 2f ea d8 1c 83 db bc 71 bf 2f 06 cf 95 26 6e e5 97 b2 89 c1 3f 98 39 85 fb 50 8f 7f b7 51 9a ba 75 6e 9f 47 cb 8a 67 ee 54 7e 29 6b cb 4a 69 1f 98 3b b7 b3 4e 2f 4d de 3f 59 91 d9 53 e7 be a9 8e 67 f6 f4 61 9f 66 cf c5 2b 9d e2 d2 ec a9 74 4a e3 Data Ascii: Xz52~Qc}LP;sIvvnivCw-;4AU3MiMys,$M~~Ys{./M<vJm;'UCQ%wqW.tKs3viNVEfMM)/q/&n?9PQunGgT~)kJi;N/M?YSgaf+tJ
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 61 28 a1 b6 ba c6 42 d5 43 f6 7f 0e a9 e1 1a 54 64 98 23 96 15 1e 17 1a 6f 8e 12 44 78 42 d5 e6 0a 7e 10 a4 65 97 bd 1d a0 03 2e 0e 22 30 25 0e cb 45 0d d6 60 32 9a 6b 9b 54 28 a1 2d 6e 39 a0 01 a5 e0 4f 6e a0 25 1b 80 a0 52 05 c2 09 1e ab 7d 88 fa 07 28 d1 a3 21 c7 e4 3b 2b 8b 2d 39 4c 58 85 b1 b4 7b bb 46 05 92 1b 61 6e bf 2b 25 82 ec 44 ea ba 0d e1 6f f8 9e 3b 86 03 84 24 13 94 72 f5 75 db c6 78 38 2c 24 97 89 0d 35 64 2e 62 d7 28 72 db bc 41 44 d0 65 17 48 b4 ab 09 a8 fe 04 c4 a4 ac e0 bc b2 45 1e 0a 75 f3 5e 9c 43 16 34 94 6a 8e 59 f1 a4 11 b7 8d af 1e 5c 42 1a 30 c7 bd 88 48 99 b0 ab 62 3c 30 7c c0 dd 97 1a 1e 4a 6b 9b 5b 90 06 dc 96 5a b9 31 73 0b 6a 42 9c 0a 4d 07 f9 80 88 78 5f 30 4c 84 10 f0 00 01 17 81 67 55 b8 24 47 df 3b e8 82 3f 77 ef ae 64 Data Ascii: a(BCTd#oDxB~e."0%E`2kT(-n9On%R}(!;+-9LX{Fan+%Do;$rux8,$5d.b(rADeHEu^C4jY\B0Hb<0\|Jk[Z1sjBMx_0LgU$G;?wd
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: 9a 02 5e 2e 01 97 1f 10 58 26 0f e9 91 41 ff 46 3d 90 37 fe 0c a2 29 89 e4 55 ca 66 56 8f f4 b9 37 c3 42 67 28 14 af 4d b4 02 43 43 f0 6e 92 61 a5 9c db 0e 41 52 4c 51 20 0f e9 11 f4 e7 ca 0c af 28 6e ab 10 4b 42 4f 3f 6f 39 29 4f f3 cd 81 d8 a7 49 ff e9 01 ef 01 81 77 75 2a 64 02 ee 3b d8 a8 c0 af e2 06 4a b5 d9 2c 08 84 81 d5 7a 1b 4a b4 af e9 ce d1 08 30 8f da 6e 23 22 ee 3b 79 93 28 3e 8c 42 94 8f 1d 70 4b dc 63 81 c1 e6 2f 83 a1 b1 51 bd 09 23 36 54 49 60 33 02 01 51 81 70 e0 2f a8 8b e4 3b 95 fa 7f 51 81 ae b8 8a f1 9c 6e 54 c4 f4 10 86 17 78 e8 96 20 1e 01 b6 d5 b0 e2 29 01 8e 02 2e 01 3c cb ff 06 ca ce 2e b8 80 b0 f4 09 86 46 80 80 1f 6b 96 79 3c b4 cd 94 bf a4 b0 79 bc 88 98 3d ca bf ac f0 4f 26 6b 62 f5 f2 17 51 0e 0c 4f 01 97 a8 54 aa 77 33 8c Data Ascii: ^.X&AF=7)UfV7Bg(MCCnaARLQ (nKBO?o9)OIwu*d;J,zJ0n#";y(>BpKc/Q#6TI`3Qp/;QnTx ).<.Fky<y=O&kbQOTw3
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: bb dc f9 fa 4c e5 60 90 dc 92 54 b4 9f 8b 1d 1f 8e 1d 6a c2 bf 18 b5 f4 9b 2c 29 c8 c7 98 31 5d 2e 69 fa 76 df 7f ba ef 3f 05 87 06 3b d7 30 7d 23 7f 74 65 fa 86 fd a2 53 30 47 6a fe cc 45 e8 d7 11 ff 6b 49 7d cc 5c 47 ec 5d 04 48 08 81 3d 84 30 6f 5d 15 31 d0 b3 9c e5 2c a6 d2 fc 60 23 ca 5e 43 fe 65 c4 89 d2 0b d3 08 50 1b 2b b4 c1 a1 05 0a f5 20 16 ad ca 04 5c bf 96 f4 d7 02 d8 98 53 96 b7 66 a9 7a b3 4d 00 6e 7a 72 2b 1c ae 54 7a 71 65 65 8a d5 16 3f 7b 23 29 21 18 22 85 eb aa 4f 92 25 9d 76 5e 4c f1 1f f9 d8 4a 08 65 56 c9 a1 1e d6 37 49 67 48 53 7d 9b 2a 92 10 c6 36 86 34 5f d0 f0 d0 21 48 92 9d 92 1d b5 86 fc 1f 4b f1 b5 a4 5f 0f 92 25 3b 9d bc 68 6d 04 5f b4 40 96 88 1d 46 4c 8f 34 4a c5 91 89 8d a1 48 37 92 a5 51 da d9 c1 f2 f3 88 af 21 7f 87 4d Data Ascii: L`Tj,)1].iv?;0}#teS0GjEkI}\G]H=0o]1,`#^CeP+ \SfzMnzr+Tzqee?{#)!"O%v^LJeV7IgHS}*64_!HK_%;hm_@FL4JH7Q!M
2024-04-19 14:07:09 UTC	1255	IN	Data Raw: f2 2b 93 11 3a 7a 9b d7 6e 45 06 0d b6 1f 40 3e ed 46 92 64 e5 cc d2 d3 4b 71 f8 3b aa f4 f8 92 44 a7 20 15 ad cb d7 97 5f 9a bd a9 9d 18 7a 80 24 1a 18 e4 29 99 d3 a3 c4 e1 75 af 0e 34 38 fc a5 00 48 33 e8 2f 9f 11 2b fc eb 12 2e aa 04 1c 2c 13 8c 36 fe 75 35 62 6a 8c 36 d1 4d 60 e9 fb 77 74 46 b4 f0 d6 2e 4d 1f 04 f6 db bb 42 00 4c bf a2 4a f9 fd 49 83 37 b6 b3 b6 fc 13 2d d0 23 b5 b1 62 2c 10 76 e9 ae da a2 2b de 96 ce e4 9c e6 d8 bf a9 83 1d 88 9c 9e 4d 73 05 5a af a2 84 d5 1c bf 1c 94 1a c8 cd 5d 2e 47 88 7e 97 f0 d6 2f b3 88 18 32 ba ef dc 5c 71 72 89 10 b8 1b 05 bf 51 75 72 bd c9 3e 91 2f 81 2d 97 3f be 6b 0e fd 42 6e f7 36 ac 7f 74 b5 f7 36 3c 3b 77 a3 70 03 9d 88 92 23 ad 18 7c 8b 72 fe a5 bb 78 5a 86 00 bc 0d cb 2c 83 7f 45 91 36 a9 21 5c 52 33 Data Ascii: +:znE@>FdKq;D _z$)u48H3/+.,6u5bj6M`wtF.MBLJI7-#b,v+MsZ].G~/2\qrQur>/-?kBn6t6<;wp#\|rxZ,E6!\R3
2024-04-19 14:07:09 UTC	1188	IN	Data Raw: fa 90 12 45 f5 44 70 be 9a 00 83 e6 cf 1e 52 4f 1b cd 9b ce 88 ae 11 f3 64 5c 5e f1 6c c6 02 75 c5 fc d5 05 51 cf 23 8b 16 4e 77 c9 cc 2d 13 37 80 c7 76 da 56 96 6f 43 5d ed 0e 5a 36 d6 80 a6 80 6d d5 48 45 53 70 1e dd d9 85 64 f8 6f 8f 82 7a 84 5c ff d5 4d 20 e2 37 26 fe 49 e4 4f 1e 47 06 c1 74 8a 03 07 86 4d 2d b3 7c b2 b8 7a a4 39 51 73 65 25 51 fb ee 38 4e ed 0f 1a f8 96 a5 f5 9b a9 1b 85 fb 95 05 3c e8 29 78 dd 10 ba e5 89 3e 45 21 ca 2e af 60 b3 fd 3b 12 dc 02 46 b6 21 ba 5c 20 2d 6a 94 52 9e d0 01 05 15 38 6f c8 ab fd da b2 c3 76 72 ce 3c 1a 98 4c cf 15 12 e6 0d 35 4c 77 eb 76 d8 4b 09 df 2f 32 1e 21 df b4 8e d8 0b 17 e1 df 2d cd 92 f0 ef 28 3b 08 50 50 0f 82 5d 82 74 ab b2 f3 ab e2 e5 6e 64 e0 90 ae c1 0e bb 8f 63 f4 a9 ff c0 b4 10 b1 d3 d3 b0 76 Data Ascii: EDpROd\^luQ#Nw-7vVoC]Z6mHESpdoz\M 7&IOGtM-\|z9Qse%Q8N<)x>E!.`;F!\ -jR8ovr<L5LwvK/2!-(;PP]tndcv

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
287	192.168.2.6	50213	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1087	OUT	GET /TXeP-H2Ed1mhoPVB_CJApRXYyewNk1NTKykuQpLQ_YlkUPUXpOR3-zUkvIxYlXd5Llwi6m2USA=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 208 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:33 GMT Expires: Sat, 20 Apr 2024 13:53:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	208	IN	Data Raw: 52 49 46 46 c8 00 00 00 57 45 42 50 56 50 38 4c bb 00 00 00 2f 17 c0 05 10 7f a0 20 b6 0d eb 12 47 77 35 34 50 85 fd 6f 0d 05 91 6c 50 37 fa 77 11 47 04 15 fe 28 68 db 86 c9 f8 d3 18 a3 81 f9 47 69 24 29 d2 22 c1 fd 90 0b c9 90 bf b9 00 ce 04 00 40 01 33 a0 f0 1f 57 dd 5d 2d 95 c1 f2 4f 69 76 1f e2 f3 e0 01 c8 53 11 1d e1 1f 6e 6a 6d 7b 93 27 3d 16 b2 65 ed c1 49 0c 20 a1 4a 60 67 02 01 11 40 9b 31 00 63 75 d1 fb dc d3 63 20 a2 ff 13 40 f9 9f c3 c4 10 2e fb b8 e9 0b 86 75 62 e7 43 18 1e ad bf c1 f2 af bf d4 a0 73 34 fe 98 45 a2 b9 eb 11 53 db 35 16 91 14 47 f7 b8 d4 49 60 eb 91 22 b6 12 97 61 e2 0b 9e 49 21 e5 07 00 Data Ascii: RIFFWEBPVP8L/ Gw54PolP7wG(hGi$)"@3W]-OivSnjm{'=eI J`g@1cuc @.ubCs4ES5GI`"aI!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
288	192.168.2.6	50214	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1088	OUT	GET /ELKhrJ7hv6iWk1rEBNgrzxEpc0cHXmWbyvwtoXxT3lWAz9h6cuBEjEgw3fhf4HD5VqbrLhTgj2g=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 138 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:33 GMT Expires: Sat, 20 Apr 2024 13:53:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	138	IN	Data Raw: 52 49 46 46 82 00 00 00 57 45 42 50 56 50 38 4c 76 00 00 00 2f 17 c0 05 10 4f a0 90 91 24 e6 fc 25 8e ea 54 be 17 0d 85 6c 24 41 e3 8f b1 52 cb b0 0a f7 2a 68 db 86 09 7f 04 c5 35 38 37 66 da b6 b1 54 5a fd 4a 6c b0 77 06 80 c5 d6 81 ca e4 3a 3c 1e fd ab ab ff 31 60 14 49 56 ab ad 42 0d 77 34 24 21 0c 7a 92 e4 f4 e3 3d a2 ff 13 a0 e7 57 f0 66 11 01 b7 28 80 07 b0 b3 e9 90 8a 96 fc 41 de 4a 2c 87 d4 56 56 cf 07 Data Ascii: RIFFWEBPVP8Lv/O$%Tl$AR*h587fTZJlw:<1`IVBw4$!z=Wf(AJ,VV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
289	192.168.2.6	50215	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1088	OUT	GET /bRfIm6ZoVTb59C0VtTs9Z8XOmUq6kowkPLMBK5CZZwIT8wSjbkvnF9tzkqykImW_P4F1q27PIjs=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 154 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	154	IN	Data Raw: 52 49 46 46 92 00 00 00 57 45 42 50 56 50 38 4c 85 00 00 00 2f 17 c0 05 10 5f a0 a8 6d 1b 28 ed 0e b2 e3 bf 5f 79 98 69 db 26 b9 4a b7 b8 cb 61 9a 81 b4 6d da ed f7 79 ff 26 6e a6 6d 1b 7f 45 55 ec 63 b6 06 e0 f7 cd b1 80 eb 9d 74 bc bf d9 80 a4 84 10 60 13 d9 b6 93 43 86 0e 09 48 a2 fd 1d 12 90 f0 25 90 73 b2 f1 f5 91 53 1f d1 ff 09 e0 ce 76 d5 9e 0b 8a 76 53 18 10 f5 5b ca 02 d9 ee 7a 10 1f 92 c7 3c 36 93 5f 48 0e 2d 87 c2 be dd 54 16 f8 c5 96 30 b8 1e 00 Data Ascii: RIFFWEBPVP8L/_m(_yi&Jamy&nmEUct`CH%sSvvS[z<6_H-T0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
290	192.168.2.6	50216	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1087	OUT	GET /Wl1YKkwmkZ-VAZZ8aPU1MpLztOhf_a2Dj6m7oDj9jaBnJ6P47KqhLln4h7ObG8loPLfeymcFgQ=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 272 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:33 GMT Expires: Sat, 20 Apr 2024 13:53:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	272	IN	Data Raw: 52 49 46 46 08 01 00 00 57 45 42 50 56 50 38 4c fb 00 00 00 2f 17 c0 05 10 17 a1 b6 91 a4 66 a1 ff 22 49 3d 91 77 d7 06 db 46 92 14 f5 61 fe 39 9e c5 26 3e 0c 1b 49 92 da 0c f0 ff 4f 7a 88 c8 3c d2 b2 8a 6d 5b c9 7e ee 0f 2b e0 7f f4 a0 34 99 5e 02 24 00 80 02 48 60 00 7c 2d 12 bd e7 fe e2 26 97 fc 96 47 0f ef 39 da c6 73 fb dc 58 cb 5c ef fb 8e 75 56 bb ef 9d db 1c 12 7e de fb 05 61 c4 be ab 17 58 c4 23 49 9d f7 9c 12 80 90 84 24 40 bc ef 47 d2 0b fc c6 da 06 07 91 24 29 52 1d 3e 33 ee f7 dc 93 7f 97 4b 47 02 22 fa cf c0 6d 23 45 5e e6 3d 78 05 33 0d c7 6d 2f 07 90 9e 45 de 4e b0 fe ba 4f 93 4f 06 70 76 9f 32 9b 02 9c dc 3d 9d 5e 6f ef 01 fc b4 09 99 99 a9 6b 3d 5d 61 a5 7d 4a b7 c0 33 d5 54 fa c7 00 42 b6 04 fb f4 d7 bf d1 67 ca 25 98 d2 63 a3 5b b8 51 Data Ascii: RIFFWEBPVP8L/f"I=wFa9&>IOz<m[~+4^$H`\|-&G9sX\uV~aX#I$@G$)R>3KG"m#E^=x3m/ENOOpv2=^ok=]a}J3TBg%c[Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
291	192.168.2.6	50218	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1087	OUT	GET /SX38vsuBS8RwRaZU4SfvlW1aQHyyXD1BuKnF7dE2qXo9uAFbUkXPcKvzfpLNA7AEB0Ls9trKFw=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 470 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	470	IN	Data Raw: 52 49 46 46 ce 01 00 00 57 45 42 50 56 50 38 4c c1 01 00 00 2f 17 c0 05 10 0f e3 38 92 24 47 c9 13 f0 c5 7f 2b 79 9d be 99 46 38 e1 b0 8d 24 45 f2 f1 e7 1f 27 33 ce b4 db 48 92 14 29 0f c4 f7 df c6 d7 99 66 cb 6d 6c db aa 72 ae 3c 89 be 86 ff e3 9a 52 04 05 51 21 15 50 01 39 99 bb de 97 00 e8 8f 08 81 82 c1 60 10 14 94 7d e1 68 fd b3 25 a8 99 0d 3f fb 7b 72 bd 6f df e1 fb 7c e5 b3 ea ee 63 9b f1 fb 59 2e cf db ae be d3 b4 85 fb f7 df 2e 9f e7 e2 7c 7f dd f6 7a 7f ab bf 32 ad ad 97 db 6f 5e 35 a3 ed 71 93 6a 59 67 bd af df 37 97 38 49 0c 0e dd 63 b2 d5 55 ff d0 98 e4 bb c7 77 7a b5 24 b5 42 d5 a4 ae 09 91 d4 7f 04 b1 7a 45 74 08 02 01 84 04 e8 3c f0 0a cf c0 d4 15 88 20 80 7f 12 81 09 f8 24 12 02 01 ff 20 c2 90 f0 25 07 49 fc 22 9d c6 e3 6c d8 ec 39 9f af Data Ascii: RIFFWEBPVP8L/8$G+yF8$E'3H)fmlr<RQ!P9`}h%?{ro\|cY..\|z2o^5qjYg78IcUwz$BzEt< $ %I"l9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
292	192.168.2.6	50217	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1089	OUT	GET /zIYevie2ONWPy0aVtCfmjrrBnetJuH9IEN1l8STqyoJW5F5wS_9wiA1F-oiyTR_gpI9PjTcAzmDj=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 236 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	236	IN	Data Raw: 52 49 46 46 e4 00 00 00 57 45 42 50 56 50 38 4c d7 00 00 00 2f 17 c0 05 10 1f c1 a0 6d 1b 41 9e 0e c1 f1 87 f0 2c 9e d1 03 f8 85 06 9a 46 92 32 04 ff 2a f0 85 06 4a aa 5f 05 6d 24 45 e5 f1 6f 06 43 48 00 03 bb 4a 23 d9 6a 7e 24 aa ac e8 8d 86 28 02 45 5b 78 2c 0d 04 00 04 82 00 81 50 44 f0 73 ce 7c ff df f7 de f5 bd 37 fe 52 2a a8 81 55 49 b8 89 6c 95 a6 9c 32 12 03 66 81 9d 7c 0a 85 f1 54 0c a4 7d 83 a3 f6 ec 7d 67 1c b8 92 24 49 a9 0a 77 87 c6 fd fe a7 e4 85 cb 77 44 ff 27 80 ff f0 7c 96 27 ef 29 76 b0 69 0b ec 37 02 4f 1e 70 84 f7 39 b3 03 27 50 77 d3 5d d6 da ae 16 60 34 aa b8 d7 5a b5 6b b5 30 07 95 dc 6b ad 4a 48 34 fa bd 0a ee 75 56 a5 40 2a 29 e7 ee a5 4b b9 a6 ca b8 df 8d b9 1d f1 87 03 00 Data Ascii: RIFFWEBPVP8L/mA,F2J_m$EoCHJ#j~$(E[x,PDs\|7RUIl2f\|T}}g$IwwD'\|')vi7Op9'Pw]`4Zk0kJH4uV@*)K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
293	192.168.2.6	50219	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1087	OUT	GET /No2w0orQK-x9CrDxyLjaMIeBnZIaldNZpAiguVlGKWMHtl7RlzgLQBeE35n2OA0zytGeDgo6Sg=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 402 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	402	IN	Data Raw: 52 49 46 46 8a 01 00 00 57 45 42 50 56 50 38 4c 7e 01 00 00 2f 17 c0 05 10 b7 c1 20 92 14 39 8d 8c f3 ef 27 5a fe 3f 80 0d d6 91 24 2b 69 2c 1d 02 27 31 3e dd 6d d9 36 92 a4 a8 ce fa 04 3e ff e4 de 65 e6 1f d6 91 64 9b da 67 db 66 fe a9 bc 30 de 97 ed 0a 00 3c 2c 10 da da 1d 4d 8b a9 db fc fc 2e e2 2e ab 76 eb 9b ea 05 79 9f ae 78 0b 28 d0 81 fe 3c 17 55 ef cb 76 be ff bf cf 26 7f dc f3 7c 5a 14 a5 fe ee 63 3a f6 ab e3 c3 3c 4c d6 b2 0e 89 82 25 85 a8 ef 23 09 53 e0 58 97 bc 12 e2 3a 0e 93 7c 0d 01 46 7e aa e3 42 10 45 01 05 01 f2 7f d1 01 82 fc b3 92 17 92 60 9a 49 22 81 00 c4 48 b6 4d 5b f3 6c db c6 59 d7 cc 3f b8 73 ef fd 48 20 a2 ff 0c dc b6 6d 24 75 ef f6 ee 15 fc 9b bd 6b e4 fb d1 b5 57 45 3b 96 64 8c a4 b8 5d ca 41 7a 0d ea 50 1f bc a4 43 59 74 bd Data Ascii: RIFFWEBPVP8L~/ 9'Z?$+i,'1>m6>edgf0<,M..vyx(<Uv&\|Zc:<L%#SX:\|F~BE`I"HM[lY?sH m$ukWE;d]AzPCYt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
294	192.168.2.6	50220	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1088	OUT	GET /ONI8zPDjMPTgfk-uKHf7VFmSvJjAQcc1Ga0z2G_JbbGocqpMxuLrXubxsqxw31el6IrODMMsqYI=s56-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1166 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:33 GMT Expires: Sat, 20 Apr 2024 13:53:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	723	IN	Data Raw: 52 49 46 46 86 04 00 00 57 45 42 50 56 50 38 4c 79 04 00 00 2f 37 c0 0d 10 a7 07 29 92 24 47 92 f7 f1 47 72 f4 ee d7 a2 e2 14 08 47 6d 23 09 92 67 f8 53 39 72 f7 bc eb e9 30 6a 1b 49 92 77 f9 c3 58 86 fb 9b a3 03 39 92 24 45 92 67 2d 33 93 04 ab bf 58 7b 77 4f c6 12 da 10 93 48 ee 00 04 41 10 d4 5f 47 21 08 aa d7 05 85 0c d6 b1 c5 51 1a 8d 01 82 c8 2f da 82 97 e2 e3 6a a7 a9 8b 6c 9d 27 e5 2a d0 28 04 47 69 7c bb 2c c6 98 63 8a 20 a8 68 0c 11 69 34 fe f0 8f 6f fc 3b 12 2d bd d6 c0 75 77 fc 2f 0a ab 68 b4 14 36 0e 08 fe 16 85 2a 1b 04 41 30 42 fe a8 7e d1 a5 08 82 5f 74 19 51 f0 83 5b 85 14 95 0a 29 48 10 22 10 fa 2a c1 b8 52 a9 90 20 f0 57 a5 14 21 45 fa 96 54 39 73 86 ed 10 53 48 65 36 ca 34 94 29 6d de 8e 79 57 50 42 e5 ce 31 3b 66 c7 9d e3 bd eb ce 55 Data Ascii: RIFFWEBPVP8Ly/7)$GGrGm#gS9r0jIwX9$Eg-3X{wOHA_G!Q/jl'(Gi\|,c hi4o;-uw/h6A0B~_tQ[)H"*R W!ET9sSHe64)myWPB1;fU
2024-04-19 14:07:09 UTC	443	IN	Data Raw: 3d c0 49 e5 ba 8a 8e ee 7d fe c5 bf b6 6f 7c e1 a5 84 11 6f ff fb 45 bd c7 43 69 9d 76 80 b1 8f 6c 3c 77 62 eb e6 2d 27 92 aa 68 c4 1b 1f b1 18 68 df 47 30 fa c9 81 1d e7 d1 3b f8 63 c5 da de 57 e7 62 e6 ad dd bd e6 d1 a7 90 8f ae e1 f5 11 ea f2 4d 40 fd be ff 8b e9 16 39 3d da b7 16 c5 d7 0b 1d ea b7 fd 5f cd 52 24 cb be 3f 50 7a 47 10 b6 40 6c 10 37 81 ec f6 87 5e e3 07 81 0c ae 5f 9d 4b 65 1f de 74 4c f8 61 4b 65 2f f7 11 aa d8 db 87 37 4b f4 56 8c ac 77 3b 20 7b ff c0 66 e1 f7 c8 a0 7d 6d a5 f2 9e 3e b2 57 39 f2 a8 b4 4e c9 a5 54 0a cf 7c ae 0c 8e 6a 69 95 f4 d1 64 ea c5 38 52 b2 51 69 a6 9b 25 f3 49 61 bb 1b a9 38 1f f7 e5 0c 8b 54 de b7 16 33 bf 8c 91 22 43 00 b1 6e cf b7 ab ef 43 ae 8e 64 03 02 06 17 31 22 0d ac 3f fd 6c df 16 dd 86 54 dd f7 a9 f3 Data Ascii: =I}o\|oECivl<wb-'hhG0;cWbM@9=_R$?PzG@l7^_KetLaKe/7KVw; {f}m>W9NT\|jid8RQi%Ia8T3"CnCd1"?lT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
295	192.168.2.6	50221	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1088	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 206 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:53:33 GMT Expires: Sat, 20 Apr 2024 13:53:33 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	206	IN	Data Raw: 52 49 46 46 c6 00 00 00 57 45 42 50 56 50 38 4c ba 00 00 00 2f 17 c0 05 10 87 a0 a8 6d 23 a9 fc 89 0d 84 21 30 00 e6 7b ec a6 34 14 34 92 1a 2d fe 95 21 01 01 04 0b 7f ab 90 8d 24 68 fc b5 96 61 01 0e e3 3f 35 91 a4 48 c3 6b 83 0c 03 a4 84 f8 77 74 57 21 a0 e3 f7 55 66 a8 1a 20 cd 55 1e 67 79 99 cc d1 07 f3 f0 0e de e2 0f bc fd 82 67 50 30 68 24 49 d1 ee d1 2f 1d f8 97 fb 74 28 20 a2 ff 0a dc b6 51 32 3e 86 5f c0 bc b8 64 96 dc 00 91 88 99 28 f6 73 d2 00 10 94 ba e9 45 1e 6e f1 74 f5 c8 04 2f a1 dc 43 e4 bb c1 12 b0 ca af 54 fc 52 e9 1f aa 7f bd bd ab ec 06 4b c1 31 1a 51 1b 67 b6 38 67 a1 f1 f7 9f f8 af 1d 02 Data Ascii: RIFFWEBPVP8L/m#!0{44-!$ha?5HkwtW!Uf UgygP0h$I/t( Q2>_d(sEnt/CTRK1Qg8g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
296	192.168.2.6	50222	142.250.105.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:09 UTC	1088	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:09 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:09 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:09 GMT Server: fife Content-Length: 122 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:09 UTC	122	IN	Data Raw: 52 49 46 46 72 00 00 00 57 45 42 50 56 50 38 4c 65 00 00 00 2f 17 c0 05 10 27 40 26 6d d3 5e 35 3b f1 93 43 26 6d d3 5e d5 3b d5 b3 41 26 6d d3 7e b5 39 ff 22 a6 20 6d 03 66 d7 d5 b4 4f 5b 00 f8 bf 6d af aa 02 8c da 48 72 54 bb 4d 60 21 5c 20 d0 ba 3e 06 c7 1f 55 8e ff 88 fe 4f 00 8f 75 a2 ad ec 9e b3 00 ac 2b 2c eb 3f 00 ae e8 e6 24 59 ea aa 4d ab b1 ac 9e 08 00 Data Ascii: RIFFrWEBPVP8Le/'@&m^5;C&m^;A&m~9" mfO[mHrTM`!\ >UOu+,?$YM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
297	192.168.2.6	50223	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	512	OUT	GET /Yld8nGY9Bomd8JIxg7mHNFvTgP-iJvYCWkJdcmDSMz3ZWY8YlscDTJEf08WOkJ7yMWce77Dxi9g=s56-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1106 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 1841 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	722	IN	Data Raw: 52 49 46 46 4a 04 00 00 57 45 42 50 56 50 38 4c 3e 04 00 00 2f 37 c0 0d 10 ff e7 a0 8d 24 47 f2 3e 7f 1c cf f1 d2 d4 05 12 0c da 36 92 e4 39 fe 40 8e e2 b7 13 06 6d db 08 f2 f1 07 f1 38 ef ff b7 c0 91 24 49 91 e4 59 cb cc 24 ae 74 ff 7f 16 89 8c a5 b6 6d 1b 06 9e 6a ca 1b 80 20 08 82 fa 74 14 82 a0 3a 5d 50 c8 60 8d 2d 8e d2 68 0c 10 44 7e d1 16 bc 14 bf 4b 9b a6 2e 64 6b 4e ca 55 a0 51 08 8e d2 f8 76 b1 18 63 8e 29 82 a0 a2 31 44 a4 d1 f8 c3 3f be f1 6f 24 5a 7a ad 81 cb 83 f1 bf 28 ac a2 d1 52 d8 18 10 fc 2d 0a 55 36 08 82 60 84 7c c0 a1 7a 44 97 22 08 7e d1 65 44 c1 0f 6e 6b 8e d9 7d 94 d7 2a 14 73 ee d3 12 a4 a8 88 40 08 be 4a 30 ae 88 a4 42 82 c0 9f 0c 12 fc d7 56 91 be 25 55 aa 61 45 84 5a e7 3f 48 51 21 95 e2 fc 7f 44 14 26 2d 49 85 cc 66 76 1d ef Data Ascii: RIFFJWEBPVP8L>/7$G>69@m8$IY$tmj t:]P`-hD~K.dkNUQvc)1D?o$Zz(R-U6`\|zD"~eDnk}*s@J0BV%UaEZ?HQ!D&-Ifv
2024-04-19 14:07:10 UTC	384	IN	Data Raw: ff 10 a0 7d cf 6b 4a 93 af 44 fa c6 9c bb 18 eb 8f ff 66 76 bd 11 3e 2d fd fc fd 11 14 ad be 57 50 56 f9 78 bb 37 e2 e7 29 fe 95 fa 8c 84 38 f8 1c 7a f7 ad 21 6e db 99 ea aa e6 0f fb bd 21 79 ce 8f f0 f0 c5 05 f3 f8 d7 9c dc 9c a2 f4 e2 ea 8f a7 fd 45 34 7d c5 ed 37 e6 d5 d1 aa a4 9c e4 47 af 72 52 52 ee ac 13 51 e5 21 fa 29 c6 3d ff e6 a6 e2 9b 9e 30 2d e3 bd 0b ad 15 2c 97 1c f0 8d c4 9c e4 27 af 99 34 24 77 08 fe 42 a2 83 6f bf 37 c4 6d 65 70 21 8a 7c bb cb cb 37 2f f2 7c b3 a5 cf ef a5 9b ce 5f 3a 40 92 df 0c fa d3 ed aa aa f2 af cf f0 fd c9 8c 51 ff 4d 27 e8 bf 32 60 30 03 bf 38 bc 33 3e 27 75 03 d6 2f 80 b1 64 fc 49 8f 91 1f ee 7e 49 e0 87 0c fc f7 44 7d 5a 7e 56 56 f5 7d 9c ff b2 f1 fb 92 ca f2 da 37 6b 30 7e af 0c fe b3 3f ed f8 b2 e7 f2 f5 a3 a1 Data Ascii: }kJDfv>-WPVx7)8z!n!yE4}7GrRRQ!)=0-,'4$wBo7mep!\|7/\|_:@QM'2`083>'u/dI~ID}Z~VV}7k0~?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
298	192.168.2.6	50224	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	512	OUT	GET /D8lU2BDUjyA9IkpQd5aEs5WCL4-sBw_l0qcbRvh1Fnj6KCAry9N2egg9v5BX2KayzLPJBJJPNP0=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 240 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c dc 00 00 00 2f 17 c0 05 10 af a0 a0 8d 24 65 2f e7 df d3 e9 79 66 06 1b 8a 1a 49 52 7a fd bb 5a 33 74 f0 e6 3b 45 6d 23 39 5e fe b0 96 c8 01 b8 7b f7 a2 34 92 ad e6 fd ff 51 d1 a3 a0 02 4a a0 14 fa 37 39 e9 00 00 f8 60 3f f3 b6 f6 36 f3 68 e5 fd a7 2e a0 4a 69 a2 59 fb e8 c6 f6 9a e6 98 06 fc 48 04 20 70 ef 05 b0 3e fe 7f 2f fc 6f bd 77 34 1c 46 92 e4 34 8b b7 ab 79 cc e5 1f 2c 1e 14 40 44 ff 15 b8 6d a3 64 78 8c af d0 23 f1 a5 3c e0 23 c9 e3 ba 10 f9 46 70 0d b1 eb 6d ed 44 4d 73 72 fe 53 8a 05 96 e2 0e 23 7d cf 78 87 64 c9 e9 be 7b b3 5a aa 6b e9 06 6d 37 a7 34 77 ed 15 e5 04 d8 c0 54 9e b3 32 54 99 94 55 03 eb 91 c0 c6 f6 6f 57 32 36 f1 e0 bd 1e c8 df ff 2b 01 Data Ascii: RIFFWEBPVP8L/$e/yfIRzZ3t;Em#9^{4QJ79`?6h.JiYH p>/ow4F4y,@Dmdx#<#FpmDMsrS#}xd{Zkm74wT2TUoW26+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
299	192.168.2.6	50225	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	512	OUT	GET /XM6MUzHrZgnqgHqbNfNd460VSiWac9xFKsYVpSU4czPoBFVFOiI-R6qVHg_NcwwGJtWjlvGnZeo=s56-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1370 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 1841 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	722	IN	Data Raw: 52 49 46 46 52 05 00 00 57 45 42 50 56 50 38 4c 46 05 00 00 2f 37 c0 0d 10 d5 86 40 20 39 7f f0 15 22 62 02 da 50 c6 84 64 db 6e 1a c9 fb 5f 6a 31 73 be 0a 6d 59 b5 01 8d 9a 99 b1 9a 16 a0 59 a3 ba db 40 da 36 f3 af f9 4f 09 24 6d e6 fb 77 be e3 da b6 d5 04 77 ed c2 1a 70 69 20 5a 85 35 90 51 98 ba 6b 19 59 99 43 1a c0 0a 88 e2 fc 50 80 f3 18 b8 6d a4 28 d9 3d 66 ec 7e 41 b6 6d db a6 e5 7c 5a fd 40 8c 6b c6 b6 6d db b6 cd c7 ca 53 d9 b6 6d db 38 fa 84 a8 b4 63 ee 1b 94 4f 6e b9 56 6b a7 e2 ac b4 8b a0 6d db f0 87 fc 37 c9 18 b6 6d 1b 36 57 d9 91 b7 fe 33 70 db 48 51 bb bc 07 c3 8f 50 96 61 39 e9 ca 21 2c 32 26 29 c3 4f ef 3e d4 e6 75 fe ff fe 09 c6 80 a7 5e 0b cb af 32 86 95 04 38 49 06 a8 ce b7 0d 74 80 2e b0 e7 b6 bc 5e 55 00 1e 40 06 f8 5b 3e 61 85 11 Data Ascii: RIFFRWEBPVP8LF/7@ 9"bPdn_j1smYY@6O$mwwpi Z5QkYCPm(=f~Am\|Z@kmSm8cOnVkm7m6W3pHQPa9!,2&)O>u^28It.^U@[>a
2024-04-19 14:07:10 UTC	648	IN	Data Raw: 39 06 5b 4c 66 82 24 a8 8c d8 1a 8f da 78 e1 2d e6 de bb 50 9b 97 45 91 16 70 8d 35 db 69 64 91 24 44 e9 aa 91 6d 2d 63 b1 af a5 b1 4e 22 a1 65 f8 d6 47 87 ef db 65 5f e5 1f 3c ad a3 67 9c bc b0 33 ad 1a 14 19 01 fd fe 82 1d b6 cf 88 ba d9 d7 f7 f0 dd fb 67 10 52 ac de 2f 9b 8a a9 c3 d7 4a e6 66 44 1e 24 46 8e 59 d3 04 0c 2e d5 9d 04 87 7e 6a d9 34 ae e6 e1 c3 a3 5d f3 37 1d 06 5f 52 c3 a6 da 17 6b b3 8d 6a a6 01 5f 26 07 72 6f a2 8b 60 d3 52 55 b3 0d 96 59 f3 d1 59 46 6d de c5 a9 34 36 3a d6 86 c7 af 11 29 15 e1 94 51 33 19 bb 6f 28 f7 23 d1 0d 61 4a cc 42 35 db 6d 45 96 40 49 be 82 b0 af a3 d9 87 4e a9 86 30 c5 88 2f f3 3c 0d ae e7 d2 03 39 3f 14 7d de 30 b5 2c d3 d7 ab bd d4 40 96 10 b4 b3 12 76 95 b2 a5 a2 3b 3b 35 9b 8d 6f 90 33 de 00 6b 51 4f 58 35 Data Ascii: 9[Lf$x-PEp5id$Dm-cN"eGe_<g3gR/JfD$FY.~j4]7_Rkj_&ro`RUYYFm46:)Q3o(#aJB5mE@IN0/<9?}0,@v;;5o3kQOX5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
300	192.168.2.6	50227	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	512	OUT	GET /V358DKJP2RLO71dDY-utlVRUtUqd5i9peLoaLnpV7zt1J-xFk__7_sx-AymkIjt-kil_XrG3biQ=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 190 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 1841 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	190	IN	Data Raw: 52 49 46 46 b6 00 00 00 57 45 42 50 56 50 38 4c a9 00 00 00 2f 17 c0 05 10 97 a0 28 92 d4 68 fc 4b c2 07 3e 78 dd 90 d8 50 d0 48 6a b4 fe 2d a1 04 05 38 f8 a1 55 d0 b6 91 13 fe 74 8e c9 91 59 3f c2 34 00 80 34 b8 27 27 3a 3c c1 ff ff 4c 73 00 00 e0 00 02 8c 99 5b 24 86 6a 1e f7 b2 77 4f be fb fe 23 9b de ff 61 be bd e5 7f c1 ff 02 3e 57 75 ab dd 4b c1 b8 8d 24 45 bb c7 d8 7d 7d f9 a7 3b 70 f8 8e e8 ff 04 94 87 76 a2 5b 9d 25 f8 20 8b 2c 6e f2 1a f2 17 ac 6d 42 73 d6 32 ec 47 c2 86 a5 07 31 87 26 90 20 89 31 e2 f6 08 74 43 56 27 9f 3a 2b 37 4f 60 d0 ea 94 75 77 00 Data Ascii: RIFFWEBPVP8L/(hK>xPHj-8UtY?44'':<Ls[$jwO#a>WuK$E}};pv[% ,nmBs2G1& 1tCV':+7O`uw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
301	192.168.2.6	50228	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	513	OUT	GET /0Kc4kyHqyq8zcMO7lev1TyvzQeuunYD0ZC8Iv7JZiXyoZSLb4k4xDQsd-ryTsJm-dceqvFPxWOaG=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 144 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1841 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	144	IN	Data Raw: 52 49 46 46 88 00 00 00 57 45 42 50 56 50 38 4c 7b 00 00 00 2f 17 c0 05 10 3f a0 a0 6d 1b a6 ed 0e da e1 bf 48 c8 a4 6d da 6b 7a 27 7b 26 06 99 b4 4d 7b 55 e7 fc 8b 18 99 b4 4d ce 89 9a f6 39 1b 04 40 ef fd a3 ba 11 9f 29 40 14 60 14 db 56 1b aa 0f 24 74 0b ac 4b f2 26 4a e2 7f 41 07 03 11 fd 57 db b6 0d 43 cf a9 67 90 49 d4 03 00 91 56 fa ab 7e 5e 25 39 ac 43 93 15 b3 ba 24 57 ec d5 25 79 dd f9 ff 8c 7f 3b fa 79 60 64 1c 02 00 Data Ascii: RIFFWEBPVP8L{/?mHmkz'{&M{UM9@)@`V$tK&JAWCgIV~^%9C$W%y;y`d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
302	192.168.2.6	50226	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	505	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=s124-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:10 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:10 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:10 GMT Server: fife Content-Length: 3808 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:10 UTC	733	IN	Data Raw: 52 49 46 46 d8 0e 00 00 57 45 42 50 56 50 38 4c cc 0e 00 00 2f 7b c0 1e 00 09 86 6d db 46 82 dc f6 be 68 ff 85 ef bf 5b 20 a2 ff 13 c0 3f eb 28 67 22 4a ed 52 50 58 17 d2 e8 d1 2b a9 24 b1 91 13 8c ea 59 a7 ed c6 7c 00 88 32 f5 cd 0b 08 f4 b3 89 e3 b3 6f 2f 1c 47 b2 ad 54 83 bb 3b ab 1b 02 f9 c7 24 df 65 8f 43 02 4c 23 c9 aa d4 fc 91 af 88 80 fc a3 42 22 91 a7 ae 1c 47 92 a4 38 f9 3a 66 46 e9 d0 7f 97 64 86 9e fd 9f 00 e2 80 4b e6 cc 84 f4 2c f1 81 50 01 00 a0 ff 16 62 ec 0a 72 01 e0 c0 0f 70 cc b9 b8 d8 40 ae 84 58 0e 80 61 ce c7 c4 c7 04 20 76 c4 0e 54 b9 63 ce c5 c6 ce 5c 40 00 60 4e b6 63 ce c7 c6 06 4a 55 2e 88 5f 4a 94 80 6a 72 df 2f 13 e4 80 d0 9d bf dc 8e 55 11 60 b9 05 44 16 03 e0 6b 62 dd 92 38 fe 16 98 c6 aa b7 7d e1 dc 1e 4c b3 b6 29 92 2c c7 Data Ascii: RIFFWEBPVP8L/{mFh[ ?(g"JRPX+$Y\|2o/GT;$eCL#B"G8:fFdK,Pbrp@Xa vTc\@`NcJU._Jjr/U`Dkb8}L),
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 18 37 4e e4 9f 0a ea 18 57 61 66 3d f4 1a e9 f7 73 ff bd fc b0 83 7e 3d f3 f2 d2 42 f6 75 05 1e 23 3f a1 b3 06 60 4e ae c1 86 ce b6 c1 49 39 ae b0 b3 ae cc ad d1 74 d5 d6 f7 91 76 bf e7 62 3f dc 96 f5 6d e7 ae 6e d9 1f 42 17 6d 77 c3 27 67 7d 1f 9d 29 0a 77 ec f0 a1 1b 6f 08 dd 79 f0 f4 f1 f7 bf f5 4f 83 b9 91 43 9f 36 b1 25 1f 53 9c 63 2f 3d 12 71 38 ab 2a ba 0d 42 c1 77 d7 ef 97 7a ce 03 fd 3a de 95 cb e2 0a 7b c9 90 aa 63 93 68 30 40 c7 f4 af 57 4a d3 c9 8f 5d 1e 06 49 e8 23 14 69 a9 87 49 94 97 d4 ff 0d 92 be 56 ea 71 10 ae 3c 51 34 18 21 06 9b ee 2a 4a 44 42 04 b2 c9 3e 38 ad 9e 69 d5 b1 44 24 35 1d 0f 0e db 93 51 2d b6 a9 07 2c 92 64 09 65 15 d5 67 ef 3f 2f 74 aa 39 8d e8 d3 0b 5a 28 12 ac 54 0d 47 42 32 b0 5b 2d 2e 51 8f bb 4b bf c0 11 79 82 d5 79 Data Ascii: 7NWaf=s~=Bu#?`NI9tvb?mnBmw'g})woyOC6%Sc/=q8Bwz:{ch0@WJ]I#iIVq<Q4!JDB>8iD$5Q-,deg?/t9Z(TGB2[-.QKyy
2024-04-19 14:07:10 UTC	1255	IN	Data Raw: 3c 16 90 2e fb 8f db d6 f3 c9 7b 4d a7 7e 4d 8a ff 5f ff b7 cf 8f c5 af 2d ec a3 2c 3c 48 df f1 43 6e 77 f7 f6 35 72 e9 52 e9 b0 cb 79 63 38 4b 19 a5 53 3a 6d 84 e2 b5 34 8c 14 4a 5a 83 fb d5 9d 51 5d 1c d4 4c 38 53 1d 0c f3 9d b2 5b 23 5e b6 75 fc ac ad 1b 4d d7 05 a0 a6 ad b6 45 ff 89 06 6b f0 be cb d7 99 3f 92 ea f6 ce 1f f3 25 47 ed df b5 32 af 8f aa 9b 61 b4 da 31 d5 28 d4 0e 6c 19 46 c1 2b 52 79 b4 89 b5 48 b4 9c 0b bd e5 45 96 bf f9 12 2b 3c 5c 2a e7 ad c8 03 6a 3a 1a 32 f9 17 77 fb 82 ae cc bd 7e 5c 10 23 e8 36 1e e4 42 75 84 86 a2 21 8a c2 52 8c b4 8a 1c 6c 21 5c 4a dd 12 4d b1 01 4f 10 be 5a b6 79 1a 6f 2e 8f a6 8b 83 85 99 ef a4 c3 69 26 64 86 82 af ba 71 fd f2 17 8f 27 5d 7d b5 ba 40 b5 d9 fa af bf eb 85 dd d7 df 1d 44 1d ba 36 22 08 20 d0 17 Data Ascii: <.{M~M_-,<HCnw5rRyc8KS:m4JZQ]L8S[#^uMEk?%G2a1(lF+RyHE+<\*j:2w~\#6Bu!Rl!\JMOZyo.i&dq']}@D6"
2024-04-19 14:07:10 UTC	565	IN	Data Raw: b4 97 c9 e1 54 43 42 cd 84 30 10 4d a4 ed e4 d7 13 d9 54 af c3 0e 34 64 fd 07 18 07 18 a3 15 69 4b a1 f0 f0 3a 43 6e 95 59 85 06 d0 e0 49 57 de fb 44 1e 97 53 4d 5f 0b f6 f0 28 ce c0 10 f1 01 7c c0 3a 53 27 b8 4d 6f 92 f2 26 b4 20 2f 0e 38 19 6a c5 1b 90 98 21 16 99 eb eb 80 74 72 8e 72 0f f8 7a ec 15 11 ce e4 f0 44 3b 47 3a 70 f8 80 8b 3e 1c 69 42 3d a9 5d f0 ff 68 66 fe 32 7d 41 94 b9 29 38 28 8a 51 39 ba 81 f7 59 9a 63 9a 59 6f c8 8f a2 a1 00 1f 5d 42 9c 26 f6 01 a3 6b d8 52 22 60 71 60 a1 32 a4 2d ae 0e 8b 10 c0 52 91 1f 95 89 72 38 ce 92 6b 30 82 07 e3 2c 80 03 e2 a8 1a 06 3b 19 c5 3f 16 6e 88 06 c8 8f 82 fb 1f 13 4d f0 d1 90 2e 96 e1 e6 92 c2 60 2c 21 24 30 ce 10 92 69 34 0c b5 65 98 1f d4 68 6a 74 f2 c7 23 88 c1 c6 eb 93 5f a8 86 a4 ad 03 eb b0 d1 Data Ascii: TCB0MT4diK:CnYIWDSM_(\|:S'Mo& /8j!trrzD;G:p>iB=]hf2}A)8(Q9YcYo]B&kR"`q`2-Rr8k0,;?nM.`,!$0i4ehjt#_

Session ID	Source IP	Source Port	Destination IP	Destination Port
303	192.168.2.6	50232	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 33 5a 30 53 58 4c 7a 66 79 6b 4f 33 53 4a 4f 77 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 32 64 65 37 35 32 37 34 66 33 66 39 33 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 3Z0SXLzfykO3SJOw.1Context: 662de75274f3f93f
2024-04-19 14:07:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:07:10 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 33 5a 30 53 58 4c 7a 66 79 6b 4f 33 53 4a 4f 77 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 32 64 65 37 35 32 37 34 66 33 66 39 33 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 51 44 4d 49 53 30 2f 75 39 47 46 49 30 35 31 55 5a 55 74 55 73 74 77 67 6e 65 63 7a 7a 66 70 51 30 6d 6c 58 74 36 78 6b 56 6b 36 74 56 32 77 65 77 72 62 44 48 72 4c 42 4c 36 35 48 2f 6c 38 52 6e 34 72 30 73 45 56 6f 4c 68 46 35 73 50 6b 77 4a 53 58 7a 56 4a 34 31 69 58 43 54 48 70 45 79 33 71 77 4a 48 69 63 56 39 5a 50 6b Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: 3Z0SXLzfykO3SJOw.2Context: 662de75274f3f93f<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWQDMIS0/u9GFI051UZUtUstwgneczzfpQ0mlXt6xkVk6tV2wewrbDHrLBL65H/l8Rn4r0sEVoLhF5sPkwJSXzVJ41iXCTHpEy3qwJHicV9ZPk
2024-04-19 14:07:10 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 33 5a 30 53 58 4c 7a 66 79 6b 4f 33 53 4a 4f 77 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 36 32 64 65 37 35 32 37 34 66 33 66 39 33 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 3Z0SXLzfykO3SJOw.3Context: 662de75274f3f93f<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:07:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:07:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 48 39 74 2f 61 38 43 4d 45 30 2b 44 6b 31 73 50 4a 45 70 56 56 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: H9t/a8CME0+Dk1sPJEpVVQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
304	192.168.2.6	50234	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	511	OUT	GET /TXeP-H2Ed1mhoPVB_CJApRXYyewNk1NTKykuQpLQ_YlkUPUXpOR3-zUkvIxYlXd5Llwi6m2USA=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 208 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	208	IN	Data Raw: 52 49 46 46 c8 00 00 00 57 45 42 50 56 50 38 4c bb 00 00 00 2f 17 c0 05 10 7f a0 20 b6 0d eb 12 47 77 35 34 50 85 fd 6f 0d 05 91 6c 50 37 fa 77 11 47 04 15 fe 28 68 db 86 c9 f8 d3 18 a3 81 f9 47 69 24 29 d2 22 c1 fd 90 0b c9 90 bf b9 00 ce 04 00 40 01 33 a0 f0 1f 57 dd 5d 2d 95 c1 f2 4f 69 76 1f e2 f3 e0 01 c8 53 11 1d e1 1f 6e 6a 6d 7b 93 27 3d 16 b2 65 ed c1 49 0c 20 a1 4a 60 67 02 01 11 40 9b 31 00 63 75 d1 fb dc d3 63 20 a2 ff 13 40 f9 9f c3 c4 10 2e fb b8 e9 0b 86 75 62 e7 43 18 1e ad bf c1 f2 af bf d4 a0 73 34 fe 98 45 a2 b9 eb 11 53 db 35 16 91 14 47 f7 b8 d4 49 60 eb 91 22 b6 12 97 61 e2 0b 9e 49 21 e5 07 00 Data Ascii: RIFFWEBPVP8L/ Gw54PolP7wG(hGi$)"@3W]-OivSnjm{'=eI J`g@1cuc @.ubCs4ES5GI`"aI!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
305	192.168.2.6	50233	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	512	OUT	GET /ELKhrJ7hv6iWk1rEBNgrzxEpc0cHXmWbyvwtoXxT3lWAz9h6cuBEjEgw3fhf4HD5VqbrLhTgj2g=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 138 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	138	IN	Data Raw: 52 49 46 46 82 00 00 00 57 45 42 50 56 50 38 4c 76 00 00 00 2f 17 c0 05 10 4f a0 90 91 24 e6 fc 25 8e ea 54 be 17 0d 85 6c 24 41 e3 8f b1 52 cb b0 0a f7 2a 68 db 86 09 7f 04 c5 35 38 37 66 da b6 b1 54 5a fd 4a 6c b0 77 06 80 c5 d6 81 ca e4 3a 3c 1e fd ab ab ff 31 60 14 49 56 ab ad 42 0d 77 34 24 21 0c 7a 92 e4 f4 e3 3d a2 ff 13 a0 e7 57 f0 66 11 01 b7 28 80 07 b0 b3 e9 90 8a 96 fc 41 de 4a 2c 87 d4 56 56 cf 07 Data Ascii: RIFFWEBPVP8Lv/O$%Tl$AR*h587fTZJlw:<1`IVBw4$!z=Wf(AJ,VV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
306	192.168.2.6	50237	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	512	OUT	GET /bRfIm6ZoVTb59C0VtTs9Z8XOmUq6kowkPLMBK5CZZwIT8wSjbkvnF9tzkqykImW_P4F1q27PIjs=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 154 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	154	IN	Data Raw: 52 49 46 46 92 00 00 00 57 45 42 50 56 50 38 4c 85 00 00 00 2f 17 c0 05 10 5f a0 a8 6d 1b 28 ed 0e b2 e3 bf 5f 79 98 69 db 26 b9 4a b7 b8 cb 61 9a 81 b4 6d da ed f7 79 ff 26 6e a6 6d 1b 7f 45 55 ec 63 b6 06 e0 f7 cd b1 80 eb 9d 74 bc bf d9 80 a4 84 10 60 13 d9 b6 93 43 86 0e 09 48 a2 fd 1d 12 90 f0 25 90 73 b2 f1 f5 91 53 1f d1 ff 09 e0 ce 76 d5 9e 0b 8a 76 53 18 10 f5 5b ca 02 d9 ee 7a 10 1f 92 c7 3c 36 93 5f 48 0e 2d 87 c2 be dd 54 16 f8 c5 96 30 b8 1e 00 Data Ascii: RIFFWEBPVP8L/_m(_yi&Jamy&nmEUct`CH%sSvvS[z<6_H-T0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
307	192.168.2.6	50235	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	511	OUT	GET /Wl1YKkwmkZ-VAZZ8aPU1MpLztOhf_a2Dj6m7oDj9jaBnJ6P47KqhLln4h7ObG8loPLfeymcFgQ=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Sat, 20 Apr 2024 14:07:11 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Fri, 19 Apr 2024 14:07:11 GMT Server: fife Content-Length: 272 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	272	IN	Data Raw: 52 49 46 46 08 01 00 00 57 45 42 50 56 50 38 4c fb 00 00 00 2f 17 c0 05 10 17 a1 b6 91 a4 66 a1 ff 22 49 3d 91 77 d7 06 db 46 92 14 f5 61 fe 39 9e c5 26 3e 0c 1b 49 92 da 0c f0 ff 4f 7a 88 c8 3c d2 b2 8a 6d 5b c9 7e ee 0f 2b e0 7f f4 a0 34 99 5e 02 24 00 80 02 48 60 00 7c 2d 12 bd e7 fe e2 26 97 fc 96 47 0f ef 39 da c6 73 fb dc 58 cb 5c ef fb 8e 75 56 bb ef 9d db 1c 12 7e de fb 05 61 c4 be ab 17 58 c4 23 49 9d f7 9c 12 80 90 84 24 40 bc ef 47 d2 0b fc c6 da 06 07 91 24 29 52 1d 3e 33 ee f7 dc 93 7f 97 4b 47 02 22 fa cf c0 6d 23 45 5e e6 3d 78 05 33 0d c7 6d 2f 07 90 9e 45 de 4e b0 fe ba 4f 93 4f 06 70 76 9f 32 9b 02 9c dc 3d 9d 5e 6f ef 01 fc b4 09 99 99 a9 6b 3d 5d 61 a5 7d 4a b7 c0 33 d5 54 fa c7 00 42 b6 04 fb f4 d7 bf d1 67 ca 25 98 d2 63 a3 5b b8 51 Data Ascii: RIFFWEBPVP8L/f"I=wFa9&>IOz<m[~+4^$H`\|-&G9sX\uV~aX#I$@G$)R>3KG"m#E^=x3m/ENOOpv2=^ok=]a}J3TBg%c[Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
308	192.168.2.6	50236	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:10 UTC	513	OUT	GET /zIYevie2ONWPy0aVtCfmjrrBnetJuH9IEN1l8STqyoJW5F5wS_9wiA1F-oiyTR_gpI9PjTcAzmDj=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 236 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1842 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	236	IN	Data Raw: 52 49 46 46 e4 00 00 00 57 45 42 50 56 50 38 4c d7 00 00 00 2f 17 c0 05 10 1f c1 a0 6d 1b 41 9e 0e c1 f1 87 f0 2c 9e d1 03 f8 85 06 9a 46 92 32 04 ff 2a f0 85 06 4a aa 5f 05 6d 24 45 e5 f1 6f 06 43 48 00 03 bb 4a 23 d9 6a 7e 24 aa ac e8 8d 86 28 02 45 5b 78 2c 0d 04 00 04 82 00 81 50 44 f0 73 ce 7c ff df f7 de f5 bd 37 fe 52 2a a8 81 55 49 b8 89 6c 95 a6 9c 32 12 03 66 81 9d 7c 0a 85 f1 54 0c a4 7d 83 a3 f6 ec 7d 67 1c b8 92 24 49 a9 0a 77 87 c6 fd fe a7 e4 85 cb 77 44 ff 27 80 ff f0 7c 96 27 ef 29 76 b0 69 0b ec 37 02 4f 1e 70 84 f7 39 b3 03 27 50 77 d3 5d d6 da ae 16 60 34 aa b8 d7 5a b5 6b b5 30 07 95 dc 6b ad 4a 48 34 fa bd 0a ee 75 56 a5 40 2a 29 e7 ee a5 4b b9 a6 ca b8 df 8d b9 1d f1 87 03 00 Data Ascii: RIFFWEBPVP8L/mA,F2J_m$EoCHJ#j~$(E[x,PDs\|7RUIl2f\|T}}g$IwwD'\|')vi7Op9'Pw]`4Zk0kJH4uV@*)K

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
309	192.168.2.6	50238	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	511	OUT	GET /SX38vsuBS8RwRaZU4SfvlW1aQHyyXD1BuKnF7dE2qXo9uAFbUkXPcKvzfpLNA7AEB0Ls9trKFw=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 470 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 1842 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	470	IN	Data Raw: 52 49 46 46 ce 01 00 00 57 45 42 50 56 50 38 4c c1 01 00 00 2f 17 c0 05 10 0f e3 38 92 24 47 c9 13 f0 c5 7f 2b 79 9d be 99 46 38 e1 b0 8d 24 45 f2 f1 e7 1f 27 33 ce b4 db 48 92 14 29 0f c4 f7 df c6 d7 99 66 cb 6d 6c db aa 72 ae 3c 89 be 86 ff e3 9a 52 04 05 51 21 15 50 01 39 99 bb de 97 00 e8 8f 08 81 82 c1 60 10 14 94 7d e1 68 fd b3 25 a8 99 0d 3f fb 7b 72 bd 6f df e1 fb 7c e5 b3 ea ee 63 9b f1 fb 59 2e cf db ae be d3 b4 85 fb f7 df 2e 9f e7 e2 7c 7f dd f6 7a 7f ab bf 32 ad ad 97 db 6f 5e 35 a3 ed 71 93 6a 59 67 bd af df 37 97 38 49 0c 0e dd 63 b2 d5 55 ff d0 98 e4 bb c7 77 7a b5 24 b5 42 d5 a4 ae 09 91 d4 7f 04 b1 7a 45 74 08 02 01 84 04 e8 3c f0 0a cf c0 d4 15 88 20 80 7f 12 81 09 f8 24 12 02 01 ff 20 c2 90 f0 25 07 49 fc 22 9d c6 e3 6c d8 ec 39 9f af Data Ascii: RIFFWEBPVP8L/8$G+yF8$E'3H)fmlr<RQ!P9`}h%?{ro\|cY..\|z2o^5qjYg78IcUwz$BzEt< $ %I"l9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
310	192.168.2.6	50239	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	511	OUT	GET /No2w0orQK-x9CrDxyLjaMIeBnZIaldNZpAiguVlGKWMHtl7RlzgLQBeE35n2OA0zytGeDgo6Sg=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 402 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 1842 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	402	IN	Data Raw: 52 49 46 46 8a 01 00 00 57 45 42 50 56 50 38 4c 7e 01 00 00 2f 17 c0 05 10 b7 c1 20 92 14 39 8d 8c f3 ef 27 5a fe 3f 80 0d d6 91 24 2b 69 2c 1d 02 27 31 3e dd 6d d9 36 92 a4 a8 ce fa 04 3e ff e4 de 65 e6 1f d6 91 64 9b da 67 db 66 fe a9 bc 30 de 97 ed 0a 00 3c 2c 10 da da 1d 4d 8b a9 db fc fc 2e e2 2e ab 76 eb 9b ea 05 79 9f ae 78 0b 28 d0 81 fe 3c 17 55 ef cb 76 be ff bf cf 26 7f dc f3 7c 5a 14 a5 fe ee 63 3a f6 ab e3 c3 3c 4c d6 b2 0e 89 82 25 85 a8 ef 23 09 53 e0 58 97 bc 12 e2 3a 0e 93 7c 0d 01 46 7e aa e3 42 10 45 01 05 01 f2 7f d1 01 82 fc b3 92 17 92 60 9a 49 22 81 00 c4 48 b6 4d 5b f3 6c db c6 59 d7 cc 3f b8 73 ef fd 48 20 a2 ff 0c dc b6 6d 24 75 ef f6 ee 15 fc 9b bd 6b e4 fb d1 b5 57 45 3b 96 64 8c a4 b8 5d ca 41 7a 0d ea 50 1f bc a4 43 59 74 bd Data Ascii: RIFFWEBPVP8L~/ 9'Z?$+i,'1>m6>edgf0<,M..vyx(<Uv&\|Zc:<L%#SX:\|F~BE`I"HM[lY?sH m$ukWE;d]AzPCYt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
311	192.168.2.6	50240	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	512	OUT	GET /ONI8zPDjMPTgfk-uKHf7VFmSvJjAQcc1Ga0z2G_JbbGocqpMxuLrXubxsqxw31el6IrODMMsqYI=s56-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1166 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 1842 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	722	IN	Data Raw: 52 49 46 46 86 04 00 00 57 45 42 50 56 50 38 4c 79 04 00 00 2f 37 c0 0d 10 a7 07 29 92 24 47 92 f7 f1 47 72 f4 ee d7 a2 e2 14 08 47 6d 23 09 92 67 f8 53 39 72 f7 bc eb e9 30 6a 1b 49 92 77 f9 c3 58 86 fb 9b a3 03 39 92 24 45 92 67 2d 33 93 04 ab bf 58 7b 77 4f c6 12 da 10 93 48 ee 00 04 41 10 d4 5f 47 21 08 aa d7 05 85 0c d6 b1 c5 51 1a 8d 01 82 c8 2f da 82 97 e2 e3 6a a7 a9 8b 6c 9d 27 e5 2a d0 28 04 47 69 7c bb 2c c6 98 63 8a 20 a8 68 0c 11 69 34 fe f0 8f 6f fc 3b 12 2d bd d6 c0 75 77 fc 2f 0a ab 68 b4 14 36 0e 08 fe 16 85 2a 1b 04 41 30 42 fe a8 7e d1 a5 08 82 5f 74 19 51 f0 83 5b 85 14 95 0a 29 48 10 22 10 fa 2a c1 b8 52 a9 90 20 f0 57 a5 14 21 45 fa 96 54 39 73 86 ed 10 53 48 65 36 ca 34 94 29 6d de 8e 79 57 50 42 e5 ce 31 3b 66 c7 9d e3 bd eb ce 55 Data Ascii: RIFFWEBPVP8Ly/7)$GGrGm#gS9r0jIwX9$Eg-3X{wOHA_G!Q/jl'(Gi\|,c hi4o;-uw/h6A0B~_tQ[)H"*R W!ET9sSHe64)myWPB1;fU
2024-04-19 14:07:11 UTC	444	IN	Data Raw: 17 3d c0 49 e5 ba 8a 8e ee 7d fe c5 bf b6 6f 7c e1 a5 84 11 6f ff fb 45 bd c7 43 69 9d 76 80 b1 8f 6c 3c 77 62 eb e6 2d 27 92 aa 68 c4 1b 1f b1 18 68 df 47 30 fa c9 81 1d e7 d1 3b f8 63 c5 da de 57 e7 62 e6 ad dd bd e6 d1 a7 90 8f ae e1 f5 11 ea f2 4d 40 fd be ff 8b e9 16 39 3d da b7 16 c5 d7 0b 1d ea b7 fd 5f cd 52 24 cb be 3f 50 7a 47 10 b6 40 6c 10 37 81 ec f6 87 5e e3 07 81 0c ae 5f 9d 4b 65 1f de 74 4c f8 61 4b 65 2f f7 11 aa d8 db 87 37 4b f4 56 8c ac 77 3b 20 7b ff c0 66 e1 f7 c8 a0 7d 6d a5 f2 9e 3e b2 57 39 f2 a8 b4 4e c9 a5 54 0a cf 7c ae 0c 8e 6a 69 95 f4 d1 64 ea c5 38 52 b2 51 69 a6 9b 25 f3 49 61 bb 1b a9 38 1f f7 e5 0c 8b 54 de b7 16 33 bf 8c 91 22 43 00 b1 6e cf b7 ab ef 43 ae 8e 64 03 02 06 17 31 22 0d ac 3f fd 6c df 16 dd 86 54 dd f7 a9 Data Ascii: =I}o\|oECivl<wb-'hhG0;cWbM@9=_R$?PzG@l7^_KetLaKe/7KVw; {f}m>W9NT\|jid8RQi%Ia8T3"CnCd1"?lT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
312	192.168.2.6	50241	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	512	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 206 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 1842 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	206	IN	Data Raw: 52 49 46 46 c6 00 00 00 57 45 42 50 56 50 38 4c ba 00 00 00 2f 17 c0 05 10 87 a0 a8 6d 23 a9 fc 89 0d 84 21 30 00 e6 7b ec a6 34 14 34 92 1a 2d fe 95 21 01 01 04 0b 7f ab 90 8d 24 68 fc b5 96 61 01 0e e3 3f 35 91 a4 48 c3 6b 83 0c 03 a4 84 f8 77 74 57 21 a0 e3 f7 55 66 a8 1a 20 cd 55 1e 67 79 99 cc d1 07 f3 f0 0e de e2 0f bc fd 82 67 50 30 68 24 49 d1 ee d1 2f 1d f8 97 fb 74 28 20 a2 ff 0a dc b6 51 32 3e 86 5f c0 bc b8 64 96 dc 00 91 88 99 28 f6 73 d2 00 10 94 ba e9 45 1e 6e f1 74 f5 c8 04 2f a1 dc 43 e4 bb c1 12 b0 ca af 54 fc 52 e9 1f aa 7f bd bd ab ec 06 4b c1 31 1a 51 1b 67 b6 38 67 a1 f1 f7 9f f8 af 1d 02 Data Ascii: RIFFWEBPVP8L/m#!0{44-!$ha?5HkwtW!Uf UgygP0h$I/t( Q2>_d(sEnt/CTRK1Qg8g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
313	192.168.2.6	50247	173.194.219.119	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	512	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s24-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-19 14:07:11 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 122 X-XSS-Protection: 0 Date: Fri, 19 Apr 2024 13:36:29 GMT Expires: Sat, 20 Apr 2024 13:36:29 GMT Cache-Control: public, max-age=86400, no-transform Age: 1842 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:11 UTC	122	IN	Data Raw: 52 49 46 46 72 00 00 00 57 45 42 50 56 50 38 4c 65 00 00 00 2f 17 c0 05 10 27 40 26 6d d3 5e 35 3b f1 93 43 26 6d d3 5e d5 3b d5 b3 41 26 6d d3 7e b5 39 ff 22 a6 20 6d 03 66 d7 d5 b4 4f 5b 00 f8 bf 6d af aa 02 8c da 48 72 54 bb 4d 60 21 5c 20 d0 ba 3e 06 c7 1f 55 8e ff 88 fe 4f 00 8f 75 a2 ad ec 9e b3 00 ac 2b 2c eb 3f 00 ae e8 e6 24 59 ea aa 4d ab b1 ac 9e 08 00 Data Ascii: RIFFrWEBPVP8Le/'@&m^5;C&m^;A&m~9" mfO[mHrTM`!\ >UOu+,?$YM

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
314	192.168.2.6	50246	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1146	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:11 UTC	892	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:11 GMT Location: https://www.gstatic.com/feedback/js/ghelp/iba1nr9oiw01/chat_load.js Content-Security-Policy: script-src 'report-sample' 'nonce-to4D5QL3KwYf1iGjTF1lOw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
315	192.168.2.6	50248	64.233.177.113	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1471	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1071 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535622.0.0.0
2024-04-19 14:07:11 UTC	1071	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 33 35 33 35 36 33 30 34 38 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1713535630487",null,null,null,null,
2024-04-19 14:07:11 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:11 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:11 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 33 35 33 35 36 33 31 37 30 36 22 5d 0d 0a Data Ascii: 1a["900000","1713535631706"]
2024-04-19 14:07:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
316	192.168.2.6	50250	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:11 UTC	1558	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=n32cf68a96c0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:12 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:11 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-1-EswtP-_Dg-jvMkxxkuAw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:12 UTC	364	IN	Data Raw: 35 37 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 5738<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 31 2d 45 73 77 74 50 2d 5f 44 67 2d 6a 76 4d 6b 78 78 6b 75 41 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/rz4DvU-cY2JYCwHSTck0_qm-/styles__ltr.css"><script nonce="1-EswtP-_Dg-jvMkxxkuAw" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 78 64 50 65 79 49 58 6b 59 43 36 71 30 62 57 63 6d 6f 59 7a 61 75 4c 78 34 70 30 75 6a 44 43 43 32 51 56 54 33 4f 6c 70 65 74 53 55 6d 7a 7a 2d 7a 54 6e 52 4e 49 57 68 48 56 59 55 7a 74 5f 79 56 36 49 39 32 49 62 69 4d 4d 55 78 72 75 38 6e 6c 77 48 49 50 6b 74 79 74 6d 54 37 61 39 75 56 51 45 5f 4e 33 36 6a 70 77 6a 2d 48 59 43 34 6d 69 36 75 4e 57 46 69 67 6a 78 4b 66 74 43 5f 77 6a 69 35 6c 31 78 70 6c 52 4c 5a 37 52 5f 33 4b 51 4c 6b 63 39 47 38 6d 30 56 45 31 5f 72 59 67 7a 68 46 74 65 54 5f 64 76 4b 49 6f 4d 54 45 4a 4f 73 57 39 57 5f 57 6e 48 2d 37 32 43 6c 5a 44 46 6a 68 67 64 45 70 59 50 77 74 33 6d 71 46 66 46 49 38 45 62 70 79 46 65 38 4b 48 41 6b 78 61 30 30 73 4d 68 5f 4e 4a 5a 33 7a 46 69 75 56 72 49 30 73 4b 5a 31 51 69 57 76 54 47 79 6d 32 Data Ascii: xdPeyIXkYC6q0bWcmoYzauLx4p0ujDCC2QVT3OlpetSUmzz-zTnRNIWhHVYUzt_yV6I92IbiMMUxru8nlwHIPktytmT7a9uVQE_N36jpwj-HYC4mi6uNWFigjxKftC_wji5l1xplRLZ7R_3KQLkc9G8m0VE1_rYgzhFteT_dvKIoMTEJOsW9W_WnH-72ClZDFjhgdEpYPwt3mqFfFI8EbpyFe8KHAkxa00sMh_NJZ3zFiuVrI0sKZ1QiWvTGym2
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 5a 55 2d 6c 4b 61 79 61 68 61 62 54 33 67 65 31 73 4f 4f 5f 39 74 51 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 31 2d 45 73 77 74 50 2d 5f 44 67 2d 6a 76 4d 6b 78 78 6b 75 41 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 79 53 57 70 61 62 45 30 34 57 6b 35 6d 54 32 56 57 55 56 52 76 61 6e 52 30 4e 55 39 51 64 56 6b 35 57 57 35 46 4d 45 4e 42 56 44 67 79 64 45 63 77 56 69 31 5a 56 56 67 77 4c 6d 70 7a 5c 78 32 32 Data Ascii: ZU-lKayahabT3ge1sOO_9tQ"><script type="text/javascript" nonce="1-EswtP-_Dg-jvMkxxkuAw"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9ySWpabE04Wk5mT2VWUVRvanR0NU9QdVk5WW5FMENBVDgydEcwVi1ZVVgwLmpz\x22
2024-04-19 14:07:12 UTC	1255	IN	Data Raw: 73 33 4c 30 39 4a 65 6e 68 49 62 31 63 7a 62 31 42 68 54 57 63 31 62 56 46 44 55 7a 6c 4e 57 6a 46 79 4e 55 51 76 61 7a 52 6f 4e 47 6c 44 4e 33 56 33 5a 46 46 36 53 44 6c 42 63 7a 45 72 59 33 52 49 5a 6b 5a 31 56 56 42 53 4b 32 49 30 64 6b 59 76 56 7a 64 73 4e 58 56 51 5a 32 64 31 62 45 46 44 57 58 56 44 4d 6c 6f 30 5a 6d 74 52 61 55 78 6c 64 6e 41 33 64 55 56 74 62 33 6c 4d 59 6e 56 4c 61 30 31 79 62 48 64 75 5a 32 4a 6a 63 47 70 58 65 57 4a 73 52 44 64 4e 52 57 68 68 5a 56 6f 32 59 32 78 7a 4d 45 6c 58 57 57 70 6a 61 6d 68 73 63 6a 46 44 56 6b 78 6c 62 56 5a 33 56 32 6c 6e 4d 48 4a 30 55 30 46 57 59 6a 46 79 4d 7a 68 4f 54 6b 31 36 63 6e 63 78 53 31 41 79 5a 46 67 30 62 32 56 36 5a 55 74 4d 54 6b 6c 56 51 6d 46 6a 52 6c 56 4a 4d 30 6c 47 5a 6d 56 47 59 Data Ascii: s3L09JenhIb1czb1BhTWc1bVFDUzlNWjFyNUQvazRoNGlDN3V3ZFF6SDlBczErY3RIZkZ1VVBSK2I0dkYvVzdsNXVQZ2d1bEFDWXVDMlo0ZmtRaUxldnA3dUVtb3lMYnVLa01ybHduZ2JjcGpXeWJsRDdNRWhhZVo2Y2xzMElXWWpjamhscjFDVkxlbVZ3V2lnMHJ0U0FWYjFyMzhOTk16cncxS1AyZFg0b2V6ZUtMTklVQmFjRlVJM0lGZmVGY

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
317	192.168.2.6	50254	108.177.122.104	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:13 UTC	1552	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7872 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=rz4DvU-cY2JYCwHSTck0_qm-&size=invisible&cb=n32cf68a96c0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOahrzXYe__g2WPrn5Mc0LEybdoDBZG4OWTPWaUgFeBgji2EwwQHbYWCS8yDUrNx1IQj0S9jxLQp-fVtS5FU; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:13 UTC	7872	OUT	Data Raw: 0a 18 72 7a 34 44 76 55 2d 63 59 32 4a 59 43 77 48 53 54 63 6b 30 5f 71 6d 2d 12 a4 0f 30 33 41 46 63 57 65 41 35 35 68 66 6b 76 4c 38 32 35 6a 5a 47 57 2d 4a 4f 77 55 4c 39 69 6e 32 45 66 6b 65 44 6e 59 63 79 61 64 6c 56 6c 77 72 45 39 69 57 58 51 79 5f 63 30 63 62 4c 41 66 74 36 59 45 44 30 6b 4c 5a 6a 44 49 77 48 38 77 50 43 4a 6f 68 58 4e 41 38 78 66 41 6f 55 4a 4b 47 69 62 42 64 5a 4d 7a 63 31 70 2d 74 42 4c 4c 5f 6b 39 4a 66 5a 68 54 4c 73 6c 42 38 45 4d 37 55 4a 49 43 37 52 39 42 51 68 61 4a 6b 63 79 64 55 55 6b 6a 77 6f 34 76 31 63 6a 51 6c 41 73 31 36 74 66 38 30 6b 48 63 41 2d 4f 75 6b 72 66 42 35 63 61 55 44 58 72 76 61 37 50 71 4f 66 38 41 47 4c 58 6f 78 6b 34 42 61 52 51 5a 45 78 65 48 31 6d 71 5f 56 50 4a 43 35 73 67 73 41 50 39 34 6c 79 72 Data Ascii: rz4DvU-cY2JYCwHSTck0_qm-03AFcWeA55hfkvL825jZGW-JOwUL9in2EfkeDnYcyadlVlwrE9iWXQy_c0cbLAft6YED0kLZjDIwH8wPCJohXNA8xfAoUJKGibBdZMzc1p-tBLL_k9JfZhTLslB8EM7UJIC7R9BQhaJkcydUUkjwo4v1cjQlAs16tf80kHcA-OukrfB5caUDXrva7PqOf8AGLXoxk4BaRQZExeH1mq_VPJC5sgsAP94lyr
2024-04-19 14:07:13 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Fri, 19 Apr 2024 14:07:13 GMT Expires: Fri, 19 Apr 2024 14:07:13 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09ALYNOajJ5aKC3DiKeewT2fZtoWR42azqMY0KDO7xFL0bYKxRCOmTPrtEkXVDWRCCEnUBvp25pGmRmKDmsgr05Fg;Path=/recaptcha;Expires=Wed, 16-Oct-2024 14:07:13 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:13 UTC	559	IN	Data Raw: 61 36 66 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 7a 65 75 7a 65 62 2d 62 6c 33 78 56 63 51 47 6c 65 49 57 76 6a 51 38 54 70 6e 5f 72 6a 59 4f 58 30 6e 69 51 7a 62 55 54 68 6d 42 56 74 6e 55 63 4e 79 67 73 33 53 5a 62 4d 36 31 6c 46 4f 71 6f 67 52 46 33 61 5a 5a 57 49 73 61 6d 64 59 66 53 61 78 4a 55 34 52 6a 62 32 59 6c 52 75 32 65 72 55 35 62 7a 41 76 4d 5a 75 6d 49 68 65 6e 71 44 79 77 50 66 62 47 5a 4d 66 34 41 38 43 6b 42 67 59 4a 6b 76 72 63 7a 4c 46 4f 70 67 50 56 73 51 67 47 55 72 42 72 4f 41 67 4c 43 34 68 46 46 6a 69 4d 6c 73 4d 44 2d 6a 77 76 6e 62 51 69 49 62 2d 31 69 68 2d 44 44 53 45 32 71 31 46 61 4e 70 4d 4c 7a 68 2d 41 74 35 71 33 68 63 31 70 4e 6b 49 79 2d 4a 5a 72 47 31 32 4e 4e 43 72 5a 43 71 65 41 Data Ascii: a6f)]}'["rresp","03AFcWeA4zeuzeb-bl3xVcQGleIWvjQ8Tpn_rjYOX0niQzbUThmBVtnUcNygs3SZbM61lFOqogRF3aZZWIsamdYfSaxJU4Rjb2YlRu2erU5bzAvMZumIhenqDywPfbGZMf4A8CkBgYJkvrczLFOpgPVsQgGUrBrOAgLC4hFFjiMlsMD-jwvnbQiIb-1ih-DDSE2q1FaNpMLzh-At5q3hc1pNkIy-JZrG12NNCrZCqeA
2024-04-19 14:07:13 UTC	1255	IN	Data Raw: 57 79 76 71 79 71 64 4e 64 49 4f 54 72 53 49 47 64 43 76 73 5f 4e 4b 47 72 74 50 6d 6b 4f 70 66 65 43 4a 75 33 78 77 50 53 78 66 78 68 68 51 30 6f 39 34 36 35 67 54 51 66 53 55 39 73 53 49 32 63 4d 38 78 55 42 54 4d 4c 6c 53 6a 69 57 63 2d 66 42 42 49 52 78 39 57 57 35 61 54 6d 43 52 65 31 35 5f 67 39 77 79 76 4a 33 67 54 6e 6c 34 64 2d 39 58 56 36 4d 6b 79 34 42 72 70 7a 77 57 30 45 7a 77 39 61 77 43 68 73 57 56 34 49 59 6e 2d 75 69 73 34 4c 6b 35 70 64 4d 31 70 4f 64 75 6b 36 5f 6e 5a 79 72 54 6f 79 56 57 42 73 43 75 31 45 62 73 73 4a 45 50 33 45 46 65 71 4f 4b 61 4c 48 50 51 51 46 62 75 63 4c 6b 57 4d 55 7a 77 57 35 77 75 39 48 37 34 48 43 67 53 56 31 55 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 62 67 64 61 74 Data Ascii: WyvqyqdNdIOTrSIGdCvs_NKGrtPmkOpfeCJu3xwPSxfxhhQ0o9465gTQfSU9sSI2cM8xUBTMLlSjiWc-fBBIRx9WW5aTmCRe15_g9wyvJ3gTnl4d-9XV6Mky4BrpzwW0Ezw9awChsWV4IYn-uis4Lk5pdM1pOduk6_nZyrToyVWBsCu1EbssJEP3EFeqOKaLHPQQFbucLkWMUzwW5wu9H74HCgSV1U",null,120,null,null,null,["bgdat
2024-04-19 14:07:13 UTC	864	IN	Data Raw: 6c 47 5a 57 55 78 53 54 4d 31 62 45 6f 32 62 69 74 36 4d 6d 4a 77 56 57 35 4c 53 6d 56 69 54 6c 41 30 4e 48 52 73 63 47 39 49 5a 45 68 71 62 6e 68 36 52 44 52 74 59 30 45 31 63 33 4e 31 59 6d 68 4e 55 7a 4e 43 62 57 46 5a 56 6b 4e 4f 4f 54 67 30 4e 56 4a 6f 57 6b 68 78 62 44 67 72 54 30 56 53 63 55 46 5a 63 45 74 4a 56 31 70 44 4d 45 63 79 62 58 6c 73 5a 6a 42 71 53 32 4e 32 61 6c 68 5a 57 6b 4e 6a 52 54 6c 55 64 47 78 54 59 30 64 56 62 6e 6c 59 62 31 42 49 59 55 68 45 64 32 68 6a 61 56 6c 30 56 32 64 49 64 6a 5a 58 62 55 70 71 52 44 42 7a 62 55 31 58 62 47 6c 76 57 48 5a 68 5a 48 4a 42 57 45 6c 46 64 32 70 46 64 6d 31 6e 4f 45 4a 35 64 6c 6c 50 5a 6e 42 72 4b 32 35 6b 4e 48 6c 58 4d 44 49 33 55 32 63 32 51 7a 4a 6f 54 45 4e 48 4e 58 5a 4d 52 55 31 54 54 Data Ascii: lGZWUxSTM1bEo2bit6MmJwVW5LSmViTlA0NHRscG9IZEhqbnh6RDRtY0E1c3N1YmhNUzNCbWFZVkNOOTg0NVJoWkhxbDgrT0VScUFZcEtJV1pDMEcybXlsZjBqS2N2alhZWkNjRTlUdGxTY0dVbnlYb1BIYUhEd2hjaVl0V2dIdjZXbUpqRDBzbU1XbGlvWHZhZHJBWElFd2pFdm1nOEJ5dllPZnBrK25kNHlXMDI3U2c2QzJoTENHNXZMRU1TT
2024-04-19 14:07:13 UTC	1255	IN	Data Raw: 31 36 37 31 0d 0a 62 44 6c 58 52 6b 52 58 53 55 78 4a 61 54 68 75 62 33 6b 35 51 56 46 57 63 30 38 78 61 57 30 33 54 31 52 57 63 46 4a 30 55 54 52 61 56 6d 74 69 56 6d 6c 74 62 47 35 6d 65 45 78 71 56 31 70 47 61 32 52 4a 56 58 51 30 51 57 35 33 4c 33 68 59 52 6d 38 78 63 55 5a 4f 61 55 46 6e 61 47 4a 72 61 6a 68 33 56 54 52 52 4b 32 4e 61 53 45 67 35 5a 6b 70 6d 4e 45 4a 70 4f 46 4d 34 4d 55 70 48 4f 48 68 70 53 47 74 59 5a 48 6c 4e 55 30 64 74 4d 53 39 31 65 56 6f 77 61 55 6c 4d 51 54 64 51 63 6b 6c 70 63 6d 5a 6e 57 6d 5a 68 63 6d 51 31 4b 32 5a 50 59 57 64 31 4d 6b 4d 77 56 47 56 72 5a 55 4e 59 54 45 73 32 52 33 70 32 59 32 49 32 5a 45 4e 4d 61 55 4e 32 51 31 70 78 4c 31 41 35 56 46 4e 69 64 55 38 78 4e 32 39 4b 53 47 68 70 52 55 4a 49 55 6b 56 69 62 Data Ascii: 1671bDlXRkRXSUxJaThub3k5QVFWc08xaW03T1RWcFJ0UTRaVmtiVmltbG5meExqV1pGa2RJVXQ0QW53L3hYRm8xcUZOaUFnaGJrajh3VTRRK2NaSEg5ZkpmNEJpOFM4MUpHOHhpSGtYZHlNU0dtMS91eVowaUlMQTdQcklpcmZnWmZhcmQ1K2ZPYWd1MkMwVGVrZUNYTEs2R3p2Y2I2ZENMaUN2Q1pxL1A5VFNidU8xN29KSGhpRUJIUkVib
2024-04-19 14:07:13 UTC	1255	IN	Data Raw: 6c 52 72 4e 6c 59 78 54 55 74 58 65 6b 64 33 59 58 42 74 52 6b 35 78 65 6a 56 69 64 33 42 30 53 45 34 30 4d 58 63 34 56 54 56 71 59 55 52 7a 51 32 5a 74 61 48 63 34 4f 55 78 59 51 58 59 7a 4e 44 4a 71 52 32 5a 4f 54 69 38 77 5a 47 70 73 59 6d 70 47 4f 56 46 4a 55 45 46 68 61 6a 64 58 61 48 56 31 63 54 52 4c 64 55 31 4d 55 58 70 6f 52 6c 5a 76 56 44 55 79 62 57 70 7a 57 55 39 4e 56 6e 46 48 4e 6b 77 33 61 45 6b 78 56 6b 52 71 4b 33 51 78 4e 48 52 75 57 6e 42 49 4e 57 6c 68 4d 48 56 71 55 45 64 42 4d 6b 6b 77 65 6d 64 4e 52 33 4a 55 55 47 52 59 52 32 56 48 62 47 74 47 4f 55 64 55 51 6d 64 4f 53 7a 4a 31 5a 6d 34 76 62 45 49 72 4d 47 68 61 64 31 56 73 55 55 64 4c 55 43 39 31 65 48 68 78 57 47 6b 34 4d 6c 6c 77 62 44 64 47 4c 7a 42 49 61 6d 56 32 5a 56 52 46 Data Ascii: lRrNlYxTUtXekd3YXBtRk5xejVid3B0SE40MXc4VTVqYURzQ2ZtaHc4OUxYQXYzNDJqR2ZOTi8wZGpsYmpGOVFJUEFhajdXaHV1cTRLdU1MUXpoRlZvVDUybWpzWU9NVnFHNkw3aEkxVkRqK3QxNHRuWnBINWlhMHVqUEdBMkkwemdNR3JUUGRYR2VHbGtGOUdUQmdOSzJ1Zm4vbEIrMGhad1VsUUdLUC91eHhxWGk4MllwbDdGLzBIamV2ZVRF
2024-04-19 14:07:13 UTC	1255	IN	Data Raw: 55 6b 4e 57 55 48 45 77 4d 46 5a 34 62 7a 68 4e 54 6a 67 33 62 55 70 44 5a 33 41 78 55 30 68 35 5a 32 39 75 62 57 56 4e 64 56 45 35 61 47 73 30 4e 33 64 56 62 7a 52 4d 57 47 70 77 51 6b 56 73 63 6a 56 5a 64 47 64 78 54 58 68 35 62 6e 51 33 56 56 63 7a 51 55 5a 74 62 6b 74 42 53 32 46 46 62 31 63 33 63 30 4d 7a 64 54 42 4f 63 6d 46 35 53 30 68 68 4d 6d 52 6a 62 55 5a 45 55 31 46 56 4f 48 68 53 4d 33 4a 69 64 48 64 6a 51 55 78 79 65 6e 4e 78 4f 45 39 32 54 56 64 4c 63 31 64 49 53 47 35 34 5a 6d 6c 6b 59 54 5a 6b 4e 57 68 6b 52 48 68 44 51 57 38 77 5a 6e 6f 32 5a 32 6c 6b 57 6e 64 54 54 45 6c 70 4f 48 46 4a 4e 33 42 7a 4e 6d 31 35 62 6e 52 7a 62 6a 42 79 4d 55 39 78 55 56 6c 55 61 45 63 77 53 56 46 31 5a 7a 59 31 61 57 4d 34 4d 6d 4a 31 4e 58 63 31 4e 54 46 Data Ascii: UkNWUHEwMFZ4bzhNTjg3bUpDZ3AxU0h5Z29ubWVNdVE5aGs0N3dVbzRMWGpwQkVscjVZdGdxTXh5bnQ3VVczQUZtbktBS2FFb1c3c0MzdTBOcmF5S0hhMmRjbUZEU1FVOHhSM3JidHdjQUxyenNxOE92TVdLc1dISG54ZmlkYTZkNWhkRHhDQW8wZno2Z2lkWndTTElpOHFJN3BzNm15bnRzbjByMU9xUVlUaEcwSVF1ZzY1aWM4MmJ1NXc1NTF
2024-04-19 14:07:13 UTC	1255	IN	Data Raw: 6b 52 6e 42 36 61 32 5a 6c 55 69 39 74 56 48 46 44 61 6b 64 79 59 69 39 75 52 31 46 69 55 6d 6c 6c 55 7a 52 79 52 6d 5a 49 52 55 55 30 4b 7a 56 77 61 55 78 31 56 57 4e 35 54 55 31 4c 62 6b 77 35 57 48 4d 77 59 6d 4a 6a 63 30 67 77 4f 58 4e 32 54 6d 5a 43 53 69 74 5a 61 33 42 4d 4f 48 5a 45 55 48 6f 72 59 32 4a 6a 56 6b 46 4b 51 32 78 58 55 48 70 77 54 54 5a 70 56 32 5a 77 52 54 56 4d 63 47 39 30 4e 54 6b 78 65 6a 5a 47 4d 30 6c 45 61 33 68 45 54 30 68 32 52 6b 78 36 4e 32 4e 44 4b 33 64 47 5a 6e 51 79 54 45 52 74 4b 31 64 75 51 57 78 45 55 44 51 78 65 54 5a 57 53 54 42 51 56 7a 4e 55 57 6c 5a 73 52 47 31 56 52 57 4d 35 4e 57 68 69 61 45 68 6b 57 44 4e 4c 64 7a 45 79 62 6e 4a 45 64 57 4e 5a 54 57 39 30 65 6a 52 43 4d 47 63 78 54 55 4a 44 64 55 74 49 4e 54 Data Ascii: kRnB6a2ZlUi9tVHFDakdyYi9uR1FiUmllUzRyRmZIRUU0KzVwaUx1VWN5TU1Lbkw5WHMwYmJjc0gwOXN2TmZCSitZa3BMOHZEUHorY2JjVkFKQ2xXUHpwTTZpV2ZwRTVMcG90NTkxejZGM0lEa3hET0h2Rkx6N2NDK3dGZnQyTERtK1duQWxEUDQxeTZWSTBQVzNUWlZsRG1VRWM5NWhiaEhkWDNLdzEybnJEdWNZTW90ejRCMGcxTUJDdUtINT
2024-04-19 14:07:13 UTC	733	IN	Data Raw: 46 5a 4d 47 39 70 4d 7a 56 52 51 30 56 54 4d 45 70 47 53 57 70 33 65 56 51 30 65 55 31 43 52 7a 68 6d 64 32 68 7a 4d 6b 52 47 63 54 4a 56 57 6d 51 33 54 30 4e 6b 4d 47 5a 6d 55 7a 52 75 4e 69 74 5a 52 45 64 42 54 55 51 79 57 6b 52 68 63 69 39 6d 53 30 46 4e 62 58 4e 75 56 6c 64 42 5a 6c 4e 34 52 6e 64 52 57 55 5a 74 4b 32 34 7a 55 56 68 56 53 57 78 36 56 6d 35 6d 59 6b 59 31 62 31 5a 53 4e 6d 64 57 55 6c 42 42 56 6c 6f 33 57 6c 42 68 51 6d 6c 6e 61 58 64 4e 63 6d 74 43 5a 6a 46 70 54 6d 4a 6b 54 54 64 71 63 33 52 6a 61 6b 35 77 59 30 35 70 65 6e 5a 7a 53 45 64 45 51 30 74 71 54 54 56 46 4d 55 6c 32 62 47 78 53 4d 6d 4e 57 62 6b 31 32 55 47 6c 32 52 47 68 57 62 48 63 72 52 47 35 78 4f 48 5a 30 64 55 46 4f 55 45 35 32 4e 30 5a 61 62 31 64 6f 51 6b 74 50 5a Data Ascii: FZMG9pMzVRQ0VTMEpGSWp3eVQ0eU1CRzhmd2hzMkRGcTJVWmQ3T0NkMGZmUzRuNitZREdBTUQyWkRhci9mS0FNbXNuVldBZlN4RndRWUZtK24zUVhVSWx6Vm5mYkY1b1ZSNmdWUlBBVlo3WlBhQmlnaXdNcmtCZjFpTmJkTTdqc3Rjak5wY05penZzSEdEQ0tqTTVFMUl2bGxSMmNWbk12UGl2RGhWbHcrRG5xOHZ0dUFOUE52N0Zab1doQktPZ
2024-04-19 14:07:13 UTC	1255	IN	Data Raw: 65 38 66 0d 0a 48 68 74 56 56 5a 69 55 33 41 32 57 46 4a 49 54 6b 64 51 55 47 30 32 52 58 70 30 57 56 70 74 4d 48 42 4a 63 32 4a 6e 57 6e 49 7a 56 55 5a 6b 4e 6d 38 77 52 57 4e 70 4d 6b 38 7a 51 57 35 56 54 6b 56 31 51 33 4e 72 64 6e 52 57 54 79 38 72 62 43 38 32 52 32 4e 74 64 31 42 45 64 33 70 4e 57 6c 4e 49 61 32 30 32 57 6b 39 72 63 6d 49 79 64 56 68 6f 4d 6b 56 4a 65 46 46 50 54 33 4a 6a 4f 55 6b 79 62 6a 56 46 63 6e 55 77 65 53 74 79 4e 6c 46 35 56 6c 56 53 4f 45 70 6d 52 6e 49 77 62 57 5a 79 63 48 70 47 4e 32 6c 34 52 7a 41 30 55 43 38 76 57 6b 52 53 56 32 74 49 5a 6c 52 6d 5a 33 51 30 57 56 5a 75 62 55 31 6d 62 6e 42 44 53 47 35 43 54 55 4e 51 5a 7a 6c 36 53 6c 6c 35 64 47 45 7a 53 55 39 71 62 30 34 34 5a 48 52 43 61 32 5a 77 53 47 52 34 4e 57 6c Data Ascii: e8fHhtVVZiU3A2WFJITkdQUG02RXp0WVptMHBJc2JnWnIzVUZkNm8wRWNpMk8zQW5VTkV1Q3NrdnRWTy8rbC82R2Ntd1BEd3pNWlNIa202Wk9rcmIydVhoMkVJeFFPT3JjOUkybjVFcnUweStyNlF5VlVSOEpmRnIwbWZycHpGN2l4RzA0UC8vWkRSV2tIZlRmZ3Q0WVZubU1mbnBDSG5CTUNQZzl6Sll5dGEzSU9qb044ZHRCa2ZwSGR4NWl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
318	192.168.2.6	50255	172.253.124.103	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:14 UTC	771	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09ALYNOajJ5aKC3DiKeewT2fZtoWR42azqMY0KDO7xFL0bYKxRCOmTPrtEkXVDWRCCEnUBvp25pGmRmKDmsgr05Fg; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0
2024-04-19 14:07:14 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:14 GMT Expires: Fri, 19 Apr 2024 14:07:14 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:14 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-19 14:07:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
319	192.168.2.6	50256	64.233.177.113	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:14 UTC	1627	OUT	POST /_/PlayStoreUi/browserinfo?f.sid=4519024966731911618&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58034&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:14 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 30 25 32 43 30 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C0%2C0%5D%5D&
2024-04-19 14:07:14 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:14 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:14 UTC	15	IN	Data Raw: 35 63 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 Data Ascii: 5c)]}'[[["f
2024-04-19 14:07:14 UTC	83	IN	Data Raw: 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 32 30 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 30 2c 22 32 31 36 33 33 34 37 39 32 30 34 30 30 31 39 31 32 34 37 22 2c 31 30 34 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 32 5d 5d 5d 0d 0a Data Ascii: .mt"],["di",20],["af.httprm",20,"2163347920400191247",104],["e",4,null,null,92]]]
2024-04-19 14:07:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
320	192.168.2.6	50257	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:14 UTC	978	OUT	GET /_/PlayStoreUi/browserinfo?f.sid=4519024966731911618&bl=boq_playuiserver_20240417.11_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=58034&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gat_UA199959031=1; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:15 UTC	1139	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 19 Apr 2024 14:07:15 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:15 UTC	116	IN	Data Raw: 38 32 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 37 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 37 2c 22 33 38 30 35 34 35 35 36 37 36 35 34 38 37 38 37 30 34 35 22 2c 31 30 34 5d 2c 5b 22 65 22 2c Data Ascii: 82)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",7],["af.httprm",7,"3805455676548787045",104],["e",
2024-04-19 14:07:15 UTC	20	IN	Data Raw: 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 30 5d 5d 5d 0d 0a Data Ascii: 4,null,null,130]]]
2024-04-19 14:07:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
321	192.168.2.6	50258	64.233.177.113	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:16 UTC	1463	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 995 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:16 UTC	995	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 70 6c 61 79 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 34 31 37 2e 31 31 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 38 34 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_playuiserver_20240417.11_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],1884,
2024-04-19 14:07:16 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:16 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:16 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 14:07:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
322	192.168.2.6	50260	64.233.177.138	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:16 UTC	835	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:17 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 14:07:17 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:17 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 14:07:17 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
323	192.168.2.6	50262	64.233.177.113	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:24 UTC	1464	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1053 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:24 UTC	1053	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 70 6c 61 79 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 34 31 37 2e 31 31 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 38 34 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_playuiserver_20240417.11_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],1884,
2024-04-19 14:07:24 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:24 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 14:07:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
324	192.168.2.6	50263	64.233.177.100	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:25 UTC	835	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 14:07:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:25 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 14:07:25 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
325	192.168.2.6	50264	64.233.177.113	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:34 UTC	1464	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1085 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:34 UTC	1085	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 70 6c 61 79 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 34 31 37 2e 31 31 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 38 34 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_playuiserver_20240417.11_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],1884,
2024-04-19 14:07:35 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:35 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:35 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 14:07:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
326	192.168.2.6	50265	64.233.177.100	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:35 UTC	835	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:35 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 14:07:35 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:35 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 14:07:35 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port
327	192.168.2.6	50266	52.159.126.152	443

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:37 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 77 52 51 2f 62 2f 31 30 36 55 69 34 4e 70 72 30 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 65 36 66 30 38 37 39 34 37 34 31 62 31 37 63 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: wRQ/b/106Ui4Npr0.1Context: ce6f08794741b17c
2024-04-19 14:07:37 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-04-19 14:07:37 UTC	1064	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 34 31 0d 0a 4d 53 2d 43 56 3a 20 77 52 51 2f 62 2f 31 30 36 55 69 34 4e 70 72 30 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 65 36 66 30 38 37 39 34 37 34 31 62 31 37 63 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 6f 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 57 51 44 4d 49 53 30 2f 75 39 47 46 49 30 35 31 55 5a 55 74 55 73 74 77 67 6e 65 63 7a 7a 66 70 51 30 6d 6c 58 74 36 78 6b 56 6b 36 74 56 32 77 65 77 72 62 44 48 72 4c 42 4c 36 35 48 2f 6c 38 52 6e 34 72 30 73 45 56 6f 4c 68 46 35 73 50 6b 77 4a 53 58 7a 56 4a 34 31 69 58 43 54 48 70 45 79 33 71 77 4a 48 69 63 56 39 5a 50 6b Data Ascii: ATH 2 CON\DEVICE 1041MS-CV: wRQ/b/106Ui4Npr0.2Context: ce6f08794741b17c<device><compact-ticket>t=EwCoAupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAWQDMIS0/u9GFI051UZUtUstwgneczzfpQ0mlXt6xkVk6tV2wewrbDHrLBL65H/l8Rn4r0sEVoLhF5sPkwJSXzVJ41iXCTHpEy3qwJHicV9ZPk
2024-04-19 14:07:37 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 77 52 51 2f 62 2f 31 30 36 55 69 34 4e 70 72 30 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 63 65 36 66 30 38 37 39 34 37 34 31 62 31 37 63 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: wRQ/b/106Ui4Npr0.3Context: ce6f08794741b17c<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-04-19 14:07:37 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-04-19 14:07:37 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 49 41 67 78 48 6a 77 6c 68 6b 47 67 50 46 4c 47 74 48 52 6a 41 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: IAgxHjwlhkGgPFLGtHRjAQ.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
328	192.168.2.6	50267	64.233.177.113	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:42 UTC	1464	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1026 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:42 UTC	1026	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 70 6c 61 79 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 34 31 37 2e 31 31 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 34 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 38 34 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_playuiserver_20240417.11_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.134"],[4,0,0,0,0]]],1884,
2024-04-19 14:07:43 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 19 Apr 2024 14:07:42 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-19 14:07:43 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-19 14:07:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
329	192.168.2.6	50268	64.233.177.100	443	1976	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-19 14:07:43 UTC	835	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIlqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.1292932856.1713535574; _gcl_au=1.1.238356200.1713535575; OTZ=7520526_48_52_123900_48_436380; NID=513=pG6basQI852nDepzj52_S3cl2rYcNNvaVbTlGW9OofEzHe9FOaHalUW20NHkFJEwL6mh1-TmkCV8LBjCJgflV1m-w5x9_6nG0_hqEA1MqPOu86DXkrOgqfYHOdu-W_O0efgWbu6j0DFCJta5a_j4Tc_aNFIXDxvMHWVQdL1Ttj0; _ga=GA1.1.1762860312.1713535574; _ga_6VGGZHMLM2=GS1.1.1713535576.1.1.1713535631.0.0.0
2024-04-19 14:07:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 19 Apr 2024 14:07:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-19 14:07:43 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-19 14:07:43 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Target ID:	0
Start time:	16:05:49
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:05:52
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2436 --field-trial-handle=2364,i,1424053567238745393,8923254789058136685,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:05:55
Start date:	19/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://aka.ms/AAb9ysg"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://aka.ms/AAb9ysg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Windows Analysis Report
https://aka.ms/AAb9ysg