Edit tour

Windows Analysis Report
ATT00002.html

Overview

General Information

Sample name:	ATT00002.html
Analysis ID:	1431641
MD5:	f55b2507d5de7a31e7f50a74c7804165
SHA1:	b67f93b6acb5e19c391387001234a0d2026494d3
SHA256:	1a143f058fb431286e81f95a2a42afaa128ba26fcdd57d43a53c30de552abf82
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5084 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\ATT00002.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=2012,i,9608964629998709726,7678094856405373894,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 4331sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://play.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320

Source: chromecache_204.2.dr	String found in binary or memory: http://127.0.0.1:$
Source: chromecache_270.2.dr	String found in binary or memory: http://aka.ms/outlookFAQ
Source: chromecache_270.2.dr	String found in binary or memory: http://box.com/static/html/terms.html
Source: chromecache_302.2.dr	String found in binary or memory: http://git.io/yBU2rg
Source: chromecache_255.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_276.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_270.2.dr	String found in binary or memory: http://mail.edison.tech
Source: chromecache_156.2.dr	String found in binary or memory: http://reportaproblem.apple.com
Source: chromecache_156.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_156.2.dr	String found in binary or memory: http://schema.org/ItemListOrderAscending
Source: chromecache_270.2.dr	String found in binary or memory: http://sparkmailapp.com
Source: chromecache_319.2.dr	String found in binary or memory: http://support.google.com/googleplay?p=report_review_computer
Source: chromecache_319.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_156.2.dr	String found in binary or memory: http://www.apple.com
Source: chromecache_270.2.dr	String found in binary or memory: http://www.apple.com/itunes/download/
Source: chromecache_270.2.dr	String found in binary or memory: http://www.box.com/static/html/privacy.html
Source: chromecache_260.2.dr, chromecache_149.2.dr	String found in binary or memory: http://www.gimp.org/xmp/
Source: chromecache_285.2.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_285.2.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_285.2.dr, chromecache_186.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_285.2.dr, chromecache_186.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: ATT00002.html	String found in binary or memory: https://aka.ms/o0ukef
Source: chromecache_270.2.dr	String found in binary or memory: https://aka.ms/onenote-ios-suggest
Source: chromecache_270.2.dr	String found in binary or memory: https://aka.ms/onenotefeedback
Source: chromecache_270.2.dr	String found in binary or memory: https://amp-api-edge.apps.apple.com
Source: chromecache_156.2.dr	String found in binary or memory: https://amp-api.books.apple.com/
Source: chromecache_156.2.dr	String found in binary or memory: https://amp.apple.com
Source: chromecache_307.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_156.2.dr	String found in binary or memory: https://api.books.apple.com/
Source: chromecache_327.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_276.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/#organization
Source: chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com/$
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/assets/images/knowledge-graph/apps.png
Source: chromecache_270.2.dr, chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com/story/id1538632801
Source: chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com/story/id1539235847
Source: chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com/story/id1604959672
Source: chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com/us/app/apple-podcasts/id525463029
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/box-the-content-cloud/id290853822
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/box-the-content-cloud/id290853822"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/email-edison-mail/id922793622
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/email-edison-mail/id922793622"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-app-for-outlook/id1544804494
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-app-for-outlook/id1544804494"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-com-free-email-cloud/id461316429
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mail-com-free-email-cloud/id461316429"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-authenticator/id983156458
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-authenticator/id983156458"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-excel/id586683407
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-excel/id586683407"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-onedrive/id477537958
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-onedrive/id477537958"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-outlook/id951937596
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-teams/id1113153706
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-teams/id1113153706"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-word/id586447913
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/microsoft-word/id586447913"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mymail-box-email-client-app/id722120997
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/mymail-box-email-client-app/id722120997"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/xbox/id736179781
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/xbox/id736179781"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/zoho-mail-email-and-calendar/id909262651
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/app/zoho-mail-email-and-calendar/id909262651"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/productivity-apps/6007
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/productivity-apps/6007"
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/microsoft-corporation/id298856275
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/microsoft-corporation/id298856275"
Source: chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1436214772
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1455416618
Source: chromecache_270.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1455416618"
Source: chromecache_156.2.dr	String found in binary or memory: https://apps.apple.com/us/story/id1699686830
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_270.2.dr	String found in binary or memory: https://bit.ly/outlookprivacy
Source: chromecache_220.2.dr	String found in binary or memory: https://buy.music.apple.com/account/v1/affiliation/association
Source: chromecache_220.2.dr	String found in binary or memory: https://buy.tv.apple.com/account/v1/affiliation/association
Source: chromecache_285.2.dr, chromecache_186.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_155.2.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_155.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_302.2.dr	String found in binary or memory: https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.
Source: chromecache_155.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_155.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_155.2.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_276.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_276.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_276.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_276.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_276.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_276.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_276.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_220.2.dr	String found in binary or memory: https://git.io/fjule
Source: chromecache_220.2.dr	String found in binary or memory: https://git.io/fxCyr
Source: chromecache_285.2.dr	String found in binary or memory: https://google.com
Source: chromecache_285.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_276.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_276.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/48/c2/f4/48c2f437-f725-e227-59ad-8c075e2907f
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/8d/fb/f3/8dfbf394-7c38-8a86-f229-b5ca04f249f
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/1c/2b/7c/1c2b7cc6-e029-9bf9-f26f-4b5f533ee2f
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/6e/e2/e7/6ee2e7db-bf98-0d30-7adf-15aa80debeb
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/09/15/89/091589bc-f33b-2d71-9e77-2ef3729cd95
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features3/v4/96/18/e7/9618e7f9-abcd-beae-1698-c48249a8ae5e/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features3/v4/ea/2c/e5/ea2ce53d-eef4-088e-15b2-5280d1be13ca/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features41/v4/ed/2c/45/ed2c45db-7f5c-07c6-0f33-315f176121a0
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple115/v4/16/ee/6c/16ee6c0c-5c13-60cb-91ed-5ff00a90cb09/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple115/v4/48/03/51/480351fd-99d5-2df1-d1df-257bafdacfbb/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple115/v4/c1/11/ab/c111abbb-6906-a42d-5f4f-4a84ec0bc621/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/3d/bf/7e/3dbf7e7f-4e8f-00b6-6456-46557866aa1d/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple125/v4/26/c1/50/26c150e2-3c16-f280-96d4-6b92cc442223/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple125/v4/44/f9/b8/44f9b8d6-4e09-ebe8-10a5-8c0e287d4d4e/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/08/2c/e2/082ce251-7521-bba8-c8df-c876a7a58aa4/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/1a/29/0e/1a290eaf-858a-5646-dc8d-2ac276722ed2/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/9b/52/94/9b529485-4990-f633-e922-9d5e38723d3b/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/ac/db/20/acdb20bf-752e-c81f-f447-ccf6ac5fada4/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/c2/26/9a/c2269aa0-cdc4-044e-9a2c-224102ed63a7/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/e4/b1/18/e4b118e7-baa2-4f99-97b2-229e99d90901/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/18/6b/12/186b1254-9830-57a1-bb41-5223f073693a/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/1b/fd/01/1bfd0112-a692-6e6c-f88a-ce38d4e063ec/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/27/7d/0c/277d0c2d-59bc-5040-a1d1-48ebbae136d6/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/58/b3/68/58b36885-c235-4c8b-5702-8dc84bad8564/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/6b/f9/b5/6bf9b5e0-6d32-c8de-9331-e8062057caea/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/8c/a4/73/8ca473b6-73d5-c3aa-7d73-1e2a9256be21/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/d4/0b/b1/d40bb1d1-2715-3a91-6c04-0dc68dcb3212/
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/3c/b3/45/3cb34544-49ad-f5a7-cf96-bae0e5b
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e33
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/c1/9d/53/c19d53e6-c08b-ec12-9dec-ab6dd48
Source: chromecache_270.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/d0/99/00/d099001a-0f42-0414-f655-2b81dff
Source: chromecache_270.2.dr	String found in binary or memory: https://is2-ssl.mzstatic.com
Source: chromecache_270.2.dr	String found in binary or memory: https://is3-ssl.mzstatic.com
Source: chromecache_270.2.dr	String found in binary or memory: https://is4-ssl.mzstatic.com
Source: chromecache_270.2.dr	String found in binary or memory: https://is5-ssl.mzstatic.com
Source: chromecache_156.2.dr	String found in binary or memory: https://itunes.apple.com$
Source: chromecache_156.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewFeature?id=1476734846&mt=11
Source: chromecache_156.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?cc=
Source: chromecache_156.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?genreId=38&mt=11
Source: chromecache_220.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStoreServices.woa/wa/processRedirectUrl
Source: chromecache_270.2.dr	String found in binary or memory: https://itunes.apple.com/subscribe?app=music
Source: chromecache_270.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6007
Source: chromecache_270.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6007"
Source: chromecache_270.2.dr	String found in binary or memory: https://js-cdn.music.apple.com
Source: chromecache_182.2.dr, chromecache_180.2.dr, chromecache_317.2.dr, chromecache_163.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt
Source: chromecache_270.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1713369093418
Source: chromecache_270.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components/
Source: chromecache_270.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.j
Source: chromecache_270.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.js?t=
Source: chromecache_220.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/media-api
Source: chromecache_276.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_270.2.dr	String found in binary or memory: https://locate.apple.com/
Source: chromecache_319.2.dr, chromecache_295.2.dr	String found in binary or memory: https://maps.google.com/?q=
Source: chromecache_231.2.dr	String found in binary or memory: https://myaccount.google.com/termsofservice
Source: chromecache_270.2.dr	String found in binary or memory: https://outlook.live.com
Source: chromecache_186.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_285.2.dr, chromecache_186.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_204.2.dr	String found in binary or memory: https://payments.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_204.2.dr	String found in binary or memory: https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1
Source: chromecache_194.2.dr	String found in binary or memory: https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZb
Source: chromecache_319.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_204.2.dr	String found in binary or memory: https://play.google.com/
Source: chromecache_319.2.dr, chromecache_295.2.dr	String found in binary or memory: https://play.google.com/about/comment-posting-policy?hl=
Source: chromecache_295.2.dr	String found in binary or memory: https://play.google.com/about/play-terms/index.html;target;_blank;class;cOP9Jc
Source: chromecache_295.2.dr	String found in binary or memory: https://play.google.com/googleplaygames
Source: chromecache_295.2.dr	String found in binary or memory: https://play.google.com/googleplaygames;target;_blank;class;cOP9Jc
Source: chromecache_295.2.dr	String found in binary or memory: https://play.google.com/intl/all_
Source: chromecache_155.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_156.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$
Source: chromecache_295.2.dr, chromecache_231.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_295.2.dr	String found in binary or memory: https://policies.google.com/terms;target;_blank;class;cOP9Jc
Source: chromecache_255.2.dr	String found in binary or memory: https://preactjs.com
Source: chromecache_270.2.dr	String found in binary or memory: https://products.office.com/mobile/office
Source: chromecache_302.2.dr	String found in binary or memory: https://raw.github.com/emberjs/ember.js/master/LICENSE
Source: chromecache_155.2.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_276.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_276.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_270.2.dr, chromecache_295.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_295.2.dr	String found in binary or memory: https://schema.org/InStock
Source: chromecache_319.2.dr, chromecache_295.2.dr	String found in binary or memory: https://schema.org/Offer
Source: chromecache_295.2.dr	String found in binary or memory: https://schema.org/PreOrder
Source: chromecache_276.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_270.2.dr	String found in binary or memory: https://sparkmailapp.com/legal/privacy-app
Source: chromecache_270.2.dr	String found in binary or memory: https://sparkmailapp.com/legal/terms
Source: chromecache_167.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/
Source: chromecache_294.2.dr, chromecache_263.2.dr	String found in binary or memory: https://ssl.gstatic.com/support/realtime/operator/1713513666563/operatordeferred_bin_base.js
Source: chromecache_276.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_186.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_186.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_307.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_270.2.dr	String found in binary or memory: https://support.apple.com
Source: chromecache_319.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_276.2.dr, chromecache_167.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_204.2.dr	String found in binary or memory: https://support.google.com/googleplay/?p=remote_install_error
Source: chromecache_295.2.dr	String found in binary or memory: https://support.google.com/googleplay/?p=report_content
Source: chromecache_319.2.dr, chromecache_295.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/10066529
Source: chromecache_204.2.dr	String found in binary or memory: https://support.google.com/googleplay/answer/6014972
Source: chromecache_295.2.dr	String found in binary or memory: https://support.google.com/googleplay?p=eligibility_requirements
Source: chromecache_276.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_276.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_155.2.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_155.2.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_155.2.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_155.2.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_270.2.dr	String found in binary or memory: https://support.xbox.com/help/subscriptions-billing/manage-subscriptions/microsoft-software-license-
Source: chromecache_307.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_285.2.dr, chromecache_186.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_276.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_204.2.dr	String found in binary or memory: https://tokenized.play.google.com
Source: chromecache_156.2.dr	String found in binary or memory: https://tv.apple.com/search?q=
Source: chromecache_270.2.dr	String found in binary or memory: https://twitter.com/AppStore
Source: chromecache_327.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_270.2.dr	String found in binary or memory: https://www.OneNote.com
Source: chromecache_155.2.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_270.2.dr, chromecache_156.2.dr	String found in binary or memory: https://www.apple.com
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/#organization
Source: chromecache_156.2.dr	String found in binary or memory: https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/airpods/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/apple-arcade/
Source: chromecache_156.2.dr	String found in binary or memory: https://www.apple.com/apple-books/
Source: chromecache_156.2.dr	String found in binary or memory: https://www.apple.com/apple-vision-pro/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/choose-country-region/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/entertainment/
Source: chromecache_270.2.dr, chromecache_156.2.dr	String found in binary or memory: https://www.apple.com/ios/app-store/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/ipad/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/iphone/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/itunes/download/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/legal/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/legal/internet-services/terms/site.html
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/legal/privacy/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/mac/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/macos/mojave-preview/#mac-app-store
Source: chromecache_156.2.dr	String found in binary or memory: https://www.apple.com/osx/apps/app-store/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/retail/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/sitemap/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/tv-home/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/buy_accessories
Source: chromecache_270.2.dr, chromecache_156.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/help/sales_refunds
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/store
Source: chromecache_270.2.dr	String found in binary or memory: https://www.apple.com/watch/
Source: chromecache_270.2.dr	String found in binary or memory: https://www.dropbox.com
Source: chromecache_270.2.dr	String found in binary or memory: https://www.dropbox.com/privacy
Source: chromecache_270.2.dr	String found in binary or memory: https://www.dropbox.com/terms
Source: chromecache_270.2.dr	String found in binary or memory: https://www.dropboxforum.com
Source: chromecache_319.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_307.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_307.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_307.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_276.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_186.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_307.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_327.2.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_319.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=$
Source: chromecache_155.2.dr, chromecache_238.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: ATT00002.html	String found in binary or memory: https://www.google.com/search?q=d
Source: chromecache_276.2.dr, chromecache_167.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_276.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_276.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_276.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_285.2.dr, chromecache_186.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_285.2.dr, chromecache_186.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_285.2.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_307.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_319.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_155.2.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_204.2.dr	String found in binary or memory: https://www.gstatic.com/android/market_images/web/reviews_not_found.png
Source: chromecache_319.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_164.2.dr, chromecache_238.2.dr, chromecache_229.2.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_167.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_276.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_186.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_270.2.dr	String found in binary or memory: https://www.wikidata.org/wiki/Q368215
Source: chromecache_285.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_226.2.dr	String found in binary or memory: https://xp-qa.apple.com
Source: chromecache_270.2.dr, chromecache_226.2.dr	String found in binary or memory: https://xp.apple.com
Source: chromecache_318.2.dr	String found in binary or memory: https://xp.apple.com/config/1/report
Source: chromecache_220.2.dr	String found in binary or memory: https://xp.apple.com/register
Source: chromecache_252.2.dr, chromecache_216.2.dr, chromecache_318.2.dr, chromecache_237.2.dr, chromecache_230.2.dr	String found in binary or memory: https://xp.apple.com/report

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.31.62.93:443 -> 192.168.2.4:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.85.23.86:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.4:49976 version: TLS 1.2

Source: classification engine

Classification label: clean1.winHTML@33/308@38/18

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\ATT00002.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=2012,i,9608964629998709726,7678094856405373894,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=2012,i,9608964629998709726,7678094856405373894,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Next

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: D$b=function(a,b,c,d,e,f){const g=_.Y(k=>{k.T("WYReyc");_.kO(k,"_blank"===f?"open_in_new":"arrow_forward","W7A5Qb");k.V()}),h=_.HN(k=>{e&&k.ma("jslog",e)});b.T("M1Xidb");_.Pdb(a,b,d,g,c,f,!0,"VxpoF",void 0,void 0,h);b.V()}; source: chromecache_204.2.dr
Source:	Binary string: _.Pdb=function(a,b,c,d,e,f,g,h,k,m,n,p){const t=void 0===p?!0:p;var v=void 0===v?!0:v;const z=null!=m,x=z?"tt-"+_.FM():"";p=_.Y(C=>{var D="yHy1rc eT1oJ"+(g?" QDwDD":"");D+=v?" mN1ivc":"";D+=h?" "+h:"";const I=_.HN(K=>{z&&Mdb(K,x);_.Z(n)&&_.IN(K,_.XN(n))}),J=_.HN(K=>{z&&_.iO(K,x,void 0,void 0,void 0,void 0,!0);_.Z()&&_.IN(K,_.XN())});C.T("Oa2w0d");C.rc(pdb,"khHavf","div",{Xr:!0,icon:d,ariaLabel:c,Ha:D,Td:e,Ft:!0,zp:f,Kn:J,jsname:k,Ze:void 0,attributes:I,Zd:!1,uv:t,Yi:void 0,Zi:void 0,Vl:void 0,Af:void 0}, source: chromecache_319.2.dr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
part-0013.t-0009.t-msedge.net	0%	Virustotal		Browse
part-0012.t-0009.t-msedge.net	0%	Virustotal		Browse

URLs

Source	Detection	Scanner	Label	Link
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://git.io/fjule	0%	Avira URL Cloud	safe
https://git.io/fjule	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	0%, Virustotal, Browse	unknown
play.google.com	172.217.215.100	true	false		high
play-lh.googleusercontent.com	172.217.215.119	true	false		high
www.google.com	64.233.177.99	true	false		high
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	0%, Virustotal, Browse	unknown
aka.ms	23.35.30.151	true	false		high
stats.g.doubleclick.net	172.253.124.156	true	false		high
is2-ssl.mzstatic.com	unknown	unknown	false		high
c.s-microsoft.com	unknown	unknown	false		high
is3-ssl.mzstatic.com	unknown	unknown	false		high
is1-ssl.mzstatic.com	unknown	unknown	false		high
is5-ssl.mzstatic.com	unknown	unknown	false		high
is4-ssl.mzstatic.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	low
https://play-lh.googleusercontent.com/GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw	false		high
https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw	false		high
https://play-lh.googleusercontent.com/Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw	false		high
https://aka.ms/krs?id=-crYd9Lj	false		high
https://play-lh.googleusercontent.com/NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw	false		high
https://aka.ms/o0ukef	false		high
https://www.google.com/favicon.ico	false		high
https://www.google.com/search?q=d+and+cafe&oq=D+and+Cafe&aqs=chrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7&sourceid=chrome&ie=UTF-8	false		high
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&gjid=1174901316&_gid=2015979708.1714049658&_u=YEBAAEAAAAAAACgDI~&z=1088505056	false		high
https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw	false		high
https://play-lh.googleusercontent.com/kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw	false		high
https://play-lh.googleusercontent.com/BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw	false		high
https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&_u=YEBAAEAAAAAAACgDI~&z=1513772729	false		high
https://www.google.com/tools/feedback/chat_load.js	false		high
https://play.google.com/store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj	false		high
https://play-lh.googleusercontent.com/YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw	false		high
https://www.google.com/recaptcha/api.js	false		high
https://play-lh.googleusercontent.com/nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s64-rw	false		high
https://play-lh.googleusercontent.com/JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw	false		high
https://play-lh.googleusercontent.com/a-/ALV-UjXu_LA0yHlVyZP-9D4A1_oAR5qpsouGW-A4uLCPF6Kh5IVQKX8=s32-rw	false		high
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=9st82i90u303	false		high
https://play-lh.googleusercontent.com/_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_186.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_276.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4	chromecache_270.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_155.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_276.2.dr	false		high
https://support.google.com	chromecache_319.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_276.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/search?q=d	ATT00002.html	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_276.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_307.2.dr	false		high
https://www.OneNote.com	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/48/c2/f4/48c2f437-f725-e227-59ad-8c075e2907f	chromecache_270.2.dr	false		high
https://aka.ms/onenote-ios-suggest	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/58/b3/68/58b36885-c235-4c8b-5702-8dc84bad8564/	chromecache_270.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_155.2.dr	false		high
https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.	chromecache_155.2.dr	false	Avira URL Cloud: safe	low
https://policies.google.com/terms;target;_blank;class;cOP9Jc	chromecache_295.2.dr	false		high
https://www.dropbox.com/privacy	chromecache_270.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_276.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_307.2.dr	false		high
https://support.google.com/googleplay/?p=report_content	chromecache_295.2.dr	false		high
http://mail.edison.tech	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/ac/db/20/acdb20bf-752e-c81f-f447-ccf6ac5fada4/	chromecache_270.2.dr	false		high
https://support.google.com/recaptcha	chromecache_155.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_276.2.dr, chromecache_167.2.dr	false		high
https://git.io/fjule	chromecache_220.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.dropbox.com	chromecache_270.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_276.2.dr	false		high
http://box.com/static/html/terms.html	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Features113/v4/8d/fb/f3/8dfbf394-7c38-8a86-f229-b5ca04f249f	chromecache_270.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_327.2.dr	false		high
https://www.apache.org/licenses/	chromecache_155.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_276.2.dr	false		high
https://schema.org	chromecache_270.2.dr, chromecache_295.2.dr	false		high
https://support.xbox.com/help/subscriptions-billing/manage-subscriptions/microsoft-software-license-	chromecache_270.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_276.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_155.2.dr	false		high
https://is5-ssl.mzstatic.com	chromecache_270.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_276.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_276.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_276.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_276.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_186.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple116/v4/3d/bf/7e/3dbf7e7f-4e8f-00b6-6456-46557866aa1d/	chromecache_270.2.dr	false		high
https://policies.google.com/privacy	chromecache_295.2.dr, chromecache_231.2.dr	false		high
https://bit.ly/outlookprivacy	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e33	chromecache_270.2.dr	false		high
https://payments.sandbox.google.com/payments/v4/js/integrator.js?rk=1	chromecache_204.2.dr	false		high
https://play.google.com	chromecache_319.2.dr	false		high
http://www.gimp.org/xmp/	chromecache_260.2.dr, chromecache_149.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_327.2.dr	false		high
https://support.google.com/inapp/%	chromecache_276.2.dr	false		high
https://is1-ssl.mzstatic.com	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/27/7d/0c/277d0c2d-59bc-5040-a1d1-48ebbae136d6/	chromecache_270.2.dr	false		high
https://cloud.google.com/contact	chromecache_155.2.dr	false		high
http://schema.org	chromecache_156.2.dr	false		high
https://support.google.com/inapp/	chromecache_276.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_276.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_155.2.dr, chromecache_238.2.dr, chromecache_229.2.dr	false		high
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_276.2.dr	false		high
https://twitter.com/AppStore	chromecache_270.2.dr	false		high
https://sparkmailapp.com/legal/terms	chromecache_270.2.dr	false		high
https://feedback2-test.corp.google.com/inapp/%	chromecache_276.2.dr	false		high
http://sparkmailapp.com	chromecache_270.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/c1/9d/53/c19d53e6-c08b-ec12-9dec-ab6dd48	chromecache_270.2.dr	false		high
https://schema.org/Offer	chromecache_319.2.dr, chromecache_295.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Features3/v4/ea/2c/e5/ea2ce53d-eef4-088e-15b2-5280d1be13ca/	chromecache_270.2.dr	false		high
https://cloud.google.com/recaptcha-enterprise/billing-information	chromecache_155.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/inapp/%	chromecache_276.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/8c/a4/73/8ca473b6-73d5-c3aa-7d73-1e2a9256be21/	chromecache_270.2.dr	false		high
https://googleads.g.doubleclick.net	chromecache_285.2.dr	false		high
https://play.google.com/googleplaygames	chromecache_295.2.dr	false		high
https://www.google.cn/tools/feedback/	chromecache_276.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/inapp/	chromecache_276.2.dr	false		high
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/1a/29/0e/1a290eaf-858a-5646-dc8d-2ac276722ed2/	chromecache_270.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.215.100	play.google.com	United States	15169	GOOGLEUS	false
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
23.35.30.151	aka.ms	United States	31109	AKAMAI-LAEU	false
108.177.122.119	unknown	United States	15169	GOOGLEUS	false
64.233.177.113	unknown	United States	15169	GOOGLEUS	false
172.253.124.155	unknown	United States	15169	GOOGLEUS	false
172.253.124.156	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.215.119	play-lh.googleusercontent.com	United States	15169	GOOGLEUS	false
64.233.177.99	www.google.com	United States	15169	GOOGLEUS	false
142.250.105.119	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.185.103	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.4
192.168.2.23
192.168.2.13
192.168.2.15

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431641
Start date and time:	2024-04-25 14:52:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ATT00002.html
Detection:	CLEAN
Classification:	clean1.winHTML@33/308@38/18
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .html Browse: https://aka.ms/o0ukef Browse: https://www.google.com/search?q=d+and+cafe&oq=D+and+Cafe&aqs=chrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7&sourceid=chrome&ie=UTF-8 Browse: https://krs.microsoft.com/completeRedirect/-crYd9Lj?correlationId=a8a29aa0bd0ef81202324dbb48c51c9f&platformSelected=Android Browse: https://krs.microsoft.com/completeRedirect/-crYd9Lj?correlationId=a8a29aa0bd0ef81202324dbb48c51c9f&platformSelected=iOS

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 173.194.219.94, 74.125.136.113, 74.125.136.138, 74.125.136.139, 74.125.136.102, 74.125.136.100, 74.125.136.101, 74.125.136.84, 34.104.35.123, 142.250.9.95, 172.253.124.95, 173.194.219.95, 142.251.15.95, 74.125.138.95, 142.250.105.95, 108.177.122.95, 64.233.177.95, 64.233.176.95, 74.125.136.95, 64.233.185.95, 184.25.165.167, 199.232.214.172, 184.31.62.39, 192.229.211.108, 23.54.201.219, 142.250.105.94, 172.217.215.95, 64.233.185.94, 74.125.138.94, 64.233.185.138, 64.233.185.100, 64.233.185.102, 64.233.185.139, 64.233.185.101, 64.233.185.113, 173.194.219.97, 142.250.105.113, 142.250.105.139, 142.250.105.102, 142.250.105.100, 142.250.105.138, 142.250.105.101, 23.216.68.23, 23.209.36.74, 23.209.36.26, 23.46.200.37, 23.216.72.196, 23.61.218.120, 23.7.50.59, 184.31.52.29, 23.55.252.214, 23.201.214.36, 108.177.122.94, 172.253.124.139, 172.253.124.101, 172.253.124.113, 172.253.124.102, 172.253.124.138, 172.253.124.100
Excluded domains from analysis (whitelisted): xp.itunes-apple.com.akadns.net, ssl.gstatic.com, slscr.update.microsoft.com, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, e17437.dsct.akamaiedge.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, ocsp.digicert.com, itunes.apple.com.edgekey.net, update.googleapis.com, www.gstatic.com, www.google-analytics.com, fs.microsoft.com, content-autofill.googleapis.com, krs.microsoft.com, e6858.dscx.akamaiedge.net, amp-api-edge-cdn-lb.itunes-apple.com.akadns.net, c-s.cms.ms.akadns.net, itunes-cdn.itunes-apple.com.akadns.net, edgedl.me.gvt1.com, www.apple.com.edgekey.net, a1437.dscq.akamai.net, c.s-microsoft.com-c.edgekey.net, clients.l.google.com, www.apple.com.edgekey.net.globalredir.akadns.net, js-cdn.music.apple.com, amp-api-edge.apps.apple.com, www.apple.com, www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net, www.googletagmanager.com, xp.apple.com, azurefd-t-prod.trafficmanager.net, xp.apple.com.edgekey.net, js-cdn-music-lb.itunes-apple.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
13.107.246.41	http://www.surveymonkey.com/tr/v1/te/PUEIZHbYTJGrZEIkVMWlCoicdktJQxDgUh5D5mhe1V5RrTmuIdynx7PnFHXRUx9slMgQjvZdyUWqhr_2Bl49oNXjy3TOleTjKMKR6WbsGcrstlT2syBMlSkW7U5aKlKcBD9NFqJqrxGyODSWJJr6_2BMbXsKkDA_2F0ep4iw23xw6huuM_3D	Get hash	malicious	Unknown	Browse	www.eand.com/en/index.html
	02-11-2024 MVP.html	Get hash	malicious	Unknown	Browse	www.mvphealthcare.com/
	02-11-2024 MVP.html	Get hash	malicious	Unknown	Browse	www.mvphealthcare.com/
	http://y84x.mjt.lu/lnk/CAAABPdweCoAAAAAAAAAAAVG8MwAAAA6pnMAAAAAAAvpOQBlhIO4-ImJ1UImRBC5CNVIkLSaswAL-7Q/2/r-vXj7XjX0azsD7QNKNH-A/aHR0cHM6Ly9hcHBjZW50ZXIubXMvaW52aXRhdGlvbnMvb3JnL2IxNjM2ZDYzMTE0YTM0MjBkYWFmNTg4YTE5N2Y0N2MxNGY4ZDViNWMyM2ZjM2RhYTgxMWM0ODgwOWM1ZTZkNjQ	Get hash	malicious	Unknown	Browse	appcenter.ms/
	http://url7816.acetaxi.com/ls/click?upn=k9eqZnPBEZmPVPka3LxS61O1ksdCJOgznvtiwccqzi2-2BneqvfCXEJ-2FQj-2BZo7snmCwDunBahf2LYhfs7qQp7-2F23xLStq-2BkxJ70xqVvyXzkWM-3D8Cie_z5TGfmB4A65PPE2hDgRdrx6OZsZ3AmrJLHJ0M9ePWeHP5QDTWsAVp117uXam9dNn-2BGSxHeP-2BInRF-2Bgy2v-2FXBPODjmLss6NRV2RYsUYD7um77hgLl0ET9pPGTHF-2BQ1m6-2Fw7-2B-2B9DJOpakZj874YLC8uUep0F7rZMDlM46gmHmQqqAeCV477M0h2b07T2IcXu0hzUcKftN0UG2jhPq8qo00cQl0gvOLl-2BjChyaOdLpENao-3D	Get hash	malicious	Unknown	Browse	twiliosolutions.azurefd.net/
13.107.246.40	NEW ORDER.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zs
	PO_OCF 408.xls	Get hash	malicious	Unknown	Browse	2s.gg/42Q
	06836722_218 Aluplast.docx.doc	Get hash	malicious	Unknown	Browse	2s.gg/3zk
	Quotation.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zM
239.255.255.250	Air Transport Services Group Open Benefits Enrollment.eml	Get hash	malicious	Unknown	Browse
	Isass.exe	Get hash	malicious	Unknown	Browse
	Isass.exe	Get hash	malicious	Unknown	Browse
	https://us-west-2.protection.sophos.com/?d=google.co.za&u=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&p=m&i=NjFjOWM1NjJmM2YxNmYxMDA2OTJjYWZj&t=THJkcUUxZW9PQzAvNFZ0aWxoalJFOStYQ0dWVXgvYjJ6aS82eTZoUDhJcz0=&h=276fada438bf49c2be0403c28d11d4f4&s=AVNPUEhUT0NFTkNSWVBUSVZ-gOCnEu8L0hbaTxie_PLqb02g0uIV3TDGiGYGiGwGbDIPB11limBksw9z8tTzOiKEbBHGOtpfybJD4FbJxpna6swSu6rycA6MG9n6CTc4aMLN4lGfbapv3cHB_2jaSF4	Get hash	malicious	HTMLPhisher	Browse
	https://www.highcpmgate.com/vdvpyk3j?key=f2b21af2cea51f467a32bdc200d0bff7	Get hash	malicious	Unknown	Browse
	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	Get hash	malicious	Unknown	Browse
	https://pub-02d879d6055b4f31b3db7cbbb1499011.r2.dev/%60%60~~~%5D%5D%5D%5D%5D.html#theunis@khk.co.za	Get hash	malicious	HTMLPhisher	Browse
	https://content.amanet.org/?m=CiGW.81UwlU3LD6ZH5M4ZoUXv03dAeWfC&r=https://control.mailblaze.com/index.php/survey/ps97367sjy584	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse
	http://185.172.128.63/v8sjh3hs8/index.php	Get hash	malicious	Unknown	Browse
	https://www.mavengroupglobal.uk/DYuPhO4h/v?url=qs6eqSurmcWXoQKf6zcjhg6iePdEghHaDt49dq0x39xgLRd6M1#qs6eqSurmcWXoQKf6zcjhg6iePdEghHaDt49dq0x39xgLRd6M1EFEEZ2FicmllbC5wYXJ2dWxlc2N1QGRldXRzY2hlYmFobi5jb20=	Get hash	malicious	Unknown	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
part-0012.t-0009.t-msedge.net	http://confirmartucuentamsnaquimx.hstn.me/login.live.com_login_verify_credentials_outlook.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://u44058082.ct.sendgrid.net/ls/click?upn=u001.wjMLvmoK1OC9dTKy5UL4VbqcIJmZWkGKJypB0ZF6j6rXk8HVnxe0g2af-2BenroUoONz6EEWthgE-2Bi2vVRUosKTZRVQ5v63hCdxrdKCztVooIv51imK8tr-2Bb3beAsH6u-2FNluJlUKmd7nST-2B9m-2Bl2Rgv4y6uHLimO0TjhZzZ-2F-2BDlllJQne3tT99z6x4W12pJpddTL-2BoJ2-2Bdo6961pFN3dV2Rg-3D-3DeWGT_h-2FW4DSvZGhKY-2FmU3Rq-2F3L-2FXo2OZSHdaVvlpgAgHQWDXPYB9CNYi-2FcvonFCbsEhjt9RP-2BQa7dTwbMJOOaP3JRnMW6mQAitl6qAb1EkaAR-2BmnZDE6Bi3ooqtCrrMW-2F3TPNMK3AVi1YKIdTOZivmUJGaXdrtbqCykfnTTkN9KMRy80rdRqf6LWUCYWGeeaXb-2BD6jokMbr-2FaJKvKMHDNWAfHyhaE6QO9pw7souFUseKb40g-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	768.xla.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	Gam.xls	Get hash	malicious	Unknown	Browse	13.107.246.40
	https://22apmic22.z13.web.core.windows.net/	Get hash	malicious	TechSupportScam	Browse	13.107.246.40
	https://pub-4b7bb8835c824e67a15332b376de2d9d.r2.dev/mafo.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.40
	https://www.epa.gov/climateleadership/simplified-ghg-emissions-calculator	Get hash	malicious	Unknown	Browse	13.107.246.40
	POP GA_vc0mmr2.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://mota-engil.caf0sa.com/tiyamike.chikabadwa56078874fessdGl5YW1pa2UuY2hpa2FiYWR3YUBtb3RhLWVuZ2lsLnB097140964?5101245168264822=2215800694735574#dGl5YW1pa2UuY2hpa2FiYWR3YUBtb3RhLWVuZ2lsLnB0	Get hash	malicious	Unknown	Browse	13.107.246.40
aka.ms	Frija.exe	Get hash	malicious	Unknown	Browse	104.77.222.106
	https://www.evernote.com/shard/s352/sh/c5b064d3-81b7-a855-ed61-83d18387982e/rh0QNLpXezwS0Lk5Ol-JVMGd70lNk0GnRafgmOPlP_NV9QSSc2HA6Bg8ZA	Get hash	malicious	Unknown	Browse	96.17.65.182
	SecuriteInfo.com.Variant.Lazy.478346.22398.13028.exe	Get hash	malicious	Unknown	Browse	23.47.169.168
	Nezur.exe	Get hash	malicious	Unknown	Browse	184.25.166.183
	https://kittibank.co.uk/prvmnedpolodocsee/edernedgopoelcsee/.filepage/vivi///ZGI4N0BvZnNvcHRpY3MuY29t	Get hash	malicious	Unknown	Browse	23.54.198.150
	ATT00002.html	Get hash	malicious	HTMLPhisher	Browse	184.31.49.214
	https://outlook.office365.com/Encryption/retrieve.ashx?recipientemailaddress=accounts%40hanyapartners.com&senderemailaddress=Stephanie.MacLeod%40Scottishfriendly.co.uk&senderorganization=AwGQAAAAAowAAAADAQAAALa33MrQ9hFJoRKfhZTfRaBPVT1zY290dGlzaGZyaWVuZGx5YXNzdXJhbmNlLm9ubWljcm9zb2Z0LmNvbSxPVT1NaWNyb3NvZnQgRXhjaGFuZ2UgSG9zdGVkIE9yZ2FuaXphdGlvbnMsREM9R0JSUDI2NUEwMTAsREM9UFJPRCxEQz1PVVRMT09LLERDPUNPTblmspKO1kNHhEaj%2bhlwfilDTj1Db25maWd1cmF0aW9uLENOPXNjb3R0aXNoZnJpZW5kbHlhc3N1cmFuY2Uub25taWNyb3NvZnQuY29tLENOPUNvbmZpZ3VyYXRpb25Vbml0cyxEQz1HQlJQMjY1QTAxMCxEQz1QUk9ELERDPU9VVExPT0ssREM9Q09NAQ%3d%3d&messageid=%3cCWLP265MB205077B8969162EEAB0135BFD8672%40CWLP265MB2050.GBRP265.PROD.OUTLOOK.COM%3e&cfmRecipient=SystemMailbox%7bD0E409A0-AF9B-4720-92FE-AAC869B0D201%7d%40scottishfriendlyassurance.onmicrosoft.com&consumerEncryption=false&senderorgid=97ff5c4f-3e96-4526-9345-3384a4b894be&urldecoded=1&e4e_sdata=Kd5KX4fym2Uh0mZ83TLYuFqpe2TrjtQG15rHP2xbrYMmQODsUo614prmWYEpic7Q%2ft%2f2N4RRwpHoqoY3uGyNlB3AAVId3qffeQNT%2fZnE%2fpMrh%2bHfKMqRASgiI25ut0OLWaf8qqUb1fvEtRMFCZicXBAREF7YOcwii48ZSlPoWLT2UUlg0y%2b1Lf5dDan6IGbXQ4yUe5KITooUMM63LQ2j0CiaC2hVeqFdJbIodcNQ25qs%2biqyUVxa2zsH7D79VHvY24vCrTalRV3JLmzQ1yQDPtSvAyika1PCRqupz%2b0DSXHBMKVb3hbxCdw8EoUbRhziZZrdVI3zeHn2bwrEbx25rA%3d%3d	Get hash	malicious	Unknown	Browse	23.46.202.180
	Aging#04533.htm	Get hash	malicious	HTMLPhisher	Browse	23.54.202.151
	Aging#04533.htm	Get hash	malicious	HTMLPhisher	Browse	23.54.202.151
	https://aka.ms/SaRA-OfficeUninstallFromPC	Get hash	malicious	Unknown	Browse	23.75.70.152
part-0013.t-0009.t-msedge.net	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	Get hash	malicious	Unknown	Browse	13.107.213.41
	http://confirmartucuentamsnaquimx.hstn.me/login.live.com_login_verify_credentials_outlook.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://pub-839300a9c6054ed7b1c425122a9dd984.r2.dev/doc.html	Get hash	malicious	HTMLPhisher	Browse	13.107.246.41
	https://u44058082.ct.sendgrid.net/ls/click?upn=u001.wjMLvmoK1OC9dTKy5UL4VbqcIJmZWkGKJypB0ZF6j6rXk8HVnxe0g2af-2BenroUoONz6EEWthgE-2Bi2vVRUosKTZRVQ5v63hCdxrdKCztVooIv51imK8tr-2Bb3beAsH6u-2FNluJlUKmd7nST-2B9m-2Bl2Rgv4y6uHLimO0TjhZzZ-2F-2BDlllJQne3tT99z6x4W12pJpddTL-2BoJ2-2Bdo6961pFN3dV2Rg-3D-3DeWGT_h-2FW4DSvZGhKY-2FmU3Rq-2F3L-2FXo2OZSHdaVvlpgAgHQWDXPYB9CNYi-2FcvonFCbsEhjt9RP-2BQa7dTwbMJOOaP3JRnMW6mQAitl6qAb1EkaAR-2BmnZDE6Bi3ooqtCrrMW-2F3TPNMK3AVi1YKIdTOZivmUJGaXdrtbqCykfnTTkN9KMRy80rdRqf6LWUCYWGeeaXb-2BD6jokMbr-2FaJKvKMHDNWAfHyhaE6QO9pw7souFUseKb40g-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.246.41
	KxgGGaiW3E.exe	Get hash	malicious	Quasar	Browse	13.107.213.41
	EXTERNAL Bonnie St Dryden is inviting you to collaborate on One_docx(Apr 23) DOC3848493.msg	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://lithiuimvalley.com/ssd	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	13.107.213.41
	https://u44056869.ct.sendgrid.net/ls/click?upn=u001.nH1ryR-2Btr2av-2Bkfc8quLEXKlGRKFonctFf3nB-2FAP-2Bjae3IsQgCoKtK-2FQ57cEEmmhZzRyd07G16kQ6rsc4EaJT6S7Rh48kOVsBPHV-2Fkkk9Vfz7cojLOCLuj4sUGVMM7pbdmwtinmtiLhfYkhEkgve628OiJsccHyeYc3lkmkn6epsOmmj4-2Fi-2BWjxfm73m7vUzCOGnDWnQJBmmd6DmkDcfIw-3D-3DlLb9_7VBE-2BPKrWdDFE8TeQU0FNoYmRNt3BbsAfHCQfpyMVcUv91cWM1GbR6tMnpfVZqwoeCii1Z-2FHB6Wp4CGi-2FJ4Nq2flvhbRyRKwbWUqyssDslf87wBQZbBQ0EZsTXlvzjuj1ZnarL4QCJJlvUup-2FiM-2F9GPG6X3nhhKKp6sQ0v-2BBs5Jrrpzc3e5B2aUKKEJUx1Hjrx3xc16wmpK1HmM2sLiNIweMaJlJ9frDis7-2BK565mLw-3D	Get hash	malicious	HTMLPhisher	Browse	13.107.246.41
	https://www.jottacloud.com/s/359ee8b110b8ca8464998842a5d227ed979	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://assets-usa.mkt.dynamics.com/6f8aa86c-81f8-ee11-a1fa-0022482e8338/digitalassets/standaloneforms/4b367e61-8601-ef11-a1fd-0022482f3701	Get hash	malicious	HTMLPhisher	Browse	13.107.246.41

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	Get hash	malicious	Unknown	Browse	13.107.42.12
	R0hb7jyBcv.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	https://starmicronics.com/support/download/starprnt-intelligence-software-setup-exe-file-v3-6-0a/#unlock	Get hash	malicious	Unknown	Browse	13.107.42.14
	g77dRQ1Csm.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	http://confirmartucuentamsnaquimx.hstn.me/login.live.com_login_verify_credentials_outlook.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://pub-839300a9c6054ed7b1c425122a9dd984.r2.dev/doc.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://www.bing.com/////////////////////ck/a?!&&p=0533e94aab0b2a6eJmltdHM9MTcxMzQ4NDgwMCZpZ3VpZD0xNDE4NDZmNi1iZWY1LTY4NjUtMjQ0YS01MjkwYmYwZTY5ODQmaW5zaWQ9NTIyMA&ptn=3&ver=2&hsh=3&fclid=141846f6-bef5-6865-244a-5290bf0e6984&u=a1aHR0cHM6Ly9reDRrc3IuYXJ0aWNsZXdyaXRpbmdnZW5lcmF0b3IueHl6Lw#vds2aa29aYmRldmluc0B3ZS13b3JsZHdpZGUuY29t	Get hash	malicious	HTMLPhisher	Browse	52.96.190.194
	http://electricalsworksflorida.com/j6u	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	https://gamma.app/docs/Shared-Document-9j9g6z8iqo1w0uu	Get hash	malicious	HTMLPhisher	Browse	13.107.246.69
	https://calderamanufacturing-my.sharepoint.com/:b:/g/personal/rcuthbertson_summitsteelinc_com/EXRx7fLGAqJIpy0dNft_VNoBmqNR3C5b2tYm8DhDa2jZuQ?e=L3dfvE	Get hash	malicious	Unknown	Browse	52.104.109.39
AKAMAI-LAEU	https://nonyheter.net/?_=%2F%23KJWqMdlUlBn8PPpbUQ%2FoyYTnfw%3D%3D	Get hash	malicious	Unknown	Browse	23.35.29.115
	7zrLU5V186.exe	Get hash	malicious	Glupteba, Neoreklami, Stealc, Vidar	Browse	23.45.49.192
	Monthly Statement.HTML	Get hash	malicious	HTMLPhisher	Browse	23.45.49.178
	https://masalaconsultors-my.sharepoint.com/:f:/p/masala/Ej7vVTtvURJDk1GzvpWm3yYBJhixTTqkT6A58To07iY5tA?e=NZEbrh	Get hash	malicious	HTMLPhisher	Browse	23.45.49.193
	https://masalaconsultors-my.sharepoint.com/:f:/p/masala/Ej7vVTtvURJDk1GzvpWm3yYBJhixTTqkT6A58To07iY5tA?e=NZEbrh	Get hash	malicious	HTMLPhisher	Browse	23.45.49.172
	file.exe	Get hash	malicious	Glupteba	Browse	23.45.49.179
	Swift Payment.msg	Get hash	malicious	HTMLPhisher	Browse	23.45.49.171
	https://tlctrlstate.com/Mpetra.de.graaf@ict.nl	Get hash	malicious	Unknown	Browse	23.35.29.21
	https://re-captha-version-3-39.top/ms/1410_desc_1_B/?c=2e52e252-0e12-419b-8389-405438cdfa40&a=l143904	Get hash	malicious	Unknown	Browse	23.35.29.21
	http://rakishev.org	Get hash	malicious	Unknown	Browse	23.35.29.115
MICROSOFT-CORP-MSN-AS-BLOCKUS	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	Get hash	malicious	Unknown	Browse	13.107.42.12
	R0hb7jyBcv.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	https://starmicronics.com/support/download/starprnt-intelligence-software-setup-exe-file-v3-6-0a/#unlock	Get hash	malicious	Unknown	Browse	13.107.42.14
	g77dRQ1Csm.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, Stealc, Vidar, zgRAT	Browse	20.157.87.45
	http://confirmartucuentamsnaquimx.hstn.me/login.live.com_login_verify_credentials_outlook.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://pub-839300a9c6054ed7b1c425122a9dd984.r2.dev/doc.html	Get hash	malicious	HTMLPhisher	Browse	13.107.213.41
	https://www.bing.com/////////////////////ck/a?!&&p=0533e94aab0b2a6eJmltdHM9MTcxMzQ4NDgwMCZpZ3VpZD0xNDE4NDZmNi1iZWY1LTY4NjUtMjQ0YS01MjkwYmYwZTY5ODQmaW5zaWQ9NTIyMA&ptn=3&ver=2&hsh=3&fclid=141846f6-bef5-6865-244a-5290bf0e6984&u=a1aHR0cHM6Ly9reDRrc3IuYXJ0aWNsZXdyaXRpbmdnZW5lcmF0b3IueHl6Lw#vds2aa29aYmRldmluc0B3ZS13b3JsZHdpZGUuY29t	Get hash	malicious	HTMLPhisher	Browse	52.96.190.194
	http://electricalsworksflorida.com/j6u	Get hash	malicious	HTMLPhisher	Browse	13.107.213.69
	https://gamma.app/docs/Shared-Document-9j9g6z8iqo1w0uu	Get hash	malicious	HTMLPhisher	Browse	13.107.246.69
	https://calderamanufacturing-my.sharepoint.com/:b:/g/personal/rcuthbertson_summitsteelinc_com/EXRx7fLGAqJIpy0dNft_VNoBmqNR3C5b2tYm8DhDa2jZuQ?e=L3dfvE	Get hash	malicious	Unknown	Browse	52.104.109.39

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	Air Transport Services Group Open Benefits Enrollment.eml	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	Isass.exe	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	Isass.exe	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	https://1drv.ms/o/s!AmFI0faGJpjZhESzK-ltQ-Z_UHmf?e=0OfhLS	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	https://content.amanet.org/?m=CiGW.81UwlU3LD6ZH5M4ZoUXv03dAeWfC&r=https://control.mailblaze.com/index.php/survey/ps97367sjy584	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	http://185.172.128.63/v8sjh3hs8/index.php	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	https://www.mavengroupglobal.uk/DYuPhO4h/v?url=qs6eqSurmcWXoQKf6zcjhg6iePdEghHaDt49dq0x39xgLRd6M1#qs6eqSurmcWXoQKf6zcjhg6iePdEghHaDt49dq0x39xgLRd6M1EFEEZ2FicmllbC5wYXJ2dWxlc2N1QGRldXRzY2hlYmFobi5jb20=	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	http://ipscanadvsf.com	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	https://www.canva.com/design/DAGDNh45X_4/PPCLYIV4Y8uUaoEW7ZJrJQ/view?utm_content=DAGDNh45X_4&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	Unknown	Browse	13.85.23.86 40.127.169.103 184.31.62.93
	R0hb7jyBcv.exe	Get hash	malicious	Mars Stealer, PureLog Stealer, RedLine, SectopRAT, Stealc, Vidar, zgRAT	Browse	13.85.23.86 40.127.169.103 184.31.62.93

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	downloaded
Size (bytes):	7626
Entropy (8bit):	5.215559608926212
Encrypted:	false
SSDEEP:	192:OtQ0m8mBOZgS9tn0Ll9829FAeHlVPrMNW:OtFuSD4829FAeHzPAW
MD5:	33AF753815E0763128B33C38F393AF19
SHA1:	FD81C07EDD497B91F91629687D2AB6976F287E17
SHA-256:	A7A8465112A5F495E5C95139568A59BF35B3116624A5861B71472070520D699E
SHA-512:	D5981A0D80035A3E0B8EFBE12B90C5E82A53F8C2CBC100001D344DC645B07A76DB3B75D863A5BB733F54B9E13B4C0A515B63041F50DCFC9AC750C092C436DBF5
Malicious:	false
Reputation:	moderate, very likely benign file
URL:	https://apps.apple.com/assets/chunk.26.d8fd25d7ba389f9fe03e.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[26],{71026:function(e,t,n){n.r(t),n.d(t,{environment:function(){return a},eventRecorder:function(){return F},immediateEventRecorder:function(){return q},logger:function(){return D},network:function(){return E},setEventQueuePostIntervalEnabled:function(){return N}}).var s=n(76588),r=n(24178),u=n(32722),o=r.SC.attachDelegate,a={setDelegate:function(e){return o(this,e)},globalScope:function(){return window}},i={AJAX:"ajax",AJAX_SYNCHRONOUS:"ajaxSynchronous",IMAGE:"image",BEACON:"beacon"},v=r.vc.metricsDisabledOrDenylistedEvent,c=r.vc.removeDenylistedFields,l={},p=["dsId","consumerId"].function f(e,t,n){var s=null.return n&&!v.call(u.Z,n.eventType,t)&&(c.call(u.Z,n,t),m(t,n),e.apply(null,Array.prototype.slice.call(arguments,1)),s=n),s}function d(e,t){l[e]=l[e]\|\|{},l[e]=t}function Q(){l={}}function m(e,t){l[e]=l[e]\|\|{},l[e].anonymous&&p.forEach((function(e){delete t[e]}))}var y=r.SC.attachDel

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1880
Entropy (8bit):	7.8878381210189445
Encrypted:	false
SSDEEP:	48:NoW9rslz80QWxB7T8SjWr9slcrQUJKv/61H:NzrslIWx5TRmAiqQH
MD5:	41DB2402073D34E7C539CDFBB7290875
SHA1:	BC2B13CBDB0D33959F4F4A8B109DAD914280DD53
SHA-256:	CA4D719D9BF9FD875E4993E15D21D645303A93A032EB7CE738035ED880E29B8D
SHA-512:	AE7A13D618D884DDB2EDABEF76ACB029A529A8F92BFBDCE384B4CC26A7637B9F0A861A97019BD812B0C02359B6D762C71AA9509760DFED0787FC679603F09BF2
Malicious:	false
Reputation:	low
Preview:	RIFFP...WEBPVP8LD.../?...M(j.H.;....'...O..lMB.....Y',XE...+:._.p..>....m..^...v....m...5NJ.._d)...%W.G.]....<.,...c..."...C..?C.S.=X\|^.m[W.m.:'W.m_.6>...V_....'.....L.L......T.Ll..N..H.....{.L"<...c..J..)..~U.3...k..f...............03+mU.L..8.....s-.z`..O?......RF...Vj3.\.....z.....Z..).......jy..V........#t%.s....:....>....F...yJ..........T........c.......<..dJ5..4t?..3..g8{S_]....8z..O..9l...(i..B.h...a....U....Y.E.=..@H...J-...LV)...%#....PU.s...U[..!.[L..l...5..F.+=..C...x........A.,..'...-.n....'5)....c...Qf.,..V.b..4...h..%.....n96.JB.....&..r{..M..I..J......V...,.._Dy.....)....c...:.......!.`.\.."=H..9Jx.G~.&>L.6.\.."c~....;6.(..~Bz._....#.pp..sw....2,H."A/R.8V.......&.....wa....{xC.e.;....tp......bON..3{x.}}.5.....XdbD\...b.I....N9).../.j.>...A.k...z... ;..+........KwX.........j.......I...h.`3QS..Cw0...2.OH..;`.$G..9IyQ....@...:2..DC#.86..#^...Fz5.z..U.Rl.W..#......."....n+..B.&........AM{.....k...z...O.@..k.?.....4

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	31756
Entropy (8bit):	7.956502283816247
Encrypted:	false
SSDEEP:	768:St2kT5NDIf0gcLIpQIP+DYzwVTCAxC62NxBcGFVUKOtLDvE:St2kT5N0f0gcLIt+DWwVTxQ62NxBnFZh
MD5:	2BF44080957E5D7552E6E4F36DD55652
SHA1:	F413AF4B336B19710BD76168CD2D1F39BE0A653E
SHA-256:	8621574F773A70374D42FADE3865AD3AFA33D31C2256A9935DE61FA1EFF65F9D
SHA-512:	B47201404E19FE2A314DAD8788ED6D2E28EE79B50BFF1D0DD805356A969D4B2B7902BE73822881627698A3B8FCBFEBE733358172C23A8F225A642E1764952857
Malicious:	false
Reputation:	low
Preview:	RIFF.\|..WEBPVP8L.{../..I.M8.$5lr..@ ..,.i!...PU..U.O......VV../l.SV...\r....-+..........t._.I_...z...l`..V2..c.XF..n1]7..NG...G.....P.O..6.....xw.J...t.U.k.0..--{...s......6l..p..".}.n.rZ.@..-8..\k.F"6..v+....j..~.A.U?...o.}?.n\|..x.x....V}N..U^..p.~...B.j.q#..E..._]U...O..#D...d+..ZUy...x......f'..arX.......l.mNY.9..K..@.......O...^.$.c..".,.I\.pa.7\|..X.c.d..-7.6l..2...n5..^Z.NM.BE7...t.Y.y...R..]..E.M..mkz.]8c..u......W#...[.n.z5.RI.vv....uF...1X..~..........[YY....(.T...\]Vi....R.Vf..[Xyi...RRU.R.6..j.rZ.Z...!iY....K.UH...PYIiiU.TYNU..G......l......;.;.j^Z....0.) zl.v..37..+VL..c.......x...s.ad8.@..nn^........}E./....o.=.G?c.1.:.@..Y7..'..=...x....O{.../+..=`-....6.Y.:.@. 1...L.K.=.1.a.)....{d...+.u.....f...y._,u..i.f&...=..7.3..f.......`.i.@.N.......@.\..h....K.N......1....r....{.......Y^...0.........,..NX.N.i..m.C....#Lh..Hc=\.z.).........4...!...M......"D...R........l.9KK..I.]q..^...S......B#qO..C.1.P.vLbR...9...B.......$.v.......D.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	244
Entropy (8bit):	7.153897685834863
Encrypted:	false
SSDEEP:	6:c3Zulvhb4/Ep0/bXorL+jrXTvx2GCTn0LpIaoyl:c3Ql94sp0/jorUXTZ2GS09Iaoyl
MD5:	9DEA3CBD9E0F9B455FDE32DCA965B41F
SHA1:	8049A160E77BF9FDD2446113611BB8C99D1E5A53
SHA-256:	3A1344E63287114EAD7F90BE694B7FC95370BF7B215D89BE93A54F39C15011CB
SHA-512:	E559F6BC3C44DC6E793EC98832926FAEB3D2D34811041868244CA89DF67DFAEB899689723C0DDAB5A58063EB4E42539614BEBBA23E09A8697E863F20416DB594
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	RIFF....WEBPVP8L..../....5...Fm4.W#...0D.]....J...r..l.2...6.mU....5.C.(.....'vi...R...Fm.t.......\.._..Y.....c; .........\| ....pk..b....`..........p..../.72<.........AQ.........Y..@.ErE.....d..]:..KG.^.@L.S..g..z..^.g.zg..\.JE..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	9371
Entropy (8bit):	6.775324714137017
Encrypted:	false
SSDEEP:	192:aSkVHhQQSk+tvHzKRlZfR/bwJ6b3nvIQe:aRVBaTTKRN0KIP
MD5:	96E7DA23073D7FFEB2B90FCEF2570B2C
SHA1:	6AEFAC48244653FE982489338E70C5FB0D900FC2
SHA-256:	89514515CA490C1E66E3298D91D74EAF1F760C0D4B21E4E9F18FDAF3996554F3
SHA-512:	D1D82FB43FDADD9F8A3F55AD7E7D8FBAA0B7EBB82B0742B8440121EB272E3D68E7A67A163AA095BD6DD961286B61A130DCE130FA7C308E79639A2D6DD9E6A718
Malicious:	false
Reputation:	low
URL:	https://krs.microsoft.com/images/GooglePlayStoreBadge.png
Preview:	.PNG........IHDR...4..........n. ....zTXtRaw profile type exif..x.mP..C!..w.........t..`.l{.'.x".\|...6.....MZ....P.8;tr.4y.)C...t]..pT....e.qa.E-..#~D.'.... :.....#.#.O.0P.Vn......w..4.xo...mzG.w.............u..B+Sc.J.3..9-..1.YO.+J~....iCCPICC profile..x.}.=H.@.._[KU*.F.q.P.."...E.P...:.\..M....G.....b...YW.WA...quqRt.....Z.xp.w..w.....T.'...e..q1._.C..........'3.Yx..{..z..Y.....J.d.O$.1..7.g7-..>...B\|N<i..........g.F6=O,..........x.8.....s.+..8..:k..0\.V2\.9....D."d.QA....j..H.~..?..S..U.#..jP!9~.?..Y..r..q .b...@h.h5l...['@....:.Z...$..."G..6pq...=.r..y.%Cr..M......7.[....... K]-.....D...=.....g.....~r.v......viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceE

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	13388
Entropy (8bit):	7.985174540557442
Encrypted:	false
SSDEEP:	384:w6RfuXN6ip0Qjdd/1StIWw9NKoG7MErzOIGB2Lx:wDN6iSQxdwtIWQDG7MEeR29
MD5:	418DE379E4609B0E8F7074A51BEEF6C3
SHA1:	97B93C7F5F40CC0906967488BD0E53595C73715C
SHA-256:	15005030242937DD784BB19074BDABEDD98A38C78DC7606F8AD90868C4E4A6FA
SHA-512:	33C9B93C1DCE225AF744D81938D37CF46FDB3244D8ED30F6906C129583BC26A279621EA407182C4C828C8CBD6399D1DA8C03F2FB396EF8A03EC7826A9A9ABC8E
Malicious:	false
Reputation:	low
Preview:	RIFFD4..WEBPVP8 84......(.(.>E .D..!....(.D..p...W......1V...t...@y.~...u..g........d.._.=.~......M.....w......U...._...?....._.z.:..5...k.._...?........~......o._..._..I...~............e.....7...(...'......./....V............?./..P_L.U...o.o._.s.y.P.......?.?..w.......K..........\|.......^:?L...+......._............o...?....c.....O.?....'...?................../.....=u~....L....YK\|........`..:0%....m.E....o...ZNP.......7.R.FP....>..1.....F.u`.........@c.JK......z......x..n.. Zj.M.\|.-iV...p%.5......,_.(....r..;.N.%/.R..Y.Nw.kK6...L........?..6.L....H.......V.......{....3m.)b.B.hz....q...7.~...^...r.H....$...%....#7.,.`.Z....k4.Y.\b%.8..t..l.-k.>T.}..m....f^L.OO5..:^.<...Kz!...+..K...o..$.;mg#._.I8.9...`.t5....B.v.....-.8H....z..Y.7..=.. ..+w.*.....N.Ws....9.k.O2q.....p\|.K..f........}....\....tz.i.....q.\|..a.0`/Ld.v..X.. S..d...... 1"].9.....CMU.=dA'....pFV.PZ=..p.i8."+..flX;..u.`c7...\D./.7.0<...0q........W..[....O.t.....7.kj..-.Q. ..{..(..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99196, version 1.0
Category:	downloaded
Size (bytes):	99196
Entropy (8bit):	7.997868398992993
Encrypted:	true
SSDEEP:	1536:SQIJfyDgC8VN2bW1ToDcINoJjl3ox2/OSTGaaLDg39z0mRGRBLfG:lgpEW1T+Hel402bxk3ymQP+
MD5:	474D73A771E0CC31B43849CD2BAD9CC4
SHA1:	1D973B9CD90543FA43E6E74F164149278B9331FD
SHA-256:	AE98C3B1ED18478144791BFA0C71056B422287CD41F9B7D35C99063B04BE58EB
SHA-512:	257279598503AA3203ADA4A1A29CFA550F0485D3F7231E815A3734405D6BA18472D3E3F248CABDF39A774BF9B752D83218244F578D2FECA2C33711AA53888C01
Malicious:	false
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_regular.woff2
Preview:	wOF2.......\|....../0...............................&..H.`H...>...,..c.6.$..$..(.. ?meta....@. 8.t[;5..Cng....5.P........-..3.j......1.c..6@..;.......FI}..#.........a.....{0.w.. .fd.i.K.+..p.cL.b]YJ.%..+...c.HF4.ett....=...N......."F......../p,1Z...V$...)^.M..-M%..y/\|.^I......;..>..%...Jl....4.L%....<.l.,.:..u.Wy......:W.F.....}j,. V......-.U.F...8Q..Z}^t{x7......j.]-..V.]..7.).....Zqt..kD...~.......dG.U..b.V1S..8......Q...D7.]....n.9b'....="........&...OtG..R......S._.D$.1d..&...9..=.l..yQ.._J.5.{.T.6TX...\..NX.....#.tqR8L.iDuRkW..2hUa)..7.+........Y...!.........z.J.5U6..C......R..;CN....=..\...j......o...[..P.....{@.L........Y....B..?..;.f..Y...j.]...`..$.iW0=.9Yue.xH7....5F.o6.._[......K.,...-..J[.f!w...VaT.r..\..^TXq....S..G..6...n]l..TA0..0A,D1....R.\|...S?..v...!1Z.lR.......5.LF.....H=..X......`$....`0....F]..m..1...i.S.x..Vc.v?..DQ_&..(.(.......3.........K....`.....E.......n.?..5L...5P.c.( .*..EAQ.....c.F.+.l.s.3..J.k:....+...}v..

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (878)
Category:	downloaded
Size (bytes):	1441
Entropy (8bit):	4.923625217494772
Encrypted:	false
SSDEEP:	24:ildT+lZadfID4P9Gpl3fBzR1SQLA2RAMRMT6XFKg/7/GpSw8G9bFw4YZn:ild2ZbI9GpvRQQ82OUugFKg/7/Gpj8Gw
MD5:	188415311B33E9DFC79C3CC6147ED47D
SHA1:	486B072C15EA89B3D39F607F92327F1A338254B0
SHA-256:	8B3DA2AC016CE7C6F38F10052C50C7958935276BD5885009716FEC7B3D8ED681
SHA-512:	DD95C297899B58507824F3A3129E060BBA8A9F7D2045526DC66DAB584D19571069D84EB2591B7FBE71A0FBA96DD1BE1A32995184D37FCA9A1F699FC71739644B
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.356.4d5c8581cf04321d0a9b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[356],{84356:function(t){var o="touch".function s(t,o){this._target=t\|\|document.body,this._attr=o\|\|"data-focus-method",this._focusMethod=this._lastFocusMethod=!1,this._onKeyDown=this._onKeyDown.bind(this),this._onMouseDown=this._onMouseDown.bind(this),this._onTouchStart=this._onTouchStart.bind(this),this._onFocus=this._onFocus.bind(this),this._onBlur=this._onBlur.bind(this),this._onWindowBlur=this._onWindowBlur.bind(this),this._bindEvents()}var n=s.prototype.n._bindEvents=function(){this._target.addEventListener("keydown",this._onKeyDown,!0),this._target.addEventListener("mousedown",this._onMouseDown,!0),this._target.addEventListener("touchstart",this._onTouchStart,!0),this._target.addEventListener("focus",this._onFocus,!0),this._target.addEventListener("blur",this._onBlur,!0),window.addEventListener("blur",this._onWindowBlur)},n._onKeyDown=function(t){this._focusMethod="key"},n._onMouseD

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	8956
Entropy (8bit):	7.972053517151453
Encrypted:	false
SSDEEP:	192:UlbCKATseTe8r8oy/zF7Ntufqluv4rPoxSYlOK5cbFBOmAq:UlbCKk3rg7haylKxSAOwcbFhl
MD5:	377CF0E1FE167DE18CBDAB4B67D2E326
SHA1:	ECA8A9C29E2AE14A1DED33160286057C424ABE70
SHA-256:	24566A4C7B24A46CB1B156E593AB4C98E40791CC5E4A49A410A2AC5860509A22
SHA-512:	A86583215D6A29E00068FEFA905B94FCCF8C53F95409849D23F88EEF0DAC463D2F130684ECA77917BFC27DA1D8336FDE7C817C825B4A228BE1835DC981F8D9CF
Malicious:	false
Preview:	RIFF."..WEBPVP8 ."..P....(.(.>A .D..!.i5.(....p....C....}+....w..3...?`."..?r?C....._..a......~......{.........P.......I...............~@?......k...^.....1........./....p.R.V..v.....?.>C...../.O.<.t...D?.}..........x...]./..}A...[........(....../.?.?.}......C../........_.].......>>.j.......w......~......{..._........7.#.....................3.......bOk.G.m.G...k...vg..>.8...+.k.y...9...........\|?&........^x.."w.w...T.Y............"At..r.b.a...vr!.K.nFQK4.W,....Yc/#.c.R.....;1P.+"..>.3......'....A.......O.7...r.Ou..36,.o?IrE8.g.V......#1X.X.D....f%...O._....V..DMi...".n.L...ee...r..HW...R.....&..\|..{..U....p..,.rK..D....f....N8..n...c..v/....l.H#..mT..N..0&WG!.......~\.I.)P:.u...{#.Y.......I...#.J.2D.0..bD=`#UnZPgd..>w.?.....O.......#.t(f..Qs>[....[.L.W\..D..9-....H..W.U.%.....O9K...M..6.T*'PJ.C..9...;+5G..O.ITE%+.p....~..W..2.Z...7..F!.......s6.[<.p.`6..s.X.!...x..({.. ...L.m"..o.a..a....W..<.t.....c........E....K.P\|P.v2!GZ......S..U..N..(

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (631)
Category:	downloaded
Size (bytes):	517649
Entropy (8bit):	5.713376874006511
Encrypted:	false
SSDEEP:	6144:m1K1Z7NMxjW6eJoWvAlUjWwuMSYCVvLk8DSWd1Ps8Jz38iZc:m6eWTAujfuPY0JGgkt
MD5:	E2E79D6B927169D9E0E57E3BAECC0993
SHA1:	1299473950B2999BA0B7F39BD5E4A60EAFD1819D
SHA-256:	231336ED913A5EBD4445B85486E053CAF2B81CAB91318241375F3F7A245B6C6B
SHA-512:	D6A2ED7B19E54D1447EE9BBC684AF7101B48086945A938A5F9B6AE74ACE30B9A98CA83D3183814DD3CC40F251AB6433DC7F8B425F313EA9557B83E1C2E035DFF
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2005, 2007 Bob Ippolito. All Rights Reserved.. Copyright The Closure Library Authors.. SPDX-License-Identifier: MIT././*.. Apache License. Version 2.0, January 2004. https://www.apache.org/licenses/.. TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION.. 1. Definitions... "License" shall mean the terms and conditions for use, reproduction,. and distribution as defined by Sections 1 through 9 of this document... "Licensor" shall mean the copyright owner or entity authorized by. the copyright owner that is granting the License... "Legal Entity" shall mean the union of the acting entity and all. other entities that contro

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3857)
Category:	downloaded
Size (bytes):	1093131
Entropy (8bit):	5.4455993131301
Encrypted:	false
SSDEEP:	12288:1zXssN8xoKol+C8OGMVi7i1QEyOb+p9hq:hhlqac9I
MD5:	600E6F5357E53E70107DB38ECCB385E2
SHA1:	3E2FEDFCA9389F5F2BA3A3CD7F7058B0F88EB6F1
SHA-256:	FFB081E6249F8964F9C42AA5BF60A20CABDB8A7CF00A11FC840D6DA52A096546
SHA-512:	17D8BF30CB438DEA7AD42B42200EE433E6733AF13821901DFDAFC1156A86885B841797C503E549FF5536DC65C5316B581BF740DD6ECFFA8CD490F1599AAE243F
Malicious:	false
URL:	https://apps.apple.com/assets/web-experience-app-15e080138b0af73416de20b7ca4c63c3.modern.js
Preview:	/! See /acknowledgements.txt for open-source licenses /."use strict".define("web-experience-app/app",["exports","@ember/application","@ember/debug","@amp/web-apps-featurekit","web-experience-app/resolver","ember-load-initializers","web-experience-app/config/environment","web-experience-app/utils/config","web-experience-app/utils/consts"],(function(e,t,r,i,n,a,o,l,s){function p(e,t,r){var i.return(t="symbol"==typeof(i=function(e,t){if("object"!=typeof e\|\|!e)return e.var r=e[Symbol.toPrimitive].if(void 0!==r){var i=r.call(e,t\|\|"default").if("object"!=typeof i)return i.throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(t,"string"))?i:String(i))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,"undefined"==typeof global&&"undefined"!=typeof window&&(window.global=window).class c extends t.default{constructor(...e){super(...e)

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1552
Entropy (8bit):	7.8594540212727475
Encrypted:	false
SSDEEP:	24:zjF9cfYoaifnCIxqtKYTetGYbh/wcww8o6h547DtgUBS+Z+sjTt4ctVZDEkoPWmF:fmYo3ytKYTyGOwv3h5it3Tt9SPPW0VYW
MD5:	AC47B4C1D3EDF0FF4DB738F9DB8DFD2D
SHA1:	6EDA933BBC8FF4ED73A94A5F77BA09C7C6E82E2B
SHA-256:	CAB22C287FDBF0E475222226DC89AA41E4E44BA751EF7B1DE60BBB677DDD6C78
SHA-512:	6C4CD51225B1724F17A032DCC00DB2AF2820BBEB7970C5C7DB5F2B279460B0AF257157DE7F9A676F681C6BB647D5D01C62B60F469D0F558505F64D73C655F21E
Malicious:	false
URL:	https://play-lh.googleusercontent.com/kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....m.0...w........1\|T..e.DD3......x......Aq.6n.i.^..m$........;.W.....w.s..M.M..........?.t..O.]..........;.......J..y..W`ff..\|..gg'p....\}..l...ye.6.....T.......$..d.z6.:.....m..m..m.m.oc G..H..9f\|...-.1.\eL.......m..m..8............3....W......(i....z..{....\|....`@.t...j.P+.....V......+.........M.g.Up`..Y......Z.F...#.....B~..\|8m?...H....!....6...H3.H4.,....1`1X.".3h........w....O..h....b....).\|]^.(....t.u....=..E7..\|a......b..(.Ad.d.3....0..n..A.......Q5.'<....Z#...<..?.q..o.$.....(..}.<.rj~..(..?...9.....w.B.a..Vt../L.......5`..2p4&/t.P...+....w;/..z..A.B.;v.+@.....C.9}..>$.&H..AY.....B..A...5x .....z...$ljLmd.....k._..~.56....}u..5.;...S.%4....AM.]...N.51..8...-.E....f'....J...a.RB..S..yxj..g..\;.W-d.g........{...M...\|_...3p.v!.~.......[c.....0.v....?*7u.W.O.0.....2.[.w...a...,..4:.../.eCW...... Ero(..:.c1...-....w...Q.......H5.p..Gj.}.^.?^.f6.WGG>...........AH...)B.A.....\?-/.e...C..:[N..9..

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2226
Entropy (8bit):	7.870795894442838
Encrypted:	false
SSDEEP:	48:2cX6HWbqDf9knZSFNHBNcw1E3D/nrCpJ01HMFaIuIpAkv0b+ZuJQ:2wO9gSFBWT/nrCpu+8wAkvo+Zum
MD5:	3BD45DA96F49C51F07255F200C9A5F2A
SHA1:	5F2651E7D417F69F7AA8D108A965BECF8ABE69D3
SHA-256:	EED9EB96DAAD84ECD65C7218FCE4C4C4501B9DF4A205CC7BEC0CE7030DFD88D1
SHA-512:	971C6BBBB557504AB46FE52E551D88AE6469A073A2FA055C2CBBB86A40DCC2DB6DDAE6E55AB10558000B8065B9BA2380B5965404353EBE4C89BB920F44672AFE
Malicious:	false
Preview:	RIFF....WEBPVP8L..../?...M0h$IQ..............J...@...X;z..s..m#G.....K.......5..$.I.[oi........F..h...G.&.ZK...F..:...._..).......\|(?e..l....NL.`."q}lj.}?....{V.Ym...%.....?.{z<..m...m{o.m....y..+.3.=.w.E.[....CE...^..&2vOO.{....<...I.....~.....gv...g~.m...m.Q...(..HR...(kww..-...;p...F.u...Swww...xc.8@.......a....c.....;.(5...G..Mi......&m_.m.....}.X:&..oq.......v'D.r.eP.6..k..g.k._Sg.E.k....G.^C..OP.2.....l."..dw}....Ft...>.o.I.......fU..m........S..^t&O.C..jhq..Q.6Jx.J.`..........5.../UU..T.....F.../.....PR1$..Ip".o.....a...]q.....Z..3HC"..MI.58..H.U.1D....y.t...3...]dq..E.d.Lh..........J.......%.9.cS..1..jnu&...ic\|&1.ZBj..b.V?.....BM...JLNA...R1..6>..h.5..$.. ..K..2...fb....L.A0..ic....@.p.(......@ .....i.Y.nU..t.../M.A.Zs....H.M..`.`.f...^._..e.........9....#.1..,.`.&a.O...D...,..Gk..cQ.U.H/..e.3.4D"..\.va....5...m5_Zyu'...0...2.J.p......!.-E.J...eLz..!..u.N...m.....5...fg..b..T.+$G}.....8M.#AP.....W.Yyr..k....xb[S.P5.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	7.358546821442648
Encrypted:	false
SSDEEP:	6:PZVS4Q+recdKlUVHiRQtvCoqYlbJq0AxtC0U8vAzIp9JtOOZkeWbCgfpH:D9Q+recdKlcHiRmC+bJqlAzIpTtOOZTM
MD5:	2F640AA73D5757BA0FE67B74E5D9F41E
SHA1:	A4D29ADF1BA739285BA35AFBD94D51734425429D
SHA-256:	469C936814B431210209150CA7F39A314A333269C07A5C83483D0C3EE0D772D4
SHA-512:	EB2C59AC81D5C2D8DFC90C5A06B283651225A3836A514B47E46009DBE9A9E2AB72EBC77558CD3CD4B3470844D417DE6958A7BFE1AF5BE16C2D7A2F9C314FA58D
Malicious:	false
URL:	https://play-lh.googleusercontent.com/12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw
Preview:	RIFFD...WEBPVP8L7.../.......m..s..c...m..[H.....X.q.\|..c[..*.m.#.Jw.E:.uro....z..m[....J..l.l.XNH...D<$A"X.k)......y..W..7T}........V.G..v4.d....%.Z....y)o.......]~.0jS/........$..\|.K......8M...=..I.q....[.9s.../.F:.j...{n..2..d.#A<.T.A.i.../..6.)..9.}. ..%.l..e_..=p.H......z.n.(^..}/.CJ..:;.G..3.q....ZG.ZF..&.b..;..

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6842
Entropy (8bit):	7.96906227819572
Encrypted:	false
SSDEEP:	192:MjLzPB23UOO2Ikw6BsZyxwBFZJ2lSvVDc:MF231O2I2BsZyKBFHEEDc
MD5:	61AE66FDFE5C513A0E5619C9E5C91833
SHA1:	8425E423007C0CD4F5F3D4ECCF5BDB1F6AB72CB6
SHA-256:	87E46B14757FBDC8031EC5BBD0E7D65DC0B56C70FECCE186C53BFC6515D3C3C4
SHA-512:	1159C179236105701DAB66E1FC562D2B9F60A7E7078155FECB2364699EAF50898C5A2C6F254B8388A2614AA5D0BAD913F03154C2A04A6C177F7D3384DAFA1EBD
Malicious:	false
URL:	https://play-lh.googleusercontent.com/GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw
Preview:	RIFF....WEBPVP8 .....n...*(.(.>=..D.!..... ...w0h..e........!....;?.......O....C.'.......9....?A..}..W.?......y.n.E.?._.%>....?.....w./.~.s./..._..Z...A...[.K....r~........+...G..........[.?......b.....;.-......._......W.........6...............".u.c.o....................W.......i..pM0.......4....e'.M.v{......<8.j..LPi.Y.G..<.`H.i.o..Bl.GW"Ot.9j}H{.w+..1.%......\>s.....%gR......j.M.Z9.h..FJ+@N..A.....6o.K.yL_..c..L6.I.%-n...l..s)........!.tM0.......A._.'&}..../...ol,Al.oQt.s....76_...$.t.Z.{v.........X.N.&M^'..j./{..5L ..Q..W..2...N.,.^%...B..F...4.....\_.....&6d7..2..R.....K...... <.a..G.6..........<...(.S..O.....3.w.6...C.n.......(....C...~...TW%d...u`....\|..x...A}$Yx\|.Dx.....>5.1B..B....{~.........W.89-.Ns.f0Y....%_6.w..2\.K..9hZ...l...%S.x..8.{S.R....;.......#z.\|KR.\|.I.l.Z.....0vbr=..J..l9vn\|..,.w.&z.Nm..:.H..$b6...<.....G..NnJ^.u<...[....k.p6"..;...........H.......l...x.."(.Y.[.x.YM...7#...Q(..!.....0dy....e\.$.......]...4...y5../..>.D./.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2620
Entropy (8bit):	7.907739599114583
Encrypted:	false
SSDEEP:	48:VvjWsYJqgQQ1DZsFI3v+a83wLw+umPOFXwrl6ipckhwH1VtCWjgg8Ofslf/zouhD:gsYolQdZ8KhjPqXNtkm1VtCWjgg8QY/p
MD5:	52025B894AEFE69D60C3062A654A9BCC
SHA1:	C6CEC5F7B2DB19A21339B974108DEE6B7190CF8F
SHA-256:	E838FE70129812268D3FBFAC662E7CC766EC430823187A64459F32C10DDEEFB4
SHA-512:	94A5924201EDE700FE74BCE864D96281771722B02AD1801EDE0F9747952CC5847494595B4656DAAAFCADFF48353C6591D6C273F24D1D8FC7AF1168FE9F89835D
Malicious:	false
URL:	https://play-lh.googleusercontent.com/YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw
Preview:	RIFF4...WEBPVP8L(.../?.....m.9...,..?0D....f[6h4....Z.Z.;....[h,.m.......P.6.c...B....II#IR9X...u#.....".I.O.... B.@....A....P........`.....M.l'........333K.3[.........Q...U=gV..b..h.LY.LL.W.K.u...0\|"Sf....&J..6%-bV"G.d.m...m..g./..l..m.m...?X.l.6.g.{........m.nF...m'u.{v8p.I........0...7....b..)8X........#K..bj.....G}...$.@$b2Y...A...1.@....I$.N $.@A...T.b "@].....5.2Sg.x...V.....%.Z2K.XN.)..X....4Q.Q.. .5.....\|.&f..%.\|.(Q.l....."c`..b.(....].LN....(%.}...S7Y.4EQ0!.A%.3zU.LD.......Z.e..s. +..........<._g.4 .lYv.F...:.....M.....!.cy......!Dz..D!...B..^...b/D>..Oe..PmW.o./...V..m,v6...lz..$.`..1.].fM.M.h.b.c..U.L...c.S..u}..2.O.....>..\..a..X._...[D.}Z..C=.b.R.a..cx.....5..Xqj2...4\bO.O%#c.zX..8.O.B..+...fG...Y...,3E...9.y..6l.b....I...G..R.\|.{U..#.M...qvk...p...'..4....-'..<.nO..^....>..Y.:......u.&\a....8...%c h.V.#~....<.n.X......<.\~5..{1...v.D.@.U../s.m.\...k.m.s........b?.a.}.....6v..g.......-.r"..)$..........d........).

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1958
Entropy (8bit):	7.824859730643372
Encrypted:	false
SSDEEP:	48:7wCVrL9ihuVrNk9rbDYgcYPA3lzJyP3n6t5qhlCvsbH8PmmOSrmc:BF9i45wr3YgcYPuyP36t4lZbHImu
MD5:	02DBD91D4CEE8BBC3C6E4C9D51C2DD37
SHA1:	33E34A394A2C065A7C4FED11F898C0F05EF66A6C
SHA-256:	FEC483C298AC2864C2510CBBEF1FED5D9362993FB7C8E0C77169CB68919D085D
SHA-512:	C313E4CCC13E7AC9974CE33E8266CF681F7F7B4680C162151379CE559E8F4BBFC772C178B63A056710E8D4903C6A11FD5178773FDB43CA5CF80702D11C3D2E83
Malicious:	false
Preview:	RIFF....WEBPVP8X..............VP8LV.../......m.!.4....@>Ha.`.....JB...=.......m....S^......e.../....A....E..=.;d...AD":..-.....,.ffFK.L.re....3.36.Sf...Fv...f..)L.C.C.q...\-.=1...U.'W.,......3&..$.m.....g.m.m..d.m.....Zr.m;$.y....m{#{7....)#of......jT}...$...'..'...@(..C..`..=.N.<N-..v..&.'.o0J.X(...s...9....{n..... ...L6.B-.M2.z...(.+p.X.3...(....i.......;....2.....E..O.H.b....`......>.....Gg>:c.s....{...P..A...VM76*.;K:.GT[f...#).0..9..........LD5..d..:}...k.w. .........ss..r..5.K./i........=.=.xW..u....<.u`...L-B..b...oJaUGB.u[...Z.)..#.<..e...^)\|.V..../....AH....'..d.Q..D.1...A..F..^....-.@...a\|....!$...`E.`..q..s.i.@.1.q.{E...u..5I...%...8.x...\.F)@M..r...A-b..D....I.r..P.m.....C\|..y.......m.b_.l.h..p.....a..+Q....C.....k.?.........Oh...!.......R..0(."P4`T...X...s.;...5..EH.6$R!.I.b. l....0..k.....;H..4...R.8.[[6}R.'A.?.../ c.C@N.z..m....Ol...4.z...0.P../r...=....8`H!..._$.r....i..m1...'...&...!..(.....-./. +...6.....4....=.K.E4C.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9869)
Category:	downloaded
Size (bytes):	10413
Entropy (8bit):	5.257533978847801
Encrypted:	false
SSDEEP:	192:8nla2OCNzv/zCPfx1WY6Q8X4tYPNF9cxi3/lpemo+AW4mr+oaq5:8nl3OCRvbIfxkgUPRcxw/lpemoPW4mrb
MD5:	1B5686244F6C6516B3C0CB73B85DEB30
SHA1:	207E5F9CC6C80B1B84C18CDFA732A5C3CC43AE2B
SHA-256:	3A91FF301DBC45B9035E65C7CACB68C5C06105196AB82BDE6AD6970348F2D819
SHA-512:	73AC415260CAA2291E3F2A24393B226E1275A1981775E3AA4183B2ECC941872AEB3F1024756479FD56E26F3E27976607E576A835864892F547E17DA17A3B6A32
Malicious:	false
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.js?t=1713369093418
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.import{d as e,N as a,w as i,p as t,b as o}from"./p-1ec6e574.js";import{g as l}from"./p-42d04e97.js";(()=>{const o=Array.from(e.querySelectorAll("script")).find((e=>new RegExp(`/${a}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===a)),l={};return"onbeforeload"in o&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(o.getAttribute("data-resources-url")\|\|o.src,i.location.href)).href,t(l))})().then((e

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	102
Entropy (8bit):	4.8013557344442175
Encrypted:	false
SSDEEP:	3:JSbMqSL1cdXWKQKVnIwN4wECWaee:PLKdXNQKVnDoCL
MD5:	284B36421A1CF446F32CB8F7987B1091
SHA1:	EB14D6298C9DA3FB26D75B54C087EA2DF9F3F05F
SHA-256:	94AB2BE973685680D0BE9C08D4E1A7465F3C09053CF631126BD33F49CC2F939B
SHA-512:	093F3F5624DE2E43E43EB06036107FF3260237F9E47E1F86FDFBA7C7036522187A9B47B291F5443C566658A8EF555E5033C7F2AC0C9F4FA8EB69EB8E2540B372
Malicious:	false
URL:	https://www.google.com/recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m
Preview:	importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	17977
Entropy (8bit):	5.172440917667389
Encrypted:	false
SSDEEP:	384:xV1W44hioeBevmrjGRp1AFjga2dCjrI7KV0t:s44hioeBA7AFjgaU7KV0
MD5:	E62FEA2030907AF7E89AE14B53FFA550
SHA1:	7B4F41FC31DA2F829A183DFF72CDD708EA76665D
SHA-256:	F66B859A3A06C27EF58D1CC069E5BA8A9A47B3C7AEAF448EADF1F589582C360B
SHA-512:	1CDD5DCFCA7F6EFB33854F4ED6BA0D535CC0D444A78499240DAFBBCA2ABE9772E14A5D0E7A34CDE9A9716E068CE5FD6F5EB3271BC549BF17DE075F18E31661CA
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.359.1a547c0d896fa5233fdb.js
Preview:	/! For license information please see chunk.359.1a547c0d896fa5233fdb.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[359],{65359:function(t,e,n){t=n.nmd(t),function(e){"use strict".var n=function(){return(n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function r(t){var e="function"==typeof Symbol&&Symbol.iterator,n=e&&t[e],r=0.if(n)return n.call(t).if(t&&"number"==typeof t.length)return{next:function(){return t&&r>=t.length&&(t=void 0),{value:t&&t[r++],done:!t}}}.throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}function o(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0.default:return s(t,Error)}}function i(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function a(t)

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2057)
Category:	downloaded
Size (bytes):	69873
Entropy (8bit):	5.418567535615382
Encrypted:	false
SSDEEP:	768:yUG5mto38+zK8IQmMd2z0zZ6HsoVo1jdkTtt7a1wT/wQKluKU:yJ463l28r3W0zAHuji+wT/whMF
MD5:	6F1EB4FC6CDC3DEFF740515F06314C13
SHA1:	A07357DC20F5E68C17E4D592E69DD7E871578D1C
SHA-256:	570DD989EC52F8B5F1761037D70C3BC37300D1FDB144A424C74D0C23EFDB79DA
SHA-512:	3B29D6460929E645EA5892D81991974D56A2013D70C03DF4865F36F7A6418BEBF0113BB7D61D5374492EF753BC75DFE64D556D826EADC81E01E9F41B0FE32BB1
Malicious:	false
URL:	https://www.gstatic.com/feedback/js/ghelp/fk319e6a408/chat_load.js
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ca(this);function t(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(g){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(g\|\|"")+"_"+e++,g)}function c(g,f){this.g=g;ba(this,"description",{configurable:!0,writable:!0,value:f

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	8594
Entropy (8bit):	7.972041832412324
Encrypted:	false
SSDEEP:	192:zuNHCSZCF6C102YYaCWGBO2YAHsC5T3lfw+f5loPIU/MzBFbSta1v:Sk0C102YOW52YN+tdkIU/MzBF2Cv
MD5:	DB88717E6607B032D9690E1F2A1C8447
SHA1:	6B5CD217FB06FC4A7EC49581D2F8E3F46CA83483
SHA-256:	A702B4D7912E5E8E771907FA22E3D336906788A3094FA42EE0AF381F907612DE
SHA-512:	84194254A8B42A71EF76531E02B0D20A25F3398A9755A896C1372B3F7A151BFFC60FEC40A645934265B8397A91F911790C58004F6E6B8554E51F1C8850DAD6ED
Malicious:	false
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/8e/7d/70/8e7d7010-5d87-c7ab-780c-b692e338d943/36e9f782-1b90-4078-8114-f720e385d781_APP_IPHONE_65-4.jpg/230x0w.webp
Preview:	RIFF.!..WEBPVP8X..............VP8 .!...........>.H.I#"#...j.x...n.MM..h......n..~.t.x.....s...a._.'......2.........R.f.....C......{......6.w.A.O..}5....=..gh........._.>'........>w.G....z..~...?.z..W..`....>....v.....o........c..._.....}g?z....?D8@..m.0....S.=......R.7.&........U.S.b..!.Zr V..up...&-......D8@w.l@i...+HL@/.....(...3..f....5....h..Hi.R...>.B\|...'Pw.t....&.`.G.).PE....x^...g4R..-..a.(.... ...:....Ys......^7.Y.<M..n.WA.....Ft...H...$Jz...Q.K.F....\.O.s...;....!A_.%....y~.1.,2L...W..>...SM..L......]..`u.~9Sp~........+....-h/O/..u"...I..'b....ONr.R.>..F.....}.{3.)f.....SK S.0A.F~....!.P.#1=n]%re...W.j..8....G.L.@..U7..._.QG..<.~...a..u.u....I ..=@...v...3&.....n=.0....O.FU..0.J.h...q..O3b..T...6..K....8.vA..Y+x.W:-~.E.Z.be6.6\....=.....J..K.t..ET.....P9..rq.y0../....:..I.]K).#w.L...%#.......t....C.....jC..\|...h/+..>;.gh..S..^`L^..H\|...$..3.....G.J7n.G.[`..@.Wz8..h=..E'0w.=../.H.....7A.?..H.....+.+n.4.~m.[9+.9p{..0.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1670
Entropy (8bit):	7.8767527471024845
Encrypted:	false
SSDEEP:	24:ph192w/y3IssGoCogO+MaZfU9LHAPwUtxrRiEEe/i0GI9E0cApv7R:/FEIsMaVogYsRiEEYGI9EzAx9
MD5:	4261C35A4740D97B2EA62DC1E730DE55
SHA1:	220A025A6B18C577508B7374741A9A58C2240022
SHA-256:	604C0FD6A3EA399AA08158490E254D25C68B0A89D2944C8E7BB9E00F4AC389FD
SHA-512:	5F7A46303F14AB9AD32353BE06DA9147EDFF298F09E02FD24F52322586383EDB8A42BDC821F603F11401FCE48778E492B4D04231260AD6B735F63E62A3A2867A
Malicious:	false
Preview:	RIFF~...WEBPVP8Lq.../?....Em.1..].?.E!....3...0v..\|...H...q./..."....AI#IR...0...=.Q$I.s.`......0..T.......@..j.P....{.....J.$..xx....<..\|.-.#........hv......;..\|.G...13333..Z..U...8.I..z..E..#..^.P)..l9....J.;.Ft.3;..wX.rh.6.g....m....6+;UR.m.Ie.......m[.........d..BF...p...H.]...=;..m.IJ....u..#..{...... .]..~...x.x.S..T...\@..Ep..Yr.J9\|..C:..0..[_....g.... .4X..~xd.z.K1V..65...!hs@....`....i;O=.U.Q.......q..V[u..6R..XM.....t:.5...hE....fX=......r.`....UN- .Y...U!....N.......3_z^...!.....(.J..................\.^.p.T/f....4...Y3.(.x9.s.+=.B..}...&z.-&..FQ........:.i.@.B.0z.=;.=..[.s_..St.(.+.....H....%....wF..&..C>.9..J..(l..E.I3.......B.<..+."~).....#.3Zn.%..J=P..hM...........q....NP.u.t.vo.{.Tg...`...v.A..j&E........f.^H.R...xRX..lB...CK....Fi[9.8w\|.".E.:T.E..`.........b.......jX.F^@.N.........z.4#...X..%..!...K.bc..,.(.2 ...)..U..XI.o...H=i&..+#.SF......F....`..%.!.[.....x].....a(.A.S.N.uRg:._.@.Z..>.n..N..BR'..$/...`TF...

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	34150
Entropy (8bit):	7.9605429516569455
Encrypted:	false
SSDEEP:	768:1u9/IEI2Y8ovLDIm5VvC+TSPI05kE9xX0r+Xv4NdqnzYl:O/7Uh/ZeW0qqxEr+wNkUl
MD5:	4DF004D4F2D2F7921EE1AB1E16EEC7B7
SHA1:	39489B65493B9FE9883F359E5FAB5170C9D9E1F2
SHA-256:	ECF16BA0EBF68546464B4D0E8E47A95B961423E47413C25E5A5BA73DDED2FFD2
SHA-512:	09563045BAE58061067227F649EBFA4A334659B1A4BDB9164377B2D6BB85274AFB57D260609528E089533BFCB9FFDE4EBE8E945323D77EBDA5662E7CF7ACB83C
Malicious:	false
Preview:	RIFF^...WEBPVP8LR.../..I.M8l.F."gn/Y.._.<.BD.'.....n.....z..w../$uI..[]..9m[............f,......^...............C.....H83.3..0R.X.609/_[......$..\<-...tK...X..cl~...A.7."".....%..."-..!I..H.c..&.@K.L...I..h.~....F....\.>'...v..c.)"l.6qT......-...Hz.....{..Tko....."..5_...zo/A.!.!.J. I.-Gr.\|.\...j../AC/....."(..t."I.$E.Lf.fy....#.34Dyxf.t........u......A..H.RbL..0>..f.._d-.8j...e.....,.K..\.L..R..,J....gN.K{.$}.dQ"..Q.z.EO..I.....zk"c\|j.nm...t.WeHII.....gjW...J{...I.l.....z.SOii)M..3.K.Tm.:=..H.%.m.n.K.."......<$5.(.2.L.ti.....).!.E8Qyr.f..mW)...ZO..$$3-.....Xg.d/u..i...~c..Y.....x6.>..!.&t..(.h.]......3fg......{t.A ..p..u.a. [a......?.,.a.~......?.{u.Zn/..PQM..k^~.m.Q2...}..........#V.V..~w......L.a......wm.5wl.P.a1.P......./w......./........).~..Y.F.6........Q'o{w...f.K.j...a5...1.N.D.,l^...X0....r....,.\|...@...43X..u......g...~..J....'...Y..%....Nm..D.w.^....e.Rw....H.F.......3..N"..ok.0H}.Pv..E.....f...r...S...q....e..$........,X.......x

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 22904, version 0.0
Category:	downloaded
Size (bytes):	22904
Entropy (8bit):	7.9904849358693575
Encrypted:	true
SSDEEP:	384:evl4zAZ+ssqWqPRSKLA4kM0aQfBn9M2+iW50SIPzp6+NPf72UReN2CtbvejX7Ij:YqW+7qHP8n4L0aYn9jFDSmzp6w72Uyvv
MD5:	C654A623AD90BB3DCD769DBBAC34D863
SHA1:	8719DE38F17D8E4D73E2A5E4E867D63DD3965BAA
SHA-256:	DEEC787CCA1B9436E080478742A0299E0DB1A9712543A72D2CDC8373FC45A432
SHA-512:	B7440CEC44B71BCDBEFCD878A860EE3CC0163DC0905DC688EBCBCD7C6F5CFDFC187EA0C2B6247A362AD462450C34020933DF7825CF6CEAEB3138D65EB944ABAD
Malicious:	false
URL:	https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2
Preview:	wOF2......Yx.......8..Y..........................`..`..8...Y........a.6.$..X..n.. ..[. ..S...u..l.....!......I=...ubpS5 ...o.........c.7<.y...Q..i.n..T`R.......\|h'..f.=4..G..xI&.V1...6...jf....%.y.!.).../Cj....].W%5VIj...(.........'Q.}.+.Jg.L0..$q.......#..d&...tV.".d..,.(!...p.).. ..d[........hdg.....!=..H..y.\..p.Q.O.........`e#.X..`#F..T....p.@.)UO.;85..y..@..)...!..........GNT.W...VV..j...-=+G%.yuK...u.........%c.Z......8%. ...V..P.^t....g.x.Tkw.g.....H..._R._{...u.....\%.L+...S...+).......Y&,......3......... c...v.S.LI6...X..A.....S...f-.f....X.....F.Zfwe<#c#...S......bk.HA...K.{.YG...9..24;._+ad.md..c..%..uo...6.5....../..tv.(.l.6.>.V..Q.[..Mr.O...,.......B.......TI.7..X.V...O_._3~.5..0..".$.(.j.....b.....W.O.F....$.H.I$.L.)..J.i....N..d..c.......".l..!.\r.#.\|.)..B.)..b...$D..J(..2.(...........j...:....h..&.h...Zh..l....i...:.....z.>.....d.!..f..F.e.1..g..&.d.)..f..f.e.....9.g...Xd.%.Xf..VXe.5.X.z6...ld....f....le....vv....d..

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003)
Category:	downloaded
Size (bytes):	18440
Entropy (8bit):	5.255534167782927
Encrypted:	false
SSDEEP:	384:kz8E0CXVpU4y7FeTEkrHfcBkoNiIvYcaSRCF+q4nAHY+6dDlqW1hCSallZsWY:kz8E0CXVpU4y7ZkrHfcBkSiIvYc/Re+J
MD5:	5F765A4A59A407D5DAA33CC0B48F2A35
SHA1:	44E29FDCCC78BAD49465D30F2AD9D5DE816AE150
SHA-256:	5C98E1CF88ADBADBE52321041E084AA2D5BC4DAAFFBF8EC6C45A438E8D393202
SHA-512:	ABD01A44A94A0BE2B000DB5BB60A439AFDA8948B32B3F0685AC9AFE175EC9E3701C3747457BE42032C1EA0707AF02109D46187FCA39F2815BD8AEDBBD365F38C
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.934.167974858ffab5c06580.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[934],{7934:function(e,t,r){r.r(t),r.d(t,{default:function(){return W}}).var n,o,a=r(32722),i=r(24178).function s(){return o\|\|(o=["app","appVersion","hardwareFamily","hardwareModel","os","osBuildNumber","osLanguages","osVersion","resourceRevNum","screenHeight","screenWidth","userAgent"].concat(["delegateApp","hardwareBrand","storeFrontCountryCode","storeFrontHeader"])),o}var p,c=i.SC.attachDelegate,u=i.Z_.cryptoRandomBase62String,l=i.Z_.exceptionString.function m(e){this.setDelegate({topic:e}),p\|\|(p=!0,s().forEach((function(e){m.prototype[e]=function(t){return t&&t.hasOwnProperty(e)?t[e]:this.environment()[e]()}})))}m._className="eventHandlers.base",m.prototype.setDelegate=function(e){return c(this,e)},m.prototype.topic=function(){throw l(m._className,"topic")},m.prototype.environment=function(){throw l(m._className,"environment")},m.prototype.eventRecorder=function(){throw l(m._className

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35798
Entropy (8bit):	5.362239652266183
Encrypted:	false
SSDEEP:	768:xLV9hhNz5ouQq7vDsCYDHlo+yg2GsGsgo4ST5dX4+eT7Fi8mR5lfKGiLHCWtvdTZ:e
MD5:	3AB3496A7BFE9321B3FA0E2FC8668B14
SHA1:	EC704CA797F15BCDC6DE9AF8AB9F8311EB82B2A4
SHA-256:	E321803AB120C94CFFB459955214D4F783D14653749A9D9E01D5E81C5358C8D4
SHA-512:	1DDAFCEB91F8AF68ADDE9686537147615BD504D38FE24FAC13007DA412A58686D633A09A2E629B79297A826524D10374058E1A1178684C45D43795A62992E63A
Malicious:	false
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v2\|SF+Pro+Icons,v1\|SF+Pro+Rounded,v1\|New+York+Small,v1\|New+York+Medium,v1"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.eot');.../ (C) 2015 Apple Inc. All righ

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 107832, version 1.0
Category:	downloaded
Size (bytes):	107832
Entropy (8bit):	7.998208221352974
Encrypted:	true
SSDEEP:	1536:rbxyXX3FkzPtA4ze42dWs8sIQ6Y3SQnCvy7gALT4I073hT8k32wl0JvGdUB4x:rS1kUx8siYiZv+n4Ie82jBdUB4x
MD5:	2D753DE71684CC6C73161B6FE0C5A11C
SHA1:	B9B14B843008B6C9E8D6E933DDF52587CE0E32D7
SHA-256:	DC0663A7522F9A0A447DCA9A60A80275EA5906DDE2159B24CEA94A96D81DEE0C
SHA-512:	ED6FA0618E66A26107FCD828CDAE61C623C0BA6A0EF3BF6F49C1382ECB6A327D20A73A1F072E9BE6C2074DF6390D4DB17AD747FF7E7D64F66E1C25515DDD1E56
Malicious:	false
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_bold.woff2
Preview:	wOF2.......8......}................................`..H.`H...X...(....6.$..$..(.. ?meta....@. 8.t[.{.......}......R.Ju.1.u..WP...D:....:.v..{d..J:#.....T.nC@g.4.Q...........,?..{?...$.. V\.V@[.BH..2.b.!.U....9.....L....i6..9.\dYR8.......;un.5...(.."...b......pK....%9.gR..Aa.=......y._&.z.s..LnU...!_HJ..'[....x..Z.....to!.>.....c.J.....O....D..wz.K....Q)Gec..[.. ..#:..T....^6..\..ap0W./..n.(...e....^r(......~i!..\....7d..Q.x...%...RQ...]....]`...N0......G.W.Z[B...Q..8..[k...u..I..+6X...IHL.V/.o.y........s..::.9......._(-"~..Uw.Y.Q.^5...oH.O.=.F...>.W....{..~SX..d..T.k ..^..a.u..&...wH...>....xp.B./T..........K..w5.7......IX.....V.%.J.......!Y..y]...-..w..N..Z..;<p,....q..8G..}.g..].CrP..TK..QL...h.Lno..5%......4A A.-t....~...O.z+.K..?.".....qn......O...}o.]@..B.....sz.^.....#..`...C.{.....D....1=.c.,.X.......hn.H.VR..2A:..c..V."..a..F..*..E,T..(..y...?s...y.V...Q.!q(H.B..ZT..jc.~...:@u..=...D..d,.L..............O................

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	266
Entropy (8bit):	7.052421013235357
Encrypted:	false
SSDEEP:	6:yk5ZYChDBpEnS96WesGKsxdRM8Zj5elkndH7xLiGE6CAYdr0jSKIz/zZwE4:34CRBpEnLlD3Pb5e+LE6CACgmKIzLZwT
MD5:	0923A53B64E64DB75177B6972F016A42
SHA1:	6915D871CBEA8A3B8F4E54367DCA538DA0AC3082
SHA-256:	E0106DC1C0490A432C08671994F87FCBB982B7B25B4F9CBB640D49A03BD89CE3
SHA-512:	5054B69C1A895FEEC0CECD471FE317149D8F804E15CDC0ED51F8BA6B3FB61E092C5C78A92768D31273DBCBD189148D305BA4EB1EB210174DC6B0724615B1B1F4
Malicious:	false
Preview:	RIFF....WEBPVP8L..../........$g.......r^.E.$E.....~8...A.H....A8...%l#.Vr....b9.P......N..[n.P.........6\.w.+.....X....U'...#.}...Y....A.xdB.....$%.ww....t. ....Q\|.....,.........q...D.@!H.N.p.5.....*`...ms.~.l....\/.[/..u=..@...X...4j=.}..edi.i...%..0u~.MH..

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	334
Entropy (8bit):	5.273817216384402
Encrypted:	false
SSDEEP:	6:kRZzRxVvnGlUu6q6AaI/QVf1lKy8pnpvg+MwQRaNw6JpyxZRNlad0:kRZTFGlqa/Af1V8pnDRkbRN20
MD5:	ED7841A6A6B931B2C4177F9249F90DBE
SHA1:	457C2CC0F93C9FFBBE634DEDCFD01F2BB987E5F5
SHA-256:	FAFA03A53F18140549957B03DC319F984EB1054A0AD173E315805D2E8DF11448
SHA-512:	58F20730AD396F2AA3E1565F9E0C6A4CEEA6A87CFAE7EF98494EE827AA480AF45D50FB120EEC6EC5DBF57C194B4BFA4D7A119A6D99934A87BC79C5AA79870CDE
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=C7s1K"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("C7s1K");._.Sq(_.XCa,class extends _.Vq{constructor(a){super(a.wa)}H(){return"C7s1K"}O(){return!0}kb(){return _.U3}});_.vq.C7s1K=_.MC;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2226
Entropy (8bit):	7.870795894442838
Encrypted:	false
SSDEEP:	48:2cX6HWbqDf9knZSFNHBNcw1E3D/nrCpJ01HMFaIuIpAkv0b+ZuJQ:2wO9gSFBWT/nrCpu+8wAkvo+Zum
MD5:	3BD45DA96F49C51F07255F200C9A5F2A
SHA1:	5F2651E7D417F69F7AA8D108A965BECF8ABE69D3
SHA-256:	EED9EB96DAAD84ECD65C7218FCE4C4C4501B9DF4A205CC7BEC0CE7030DFD88D1
SHA-512:	971C6BBBB557504AB46FE52E551D88AE6469A073A2FA055C2CBBB86A40DCC2DB6DDAE6E55AB10558000B8065B9BA2380B5965404353EBE4C89BB920F44672AFE
Malicious:	false
URL:	https://play-lh.googleusercontent.com/94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw
Preview:	RIFF....WEBPVP8L..../?...M0h$IQ..............J...@...X;z..s..m#G.....K.......5..$.I.[oi........F..h...G.&.ZK...F..:...._..).......\|(?e..l....NL.`."q}lj.}?....{V.Ym...%.....?.{z<..m...m{o.m....y..+.3.=.w.E.[....CE...^..&2vOO.{....<...I.....~.....gv...g~.m...m.Q...(..HR...(kww..-...;p...F.u...Swww...xc.8@.......a....c.....;.(5...G..Mi......&m_.m.....}.X:&..oq.......v'D.r.eP.6..k..g.k._Sg.E.k....G.^C..OP.2.....l."..dw}....Ft...>.o.I.......fU..m........S..^t&O.C..jhq..Q.6Jx.J.`..........5.../UU..T.....F.../.....PR1$..Ip".o.....a...]q.....Z..3HC"..MI.58..H.U.1D....y.t...3...]dq..E.d.Lh..........J.......%.9.cS..1..jnu&...ic\|&1.ZBj..b.V?.....BM...JLNA...R1..6>..h.5..$.. ..K..2...fb....L.A0..ic....@.p.(......@ .....i.Y.nU..t.../M.A.Zs....H.M..`.`.f...^._..e.........9....#.1..,.`.&a.O...D...,..Gk..cQ.U.H/..e.3.4D"..\.va....5...m5_Zyu'...0...2.J.p......!.-E.J...eLz..!..u.N...m.....5...fg..b..T.+$G}.....8M.#AP.....W.Yyr..k....xb[S.P5.

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65005)
Category:	downloaded
Size (bytes):	696227
Entropy (8bit):	5.38605387106501
Encrypted:	false
SSDEEP:	6144:MGryUmPKObVMvcDMbtZNNVJKEq5f+dtaL6rHYGd/0GOCl/FQ1:TryUmiObivKMJZNTJKjp+dtaLq/FQ1
MD5:	90ED61CCFDBF59C72D9D5422BEA4C15D
SHA1:	DEC09B632108E19481F94F9CBD378E7AEB11452F
SHA-256:	6604C5A7BFA2E3F142248368D7C69135A8191D03C72D1024807150C32F4E8E55
SHA-512:	E99CFB370A8AF78ADA7252C5C28756731BBCDB28B71C7B671473C461BCF76A6147111D585A89631CEE3A0F693D45F7A9D3DC7462790EF8048631D96C457694D3
Malicious:	false
URL:	https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1713369093418
Preview:	/*. IMPORTANT NOTE:. . This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. . ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. /..!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).MusicKit={})}(this,(function(e){"use strict";var n=void 0!==typeof self?self:this;function formatArtworkURL(e,n,d){return n=n\|\|e.height\|\|100,d=d\|\|e.width\|\|100,window.devicePixelRatio>=1.5&&(d=2,n*=2),e.url.replace("{h}",""+n).replace("{w}",""+d).replace("{f}","jpeg")}const

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1810
Entropy (8bit):	7.786345459719539
Encrypted:	false
SSDEEP:	24:vCHQHJSYqzcZJaiJtanUsHxDKoDab/rGhdFBfXfjbaFdAm32bBeDGiYyu+7Be7Z0:E3FwtAjwoD+Kh5fPP1sDYR+CgtFv8W
MD5:	4AF44BE9F08FF40536DA5762B6B59605
SHA1:	7C1EFF3F5000AF6F11A0E33D7208DC7D92991EEE
SHA-256:	26D150D1ED9031C14ABFA2739A3C4D3522908CDD5032007522FA6E1722994252
SHA-512:	7EE496867056A042F8C1C5F8CDA205B0AE768B0258445D64EDC03897204CD2F30293B1BDA5DDB76A7CD87D2E163A31EF0A7C1C676A069B89D152B0FDE52F413B
Malicious:	false
Preview:	RIFF....WEBPVP8X..............VP8 ...../.......>.J.I."....z.....n.q0....{.......9C..?..p..N..`?l.b=......n.m.3...w....\|.Mg....kl\|..a..eG#....S..r....`.VWX..Pe...K.....&m.<.._R.......aI................O.....\....`H..w..4O}wD.....hF....K.........&....y....<..3.*B=F.4uR.gI#.p.3..f........9.......y\|.O.A.....K..I,}\|.j..Q.@.0xCwn.y..]V...IT.RP...D...'.c....j1.FR .... H{.....7t.].#ym..P?k.D50..r.2..\|..B.A........:.._-...8..TC;...\.Z....}...Y..H.....,....,"@.r.._ <3..+.....6.H-.~w\..3.7D...\|o. ...hm.[}=.....#........LD....(.6....y4.......l[.X.......s$.....&,U.x...fw.\........(.1..#.Q..E\|..7.E..:.%1.)9..+....eA=.....C..^&suv.{.C...Q.k..S.Ho..o.<A3... . B..D.E[iB.PVS2..j.T..~..@{.z;........3.@fk.Q...m6....}.m.h.8.;.......F_.x..$Q...B....'Z32.>'.P.eD......Q..1.8...4...4..>..8.J..^s..J4..Q8..............$r.c]+Igq.~..a....j..q.5.b..Z)..s.[I.\#...S..........Q"I..E{.....qG..].7.hs.....+Si...O._..'s..swa..e...."."..f.Fe.`U..^..b.I.Z..~.."7...

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12513)
Category:	downloaded
Size (bytes):	13517
Entropy (8bit):	5.314863543101727
Encrypted:	false
SSDEEP:	384:8nlFipHnQ5/BRZJ/bzwT62waHKsR5ssRaREW+ou:8lF2HQ5JRjbQw9sRasROEWY
MD5:	24F387A60FE0B05A15426D721C397D47
SHA1:	012EB578C3C097193F20F123732AC646D2800096
SHA-256:	6AD8C8A703856136FEA1D1911FE8C0E09BCE87EDE20F4C8B98AB8F8961462738
SHA-512:	787E1A2BCCBCD973135E53B53FA5BC89E59AC277D95F30B0595B225667B1F0DEB6616914915200ABB6E522DDEA144E2EEF140876CA502D1317E13E86E63DA9A1
Malicious:	false
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-1ec6e574.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const e="musickit-components";let t,n,l,s=!1,o=!1,i=!1,r=!1,c=null,f=!1;const a="undefined"!=typeof window?window:{},u=a.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,l)=>e.addEventListener(t,n,l),rel:(e,t,n,l)=>e.removeEventListener(t,n,l),ce:(e,t)=>new CustomEvent(e,t)},p=e=>Promise.resolve(e),$=(()=>{try{return new CSSStyleSheet,"function"==typeof(new CSSStyleSheet).replaceSync}catch(e){}return!1})(),m=(e,t,n)

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 10380, version 1.0
Category:	downloaded
Size (bytes):	10380
Entropy (8bit):	7.960698675136466
Encrypted:	false
SSDEEP:	192:wTBTIh6auIWVQOv4Rh3hOpcN+Ho5E9Qdyi1vBH5eITpvRCobJNblSq/:wFW6aQwRFU4cwNdyifTH3Jd
MD5:	9CACA193FE7BFF016EF17E26937711D9
SHA1:	121E523FE8F27D18017C2F7A056F2F14BF43BFC9
SHA-256:	3B7D2B4C5417A697678081ED3B344955F0B25E694171178B0C01E029B4A18E8B
SHA-512:	280F17FBEFA9682CECCDAAEB9D4CB5B283F22F3B403FC03420FF3BB51084F8820AE726DD6D3F3308D0EB2939E1A067C28F6F466AD5E7C736A79FEC85AADD2E31
Malicious:	false
URL:	https://www.apple.com/wss/fonts/SF-Pro-Icons/v1/SFProIcons_regular.woff
Preview:	wOFF......(.................................GSUB.......;...T .%zOS/2...D...D...V..pWcmap...........p..$.glyf...t...O...l...^head......./...6...Chhea...........$....hmtx.......S....64..loca...d..........Xmaxp...<....... ...:name...\.........S\.post..&8...Q....Ajkx.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d?.8........L..F9..\|.!.I........+.HsMapP...M.....y... 9.'..;x....R.W.......{.AH.&(.%&&&j..{A..QI.$.\..+.r5.....=]....Y..+..8.Pl...-..h.....i.;.......J..y.......sft.M..f..e.k[.....`......mh'...G..~..5..'..7o.g...nr.........Xc..l..#..l..3vx..^..O../..+..M?];.t..g.>.....1....1.o....9.a.9...\|.\|..G9..\|.<.=.....%Nr.e..4_..g...8....9.s..Y.".....r...`...?S..>z...^.......7..=..N..%..Jk8..f8#..pZ(...P:...t..D.........'.4Jo8s..p.(...R......I....2..+e$.\.h8..p.)..\S&...L..N....r .....&P..w.r8......Q{@..].......>.fx.P[x.P{x.PG..Pgx.QW...;...'...7.../...?..h ..h0..h(..h8..h$..h4..h,..h<..h"..h2..h..n.pk.#A=....lP..zv<.3.D.q.B.{.b...R....p3.S.B..B+A

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 160, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6391
Entropy (8bit):	7.925576155945514
Encrypted:	false
SSDEEP:	96:yBOHH4i/VNQ9Z6PSWSzCjDXbh6LTzPAZTMu7EmBOTzB8rl3Y5/T1q04U6xjbM3M:97Q9Z6PSCfl6nzPMVBOfBE3GMp5jbqM
MD5:	BAEA015A2869C38653A857D46D227854
SHA1:	54D9F20EBE2369F3DE5FF260E5660F54A550A247
SHA-256:	B504DD0577136856D78114D514A13139F2D1FB8B05712787019A5D750C811A50
SHA-512:	92D1E731ACA8E1A9E3B9C48695246A941A9D2FBBCC0ACF699593946DFA4DBBF0B6D138EE371AA2A02F4298188AE749579687372DB0449B0EA8B912E2E02C4811
Malicious:	false
URL:	https://krs.microsoft.com/images/AppleAppStoreBadge.png
Preview:	.PNG........IHDR..............%O....SPLTE........................................................................YYYMMM...................iii333.............................!!!.........eee...}}}.........III...ppp%%%...www............mmm<<<BBB...+++(((..........???...666......FFFbbbRRR.........ttt......\\\.....999........UUU........^^^WWWOOO000.............```...yyy.~-y....tRNS.T...G...P.....s.;h........>IDATx...;O.`....8..!9.C'C..".....C.-..HMg..d.....(........yo.=+..b8H..7,..h.......J..R. ?.%../.tV...F.;..e5}82o......F.eqJ..bY...zY..Jc..".19.,....%..p..r...^Lg.K.y....h\|z'..>.......6.r&..f%.>Mx.LN.(.m...#...B....8p{z@y+F.......".Z.._......b.9./.$..].U9..0.-`+h}..,....b...~.<.X.2..r........]CWb.~w.!.....8l...Z.:50j...J.B+.6.g.A.B._.J.,.(T...8..... t.o.h..@.%..........t...;..r.t.t...tW......J?.7.$.(..z..8..v.A`..... .%n^P1E.LM+.....]gv.0%...y...p...g.....q.._E..o...T.Wih..r..L.\.....?y@..N..BJ@.@.X......3...z.V...&X.XNhY.U..R.^+..'Tp......K...Q

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	38832
Entropy (8bit):	4.79684101098726
Encrypted:	false
SSDEEP:	768:t0Hr1eMxTF69ukmv+ZNrMUVfd7k3pY7jVSHUo6eI:t+ehL
MD5:	CA74523C8DD2AF8E71096EB90ABEA33B
SHA1:	47B67EF377E9AFC52340BED1A69DD53BF5DA51C0
SHA-256:	FA8045C24FFB80F06CCF48CAB215B0B3D7FF1A59A0F91FCC6B361A73B1462892
SHA-512:	DC2D4CB324F37671A6FE35A4F7E4FF6F8B9BA307EFC12C244348BF0393ED31B3105E7227D9B447B9F7CE52E23DAC42E0A57BCCC18D368AADFC4E194774215CA0
Malicious:	false
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/flyouts?locale=en_US
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	250036
Entropy (8bit):	5.574827710357734
Encrypted:	false
SSDEEP:	3072:mwqsHQaf5qZ3fhO+zSpcf8jG1LceF2/ea8LR9Wk9ARFaQjSTnXDL9btIMWZLQ5cM:siQX5NzSbYLceF+hYTnXP9RIMWi5YDKb
MD5:	6DAB43A57842E8BFE42D55478392F1E5
SHA1:	ACBC6FEFEB04A9B26F4C71BFD2037403AE253043
SHA-256:	C179ACD3AD0968A5D48AB2998A0AD70C9690B54D92C9A96B3A21BC30E12B6C77
SHA-512:	9D132FD1668740BADD41215E7A288006E17DD767D9F8940D568513E55DAB937E4793AE4C09DCA53DEB6C7193CC6DAC4255672C727922F4946A8D87084A0231CB
Malicious:	false
URL:	https://www.googletagmanager.com/gtag/js?id=G-6VGGZHMLM2&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"6",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_cross_domain","priority":17,"vtp_rules":["list","play\\.google\\.com"],"tag_id":16},{"function":"__ogt_referral_exclusion","priority":7,"vtp_includeConditions":["list","play\\.google\\.com"],"tag_id":18},{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":19},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SE

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9564
Entropy (8bit):	7.97584128021527
Encrypted:	false
SSDEEP:	192:ECJfBVNEZiq09tLVyXEheWrIngVaN6Bd10IkSmqDXn5R:EGBWizPwXEhergVasGIeqD3L
MD5:	64020C74B49AEB0E58B7150F0499D07E
SHA1:	040E51B00591EC2ACF8C6D78BAA8585FB39F4C4D
SHA-256:	EDAEE1F52C4AD3284D51C88F2BEE378C6018A45BE70349DB914073CDCEE2EEE5
SHA-512:	33715C326405E085D85AE03F9CB3A8A750C35503EAC444DB5F717369B2C912DE62F434248D321C79780E5C7675A49D98A3589F3D85259FEBEBC3A4115055B469
Malicious:	false
Preview:	RIFFT%..WEBPVP8X..............VP8 .$...........>.J.I#.#...<....y;-......}.....?...i.<....z.....k....w...[......k...^......._n..........S_......_...x.....^....A.i.;...{O..@/c...k..\|..{..<...G......j.!.y.....W..._..K.....c.../`..oN.b.......3~....W.8.......q..(...U.`h...O. .$.CQQv....0Y........O....2...'..........b......do.#"~....Xb...m.....v!84..[`..O..v.@...y}ma.{m.....S.1....d.......y......Z.cb.....mu..h.3....4..:..._<GP.5!&..Ti.v....M...i..z..m;.k.9.....Z[%.#.......~z.lB..T...X.30.I.......qe.Gm.>Y..n.Er..T.{..;."....p..rE.{..p.S....._.Y.\..f.6......M-=.%..,.#....T.....l...w.%.`fh?q..x`j....g.S.B4.0...V...\...).7..z......JT.O.".n.v...^%.dv.%..N>.$.._z`.D.N.!5/q..j.......dx).. y.\|8.D&R.a.F.;=Y?......l-. ...^...%n..G\.)....%....W7..l.Fh.q)e.WO[q...2..Z@...G..&S3...M.=.^..j[]..6'.t1..19....-{.}.....Pan2...(W..&*.(.=....{wr..#.mj..5x/...KR..\|.r$.......".U.>.\|Z.ZP{.,u.c....HX.(~.br._....D.U.jC.b91.-.N....)..A..L..^y'V...,Wm.s.:..(...).....C.Q.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	10312
Entropy (8bit):	7.978077493567659
Encrypted:	false
SSDEEP:	192:ZZ9O0GzTQJx8I1hrBhBuYUgnORFf7Po/cLyipdDmRqLkBia7mkOJl4KzlRYu:VGY8I1hrJuZgwBkS1LMia7LmvZX
MD5:	48AEFD624535D25098B2666E195C478C
SHA1:	71FF016A958F1AF6B72BB2A7820CF4E0145FB86C
SHA-256:	478052D8E3A1A597646E36658A3634725534437AEE4C4037B16F5DE9120847A3
SHA-512:	80ECBCE481BB3070975E3F81B9C74D3214DF809AB8CD4ABE12D11F479D8186B3D01A826B070753A2C7F6C359AF6F94B20A2712BEF2DCDB52308C0DEB6B4897D0
Malicious:	false
Preview:	RIFF@(..WEBPVP8 4(.......(.(.>A..D.......(....p...\|0......>Yg..q................}.....Y..?.;Z.....o...;..........D...?r..}Y.../....._{?....o...}@...=.3.......9.[......s.../......e_.?/..\|!.....?.......?..q..........<t~.....././......e.O...w..........+.......?...........................7.W.?o....}.?_?...-.b.:..k.lXGT..}....d..v.4....1.Y_}{.j...((..R....uF.0.....JU..<~?....-.%...vPzt.9.c....}..Mr.... ....Wp._@.!..t.T....3\|..C-........O..7u..s"k.n...(.V..K..*a..^0.....x.....%6...G.....4.)....o...4R..K?.H$..B6...B.n.!.%..Z^.T.....o-.Z..../x.e..<n.Io....b...O..C...I`..Q.,4?.U...(w.;l..k..$.h.=i..Rq....]...F$.$..r......=.....oVW..........TKh.N........1.A..,g%.T......h.~...Tf...-_0R"[...F..H.SC....9T.h....?..w.P.........0...%o......7.-c..K&4...R.yB.<x...o......p.>.6 ....by[6#.:f...#........{...).......a[......1...z..&.$1.....[.S.......v..j....[:.9n3......)ii".N...+A.......G(.....nLZ.-...UX.@.a..~...#...)....K...5.,...'?..Z.^.b.O

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	244
Entropy (8bit):	7.153897685834863
Encrypted:	false
SSDEEP:	6:c3Zulvhb4/Ep0/bXorL+jrXTvx2GCTn0LpIaoyl:c3Ql94sp0/jorUXTZ2GS09Iaoyl
MD5:	9DEA3CBD9E0F9B455FDE32DCA965B41F
SHA1:	8049A160E77BF9FDD2446113611BB8C99D1E5A53
SHA-256:	3A1344E63287114EAD7F90BE694B7FC95370BF7B215D89BE93A54F39C15011CB
SHA-512:	E559F6BC3C44DC6E793EC98832926FAEB3D2D34811041868244CA89DF67DFAEB899689723C0DDAB5A58063EB4E42539614BEBBA23E09A8697E863F20416DB594
Malicious:	false
URL:	https://play-lh.googleusercontent.com/iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw
Preview:	RIFF....WEBPVP8L..../....5...Fm4.W#...0D.]....J...r..l.2...6.mU....5.C.(.....'vi...R...Fm.t.......\.._..Y.....c; .........\| ....pk..b....`..........p..../.72<.........AQ.........Y..@.ErE.....d..]:..KG.^.@L.S..g..z..^.g.zg..\.JE..

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Preview:	{}

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1750
Entropy (8bit):	5.350403020451872
Encrypted:	false
SSDEEP:	24:OPKqj2uTpyxNb7JuyjNqe84OuGO8JbgzVQyufZ4yudzcaT0sklUMK:o124pAloqNqe84OuDgkzVJQvONFkl+
MD5:	DD25C1B6ACE27BF9BCC71A9EC623A87D
SHA1:	8DF4782C0EA6BC9EC9683250DF1157BA2A946C86
SHA-256:	6B6857463D8ADA807D0B31E9E2498E7242E99488B3B2DEBDDF048651B82CFCC2
SHA-512:	2FA325CC801168DD354F8B7867B5AA7C61C0C7B6CD3CC85764F6F0838C11878A1CE606BC4775669A381CBACA7D84F44C03A6BBF1308E8835E4303CB023605750
Malicious:	false
URL:	https://krs.microsoft.com/redirect?id=-crYd9Lj
Preview:	..<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="utf-8" />.. <meta name="viewport" content="width=device-width, initial-scale=1.0" />.. <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://krs.microsoft.com/completeRedirect/-crYd9Lj?correlationId=a8a29aa0bd0ef81202324dbb48c51c9f&platformSelected=iOS">.. <title>Outlook</title>.. <link rel="SHORTCUT ICON" href="https://c.s-microsoft.com/favicon.ico?v2" type="image/x-icon" />.. <link rel="preload" as="font" crossorigin="crossorigin" type="font/woff" href="https://www.microsoft.com/mwf/_h/v3.54/mwf.app/fonts/mwfmdl2-v3.54.woff2">.. <link rel="stylesheet" href="/css/styles.css" />..</head>..<body>.. <div class="container flex-column text-center">.. <img id="icon-img" src="https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw" alt="icon" style="max-height: 128px" />....<h1 id="title">Outlook</h1>....<div cl

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2620
Entropy (8bit):	7.907739599114583
Encrypted:	false
SSDEEP:	48:VvjWsYJqgQQ1DZsFI3v+a83wLw+umPOFXwrl6ipckhwH1VtCWjgg8Ofslf/zouhD:gsYolQdZ8KhjPqXNtkm1VtCWjgg8QY/p
MD5:	52025B894AEFE69D60C3062A654A9BCC
SHA1:	C6CEC5F7B2DB19A21339B974108DEE6B7190CF8F
SHA-256:	E838FE70129812268D3FBFAC662E7CC766EC430823187A64459F32C10DDEEFB4
SHA-512:	94A5924201EDE700FE74BCE864D96281771722B02AD1801EDE0F9747952CC5847494595B4656DAAAFCADFF48353C6591D6C273F24D1D8FC7AF1168FE9F89835D
Malicious:	false
Preview:	RIFF4...WEBPVP8L(.../?.....m.9...,..?0D....f[6h4....Z.Z.;....[h,.m.......P.6.c...B....II#IR9X...u#.....".I.O.... B.@....A....P........`.....M.l'........333K.3[.........Q...U=gV..b..h.LY.LL.W.K.u...0\|"Sf....&J..6%-bV"G.d.m...m..g./..l..m.m...?X.l.6.g.{........m.nF...m'u.{v8p.I........0...7....b..)8X........#K..bj.....G}...$.@$b2Y...A...1.@....I$.N $.@A...T.b "@].....5.2Sg.x...V.....%.Z2K.XN.)..X....4Q.Q.. .5.....\|.&f..%.\|.(Q.l....."c`..b.(....].LN....(%.}...S7Y.4EQ0!.A%.3zU.LD.......Z.e..s. +..........<._g.4 .lYv.F...:.....M.....!.cy......!Dz..D!...B..^...b/D>..Oe..PmW.o./...V..m,v6...lz..$.`..1.].fM.M.h.b.c..U.L...c.S..u}..2.O.....>..\..a..X._...[D.}Z..C=.b.R.a..cx.....5..Xqj2...4\bO.O%#c.zX..8.O.B..+...fG...Y...,3E...9.y..6l.b....I...G..R.\|.{U..#.M...qvk...p...'..4....-'..<.nO..^....>..Y.:......u.&\a....8...%c h.V.#~....<.n.X......<.\~5..{1...v.D.@.U../s.m.\...k.m.s........b?.a.}.....6v..g.......-.r"..)$..........d........).

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-c88356640b7a7aedb98664cb26145a83.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34202
Entropy (8bit):	7.960545923350099
Encrypted:	false
SSDEEP:	768:sNDrB7TpS9fy9Rk6AZ0HCNuep05RfI6zQWlkA4ig30dlG+dkQ5G7dyD/XlA50Ina:sNPB7Twfy9G6nSuDpzQWNLRdlTyQ5G7i
MD5:	40BAE2E96B69FE58B121D7E6938CA0EF
SHA1:	865AD4D08F7CE3E6B64906B9F12D5D2DD3FC1D61
SHA-256:	DEF24518B45222080C6CAC48429194BBF6769ACAA8D5D046D184F6800D4E6154
SHA-512:	9BDBB6B5BF9DAAE21130BC8BF052AC705CBDBEF198482ADF7AD3AB3A8042D577CB60B5D0116ECA3174469DD067AB91AFAC7B3567271DE21CCBA7DDC3733B966B
Malicious:	false
URL:	https://play-lh.googleusercontent.com/hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@.d+l...e...`.&%D.......o..svw.9..>...v....{.....$...s.......e.v.PU..$.M2T...s..c...y.Q.....7R.IU..X9p.$@...o.z....u.#r.V.H.!@..CM..C...<.@H.L.A....D.oUqYXO.....P..Yj.....H.5.ls..z.TG@s..w.F.r}=P@...sR.{...x".G..!.t.O....R..+...]...m.s:..F."._...$..B.C..{...Ir])...v....{..F4K#.1.....m$9......[...............+l.af.%..$I..1..5.c.....3O...16}.u.9kl.t...R.b..8..l..@..z^^e.i.t\|..c.o../.\.H.F..\..u...6.G........Y.N5....l.Q.U........w.W./...e\|.u.x.55.x:Lc.e.....5.+9He.......VF...6,l8u....T8I(...R/#..R$CB...BR.PrQw.m...B.+u)...5..".!..dM.R6%.\|.,...\..M.6..md../...1.....e.'.m....x...5.....6..>.m....u.{^.....8....". ....z......l...<.5..=./..........K}....z.............G..{.>....7T4....;....h.wc^..M.@.v....Q<.m.v...:.O.0.N..o.......t..5.!.V..'.....ga...P.P.V....G...X .NB.....>.....v4....'y...k..}..7v..q....}....s.......{4...=.....(...mhh........x...p.....@hh.a.../......HN..61..O."x...K.l....\|.......[.h..,V..........b0

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-border-f519029c9bc5f9130e7826c69b475d0b.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1968
Entropy (8bit):	7.882407902691392
Encrypted:	false
SSDEEP:	48:rhpEb/4FRqlHw9ngRDod+N6pQiWGMb0T911IAt9BHIc:00FRqlC8DAG66im0T9TLAc
MD5:	173537A76E503E2F6AA799FFCC3A8DF4
SHA1:	A4C55E454CFFC5E57819D580BA41A7B00D8940B7
SHA-256:	9A8B42068397D2C3433DAFF65B31FAA2370B43370497470045C918B1204A5C23
SHA-512:	BCDF67BC248AC0D453DF4EE0939224B36EEEED4B40D74C0DE5579D7714A690C8E4AB64E582E563E58B01AEDB029F702348046980B230857CA7123A9FC8851A54
Malicious:	false
URL:	https://play-lh.googleusercontent.com/nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s64-rw
Preview:	RIFF....WEBPVP8L..../?.....m.9.......0D.....7#`.v.Z..j:..,.E....N_..2$.+h`.IR.F..6...)^.l#Ir.%`..T..U.O..7......=..`.Af4..@..\|..~...#3.....\|....a.Ou.j.v............cffffff.e...kE..S..+.rF.v^.}h.t.....B.N..o...$I...._U5b.6.'S........d.6g.m'.U...rlk;..\..~Fl......U2..%....m.>...........L..r0h.8U.`.....X.1 ......Vq.2^..'`.==.........o...Xi.;...l.p......,.....jk.`.E...O...T_..I......uj.&>.......lG.p.RP..rL..o./.2..J"/U>...I...`.#3do.....7.kN.kOY..r.V....Rc:.3.\..W.o..D.j..{.<>..+A..9K/Ye..s.(8..3.t...n....Q..$.. 7..$.T\z:j.......3..T..........~h_...g....3.D..G.....<......U..C_y.p..V..>R.wk3.....=U...81...4_...R.gh.d.........Z._4.....Sw..x..u...>...{.w.J....../....K.....^..#..k..e...Q.V.......j..o.8.n7>...%^\|.=..d......@.S0.v.\.]...>....f.=..L..6.!..{...J?..'=f..Y.U....\|.....2....6y.hb......&.k..x.e.BQ -.C.r.G2.(.oO.F:O$MA.R.......1.A........h.(..LA2.V..q}.-......^...I. .*{?.C.L.qW._U.l1....\..".R....C..~...qz,.rY.%.N....U.

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 162924, version 1.0
Category:	downloaded
Size (bytes):	162924
Entropy (8bit):	7.998614826254304
Encrypted:	true
SSDEEP:	3072:XdhkQyBlHVVYwHUFDrzXtPz/qJwZmUyhjpimMS6DW4hb59a06EziVFKth8Biq:wQyBBvYw0FD/tPWJZjI3PXhbrduVFc8f
MD5:	7F2E1B48B71EC58FDA4539018A2F56CC
SHA1:	507BF81F52FA8C99BF2C5C8BD59A981899CA9995
SHA-256:	7F80C4C91054B3D6C80721939242C2D4F68F15E41F251E12641F695D78EB2F35
SHA-512:	DD7B52119D1179332147984F6C7D8CDCB3388AEB1E8AF708EF9036ACDDE6E7B3900ACC965221F4E4864DAD89797072E19E5B308CF065A65DDA7656BE884CDD77
Malicious:	false
URL:	https://fonts.gstatic.com/s/materialiconsextended/v151/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff2
Preview:	wOF2......\|l..........\|..................................`..P..........N.....6.$.... .... [.m.A.B.$...c....5s/E...%.u..v..J6...:......;............$........@..M..... 8.HA.6%R...tB ..D..M".f.$G.....<....~.y;..R..23.S.T...p...'V{\|u.,S....Z...lZ)..Dc..D..;=n...V...<.X6...h.......:sw.....T.6.eF..!=.f..H\..dDd.q"s.E.Q......JT..v..#Mf"sH}A.>.....q.h.mLC...Q..Cv...+\|.u......6..B...I......K..I...R.[..m(...P<B."R.Ap.f.j:.o...\o..L..G3Yn.C..........\rI..$$!DH.!....v0r.E...p..WK.v...muW...X.[. ......j...1\U..8V.&.X..i.T^TO..^\......&.g2Iv....>.J(.T...y...v....4.f..a....$.K...M-5...1D.ya...'.'...A ....!.@..c...$.D.3q..:...:&O.rV..V..v.m...[-.Z..m.......:o......$}.h..i.N.FH.$(..Zq....v...k. ._.A...J&.J..D.......>...~!...H.".$........_...;v...*gU....W Y3lI...;.....RG.....\|.rw.. ..=@.....N.....=.W..=O.(...`..M......Y..&.O. R..'0.~6@$.4f.`I@.dV{..YJ[j`v).1(.L.."(oO...R...cI(.l.K..P,1.C.b....A=,u.B....;wm..H{.>......8e.8d.2.~.4.CDDDDDDDD..\|.Z..s.G!.._.....

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	dropped
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8117)
Category:	downloaded
Size (bytes):	223320
Entropy (8bit):	5.692625125124245
Encrypted:	false
SSDEEP:	6144:iarXKtt3FdojSo45sY6DCFRTWfojonSaSm2nXBP0/d7CloNZMK+li3FFMB4Ge1eg:iarXKtt3Fdq45sY6DCFR6hnSaSZF0/dZ
MD5:	1E962FD5F1A2DA9027FB70EC41E997A7
SHA1:	30FFC2260367AB494B04111B1A378245B387A95B
SHA-256:	7B2B2527FF3F30B9948313A7790D046C61B6C9345F73DD7CE67941885379A6E9
SHA-512:	1B1CB3B3B5E4DFB1D2AE63C663DBC2CE13E5036B00D0EED503AE6F0DD779B4E0FA4D4763964E8281720D322D1309E1B56CF2595B3C95254F90FA12FCC0961759
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,IZT63,IcVnM,JNoxi,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,QIhFr,RMhBfe,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aW3pY,aurFic,byfTOb,e5qFLc,fKUV3e,fl2Zj,gychg,hKSk3e,hc6Ubd,j9sf1,kWgXee,kjKdXe,kr6Nlf,lazG7b,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,ovKuLd,pYCIec,pjICDe,pw70Gc,s39S4,vrGZEc,w9hDv,wW2D8b,ws9Tlc,xQtZb,xUdipf,yDVVkb,z5Gxfe,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=vNKqzc,fI4Vwc,sJhETb,JWUKXe,t1sulf,JH2zc,tBvKNb,soHxf,IJGqxf,wg1P6b,ywOR5c,PHUIyb,BfdUQc,oEJvKc,kJXwXb,chfSwc,aTwUve,indMcf,RQJprf,lpwuxb,NkbkFd,nKuFpb,zBPctc,jX6UVc,qfGEyb,fdeHmf,SWD8cc,tKHFxf,rpbmN"
Preview:	"use strict";_F_installCss(".H1RBrd{max-width:500px}.UIeOBe{margin-top:30px;min-height:120px}.k2cXo{margin:0}.XWz5yd{margin-left:160px;padding:0 20px 20px}@media screen and (max-width:480px){.XWz5yd{margin-left:0;padding-left:0}}.iCVHHc{height:215px;text-align:center;width:160px}.FOYkDe{max-height:215px;max-width:160px}.Dtwbxf{font-size:28px}.Hv8szf{text-align:right}.rYrxJf,.rYrxJf:visited{color:#00838f;padding-left:3px}.F9JOfb{margin-right:3px}@media (max-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:calc(100% - 48px)}}@media (min-height:fit-content48px){.ZDGq3b .VfPpkd-P5QLlc{max-height:fit-content}}@media (-ms-high-contrast:active) and (min-height:fit-content48px),(-ms-high-contrast:none) and (min-height:fit-content48px){.ZDGq3b .VfPpkd-wzTsW{align-items:stretch;height:auto}}@media (max-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:calc(100vw - 48px)}}@media (min-width:528px){.ZDGq3b .VfPpkd-P5QLlc{max-width:480px}}.ZDGq3b .VfPpkd-P5QLlc{min-width:calc(100vw - 32px)}.ZDG

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	984
Entropy (8bit):	7.674068185768488
Encrypted:	false
SSDEEP:	24:j3Tnqu3iggc6XDmjArkqCHB5hnUoirkQQ:DTnRTgc6QXqCHqoZQQ
MD5:	521AB661D05B5E40ACFAEAB1F65DFCB7
SHA1:	AE1C2E4A193121281F5D39BD7A4701D0BD9265D8
SHA-256:	2F85BCEB5105CD1F57EA59264441AA3231AC11EF7D714A06EB0A2F578B9A697F
SHA-512:	CD3334CBE3D856ED5E8A041CE75AE88099254EB2B07BBAC09E8E14C38B65DC07BF5B01F8983C52A5769461DFE36A644453C3DB9AAE121B3BF3E7BA81FD4B70C9
Malicious:	false
URL:	https://play-lh.googleusercontent.com/hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?.......$GR...g..Cp.6.$5...`..A.H.........._..!...6.....Np'.l..V.y...E..V......;..Q.&(.l...FYQ......M..f...w.. .....7......Q........bs}....ylS.....)..R.isy.......T.s.~..p..nmO.X.03333333..>.<o.+Gv.X.....'_.UD.'...vI_.i....d_.ja.h..c.FO]....J...Zjq...{o.1...UF.w.................wv.n...wkR..mA..h....eD...AhE..m.....mt6.../n.......7.mv..DD.RG..$J.t.....Jp..3..%...=.Xp.R...5..u....t;4.o....L..]..<._v....f.B.p...G.%.Q.IO4..J.....c.....['..>Z...Q..C.2Z.A/.u......n..a.........Lv..j....m.....k .,Q..T..1..i"..J.x...#.]6^.h...=.hz....)GF..].h..D.G.&...(..4.....dx(kB..J:...4....'M...1)G2M.E.@..Z<......p.e.!. >B-_...!.2....l...W... ...s..._.........4.$Gw.iU..1.gZ..D.....P...D[.....\|@D..X.S"J:.8J.=t$D.T.A+.....%..V....!...-.@.....Pr!...."...wl~.v..V...x...>8.E@v'......w..D..~.._l.v....9^...;........uT.).N..0..j...\...D..d...x.h....}....'..dy.&.].}.EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	51228
Entropy (8bit):	7.992246318048376
Encrypted:	true
SSDEEP:	768:0c7WoVIu7cy6olmezhzB8gL+cPKE/LpOeP+8VqSHWgGjK7WeNUmMhLcRutE0Sa6K:nWb46SzB8mlCEDpOetVqSHYMiLTQWHr
MD5:	89D3B9BF317C62E45422276B387D3C2F
SHA1:	BECB39F56997FED9BB9D08228762629275C608E3
SHA-256:	AB99996E1B0942C3412330BECDC643BDCC019B495455349A1D1034FC5D4B4C42
SHA-512:	8965A87A6D42895E0F5CED0526DAE8D3EB61BAF3FC8B45350FD4C91F3200235B4A2AACBA5F5C0340C66080DDAE23FE794680D11CBC7D2CD5371054BEDC387EF7
Malicious:	false
URL:	https://play-lh.googleusercontent.com/_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@.$9nS.......Pv......(.......xH...h....j.r.,$k..2...O@...3.G.a...T=U...P.Q.<c......cDU.q........._....@;........I.i#>#...8&..@o.:......`....z.mP..Z...,1>6..5e.xo.sJ.q...{K-....lx{i)....~3{o..7..i.`Cw...20..M.!.l..z_N...oP.m&.....ku7....n....9....l23K..yAI.-G.tJ.V...jzX..c8..p..0JE..$.......oz..V.....a.u.....A..c~...l.z.6......!d....N...xQ.l3B.'.J...JQ....H..I..TQ)..R.T.R.Ee....Y......c.c.c.).asj.E$.%F....5..C..q.....f..0...A.$. 7..\....9:.1..Ni............3.;d9.1..i...JD..L....LH&.N..:t.P.{...k..jj...Q'.........rf.k?.......=p.6'.raee.X.\K...............8.......~=..^<=n.J{...j:u.T).D"1d.M..Iy.........R.$.8J...T.$....HV.....s.vI...?"A.!....u5~.c..g. I...$0D........e.L.b....$I..o"...N....dx{...n.@.$.8zC.......c....%I.oJ....`.m-.\...3..x..C.....b.+tF...../3\|.....I.I........n..,<(.X.8......RS.t.#.d>.n~...yV.b6....T..5.y...m.j^Y...Q...^..../.........I..J.mM.U.U B...f..L.$..%..z...t.c.1........O?..&.$+.&.p[.....{O.0m3.o.G...o

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (750)
Category:	downloaded
Size (bytes):	2169
Entropy (8bit):	4.9548772147686115
Encrypted:	false
SSDEEP:	48:ildRbgqluYoCoLUmledemlxUlIUvfALSAl/lmmqlmWlfBlAlVlWlgwheAYf9hbF5:INx4gd/d4fTvsaMefp5oD
MD5:	89F8EE167E82FADB507197C109ED684B
SHA1:	F5A728E7805C71BAE1A8786921AB2735AB07C15E
SHA-256:	0B70D5380DCC5A0C4BDD30DE4D68C4B0F598EB4EA92BEEC1B6D5F0852BD96D22
SHA-512:	BC12D7CB827E364176A691C2ED5C73A481547C572A0C00E5FF6B8BD8E698AC7DA96F2D8DA08485F9363F98A1F21338E61A9E813A31DF0A2EB7E96D43A902E5CE
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.961.e281a7b797aa9204873b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[961],{54961:function(n,e,t){t.r(e),t.d(e,{cleanup:function(){return c},environment:function(){return o},eventQueue:function(){return i},eventRecorder:function(){return r},immediateEventRecorder:function(){return u}}).var i=t(71026),o={_document:function(){if("undefined"!=typeof document)return document.throw"metricskit-delegates-html.environment HTML delegate 'document' object not found"},_window:function(){if("undefined"!=typeof window)return window.throw"metricskit-delegates-html.environment HTML delegate 'window' object not found"},cookie:function(){return o._window().document.cookie},pageUrl:function(){return o._window().location.href},parentPageUrl:function(){var n,e=o._window(),t=e.parent.if(t!==e)try{n=t.location.href}catch(e){n=o._document().referrer}return n},pixelRatio:function(){return o._window().devicePixelRatio},screenHeight:function(){return o._window().screen.height},scre

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (45050)
Category:	downloaded
Size (bytes):	45236
Entropy (8bit):	4.986932890972818
Encrypted:	false
SSDEEP:	768:1S7p4S44vR3b8uuXTxXIXcave1vee/YNVwA1NAGCR//f5TTCE6/iSphWhO7E9Z8A:1S7p4S44vR3b8uuXTxXIXcave1vee/YG
MD5:	4A7162BBFB49C42F9BA734511824AD69
SHA1:	22E2808CF5C907572C6E4D0FABA98505CE63E05B
SHA-256:	47BA4BC1501E3717D778816F6C577942876A1796EA75D7798A0C73F8E7E78885
SHA-512:	68DB8592C78320AF013445CA64FC0FA31C1490EA187932CD3DE3BC5D4076C5E45ACC1D3020889A6CAA767153051F4A92231F54470A126F1C09387372160CA955
Malicious:	false
URL:	https://apps.apple.com/global-elements/2406.3.0/en_US/ac-global-footer.4a7162bbfb49c42f9ba734511824ad69.css
Preview:	@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:100;src:local("."),url("../assets/ac-footer/legacy/appleicons_ultralight.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_ultralight.ttf") format("truetype")}@font-face{font-family:"Apple Icons 100";src:url("../assets/ac-footer/legacy/appleicons_ultralight.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:200;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 200";src:url("../assets/ac-footer/legacy/appleicons_thin.eot")}@font-face{font-family:'Apple Legacy Chevron';font-style:normal;font-weight:300;src:local("."),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 300";src:url("../assets/ac-f

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	555
Entropy (8bit):	4.700481639872808
Encrypted:	false
SSDEEP:	12:nJQycZnvmWyX+WMhfiI/vmIAIsZeOwWeRdEvt2wtj3X+LV:0nvpy+hqI/vAeOORd0tBtjWV
MD5:	7A2561667DD16C7736D021BE44F7C74A
SHA1:	7D4E6D8C7FB356B619568E8301885F0E232730B9
SHA-256:	4BCB3795DAEB9400A7F3E6B01E2F10CFC9E13908AF7C936B803EB9D91918F41E
SHA-512:	DF01C63184D5DE317B9808441ED743C90CFD0968DE96EE06444F10D3161620D13ABD7385DF68C91D272E3EEC28C018FC0576365732156873B17FFE1B01012B2A
Malicious:	false
URL:	https://krs.microsoft.com/css/styles.css
Preview:	..container {.. font-family: Segoe UI,SegoeUI,"Helvetica Neue",Helvetica,Arial,sans-serif;.. margin-top: 64px;.. display: flex;.. flex-direction: column;.. text-align: center;.. align-items: center;..}.....flex-row {.. display: flex;.. flex-direction: row;..}....h1 {.. font-size: 2.5rem;.. margin-bottom: 0.5rem;.. font-weight: 500;.. line-height: 1.2;..}....footer {.. position: absolute;.. bottom: 0;.. left: 0;.. right: 0;.. margin-bottom: 16px;.. text-align: center;.. font-size: 0.5em;..}..

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
URL:	https://apps.apple.com/assets/images/masks/icon-app-mask-border-61226afcae6a8f2b3d2755728daaf4f2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	332
Entropy (8bit):	7.358546821442648
Encrypted:	false
SSDEEP:	6:PZVS4Q+recdKlUVHiRQtvCoqYlbJq0AxtC0U8vAzIp9JtOOZkeWbCgfpH:D9Q+recdKlcHiRmC+bJqlAzIpTtOOZTM
MD5:	2F640AA73D5757BA0FE67B74E5D9F41E
SHA1:	A4D29ADF1BA739285BA35AFBD94D51734425429D
SHA-256:	469C936814B431210209150CA7F39A314A333269C07A5C83483D0C3EE0D772D4
SHA-512:	EB2C59AC81D5C2D8DFC90C5A06B283651225A3836A514B47E46009DBE9A9E2AB72EBC77558CD3CD4B3470844D417DE6958A7BFE1AF5BE16C2D7A2F9C314FA58D
Malicious:	false
Preview:	RIFFD...WEBPVP8L7.../.......m..s..c...m..[H.....X.q.\|..c[..*.m.#.Jw.E:.uro....z..m[....J..l.l.XNH...D<$A"X.k)......y..W..7T}........V.G..v4.d....%.Z....y)o.......]~.0jS/........$..\|.K......8M...=..I.q....[.9s.../.F:.j...{n..2..d.#A<.T.A.i.../..6.)..9.}. ..%.l..e_..=p.H......z.n.(^..}/.CJ..:;.G..3.q....ZG.ZF..&.b..;..

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
URL:	https://fonts.gstatic.com/s/i/productlogos/avatar_anonymous/v4/web-32dp/logo_avatar_anonymous_color_1x_web_32dp.png
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	34202
Entropy (8bit):	7.960545923350099
Encrypted:	false
SSDEEP:	768:sNDrB7TpS9fy9Rk6AZ0HCNuep05RfI6zQWlkA4ig30dlG+dkQ5G7dyD/XlA50Ina:sNPB7Twfy9G6nSuDpzQWNLRdlTyQ5G7i
MD5:	40BAE2E96B69FE58B121D7E6938CA0EF
SHA1:	865AD4D08F7CE3E6B64906B9F12D5D2DD3FC1D61
SHA-256:	DEF24518B45222080C6CAC48429194BBF6769ACAA8D5D046D184F6800D4E6154
SHA-512:	9BDBB6B5BF9DAAE21130BC8BF052AC705CBDBEF198482ADF7AD3AB3A8042D577CB60B5D0116ECA3174469DD067AB91AFAC7B3567271DE21CCBA7DDC3733B966B
Malicious:	false
Preview:	RIFF....WEBPVP8L..../..I.M@.d+l...e...`.&%D.......o..svw.9..>...v....{.....$...s.......e.v.PU..$.M2T...s..c...y.Q.....7R.IU..X9p.$@...o.z....u.#r.V.H.!@..CM..C...<.@H.L.A....D.oUqYXO.....P..Yj.....H.5.ls..z.TG@s..w.F.r}=P@...sR.{...x".G..!.t.O....R..+...]...m.s:..F."._...$..B.C..{...Ir])...v....{..F4K#.1.....m$9......[...............+l.af.%..$I..1..5.c.....3O...16}.u.9kl.t...R.b..8..l..@..z^^e.i.t\|..c.o../.\.H.F..\..u...6.G........Y.N5....l.Q.U........w.W./...e\|.u.x.55.x:Lc.e.....5.+9He.......VF...6,l8u....T8I(...R/#..R$CB...BR.PrQw.m...B.+u)...5..".!..dM.R6%.\|.,...\..M.6..md../...1.....e.'.m....x...5.....6..>.m....u.{^.....8....". ....z......l...<.5..=./..........K}....z.............G..{.>....7T4....;....h.wc^..M.@.v....Q<.m.v...:.O.0.N..o.......t..5.!.V..'.....ga...P.P.V....G...X .NB.....>.....v4....'y...k..}..7v..q....}....s.......{4...=.....(...mhh........x...p.....@hh.a.../......HN..61..O."x...K.l....\|.......[.h..,V..........b0

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	6.9991712725025685
Encrypted:	false
SSDEEP:	6:Y/PZql/KiDZfb08qzALLJRn3PRB8y1BLqmX45oBezn:Y3Ul/KMb0tzALL3391t1o5oBezn
MD5:	BA44425C00D3898F79D74B5748E49934
SHA1:	BB2CFD3AC724BDAF3C1F3A3A61030671C79D1B60
SHA-256:	35F1F26A525AFA469CEC210657087027502D02CE5ADC3BB1C431A29C4544FECD
SHA-512:	23D0D7732B4E677FA0E464C3BB834DD28BB232E0460AB6918AACA4CEB1AF7D149A7BA50035B4F39C102472F30B1840EEEF73310517FFDE7810EEE2B4F0F78647
Malicious:	false
URL:	https://play-lh.googleusercontent.com/ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw
Preview:	RIFF....WEBPVP8L..../........$e...'..6.F..u....H....m$'....P.>;L..L3f.S...+Q....Y............j.s...)...w...B?.V.y?..9.......~`..C..1.b...$)Y.....?O........y+..g.i.V.\.q*.f....5...1. (2.s..R....w=.b....)..0...(......e.........n.n.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	10268
Entropy (8bit):	7.976305561250909
Encrypted:	false
SSDEEP:	192:u0okuRcas/S9gZj9R47fOxjzVbfF/j2o/81TB8rvrrDSnIAT6kTwh:u0okuRcV/S9gh9e7E3VzFbCorrDosz
MD5:	6CA37269D896136472A6A0ACED9B04B4
SHA1:	C0FAAF416776C9B0528EA82CD6BB9D0574C26273
SHA-256:	FCB702F59C90EA20D70FE8EB4B56FB631CE38C4D89C6F067CC7109FBFCDF2DCC
SHA-512:	A56E7416C08A4F2743C7429503DC3ECB6746B044FB9D4DFC32F4C68F23EDE80899E8D26D4085EC0F5EFCD64571DDF030AD7C83B1454B6D1BF797109BB26730C9
Malicious:	false
Preview:	RIFF.(..WEBPVP8X..............VP8 .'...........>.L.I..#...K.x...n...4..et!...U...s...E..}.............Z~......=.9.......E.O@...e.../^\.../...\|f..D...U..]?..O....5....W..<j~`^..w.O..B~.~.\|.~....[.......h.....w........?.....}..........@....^.........]...^/].IG...-.:....U@.B^._XE.S?{,........^.Z.....(..BQG....}~..1.F.i.o..%v....ho...7..5..B;;..ln.O...R.....e.#S.\....98:..0x\=>...~.z.&.{.....1......`E'.c....@X.l.M.Z0.3_(..<..M....7...e..E.T3.".M...Pu...0......^]t....R.....I7....B/.`a...(......=...I..qh.x..V.F$.Xp.....m.\|..C"+.^.........qw.\|LQ.d@{.;..9.Wa.V.......A%...6f&..."Z..h...=][Ci....$..4Fb...s.......Gw.{..n..Z.w}p..BGg..Y...#YOu....Y.7....dm(.......a........`Av..]rK.w....O{......7-.ub@.PX..?.].=..Emk...,....;....g....'.R5#.._<..4...'#.`..'T.....f....fI..~....+..[........U.>.B%W.PH@...c...X.2.j.{.h4."..m.5m.^I.,e..-.....-.^rk..B....ZW.l.}..1.$.?$.......%j.TOE..:gnXI.z..._q.F.I.......7..l7R.....-A.E:.'./...]_{...#..#v.B...\|.

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	downloaded
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
URL:	https://apps.apple.com/favicon.ico
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	13388
Entropy (8bit):	7.985174540557442
Encrypted:	false
SSDEEP:	384:w6RfuXN6ip0Qjdd/1StIWw9NKoG7MErzOIGB2Lx:wDN6iSQxdwtIWQDG7MEeR29
MD5:	418DE379E4609B0E8F7074A51BEEF6C3
SHA1:	97B93C7F5F40CC0906967488BD0E53595C73715C
SHA-256:	15005030242937DD784BB19074BDABEDD98A38C78DC7606F8AD90868C4E4A6FA
SHA-512:	33C9B93C1DCE225AF744D81938D37CF46FDB3244D8ED30F6906C129583BC26A279621EA407182C4C828C8CBD6399D1DA8C03F2FB396EF8A03EC7826A9A9ABC8E
Malicious:	false
URL:	https://play-lh.googleusercontent.com/JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw
Preview:	RIFFD4..WEBPVP8 84......(.(.>E .D..!....(.D..p...W......1V...t...@y.~...u..g........d.._.=.~......M.....w......U...._...?....._.z.:..5...k.._...?........~......o._..._..I...~............e.....7...(...'......./....V............?./..P_L.U...o.o._.s.y.P.......?.?..w.......K..........\|.......^:?L...+......._............o...?....c.....O.?....'...?................../.....=u~....L....YK\|........`..:0%....m.E....o...ZNP.......7.R.FP....>..1.....F.u`.........@c.JK......z......x..n.. Zj.M.\|.-iV...p%.5......,_.(....r..;.N.%/.R..Y.Nw.kK6...L........?..6.L....H.......V.......{....3m.)b.B.hz....q...7.~...^...r.H....$...%....#7.,.`.Z....k4.Y.\b%.8..t..l.-k.>T.}..m....f^L.OO5..:^.<...Kz!...+..K...o..$.;mg#._.I8.9...`.t5....B.v.....-.8H....z..Y.7..=.. ..+w.*.....N.Ws....9.k.O2q.....p\|.K..f........}....\....tz.i.....q.\|..a.0`/Ld.v..X.. S..d...... 1"].9.....CMU.=dA'....pFV.PZ=..p.i8."+..flX;..u.`c7...\D./.7.0<...0q........W..[....O.t.....7.kj..-.Q. ..{..(..

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	337
Entropy (8bit):	5.194766943163756
Encrypted:	false
SSDEEP:	6:kRZzRxVvnQYWJAaI/QVf1324By8HeTACMwQRaNw6JpyxZRNlad0:kRZTFfX/Af1G4s8HeTrkbRN20
MD5:	919A47A5382B849B8262CE92A333695A
SHA1:	545F67962DF6AFC2A27C5BF2AF04B03031C64093
SHA-256:	0881B6261E045331C053AE0B669AD3C68FE330CCF554F119FD1290D23DAED601
SHA-512:	EB390319987C79EDAA5E2A94600314D4773B8987CE3C99F65DBEC7EA9F452E8335D14AE010C8E3E890E1498A8AC24054EBFCAE0F68FB20C401D316B1C78FEEF4
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=UZStuc"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("UZStuc");._.Sq(_.$ya,class extends _.Vq{constructor(a){super(a.wa)}H(){return"UZStuc"}O(){return!0}kb(){return _.f5}});_.vq.UZStuc=_.gz;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1827)
Category:	downloaded
Size (bytes):	262961
Entropy (8bit):	5.23813262677432
Encrypted:	false
SSDEEP:	1536:n704E5LJB0R0J0qzioyhqJmEJcqt6UqZSqCs94MF2ymxwxJ3P5A4GaGHk6uv3W19:nxWehEmEJcqt6UqZS44MFJA4GJDQahZ
MD5:	A9CB7E537707AB2AAA83815F8CB2CA5C
SHA1:	9C311FF38BE0EDC0695C8E8975EF1CFCFD8073E3
SHA-256:	DEB6C181DB15C6ACACA699FD64801CE046F55721A7E22514AA4BC190A527C565
SHA-512:	95B2BF58FC7E6C04F0A10074B5C1BBD1C9AFED11ABA777CCD1F1FCF2821816C1DC652400E618B5F73D156EE4C7DD5A9FFF3E1C6CC439F6E76D6308B96D3AB067
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.526.04cd0c888ecd9194aa60.js
Preview:	/! For license information please see chunk.526.04cd0c888ecd9194aa60.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[526],{2353:function(e,t,r){"use strict".r.r(t),r.d(t,{KNOWN_CAMPAIGN_AND_AFFILIATE_QUERY_PARAMS:function(){return n},KNOWN_MARKETING_QUERY_PARAMS:function(){return a},METRICS_REGISTER_ENDPOINT:function(){return o},MUSIC_AFFILIATIONS_ENDPOINT:function(){return u},PROCESS_REDIRECT_URL_ENDPOINT:function(){return i},TV_AFFILIATIONS_ENDPOINT:function(){return s},default:function(){return c},handleCampaignAndAffiliateUrls:function(){return f}}).var n=["affC","adId","advp","at","ct","itsct","itscg","itscc","itcCt","its_qt","ls","partnerId","pt","qtkid","uo"],a=["mttn3pid","mttnagencyid","mttncc","mttnmyad","mttnmyadg","mttnmycmp","mttnmykw","mttnmypla","mttnmypub","mttnmysite","mttnpid","mttnrefid","mttnsiteid","mttnsub1","mttnsub2","mttnsub3","mttnsubad","mttnsubadgp","mttnsubcmp","mttnsubkw","mttnsubpid","mttnsubplmnt"

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk4BRY1LvFEvhIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4048)
Category:	downloaded
Size (bytes):	16917
Entropy (8bit):	5.452118151907047
Encrypted:	false
SSDEEP:	384:U2TyA2YvKeJdmHJaKf/jD2QLRoRuONXRtNUkeC1me2JgUCb8dMNZYTBHQYu:U2KeJdmHJaKHj71oRuwtNcC1f2JgUCbx
MD5:	5566749CEE7A19250F3F6582A7CD7DF8
SHA1:	6705B03FF3D414DA783236F9D678C1055B15FA90
SHA-256:	4DBCF327EC8D82AA3592DBA6EFE1110AB8C595BEB77E16BDB841B50C46D1112B
SHA-512:	B67F0569029F6DAB3FC4E859042A484E21C5E4B014C809C2F89E5695772DBEEC285C2D0C0F014FF5C103CDE70C820971B67EF57C05BFC7ECC2E4CC24D5C1A1EC
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=RqjULd"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.n8a=function(){const a=(void 0)?.Cx();return a?[a]:[]};_.gq.prototype.Cx=_.r(34,function(){return _.Ug(this,3)});._.u("RqjULd");.var c9a=function(a){if(_.aa&&_.aa.performance&&_.aa.performance.memory){var b=_.aa.performance.memory;if(b){const c=new b9a;isNaN(b.jsHeapSizeLimit)\|\|_.Fh(c,1,Math.round(b.jsHeapSizeLimit).toString());isNaN(b.totalJSHeapSize)\|\|_.Fh(c,2,Math.round(b.totalJSHeapSize).toString());isNaN(b.usedJSHeapSize)\|\|_.Fh(c,3,Math.round(b.usedJSHeapSize).toString());_.G(a,b9a,1,c)}}},g9a=function(a){if(d9a()){var b=performance.getEntriesByType("navigation");if(b&&b.length){var c=new e9a;if(b=b[0]){switch(b.type){case "navigate":c.Me(1);.break;case "reload":c.Me(2);break;case "back_forward":c.Me(3);break;case "prerender":c.Me(4);break;default:c.Me(0)}var d=_.Ch(c,2,Math.round(b.startTime));d=_.Ch(d,3,Math.round(b.fetchStart));d=_.Ch(d,4,Math.round(b.domainLookupStart));d=_.

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9060
Entropy (8bit):	7.976433288785451
Encrypted:	false
SSDEEP:	192:YrL4HF6Tj4qE56uPel70Ps1y+O/m4lYAOtjSdUpW1yU2yRx/qXu5uj2UjGU4qb:YrvdE56ueIPTaAKjSdgWF9RfUjGU7
MD5:	C66A794F83E0B04847520FCEEDBC96E3
SHA1:	10CAE1DA6D6886EF29E96343AC43B4787016FC51
SHA-256:	575ABDD39A564E120D980D8DC1736FDB1748F529ADD9178F4C4C7FE7224E066E
SHA-512:	A23FE4B168CBF4411E13256BB8926F8F6748FC44D4878439D05732304A450C5C5F1BD6523B0B09D62B57BC269972B5EF25DECAB52447438E4EF5AE6EE240CB76
Malicious:	false
Preview:	RIFF\#..WEBPVP8X..............VP8 ."...........>.J.I."!.LUL4....~.Kn.....`/.5`..d......0.m...\|......yr.1......N...o.i...'..m.....8.....>t...O...>....5.....O.....~.^......W._.F.#.7......=:.%.}..._...\|..2...3..._...o.......?../._.^...?v.....w....CW.6....Cb..'.n.o..%..j...oA.......%+..o(.v#.h.R+......@..s.....,.......iR}.S.....a..X&l...@..T5.\..._..).Z....hf..q....O..Zh....+.z..DB........L.'.}H..el.....5.&.Q.O..(.l.#./EM3..QU..Qr\.68.b.....k.....iDE.......~(....=....<9ooS.x..M.b.#.,{.Q.."r!..2...d......b.Bv'..\.._.;..j..v..?...xK3."..$M..Cd...47..Ev...M.5.v.....P.@..L...wn........n..y......?....o.%{.A..x.....Jm20...Y..`.#.+.MBG..{.Yk.X/.M!...x...Q......IE(...........z....En9............Pt3..H@...Q....2........7..a4/.B.^i...}.-.e.f..o).8Z.q.~.Eb/..q.)......4l*.".........j...F'.z;.G'..G[[x...x...Z..=...e..y.....K...>m..V..b..#`/P~...3..=YG.SB.I7~hyUQ...!.U.I.;lbg....J1..PT..W.Y.3..$e5F....._....i.U.qJ..4.....v._...j...v.U#YH.c=..._{.N...JCN..5.

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6842
Entropy (8bit):	7.96906227819572
Encrypted:	false
SSDEEP:	192:MjLzPB23UOO2Ikw6BsZyxwBFZJ2lSvVDc:MF231O2I2BsZyKBFHEEDc
MD5:	61AE66FDFE5C513A0E5619C9E5C91833
SHA1:	8425E423007C0CD4F5F3D4ECCF5BDB1F6AB72CB6
SHA-256:	87E46B14757FBDC8031EC5BBD0E7D65DC0B56C70FECCE186C53BFC6515D3C3C4
SHA-512:	1159C179236105701DAB66E1FC562D2B9F60A7E7078155FECB2364699EAF50898C5A2C6F254B8388A2614AA5D0BAD913F03154C2A04A6C177F7D3384DAFA1EBD
Malicious:	false
Preview:	RIFF....WEBPVP8 .....n...*(.(.>=..D.!..... ...w0h..e........!....;?.......O....C.'.......9....?A..}..W.?......y.n.E.?._.%>....?.....w./.~.s./..._..Z...A...[.K....r~........+...G..........[.?......b.....;.-......._......W.........6...............".u.c.o....................W.......i..pM0.......4....e'.M.v{......<8.j..LPi.Y.G..<.`H.i.o..Bl.GW"Ot.9j}H{.w+..1.%......\>s.....%gR......j.M.Z9.h..FJ+@N..A.....6o.K.yL_..c..L6.I.%-n...l..s)........!.tM0.......A._.'&}..../...ol,Al.oQt.s....76_...$.t.Z.{v.........X.N.&M^'..j./{..5L ..Q..W..2...N.,.^%...B..F...4.....\_.....&6d7..2..R.....K...... <.a..G.6..........<...(.S..O.....3.w.6...C.n.......(....C...~...TW%d...u`....\|..x...A}$Yx\|.Dx.....>5.1B..B....{~.........W.89-.Ns.f0Y....%_6.w..2\.K..9hZ...l...%S.x..8.{S.R....;.......#z.\|KR.\|.I.l.Z.....0vbr=..J..l9vn\|..,.w.&z.Nm..:.H..$b6...<.....G..NnJ^.u<...[....k.p6"..;...........H.......l...x.."(.Y.[.x.YM...7#...Q(..!.....0dy....e\.$.......]...4...y5../..>.D./.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	downloaded
Size (bytes):	62120
Entropy (8bit):	5.200233203039825
Encrypted:	false
SSDEEP:	768:rPksmcJcApCeZygCoEOuTudKEEB8xAnpFyS5eCyDvmojEWCykh5kNbeAFjg5gvC8:rPksrJCeZygColbQJL5/U
MD5:	3EA70AE6D554F9FC0FFB8CB0281EC0A6
SHA1:	58D41E45856B15260F69F19200B6DE7FDCBC82E6
SHA-256:	A5B0CC4EF0FF84660C52A703030A8F948CC8702EF6B0535CC31FF8611823DBB9
SHA-512:	00E5EA6FF4C91E1419C4F7FE95815E67C11EDE4849810C2F3371E694622084D439F0E73C855101CB0A1A5B516A8821DE3B2EB1AEB450325F8A38E3EF3B9CC19B
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.171.ce33468efea141bac957.js
Preview:	/! For license information please see chunk.171.ce33468efea141bac957.js.LICENSE.txt /."use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[171],{70171:function(t,e,n){function r(t,e){(null==e\|\|e>t.length)&&(e=t.length).for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n].return r}n.r(e),t=n.hmd(t).var o=function(t,e){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)}.function i(t,e){function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var a,s,c=function(){return(c=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function u(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator].if(!n)return t.var r,o,i=n.call(t),a=[].try{for(;(void 0===e\|\|e-- >0

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	7.052421013235357
Encrypted:	false
SSDEEP:	6:yk5ZYChDBpEnS96WesGKsxdRM8Zj5elkndH7xLiGE6CAYdr0jSKIz/zZwE4:34CRBpEnLlD3Pb5e+LE6CACgmKIzLZwT
MD5:	0923A53B64E64DB75177B6972F016A42
SHA1:	6915D871CBEA8A3B8F4E54367DCA538DA0AC3082
SHA-256:	E0106DC1C0490A432C08671994F87FCBB982B7B25B4F9CBB640D49A03BD89CE3
SHA-512:	5054B69C1A895FEEC0CECD471FE317149D8F804E15CDC0ED51F8BA6B3FB61E092C5C78A92768D31273DBCBD189148D305BA4EB1EB210174DC6B0724615B1B1F4
Malicious:	false
URL:	https://play-lh.googleusercontent.com/W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw
Preview:	RIFF....WEBPVP8L..../........$g.......r^.E.$E.....~8...A.H....A8...%l#.Vr....b9.P......N..[n.P.........6\.w.+.....X....U'...#.}...Y....A.xdB.....$%.ww....t. ....Q\|.....,.........q...D.@!H.N.p.5.....*`...ms.~.l....\/.[/..u=..@...X...4j=.}..edi.i...%..0u~.MH..

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	33456
Entropy (8bit):	7.96315139927072
Encrypted:	false
SSDEEP:	768:yO0Z3NC1cNlRVV3VgrsC/JKLNBNS8smKGI:S3NC1Ajnlg78N9sm8
MD5:	C971C780267D5B469120B497DB586452
SHA1:	531F1AAA2FDA20CCC72E359F9C60FFF68A74868B
SHA-256:	14D2F0860EA6336EE9DCB02D274E18B0A0FB05FE76C40D4A0BE9F6732821300F
SHA-512:	3F504D40867774BC4F62357A1A991224D6138BDDF54F89DB9F14186F133E959349F66200C7896A392C4C366FB2A3DFC3B4237E81943177FFBF090F918E762404
Malicious:	false
URL:	https://play-lh.googleusercontent.com/R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M@l.H.tr.S....p..^.........;..m.........,..^<.#J..=...=..m.l&L...juA.<$.I.@.C...q.....:.PU..=>$..dQudb).L.I..z..@6FU.-i.Y...b.=.../E........B._v.....I>."%\|G...$qH0v.p.#.w.....1...Pt.....!....s..H..e...DK(@.I...w..K.9B.....m....,F..4......^!.....0..z. [.-E.V{P...-.)....?.=H.&(. (.]..H.#I..s"..]./.....0....3.....&A....I$.DbL...c\|..Uc...&....qP...y......:g.1..,.$.%G..#G.6</<s.9..e.>..U&)/Z.....9.q..m......71..k..\|h.jj.....j.6.l..^......c.q.?..%.u.V.m.6T.VS..G>.6].9.......e..b.5.H9.PR.Y(}..M.9...p..,g......6)..i..:.i.%....#..}^...6mBN%.a...k.J.`.lS..N.w.8GWR..`......A.*UB...........Ah'....P!.6.Z\-....V......P%T.U.BP.UrF.!Pq....hl^...+....4}.(x...p..!(T..[.Z;.....6.c..p...<w.....X<.q.pn....F..!d.I&.i.p.......B.u....Z..\..jtl.......my[.=l>;;.9..&..K..\|}..\|q..z.7..NN..;..\|.,.....t+=..@....v.zt.p..._..S..1EL...M..}<.,.,.h...Ll.`.......\..6lX.1........>.?.C.j.m.`.a....L......\j&...K..P..L....a?@}...h.~w..,....cyY....D..

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1222), with no line terminators
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	5.818804287152988
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAv+KVCLTLv138EgFB5vtTGJTlWtRcw1MuhtsLqo40RWUnYN:VKEctKonR3evtTA87b1Muh6LrwUnG
MD5:	463D838587C8B5873CB6E4E942B770C9
SHA1:	E69DCF383A6F3F51F123CA2D86F19FC4BE09E612
SHA-256:	1448EC1B3F30A554233BD280AA99A7EAF690D1098647E7DDDEA286C757884F9C
SHA-512:	F02DE64A37B90492D714CC7D132C49BF29CB5117CA945258BAF5B36D087A3A2AED165C6FF37D2ED4E4F10D7199AFB9C2B5E2555BA1BECA1A8D3AE133F4DF4B23
Malicious:	false
URL:	https://www.google.com/recaptcha/api.js
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('onload');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbUoEzThjP3hLhLYfEFPAkVOCx

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1142)
Category:	downloaded
Size (bytes):	18980
Entropy (8bit):	5.668802839183555
Encrypted:	false
SSDEEP:	384:OwEHZyXO5l4tDUpR3PExuaG7uM7IPjX/884a5455nQoXWjvUce5Q9ig8MKphIp3x:OwEHAXO+qR3PExuaG7X7IPjX/8KK5Qo8
MD5:	EABEF98F112EB1B8EFBC0BF805274871
SHA1:	ECDF8559C2C969BC682A678EF921DA40396B44DA
SHA-256:	7BD518D033D58E3647E4DD450E7D1C6A626C0EEEB82D7CEA0DEB3823871A0D9D
SHA-512:	630B696853282EAC2CBD0B6CCDFAB3EF9A7B9119586576D0073393E64280D5C39B5465CF21B547A25D68DAC00667DE1C3712CDE8E290926EBE9A0F843C95BA5B
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=dfkSTe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Le(_.yoa);._.u("sOXFj");.var owa=class extends _.Yp{constructor(a){super(a.wa)}H(a){return a()}};_.$p(_.xoa,owa);._.w();._.u("oGtAuc");._.fwa=new _.Fd(_.yoa);._.w();._.gwa=class extends _.gk{static Ja(){return{ai:{gX:function(){return _.De(this)}}}}constructor(a){super(a.wa);this.soy=this.Cj=null;if(this.Zj()){var b=_.Xi(this.Wg(),[_.uj,_.tj]);b=_.qe([b[_.uj],b[_.tj]]).then(function(c){this.soy=c[0];this.Cj=c[1]},null,this);_.fk(this,b)}this.Qa=a.ai.gX}getContext(a){return this.Qa.getContext(a)}getData(a){return this.Qa.getData(a)}nq(){_.Lk(this.Cj.Te())}IF(){}};_.Sq=(a,b)=>{_.ek(b);a&&_.Gd.Kb().register(a,b)};._.u("q0xTif");.var iwa=function(a){const b=c=>{_.ok(c)&&(_.ok(c).qc=null,_.Aq(c,null));c.XyHi9&&(c.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(let c=0;c<a.length;c++)b(a[c])};var jwa,kwa,lwa,mwa;jwa=function(a){const b=a.kb();return(...c)=>a.Wa.H(()=>b(...c))};kwa=fu

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3175)
Category:	downloaded
Size (bytes):	45694
Entropy (8bit):	5.118242929635633
Encrypted:	false
SSDEEP:	768:tpi7T07ytsSwuLFB3t8KbX3zrcW3HsBtuv3BtlK7vKH5v9u8kEFsW1:tpK1L5bTIByv9u1EFd
MD5:	8B2EA74C2950F702116F9B02ABC52BCB
SHA1:	AD7455A6E9F0D7E73BA4B80422EF805FC66F7879
SHA-256:	FFEA291B7D7F014FDC619350CAC7B5CECF876DD20EFB498EF0D915FE3AC4BA17
SHA-512:	942397EE9B53797364C02D073689CD3FC049E2EA7AF9D89F19608A61EBB76DA8A554D124F8BE99CECE74EB540806C9BBC383DAC238448D07A42DFC4D421B89A3
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.990.023f8bfb4104e9778375.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[990],{67990:function(e,t,n){n.r(t),n.d(t,{ClickstreamProcessor:function(){return we}}).var r=n(24178),i=n(32722),o=n(76588),s=function(){}.s.prototype.setDelegate=function(e){return r.SC.attachDelegate(this,e)},s.prototype.localStorageObject=r.tO.localStorageObject,s.prototype.sessionStorageObject=r.tO.sessionStorageObject.var a=function(){this.environment=new s,this.logger=(0,o.RG)("mt-client-constraints")},c={nonEmpty:function(e,t){return!!r.SC.isObject(t)&&t.hasOwnProperty(e)&&r.SC.isDefinedNonNullNonEmpty(t[e])},valueMatches:function(e,t,n){if(!r.SC.isObject(t))return!1.var i=t[e].return t.hasOwnProperty(e)&&n.indexOf(i)>-1}},p="overrideFieldValue",u=function(){}.u.prototype.constrainedValue=function(e,t,n){var r=e&&e.hasOwnProperty(n)?e[n]:null.return this.applyConstraintRules(r,t)},u.prototype.applyConstraintRules=function(e,t){var n=e.return t&&t.blacklisted?n=null:t&&t.hasOwnProp

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1162
Entropy (8bit):	7.694737520848792
Encrypted:	false
SSDEEP:	24:Q0gnfwftjFBkUSEMixW78yt1x/YUsfUHS4Xj5OQ/5YDQ:QdIjiDEMixW78ytbNs7+FOQgQ
MD5:	B268DC2EF4CA78606A491547A017C832
SHA1:	4140A3CA287E6C52EFAF6407FDD3B30C190DF53D
SHA-256:	F1AD01CD2BE867EAEE0DC3A0B0BECC8358F3FCF27EE7E1EE8854BD85DD3A2DCB
SHA-512:	EAA399EFCEB9B86652497833C8DD7D424CFF7881F6E07FB5999E00FEA3A795BBB44EE2BDB9455117403EF61F3D7C5B4E50AF536D3063496964BF37CAEA2207BF
Malicious:	false
Preview:	RIFF....WEBPVP8X........?..?..VP8L:.../?....'!.$G.b..:BZ..L....."I.$I...Z.8....&!.$G...?.G...L........h......@.?{.......0D.......D0B.A.9..c..........@ .O.DC@.>.@.o..v.%.P.M;l.... .Lh.....0.....t.....t.b4&....p..]..3 ..........`.....4...{....f..c...M....K............c..{.t..x.9.>.!.=v............}EH.B.)....].~......?...u..#..........hm;67w2...I..Im7........Y75..ij...\|..v{....=.QD.'..efmt}LRw..\........h.6....@....O...6.4..o'..r$..6vn(p.D............Ec...%..p,..g....."Ob.8`.G...0..c..n.x..<I.1'...(.0...P..?..?M4v..\|.4Y.8..........\|.aC...-.......+G......F.u.]{.a..{..7..R.D...r..#P...2.............y.Q..< ................\.j$<..;\.y..O....6../..{F.@...V3.5....=v;~s...2q.m.2.X..V%......,.....zc......u..S.I...j...@w.R...6.h.r.v<p..q}.+..R.N..E...XD.KV.G..j.&....Q..C.......7...G.......q.....Rq......H.T.R.Y}j.T..Y.I.U..-........G...&3^.UM....o.Q.X..,]..Z....+S....)K-0...>.....^OS..0.Z_....."...>..f.>..LK.....i.....X...Zr.-...6car...[...KF...^.P..

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (706)
Category:	downloaded
Size (bytes):	3383
Entropy (8bit):	5.570059258668336
Encrypted:	false
SSDEEP:	96:kwLLPO/u1TIXnpzGqAHFT/O/UtiZ2m4N2LoVBBGmu7CVkHNgl:5LPOmynpzGKW2IBeCStm
MD5:	DB6EC4F722F73938F4D348D8E31DF576
SHA1:	8CF5AB0991D26314F07C411BCA10A2021DF1F06E
SHA-256:	0CD4D4F5CAF29C663D6263AFA80FE92FD321FF9763F59C413F7BB8843EF74861
SHA-512:	0A01C35320B2B3E39F9BEDD06C978E35763473A635C07EF138735C19232D3CA719039982A4CAB92CB0AFCBF249CC00CD753A5359F8D532CF46CD0AF75E773B8F
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,C7s1K,COQbmf,EEDORb,EFQ78c,FuzVxc,GkRiKb,I8lFqf,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,UZStuc,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,qqarmf,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,yNB6me,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("Wt6vjf");.var t$a=class extends _.y{constructor(a){super(a,0,t$a.Wd)}vc(){return _.Qg(this,1)}af(a){return _.Ah(this,1,a)}};t$a.Wd="f.bo";var u$a=function(a){a.HG&&(window.clearTimeout(a.HG),a.HG=0)},v$a=function(a){const b=_.IL.get("https:"==window.location.protocol?"SAPISID":"APISID","");a.qF=""!==a.sD&&""===b;a.KM=a.sD!=b;a.sD=b},x$a=function(a){a.Ny=!0;const b=w$a(a);let c="rt=r&f_uid="+encodeURIComponent(String(a.yH));_.Sj(b,(0,_.Je)(a.O,a),"POST",c)},pM=function(a){if(a.NK\|\|a.Ny)u$a(a),a.HG=window.setTimeout((0,_.Je)(a.H,a),1E3Math.max(3,a.AD))},w$a=function(a){const b=new _.un(a.MT);null!=a.vI&&_.Fn(b,"authuser",a.vI);return b},.y$a=function(a){a.qF\|\|(a.Ny=!0,a.AD=Math.min(2(a.AD\|\|3),60),pM(a))},z$a=class extends _.lj{ad(){this.NK=!1;u$a(this);super.ad()}H(){v$a(this);if(this.Ny)return x$a(this),!1;if(!this.KM)return pM(this),!0;this.dispatchEvent("p");if(!this.yH)return

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1810
Entropy (8bit):	7.786345459719539
Encrypted:	false
SSDEEP:	24:vCHQHJSYqzcZJaiJtanUsHxDKoDab/rGhdFBfXfjbaFdAm32bBeDGiYyu+7Be7Z0:E3FwtAjwoD+Kh5fPP1sDYR+CgtFv8W
MD5:	4AF44BE9F08FF40536DA5762B6B59605
SHA1:	7C1EFF3F5000AF6F11A0E33D7208DC7D92991EEE
SHA-256:	26D150D1ED9031C14ABFA2739A3C4D3522908CDD5032007522FA6E1722994252
SHA-512:	7EE496867056A042F8C1C5F8CDA205B0AE768B0258445D64EDC03897204CD2F30293B1BDA5DDB76A7CD87D2E163A31EF0A7C1C676A069B89D152B0FDE52F413B
Malicious:	false
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/08/2c/e2/082ce251-7521-bba8-c8df-c876a7a58aa4/AppIcon-outlook.prod-0-0-1x_U007emarketing-0-7-0-0-85-220.png/230x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 ...../.......>.J.I."....z.....n.q0....{.......9C..?..p..N..`?l.b=......n.m.3...w....\|.Mg....kl\|..a..eG#....S..r....`.VWX..Pe...K.....&m.<.._R.......aI................O.....\....`H..w..4O}wD.....hF....K.........&....y....<..3.*B=F.4uR.gI#.p.3..f........9.......y\|.O.A.....K..I,}\|.j..Q.@.0xCwn.y..]V...IT.RP...D...'.c....j1.FR .... H{.....7t.].#ym..P?k.D50..r.2..\|..B.A........:.._-...8..TC;...\.Z....}...Y..H.....,....,"@.r.._ <3..+.....6.H-.~w\..3.7D...\|o. ...hm.[}=.....#........LD....(.6....y4.......l[.X.......s$.....&,U.x...fw.\........(.1..#.Q..E\|..7.E..:.%1.)9..+....eA=.....C..^&suv.{.C...Q.k..S.Ho..o.<A3... . B..D.E[iB.PVS2..j.T..~..@{.z;........3.@fk.Q...m6....}.m.h.8.;.......F_.x..$Q...B....'Z32.>'.P.eD......Q..1.8...4...4..>..8.J..^s..J4..Q8..............$r.c]+Igq.~..a....j..q.5.b..Z)..s.[I.\#...S..........Q"I..E{.....qG..].7.hs.....+Si...O._..'s..swa..e...."."..f.Fe.`U..^..b.I.Z..~.."7...

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
URL:	https://xp.apple.com/config/1/report/xp_amp_web_exp
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1406), with no line terminators
Category:	downloaded
Size (bytes):	1406
Entropy (8bit):	5.8117439948112075
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccA5QHy+KVCLTLv138EgFB5vtTGJTl4OtRcWbLyWOeIbc8s1MuhtsQ:VKEcJHxKonR3evtTAr7vHFmc8s1Muh6Q
MD5:	DB47B4E30E968864D49928BA805CBD6A
SHA1:	F93D4DD8CAB6DBD79ABEF76FD91324F09C7401BF
SHA-256:	24015FC6AB6482E5F935495B6DF83A9864BDEFD3C6365B04062102ABE7E40FFF
SHA-512:	BF12F6AEF1B209F9CF4EF90BE91905BBF99B94607CB1567E5632972C774C40940EF4A9F65D9067B9542B903E67F0CD766FF851B25BE31EFE2254AABFC267BCA7
Malicious:	false
URL:	https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;var m=d.createElement('meta');m.httpEquiv='origin-trial';m.content='Az520Inasey3TAyqLyojQa8MnmCALSEU29yQFW8dePZ7xQTvSt73pHazLFTK5f7SyLUJSo2uKLesEtEa9aUYcgMAAACPeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var s='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js',tt=w.trustedTypes,cp=tt&&tt.createPolicy,cp=cp&&cp.bind

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
URL:	https://apps.apple.com/assets/images/supports/supports-Wallet@2x-daec7ef3fb160308d05ddd69a2b1dece.png
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1968
Entropy (8bit):	7.887842259839152
Encrypted:	false
SSDEEP:	48:zKS0PU7BIWKegISpoMKLQe4L5G/PfkKg5IESU1Pd8/kho8QTm+hA6P:z30PUyHSlgIPMXtm/r8QthfP
MD5:	5595E532F330186A628DF64B6BF2AB9C
SHA1:	DAD41B26075CA3D857C92241E646088F87FC593D
SHA-256:	242280AAACE4E73539F6328A80E12486699E260FAD50AD3941C17B32B3126BEB
SHA-512:	D9793F6B1B4455CF2618F6DC76ADB832A342B331536D147B6A74AB62E5D0C17EBCF4295F7EEF6762186DB5051FB16E48C92DCBBABA90BCFBB727B2D7CC367E6F
Malicious:	false
Preview:	RIFF....WEBPVP8L..../?....Em.I.v~]../......a....:..!.^..$.I[..&..?O..q#I...."..=g_j.HRc~..C....D...0($...%....w]k.{{..D.##.....qZ.v.. 1.........H....g...........3s........<.3-..u.Z.l...L..=.....p...bdf{)4C.9.....~._..(Z.m...f....m..=.}...}rd.Vme.}.s..?...-..N..;......g...b....FKq./...~..?.Y.,hW=.X.=Z..X..DGQY^.qpj.e...y@...$.2.C.P9.Uv...G.....9>....c...D.....l}....._/=Z..-...f.7.z...R..k....Q.Z.17..5..S....@(Ue.!.......u......k".....E.C...+.........C....v&.>...y.q.F.4jP.........,..>...T.....H\k....}Ivm........U..T..!0..{.....Z...c.a...........y....[......n..q..g.yf..@c../.m.7,..vx...j2X..P.@..{U.9r.......u..O<.....AE@.\.2..I.......@0(...Ib,EB...?..puB.d.......{...n.Y..j...;rUk....n.Z..xI...!H.P..<l............_...3a....s.>...7....<r...6.8. .C@.....mZ..>V[..F.Cc.........R...#.d.Q.@.$B....."Z.B.....9Y..E5...B...a..S" .....ru&wxh...(.tU,.G.E.\|.....7..^(.q.F...A.m.......Y.[$...B.. .1.l!A..A.....s....1..;..A(. .B.j.....H.Q\..0..B...

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	240
Entropy (8bit):	6.9991712725025685
Encrypted:	false
SSDEEP:	6:Y/PZql/KiDZfb08qzALLJRn3PRB8y1BLqmX45oBezn:Y3Ul/KMb0tzALL3391t1o5oBezn
MD5:	BA44425C00D3898F79D74B5748E49934
SHA1:	BB2CFD3AC724BDAF3C1F3A3A61030671C79D1B60
SHA-256:	35F1F26A525AFA469CEC210657087027502D02CE5ADC3BB1C431A29C4544FECD
SHA-512:	23D0D7732B4E677FA0E464C3BB834DD28BB232E0460AB6918AACA4CEB1AF7D149A7BA50035B4F39C102472F30B1840EEEF73310517FFDE7810EEE2B4F0F78647
Malicious:	false
Preview:	RIFF....WEBPVP8L..../........$e...'..6.F..u....H....m$'....P.>;L..L3f.S...+Q....Y............j.s...)...w...B?.V.y?..9.......~`..C..1.b...$)Y.....?O........y+..g.i.V.\.q*.f....5...1. (2.s..R....w=.b....)..0...(......e.........n.n.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	37564
Entropy (8bit):	7.962934539665607
Encrypted:	false
SSDEEP:	768:OwoSQdgxtwSFVcBULLwPSwwtTdiqsS4QhabMUNHzNJ:wd6uSDcBULjHTdiSXhfy
MD5:	21EAC75763F5C2012DDFEEB866FCD348
SHA1:	526E0BAF20277F985072DEBDAD9CBD7A20B44144
SHA-256:	7D91F09A449207296941E6E5AADA5FCA26942BAF69591DF1936B9EA28C59FC3F
SHA-512:	DF9D6E9F47F3D71FC709906B72760EE2A696881A30E29CBCE0F7F1C97F4B0B35C9583B94169037175E9D0846DFD80838532CF96743D833B7283DF66D1D79AED6
Malicious:	false
URL:	https://play-lh.googleusercontent.com/pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw
Preview:	RIFF....WEBPVP8L..../..I.M8l.F.FNn/Y.._.<.BD.'.....n.....z..w.T.....0.]u.T.......A,..].ou7.......l........Zd.&@...... ..#"...."bd:sIl[..!I............K@.".......%.8/...6`@'i...XZd..K\.%b1.A.)q?.'...N.U...1.l....=..-0.D_.i..}6.........0.V..$.p.W.....#....YHR.=.....K"2..WU..1?F.a.&nRK..l{.F....92s....Y....#.0".&.#1.m.....D....;.s...i.'..t/I..1.e.Yf.$.93...g.X.c.d.W.5..u..\.oI....%...E...Zl-....)nO..A.....I.Z.T.R.I.-Z.......,..o..c...;.V.Yk..T.J....B-N.?jq...g.......7..u..V.J.4.%..4,.?.J...K.....K.R.fa.%I....]..W.~\.$iY..U..4.)VZ.IHQ.I..C>d.L.r3..J..r..W...y.B...Z.}mo.....]..x..._.n%UEJ3....o>..x....E...am...@(3.. .8&>..dr8b..X..#.b8.Xb..F..b:.x.....!........Y...~,..%z..o..g.qu..2.^k......b.\9..t~....;f.........7..@mL..~...b....8Y....V.l..'...@.z....V.q.#.n..:i...!.o.~.. . ....j?....H....n;.......Lned@.k.}8).1`...bO.....5`..........22..............@...`..t..u@....x:V.........W.....2....kw.....J..}S:\|...4/W .............}$......v.

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/api2/logo_48.png
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	31756
Entropy (8bit):	7.956502283816247
Encrypted:	false
SSDEEP:	768:St2kT5NDIf0gcLIpQIP+DYzwVTCAxC62NxBcGFVUKOtLDvE:St2kT5N0f0gcLIt+DWwVTxQ62NxBnFZh
MD5:	2BF44080957E5D7552E6E4F36DD55652
SHA1:	F413AF4B336B19710BD76168CD2D1F39BE0A653E
SHA-256:	8621574F773A70374D42FADE3865AD3AFA33D31C2256A9935DE61FA1EFF65F9D
SHA-512:	B47201404E19FE2A314DAD8788ED6D2E28EE79B50BFF1D0DD805356A969D4B2B7902BE73822881627698A3B8FCBFEBE733358172C23A8F225A642E1764952857
Malicious:	false
URL:	https://play-lh.googleusercontent.com/Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw
Preview:	RIFF.\|..WEBPVP8L.{../..I.M8.$5lr..@ ..,.i!...PU..U.O......VV../l.SV...\r....-+..........t._.I_...z...l`..V2..c.XF..n1]7..NG...G.....P.O..6.....xw.J...t.U.k.0..--{...s......6l..p..".}.n.rZ.@..-8..\k.F"6..v+....j..~.A.U?...o.}?.n\|..x.x....V}N..U^..p.~...B.j.q#..E..._]U...O..#D...d+..ZUy...x......f'..arX.......l.mNY.9..K..@.......O...^.$.c..".,.I\.pa.7\|..X.c.d..-7.6l..2...n5..^Z.NM.BE7...t.Y.y...R..]..E.M..mkz.]8c..u......W#...[.n.z5.RI.vv....uF...1X..~..........[YY....(.T...\]Vi....R.Vf..[Xyi...RRU.R.6..j.rZ.Z...!iY....K.UH...PYIiiU.TYNU..G......l......;.;.j^Z....0.) zl.v..37..+VL..c.......x...s.ad8.@..nn^........}E./....o.=.G?c.1.:.@..Y7..'..=...x....O{.../+..=`-....6.Y.:.@. 1...L.K.=.1.a.)....{d...+.u.....f...y._,u..i.f&...=..7.3..f.......`.i.@.N.......@.\..h....K.N......1....r....{.......Y^...0.........,..NX.N.i..m.C....#Lh..Hc=\.z.).........4...!...M......"D...R........l.9KK..I.]q..^...S......B#qO..C.1.P.vLbR...9...B.......$.v.......D.

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	32634
Entropy (8bit):	7.961527082075673
Encrypted:	false
SSDEEP:	768:yHmWR8UySBjEp9NQkOfO+0L7Pf6PHtrcplIIPEL3sCB:yR/KdmvOjf6P9GlIiEL3ZB
MD5:	35BC5A79BCAD7AFE5F11FEDE9447B784
SHA1:	FE5BE320827F27490393126067470BEBADDCC836
SHA-256:	2BDD685AE4F92D871CC525437EB3606D7F40162CAF2E1ADF8F620127648C5AAF
SHA-512:	62E76DFD6BE19D290FA0320E04F8B1A48D9EF2D33FD252D6DA50A6231F5469510EC48BBC5ACA745087FFCF7DC30950B50AA87D8C5BE4FB14235997CD6DAF1E5F
Malicious:	false
URL:	https://play-lh.googleusercontent.com/13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw
Preview:	RIFFr...WEBPVP8Le.../..I.M8l.F.F.>.z...gv....O.mw........^y.._....^<.")...d..{j......y.Y]....U+.Z.a;>..y5.W.u.....8$i..:2e..Z0.$ UU.;......AU}K..d.....w.{......J...$..^D...SU4 @...Q.?65sH..u......$]{...).^.14.n-.~u..+r....\|EK.......;`.tm.!.....T[......."...q...#.0.I.d...9....%..I........A.\..H.m.m..&...K^......hD...m......A.Ph.S.r21...'1>...X.c.'..{9....e..)..T+\z.G..(YK/...b.r~..s......\).X.Rz=.f..Dq.... ..j..s.9...RV2e.`UEII.r...i..Ci.b...SM.ZO...K..j63.PVV.U...^UU....t\|i.C......ia.K.Y...kVK?..\|....E.L...U.....A...8..GY..8I.....+....I..B........;\.".Ho.d?.^.dX..............7.A..Z.&.:...<c........?.\|...F...b5.7.0.[M..Q../.W7K..z..-......+.su.V:\....&3..@..........5.&.8.u.....G...M.b....@.zA.?nz/L.+....iF5...,.........]...M...P.s..7...6...r.....3.f.b...L...E..:pq^...B.?.n.k.y...5...-..AN[C...........\.okI;x.C....d.......4..g..p..G/ .O.......C.................qr.z.g..J.Ohy.,..;4..?Z^.............H6.UY.\zSM..b[%0.5..u....V]t.U..X.....

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	8594
Entropy (8bit):	7.972071631771637
Encrypted:	false
SSDEEP:	192:zuNHCSZCF6C102YYaCWGBO2YAHsC5T3lfw+f5loPIU/MzBFbSta19:Sk0C102YOW52YN+tdkIU/MzBF2C9
MD5:	ABE259D51DC9074E68B01458DB5D98E0
SHA1:	B202995449C75F42D437DFF702D12D6121138D84
SHA-256:	028377FE71E8CA9D211C21B25FBB45162E63513DA1C6DDED0446A800140C190B
SHA-512:	E39CC8B9BF120012E78E3DF74CC93B5EC2AF6978E289784297F893E0BE53BB1E62ABDDD791089BD28045CC6D39D78848448D4BDACF02DADA6A35942701F3E543
Malicious:	false
Preview:	RIFF.!..WEBPVP8X..............VP8 .!...........>.H.I#"#...j.x...n.MM..h......n..~.t.x.....s...a._.'......2.........R.f.....C......{......6.w.A.O..}5....=..gh........._.>'........>w.G....z..~...?.z..W..`....>....v.....o........c..._.....}g?z....?D8@..m.0....S.=......R.7.&........U.S.b..!.Zr V..up...&-......D8@w.l@i...+HL@/.....(...3..f....5....h..Hi.R...>.B\|...'Pw.t....&.`.G.).PE....x^...g4R..-..a.(.... ...:....Ys......^7.Y.<M..n.WA.....Ft...H...$Jz...Q.K.F....\.O.s...;....!A_.%....y~.1.,2L...W..>...SM..L......]..`u.~9Sp~........+....-h/O/..u"...I..'b....ONr.R.>..F.....}.{3.)f.....SK S.0A.F~....!.P.#1=n]%re...W.j..8....G.L.@..U7..._.QG..<.~...a..u.u....I ..=@...v...3&.....n=.0....O.FU..0.J.h...q..O3b..T...6..K....8.vA..Y+x.W:-~.E.Z.be6.6\....=.....J..K.t..ET.....P9..rq.y0../....:..I.]K).#w.L...%#.......t....C.....jC..\|...h/+..>;.gh..S..^`L^..H\|...$..3.....G.J7n.G.[`..@.Wz8..h=..E'0w.=../.H.....7A.?..H.....+.+n.4.~m.[9+.9p{..0.

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8404), with no line terminators
Category:	downloaded
Size (bytes):	8404
Entropy (8bit):	5.23122971904006
Encrypted:	false
SSDEEP:	192:S1XF2VhJJU2h2dc1cJcpcTv9cqxPs3rcTctcIcuBVcgcVAxg+EsYNtD1l:S9FmpU2h2dc1cJcpcb9PYrcTctcIcuBa
MD5:	CDF596B6A09E2D33415C8429AD5AC858
SHA1:	B7AD84975B629937AF85B055D5CC4E34D85267B6
SHA-256:	0558F702BC35AD30CF70512357E17658D9B7E8227E4C5DFB7466830CF3AF6AFE
SHA-512:	6953A59C54D55C370FDFA81EEFB5403F98CA409A0E5F2DFC27A8DC8ADF3177AA6A729E501E135B74194166B139682AE2C2A1F28AF67E8CF5E0BA0275F027768E
Malicious:	false
URL:	https://apps.apple.com/global-elements/2406.3.0/en_US/ac-global-footer.cdf596b6a09e2d33415c8429ad5ac858.js
Preview:	!function t(e,i,s){function n(a,o){if(!i[a]){if(!e[a]){var h="function"==typeof require&&require;if(!o&&h)return h(a,!0);if(r)return r(a,!0);var c=new Error("Cannot find module '"+a+"'");throw c.code="MODULE_NOT_FOUND",c}var d=i[a]={exports:{}};e[a][0].call(d.exports,(function(t){return n(e[a][1][t]\|\|t)}),d,d.exports,t,e,i,s)}return i[a].exports}for(var r="function"==typeof require&&require,a=0;a<s.length;a++)n(s[a]);return n}({1:[function(t,e,i){"use strict";e.exports={EventEmitterMicro:t(2)}},{2:2}],2:[function(t,e,i){"use strict";function s(){this._events={}}let n=s.prototype;n.on=function(t,e){return this._events[t]=this._events[t]\|\|[],this._events[t].unshift(e),e},n.once=function(t,e){let i=this;return this.on(t,(function s(n){i.off(t,s),void 0!==n?e(n):e()}))},n.off=function(t,e){if(!this.has(t))return;if(1===arguments.length)return this._events[t]=null,void delete this._events[t];let i=this._events[t].indexOf(e);-1!==i&&this._events[t].splice(i,1)},n.trigger=function(t,e){if(thi

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
URL:	https://apps.apple.com/assets/images/five-star-rating-gray-ec0707c56bc834adf5dd504c555d4982.svg
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	38832
Entropy (8bit):	4.79684101098726
Encrypted:	false
SSDEEP:	768:t0Hr1eMxTF69ukmv+ZNrMUVfd7k3pY7jVSHUo6eI:t+ehL
MD5:	CA74523C8DD2AF8E71096EB90ABEA33B
SHA1:	47B67EF377E9AFC52340BED1A69DD53BF5DA51C0
SHA-256:	FA8045C24FFB80F06CCF48CAB215B0B3D7FF1A59A0F91FCC6B361A73B1462892
SHA-512:	DC2D4CB324F37671A6FE35A4F7E4FF6F8B9BA307EFC12C244348BF0393ED31B3105E7227D9B447B9F7CE52E23DAC42E0A57BCCC18D368AADFC4E194774215CA0
Malicious:	false
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"1c90bcf2","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"}]},{"id":"68805228","title":"Shop Special Stores","anal

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1968
Entropy (8bit):	7.887842259839152
Encrypted:	false
SSDEEP:	48:zKS0PU7BIWKegISpoMKLQe4L5G/PfkKg5IESU1Pd8/kho8QTm+hA6P:z30PUyHSlgIPMXtm/r8QthfP
MD5:	5595E532F330186A628DF64B6BF2AB9C
SHA1:	DAD41B26075CA3D857C92241E646088F87FC593D
SHA-256:	242280AAACE4E73539F6328A80E12486699E260FAD50AD3941C17B32B3126BEB
SHA-512:	D9793F6B1B4455CF2618F6DC76ADB832A342B331536D147B6A74AB62E5D0C17EBCF4295F7EEF6762186DB5051FB16E48C92DCBBABA90BCFBB727B2D7CC367E6F
Malicious:	false
URL:	https://play-lh.googleusercontent.com/_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw
Preview:	RIFF....WEBPVP8L..../?....Em.I.v~]../......a....:..!.^..$.I[..&..?O..q#I...."..=g_j.HRc~..C....D...0($...%....w]k.{{..D.##.....qZ.v.. 1.........H....g...........3s........<.3-..u.Z.l...L..=.....p...bdf{)4C.9.....~._..(Z.m...f....m..=.}...}rd.Vme.}.s..?...-..N..;......g...b....FKq./...~..?.Y.,hW=.X.=Z..X..DGQY^.qpj.e...y@...$.2.C.P9.Uv...G.....9>....c...D.....l}....._/=Z..-...f.7.z...R..k....Q.Z.17..5..S....@(Ue.!.......u......k".....E.C...+.........C....v&.>...y.q.F.4jP.........,..>...T.....H\k....}Ivm........U..T..!0..{.....Z...c.a...........y....[......n..q..g.yf..@c../.m.7,..vx...j2X..P.@..{U.9r.......u..O<.....AE@.\.2..I.......@0(...Ib,EB...?..puB.d.......{...n.Y..j...;rUk....n.Z..xI...!H.P..<l............_...3a....s.>...7....<r...6.8. .C@.....mZ..>V[..F.Cc.........R...#.d.Q.@.$B....."Z.B.....9Y..E5...B...a..S" .....ru&wxh...(.tU,.G.E.\|.....7..^(.q.F...A.m.......Y.[$...B.. .1.l!A..A.....s....1..;..A(. .B.j.....H.Q\..0..B...

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	33456
Entropy (8bit):	7.96315139927072
Encrypted:	false
SSDEEP:	768:yO0Z3NC1cNlRVV3VgrsC/JKLNBNS8smKGI:S3NC1Ajnlg78N9sm8
MD5:	C971C780267D5B469120B497DB586452
SHA1:	531F1AAA2FDA20CCC72E359F9C60FFF68A74868B
SHA-256:	14D2F0860EA6336EE9DCB02D274E18B0A0FB05FE76C40D4A0BE9F6732821300F
SHA-512:	3F504D40867774BC4F62357A1A991224D6138BDDF54F89DB9F14186F133E959349F66200C7896A392C4C366FB2A3DFC3B4237E81943177FFBF090F918E762404
Malicious:	false
Preview:	RIFF....WEBPVP8L..../..I.M@l.H.tr.S....p..^.........;..m.........,..^<.#J..=...=..m.l&L...juA.<$.I.@.C...q.....:.PU..=>$..dQudb).L.I..z..@6FU.-i.Y...b.=.../E........B._v.....I>."%\|G...$qH0v.p.#.w.....1...Pt.....!....s..H..e...DK(@.I...w..K.9B.....m....,F..4......^!.....0..z. [.-E.V{P...-.)....?.=H.&(. (.]..H.#I..s"..]./.....0....3.....&A....I$.DbL...c\|..Uc...&....qP...y......:g.1..,.$.%G..#G.6</<s.9..e.>..U&)/Z.....9.q..m......71..k..\|h.jj.....j.6.l..^......c.q.?..%.u.V.m.6T.VS..G>.6].9.......e..b.5.H9.PR.Y(}..M.9...p..,g......6)..i..:.i.%....#..}^...6mBN%.a...k.J.`.lS..N.w.8GWR..`......A.*UB...........Ah'....P!.6.Z\-....V......P%T.U.BP.UrF.!Pq....hl^...+....4}.(x...p..!(T..[.Z;.....6.c..p...<w.....X<.q.pn....F..!d.I&.i.p.......B.u....Z..\..jtl.......my[.=l>;;.9..&..K..\|}..\|q..z.7..NN..;..\|.,.....t+=..@....v.zt.p..._..S..1EL...M..}<.,.,.h...Ll.`.......\..6lX.1........>.?.C.j.m.`.a....L......\j&...K..P..L....a?@}...h.~w..,....cyY....D..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
URL:	https://xp.apple.com/config/1/report/xp_amp_appstore_perf
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9564
Entropy (8bit):	7.97584128021527
Encrypted:	false
SSDEEP:	192:ECJfBVNEZiq09tLVyXEheWrIngVaN6Bd10IkSmqDXn5R:EGBWizPwXEhergVasGIeqD3L
MD5:	64020C74B49AEB0E58B7150F0499D07E
SHA1:	040E51B00591EC2ACF8C6D78BAA8585FB39F4C4D
SHA-256:	EDAEE1F52C4AD3284D51C88F2BEE378C6018A45BE70349DB914073CDCEE2EEE5
SHA-512:	33715C326405E085D85AE03F9CB3A8A750C35503EAC444DB5F717369B2C912DE62F434248D321C79780E5C7675A49D98A3589F3D85259FEBEBC3A4115055B469
Malicious:	false
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/3c/b3/45/3cb34544-49ad-f5a7-cf96-bae0e5bfdd99/0b2afd26-fee6-4027-9487-caa6c1887dd8_APP_IPHONE_65-3.jpg/230x0w.webp
Preview:	RIFFT%..WEBPVP8X..............VP8 .$...........>.J.I#.#...<....y;-......}.....?...i.<....z.....k....w...[......k...^......._n..........S_......_...x.....^....A.i.;...{O..@/c...k..\|..{..<...G......j.!.y.....W..._..K.....c.../`..oN.b.......3~....W.8.......q..(...U.`h...O. .$.CQQv....0Y........O....2...'..........b......do.#"~....Xb...m.....v!84..[`..O..v.@...y}ma.{m.....S.1....d.......y......Z.cb.....mu..h.3....4..:..._<GP.5!&..Ti.v....M...i..z..m;.k.9.....Z[%.#.......~z.lB..T...X.30.I.......qe.Gm.>Y..n.Er..T.{..;."....p..rE.{..p.S....._.Y.\..f.6......M-=.%..,.#....T.....l...w.%.`fh?q..x`j....g.S.B4.0...V...\...).7..z......JT.O.".n.v...^%.dv.%..N>.$.._z`.D.N.!5/q..j.......dx).. y.\|8.D&R.a.F.;=Y?......l-. ...^...%n..G\.)....%....W7..l.Fh.q)e.WO[q...2..Z@...G..&S3...M.=.^..j[]..6'.t1..19....-{.}.....Pan2...(W..&*.(.=....{wr..#.mj..5x/...KR..\|.r$.......".U.>.\|Z.ZP{.,u.c....HX.(~.br._....D.U.jC.b91.-.N....)..A..L..^y'V...,Wm.s.:..(...).....C.Q.

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
URL:	https://apps.apple.com/assets/images/stars-lg-bc4f4bfdd931e007ab096dd1c209c689.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157352
Entropy (8bit):	5.4513730019566164
Encrypted:	false
SSDEEP:	1536:VcQ2UlYdxMXwcK2Bg6mqBhHPVy/ynVmXeXWH2H3i47UW4nb00pqpIReMaahQYg5o:f1mhfaahWI8sMkVT+StdOaBrdD
MD5:	2CB0588B519CA96061BA5C30AAC4511A
SHA1:	22DE2E42A74CA721B55269B6D81E3E9B7D465817
SHA-256:	4657EFB3912F2E0FCD1ED177EED282FE799F23E62219C0DEC5230142D51DC530
SHA-512:	ADBE5F35891E985F8EDC3B2C609A2E04DE165933D2963B6B1149130B02B6A6AA5B0648E1126B42510063E78FC1A6BE87E5802F3BB3934A0FF14C2DDD7C50906F
Malicious:	false
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.umd.js
Preview:	(function(mt){typeof define=="function"&&define.amd?define(mt):mt()})(function(){"use strict";function mt(e,t){return t.forEach(function(s){s&&typeof s!="string"&&!Array.isArray(s)&&Object.keys(s).forEach(function(n){if(n!=="default"&&!(n in e)){var a=Object.getOwnPropertyDescriptor(s,n);Object.defineProperty(e,n,a.get?a:{enumerable:!0,get:function(){return s[n]}})}})}),Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}var Ye,M,ss,ns,Je,is,as,dt={},os=[],Pn=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function we(e,t){for(var s in t)e[s]=t[s];return e}function rs(e){var t=e.parentNode;t&&t.removeChild(e)}function Xe(e,t,s){var n,a,i,l={};for(i in t)i=="key"?n=t[i]:i=="ref"?a=t[i]:l[i]=t[i];if(arguments.length>2&&(l.children=arguments.length>3?Ye.call(arguments,2):s),typeof e=="function"&&e.defaultProps!=null)for(i in e.defaultProps)l[i]===void 0&&(l[i]=e.defaultProps[i]);return et(e,l,n,a,null)}function et(e,t,s,n,a){var i={type:e,props:

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2840
Entropy (8bit):	7.8803852518960795
Encrypted:	false
SSDEEP:	48:r724o8WCI7otjpJlgP8pMjdg8XgFxi5HyC+slXUutOVletFxksBuN/X+cy2FgVSv:mf8WdotjpJlgPcMgissf0V2F6N/6ZZY
MD5:	D1A7C5BDAE96E3CEF5D2EA33660454F5
SHA1:	A208B8BB9D376CDE199CC48D75EBC3E60CDEE75F
SHA-256:	83153E7F75101015D69EB7EF66BBA3500B6EC29A1DC6B889DB5D1A2E7F314956
SHA-512:	144E1D2FEB5B5203E7A39C7F41298009BAD98F4088DB823E2BE7F98D232052C89C58BB790E97A35C2BCF76F033F23753CB4E0CC3F6B7F8E68F25F6879E5EE2DD
Malicious:	false
URL:	https://play-lh.googleusercontent.com/VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M(n.6....t....".?.\|..`....b..t.u.....m+.^D.T@D.E.....6.$'..0.0/.....m#I..3..#bf6......Z8....9.3l.jL....{.g%: W%.....W.P.W$kU}......ke..>..,m.vL.t.....U.c.m......fi....m.m'#...{/2...X.....m..m.V...1.m..m.m.m..i{..V(.m..\..s..m.T.hQ...Q..#.H.m...{..k..........r.....Te1j........={..[L..<..8.4.}....1..>E......,.,..k......y..K..r('>M..=.i..jH..K...e.v.^q.?.;......f.....N.6..U.'........I.X.d2....6....8pc..=.....W.........`b$ ..b.,F..LmRKG....Em...}g....:.G>:...u..A.3.@.FJ...H..d.Rv.@R.f.u5.....~....v.'/[.."......I.38.,......@..3..nmy\z.y...m.y.y..A.`@.DY.L.S....p..h.. JLR.Rv._8{..'N..rN..o.g@D......nhd....(..B.....)-MP.......k..`..<p.:[P.(....!s..34b....if%(.A..PY.K%....W.s...._..wN"B-..\y.cM..!.......]. ...A.C. ......A..V...[...]ZA..E.Ht2..........v(..$.J..t.....f..!@bG.@. .0iNf.D.?T.......f.s..bi..o...Ken..9..D..b..I...p.....OC.......$..0s.e....j].VR..t.~w.._;..[E%.f....`b......5.Pg}z179E..0....

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2228
Entropy (8bit):	7.82817506159911
Encrypted:	false
SSDEEP:	48:4/6MuQu6DYYEcBDlBVzqawiHI1Oupgl8m7NCnagQJFknwD:4SabhtXqMHyCl8m7N0ag6D
MD5:	EF9941290C50CD3866E2BA6B793F010D
SHA1:	4736508C795667DCEA21F8D864233031223B7832
SHA-256:	1B9EFB22C938500971AAC2B2130A475FA23684DD69E43103894968DF83145B8A
SHA-512:	A0C69C70117C5713CAF8B12F3B6E8BBB9CDAF72768E5DB9DB5831A3C37541B87613C6B020DD2F9B8760064A8C7337F175E7234BFE776EEE5E3588DC5662419D9
Malicious:	false
Preview:	.PNG........IHDR...0...0.....W.......gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.......C......pHYs.................IDATh...P....=..8.....Nx. ..PlP8..;.C.1iL#6....Z..!......3.po .o.L.i.I..1fl..4..ujL&6$...............w...........,Z..z. ~.....\.._.C.eK...g..%..P..L7...96..q....L.....k6.....,xz.._......B."#...L(n..f..Yb....8.;....K)N...H).%.F"Ic.LB.........jG.uD..B....Tm....T..).A.}D.f..3.V.....O.....t_..].x.{o..........x?!W...j..@..G=Ed.XF.........J..E?../]..?p..W..H..d5% WA+.....)2r..+..'qk8.../HS.[...u..z.P.....-.A.}.......I .P.....S....\|...)..KS4....I.....W...@....S.s..s..$`.X9.....E.x.=.u.iJ...........k......'...!.a....*+.....(...S..\h....@............I.$..%.2....l......a.\|.....U....y.....t..8....TF.o.p.+.@<.g........-.M.....:.@..(.......@......>..=.ofm.WM{...e..,..D.r.......w....T.L.os..T@Rv..;.....9....56<.x...........2.k.1....dd.V.....m..y5../4\|...G.p.V.......6...}.....B........5...&..v..yTd.6...../m.K...(.

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1552
Entropy (8bit):	7.8594540212727475
Encrypted:	false
SSDEEP:	24:zjF9cfYoaifnCIxqtKYTetGYbh/wcww8o6h547DtgUBS+Z+sjTt4ctVZDEkoPWmF:fmYo3ytKYTyGOwv3h5it3Tt9SPPW0VYW
MD5:	AC47B4C1D3EDF0FF4DB738F9DB8DFD2D
SHA1:	6EDA933BBC8FF4ED73A94A5F77BA09C7C6E82E2B
SHA-256:	CAB22C287FDBF0E475222226DC89AA41E4E44BA751EF7B1DE60BBB677DDD6C78
SHA-512:	6C4CD51225B1724F17A032DCC00DB2AF2820BBEB7970C5C7DB5F2B279460B0AF257157DE7F9A676F681C6BB647D5D01C62B60F469D0F558505F64D73C655F21E
Malicious:	false
Preview:	RIFF....WEBPVP8L..../?.....m.0...w........1\|T..e.DD3......x......Aq.6n.i.^..m$........;.W.....w.s..M.M..........?.t..O.]..........;.......J..y..W`ff..\|..gg'p....\}..l...ye.6.....T.......$..d.z6.:.....m..m..m.m.oc G..H..9f\|...-.1.\eL.......m..m..8............3....W......(i....z..{....\|....`@.t...j.P+.....V......+.........M.g.Up`..Y......Z.F...#.....B~..\|8m?...H....!....6...H3.H4.,....1`1X.".3h........w....O..h....b....).\|]^.(....t.u....=..E7..\|a......b..(.Ad.d.3....0..n..A.......Q5.'<....Z#...<..?.q..o.$.....(..}.<.rj~..(..?...9.....w.B.a..Vt../L.......5`..2p4&/t.P...+....w;/..z..A.B.;v.+@.....C.9}..>$.&H..AY.....B..A...5x .....z...$ljLmd.....k._..~.56....}u..5.;...S.%4....AM.]...N.51..8...-.E....f'....J...a.RB..S..yxj..g..\;.W-d.g........{...M...\|_...3p.v!.~.......[c.....0.v....?*7u.W.O.0.....2.[.w...a...,..4:.../.eCW...... Ero(..:.c1...-....w...Q.......H5.p..Gj.}.^.?^.f6.WGG>...........AH...)B.A.....\?-/.e...C..:[N..9..

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), CFF, length 232500, version 1.0
Category:	downloaded
Size (bytes):	232500
Entropy (8bit):	7.998884606824205
Encrypted:	true
SSDEEP:	6144:e5M3heALdDh/vgiW8Voyf6TCBh/59/JIPo3LA/mjKkcJjzHGm:33hDNhXgiWyoyf6TCBR5NJrs/+BcJjCm
MD5:	61961C768851CA32A9CF38E8F30C7277
SHA1:	5E0A7018DE235BC07AB09AAB70056FB7EDF23136
SHA-256:	51DC07699694A66AD46960C186AA00FD12DD8B4E55F209839F85C173B436984A
SHA-512:	45A98EAC5F87B2DF41B3D0A261C48FBD11B7200411AA29DD565BA4395C80C613F6831B2515EAFE5F7B778CB6C060E68DC310F8CAB144251759155154F5E8574A
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlematerialicons/v141/Gw6kwdfw6UnXLJCcmafZyFRXb3BL9rvi0QZG3Q.woff2
Preview:	wOF2OTTO...4.......................................e.....`..X.6.$..b....~. [.......K...BE......Y........S(.Dp'9.k0<..%.q(.?.....e.EBn...q...............K~<.........&.lb...P. xp..].R.h...m..,.#j.S.U.. t....R_=H....!Y.:....@.C.C.. ..BK......h...`3U.....).\.Pf.......d e....!h`..4.X...=Tl.tk....@.;,(.A..m#..<..b......sw..7336.=IU.}...(RM.t....P..Gy.j.J..J.{T..Q.....{ttr..N+...HM<#3.XNw.[z\|..P..]....x.L.....9....Bi........x.7.9....4........\|..l..LR....=H..Y~A.1.._p3.......<......iB....7.$U.!L..kJ,2..KZP.z..Ff...(.R',.X...2.........O.4.7....)Mi..1F..L.D@F..B....G=.^.U" ."..{/....6rw_.l" ..}.(5.)..?.f" .....A.).]T1../....@i..a....[.]..Az8.&."wc....L....uI.9..\|..V.......\......BJ)...\.rgUUUU...)7.N:.......7b....QQ..}.^....{.j.....w.'R.,.\.)...5...O'.`..t.4..:.a..V..Y~&.b[h..,......v.6.e2(..h..R....(p..2\.)C....u.... o(..@.....Z....X..H...h)....e..!%..a..uyS.RM...\....}Z15v...\....W.{.m?.Q..,wyK...0l..V..YM60c......q....}.....X..Y.[.......v..........."...v:..c

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 564 x 168, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	9371
Entropy (8bit):	6.775324714137017
Encrypted:	false
SSDEEP:	192:aSkVHhQQSk+tvHzKRlZfR/bwJ6b3nvIQe:aRVBaTTKRN0KIP
MD5:	96E7DA23073D7FFEB2B90FCEF2570B2C
SHA1:	6AEFAC48244653FE982489338E70C5FB0D900FC2
SHA-256:	89514515CA490C1E66E3298D91D74EAF1F760C0D4B21E4E9F18FDAF3996554F3
SHA-512:	D1D82FB43FDADD9F8A3F55AD7E7D8FBAA0B7EBB82B0742B8440121EB272E3D68E7A67A163AA095BD6DD961286B61A130DCE130FA7C308E79639A2D6DD9E6A718
Malicious:	false
Preview:	.PNG........IHDR...4..........n. ....zTXtRaw profile type exif..x.mP..C!..w.........t..`.l{.'.x".\|...6.....MZ....P.8;tr.4y.)C...t]..pT....e.qa.E-..#~D.'.... :.....#.#.O.0P.Vn......w..4.xo...mzG.w.............u..B+Sc.J.3..9-..1.YO.+J~....iCCPICC profile..x.}.=H.@.._[KU*.F.q.P.."...E.P...:.\..M....G.....b...YW.WA...quqRt.....Z.xp.w..w.....T.'...e..q1._.C..........'3.Yx..{..z..Y.....J.d.O$.1..7.g7-..>...B\|N<i..........g.F6=O,..........x.8.....s.+..8..:k..0\.V2\.9....D."d.QA....j..H.~..?..S..U.#..jP!9~.?..Y..r..q .b...@h.h5l...['@....:.Z...$..."G..6pq...=.r..y.%Cr..M......7.[....... K]-.....D...=.....g.....~r.v......viTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="XMP Core 4.4.0-Exiv2">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/". xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceE

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
URL:	https://play-lh.googleusercontent.com/Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2916)
Category:	downloaded
Size (bytes):	7201
Entropy (8bit):	5.323454849442783
Encrypted:	false
SSDEEP:	192:1i9TDfZmRHx+tvDXXKzB7fk+sI4F1G6qFw:aeW7XXKpfk+sIi1/N
MD5:	93F809A7464F12CDB8C36C914F4B366E
SHA1:	A316C094169B5C61CBA6CED2A3C4AF46932F15C4
SHA-256:	8928FFCAE58EF6FD63FBB0F66649AAC026D57CA06F73502C91189E854CA0C5D2
SHA-512:	CF4EE35387A00C94E2C2CE122DC3048713249986DC59FFCCA2C2ED663EA4ACA57524D89E74DEFF02E65338CE5EC633C567E4D35D1F7529A82C7D80C3F1662B08
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.143.00046eaa0c4ba0e3f4b0.js
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,i,o={4161:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-apps-featurekit",[],(function(){return

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	835
Entropy (8bit):	5.122548763638895
Encrypted:	false
SSDEEP:	24:D76bBSheFvVdGUF+fWlp9HlTpXXW/clctloFHMZeKsf:H8oGNAwlp/lmicnosk5
MD5:	1700167659C4FC8067289A202C9B4CAD
SHA1:	8A378A6620FA910FCA16CE1465C8CF274EAC2C24
SHA-256:	8158176C725E8B1B3A6B385C24BCA6BCD9409DEA93978E8C9D7ED368ABC05BFD
SHA-512:	951EE5610D7381158F3B8C54FE88ACE0F38F60C4007BA3FFAEEA2DE75794788BDC6B8923D897617335298221FCC41437D62836C0E5DBAEB29644E19FE0B4A666
Malicious:	false
URL:	https://ssl.gstatic.com/support/realtime/operatorParams
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1713513666563/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1713513666563,. "screenShareVersion": 1713258072750,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1832
Entropy (8bit):	7.878490302274349
Encrypted:	false
SSDEEP:	48:xufyDYyYs7HE6Ua/MRJ3TV9nEaAjoLdvPBu:xuf47H7Uj3TlAEZ8
MD5:	15AF7E993179F66E122C70161FC09778
SHA1:	D57AC0DAD5DDFE9255D4E3CDA8F23B80D1A33ADB
SHA-256:	645DE20533AF34C49BCA2B961E8C7D8E9C3EBBB1D03B00925B87F2C647668DA1
SHA-512:	F3EC179D15C5591A6CB7E0EE4BA5F327E45CF1D34522B145618D00D7CD1E04CA5880D9BA1F4E2F124FAD0FC9A3D4C8991E95EF5C90160368B1646982D72F2A21
Malicious:	false
Preview:	RIFF ...WEBPVP8L..../?....Em.@.....0D...x....6\.f...l.IRT....-.....6...t........Em#.I?.z!.......(..3`..f..\.^Vfv...f.d.........z...3I.?.Et..Sd+3.r.wwwwx."2..4u2ww...)"ww......[37$......a..l..pI..m...r...dS.u.g[.......G.:.M..m..{?....0...g.l..U..m....)..-.V.:U.w..K".Y.$#....D.i...j..(....}.=U..)...."`..,,..0w....C.&5....,(...%.NC`IS.;8...r.......T\|...../lw.........(..6)...p.M..!.y...Rh..D....., ..B...b>}.........a[$..H...._C.o'.T...B......G.7..d......o<[.O.R....^a.....y...pn.....J...d....%.'..=....-...........9.....%0./!ESR..Y.5Hx...A.........X....hXp.2...F$.......\|.. .E..Z.b./...~..g..4[(b...$.D.&./.V....\h..g..\|...5R[...B.$"..%"M.B..\.Q...N."..!I.5E...M.j.(.'.....$4,.!..../..x.j.f5..Hn..\.7..,`.P....:?..C<.J....wf9...>._.I.}....k.~...X:>..-....,.if.=hA...u;.;..,c..D.^.....?Z...%.W.G...j..t..*....c..=.#;v.ep.....xA... .` .g..tra.u....l}.'.{c..C.........!.....g.:^.uu'..o.=.eB4......@...8R..E...n.!.e'.....2.4.0.f.I.]C..{/.q...F.!_..~....'ZUZ..5`.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	9646
Entropy (8bit):	7.978414359238506
Encrypted:	false
SSDEEP:	192:ZmMOm1hQDK+AidUQxUm02pPk1Lg+cvKF52Z2atvUsKV5eae52KKYh7:Zrk13mQZF+T/b28sKV5He5Hh7
MD5:	0AE371A505FE3C80969A9688D951A2F5
SHA1:	A57D4DFEF281175CB496A794D26ABCF907A6D3D9
SHA-256:	A6BAB33920314E85B5AA549B27FB2FE901B5F48ECF4772C9E51D8A8129DB70D0
SHA-512:	45BE99C58FD0917C31A5E7658651C93E16D00ECD5A08F7F385B880CB4248AB30E27B255CB162BFA00F5D7E67C4D661E5B8E96E99E9FA7C4AB9E207CB39C4B545
Malicious:	false
Preview:	RIFF.%..WEBPVP8 .%.......(.(.>A..D....z}X(....\|/.x............E......'......x..=.~C.....k.w.?..h...r?.?...?..n...".c...o.G....>@?..=.....U.g......../._......?...?....g.....?.>.?.~D.k.g...#.'......!..xN...~..K........y...{.)......(~....K.K.c.../...................g.'..^..~-}....9.......o..X.....?`/............../........n...G.?............I.........?..........#.w.G.....Q..-.}.>..............z.l..z/Y.s...;.o.............-.D7."._.8....`...UiO}.O......JK..O.....u .q.......!....`.0.......o...$V..l.Jr]...J.(....8A..... ).W....=B.!.A\..Y..z..;...%>X....<.....%...W..s..C..........9..-...[f.@i....&$. .EX..2......g...Y.D...\.bs:..b....1C)..\|.O......a......w..R3.?..-..f.U^P..q.f#...hq....p.E._..a(..o........I.8.Ul.....,.J3OKe..h. ....t...........g........M.:.J.9..gY.z.0c,p.#p.....9...F\...E......8....8...Nj....R .....Y.e..I.O..{.B.]$.A..gM.u.p.."...N..{OU%H=..}..)....;.^>.d..l.pW.u..[....vZ...Y...d.$.m...D1w..g..........>1~..V.ly...).m.v...#.Z..:i

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64931), with no line terminators
Category:	downloaded
Size (bytes):	993776
Entropy (8bit):	5.432288530865964
Encrypted:	false
SSDEEP:	3072:/t0Ebp7itYQmgT5Awu48KFIVChBVbIjvOmCC/fYUasWtJOKbPMCP:hitYQmgTOyOKbPMCP
MD5:	0FA73178BA92E4FE8E9648CC3094F379
SHA1:	AF8BF58424E1B12E3C15B88C4578FEF497ABB288
SHA-256:	26A2B01575B24D20C686C774C5B26D6C246800145D6BE0B18F83AE14A22A754C
SHA-512:	033A03C3B03FB7C45868F24D2769D5A108DB3080FAE6D81AABA9161EF22C8348C39188FC4E90C5A3A388E9C393782C862916FCC2362F17B6778E0E257BB28BBC
Malicious:	false
URL:	https://apps.apple.com/assets/web-experience-app-real-0fa73178ba92e4fe8e9648cc3094f379.css
Preview:	@charset "UTF-8";#localnav-viewport-emitter{overflow:hidden;position:absolute;top:0;left:0;width:0;height:0;visibility:hidden;z-index:-1}#localnav-viewport-emitter::before{content:"ac-localnav:large"}@media only screen and (max-width:1023px){#localnav-viewport-emitter::before{content:"ac-localnav:medium"}}@media only screen and (max-width:767px){#localnav-viewport-emitter::before{content:"ac-localnav:small"}}.localnav{position:relative;top:0;left:0;width:100%;height:52px;min-width:1024px;z-index:9997}@media only screen and (max-width:1044px){.localnav{min-width:320px}}.localnav.localnav-stacked{height:66px}@media only screen and (max-width:767px){.localnav{height:48px}.localnav.localnav-stacked{height:63px}}.localnav-overlap .localnav{margin-bottom:-52px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-66px}@media only screen and (max-width:767px){.localnav-overlap .localnav{margin-bottom:-48px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-6

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9002
Entropy (8bit):	7.969802340917714
Encrypted:	false
SSDEEP:	192:6783EUPMbmjnwP0qP3a7aU5dYa3ze+7apCQmqGVn:6GEUPQmjntaLajPa5Zen
MD5:	8C0C4F1CB19BA85DC552E09CCD6AA425
SHA1:	18CDEDAE37FC9E0EF58B5EF6A0581CD6DA471128
SHA-256:	2D32AFBF853D6AF8B144E0F8717BA98E28F01DED3998D5B94E3481AF5ABD3651
SHA-512:	76205F4CD1053A52F780B81555B2C3C4FAE9EBDC41D41DAF3DE9EC36F92AD8677C83479D785ECF332265ACEB63DD68DBECE2BA9309D04F3354D9D770601EFC03
Malicious:	false
Preview:	RIFF"#..WEBPVP8L.#../..;..H.$.m.z. .i.....z=G...._.#.=.I_d...:.{qG5...(..v..H.d"..g......h....[.xs.$...dCU.q/.GHj..A..7.j#....?.5..7.6.W..3..n..3.......:p[l{?.\|....#.vc.q.W...{PL...DL.f...I....x..s...v.p...,....G.\"B..Dk ... ...i.Y..5..me.N.....b.\|..4.}...<lN...G_`0y.l.......K..+&.. l..p............n..i... ..l6&$......B....P,.s:...^.O.U!..$..<.1{A..X./.....LLJ......@dSd..g........9..81...?0.b..3...._.`W.....4...4}U....4@..k..H.mWT.....F.#)..[...;"&../Oh.q.-sb.1.....K..._........'.t<Q.o7t.J........m{$Yo"......7..p..s)\.. ....1]...2....o.3.g?>....9.4.....fB...F.!}.e..)} dc([h..;..B....m..\.4..h...V.G....$C2....v..rl..f.}..3.Y.(ge.H.v.mfzo..K../n...D.%.0.2333.1...........e..I....p..Zi.0s.z:.0.k.R......#'.vh....s......'.-..af&U...vL.t..}...R.m.m../.c[m...+9a.....j.mE.Rj..........<..*S..?..0.Z.[.%..4.........#!.i..%B.X`.u...\$d.."`.:.Og8`.:.Og8`.9...._.....e!..F._r..._........Xk8'......pN4...\|..h........[..3.\k..b.......?./W...G.......{

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1958
Entropy (8bit):	7.824859730643372
Encrypted:	false
SSDEEP:	48:7wCVrL9ihuVrNk9rbDYgcYPA3lzJyP3n6t5qhlCvsbH8PmmOSrmc:BF9i45wr3YgcYPuyP36t4lZbHImu
MD5:	02DBD91D4CEE8BBC3C6E4C9D51C2DD37
SHA1:	33E34A394A2C065A7C4FED11F898C0F05EF66A6C
SHA-256:	FEC483C298AC2864C2510CBBEF1FED5D9362993FB7C8E0C77169CB68919D085D
SHA-512:	C313E4CCC13E7AC9974CE33E8266CF681F7F7B4680C162151379CE559E8F4BBFC772C178B63A056710E8D4903C6A11FD5178773FDB43CA5CF80702D11C3D2E83
Malicious:	false
URL:	https://play-lh.googleusercontent.com/a-/ALV-UjXu_LA0yHlVyZP-9D4A1_oAR5qpsouGW-A4uLCPF6Kh5IVQKX8=s32-rw
Preview:	RIFF....WEBPVP8X..............VP8LV.../......m.!.4....@>Ha.`.....JB...=.......m....S^......e.../....A....E..=.;d...AD":..-.....,.ffFK.L.re....3.36.Sf...Fv...f..)L.C.C.q...\-.=1...U.'W.,......3&..$.m.....g.m.m..d.m.....Zr.m;$.y....m{#{7....)#of......jT}...$...'..'...@(..C..`..=.N.<N-..v..&.'.o0J.X(...s...9....{n..... ...L6.B-.M2.z...(.+p.X.3...(....i.......;....2.....E..O.H.b....`......>.....Gg>:c.s....{...P..A...VM76*.;K:.GT[f...#).0..9..........LD5..d..:}...k.w. .........ss..r..5.K./i........=.=.xW..u....<.u`...L-B..b...oJaUGB.u[...Z.)..#.<..e...^)\|.V..../....AH....'..d.Q..D.1...A..F..^....-.@...a\|....!$...`E.`..q..s.i.@.1.q.{E...u..5I...%...8.x...\.F)@M..r...A-b..D....I.r..P.m.....C\|..y.......m.b_.l.h..p.....a..+Q....C.....k.?.........Oh...!.......R..0(."P4`T...X...s.;...5..EH.6$R!.I.b. l....0..k.....;H..4...R.8.[[6}R.'A.?.../ c.C@N.z..m....Ol...4.z...0.P../r...=....8`H!..._$.r....i..m1...'...&...!..(.....-./. +...6.....4....=.K.E4C.

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1494
Entropy (8bit):	7.855673114226291
Encrypted:	false
SSDEEP:	24:Hd5CJTJTAPUAME518c5CAyxmU2mqt2bkPRYoJ5WyAmzDBv4VA/Sps7oSXZ+dKvs7:HETAcAMLc5CFH2bt1txzDyV2Sp/SoEF+
MD5:	0C8023F37B95AA08269C9DD68B7FB3CB
SHA1:	74C8DA8823B9B49DB4804561CF98D8F09CB9F1A2
SHA-256:	3D4D89F4E5DCEF362E3730ECFCC66BF553BAE7AAA8E7A7AA169C93D0271BACF2
SHA-512:	A70850CBD44BEC4A775BF5CB8B14167A60F74ED6CBA261EF3C6B6B10E9299493F94F92698C546E6FE554DB75F1A0B2796E70E9B7D0346A728DA82768F2768199
Malicious:	false
Preview:	RIFF....WEBPVP8L..../?....Em.@J...#.(D...8.H...I#.>...6..Y....,....`.m.......A....9..?..x..@..>s\|..x....x2....d...........m.{.>..]rRwww._...dN..C......t.g.../b......n.:EJ\|k...[ON.....Tg...Z..n.e.]........y..m.......vw....6.......{t.......N.Cg...)a...m..wL....]..e..8.4..8.).~]}`....9.Q\|;..3....v~/z..R._......;.L...E..J..Q..8)<.a....#_....A.\..$.(^+....4.._..:.D.k..,.?.?o.)K..Q/.....R...;..~....-a.h.B.8h.....y.\zt.5}G.0.d.,9d. ...x.,Y...../....dC.CYb..}.'.O....U.(.).QT-.l.U..A..z....M.'.....1,.l{.-.R..:..9......!.S./....T.r.^..XO...R5Y.J..S..0.K..&%.\.....Z..V.%z92.,..z7[..yk^.O..sd?.N....k.'e..f...{v.f.9.j..&......;....'.G..C......'......z.Es\|.:..^....._.K.S...].i%)#.S.X.h...cs}...;.>......q..{R.4.q...f.....Y....[$;..<}...o.+...:...l.D.Q$.Ha.P.(wz.j...g..'.9.:.T)E.<P.k..yCLL<@.2~\w.1...x....d..s.!.F..k..B..2O.B...Q,....,a.V.....n/...@....O...3... ..2....<.........V(.....8P!.}}YU....S...R.1...+..0..3'.zy.s...J.^./L.x...h....2<..A.....-..

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (15710)
Category:	downloaded
Size (bytes):	1294726
Entropy (8bit):	5.486846432837708
Encrypted:	false
SSDEEP:	6144:q+Z+2W2j8zj/sn/RT1Miz82IGA7koJ3uLTvn82b1B0dzwXRlPZs55FBQiv3Obk7B:Tyt6l9N1B86CjFBQDsB
MD5:	0B5CE4F6827ED8B2B8CBC69322FD31FA
SHA1:	28E17C25EB8ADD219D9F3A3F74862AE29EF2CC0E
SHA-256:	9A22A7E6C84FA1FF5AC4E634C3863DE3F6D3B6B05579E91483DA8376536B793A
SHA-512:	5414B480EF62FF2AA22D336CFD16C02FD6F7604FBBCAEE640024AB4D2449CF04B3128ABD9FD4CD25635EDD9E031B1BB51615F82452CF018E72B2F62DDAC8633E
Malicious:	false
URL:	https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj
Preview:	<!DOCTYPE html><html dir="ltr" lang="en-US"><head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">. <meta name="applicable-device" content="pc,mobile">.. <script id="perfkit">window.initialPageRequestTime = +new Date();</script>. <link rel="preconnect" href="https://amp-api-edge.apps.apple.com" crossorigin="">.<link rel="preconnect" href="https://is1-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is2-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is3-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is4-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is5-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://xp.apple.com" crossorigin="">.<link rel="preconnect" href="https://js-cdn.music.apple.com" crossorigin="">.<link rel="preconnect" href="

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (56412), with no line terminators
Category:	downloaded
Size (bytes):	56412
Entropy (8bit):	5.907540404138125
Encrypted:	false
SSDEEP:	768:+LUmmAWTe2uXYp8Mi+yKYlebyBblxRx54PHSGdXXwW7MFWwXVuE2:4UcW6v+0BbchXwW49z2
MD5:	2C00B9F417B688224937053CD0C284A5
SHA1:	17B4C18EBC129055DD25F214C3F11E03E9DF2D82
SHA-256:	1E754B107428162C65A26D399B66DB3DAAEA09616BF8620D9DE4BC689CE48EED
SHA-512:	8DC644D4C8E6DA600C751975AC4A9E620E26179167A4021DDB1DA81B452ECF420E459DD1C23D1F2E177685B4E1006DBC5C8736024C447D0FF65F75838A785F57
Malicious:	false
URL:	https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css
Preview:	.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block}* html .goog-inline-block{display:inline}*:first-child+html .goog-inline-block{display:inline}.recaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom}.recaptcha-checkbox-border{-webkit-border-radius:2px;-moz-border-radius:2px;border-radius:2px;background-color:#fff;border:2px solid #c1c1c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1}.recaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AAAACXZwQWcAAABUAAADSAC4K4y8AAA4oElEQVR42u2dCZRV1ZX3q5iE4IQIiKQQCKBt0JLEIUZwCCk7pBNFiRMajZrIl9aOLZ8sY4CWdkDbT2McooaAEmNixFhpaYE2dCiLScWiQHCgoGQoGQuhGArKKl7V+c5/n33fO/V4w733nVuheXuv9V/rrnvP2Xud3zvTPee+ewsKxMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExP4OdtlT6ztAbRWvvLy8A3QkwxzH6tBGMMexI

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1968
Entropy (8bit):	7.882407902691392
Encrypted:	false
SSDEEP:	48:rhpEb/4FRqlHw9ngRDod+N6pQiWGMb0T911IAt9BHIc:00FRqlC8DAG66im0T9TLAc
MD5:	173537A76E503E2F6AA799FFCC3A8DF4
SHA1:	A4C55E454CFFC5E57819D580BA41A7B00D8940B7
SHA-256:	9A8B42068397D2C3433DAFF65B31FAA2370B43370497470045C918B1204A5C23
SHA-512:	BCDF67BC248AC0D453DF4EE0939224B36EEEED4B40D74C0DE5579D7714A690C8E4AB64E582E563E58B01AEDB029F702348046980B230857CA7123A9FC8851A54
Malicious:	false
Preview:	RIFF....WEBPVP8L..../?.....m.9.......0D.....7#`.v.Z..j:..,.E....N_..2$.+h`.IR.F..6...)^.l#Ir.%`..T..U.O..7......=..`.Af4..@..\|..~...#3.....\|....a.Ou.j.v............cffffff.e...kE..S..+.rF.v^.}h.t.....B.N..o...$I...._U5b.6.'S........d.6g.m'.U...rlk;..\..~Fl......U2..%....m.>...........L..r0h.8U.`.....X.1 ......Vq.2^..'`.==.........o...Xi.;...l.p......,.....jk.`.E...O...T_..I......uj.&>.......lG.p.RP..rL..o./.2..J"/U>...I...`.#3do.....7.kN.kOY..r.V....Rc:.3.\..W.o..D.j..{.<>..+A..9K/Ye..s.(8..3.t...n....Q..$.. 7..$.T\z:j.......3..T..........~h_...g....3.D..G.....<......U..C_y.p..V..>R.wk3.....=U...81...4_...R.gh.d.........Z._4.....Sw..x..u...>...{.w.J....../....K.....^..#..k..e...Q.V.......j..o.8.n7>...%^\|.=..d......@.S0.v.\.]...>....f.=..L..6.!..{...J?..'=f..Y.U....\|.....2....6y.hb......&.k..x.e.BQ -.C.r.G2.(.oO.F:O$MA.R.......1.A........h.(..LA2.V..q}.-......^...I. .*{?.C.L.qW._U.l1....\..".R....C..~...qz,.rY.%.N....U.

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1566)
Category:	downloaded
Size (bytes):	41276
Entropy (8bit):	5.2368089739293495
Encrypted:	false
SSDEEP:	768:EkxiX+skUbNIvnXh5hC+gSyJNbX+V4N8zuZYJOKLNWDjqcR5cXcpcO0cDcIvScTu:lskUbNIvnX7hC+MNhZYVNWDjRE3
MD5:	CF98EF659A7C40F16FB89858EE051693
SHA1:	F223F862E3DC2347DEC54A932E35C5BC5F794C8D
SHA-256:	D1DAC8F97C25357AE55BB0FF7EFAB6349022317CFBC549BB2057C15ED2DD337D
SHA-512:	58043EF2BA149E03964670CA8A2FB8039691129058FB95D29851F84E7D65F66270B5ECBED675D56E871D6722B959FF3AA7ED2672E1E3E89B6F071A90B120C7E4
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.706.4a437bd91dd079e92306.js
Preview:	(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[706],{43862:function(t){"use strict".t.exports=Object.freeze({ELEMENT:1,TEXT:3,COMMENT:8,DOCUMENT:9,DOCUMENT_TYPE:10,DOCUMENT_FRAGMENT:11})},96339:function(t,e,i){"use strict".var n=i(38694).t.exports=function(t,e){return n.insertNode(t,"insertBefore"),n.childNode(e,"insertBefore"),n.hasParentNode(e,"insertBefore"),e.parentNode.insertBefore(t,e)}},38694:function(t,e,i){"use strict".var n=i(37844),s=i(43862),r=s.COMMENT,a=s.DOCUMENT_FRAGMENT,o=s.ELEMENT,h=s.TEXT,c=[o,h,r,a],u=[o,h,r],l=[o,a].t.exports={parentNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,l))throw new TypeError(e+": "+i+" must be an Element, or Document Fragment")},childNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,u))throw new TypeError(e+": "+i+" must be an Element, TextNode, or Comment")},insertNode:function(t,e,i){if(i=i\|\|"node",t&&!n(t,c))throw new TypeError(e+": "+i+" must be an Element, TextNode, Comment, or Document Fragment")},

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1162
Entropy (8bit):	7.694737520848792
Encrypted:	false
SSDEEP:	24:Q0gnfwftjFBkUSEMixW78yt1x/YUsfUHS4Xj5OQ/5YDQ:QdIjiDEMixW78ytbNs7+FOQgQ
MD5:	B268DC2EF4CA78606A491547A017C832
SHA1:	4140A3CA287E6C52EFAF6407FDD3B30C190DF53D
SHA-256:	F1AD01CD2BE867EAEE0DC3A0B0BECC8358F3FCF27EE7E1EE8854BD85DD3A2DCB
SHA-512:	EAA399EFCEB9B86652497833C8DD7D424CFF7881F6E07FB5999E00FEA3A795BBB44EE2BDB9455117403EF61F3D7C5B4E50AF536D3063496964BF37CAEA2207BF
Malicious:	false
URL:	https://play-lh.googleusercontent.com/BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw
Preview:	RIFF....WEBPVP8X........?..?..VP8L:.../?....'!.$G.b..:BZ..L....."I.$I...Z.8....&!.$G...?.G...L........h......@.?{.......0D.......D0B.A.9..c..........@ .O.DC@.>.@.o..v.%.P.M;l.... .Lh.....0.....t.....t.b4&....p..]..3 ..........`.....4...{....f..c...M....K............c..{.t..x.9.>.!.=v............}EH.B.)....].~......?...u..#..........hm;67w2...I..Im7........Y75..ij...\|..v{....=.QD.'..efmt}LRw..\........h.6....@....O...6.4..o'..r$..6vn(p.D............Ec...%..p,..g....."Ob.8`.G...0..c..n.x..<I.1'...(.0...P..?..?M4v..\|.4Y.8..........\|.aC...-.......+G......F.u.]{.a..{..7..R.D...r..#P...2.............y.Q..< ................\.j$<..;\.y..O....6../..{F.@...V3.5....=v;~s...2q.m.2.X..V%......,.....zc......u..S.I...j...@w.R...6.h.r.v<p..q}.+..R.N..E...XD.KV.G..j.&....Q..C.......7...G.......q.....Rq......H.T.R.Y}j.T..Y.I.U..-........G...&3^.UM....o.Q.X..,]..Z....+S....)K-0...>.....^OS..0.Z_....."...>..f.>..LK.....i.....X...Zr.-...6car...[...KF...^.P..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 108468, version 1.0
Category:	downloaded
Size (bytes):	108468
Entropy (8bit):	7.997835393798081
Encrypted:	true
SSDEEP:	3072:pWhXrpbCa6gSWYdNt9aYKHEX2a2k+kgylVi5nh9B:QhXYaGNR5ynyl49B
MD5:	5011345B7AEB8F847CAEF745BB1B464E
SHA1:	B37CE84520A2B9607E19BC0FC9CC7B841BC1C831
SHA-256:	27464F709D857A113F9AC53FA038A3F61FD0059F9EF4BD48A58C41EDBFCDD996
SHA-512:	BA5775614D07C16CB98625833EB3B3D381BD14278AEEA16A9F114FCCE1FD903F7264C76C135F069BCDA4E3936A64A10F103F32F62B0A4AD50CF6F209CF3ECAE8
Malicious:	false
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_bold.woff2
Preview:	wOF2..............y....Q...........................$..H.`H...>...4..c.6.$..$..(.. ?meta....(. 8.t[.x.F.m.n..I.....[G4..&.{.3............x.....+..8.vY.I...........y....;f..;.K..(.D.(...r..Z2..VTk.R6.......09..9.&.i.URN....f..n.@+..&[."...."ke.5L..r.E.....fd.\|..nJt)..2.....u..`.k....:3mb...OZQ.Gs..~..bv.......?..,.....R%..j)._....b#.v..#1./.....t.+v..O..5.xe..Na.......y3.?v...R}.kO...[.le...(.>........F...2.3f.9a......)%d.s.2....9.....7..f....H...+aC..F..c..R.?..L.?.f1...uT.-..z.....\e.Q.c.q.W3$..b.P?F.]......&....TM...+Q.;..4i.DJ!)V..AQ..~?....N.xS...V!.A.`..0....[.."...&...g...V%U2.\|..B..T.....i..!....g.~..oe)'.....F94....Y....x.9./&.m..h.7..W..\M4.n...7Q..`Z..t.....n..`...B.{qu<.;.......L..]...(..8....u.......v.A. ..Iz...qr!7......o......A.....<..........."....=...N?...". D.-4H....!..'..7;.w7.8x{..Rq.yH...qT....."..... ..8.?.TK......>.T...Rb...J).Ak.....vB.sw.....V.8.!dMR.2.....R..........,k..Dp"8Q...%.bk..v.../R.M.9.IO..I..

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108855
Entropy (8bit):	5.485794699594584
Encrypted:	false
SSDEEP:	1536:smuR3kfQlFl9S9ITIKDCK5NFmYwHiWfgqx5OkN/cihLLXWvZ5XGmsvE6dN:WktCDtDFVrONThLLXW6msT
MD5:	DE2F04957196AC8C3C7678AD4C33A46A
SHA1:	4788D5B2576E992626DF52268F212A5A2D141D02
SHA-256:	E4073A5D69E86546E65B01C6F50F43B91691CEEE2A9EEDFE2DDFCBB90A8D695B
SHA-512:	74316ECAAA611B47C1CB5D192BC77A71877B610A456605CCF35A2C35449D8A35861290C7B3012DA6F6E54D25C59423D1D568C8D7904DDF0FE0BCE864EEB9200D
Malicious:	false
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(f,g){this.vc=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.vc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	792
Entropy (8bit):	5.289112422433458
Encrypted:	false
SSDEEP:	12:kRZTFMT0r/Af1V8Fjyn/Af1U8n1aYl/Af1oAs84YdGvjnH/Af1u8eWLkkbRN20:kzeTInA/+1a681Onf8dFrl
MD5:	2F8A1E2951107E0F4FEEA81467FBA9F5
SHA1:	2B814182D5BF8CAC1B06CC77D0B0B3BA8D2C6797
SHA-256:	5D254D4C76DC8A1D25B6DD96B2C6419546F7118EA777C6FB918D8FBB9434192E
SHA-512:	DBB392209DB293AB0B541C7E0D815A1FD7AA654A316B8E07D9331A5231ADE13B4499271B58425C7B3CB2CF8EB804A56EFB15F0D032E7C20776456BF0247FAD85
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,Z5wzge,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,q0xTif,qfGEyb,rpbmN,s39S4,sJhETb,sOXFj,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=yNB6me,qqarmf,FuzVxc,I8lFqf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("yNB6me");._.Sq(_.pBa,class extends _.Vq{constructor(a){super(a.wa)}H(){return"yNB6me"}O(){return!0}kb(){return _.B2b}});_.vq.yNB6me=_.G2b;._.w();._.u("qqarmf");._.Sq(_.bCa,class extends _.Vq{constructor(a){super(a.wa)}H(){return"qqarmf"}O(){return!0}kb(){return _.r4b}});_.vq.qqarmf=_.P5b;._.w();._.u("FuzVxc");._.Sq(_.dCa,class extends _.Vq{constructor(a){super(a.wa)}H(){return"FuzVxc"}O(){return!0}kb(){return _.k6b}});_.vq.FuzVxc=_.n6b;._.w();._.u("I8lFqf");._.Sq(_.gCa,class extends _.Vq{constructor(a){super(a.wa)}H(){return"I8lFqf"}O(){return!0}kb(){return _.q6b}});_.vq.I8lFqf=_.s6b;._.w();.}catch(e){_._DumpException(e)}.}).call(this,this.default_PlayStoreUi);.// Google Inc..

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	36974
Entropy (8bit):	7.869731994362244
Encrypted:	false
SSDEEP:	768:H3cLtbg0waKsaI+Oq3roGLTAyzNTshamT+EUUQezg+koJXrxZXBsKCLqL96YggQR:H3cLdZL+Oq72yzNXtEjQecmXrx5BsKlY
MD5:	C2EF0B7FC3C86FF987368BC05E66511F
SHA1:	0AE925FB913D4A07D3B5259B88182F83D210750A
SHA-256:	5194A1EA73958A6DFF29A73D5F583B3D689B4CFBDBB4484842ED77B204409813
SHA-512:	835A7A424469B428CC390F97C36E423AC6F05304BF25045DD84034B6A2B42489DDEED9E24F9C1EECD19E893C6EB021D8A782F07B27E1C67781D74E1835ED94DB
Malicious:	false
URL:	https://play-lh.googleusercontent.com/Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw
Preview:	RIFFf...WEBPVP8LZ.../..I.MHl.H.$.S...q..<=..BD.'..".d$..J.R..}..}...-.....H..6.#.k....w.....wK.Nw.p...H...u...3.._..b...LS...\|......$...@....6G..0...3...^.k3X.....9....+)I.K.P..........\|..'.H....lQ..d...u...w.4.m...Z..H..9s.......G..3....pP.T...".<..O.........y.......u..u.w..I~.Q..S.O...!.'!`I..rd...\|.3".......u..'1.rm[..4\|......E..n+7Ov^.,..H..I.c.g._.....gs.{......9.H .1........F F...L..#.,.4 "e.0.......`.@ ...q.....+.7q.....:..."..).`.,.B..3..!0$4...UG...h+0.E.....U..0...P..P.{...!..... .......j...\|.{}r.[".,..........=..`........X...6......jc.D$...h/..(.lp.[.. ..".u..4.N...H.xG......;..;.7..="....b..].s..I..............k/_...A......;..})0...4m..L..o.!"0.yh...."E....b.x'!.n9>.".....=.....V........' .a...!...+..X\\\>...X,.A[W..;.....j..E....$....v..k.BD.....3.V.S.k=;e..6.\.W...(...sg.....L.W.E&qwd.[up29... A..V\|_.......3W.x.B!I.b..a......._...8Sg...y...(....tg.n.a.I.a`.L...H<.FgR..'..b".8q.p.....k8\|..y.}g.....H#=.P.}O.^v.8...P.s...R....m#IR.....;...

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (664)
Category:	downloaded
Size (bytes):	14214
Entropy (8bit):	5.423098025111413
Encrypted:	false
SSDEEP:	192:5Ou495s6yYMkJqYWJ+Jaucgd/ix0BSc1e6t44KfKb6m3PbBISj:5BVuqYWJ+Jauld/g0BS56t4IuoPlISj
MD5:	853877426A53490ADEDBCB2E1CE9624E
SHA1:	BA2E275A1C0148B2F12CA53F17746BB920B7D555
SHA-256:	F3163FB2E48B27F81ECCDB331EEBD4F05AEAF9AF7253765323A35E869D8E5D6B
SHA-512:	12368317D1C18BD215ACB20B1D4EB859C72A7DA8FBD8299348E2D5A462EBE57BC015748330C4C1E07FF5404CEBE61B1A228145F9748D92C12DD2B00346AC910E
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.572.93058cb1137c31242bbc.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[572],{24178:function(e,t,n){n.d(t,{BU:function(){return J},EE:function(){return q},GP:function(){return H},L5:function(){return Z},P0:function(){return R},Qk:function(){return B},SC:function(){return O},Z_:function(){return X},tO:function(){return ce},vc:function(){return k},wr:function(){return oe}}).var r={setDelegate:!0}.function o(e){return void 0!==e}function i(e){return o(e)&&null!==e}function a(e){return d(e)&&0===e.length}function u(e){return v(e)&&0===e.length}function s(e){return p(e)&&0===Object.keys(e).length}function l(e){return"function"==typeof e}function c(e){return"number"==typeof e}function f(e){return c(e)&&e%1==0}function d(e){return"string"==typeof e\|\|e instanceof String}function v(e){return!!e&&e.constructor===Array}function p(e){return!!e&&e.constructor===Object}function h(e){return p(e)&&l(e.__lookupGetter__)&&l(e.__lookupSetter__)&&l(e.__defineGetter__)&&l(e.__de

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1880
Entropy (8bit):	7.8878381210189445
Encrypted:	false
SSDEEP:	48:NoW9rslz80QWxB7T8SjWr9slcrQUJKv/61H:NzrslIWx5TRmAiqQH
MD5:	41DB2402073D34E7C539CDFBB7290875
SHA1:	BC2B13CBDB0D33959F4F4A8B109DAD914280DD53
SHA-256:	CA4D719D9BF9FD875E4993E15D21D645303A93A032EB7CE738035ED880E29B8D
SHA-512:	AE7A13D618D884DDB2EDABEF76ACB029A529A8F92BFBDCE384B4CC26A7637B9F0A861A97019BD812B0C02359B6D762C71AA9509760DFED0787FC679603F09BF2
Malicious:	false
URL:	https://play-lh.googleusercontent.com/jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw
Preview:	RIFFP...WEBPVP8LD.../?...M(j.H.;....'...O..lMB.....Y',XE...+:._.p..>....m..^...v....m...5NJ.._d)...%W.G.]....<.,...c..."...C..?C.S.=X\|^.m[W.m.:'W.m_.6>...V_....'.....L.L......T.Ll..N..H.....{.L"<...c..J..)..~U.3...k..f...............03+mU.L..8.....s-.z`..O?......RF...Vj3.\.....z.....Z..).......jy..V........#t%.s....:....>....F...yJ..........T........c.......<..dJ5..4t?..3..g8{S_]....8z..O..9l...(i..B.h...a....U....Y.E.=..@H...J-...LV)...%#....PU.s...U[..!.[L..l...5..F.+=..C...x........A.,..'...-.n....'5)....c...Qf.,..V.b..4...h..%.....n96.JB.....&..r{..M..I..J......V...,.._Dy.....)....c...:.......!.`.\.."=H..9Jx.G~.&>L.6.\.."c~....;6.(..~Bz._....#.pp..sw....2,H."A/R.8V.......&.....wa....{xC.e.;....tp......bON..3{x.}}.5.....XdbD\...b.I....N9).../.j.>...A.k...z... ;..+........KwX.........j.......I...h.`3QS..Cw0...2.OH..;`.$G..9IyQ....@...:2..DC#.86..#^...Fz5.z..U.Rl.W..#......."....n+..B.&........AM{.....k...z...O.@..k.?.....4

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	9646
Entropy (8bit):	7.978414359238506
Encrypted:	false
SSDEEP:	192:ZmMOm1hQDK+AidUQxUm02pPk1Lg+cvKF52Z2atvUsKV5eae52KKYh7:Zrk13mQZF+T/b28sKV5He5Hh7
MD5:	0AE371A505FE3C80969A9688D951A2F5
SHA1:	A57D4DFEF281175CB496A794D26ABCF907A6D3D9
SHA-256:	A6BAB33920314E85B5AA549B27FB2FE901B5F48ECF4772C9E51D8A8129DB70D0
SHA-512:	45BE99C58FD0917C31A5E7658651C93E16D00ECD5A08F7F385B880CB4248AB30E27B255CB162BFA00F5D7E67C4D661E5B8E96E99E9FA7C4AB9E207CB39C4B545
Malicious:	false
URL:	https://play-lh.googleusercontent.com/_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw
Preview:	RIFF.%..WEBPVP8 .%.......(.(.>A..D....z}X(....\|/.x............E......'......x..=.~C.....k.w.?..h...r?.?...?..n...".c...o.G....>@?..=.....U.g......../._......?...?....g.....?.>.?.~D.k.g...#.'......!..xN...~..K........y...{.)......(~....K.K.c.../...................g.'..^..~-}....9.......o..X.....?`/............../........n...G.?............I.........?..........#.w.G.....Q..-.}.>..............z.l..z/Y.s...;.o.............-.D7."._.8....`...UiO}.O......JK..O.....u .q.......!....`.0.......o...$V..l.Jr]...J.(....8A..... ).W....=B.!.A\..Y..z..;...%>X....<.....%...W..s..C..........9..-...[f.@i....&$. .EX..2......g...Y.D...\.bs:..b....1C)..\|.O......a......w..R3.?..-..f.U^P..q.f#...hq....p.E._..a(..o........I.8.Ul.....,.J3OKe..h. ....t...........g........M.:.J.9..gY.z.0c,p.#p.....9...F\...E......8....8...Nj....R .....Y.e..I.O..{.B.]$.A..gM.u.p.."...N..{OU%H=..}..)....;.^>.d..l.pW.u..[....vZ...Y...d.$.m...D1w..g..........>1~..V.ly...).m.v...#.Z..:i

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	51228
Entropy (8bit):	7.992246318048376
Encrypted:	true
SSDEEP:	768:0c7WoVIu7cy6olmezhzB8gL+cPKE/LpOeP+8VqSHWgGjK7WeNUmMhLcRutE0Sa6K:nWb46SzB8mlCEDpOetVqSHYMiLTQWHr
MD5:	89D3B9BF317C62E45422276B387D3C2F
SHA1:	BECB39F56997FED9BB9D08228762629275C608E3
SHA-256:	AB99996E1B0942C3412330BECDC643BDCC019B495455349A1D1034FC5D4B4C42
SHA-512:	8965A87A6D42895E0F5CED0526DAE8D3EB61BAF3FC8B45350FD4C91F3200235B4A2AACBA5F5C0340C66080DDAE23FE794680D11CBC7D2CD5371054BEDC387EF7
Malicious:	false
Preview:	RIFF....WEBPVP8L..../..I.M@.$9nS.......Pv......(.......xH...h....j.r.,$k..2...O@...3.G.a...T=U...P.Q.<c......cDU.q........._....@;........I.i#>#...8&..@o.:......`....z.mP..Z...,1>6..5e.xo.sJ.q...{K-....lx{i)....~3{o..7..i.`Cw...20..M.!.l..z_N...oP.m&.....ku7....n....9....l23K..yAI.-G.tJ.V...jzX..c8..p..0JE..$.......oz..V.....a.u.....A..c~...l.z.6......!d....N...xQ.l3B.'.J...JQ....H..I..TQ)..R.T.R.Ee....Y......c.c.c.).asj.E$.%F....5..C..q.....f..0...A.$. 7..\....9:.1..Ni............3.;d9.1..i...JD..L....LH&.N..:t.P.{...k..jj...Q'.........rf.k?.......=p.6'.raee.X.\K...............8.......~=..^<=n.J{...j:u.T).D"1d.M..Iy.........R.$.8J...T.$....HV.....s.vI...?"A.!....u5~.c..g. I...$0D........e.L.b....$I..o"...N....dx{...n.@.$.8zC.......c....%I.oJ....`.m-.\...3..x..C.....b.+tF...../3\|.....I.I........n..,<(.X.8......RS.t.#.d>.n~...yV.b6....T..5.y...m.j^Y...Q...^..../.........I..J.mM.U.U B...f..L.$..%..z...t.c.1........O?..&.$+.&.p[.....{O.0m3.o.G...o

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1832
Entropy (8bit):	7.878490302274349
Encrypted:	false
SSDEEP:	48:xufyDYyYs7HE6Ua/MRJ3TV9nEaAjoLdvPBu:xuf47H7Uj3TlAEZ8
MD5:	15AF7E993179F66E122C70161FC09778
SHA1:	D57AC0DAD5DDFE9255D4E3CDA8F23B80D1A33ADB
SHA-256:	645DE20533AF34C49BCA2B961E8C7D8E9C3EBBB1D03B00925B87F2C647668DA1
SHA-512:	F3EC179D15C5591A6CB7E0EE4BA5F327E45CF1D34522B145618D00D7CD1E04CA5880D9BA1F4E2F124FAD0FC9A3D4C8991E95EF5C90160368B1646982D72F2A21
Malicious:	false
URL:	https://play-lh.googleusercontent.com/AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw
Preview:	RIFF ...WEBPVP8L..../?....Em.@.....0D...x....6\.f...l.IRT....-.....6...t........Em#.I?.z!.......(..3`..f..\.^Vfv...f.d.........z...3I.?.Et..Sd+3.r.wwwwx."2..4u2ww...)"ww......[37$......a..l..pI..m...r...dS.u.g[.......G.:.M..m..{?....0...g.l..U..m....)..-.V.:U.w..K".Y.$#....D.i...j..(....}.=U..)...."`..,,..0w....C.&5....,(...%.NC`IS.;8...r.......T\|...../lw.........(..6)...p.M..!.y...Rh..D....., ..B...b>}.........a[$..H...._C.o'.T...B......G.7..d......o<[.O.R....^a.....y...pn.....J...d....%.'..=....-...........9.....%0./!ESR..Y.5Hx...A.........X....hXp.2...F$.......\|.. .E..Z.b./...~..g..4[(b...$.D.&./.V....\h..g..\|...5R[...B.$"..%"M.B..\.Q...N."..!I.5E...M.j.(.'.....$4,.!..../..x.j.f5..Hn..\.7..,`.P....:?..C<.J....wf9...>._.I.}....k.~...X:>..-....,.if.=hA...u;.;..,c..D.^.....?Z...%.W.G...j..t..*....c..=.#;v.ep.....xA... .` .g..tra.u....l}.'.{c..C.........!.....g.:^.uu'..o.=.eB4......@...8R..E...n.!.e'.....2.4.0.f.I.]C..{/.q...F.!_..~....'ZUZ..5`.

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12046)
Category:	downloaded
Size (bytes):	285226
Entropy (8bit):	5.5486359434958965
Encrypted:	false
SSDEEP:	6144:IT0dmG5QX5Nn0YLceF+4CTnXP9RIM8XkB:h+dhjLc
MD5:	0FA03C9A4C7FAC13848C95521A4F082A
SHA1:	024CBAC3FEF624C8A53A6A803202782888F5311A
SHA-256:	84E0DC7E1CC33C0F44DE77AB0980357244BA7172AD81015543D7F9A249D2B337
SHA-512:	46B80F675332F3CA716CDFBA92AFF09DA6947C1DCB60380A307958D55D948C93A0666F7B883E71A33C77F9BD4A6AF2429B3841CB8B6A2C10709A4A9B58F652E4
Malicious:	false
URL:	https://www.googletagmanager.com/gtm.js?id=GTM-K59689F
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"18",. . "macros":[{"function":"__e"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__j","vtp_name":"navigator.userAgent"},{"function":"__u","vtp_component":"URL","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__v","vtp_dataLayerVersion":2,"vtp_setDefaultValue":true,"vtp_defaultValue":["macro",3],"vtp_name":"originalLocation"},{"function":"__u","convert_case_to":1,"vtp_component":"QUERY","vtp_queryKey":"utm_source","vtp_customUrlSource":["macro",4],"vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":["template",["macro",2],":",["macro",5]]},{"function":"__dbg"},{"function":"__u","vtp_component":"HOST","vtp_enableMultiQueryKeys":false,"vtp_enableIgnoreEmptyQueryParam":false},{"function":"__c","vtp_value":"G-LL

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17673)
Category:	downloaded
Size (bytes):	18268
Entropy (8bit):	5.619856960314813
Encrypted:	false
SSDEEP:	384:Va/VuX6x1E4rZ5gIcAGn5o86/TZeIeaedo/939zg:Ukqxe4rZ5gIcAGnQ/tEaeE9C
MD5:	9FBB8606566EBF96C502666BFFFD254A
SHA1:	FEB80CB296B30432EC659D7EEDFE3C6022A450E2
SHA-256:	9644D7AB8F581B9FDE8F5C3B9B84FD370FF52F1D4E71DD60B5E590A6C7D5FD39
SHA-512:	7C9C38D0710B52EE4761EEAC4E50BB8F5E319C5AFA49253888D0F45B42DB03DE244181AF62A0BC0431D0AB963AB04A5FD2263907CE0B1188BCB1F6954622204C
Malicious:	false
URL:	https://www.google.com/js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p})}catch(P){e.console&&e.console.error(P.message)}return N},p=function(R){return R},e=this\|\|self;(0,eval)(function(R,N){return(N=f())&&1===R.eval(N.createScript("1"))?function(P){return N.createScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==R\|\|331==R)N.X[R]?N.X[R].concat(p):N.X[R]=N_(p,N);else{if(N.ri&&247!=R)return;466==R\|\|163==R\|\|161==R\|\|301==R\|\|172==R\|\|120==R\|\|59==R\|\|298==R\|\|344==R?N.X[R]\|\|(N.X[R]=PR(N,p,R,142)):N.X[R]=PR(N,p,R,49)}247==R&&(N.h=q(false,32,N),N.R=void 0)},eZ=function(R,N,p,e){W((e=V((p=V(R),R)),e),R,z(N,Z(p,R)))},sH=

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	4.639719888612948
Encrypted:	false
SSDEEP:	96:EdAdhzUooooRoooT0oooooHooooooovqxoooooooooA:EkLL
MD5:	A217F758EFDFFF14053678DBE58FA4D0
SHA1:	6E0EB512C2F386D645712D7ECBE339EA85CFCA68
SHA-256:	F343B3015D0545A7D5B719A434135BCAE2AC766ED459AEEA671E3688B79D1875
SHA-512:	9BCF90FED875FFAF3170EF3425949642EB23B4E750CD42BA546D30E1A58C4FEE1A14CCDBD31455A6A442D09372CCB3873BD7477A59853608BC87660FB578119F
Malicious:	false
URL:	https://www.gstatic.com/android/market_images/web/favicon_v3.ico
Preview:	...... .... .........(... ...@..... .................................................................................................................................................................5C..5C..5C.]5C.5C.5C.`5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l.................................................. <../A.8D..5C..5C..5C..5C..5C.:5C..5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................TN.(?..'>..8D..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..5C..5C..=/..$l....................................................2..l...8..&>..8D..5C..5C..5C..5C..5C..5C.5C..5C..5C..5C..5C..5C..5C..=/..$l..................................................../... ..m...8..&>..8D..5C..5C..5C..5C..5C..5C..5C.g5C..5C..5C..5C..5C..=/..$l...................................................E...>......m...8..%>..8D..5C..5C..5C..5C..5C..5C..5C..5C.?5C..5C..5C..=/..$l...................................................B..C...>......m...8..$=..8D..5C

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	13822
Entropy (8bit):	5.308557467153006
Encrypted:	false
SSDEEP:	192:YPNfrSf3gy1fQx56zKsvEsSDIiFtTislPchPTwFlOvHChmC82YFK:YPNzSf3g6zKIHqtpRKEuvHTC82Yg
MD5:	2A92CDD99A42BFCD7DAB16887539E231
SHA1:	310E2855E334F6F49937490D621710021B15066B
SHA-256:	F20C946DA61069DF3F4DC8097FB617DB50F266D25D53758D91FCCBD8341C533C
SHA-512:	7DBD1CA6AF6E7AA86F408C6E3D5D35AA49AD39908D8AB10AEF4CF8C806AF27889DA43D8AEDDEE030E6351DF1D81442B431C6AF206A4DF6E9BFB043892850EF49
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.15.097368f212a6a942763f.js
Preview:	/! For license information please see chunk.15.097368f212a6a942763f.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[15],{21015:function(e,t,n){"use strict".e.exports={canvasAvailable:n(1892),continuousScrollEventsAvailable:n(93117),cookiesAvailable:n(2022),cssLinearGradientAvailable:n(83353),cssPropertyAvailable:n(15871),cssViewportUnitsAvailable:n(77499),elementAttributeAvailable:n(13462),eventTypeAvailable:n(70683),isDesktop:n(13459),isHandheld:n(30677),isRetina:n(25152),isTablet:n(53489),localStorageAvailable:n(83574),mediaElementsAvailable:n(58093),mediaQueriesAvailable:n(28342),prefersReducedMotion:n(54719),sessionStorageAvailable:n(63160),svgAvailable:n(91676),threeDTransformsAvailable:n(78795),touchAvailable:n(50012),webGLAvailable:n(72810)}},1892:function(e,t,n){"use strict".var r=n(93796),i=n(6379),o=function(){var e=r.getDocument().createElement("canvas").return!("function"!=typeof e.getContext\|\|!e.getContext("2d"))}.e

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	984
Entropy (8bit):	7.674068185768488
Encrypted:	false
SSDEEP:	24:j3Tnqu3iggc6XDmjArkqCHB5hnUoirkQQ:DTnRTgc6QXqCHqoZQQ
MD5:	521AB661D05B5E40ACFAEAB1F65DFCB7
SHA1:	AE1C2E4A193121281F5D39BD7A4701D0BD9265D8
SHA-256:	2F85BCEB5105CD1F57EA59264441AA3231AC11EF7D714A06EB0A2F578B9A697F
SHA-512:	CD3334CBE3D856ED5E8A041CE75AE88099254EB2B07BBAC09E8E14C38B65DC07BF5B01F8983C52A5769461DFE36A644453C3DB9AAE121B3BF3E7BA81FD4B70C9
Malicious:	false
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?.......$GR...g..Cp.6.$5...`..A.H.........._..!...6.....Np'.l..V.y...E..V......;..Q.&(.l...FYQ......M..f...w.. .....7......Q........bs}....ylS.....)..R.isy.......T.s.~..p..nmO.X.03333333..>.<o.+Gv.X.....'_.UD.'...vI_.i....d_.ja.h..c.FO]....J...Zjq...{o.1...UF.w.................wv.n...wkR..mA..h....eD...AhE..m.....mt6.../n.......7.mv..DD.RG..$J.t.....Jp..3..%...=.Xp.R...5..u....t;4.o....L..]..<._v....f.B.p...G.%.Q.IO4..J.....c.....['..>Z...Q..C.2Z.A/.u......n..a.........Lv..j....m.....k .,Q..T..1..i"..J.x...#.]6^.h...=.hz....)GF..].h..D.G.&...(..4.....dx(kB..J:...4....'M...1)G2M.E.@..Z<......p.e.!. >B-_...!.2....l...W... ...s..._.........4.$Gw.iU..1.gZ..D.....P...D[.....\|@D..X.S"J:.8J.=t$D.T.A+.....%..V....!...-.@.....Pr!...."...wl~.v..V...x...>8.E@v'......w..D..~.._l.v....9^...;........uT.).N..0..j...\...D..d...x.h....}....'..dy.&.].}.EXIF"...II.......1...............Picasa..

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.184482755717443
Encrypted:	false
SSDEEP:	6:otqWtxbQLZVVi7GeqlAGmwbQLZVZYZ7qT:o7xbK95eqKVaKiM
MD5:	B54D0452E2FDB8C0D91C455D1C5495F9
SHA1:	DDD85730B9CB4CB9905B1D7E7643F595D2F33CB8
SHA-256:	F4138D99EC6E17514BB87CEEAD1C1D2A204219C970864FC85BFF00949EE18082
SHA-512:	6883DE3ABB2A7B71CBDE6EDA0854D5B9EC696A0656735843BBB6329007D758B502D2557CB36D5A1CEFC7B4D0AB5DCBC227C88DE9163662741C60F9D561F5A367
Malicious:	false
Preview:	<HTML>.<HEAD>.<TITLE>HTTP method GET is not supported by this URL</TITLE>.</HEAD>.<BODY BGCOLOR="#FFFFFF" TEXT="#000000">. GSE Default Error -->.<H1>HTTP method GET is not supported by this URL</H1>.<H2>Error 405</H2>.</BODY>.</HTML>.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	36974
Entropy (8bit):	7.869731994362244
Encrypted:	false
SSDEEP:	768:H3cLtbg0waKsaI+Oq3roGLTAyzNTshamT+EUUQezg+koJXrxZXBsKCLqL96YggQR:H3cLdZL+Oq72yzNXtEjQecmXrx5BsKlY
MD5:	C2EF0B7FC3C86FF987368BC05E66511F
SHA1:	0AE925FB913D4A07D3B5259B88182F83D210750A
SHA-256:	5194A1EA73958A6DFF29A73D5F583B3D689B4CFBDBB4484842ED77B204409813
SHA-512:	835A7A424469B428CC390F97C36E423AC6F05304BF25045DD84034B6A2B42489DDEED9E24F9C1EECD19E893C6EB021D8A782F07B27E1C67781D74E1835ED94DB
Malicious:	false
Preview:	RIFFf...WEBPVP8LZ.../..I.MHl.H.$.S...q..<=..BD.'..".d$..J.R..}..}...-.....H..6.#.k....w.....wK.Nw.p...H...u...3.._..b...LS...\|......$...@....6G..0...3...^.k3X.....9....+)I.K.P..........\|..'.H....lQ..d...u...w.4.m...Z..H..9s.......G..3....pP.T...".<..O.........y.......u..u.w..I~.Q..S.O...!.'!`I..rd...\|.3".......u..'1.rm[..4\|......E..n+7Ov^.,..H..I.c.g._.....gs.{......9.H .1........F F...L..#.,.4 "e.0.......`.@ ...q.....+.7q.....:..."..).`.,.B..3..!0$4...UG...h+0.E.....U..0...P..P.{...!..... .......j...\|.{}r.[".,..........=..`........X...6......jc.D$...h/..(.lp.[.. ..".u..4.N...H.xG......;..;.7..="....b..].s..I..............k/_...A......;..})0...4m..L..o.!"0.yh...."E....b.x'!.n9>.".....=.....V........' .a...!...+..X\\\>...X,.A[W..;.....j..E....$....v..k.BD.....3.V.S.k=;e..6.\.W...(...sg.....L.W.E&qwd.[up29... A..V\|_.......3W.x.B!I.b..a......._...8Sg...y...(....tg.n.a.I.a`.L...H<.FgR..'..b".8q.p.....k8\|..y.}g.....H#=.P.}O.^v.8...P.s...R....m#IR.....;...

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	34150
Entropy (8bit):	7.9605429516569455
Encrypted:	false
SSDEEP:	768:1u9/IEI2Y8ovLDIm5VvC+TSPI05kE9xX0r+Xv4NdqnzYl:O/7Uh/ZeW0qqxEr+wNkUl
MD5:	4DF004D4F2D2F7921EE1AB1E16EEC7B7
SHA1:	39489B65493B9FE9883F359E5FAB5170C9D9E1F2
SHA-256:	ECF16BA0EBF68546464B4D0E8E47A95B961423E47413C25E5A5BA73DDED2FFD2
SHA-512:	09563045BAE58061067227F649EBFA4A334659B1A4BDB9164377B2D6BB85274AFB57D260609528E089533BFCB9FFDE4EBE8E945323D77EBDA5662E7CF7ACB83C
Malicious:	false
URL:	https://play-lh.googleusercontent.com/NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw
Preview:	RIFF^...WEBPVP8LR.../..I.M8l.F."gn/Y.._.<.BD.'.....n.....z..w../$uI..[]..9m[............f,......^...............C.....H83.3..0R.X.609/_[......$..\<-...tK...X..cl~...A.7."".....%..."-..!I..H.c..&.@K.L...I..h.~....F....\.>'...v..c.)"l.6qT......-...Hz.....{..Tko....."..5_...zo/A.!.!.J. I.-Gr.\|.\...j../AC/....."(..t."I.$E.Lf.fy....#.34Dyxf.t........u......A..H.RbL..0>..f.._d-.8j...e.....,.K..\.L..R..,J....gN.K{.$}.dQ"..Q.z.EO..I.....zk"c\|j.nm...t.WeHII.....gjW...J{...I.l.....z.SOii)M..3.K.Tm.:=..H.%.m.n.K.."......<$5.(.2.L.ti.....).!.E8Qyr.f..mW)...ZO..$$3-.....Xg.d/u..i...~c..Y.....x6.>..!.&t..(.h.]......3fg......{t.A ..p..u.a. [a......?.,.a.~......?.{u.Zn/..PQM..k^~.m.Q2...}..........#V.V..~w......L.a......wm.5wl.P.a1.P......./w......./........).~..Y.F.6........Q'o{w...f.K.j...a5...1.N.D.,l^...X0....r....,.\|...@...43X..u......g...~..J....'...Y..%....Nm..D.w.^....e.Rw....H.F.......3..N"..ok.0H}.Pv..E.....f...r...S...q....e..$........,X.......x

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	835
Entropy (8bit):	5.122548763638895
Encrypted:	false
SSDEEP:	24:D76bBSheFvVdGUF+fWlp9HlTpXXW/clctloFHMZeKsf:H8oGNAwlp/lmicnosk5
MD5:	1700167659C4FC8067289A202C9B4CAD
SHA1:	8A378A6620FA910FCA16CE1465C8CF274EAC2C24
SHA-256:	8158176C725E8B1B3A6B385C24BCA6BCD9409DEA93978E8C9D7ED368ABC05BFD
SHA-512:	951EE5610D7381158F3B8C54FE88ACE0F38F60C4007BA3FFAEEA2DE75794788BDC6B8923D897617335298221FCC41437D62836C0E5DBAEB29644E19FE0B4A666
Malicious:	false
Preview:	{. "operatorDeferredUrl": "https://ssl.gstatic.com/support/realtime/operator/1713513666563/operatordeferred_bin_base.js",. "eagerLoadHostnamePattern": "((https://www\\.google\\.com/express)\|(https://www\\.yt-web-green\\.corp\\.youtube\\.com)\|(https://www\\.web-green-qa\\.youtube\\.com)\|(((ads\|adwords)(-.)?\|campaignmanager\|photos-.\|play-.*\|support\|support-content-staging.sandbox\|business\|fi\|.+\\.corp)\\.google\\.))",. "eagerLoadHostnameFlags": "i",. "cbfVersion": 1713513666563,. "screenShareVersion": 1713258072750,. "settings": {. "enable_customer_can_end_chat": true,. "enable_emojis": true,. "mole_show_survey_url_percentage": 100,. "mole_skin_version": 2,. "operatordeferred_report_rpc_events_percentage": 10,. "screenshare_skin_version": 3,. "rms_screen_share_skin_version": 4. }.}.

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (800)
Category:	downloaded
Size (bytes):	115629
Entropy (8bit):	5.705160245506616
Encrypted:	false
SSDEEP:	3072:BLpEuI+2nhFOe68BacwWQA6b6X5gCDcOj:F2s2n/a6Xija
MD5:	358AF3CA5FC4D2BF2C1720F9EDE62D41
SHA1:	D1AF360966A9433D928131A9C401159287FA8832
SHA-256:	5933DD779A4D7B136E3ED5F2BE6063EAC05B798A6711E046AEA03828445C70A8
SHA-512:	C8BBD78D5EF3A4E4E68C936E5C33DCA9FEBFDA27525488A28B516404709F7FF23D904C41E893D73876C5956D8C87C4C1803BB450C130B2A05408FBC361D9EB5E
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,bm51tf,byfTOb,chfSwc,dfkSTe,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=sOXFj,q0xTif,Z5wzge"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.qX=function(a){return"Rated "+a+" stars out of five stars"};.var sKb,tKb;_.aZ=function(a,b){b=b\|\|{};_.$Y(a,_.io({Ha:sKb(b)},b))};_.cZ=function(a,b){_.bZ(a,_.io({Ha:sKb(b)},b))};sKb=function(a){a=a\|\|{};const b=a.Vg,c=a.Lh,d=a.De;a=a.Dv;let e;e=_.dZ();e=e+" "+(null!=b?b:a?"cKScvc":"IfEcue")+" "+(null!=c?c:"HPiPcc");return e+" "+(d??"")};_.$Y=function(a,b){b=b\|\|{};const c=b.content;a.open("button","J4hqjc");tKb(a,b);a.W();a.print(c??"");a.Ga()};._.bZ=function(a,b){const c=b.href,d=b.target,e=b.content;a.open("a","BDhSBd");tKb(a,b);a.ma("href",_.to(c));d&&a.ma("target",d);a.W();a.print(e??"");a.Ga()};.tKb=function(a,b){b=b\|\|{};const c=b.Ha,d=b.Pf,e=b.We,f=b.ariaLabel,g=b.jscontroller,h=b.jsaction,k=b.jsname,m=b.jsmodel,n=b.jslog,p=b.id,t=b.attributes,v=b.hidden,z=b.disabled;b=b.autofocus;f&&a.ma("aria-label",f);a.ma("class",(c?c:"")+(null!=e?" id-track-click":"")+(z?" hf6Ybc":""));null!=

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	10312
Entropy (8bit):	7.978077493567659
Encrypted:	false
SSDEEP:	192:ZZ9O0GzTQJx8I1hrBhBuYUgnORFf7Po/cLyipdDmRqLkBia7mkOJl4KzlRYu:VGY8I1hrJuZgwBkS1LMia7LmvZX
MD5:	48AEFD624535D25098B2666E195C478C
SHA1:	71FF016A958F1AF6B72BB2A7820CF4E0145FB86C
SHA-256:	478052D8E3A1A597646E36658A3634725534437AEE4C4037B16F5DE9120847A3
SHA-512:	80ECBCE481BB3070975E3F81B9C74D3214DF809AB8CD4ABE12D11F479D8186B3D01A826B070753A2C7F6C359AF6F94B20A2712BEF2DCDB52308C0DEB6B4897D0
Malicious:	false
URL:	https://play-lh.googleusercontent.com/bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw
Preview:	RIFF@(..WEBPVP8 4(.......(.(.>A..D.......(....p...\|0......>Yg..q................}.....Y..?.;Z.....o...;..........D...?r..}Y.../....._{?....o...}@...=.3.......9.[......s.../......e_.?/..\|!.....?.......?..q..........<t~.....././......e.O...w..........+.......?...........................7.W.?o....}.?_?...-.b.:..k.lXGT..}....d..v.4....1.Y_}{.j...((..R....uF.0.....JU..<~?....-.%...vPzt.9.c....}..Mr.... ....Wp._@.!..t.T....3\|..C-........O..7u..s"k.n...(.V..K..*a..^0.....x.....%6...G.....4.)....o...4R..K?.H$..B6...B.n.!.%..Z^.T.....o-.Z..../x.e..<n.Io....b...O..C...I`..Q.,4?.U...(w.;l..k..$.h.=i..Rq....]...F$.$..r......=.....oVW..........TKh.N........1.A..,g%.T......h.~...Tf...-_0R"[...F..H.SC....9T.h....?..w.P.........0...%o......7.-c..K&4...R.yB.<x...o......p.>.6 ....by[6#.:f...#........{...).......a[......1...z..&.$1.....[.S.......v..j....[:.9n3......)ii".N...+A.......G(.....nLZ.-...UX.@.a..~...#...)....K...5.,...'?..Z.^.b.O

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	645
Entropy (8bit):	7.631563068517978
Encrypted:	false
SSDEEP:	12:6v/7ihaL0Z6T2rkLv0cLSbLzKlRv+reS0TZPhnv8NuKS8jrRJI1b3g0hfue9:riS+v05bLzK7CmTRhnUTJjk1b3Jhfj
MD5:	EA2722D3B676D5CDD4F7225E65695112
SHA1:	97E5E94CFF5B62F60BA76C7DD9F606304AF8B10C
SHA-256:	317E5FDAA14E548C0045D5E662709CFE0B692E0384A8396CF22054BF0A1E1C48
SHA-512:	BF06CE48B306A0EA13EBC7BE92CB56440DDF1C35C214BA7C164DECFDA6E2E7AAAB31605196D0690BE4FF509404701CA620C504A5EDF0C3E6A12C6FA5A73C78DA
Malicious:	false
Preview:	.PNG........IHDR... ... .....szz....LIDATx.b .<\|...P\|.h(.E.0.....\|.x.......a.....!.....q{.t.U...(.A.g.....w.3,&.s.~..h2.....Ip=..4!..[.................r.p6.R......R.....19]z.......%.E.q..........6".#...9..Y.n.U.ZU.ZMu:.Q:t%..y`<.+.0T6.=.i.0.e..a.f...b.\..Ax..e...K...$7..BAk@.\f..}bG.K....\Nk@.T.ha.+.w.%x.5.....k..OJr...$Gd....,.0....n.{..b........%].....K.....?....f....w....j4...@%p{?...\|>.....hH.h.....r....h..s.J..@X.j..3#h>.`@Xw..l.K.;).c..>....V.b. T....0B.4....%G......a[..P.........G..B"..!...m9rj%.....E.AD...0...!..y``....o.z...1J.FF,..sEr3.s.&....b.m.+.........'.m3(D..{..:..So.Ja..*......#..'....IEND.B`.

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 480 x 160, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6391
Entropy (8bit):	7.925576155945514
Encrypted:	false
SSDEEP:	96:yBOHH4i/VNQ9Z6PSWSzCjDXbh6LTzPAZTMu7EmBOTzB8rl3Y5/T1q04U6xjbM3M:97Q9Z6PSCfl6nzPMVBOfBE3GMp5jbqM
MD5:	BAEA015A2869C38653A857D46D227854
SHA1:	54D9F20EBE2369F3DE5FF260E5660F54A550A247
SHA-256:	B504DD0577136856D78114D514A13139F2D1FB8B05712787019A5D750C811A50
SHA-512:	92D1E731ACA8E1A9E3B9C48695246A941A9D2FBBCC0ACF699593946DFA4DBBF0B6D138EE371AA2A02F4298188AE749579687372DB0449B0EA8B912E2E02C4811
Malicious:	false
Preview:	.PNG........IHDR..............%O....SPLTE........................................................................YYYMMM...................iii333.............................!!!.........eee...}}}.........III...ppp%%%...www............mmm<<<BBB...+++(((..........???...666......FFFbbbRRR.........ttt......\\\.....999........UUU........^^^WWWOOO000.............```...yyy.~-y....tRNS.T...G...P.....s.;h........>IDATx...;O.`....8..!9.C'C..".....C.-..HMg..d.....(........yo.=+..b8H..7,..h.......J..R. ?.%../.tV...F.;..e5}82o......F.eqJ..bY...zY..Jc..".19.,....%..p..r...^Lg.K.y....h\|z'..>.......6.r&..f%.>Mx.LN.(.m...#...B....8p{z@y+F.......".Z.._......b.9./.$..].U9..0.-`+h}..,....b...~.<.X.2..r........]CWb.~w.!.....8l...Z.:50j...J.B+.6.g.A.B._.J.,.(T...8..... t.o.h..@.%..........t...;..r.t.t...tW......J?.7.$.(..z..8..v.A`..... .%n^P1E.LM+.....]gv.0%...y...p...g.....q.._E..o...T.Wih..r..L.\.....?y@..N..BJ@.@.X......3...z.V...&X.XNhY.U..R.^+..'Tp......K...Q

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	196724
Entropy (8bit):	5.1354044541422486
Encrypted:	false
SSDEEP:	1536:ejNyqUXiJc25xwftWJc6qTWLwQnQoAkSWZmT6ocTzVqJlOYQA33hodGWXTDvFz8y:8UXiSNtrXojt
MD5:	E904CA2E7AED586F525E59F7F859D238
SHA1:	BD50A1EA868373C2C069B7DE97E702D00805F3C7
SHA-256:	B2A5E50BC93A01B4DD987643CF8EF1E5C60CB32EF061025461B76936F4E0A49E
SHA-512:	48F3CA3190205CBFC51C06052A675506D39FB12FB2441372EBA59883837DFB9D62AD8702C08E88C75E48FC5A021852091BC2EEA6CD25557BF608981AA8B86B8C
Malicious:	false
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Preview:	@charset "UTF-8";#globalheader{all:unset}#globalheader html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#globalheader body{margin:0;padding:0}#globalheader ul,#globalheader ol,#globalheader li,#globalheader dl,#globalheader dt,#globalheader dd,#globalheader h1,#globalheader h2,#globalheader h3,#globalheader h4,#globalheader h5,#globalheader h6,#globalheader hgroup,#globalheader p,#globalheader blockquote,#globalheader figure,#globalheader form,#globalheader fieldset,#globalheader input,#globalheader legend,#globalheader pre,#globalheader abbr,#globalheader button{margin:0;padding:0}#globalheader pre,#globalheader code,#globalheader address,#globalheader caption,#globalheader th,#globalheader figcaption{font-size:1em;font-weight:400;font-style:normal}#globalheader fieldset,#globalheader iframe{border:0}#globalheader caption,#globalheader th{text-align:left}#globalheader table{border-collapse:collapse;border-spacing:0}#globalheader main,#globalheader summary,#globalheader det

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1494
Entropy (8bit):	7.855673114226291
Encrypted:	false
SSDEEP:	24:Hd5CJTJTAPUAME518c5CAyxmU2mqt2bkPRYoJ5WyAmzDBv4VA/Sps7oSXZ+dKvs7:HETAcAMLc5CFH2bt1txzDyV2Sp/SoEF+
MD5:	0C8023F37B95AA08269C9DD68B7FB3CB
SHA1:	74C8DA8823B9B49DB4804561CF98D8F09CB9F1A2
SHA-256:	3D4D89F4E5DCEF362E3730ECFCC66BF553BAE7AAA8E7A7AA169C93D0271BACF2
SHA-512:	A70850CBD44BEC4A775BF5CB8B14167A60F74ED6CBA261EF3C6B6B10E9299493F94F92698C546E6FE554DB75F1A0B2796E70E9B7D0346A728DA82768F2768199
Malicious:	false
URL:	https://play-lh.googleusercontent.com/37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw
Preview:	RIFF....WEBPVP8L..../?....Em.@J...#.(D...8.H...I#.>...6..Y....,....`.m.......A....9..?..x..@..>s\|..x....x2....d...........m.{.>..]rRwww._...dN..C......t.g.../b......n.:EJ\|k...[ON.....Tg...Z..n.e.]........y..m.......vw....6.......{t.......N.Cg...)a...m..wL....]..e..8.4..8.).~]}`....9.Q\|;..3....v~/z..R._......;.L...E..J..Q..8)<.a....#_....A.\..$.(^+....4.._..:.D.k..,.?.?o.)K..Q/.....R...;..~....-a.h.B.8h.....y.\zt.5}G.0.d.,9d. ...x.,Y...../....dC.CYb..}.'.O....U.(.).QT-.l.U..A..z....M.'.....1,.l{.-.R..:..9......!.S./....T.r.^..XO...R5Y.J..S..0.K..&%.\.....Z..V.%z92.,..z7[..yk^.O..sd?.N....k.'e..f...{v.f.9.j..&......;....'.G..C......'......z.Es\|.:..^....._.K.S...].i%)#.S.X.h...cs}...;.>......q..{R.4.q...f.....Y....[$;..<}...o.+...:...l.D.Q$.Ha.P.(wz.j...g..'.9.:.T)E.<P.k..yCLL<@.2~\w.1...x....d..s.!.F..k..B..2O.B...Q,....,a.V.....n/...@....O...3... ..2....<.........V(.....8P!.}}YU....S...R.1...+..0..3'.zy.s...J.^./L.x...h....2<..A.....-..

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 109628, version 1.0
Category:	downloaded
Size (bytes):	109628
Entropy (8bit):	7.997834372736158
Encrypted:	true
SSDEEP:	3072:I/PVzzcH7zULTR9S41qKYgEtXD/PhU/ffXEMY96gYGWPrInVe:+PlLd9N1qjxhYcZW84
MD5:	67A9B38ABD1F9F80D5ED943760F1C1E6
SHA1:	9C646D28E62FCF3C4A1ECF7043632FAE3DEA6270
SHA-256:	8D73261B2DB18AF30E93ACBC8E8591E0784706FC283C37C465F92012256757D2
SHA-512:	A479BB307B03F74202B24E95D85085E8855C48713E443F5EAE0CABD077D45282F8765BCD6D36733AC336504E1AE1B1C3CA3BB41A428F8A240EE7E7B91FAB39B8
Malicious:	false
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_semibold.woff2
Preview:	wOF2.......<......xd..................................H.`H...X...4....6.$..$..(.. ?meta.#..`. 8.t[.w...O.....m...ElU6......#..@dc..~.....1D'I@=h...3.m...................w'.H....^....P.P. .("...Y.K..4...i..R..Y.WH1..27..b..J.N.....C.C..'.h...{.f.8.2K9...[&...i/>b_8@..yX..q..=Qw=.......\Li.t..Q.....`Ov1.i.y............q..4#.(a.7...A8n.\|b...{o...Q.0}w.CL..ft...M.b...p...(.s....19...L....l...k.KJ6n...7....FZt....\|oc.n=l......5~!p.1...SOX.+.dn....Be.s..}.T..'.......4y2....,u..+U..]..~~.$..O...z....r.dEg.......<..yN%Q%8}...a.qu..]M...zcGwY...q.!#..,..4......n.X.W..B..s...i...B.`.DD"..b........c1....24w..\G.p....~.4.....M.^x.W.......[.CbS..b4.Q.c..N.."..._....t.-...F...q 'W.O..I......MjBX......?.nF......Ih.y..b.P.S..A..H..l.v}d.m..~...7.<.?..../...,$.).m&.."Tw....?.v..m..k>;v.Hf...c..."k......$;....Z...../{.........K.~."cXa..aQf.6[.U....>...d...P....j.diUI.'1...{.w6w.%.P..U....m.X..).%..K.......Z.Pr.2."...66`#kd.....U...E{.U}..^{..._..;..W).

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1015)
Category:	downloaded
Size (bytes):	917113
Entropy (8bit):	5.3953864921990276
Encrypted:	false
SSDEEP:	6144:diNd6M1EGJzy7bbOUn8o/L0Kl21E7+oTuOCsPdqWuTjebERuo9qixj9qDNixjaP/:8Nd6eEGJzYbaUnl/Lpk1E7oc+HCXPUBG
MD5:	F7E4F0D782AA7D65A28B01A77784BD23
SHA1:	56AAE8C1E7957107737AC7ACDEEF5336C3CA0138
SHA-256:	4784F949156E9BEAB6C6D15D0448D9C157B37B71F6346583DD0BE5EC2ECF81D3
SHA-512:	7063C09C681202DA288CBF8C4E71B5FC565E6BE537CA0CEBF68F3F9E74356E86FA66AA5BB3DFC861E3C76AB08001B343248344FD21E223A647C4AE668448CF50
Malicious:	false
URL:	https://apps.apple.com/assets/vendor-f7831efc0f48f466cf3b635d969ac06a.js
Preview:	window.EmberENV=function(e,t){for(var r in t)e[r]=t[r].return e}(window.EmberENV\|\|{},{FEATURES:{},EXTEND_PROTOTYPES:{Date:!1},_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!1,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0}).var loader,define,requireModule,require,requirejs,runningTests=!1;(function(e){"use strict".function t(){var e=Object.create(null).return e.__=void 0,delete e.__,e}var r={loader:loader,define:define,requireModule:requireModule,require:require,requirejs:requirejs}.requirejs=require=requireModule=function(e){for(var t=[],r=c(e,"(require)",t),n=t.length-1;n>=0;n--)t[n].exports().return r.module.exports},loader={noConflict:function(t){var n,i.for(n in t)t.hasOwnProperty(n)&&r.hasOwnProperty(n)&&(i=t[n],e[i]=e[n],e[n]=r[n])},makeDefaultExport:!0}.var n=t(),i=(t(),0).function o(e){throw new Error("an unsupported module was defined, expected `define(id, deps, module)` instead got: `"+e+"` arguments to define`")}var a=["require","exports","module"].

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 48 x 36, 4-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	185
Entropy (8bit):	5.9780303893393345
Encrypted:	false
SSDEEP:	3:yionv//thPlSYLl+1IHCRsHrXLRa+dn/23rIIGU5thNnkncm3w4qtmkW7PXl0VMa:6v/lhP0YLkyymvVGtjnUnRq0kW7N0xVp
MD5:	07505E9DAC6DD922116F038EB58C9B88
SHA1:	4DAB9005E4603F76A6FAD92FE78FB9C92D05B62F
SHA-256:	C4DB75F643BB4DD47E39A9601FCC0A14621B588D5E4EBE987EE4828120BDE791
SHA-512:	5A94B97148037E9A25AF768AF67A1AD5D4959E5D5C216DC5353FB159630302A74A990CCA20F787C024C6B7229A12920B287A88A4063514FBA534E7D1DB094C11
Malicious:	false
URL:	https://ssl.gstatic.com/store/images/regionflags/us.png
Preview:	.PNG........IHDR...0...$.....=k.9....PLTE"u.#t."s..OO.PP.OO.........o.......tRNSJ....J..J.j.\...DIDATx.c`T..ec$.. .].A...1..Z..!..%p.A....H...0......*.....]...Qp...al.....IEND.B`.

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 6956, version 1.0
Category:	downloaded
Size (bytes):	6956
Entropy (8bit):	7.9301019807594955
Encrypted:	false
SSDEEP:	96:f1e/kvt6gM3QbPUKG6JPhlVrql6qKrPIaM4SUQ6rrLk6aa9qf4zZ260qv6Qo7HvF:deEo7dyVhlIDerrLZ9tzqqpoLN
MD5:	CE6FF493B5FCDD0A6B6545A6A51A9DB6
SHA1:	D1D22FBAAF1C286D4008CD63BC3CCA0B14E38EFB
SHA-256:	58253AE21FD05D80B422BF5538140E1E6B3D96D8D35DDAB958519FBFE25E302F
SHA-512:	B6AA2A36E512B4E79306546CBF93C5B9807F1413EFC62AC826AAAFCBAEA8D439BD1F2374397A900ADA1C5672FCD8E9EBEC61FDE7A2B969315ABDD677DEB20E7E
Malicious:	false
URL:	https://apps.apple.com/assets/webexp-iconfont/fonts/webexpicons_text-ce6ff493b5fcdd0a6b6545a6a51a9db6.woff
Preview:	wOFF.......,......).........................GSUB.......3...B....OS/2...<...C...VG.P.cmap...........ri..glyf.......+.....>head.......3...6 r..hhea....... ...$./..hmtx.............#..loca...8...L...LlVs.maxp........... .O..name.......:...v..P.post.......J...5.<..x.c`d``.b.c.a`tq..a.``a....cNfz"P.....i. f.....#.O.x.c`dY.8...........a+.f.c.g.......XA@.k...[......=`(a.....f.......C.x...YN.Q....Q..ypdr 1...].......Z..C.ex..t_....G@=<..T?T....._.}.o...mN.QSK3m...A....y]V......u-2..OM...V\|wJ.3..K.>....3a.K....n.c.%+.....u..-w.\|..m..7..lWE6.".W..":BE......9..Zt.z..S._4.h..-:G##3.FfL....132cnd......+#3.Ff.[L.z..5.h1u..b...b...b&..gy3.,.F.......\9_....x..Y....u...{f..9v...cwfvf.....E+V'..!...I...G..E....eWbs..0....#....G.6.W.6...E q.........]$.H..3.........{.{...C.w.>..\|..9..2Od..K.........(..\|.....5.....!...g)....38NFB..mc..jz(.D.n?zar......T<..F.X<iXtfhL...J%..p...Or.p3.\/K<.s.A..Q.K....I..m....n.[..~....z...!.{A=....n?.dj@%...+.........L....hD.._........2..

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1712)
Category:	downloaded
Size (bytes):	36091
Entropy (8bit):	5.4119579948757455
Encrypted:	false
SSDEEP:	768:HHDbbsRcFS5/31QXdmqEuYJPCczqHkcBFuqvQxEbXV1uJVNFIzupmAAWAvEtcbOJ:431QtmqUKNrBwCVcXppmAAWAstztNFj5
MD5:	10DB776E458941422BDBDC88ACA3D777
SHA1:	91C5EABF89C6A2201032BE7AE8458B81D60DD622
SHA-256:	CA4F4BAACE7F4E25DCA986A1B5CE0664072D6DAA539F9E818AD5FF22328D65E4
SHA-512:	7D7C6AD47DF643EC70B1DAF841C24CFEB7171F044621FEFAD08EADE04AF123C311883FE722B7A2B08F5196BF483569A56BB52515BE8C1B0F3AC6539046B5D698
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=_b,_tp/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.Npa=function(a){let b=0;for(const c in a)b++;return b};_.Opa=function(a,b){for(const c in a)if(a[c]==b)return!0;return!1};_.Ppa=function(a){return a.bi&&"function"==typeof a.bi?a.bi():_.ea(a)\|\|"string"===typeof a?a.length:_.Npa(a)};._.rn=function(a){if(a.fi&&"function"==typeof a.fi)return a.fi();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ea(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.db(a)};._.Qpa=function(a){if(a.Im&&"function"==typeof a.Im)return a.Im();if(!a.fi\|\|"function"!=typeof a.fi){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ea(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.eb(a)}}};.var Spa,Dn,aqa,

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9060
Entropy (8bit):	7.976433288785451
Encrypted:	false
SSDEEP:	192:YrL4HF6Tj4qE56uPel70Ps1y+O/m4lYAOtjSdUpW1yU2yRx/qXu5uj2UjGU4qb:YrvdE56ueIPTaAKjSdgWF9RfUjGU7
MD5:	C66A794F83E0B04847520FCEEDBC96E3
SHA1:	10CAE1DA6D6886EF29E96343AC43B4787016FC51
SHA-256:	575ABDD39A564E120D980D8DC1736FDB1748F529ADD9178F4C4C7FE7224E066E
SHA-512:	A23FE4B168CBF4411E13256BB8926F8F6748FC44D4878439D05732304A450C5C5F1BD6523B0B09D62B57BC269972B5EF25DECAB52447438E4EF5AE6EE240CB76
Malicious:	false
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource126/v4/d0/99/00/d099001a-0f42-0414-f655-2b81dff4201e/da8ab394-b67e-4de7-9785-915ea0fe254a_APP_IPHONE_65-2.jpg/230x0w.webp
Preview:	RIFF\#..WEBPVP8X..............VP8 ."...........>.J.I."!.LUL4....~.Kn.....`/.5`..d......0.m...\|......yr.1......N...o.i...'..m.....8.....>t...O...>....5.....O.....~.^......W._.F.#.7......=:.%.}..._...\|..2...3..._...o.......?../._.^...?v.....w....CW.6....Cb..'.n.o..%..j...oA.......%+..o(.v#.h.R+......@..s.....,.......iR}.S.....a..X&l...@..T5.\..._..).Z....hf..q....O..Zh....+.z..DB........L.'.}H..el.....5.&.Q.O..(.l.#./EM3..QU..Qr\.68.b.....k.....iDE.......~(....=....<9ooS.x..M.b.#.,{.Q.."r!..2...d......b.Bv'..\.._.;..j..v..?...xK3."..$M..Cd...47..Ev...M.5.v.....P.@..L...wn........n..y......?....o.%{.A..x.....Jm20...Y..`.#.+.MBG..{.Yk.X/.M!...x...Q......IE(...........z....En9............Pt3..H@...Q....2........7..a4/.B.^i...}.-.e.f..o).8Z.q.~.Eb/..q.)......4l*.".........j...F'.z;.G'..G[[x...x...Z..=...e..y.....K...>m..V..b..#`/P~...3..=YG.SB.I7~hyUQ...!.U.I.;lbg....J1..PT..W.Y.3..$e5F....._....i.U.qJ..4.....v._...j...v.U#YH.c=..._{.N...JCN..5.

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
URL:	https://c.s-microsoft.com/favicon.ico?v2
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	10268
Entropy (8bit):	7.976305561250909
Encrypted:	false
SSDEEP:	192:u0okuRcas/S9gZj9R47fOxjzVbfF/j2o/81TB8rvrrDSnIAT6kTwh:u0okuRcV/S9gh9e7E3VzFbCorrDosz
MD5:	6CA37269D896136472A6A0ACED9B04B4
SHA1:	C0FAAF416776C9B0528EA82CD6BB9D0574C26273
SHA-256:	FCB702F59C90EA20D70FE8EB4B56FB631CE38C4D89C6F067CC7109FBFCDF2DCC
SHA-512:	A56E7416C08A4F2743C7429503DC3ECB6746B044FB9D4DFC32F4C68F23EDE80899E8D26D4085EC0F5EFCD64571DDF030AD7C83B1454B6D1BF797109BB26730C9
Malicious:	false
URL:	https://is1-ssl.mzstatic.com/image/thumb/PurpleSource116/v4/c6/21/20/c62120b8-b72c-ce93-c754-aa37ce4d37d6/6720fe7e-df24-4815-a8f4-b0aef0659a33_APP_IPHONE_65-1.jpg/230x0w.webp
Preview:	RIFF.(..WEBPVP8X..............VP8 .'...........>.L.I..#...K.x...n...4..et!...U...s...E..}.............Z~......=.9.......E.O@...e.../^\.../...\|f..D...U..]?..O....5....W..<j~`^..w.O..B~.~.\|.~....[.......h.....w........?.....}..........@....^.........]...^/].IG...-.:....U@.B^._XE.S?{,........^.Z.....(..BQG....}~..1.F.i.o..%v....ho...7..5..B;;..ln.O...R.....e.#S.\....98:..0x\=>...~.z.&.{.....1......`E'.c....@X.l.M.Z0.3_(..<..M....7...e..E.T3.".M...Pu...0......^]t....R.....I7....B/.`a...(......=...I..qh.x..V.F$.Xp.....m.\|..C"+.^.........qw.\|LQ.d@{.;..9.Wa.V.......A%...6f&..."Z..h...=][Ci....$..4Fb...s.......Gw.{..n..Z.w}p..BGg..Y...#YOu....Y.7....dm(.......a........`Av..]rK.w....O{......7-.ub@.PX..?.].=..Emk...,....;....g....'.R5#.._<..4...'#.`..'T.....f....fI..~....+..[........U.>.B%W.PH@...c...X.2.j.{.h4."..m.5m.^I.,e..-.....-.^rk..B....ZW.l.}..1.$.?$.......%j.TOE..:gnXI.z..._q.F.I.......7..l7R.....-A.E:.'./...]_{...#..#v.B...\|.

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	37564
Entropy (8bit):	7.962934539665607
Encrypted:	false
SSDEEP:	768:OwoSQdgxtwSFVcBULLwPSwwtTdiqsS4QhabMUNHzNJ:wd6uSDcBULjHTdiSXhfy
MD5:	21EAC75763F5C2012DDFEEB866FCD348
SHA1:	526E0BAF20277F985072DEBDAD9CBD7A20B44144
SHA-256:	7D91F09A449207296941E6E5AADA5FCA26942BAF69591DF1936B9EA28C59FC3F
SHA-512:	DF9D6E9F47F3D71FC709906B72760EE2A696881A30E29CBCE0F7F1C97F4B0B35C9583B94169037175E9D0846DFD80838532CF96743D833B7283DF66D1D79AED6
Malicious:	false
Preview:	RIFF....WEBPVP8L..../..I.M8l.F.FNn/Y.._.<.BD.'.....n.....z..w.T.....0.]u.T.......A,..].ou7.......l........Zd.&@...... ..#"...."bd:sIl[..!I............K@.".......%.8/...6`@'i...XZd..K\.%b1.A.)q?.'...N.U...1.l....=..-0.D_.i..}6.........0.V..$.p.W.....#....YHR.=.....K"2..WU..1?F.a.&nRK..l{.F....92s....Y....#.0".&.#1.m.....D....;.s...i.'..t/I..1.e.Yf.$.93...g.X.c.d.W.5..u..\.oI....%...E...Zl-....)nO..A.....I.Z.T.R.I.-Z.......,..o..c...;.V.Yk..T.J....B-N.?jq...g.......7..u..V.J.4.%..4,.?.J...K.....K.R.fa.%I....]..W.~\.$iY..U..4.)VZ.IHQ.I..C>d.L.r3..J..r..W...y.B...Z.}mo.....]..x..._.n%UEJ3....o>..x....E...am...@(3.. .8&>..dr8b..X..#.b8.Xb..F..b:.x.....!........Y...~,..%z..o..g.qu..2.^k......b.\9..t~....;f.........7..@mL..~...b....8Y....V.l..'...@.z....V.q.#.n..:i...!.o.~.. . ....j?....H....n;.......Lned@.k.}8).1`...bO.....5`..........22..............@...`..t..u@....x:V.........W.....2....kw.....J..}S:\|...4/W .............}$......v.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	4.952963038414406
Encrypted:	false
SSDEEP:	12:UXv7Fc4DpWNRKL+BK/sgl9hrIYerznR3zueIDRTLG9fkVlF38LG0DAvYodXotHNu:u6oTTlrIYevhTuKtLG0MAodXcNu
MD5:	2DFF575911FD65E601AC64F87F07D5D1
SHA1:	AE28A08E8E333C9234AD0D024D0865E5E36C5B2C
SHA-256:	7DF89772DEFA309D97987A7D985ED3F0DA91D81180FE69BB11DA8A8B181B418D
SHA-512:	3E6530272A6497738135CE998D2221588C487A27F20BD3745224F3FA43FDBFF8A2C8DDD42709B01B1CBF8FCE8EB6DC1EC9FADFE5FCF1AAEF0DE5B18CAAA6CBD7
Malicious:	false
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-42d04e97.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const n=function(){window.MusicKitComponents={version:"2350.1.0"}};export{n as g}

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	9946
Entropy (8bit):	5.303383252274076
Encrypted:	false
SSDEEP:	192:NdbWsWxwiKpBpVyPPjg9bt9MVzclvs4oRL19n3kufDi/9secuFjel:LbWsWx3KDXR9THl1iL1l3kufG/9sebjS
MD5:	9BB28E4E947B15C91F9178EFF5B23264
SHA1:	87F5AC3AE29A7455DD00F79435B1D91F664F0395
SHA-256:	9FEC8921027F561C8BD0FDF17C244E35F26ABA8E336571597FCCCD9D42D7A0CA
SHA-512:	4566D611CDC37D0F4C34D36ABA45AF69036C4A9E155FAAEC80D70B20C24555A319C8227377D9AA7E7EF02077C2E83C050DB8BACCDBF48417D8772F64818AA7A5
Malicious:	false
URL:	https://apps.apple.com/assets/chunk.722.c70bd733e7b77d8198f0.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[722],{32722:function(e,t,i){var n=i(24178),r=i(76588),o=n.SC.attachDelegate,s={setDelegate:function(e){return o(this,e)},localStorageObject:n.tO.localStorageObject,sessionStorageObject:n.tO.sessionStorageObject},a=n.SC.attachDelegate,c={setDelegate:function(e){return a(this,e)},makeAjaxRequest:n.L5.makeAjaxRequest},l=n.SC.attachDelegate,u=n.SC.hasAnyKeys,p=n.SC.isArray,h=n.tO.saveObjectToStorage,d=n.tO.objectFromStorage,g=n.P0.exponentialBackoff,f=n.EE.valueForKeyPath,S="noTopicConfig",v={blacklistedFields:["capacitySystem","capacitySystemAvailable","capacityDisk","capacityData","capacityDataAvailable"],compoundSeparator:"_",configBaseUrl:"https://xp.apple.com/config/1/report",constraints:{profiles:{AMPWeb:{precedenceOrderedRules:[{filters:"any",fieldConstraints:{clientId:{generateValue:!0,namespace:"AMPWeb_isSignedOut",expirationPeriod:864e5}}},{filters:{valueMatches:{isSignedIn:[!0]}},

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (34807)
Category:	downloaded
Size (bytes):	979639
Entropy (8bit):	5.674930087580839
Encrypted:	false
SSDEEP:	24576:Ba1yVLnfFGOFG1JG5nLqSf9anfR7tbDh4epIsc7yqJnGkFWsw4co+rMJLqbzy0zW:Ba1ELnfFGOFG/G5nLqSf9anfR7tbDh4L
MD5:	D50D8F02456154511DBCD63BDF8F8619
SHA1:	56BDD1680029947660B7E2C34C0EDDB6D3E7F22B
SHA-256:	0B5230241581B5D0EF83546245A7F4F01D3A06F6AA59B4E319207137C1822FC5
SHA-512:	42D7BAA321D87CECA95B9FB87379B50DB2A10F2B0D908AE310E79FE77316D30D10B29DA4A00EA672089C55FB11A8CB488A257D780B82E7294DC71A36D4EEED18
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=ws9Tlc,n73qwf,GkRiKb,e5qFLc,IZT63,UUJqVe,O1Gjze,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,WO9ee,mI3LFb,m9oV,z5Gxfe,ArluEf,IcVnM,fl2Zj,vrGZEc,wW2D8b,j9sf1,LCkxpb,kr6Nlf,O6y8ed,PrPYRd,MpJwZc,NwH0H,OmgaI,lazG7b,XVMNvd,L1AAkb,KUM7Z,Mlhmy,pYCIec,s39S4,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,pw70Gc,EFQ78c,Ulmmrd,ZfAoz,mdR7q,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,BVgquf,QIhFr,ovKuLd,hKSk3e,yDVVkb,hc6Ubd,SpsfSb,KG2eXe,Z5uLle,BBI74,VwDzFe,MdUzUe,A7fCU,zbML3c,zr1jrb,Uas9Hd,pjICDe"
Preview:	"use strict";_F_installCss(".EDId0c{position:relative}.nhh4Ic{position:absolute;left:0;right:0;top:0;z-index:1;pointer-events:none}.nhh4Ic[data-state=snapping],.nhh4Ic[data-state=cancelled]{transition:transform 200ms}.MGUFnf{display:block;width:28px;height:28px;padding:15px;margin:0 auto;transform:scale(0.7);background-color:#fafafa;border:1px solid #e0e0e0;border-radius:50%;box-shadow:0 2px 2px 0 rgba(0,0,0,.2);transition:opacity 400ms}.nhh4Ic[data-state=resting] .MGUFnf,.nhh4Ic[data-state=cooldown] .MGUFnf{transform:scale(0);transition:transform 150ms}.nhh4Ic .LLCa0e{stroke-width:3.6px;transform:translateZ(1px)}.nhh4Ic[data-past-threshold=false] .LLCa0e{opacity:.3}.rOhAxb{fill:#4285f4;stroke:#4285f4}.A6UUqe{display:none;stroke-width:3px;width:28px;height:28px}.tbcVO{width:28px;height:28px}.bQ7oke{position:absolute;width:0;height:0;overflow:hidden}.A6UUqe.qs41qe{animation-name:quantumWizSpinnerRotate;animation-duration:1568.63ms;animation-iteration-count:infinite;animation-timing-func

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	170
Entropy (8bit):	6.676048050841229
Encrypted:	false
SSDEEP:	3:0Zrwlp8NJrXNwje/UwbgXwYIlGKZqvqJAy7ZrUilBCkzX/BfTA1D31n:0ZklpUXNwjecwb7lGurFUihBLiDF
MD5:	461204FBB9CB6D19F763B8EAECDC01D6
SHA1:	95354D81968469C5A9EE2DDEF3C84B9F788802D0
SHA-256:	FD29716389D0077F1D88C7ACA6A408FDB9E27A9D33FBD74B265CFF2F6A2E3786
SHA-512:	B7BA5AB186109447B9C6317F7E9EC8BCBAEF65B1A0EC96FB12334A3C0DF97430B142B2C3C7011C0B7D09C425C8E673CEA79F4EF126FB01BB0D8E23409A177BEE
Malicious:	false
URL:	https://play-lh.googleusercontent.com/IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw
Preview:	RIFF....WEBPVP8L..../........G...C-....13+N.8....3.q.G..M..G....~.4.2IP_..)......Z:.}.....$...... O.....,......QU....T...$.?%.....z);I2Z9...=$...{./u..2p.cj.\...%m..

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 296x296, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8956
Entropy (8bit):	7.972053517151453
Encrypted:	false
SSDEEP:	192:UlbCKATseTe8r8oy/zF7Ntufqluv4rPoxSYlOK5cbFBOmAq:UlbCKk3rg7haylKxSAOwcbFhl
MD5:	377CF0E1FE167DE18CBDAB4B67D2E326
SHA1:	ECA8A9C29E2AE14A1DED33160286057C424ABE70
SHA-256:	24566A4C7B24A46CB1B156E593AB4C98E40791CC5E4A49A410A2AC5860509A22
SHA-512:	A86583215D6A29E00068FEFA905B94FCCF8C53F95409849D23F88EEF0DAC463D2F130684ECA77917BFC27DA1D8336FDE7C817C825B4A228BE1835DC981F8D9CF
Malicious:	false
URL:	https://play-lh.googleusercontent.com/n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw
Preview:	RIFF."..WEBPVP8 ."..P....(.(.>A .D..!.i5.(....p....C....}+....w..3...?`."..?r?C....._..a......~......{.........P.......I...............~@?......k...^.....1........./....p.R.V..v.....?.>C...../.O.<.t...D?.}..........x...]./..}A...[........(....../.?.?.}......C../........_.].......>>.j.......w......~......{..._........7.#.....................3.......bOk.G.m.G...k...vg..>.8...+.k.y...9...........\|?&........^x.."w.w...T.Y............"At..r.b.a...vr!.K.nFQK4.W,....Yc/#.c.R.....;1P.+"..>.3......'....A.......O.7...r.Ou..36,.o?IrE8.g.V......#1X.X.D....f%...O._....V..DMi...".n.L...ee...r..HW...R.....&..\|..{..U....p..,.rK..D....f....N8..n...c..v/....l.H#..mT..N..0&WG!.......~\.I.)P:.u...{#.Y.......I...#.J.2D.0..bD=`#UnZPgd..>w.?.....O.......#.t(f..Qs>[....[.L.W\..D..9-....H..W.U.%.....O9K...M..6.T*'PJ.C..9...;+5G..O.ITE%+.p....~..W..2.Z...7..F!.......s6.[<.p.`6..s.X.!...x..({.. ...L.m"..o.a..a....W..<.t.....c........E....K.P\|P.v2!GZ......S..U..N..(

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (925)
Category:	downloaded
Size (bytes):	1367
Entropy (8bit):	5.2958690982618135
Encrypted:	false
SSDEEP:	24:kziXJWvTfRFbBB2/FyY9yQXKzNAv1GbHOGbL67ejDBZEe7equXamey7Mw/Uprl:kiovTbOwNAv1GbHOGb2SZUKdq7/Uprl
MD5:	F9A8D570A6829F75D7CB43E74066DEE5
SHA1:	3465F976B8B39A44483BE2E8C85EFE0BC263A4F2
SHA-256:	63D5A5A8736CD430980C90FC9B0F465DFF789925FE6FE4F724731EFA8E5A370C
SHA-512:	51D98580104FAC09136DC0A0C6141C3F69D7E6B059B8B25A3A2109C68389F464355410E7B546D548B94CD5CC8A251ED714AFAAF7D889539FAEAB7FBD1F99C30A
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/ck=boq-play.PlayStoreUi.lpZNirUk6LQ.L.B1.O/am=07MNBg3AAgP_kb4HWw/d=1/exm=A7fCU,ArluEf,BBI74,BVgquf,BfdUQc,COQbmf,EEDORb,EFQ78c,GkRiKb,IJGqxf,IZT63,IcVnM,JH2zc,JNoxi,JWUKXe,KG2eXe,KUM7Z,L1AAkb,LCkxpb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NkbkFd,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PHUIyb,PrPYRd,QIhFr,RMhBfe,RQJprf,RqjULd,SWD8cc,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,XVMNvd,Z5uLle,ZfAoz,ZwDk9d,_b,_tp,aTwUve,aW3pY,aurFic,byfTOb,chfSwc,e5qFLc,fI4Vwc,fKUV3e,fdeHmf,fl2Zj,gychg,hKSk3e,hc6Ubd,indMcf,j9sf1,jX6UVc,kJXwXb,kWgXee,kjKdXe,kr6Nlf,lazG7b,lpwuxb,lsjVmc,lwddkf,m9oV,mI3LFb,mdR7q,n73qwf,nKuFpb,oEJvKc,ovKuLd,pYCIec,pjICDe,pw70Gc,qfGEyb,rpbmN,s39S4,sJhETb,soHxf,t1sulf,tBvKNb,tKHFxf,vNKqzc,vrGZEc,w9hDv,wW2D8b,wg1P6b,ws9Tlc,xQtZb,xUdipf,yDVVkb,ywOR5c,z5Gxfe,zBPctc,zbML3c,zr1jrb/excm=_b,_tp,appdetailsview/ed=1/wt=2/ujg=1/rs=AB1caFUEat6Ye8txL3wNTA4MJuZ9ziDSJw/ee=EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;Hs0fpd:jLUKge;JsbNhc:Xd8iUd;LBgRLc:SdcwHb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;Rdd4dc:WXw8B;SNUn3:ZwDk9d;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:QIhFr;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:s39S4;nAu0tf:z5Gxfe;oGtAuc:sOXFj;pXdRYb:MdUzUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;sgjhQc:bQAegc;uY49fb:COQbmf;ul9GGd:VDovNc;wR5FRb:O1Gjze;xqZiqf:BBI74;yEQyxe:TLjaTd;yxTchf:KUM7Z;zxnPse:GkRiKb/m=bm51tf"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._.u("bm51tf");.var p7a=!!(_.Se[2]>>14&1);var r7a=function(a){const b={};_.Aa(a.va(),e=>{b[e]=!0});const c=a.O(),d=a.qa();return new q7a(a.na(),1E3_.oh(c,1),a.H(),1E3_.oh(d,1),b)},s7a=function(a){return Math.random()Math.min(a.qaMath.pow(a.na,a.H),a.va)},sL=function(a,b){return a.H>=a.ha?!1:null!=b?!!a.Ba[b]:!0},q7a=class{constructor(a,b,c,d,e){this.ha=a;this.qa=b;this.na=c;this.va=d;this.Ba=e;this.H=0;this.O=s7a(this)}};var t7a=function(a,b,c,d){return c.then(e=>e,e=>{if(p7a)if(e instanceof _.Cd){if(!e.status\|\|!sL(d,e.status.H()))throw e;}else{if("function"==typeof _.vp&&e instanceof _.vp&&103!==e.O&&7!==e.O)throw e;}else if(!e.status\|\|!sL(d,e.status.H()))throw e;return _.xd(d.O).then(()=>{if(!sL(d))throw Error("vc`"+d.ha);++d.H;d.O=s7a(d);b=_.wi(b,_.Dha,d.H);return t7a(a,b,a.O(b),d)})},a)},u7a=class extends _.Yp{static Ja(){return{service:{wM:_.n7a,metadata:_.o7a,wZ:_.m7a}}}constr

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
URL:	https://apps.apple.com/assets/images/supports/supports-Siri@2x-24823d6579e391abe63d240af5ed42d2.png
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1670
Entropy (8bit):	7.8767527471024845
Encrypted:	false
SSDEEP:	24:ph192w/y3IssGoCogO+MaZfU9LHAPwUtxrRiEEe/i0GI9E0cApv7R:/FEIsMaVogYsRiEEYGI9EzAx9
MD5:	4261C35A4740D97B2EA62DC1E730DE55
SHA1:	220A025A6B18C577508B7374741A9A58C2240022
SHA-256:	604C0FD6A3EA399AA08158490E254D25C68B0A89D2944C8E7BB9E00F4AC389FD
SHA-512:	5F7A46303F14AB9AD32353BE06DA9147EDFF298F09E02FD24F52322586383EDB8A42BDC821F603F11401FCE48778E492B4D04231260AD6B735F63E62A3A2867A
Malicious:	false
URL:	https://play-lh.googleusercontent.com/6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw
Preview:	RIFF~...WEBPVP8Lq.../?....Em.1..].?.E!....3...0v..\|...H...q./..."....AI#IR...0...=.Q$I.s.`......0..T.......@..j.P....{.....J.$..xx....<..\|.-.#........hv......;..\|.G...13333..Z..U...8.I..z..E..#..^.P)..l9....J.;.Ft.3;..wX.rh.6.g....m....6+;UR.m.Ie.......m[.........d..BF...p...H.]...=;..m.IJ....u..#..{...... .]..~...x.x.S..T...\@..Ep..Yr.J9\|..C:..0..[_....g.... .4X..~xd.z.K1V..65...!hs@....`....i;O=.U.Q.......q..V[u..6R..XM.....t:.5...hE....fX=......r.`....UN- .Y...U!....N.......3_z^...!.....(.J..................\.^.p.T/f....4...Y3.(.x9.s.+=.B..}...&z.-&..FQ........:.i.@.B.0z.=;.=..[.s_..St.(.+.....H....%....wF..&..C>.9..J..(l..E.I3.......B.<..+."~).....#.3Zn.%..J=P..hM...........q....NP.u.t.vo.{.Tg...`...v.A..j&E........f.^H.R...xRX..lB...CK....Fi[9.8w\|.".E.:T.E..`.........b.......jX.F^@.N.........z.4#...X..%..!...K.bc..,.(.2 ...)..U..XI.o...H=i&..+#.SF......F....`..%.!.[.....x].....a(.A.S.N.uRg:._.@.Z..>.n..N..BR'..$/...`TF...

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:H0hCkY:UUkY
MD5:	AFB69DF47958EB78B4E941270772BD6A
SHA1:	D9FE9A625E906FF25C1F165E7872B1D9C731E78E
SHA-256:	874809FB1235F80831B706B9E9B903D80BD5662D036B7712CC76F8C684118878
SHA-512:	FD92B98859FFCCFD12AD57830887259F03C7396DA6569C0629B64604CD964E0DF15D695F1A770D2E7F8DF238140F0E6DA7E7D176B54E31C3BB75DDE9B9127C45
Malicious:	false
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8dqZYMe7mkRIFDVNaR8U=?alt=proto
Preview:	CgkKBw1TWkfFGgA=

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 97812, version 1.0
Category:	downloaded
Size (bytes):	97812
Entropy (8bit):	7.9978966269531435
Encrypted:	true
SSDEEP:	1536:MxlNoV+iuaRqgnUJ9gPxMZXFwme9Xvaw8aeyH17mP4bTJagZcXU4N/42Y/4g2H4O:MLNoVXuaogUQyZVPeB0yHB9bhoU4NrYc
MD5:	FCF85E1007388C2707C982FB27D09163
SHA1:	1329D694C10F4F8DC05AEF70257E93D0481ECCB5
SHA-256:	878C9752B9A516DDE472D30E4E5C57172B2E766CF21F336DF168E2302382CA0E
SHA-512:	B1ED620469C913144DEB20BA1984DAC483112554ACE2320ACFA0F17CD529D3A0CA2F9B06AE0F7F819136842C798F05DECB16A2DCA77D126428FB0FEA9401344E
Malicious:	false
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_regular.woff2
Preview:	wOF2......~....... ...}............................$..H.`H...X...`....6.$..$..(.. ?meta....X. 8.t[.,.......?...t.!.......F..R.~..CL-8..C.F4..UW..3.m..u..1..[9...........\|y...o.......b.Z.....D..1.EL%E..".....iS.Rb].y..j...YBX..R05%3%..$..ZF..Ok7.~......lSR......6.e.....yz...F<..FU....Q..H.)....p".m.+..".~..Y.......@#.........tQ.y~..q92.c..GO.`..x..p.\|RD....7.....T.......b.+u\@.W:....T.u.... .AB.$>. E1.A......?.,.!m..).~e......gd.....v.4..i......<......^e.3.R.J.V4;_..{....tV..Q.._.l....E..,F..\.b.. ..............{..(......C.".......z{...g...F...h+A^...<..\..c..MP.J*..... ....Q+v.5.9E\.q...h..D..%"...p......}Z._..#..8A..w....5[.<\|@v&..1C...m3?w...n...r\|0d{....d./...[.-A.Crre .Ds.T....F.5U.Ly....#rs..?...7%@......a2.B.b7L.....>.=.. ...~..2..o........mo. \C@5W.6....6.i....w...@s.ww+.F..D..h..0....k..........H...l......AR...l.X...n..d....1`T..b`$`...........i....?@s..#. .A0..c..e...6j.....="[T.B.......W?.......}...7.,...5...n..6...Z..

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2087)
Category:	downloaded
Size (bytes):	196040
Entropy (8bit):	5.47883759404577
Encrypted:	false
SSDEEP:	3072:edZlPb0aL/kx2stKlcNje7rm7i+BgTQqO8bs+yF9rZpAMV7x1xrW5FzZluejMe+J:edZZb0aL/m2s6cNje7rm7ZBgTHO8bs+u
MD5:	C8B8A0A3B94E08F7DE02AD8EAF18AF16
SHA1:	4CBA8D189ED2A10F2EF8E805ABE278A84B0F294D
SHA-256:	494E2C79D5C9DB1B11316D35C471B010A66796D71D993CB077E5A971F4645CDB
SHA-512:	929BBE2C3DC2D9876F27AB4EFF056A2F3B1EAE3DA88906792B694E2B6D4051717E1895FA31CE535E00F66F7BE9A9CA98D48ED0ADE45D128387C6CDDDD25EBD1D
Malicious:	false
URL:	"https://www.gstatic.com/_/boq-play/_/js/k=boq-play.PlayStoreUi.en_US.i01VZ2xuVls.2021.O/am=07MNBg3AAgP_kb4HWw/d=1/excm=_b,_tp,appdetailsview/ed=1/dg=0/wt=2/ujg=1/rs=AB1caFUAkMPhg9Rta9WDWI3JVQP07HHUwQ/m=_b,_tp"
Preview:	"use strict";this.default_PlayStoreUi=this.default_PlayStoreUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x60db3d3, 0xc0b0034, 0x3be91ff0, 0x16c1, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,daa,haa,laa,La,Oa,naa,oaa,paa,qaa,Ua,Xa,saa,vaa,kb,Iaa,Kaa,Db,Eb,Oaa,Qaa,Raa,Vaa,cba,jba,kba,mba,mc,lc,pba,zc,uba,tba,vba,wba,Ac,xba,zba,Dc,Bba,Cba,Pc,Dba,Eba,Mc,Gba,Lc,Nc,Hba,Bc,Nba,cd,$ba,md,bca,nd,fca,hca,lca,mca,oca,pca,tca,vca,Cca,Dca,Eca,Ica,Rca,Nca,Vca,be,$ca,ada,cda,ne,jda,lda,se,mda,oda,pda,tda,vda,yda,zda,Ada,Bda,Cda,Fda,Gda,Kda,Qda,Rda,Sda,Uda,Yda,Zda,$da,aaa,aea,bea,cea,dea;_.q=function(a){return function(){return aaa[a].apply(t

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2840
Entropy (8bit):	7.8803852518960795
Encrypted:	false
SSDEEP:	48:r724o8WCI7otjpJlgP8pMjdg8XgFxi5HyC+slXUutOVletFxksBuN/X+cy2FgVSv:mf8WdotjpJlgPcMgissf0V2F6N/6ZZY
MD5:	D1A7C5BDAE96E3CEF5D2EA33660454F5
SHA1:	A208B8BB9D376CDE199CC48D75EBC3E60CDEE75F
SHA-256:	83153E7F75101015D69EB7EF66BBA3500B6EC29A1DC6B889DB5D1A2E7F314956
SHA-512:	144E1D2FEB5B5203E7A39C7F41298009BAD98F4088DB823E2BE7F98D232052C89C58BB790E97A35C2BCF76F033F23753CB4E0CC3F6B7F8E68F25F6879E5EE2DD
Malicious:	false
Preview:	RIFF....WEBPVP8X........?..?..VP8L..../?...M(n.6....t....".?.\|..`....b..t.u.....m+.^D.T@D.E.....6.$'..0.0/.....m#I..3..#bf6......Z8....9.3l.jL....{.g%: W%.....W.P.W$kU}......ke..>..,m.vL.t.....U.c.m......fi....m.m'#...{/2...X.....m..m.V...1.m..m.m.m..i{..V(.m..\..s..m.T.hQ...Q..#.H.m...{..k..........r.....Te1j........={..[L..<..8.4.}....1..>E......,.,..k......y..K..r('>M..=.i..jH..K...e.v.^q.?.;......f.....N.6..U.'........I.X.d2....6....8pc..=.....W.........`b$ ..b.,F..LmRKG....Em...}g....:.G>:...u..A.3.@.FJ...H..d.Rv.@R.f.u5.....~....v.'/[.."......I.38.,......@..3..nmy\z.y...m.y.y..A.`@.DY.L.S....p..h.. JLR.Rv._8{..'N..rN..o.g@D......nhd....(..B.....)-MP.......k..`..<p.:[P.(....!s..34b....if%(.A..PY.K%....W.s...._..wN"B-..\y.cM..!.......]. ...A.C. ......A..V...[...]ZA..E.Ht2..........v(..$.J..t.....f..!@bG.@. .0iNf.D.?T.......f.s..bi..o...Ken..9..D..b..I...p.....OC.......$..0s.e....j].VR..t.~w.._;..[E%.f....`b......5.Pg}z179E..0....

Static File Info

General

File type:	HTML document, Unicode text, UTF-8 text, with very long lines (399), with CRLF line terminators
Entropy (8bit):	5.28972074463718
TrID:	HyperText Markup Language (11001/1) 64.69% HyperText Markup Language (6006/1) 35.31%
File name:	ATT00002.html
File size:	13'088 bytes
MD5:	f55b2507d5de7a31e7f50a74c7804165
SHA1:	b67f93b6acb5e19c391387001234a0d2026494d3
SHA256:	1a143f058fb431286e81f95a2a42afaa128ba26fcdd57d43a53c30de552abf82
SHA512:	8c2bc0f0c571c0748e455c5c2fe0f70823065d36b73ba0cd7da1434ee457acb681d583284a080bcc1edb00ceefcc1d15b0a7fa7975bbb99b753fde85722a327e
SSDEEP:	384:0UFZRFIwn8ieqkBLFKFxql1prv1gHj/90a628:fHFql1pQ9sV
TLSH:	5242A041D3150A5361FAC9EDF05F375A54802649E3472BA4673CB6BBB9CFCB1320A39A
File Content Preview:	<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div><br id="lineBreakAtBeginningOfSignature"><div dir="ltr">Sent from my iPhone</div><div dir="ltr"><br><blockquote type="cite">On Apr 23, 2024, at 9:1

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 14:53:30.661540031 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 14:53:40.270944118 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 25, 2024 14:53:45.147949934 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:45.148026943 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:45.148139954 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:45.148351908 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:45.148375034 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:45.378711939 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:45.379056931 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:45.379086971 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:45.380390882 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:45.380461931 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:45.381695986 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:45.381803989 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:45.426079988 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:45.426100969 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:45.473089933 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:47.862092018 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:47.862114906 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:47.862524033 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:47.868669987 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:47.868684053 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.095388889 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.095494032 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.102616072 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.102632999 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.102854013 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.147972107 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.216007948 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.256159067 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.327457905 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.327517986 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.327683926 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.327728033 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.327749968 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.327759981 CEST	49738	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.327766895 CEST	443	49738	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.372126102 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.372158051 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.372387886 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.373199940 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.373215914 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.596088886 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.596179008 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.597796917 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.597806931 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.598062992 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.599505901 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.640149117 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.814368963 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.814441919 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.814582109 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.815170050 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.815170050 CEST	49739	443	192.168.2.4	184.31.62.93
Apr 25, 2024 14:53:48.815190077 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:48.815201998 CEST	443	49739	184.31.62.93	192.168.2.4
Apr 25, 2024 14:53:53.322695971 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:53.322752953 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:53.322825909 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:53.323066950 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:53.323111057 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:53.323162079 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:53.323482037 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:53.323498964 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:53.323893070 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:53.323914051 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:53.790496111 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:53.792728901 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:53.836901903 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:53.836905956 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.908514977 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.908550024 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:54.908643961 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.908684969 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:54.909836054 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:54.909908056 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.910404921 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:54.910476923 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.918657064 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.918750048 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:54.920130968 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.920254946 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:54.920293093 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.920304060 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:54.970558882 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.970590115 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:54.970624924 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.102580070 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.102674007 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.102731943 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:55.108134031 CEST	49741	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:55.108151913 CEST	443	49741	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.110137939 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:55.156124115 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.261836052 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 25, 2024 14:53:55.261910915 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 25, 2024 14:53:55.282068968 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.282284975 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.282341957 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:55.308325052 CEST	49740	443	192.168.2.4	23.35.30.151
Apr 25, 2024 14:53:55.308362961 CEST	443	49740	23.35.30.151	192.168.2.4
Apr 25, 2024 14:53:55.387231112 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:55.387305021 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:55.387362003 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:55.504888058 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:55.504945993 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:55.505007029 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:55.505217075 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:55.505234003 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:55.885426044 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:55.885904074 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:55.885926962 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:55.887166977 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:55.887236118 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:55.888573885 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:55.888642073 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:55.888962984 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:55.888971090 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:55.940782070 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.163657904 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:56.163717985 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:56.163791895 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:56.166013002 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:56.166048050 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:56.173397064 CEST	49736	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:56.173440933 CEST	443	49736	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:56.271799088 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.271861076 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.271924019 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.271949053 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.272147894 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.272208929 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.599608898 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:56.599711895 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:56.943475008 CEST	49743	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.943516016 CEST	443	49743	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.960156918 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:56.960213900 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:56.961210012 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:56.966171980 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.966221094 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.966443062 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.967566967 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.967639923 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.967817068 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.968215942 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.968292952 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.968374014 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.968482971 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.968499899 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.968656063 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.968696117 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:56.969041109 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:56.969079018 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.069341898 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.080173969 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.080223083 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.080333948 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.081042051 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.081063986 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.304776907 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.305089951 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.305149078 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.305223942 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.305486917 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.305526972 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.305665970 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.305896997 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.305990934 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.306098938 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.306333065 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.306478024 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.306554079 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.306588888 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.312011957 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.312221050 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.312269926 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.312664032 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.312870026 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.312894106 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.313875914 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.313940048 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.313945055 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.314016104 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.314640999 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.314730883 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.314968109 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.315037012 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.315160990 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.315181971 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.315267086 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.315282106 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.348143101 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.352123976 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.402982950 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.444161892 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.445095062 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.520153999 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.520656109 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.534495115 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.534614086 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.534672976 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.534701109 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.534787893 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.534835100 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.534842968 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.534939051 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.534993887 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.535001993 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.541533947 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.541582108 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.541590929 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.547781944 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.547836065 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.566292048 CEST	49751	443	192.168.2.4	172.217.215.119
Apr 25, 2024 14:53:57.566301107 CEST	443	49751	172.217.215.119	192.168.2.4
Apr 25, 2024 14:53:57.607803106 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.607825994 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.607909918 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.607942104 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.607964039 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.607989073 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.607997894 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.608040094 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.621104002 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.621376991 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.621432066 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.624519110 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.624593973 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.624684095 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.624713898 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.624752998 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.624814034 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.624943972 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.624988079 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.628156900 CEST	49747	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.628185034 CEST	443	49747	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.630081892 CEST	49748	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.630124092 CEST	443	49748	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.671569109 CEST	49749	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:53:57.671637058 CEST	443	49749	13.107.246.40	192.168.2.4
Apr 25, 2024 14:53:57.672569990 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672616959 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672636032 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672655106 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672671080 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.672703028 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672732115 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672734976 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.672753096 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672787905 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.672802925 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672821999 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672852993 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.672852993 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.672928095 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.672979116 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.673008919 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.673022032 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.673047066 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.673146963 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.673196077 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.737267017 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.737302065 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.737330914 CEST	49744	443	192.168.2.4	13.85.23.86
Apr 25, 2024 14:53:57.737348080 CEST	443	49744	13.85.23.86	192.168.2.4
Apr 25, 2024 14:53:57.784823895 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:57.784879923 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:57.784966946 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:57.785145998 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:57.785176039 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:57.840130091 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:57.840156078 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:57.840218067 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:57.840286970 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:57.840325117 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:57.840372086 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:57.840552092 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:57.840563059 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:57.840687037 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:57.840703011 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.009783983 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.010204077 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.010248899 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.011312962 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.011375904 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.011917114 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.011986971 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.012185097 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.012202024 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.055063963 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.176753998 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.177025080 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.177042007 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.178462029 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.178525925 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.179790020 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.179867029 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.184262037 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.184410095 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.184421062 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.184540987 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.184568882 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.188081980 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.188158989 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.188505888 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.188673973 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.188678980 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.234921932 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.234973907 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.235013962 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.235027075 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.235057116 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.235091925 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.235099077 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.235107899 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.235147953 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.235153913 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.236134052 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.242511034 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.242611885 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.242681980 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.243007898 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.243060112 CEST	443	49755	142.250.105.119	192.168.2.4
Apr 25, 2024 14:53:58.243123055 CEST	49755	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:53:58.254614115 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.254631042 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.365247965 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.446171999 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.485430956 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.485500097 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.485522985 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.485547066 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.485559940 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.485568047 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.485599041 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.485606909 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.485814095 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.485950947 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.486557007 CEST	49756	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.486572981 CEST	443	49756	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.487248898 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.487318039 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.487340927 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.487451077 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.487451077 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.487488031 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.487514973 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:58.487549067 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.487878084 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.489119053 CEST	49757	443	192.168.2.4	13.107.246.41
Apr 25, 2024 14:53:58.489136934 CEST	443	49757	13.107.246.41	192.168.2.4
Apr 25, 2024 14:53:59.241837978 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.241838932 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.241847038 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.241849899 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.241910934 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.241911888 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.242680073 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.242681026 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.242692947 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.242695093 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.465992928 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.466180086 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.466197014 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.466543913 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.466917992 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.466986895 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.467118025 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.468146086 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.468359947 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.468367100 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.468848944 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.469135046 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:53:59.469214916 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.508130074 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:53:59.553304911 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.290944099 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.291033030 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.291086912 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.291116953 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.291136026 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.291177034 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.292952061 CEST	49769	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.292969942 CEST	443	49769	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.298891068 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.340122938 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.522123098 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.522176027 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.522227049 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.522255898 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.522289991 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.522332907 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.522341013 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.522372961 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.522416115 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.528974056 CEST	49768	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.528994083 CEST	443	49768	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.566446066 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.566504955 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.566626072 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.566904068 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.566920042 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.790932894 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.791399002 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.791465998 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.791817904 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.795819998 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.795911074 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:00.796088934 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:00.840152025 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:01.033889055 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:01.034054041 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:01.035512924 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:01.035748005 CEST	49770	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:01.035773039 CEST	443	49770	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.235030890 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.235080957 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.235402107 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.235739946 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.235753059 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.465926886 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.466234922 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.466301918 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.467421055 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.467825890 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.468005896 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.468014002 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.468146086 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.575907946 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.720501900 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.720638990 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.720702887 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.720722914 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.720751047 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.720801115 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.720837116 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.720963001 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.721012115 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.721033096 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.727686882 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.727770090 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.727787971 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.735292912 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.735383034 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.735416889 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.740982056 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.741040945 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.741070032 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.797554016 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.797590971 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.830163956 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.830239058 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.830277920 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.833761930 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.834009886 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.834028006 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.841520071 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.841568947 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.841577053 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.856888056 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.856919050 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.856967926 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.856980085 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.857269049 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.864474058 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.872210026 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.872243881 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.872279882 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.872292042 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.872333050 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.879237890 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.886317968 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.886364937 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.886372089 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.886389017 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.886439085 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.893333912 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.900394917 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.900420904 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.900445938 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.900473118 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.900741100 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.907380104 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.907589912 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.907639027 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.907646894 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.918061972 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.918111086 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.918118000 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.918267012 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:02.918311119 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.918431997 CEST	49772	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:02.918451071 CEST	443	49772	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.485990047 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.486021042 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.486196041 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.486372948 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.486387968 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.514347076 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.514378071 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.514770985 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.515083075 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.515099049 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.711997986 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.712193966 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.712205887 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.712646961 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.712929964 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.712996960 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.713046074 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.713057041 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.738549948 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.739000082 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.739012003 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.739320040 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.739615917 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.739674091 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.739758968 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.739777088 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.754540920 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.787971020 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.949383020 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.949532986 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.949585915 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.950119972 CEST	49776	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.950131893 CEST	443	49776	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.961517096 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.961560965 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.961587906 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.961628914 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.961648941 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.961653948 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.961673021 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.961688995 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.961760998 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.968933105 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.976794958 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.976828098 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.976865053 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.976875067 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.976913929 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.984416008 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.992093086 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:03.992151976 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:03.992163897 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.034970045 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.071645021 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.075241089 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.075325966 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.075373888 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.171952963 CEST	49777	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.171979904 CEST	443	49777	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.188597918 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.188643932 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.188745975 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.194048882 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.194082975 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.423629045 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.423964977 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.423995018 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.424668074 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.425075054 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.425164938 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.425262928 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.425296068 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.469276905 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.663866043 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.664037943 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.664119005 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.664130926 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.664161921 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.664334059 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.664381981 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.664405107 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.664479017 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.664486885 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.673805952 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.673953056 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.674278021 CEST	49780	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.674303055 CEST	443	49780	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.733385086 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.733436108 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.733611107 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.734333038 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.734345913 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.959889889 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.960171938 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.960203886 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.960711002 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.961009026 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:04.961134911 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:04.961152077 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.004122972 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.006962061 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.183368921 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.183449030 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.183511019 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.183514118 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.183546066 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.183579922 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.183624029 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.183633089 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.183667898 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.185064077 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.185110092 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.185352087 CEST	443	49781	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:05.185412884 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.185432911 CEST	49781	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:05.300401926 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.300431013 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.300524950 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.300775051 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.300821066 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.525631905 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.525902033 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.525911093 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.527440071 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.527503967 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.527781010 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.527848005 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.527961016 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.527967930 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.581923008 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.750847101 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.750912905 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.750958920 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.750968933 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.750981092 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.751018047 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.751055002 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.753971100 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:05.754164934 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.755959034 CEST	49782	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:05.755976915 CEST	443	49782	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:13.245945930 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.245981932 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.245980024 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.246079922 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.246180058 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.246189117 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.246546030 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.246578932 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.246730089 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.246743917 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.584956884 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.585227966 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.585244894 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.585634947 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.585927963 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.585988998 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.586077929 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.589096069 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.589320898 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.589369059 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.589869022 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.590166092 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.590259075 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.628031015 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.628045082 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.643987894 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.955070972 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.955425024 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.955502987 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.955554008 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.955571890 CEST	443	49783	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:13.955619097 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:13.955631018 CEST	49783	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:14.068820000 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.068846941 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.068949938 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.069143057 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.069153070 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.293370962 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.293632030 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.293639898 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.294035912 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.294095039 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.294852018 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.294914961 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.295943975 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.295993090 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.296120882 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.340131044 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.349426031 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.349435091 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.395822048 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.592041969 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.592123032 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.592130899 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.599359035 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.599391937 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.599430084 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.599433899 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.599453926 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.607115984 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.607234001 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.607239962 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.614829063 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.616216898 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.616221905 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.622545958 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.622674942 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.622679949 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.630259037 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.630332947 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.630337954 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.637926102 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.638017893 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.638022900 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.678997993 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.702033043 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.702085972 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.705862999 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.705939054 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.713634968 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.713707924 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.721292973 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.721349001 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.721360922 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.721368074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.721411943 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.729051113 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.729160070 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.736742973 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.744476080 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.744502068 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.744585037 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.744591951 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.744709969 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.752187014 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.759840965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.759886026 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.760014057 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.760020971 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.760123968 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.767282963 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.770721912 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.770808935 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.770814896 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.777813911 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.777874947 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.777879000 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.784508944 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.784565926 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.784578085 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.791260958 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.791332006 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.791337013 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.798137903 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.798212051 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.798217058 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.804965019 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.805110931 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.805116892 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.812124968 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.812239885 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.812249899 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.816651106 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.816704988 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.816709042 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.821492910 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.821563959 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.821580887 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.825953960 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.826045990 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.826050997 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.830322027 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.830471039 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.830475092 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.834752083 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.834810972 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.834825039 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.841407061 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.841438055 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.841444969 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.841458082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.841556072 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.845881939 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.850250006 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.850297928 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.850333929 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.850339890 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.850466013 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.854855061 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.859147072 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.859162092 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.859208107 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.859220028 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.859287024 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.863629103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.868021011 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.868129969 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.868134975 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.872484922 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.872512102 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.872539043 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.872551918 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.872601032 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.877010107 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.881408930 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.881433010 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.881506920 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.881513119 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.881771088 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.885772943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.890259027 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.890301943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.890330076 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.890341043 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.890398979 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.894731998 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.897732973 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.897798061 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.897811890 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.901343107 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.901415110 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.901418924 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.905858994 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.905982971 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.905997992 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.910032988 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.910156012 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.910160065 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.914210081 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.914262056 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.914275885 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.918297052 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.918401957 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.918406963 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.922333956 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.922406912 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.922410965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.926322937 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.926383018 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.926387072 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.930222034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.930354118 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.930357933 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.932838917 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.933043957 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.933056116 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.935350895 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.935447931 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.935451984 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.937834978 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.937906981 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.937911034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.941602945 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.941663027 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.941667080 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.944169044 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.944197893 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.944258928 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.944262981 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.944324970 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.946556091 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.948987961 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.949013948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.949088097 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.949091911 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.949167013 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.951375961 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.953762054 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.953784943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.953888893 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.953896999 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.954087019 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.956120014 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.958365917 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.958390951 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.958556890 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.958563089 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.958718061 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.960602045 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.962773085 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.962804079 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.962909937 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.962915897 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.962989092 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.965008020 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.967082977 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.967114925 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.967143059 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.967148066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.967221975 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.969185114 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.970273018 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.970345974 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.970357895 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.972378016 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.972565889 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.972578049 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.974483013 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.974589109 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.974594116 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.976511955 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.976628065 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.976634026 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.978549004 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.978749990 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.978754044 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.980602026 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.980664968 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.980669975 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.982494116 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.982537985 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.982549906 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.984488010 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.984534025 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.984556913 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.986649036 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.986721992 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.986726046 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.988364935 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.988471985 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.988476992 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.990298033 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.990601063 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.990612984 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.992208958 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.992259026 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.992269993 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.995080948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.995105982 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.995214939 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.995220900 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.995438099 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.996937990 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.998785973 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:14.998842955 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:14.998850107 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.000668049 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.000691891 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.000725985 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.000730991 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.000966072 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.002448082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.004312038 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.004332066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.004450083 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.004457951 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.004544020 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.006062031 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.007834911 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.007859945 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.007919073 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.007924080 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.007996082 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.009536982 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.011255980 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.011320114 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.011328936 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.011333942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.011408091 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.013026953 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.014792919 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.014842987 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.014856100 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.017376900 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.017433882 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.017446041 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.019119978 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.019161940 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.019193888 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.019198895 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.019287109 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.020783901 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.022505045 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.022527933 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.022608995 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.022614002 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.022696972 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.024266005 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.025924921 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.025949955 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.026022911 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.026036978 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.026258945 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.027506113 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.029247046 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.029273987 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.029336929 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.029350042 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.029431105 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.030864954 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.032527924 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.032577038 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.032598019 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.032602072 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.032675982 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.034168959 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.035964012 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.035994053 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.036046028 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.036052942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.036103964 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.037355900 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.038223028 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.038366079 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.038369894 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.039844990 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.039940119 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.039952993 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.041408062 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.041467905 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.041471958 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.043128967 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.043204069 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.043207884 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.044504881 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.044569969 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.044574976 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.046046019 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.046159029 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.046164036 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.047545910 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.047640085 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.047645092 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.049055099 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.049127102 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.049132109 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.050612926 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.050683975 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.050693989 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.052041054 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.052126884 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.052136898 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.053474903 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.053791046 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.053805113 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.054908991 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.054968119 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.054971933 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.056962967 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.057024956 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.057039022 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.057043076 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.057090044 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.058337927 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.059747934 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.059768915 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.059833050 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.059837103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.059947014 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.061199903 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.062460899 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.062514067 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.062522888 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.063796043 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.063824892 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.063910007 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.063915014 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.064064980 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.065152884 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.066489935 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.066523075 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.066589117 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.066595078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.066728115 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.067790985 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.069072008 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.069098949 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.069201946 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.069206953 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.069257021 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.070339918 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.071672916 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.071705103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.071778059 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.071783066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.071877956 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.072926044 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.073656082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.073715925 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.073723078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.074908972 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.075002909 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.075006962 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.076088905 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.076173067 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.076178074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.077388048 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.077469110 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.077472925 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.078586102 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.078655958 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.078661919 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.079827070 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.079911947 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.079916954 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.081031084 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.081135988 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.081139088 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.082245111 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.082319975 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.082331896 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.083461046 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.083569050 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.083573103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.084769011 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.084992886 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.084996939 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.085839033 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.086729050 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.086733103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.086970091 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.087110043 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.087119102 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.088793993 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.088835001 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.088876963 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.088882923 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.088923931 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.089837074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.091006041 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.091053009 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.091188908 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.091193914 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.092145920 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.092160940 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.092165947 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.092281103 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.093305111 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.094341993 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.094490051 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.094495058 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.095484018 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.095513105 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.095558882 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.095563889 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.095685959 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.096507072 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.097590923 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.097620010 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.097672939 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.097681046 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.097768068 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.098670006 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.099925041 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.099952936 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.100018024 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.100022078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.100126028 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.100856066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.101794004 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.101864100 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.101869106 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.102356911 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.102406979 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.102412939 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.103503942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.103575945 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.103581905 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.104444981 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.104588032 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.104593039 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.105447054 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.105556965 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.105562925 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.106422901 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.106647968 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.106659889 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.107500076 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.107566118 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.107578039 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.108436108 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.108510017 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.108521938 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.109406948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.109466076 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.109471083 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.110397100 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.110444069 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.110449076 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.111547947 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.111618042 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.111622095 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.112256050 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.112370968 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.112384081 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.113284111 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.113364935 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.113379002 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.114156008 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.114223003 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.114233971 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.115087986 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.115149021 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.115154028 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.116014004 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.116123915 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.116130114 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.116959095 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.117041111 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.117046118 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.117971897 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.118089914 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.118093967 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.118796110 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.118869066 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.118879080 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.119791985 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.119870901 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.119874954 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.120582104 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.120661974 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.120673895 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.121485949 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.121555090 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.121567965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.122499943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.122564077 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.122575998 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.123265028 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.123334885 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.123337984 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.124106884 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.124175072 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.124180079 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.124917984 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.125049114 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.125061989 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.125834942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.125950098 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.125955105 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.126662016 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.126754045 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.126758099 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.127502918 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.127577066 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.127582073 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.128575087 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.128628969 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.128639936 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.129204988 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.129319906 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.129332066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.130059958 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.130140066 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.130146027 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.130810022 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.131027937 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.131031990 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.131673098 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.131773949 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.131778955 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.132466078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.132677078 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.132683039 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.133296013 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.133423090 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.133428097 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.134156942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.134247065 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.134252071 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.134952068 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.135024071 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.135029078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.135911942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.136125088 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.136128902 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.137250900 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.137279034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.137322903 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.137327909 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.137605906 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.138041019 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.138793945 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.138818979 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.139178991 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.139183998 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.139648914 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.140369892 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.140402079 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.141105890 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.141166925 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.141925097 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.143063068 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.143073082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.143156052 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.143373966 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.143445015 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.143450975 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.144187927 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.144325972 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.144331932 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.144937992 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.144994974 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.144999027 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.145684958 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.145759106 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.145762920 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.146513939 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.146568060 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.146573067 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.147149086 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.147284985 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.147289991 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.148013115 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.148156881 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.148160934 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.148713112 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.148895025 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.148900032 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.149384022 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.149544001 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.149548054 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.150085926 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.150226116 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.150230885 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.150772095 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.150923967 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.150928020 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.151479959 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.151585102 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.151587963 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.152206898 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.152268887 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.152272940 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.152884960 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.152947903 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.152952909 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.153563976 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.153635025 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.153639078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.154262066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.154330015 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.154334068 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.155013084 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.155105114 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.155111074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.155658007 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.155716896 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.155723095 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.156301022 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.156466007 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.156471014 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.157002926 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.157068014 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.157080889 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.157749891 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.157809973 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.157819033 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.158422947 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.158608913 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.158612967 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.159019947 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.159164906 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.159168959 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.159673929 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.159742117 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.159746885 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.160427094 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.160484076 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.160489082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.161077023 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.161140919 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.161144972 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.161750078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.161896944 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.161900997 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.162446976 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.162534952 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.162539005 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.163018942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.163191080 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.163203001 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.163714886 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.163805962 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.163810015 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.164309025 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.164393902 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.164400101 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.164983034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.165096045 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.165100098 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.165637016 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.165683031 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.165687084 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.166587114 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.166627884 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.166640997 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.166646004 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.166712046 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.166717052 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.167620897 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.167648077 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.167676926 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.167682886 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.167763948 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.168559074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.168616056 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.168690920 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.168695927 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.169583082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.169606924 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.169718027 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.169723034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.169764996 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.170437098 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.170516968 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.170589924 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.170602083 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.171469927 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.171497107 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.171549082 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.171554089 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.172113895 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.172358990 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.172430038 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.172600031 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.172605991 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.173412085 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.173439980 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.173475981 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.173480988 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.173804045 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.174382925 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.174441099 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.175009966 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.175015926 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.175370932 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.175398111 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.175520897 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.175528049 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.175611973 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.176203966 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.176342964 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.176424980 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.176429987 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.177179098 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.177200079 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.177355051 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.177360058 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.177505970 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.178124905 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.178529978 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.178631067 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.178636074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.179059029 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.179084063 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.179109097 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.179112911 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.179233074 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.179990053 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.180048943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.180169106 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.180175066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.180906057 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.180969000 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.180994034 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.180999994 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.181116104 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.181798935 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.181860924 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.182126045 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.182138920 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.182769060 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.182796001 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.182874918 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.182879925 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.182950020 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.183681011 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.183746099 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.183903933 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.183918953 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.184611082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.184638977 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.184670925 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.184676886 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.184779882 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.185420990 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.185483932 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.185887098 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.185893059 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.186368942 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.186397076 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.186464071 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.186469078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.186598063 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.187288046 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.187340021 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.187402010 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.187416077 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.188087940 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.188170910 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.188196898 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.188200951 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.188256979 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.188922882 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.189070940 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.189141989 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.189155102 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.189811945 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.189904928 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.189935923 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.189941883 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.190301895 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.190675020 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.190754890 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.191010952 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.191020966 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.191582918 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.191611052 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.191673994 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.191679001 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.191730976 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.192414999 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.192533970 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.192599058 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.192603111 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.193306923 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.193345070 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.193425894 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.193430901 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.193500042 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.194113970 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.194175005 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.194257021 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.194262028 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.195049047 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.195075989 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.195122957 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.195135117 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.195317030 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.195872068 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.195923090 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.196151972 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.196158886 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.196736097 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.196762085 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.196811914 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.196816921 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.196947098 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.197527885 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.197623014 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.197710991 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.197734118 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.198376894 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.198470116 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.198473930 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.199146032 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.199173927 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.199224949 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.199238062 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.199244976 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.199387074 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.199392080 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.199433088 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.200020075 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.200130939 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.200256109 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.200259924 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.200844049 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.200876951 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.200900078 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.200905085 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.201114893 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.201656103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.201792955 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.202229023 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.202234030 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.202466011 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.202518940 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.202603102 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.202609062 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.202694893 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.203254938 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.203325033 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.203377008 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.203388929 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.204154015 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.204200983 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.204277039 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.204282045 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.204849958 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.204879999 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.204931974 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.204936981 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.205705881 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.205735922 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.205764055 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.205770016 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.205837965 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.206479073 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.207307100 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.207369089 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.207395077 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.207408905 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.207413912 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.207487106 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.208061934 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.208093882 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.208121061 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.208125114 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.208203077 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.208837986 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.208899021 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.209098101 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.209114075 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.209624052 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.209671021 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.209675074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.210393906 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.210443974 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.210448980 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.210453033 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.210506916 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.210510969 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.211215019 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.211240053 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.211328030 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.211333036 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.211462021 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.211914062 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.211988926 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.212167978 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.212172985 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.212713957 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.212760925 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.212825060 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.212833881 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.212956905 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.213471889 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.213563919 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.213799000 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.213804007 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.214271069 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.214339018 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.214395046 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.214402914 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.214859009 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.215351105 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216059923 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216090918 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216125965 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.216130972 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216203928 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.216233969 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216494083 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216552973 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216582060 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.216586113 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.216669083 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.216675043 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.217292070 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.217350960 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.217452049 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.217458010 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.217767000 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.218014956 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.218121052 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.218241930 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.218246937 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.218723059 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.218750954 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.218795061 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.218800068 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.218873024 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.219435930 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.219496965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.219712973 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.219724894 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.220231056 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.220261097 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.220273018 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.220922947 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.220957994 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.220989943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.221002102 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.221010923 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.221060991 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.221880913 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.221916914 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.221945047 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.221959114 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.221962929 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.222028971 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.222034931 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.222229958 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.222830057 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.223028898 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.223057985 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.223093987 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.223098993 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.223165989 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.223818064 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.223900080 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.223931074 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.223951101 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.223963976 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.224066019 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.224773884 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.224833965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.224864006 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.224915028 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.224920034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.225097895 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.225755930 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.225855112 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.225883961 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.225985050 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.225991011 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.226104975 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.226700068 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.226757050 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.226819038 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.226835012 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.227518082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.227552891 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.227607965 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.227612972 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.227817059 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.227822065 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.228446007 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.228493929 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.228497982 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.228559971 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.228760958 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.228765965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.229249954 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.229279041 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.229311943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.229357004 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.229362011 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.229377031 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.230160952 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.230237007 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.230262995 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.230266094 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.230345011 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.230349064 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.231240034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.231306076 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.231311083 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.231435061 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.231503963 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.231508017 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.232002974 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.232059002 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.232074022 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.232078075 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.232189894 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.232198954 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233050108 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233082056 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233114004 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233154058 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.233155012 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.233163118 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233809948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233856916 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233865976 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.233870029 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.233927965 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.233932018 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.234766006 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.234844923 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.234849930 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.234911919 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.234972000 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.234977007 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.235603094 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.235631943 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.235658884 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.235665083 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.235668898 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.235727072 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.236450911 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.236537933 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.236543894 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.236591101 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.236625910 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.236641884 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.237423897 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.237476110 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.237481117 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.237641096 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.237703085 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.237708092 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.238290071 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.238320112 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.238356113 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.238359928 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.238432884 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.238858938 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.238967896 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.238996029 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.239058971 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.239063978 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.239145994 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.239772081 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.239861965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.239886999 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.239949942 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.239954948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.239991903 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.240617037 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.240678072 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.240705013 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.240756989 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.240761995 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.240885973 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.241472960 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.241621017 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.241647959 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.241694927 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.241699934 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.241791010 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.242314100 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.242392063 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.242444038 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.242480993 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.242485046 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.242575884 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.243123055 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.243201017 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.243277073 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.243333101 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.243338108 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.243458033 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.244023085 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.244083881 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.244127035 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.244210958 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.244215965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.244266987 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.244811058 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.244915009 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.244940996 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.245022058 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.245027065 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.245408058 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.245635986 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.245718956 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.245745897 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.245790005 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.245795965 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.245839119 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.246427059 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.246505976 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.246573925 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.246579885 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.247328997 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.247365952 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.247396946 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.247433901 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.247433901 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.247440100 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.247443914 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.247528076 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.248156071 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.248240948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.248267889 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.248317003 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.248331070 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.248378992 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.248929977 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.249542952 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.249583960 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.249625921 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.249630928 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.249634981 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.249701977 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.249706984 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.249779940 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.250310898 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.250400066 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.250431061 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.250478983 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.250492096 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.250648975 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.251177073 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.251305103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.251332998 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.251379967 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.251384974 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.251835108 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.251993895 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.252077103 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.252118111 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.252123117 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.252130032 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.252182007 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.252754927 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.252887964 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.252952099 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.252955914 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.253500938 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.253596067 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.253637075 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.253642082 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.253693104 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.253698111 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.254056931 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.254276037 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.254405022 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.254436970 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.254451036 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.254455090 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.254535913 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.254548073 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.255368948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.255410910 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.255470037 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.255491018 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.255496025 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.255556107 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.255587101 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.255795956 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.256272078 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.256346941 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.256387949 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.256433010 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.256458998 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.256464005 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.256485939 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.257172108 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.257276058 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.257280111 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.257334948 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.257364035 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.257397890 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.257404089 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.257452965 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.258148909 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.258228064 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.258269072 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.258294106 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.258313894 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.258317947 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.258342981 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.259119034 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.259167910 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.259171963 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.261595964 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.261614084 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.261677980 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.261683941 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.261725903 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.261725903 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.262300968 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.262350082 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.262357950 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.262415886 CEST	443	49785	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:15.262509108 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.262509108 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.262528896 CEST	49785	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:15.396243095 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396337986 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.396421909 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396593094 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396588087 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396636963 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.396677971 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.396693945 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396692991 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396718025 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.396750927 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396764994 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396826982 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396847963 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.396959066 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.396976948 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.396981001 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.397062063 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.397207022 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.397242069 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.397381067 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.397393942 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.397541046 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.397557020 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.397711039 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.397747040 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.397860050 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.397876024 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.398036957 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.398055077 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.621826887 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.623408079 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.623420954 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.624265909 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.624582052 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.624596119 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.624730110 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.624814987 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.625310898 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.625427008 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.625521898 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.625879049 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.626065016 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.626409054 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.626498938 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.626579046 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.628175974 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.628510952 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.628571987 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.630584002 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.630654097 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.631166935 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.631289005 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.631304026 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.631323099 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.634021044 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.634043932 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.634200096 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.634217024 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.634421110 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.634438992 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.634463072 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.634648085 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.634694099 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.635255098 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.635315895 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.635617971 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.635675907 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.635870934 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.635929108 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.636020899 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.636028051 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.636487961 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.636524916 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.636552095 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.636584044 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.636676073 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.636687994 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.637010098 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.637104988 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.637109995 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.670989037 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.671006918 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.671024084 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.671030045 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.680116892 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.686222076 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.686311007 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.686340094 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.687479973 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.687501907 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.687541008 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.717104912 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.717340946 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.732605934 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.732620955 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.847141981 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.847198009 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.847219944 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.847280025 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.847316980 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.847312927 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.847313881 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.847377062 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.847482920 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.847490072 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.849505901 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.849555016 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.849587917 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.849620104 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.849627972 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.849639893 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.849668980 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.849700928 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.849700928 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.849711895 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.854827881 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.854840994 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.854888916 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.854937077 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.854943991 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.854960918 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.854980946 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.854985952 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.855036020 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.855040073 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.855074883 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.855211973 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.855225086 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.857040882 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.857110023 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.857116938 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.859673977 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.859798908 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.859860897 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.859872103 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.859982967 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.860074997 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.860131979 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.860141039 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.860182047 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.860212088 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.860691071 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.860761881 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861113071 CEST	443	49792	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861109972 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.861129999 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.861166954 CEST	49792	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.861197948 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861217976 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861296892 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.861341000 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861392021 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.861408949 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861489058 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861535072 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.861543894 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861627102 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861696959 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.861701965 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.861870050 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862018108 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.862039089 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862056017 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862088919 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.862128973 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862229109 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862314939 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862351894 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862369061 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.862376928 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862385035 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862406015 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862416983 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.862432957 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.862440109 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.862442970 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.862469912 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.864717960 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.864770889 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.864778042 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.868405104 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.868465900 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.868475914 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.869178057 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.869240999 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.869261026 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.870080948 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.870104074 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.870142937 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.870157957 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.870191097 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.870201111 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.872410059 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.872456074 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.872473001 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.876049995 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.876127005 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.876132011 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.876835108 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.876885891 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.876902103 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.877743006 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.877805948 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.877820015 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.884013891 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.884078979 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.884526014 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.885011911 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.885031939 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.885467052 CEST	49791	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.885483980 CEST	443	49791	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.885834932 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.885865927 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.885921001 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.887464046 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.887490988 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.916496992 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.916497946 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.916503906 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.916505098 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.921089888 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.921112061 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.934782982 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.934803963 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.936364889 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:15.936429977 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:15.936526060 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:15.936717033 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:15.936738968 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:15.938093901 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:15.938122034 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:15.938260078 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:15.938436031 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:15.938450098 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:15.956995010 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.957093000 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.957102060 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.959574938 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.959656954 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.959666014 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.960886955 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.961007118 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.961014032 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.962507010 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.963397980 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.963479042 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.963494062 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.964797020 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.968558073 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.968646049 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.968652010 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.968653917 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.968692064 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.968698978 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.968715906 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.968764067 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.971101046 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.971148014 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.971154928 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.971705914 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.971761942 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.971800089 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.975393057 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.975476980 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.975495100 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.976313114 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.976489067 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.976752043 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.976761103 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.978830099 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.978908062 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.978914976 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.983067036 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.983128071 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.983144045 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.983922958 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.984005928 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.984011889 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.984025002 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.984059095 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.984095097 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.984127998 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.984240055 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.986469984 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.986541986 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.986548901 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.990823984 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.990919113 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.990933895 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.991609097 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.991686106 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.991704941 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.991710901 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.994230032 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.994327068 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.994333982 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.998631954 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.998689890 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.998704910 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.999429941 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.999476910 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.999486923 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.999486923 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.999521017 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.999571085 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:15.999588013 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:15.999666929 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.001899958 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.001972914 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.001988888 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.006198883 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.006258965 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.006273985 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.007039070 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.007066011 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.007112980 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.007213116 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.007442951 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.007679939 CEST	49790	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.007699013 CEST	443	49790	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.008346081 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.008372068 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.008492947 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.009072065 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.009166002 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.009175062 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.009999037 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.010015011 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.010134935 CEST	49789	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.010162115 CEST	443	49789	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.010478020 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.010499954 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.010637999 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.011173010 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.011183977 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.013788939 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.013977051 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.013998985 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.015469074 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.015490055 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.015595913 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.015984058 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.016007900 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.016057014 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.016212940 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.016227007 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.016264915 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.016361952 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.016468048 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.016525030 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.016541958 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.016832113 CEST	49793	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.016839981 CEST	443	49793	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.017076015 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.017124891 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.017189980 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.017815113 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.017836094 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.020853043 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.020862103 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.021023035 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.021368027 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.021385908 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.021466970 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.021522045 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.021538973 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.021564007 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.021629095 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.025039911 CEST	49788	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.025067091 CEST	443	49788	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.025576115 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.025588036 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.025820971 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.026854038 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.026864052 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.029881954 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.029907942 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.029966116 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.030172110 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.030186892 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.090464115 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.090902090 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.090940952 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.091311932 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.091634035 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.091701984 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.093298912 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.121215105 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.128242016 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.128252983 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.128635883 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.131383896 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.131450891 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.131978035 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.140106916 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.165646076 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.165864944 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.165890932 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.166431904 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.166851997 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.166948080 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.167016983 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.169044018 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.169614077 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.169646978 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.172918081 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.173019886 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.174658060 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.174741983 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.174999952 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.175015926 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.176126957 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.208154917 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.226422071 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.234338999 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.234683990 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.234708071 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.235709906 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.235774994 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.236092091 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.236167908 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.236207962 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.240628004 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.240817070 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.240840912 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.242585897 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.242743969 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.242753983 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.243887901 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.243916988 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.243966103 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.244013071 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.244339943 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.244410038 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.244868040 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.244970083 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.245085955 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.245095015 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.245136976 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.245143890 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.247987986 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.248198032 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.248209953 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.248250008 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.248351097 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.248359919 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.249809027 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.249875069 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.250231028 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.250233889 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.250307083 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.250315905 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.250343084 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.250591040 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.250741005 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.250910997 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.251019001 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.251034975 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.251168013 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.251185894 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.254739046 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.254812956 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.255141973 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.255222082 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.255315065 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.255325079 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.260229111 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.260540009 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.260548115 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.261656046 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.261919022 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.261935949 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.263366938 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.263426065 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.263763905 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.263822079 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.264023066 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.264029980 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.264070988 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.264128923 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.264569044 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.264641047 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.264667988 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.284123898 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.288948059 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.288954973 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.288979053 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.289150000 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.292126894 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.304187059 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.304188967 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.304195881 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.304195881 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.304203033 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.304231882 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.304233074 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.316582918 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.316725969 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.316783905 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.316804886 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.316951990 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.317038059 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.317073107 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.317084074 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.317126989 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.317132950 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.324039936 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.324090958 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.324115992 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.331751108 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.331851006 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.332058907 CEST	49800	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.332077026 CEST	443	49800	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.332833052 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.333034039 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.333060026 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.333168983 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.334203959 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.334213018 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.348243952 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.348618984 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.359071016 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.359236956 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.359285116 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.359302044 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.359390020 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.359436989 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.359445095 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.359519005 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.359571934 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.359580040 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.366631031 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.366740942 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.366749048 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.376637936 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.376688004 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.376935005 CEST	49801	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.376946926 CEST	443	49801	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.377248049 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.377275944 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.377338886 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.378218889 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.378235102 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.390729904 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.390780926 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.390819073 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.390852928 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.390871048 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.390906096 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.390935898 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.390953064 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.391011000 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.391026974 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.392199039 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.392258883 CEST	443	49803	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.392343998 CEST	49803	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.392468929 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.392499924 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.392589092 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.393349886 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.393368959 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.394725084 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.394850016 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.394938946 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.394956112 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.394988060 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.395066023 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.395081043 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.395174980 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.395340919 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.395353079 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.401961088 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.402189970 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.402219057 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.409542084 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.409603119 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.409616947 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.417351961 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.417453051 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.418365955 CEST	49802	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.418395996 CEST	443	49802	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.418823004 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.418838978 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.418903112 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.419234991 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.419245958 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.460252047 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.460350990 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.460391045 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.460407019 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.460441113 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.460477114 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.462342978 CEST	49804	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.462357998 CEST	443	49804	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.463047981 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.463071108 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.463126898 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.463543892 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.463561058 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.465070009 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.465264082 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.465312004 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.465328932 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.465528965 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.465590000 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.465812922 CEST	49805	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.465822935 CEST	443	49805	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.466161013 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.466191053 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.466428041 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.466634035 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.466653109 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.469253063 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.469310999 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.469352961 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.469388962 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.469392061 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.469408989 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.469432116 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.469480038 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.469593048 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.469600916 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.473732948 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.473790884 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.473850012 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.473859072 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.473870993 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.473908901 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.473921061 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.473957062 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.473958015 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.473968029 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.473990917 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.474014997 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.474024057 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.474077940 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.474081993 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.474095106 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.474143028 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.474149942 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.476413965 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.476483107 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.476495028 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.479593039 CEST	49808	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.479619026 CEST	443	49808	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.479962111 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.479975939 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.480062008 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.480627060 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.480640888 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.481116056 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481239080 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481295109 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.481309891 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481375933 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481384993 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481429100 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.481436968 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481471062 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481471062 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.481499910 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.481548071 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.481575966 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.484173059 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.484226942 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.484234095 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.486500978 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.486645937 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.486713886 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.486722946 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.486799002 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.486871958 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.486922026 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.486927986 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.487121105 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.487126112 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.488430023 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.488485098 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.488495111 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.489139080 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.489342928 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.489351988 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.491779089 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.491858959 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.491866112 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.493129969 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.493335962 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.493396044 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.493403912 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.493593931 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.493644953 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.493746996 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.493938923 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.493949890 CEST	49810	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.493952036 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.493957043 CEST	443	49810	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.494230032 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.494252920 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.494411945 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.495214939 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.495230913 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.496170044 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.496226072 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.496234894 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.496773005 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.496818066 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.496825933 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.501378059 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.501787901 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.501802921 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.503833055 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.504019976 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.504029036 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.509078979 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.509246111 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.509258032 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.532249928 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.532257080 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.547486067 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.547492981 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.547501087 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.547509909 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.562666893 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.562690020 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.565505981 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.565725088 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.565745115 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.566960096 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.567250013 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.567365885 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.567372084 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.567462921 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.578001022 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.579171896 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.582957029 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.582998037 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.583009958 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.583018064 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.583064079 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.584198952 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.584266901 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.584275007 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.587860107 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.587959051 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.587966919 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.590682983 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.590734959 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.590740919 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.590750933 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.594501972 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.594575882 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.594584942 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.595547915 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.595592976 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.595601082 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.596019030 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.596074104 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.596081972 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.598316908 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.598361015 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.598371983 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.598381042 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.598424911 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.599699974 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.599818945 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.599826097 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.602224112 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.602282047 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.602291107 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.602524042 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.602771044 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.602793932 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.603178978 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.603270054 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.603328943 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.603338957 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.603461027 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.603530884 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.603607893 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.606009960 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.607450008 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.607585907 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.607592106 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.608184099 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.609879017 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.609934092 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.609942913 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.611032963 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.611088037 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.611097097 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.613702059 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.613744974 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.613753080 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.613763094 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.613806963 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.615209103 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.615266085 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.615272999 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.617624044 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.617672920 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.617680073 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.618582010 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.618633032 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.618640900 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.621380091 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.622905016 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.622961998 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.622975111 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.625313044 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.625360966 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.625369072 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.626389980 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.626492023 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.626499891 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.626585960 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.626626015 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.627393007 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.627676964 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.627686977 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.628037930 CEST	49809	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.628050089 CEST	443	49809	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.628386974 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.628438950 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.628565073 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.628632069 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.628799915 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.629028082 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.630590916 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.630603075 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.630647898 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.630661011 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.630779982 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.630806923 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.630845070 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.630951881 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.632314920 CEST	49806	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.632319927 CEST	443	49806	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.632633924 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.632704020 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.632767916 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.633053064 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.633107901 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.633116007 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.633407116 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.633436918 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.638314962 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.638499022 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.638506889 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.640185118 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.640244007 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.640252113 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.645488977 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.645627022 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.645685911 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.646152973 CEST	49811	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.646164894 CEST	443	49811	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.646497011 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.646522999 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.646595001 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.647392035 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.647435904 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.647448063 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.647461891 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.647469997 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.647608995 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.647829056 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.648118973 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.649243116 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.649256945 CEST	443	49807	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.649269104 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.649394035 CEST	49807	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.649554014 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.649575949 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.649630070 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.650593996 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.650605917 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.652029991 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.652282953 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.652296066 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.652928114 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.653285027 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.653369904 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.653392076 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.676110983 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.688922882 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.689177990 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.689188957 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.690519094 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.690593958 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.690896988 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.690989971 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.691113949 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.691123009 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.693116903 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.693124056 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.697922945 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.698308945 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.698318958 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.702033997 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.702122927 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.702356100 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.702485085 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.702491045 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.702527046 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.704875946 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.705096960 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.705105066 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.706063986 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.706121922 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.706469059 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.706530094 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.706624985 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.706631899 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.727372885 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.727586031 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.727597952 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.731758118 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.731831074 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.732134104 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.732304096 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.732311010 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.732331991 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.739541054 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.754662991 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.754673958 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.754719973 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.785939932 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.785949945 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.790548086 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.790661097 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.790729046 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.790769100 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.790869951 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.790920973 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.790930986 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.790998936 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.791047096 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.791054964 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.797813892 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.797923088 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.797933102 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.801907063 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.801949978 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.802084923 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.802084923 CEST	443	49816	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.802129984 CEST	49816	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.802295923 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.804018974 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.804137945 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.804514885 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.804769039 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.804802895 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.827677011 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.827765942 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.827814102 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.828325033 CEST	49817	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.828351021 CEST	443	49817	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.830789089 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.830874920 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.830943108 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.831377029 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.831418991 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.841326952 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.851737976 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.851862907 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.851917028 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.851929903 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.852016926 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.852066040 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.852073908 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.852283001 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.852328062 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.852335930 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.857779980 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.858007908 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.858032942 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.858395100 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.858719110 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.858804941 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.858830929 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.859055996 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.859116077 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.859124899 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.864684105 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.864906073 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.864970922 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.866910934 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.866995096 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.867299080 CEST	49818	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.867311954 CEST	443	49818	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.867619991 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.867640972 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.867697954 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.868201017 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.868217945 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.868521929 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.868604898 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.868990898 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.869173050 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.869224072 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.873521090 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.873735905 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.873754978 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.875349045 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.875416040 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.876084089 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.876245022 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.876311064 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.876317978 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.877893925 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878026009 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878170967 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878223896 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.878236055 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878320932 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878364086 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878371000 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.878377914 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878417969 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.878474951 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.878766060 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.878778934 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.880260944 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.880337954 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.880620003 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.880703926 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.880772114 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.880776882 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.885169029 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.885245085 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.885252953 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.895298958 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.895356894 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.895665884 CEST	49819	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.895675898 CEST	443	49819	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.900139093 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.910298109 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.910315037 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.910330057 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:16.914917946 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.914994955 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.915026903 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.915045023 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.915056944 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.915141106 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.915172100 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.915191889 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.915205002 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.915232897 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.916173935 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.922188044 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.922671080 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.922728062 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.922791004 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.922800064 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.922851086 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.922938108 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.922971010 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.922981024 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.923086882 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.923135042 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.923151016 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.923218966 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.923227072 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930229902 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930255890 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930306911 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.930306911 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.930318117 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930319071 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930535078 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930596113 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930639982 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930681944 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930685997 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.930696964 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930737019 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.930744886 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.930783987 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.930788994 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.937748909 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.937907934 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.937911034 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.937916994 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.937958002 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.937967062 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.937984943 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.938030005 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.938038111 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.945419073 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.945569038 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.945578098 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.945660114 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.945707083 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.945714951 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953324080 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953403950 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.953412056 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953744888 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953802109 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953846931 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953886032 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.953897953 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953933954 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.953936100 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.953949928 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.954005957 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.954015970 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.961373091 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.962024927 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.962033033 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.964968920 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:16.968935966 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.968985081 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.968993902 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.976691961 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.976746082 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.976753950 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.988006115 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.988007069 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:16.988014936 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:16.988015890 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.003212929 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.003221035 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.018620014 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.018634081 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.024867058 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.024918079 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.024925947 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.028681993 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.028769016 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.028776884 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.032938004 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.033020020 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.033029079 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.034459114 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.034765959 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.034802914 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.036015034 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.036346912 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.036392927 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.036401033 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.036714077 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.036762953 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.036772013 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.036781073 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.036914110 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.036926031 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.036977053 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.040412903 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.040466070 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.040473938 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.044064045 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.044116020 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.044125080 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.044219017 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.044275999 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.044282913 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.044393063 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.044527054 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.044536114 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.051722050 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.051781893 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.051789045 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.051845074 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.052041054 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.052047968 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.052172899 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.052217960 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.052227020 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.055650949 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.055866957 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.055902004 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.056299925 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.056655884 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.056767941 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.056777954 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.059389114 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.059442997 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.059451103 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.059587002 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.059649944 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.059659958 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.059688091 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.059775114 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.059782982 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.063628912 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.063702106 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.063714027 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067182064 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067200899 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067233086 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.067243099 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067255974 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.067265034 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067487955 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067549944 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067599058 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.067603111 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.067608118 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.067611933 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.074295998 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.074389935 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.074398041 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.074984074 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.075040102 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.075047970 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.075131893 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.075148106 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.075184107 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.075191975 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.075210094 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.075218916 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.081515074 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.081587076 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.081593990 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.082376003 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.082375050 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.082778931 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.082833052 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.082842112 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.082870960 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.082880020 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.083005905 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.083066940 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.083075047 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.083226919 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.083317995 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.083376884 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.083395004 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.083415031 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.083462954 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.086702108 CEST	49825	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.086730003 CEST	443	49825	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.088617086 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.088660955 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.088669062 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.089415073 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.089473009 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.089481115 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.089493990 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.089534998 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.089904070 CEST	49821	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.089916945 CEST	443	49821	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.090403080 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.090456963 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.090513945 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.090524912 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.090559006 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.090565920 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.090590954 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.090694904 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.090722084 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.090783119 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.090781927 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.093660116 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.093703985 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.093780994 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.093880892 CEST	49822	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.093890905 CEST	443	49822	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.094960928 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.094981909 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.094991922 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.095201969 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.095211029 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.095577002 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.095793962 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.095850945 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.095859051 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.095887899 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.095953941 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.095999956 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.098253012 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.098272085 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.098320961 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.098401070 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.098409891 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.099386930 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.099457979 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.099550009 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.099602938 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.099627018 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.099679947 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.102900028 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.103096008 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.103104115 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.104176044 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.104362011 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.104554892 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.104567051 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.104599953 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.106134892 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.106192112 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.110073090 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.110126972 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.110135078 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.112790108 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.112818956 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.112915993 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.113606930 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.113621950 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.113965034 CEST	49824	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.114000082 CEST	443	49824	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.117227077 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.117276907 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.117286921 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.124433994 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.124531031 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.133971930 CEST	49823	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.133986950 CEST	443	49823	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.136138916 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.137948990 CEST	49826	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.137990952 CEST	443	49826	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.147182941 CEST	49827	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.147202015 CEST	443	49827	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.147917986 CEST	49820	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.147933006 CEST	443	49820	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.151573896 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.151595116 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.151722908 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.151925087 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.151937962 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.154582024 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.154602051 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.154675007 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.155124903 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.155139923 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.158696890 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.158756018 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.158823967 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.159121037 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.159147024 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.159976959 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.159990072 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.160067081 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.161164045 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.161179066 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.166016102 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.166033983 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.166263103 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.166438103 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.166457891 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.169827938 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.169852972 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.170001030 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.170167923 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.170183897 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.259044886 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.259165049 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.259227991 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.259263992 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.259295940 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.259430885 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.259484053 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.259502888 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.259565115 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.259578943 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.266277075 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.266336918 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.266355038 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.266870022 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.266943932 CEST	443	49828	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.267009020 CEST	49828	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.269769907 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.269831896 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.270006895 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.270368099 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.270400047 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.274441957 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.274465084 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.274595022 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.275099993 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.275110960 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.281003952 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.281297922 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.281344891 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.282085896 CEST	49829	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.282115936 CEST	443	49829	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.284792900 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.284831047 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.284909010 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.286108971 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.286135912 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.321032047 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.321082115 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.321161985 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.321383953 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.321619034 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.321644068 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.321999073 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.322058916 CEST	49830	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.322071075 CEST	443	49830	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.322324038 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.322350979 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.322395086 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.322808027 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.322874069 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.323395967 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.323419094 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.323728085 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.339885950 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.340240955 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.340254068 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.341322899 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.341373920 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.341741085 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.341798067 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.341912031 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.341928959 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.368123055 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.376274109 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.376471996 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.376481056 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.377485037 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.377547979 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.377974987 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.378036976 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.378321886 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.378330946 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.382669926 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.383065939 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.383079052 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.384222984 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.384304047 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.384892941 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.384965897 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.385006905 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.390054941 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.390275002 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.390299082 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.391522884 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.395118952 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.395144939 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.395670891 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.395670891 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.395764112 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.396066904 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.396084070 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.396224022 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.397149086 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.397422075 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.397788048 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.397850990 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.397960901 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.397978067 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.398188114 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.398196936 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.401560068 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.401694059 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.402070045 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.402252913 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.402381897 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.412412882 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.412728071 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.412735939 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.413220882 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.414804935 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.414886951 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.414904118 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.427494049 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.427514076 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.427520990 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.447649956 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.447770119 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.447772980 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.447791100 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.456116915 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.462145090 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.473969936 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.490174055 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.501571894 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.501697063 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.512697935 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.537739038 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.537796974 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.537965059 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.537983894 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.538122892 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.538146019 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.539438009 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.539681911 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.539766073 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.539952993 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.540429115 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.540549994 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.541096926 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.541111946 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.541137934 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.541205883 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.541224003 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.541527033 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.541676998 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.545980930 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.546087027 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.546516895 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.546572924 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.546711922 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.546721935 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.550723076 CEST	49831	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.550764084 CEST	443	49831	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.551399946 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.551426888 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.551603079 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.552963018 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.553004026 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.553025007 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.553287983 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.553296089 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.554455996 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.554629087 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.554861069 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.554932117 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.554950953 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.566924095 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.566997051 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.567642927 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.567642927 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.570920944 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.570950985 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.572033882 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.572447062 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.572460890 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.581701040 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.581715107 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.581727028 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.592112064 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.597058058 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.597070932 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.597081900 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.597119093 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.603735924 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.603817940 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.604290962 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.604547024 CEST	49833	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.604562044 CEST	443	49833	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.607095957 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.607125044 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.607249975 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.607816935 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.607825994 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.608217955 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.608283997 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.608340979 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.608392954 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.608802080 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.609159946 CEST	49834	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.609184027 CEST	443	49834	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.611681938 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.611747026 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.611906052 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.614475012 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.614507914 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.614557028 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.614626884 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.614671946 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.614710093 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.614758015 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.614790916 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.614815950 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.615144968 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.621424913 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621489048 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621512890 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621532917 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621562004 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621565104 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621586084 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621624947 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621632099 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.621644974 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.621649027 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621656895 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621660948 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.621696949 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621701002 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.621769905 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621803045 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.621810913 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621839046 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.621846914 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.621989012 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.628128052 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.628988981 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.628990889 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.629092932 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.629092932 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.629101038 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.629103899 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.629647970 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.629720926 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.629771948 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.629787922 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.630037069 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.636657000 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.636734009 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.636807919 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.636809111 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.636816025 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.636818886 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.637424946 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.638408899 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.638514042 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.638566971 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.638607979 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.638644934 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.638653040 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.638667107 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.638724089 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.638724089 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.638739109 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.644356012 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.644412041 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.644443989 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.644459963 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.644584894 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.644584894 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.644594908 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.644593000 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.644942999 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.645068884 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.645083904 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.646038055 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.646522999 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.646533012 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.653706074 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.653789043 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.653798103 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.661367893 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.661458015 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.661467075 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.691881895 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.691886902 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.691890955 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.691893101 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.691894054 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.707103968 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.707112074 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.724678993 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.726000071 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.726202011 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.726362944 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.726461887 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.726597071 CEST	49839	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.726639032 CEST	443	49839	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.728257895 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.728336096 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.728378057 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.728394032 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.728506088 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.729229927 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.729266882 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.729306936 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.729309082 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.729356050 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.729404926 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.729423046 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.729429007 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.729435921 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.729461908 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.729475021 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.729724884 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.729749918 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.729794025 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.729800940 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.731206894 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.731551886 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.731631994 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.731632948 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.731642008 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.731643915 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.735213041 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.735289097 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.735320091 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.735327959 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.735366106 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.735375881 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.736027956 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.736814022 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.737212896 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.737221003 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.737665892 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.737680912 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.737709999 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.737751961 CEST	443	49840	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.737766027 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.737837076 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.737852097 CEST	49840	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.737926006 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.738173962 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.739018917 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.739029884 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.742142916 CEST	49841	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.742166996 CEST	443	49841	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.742878914 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.742973089 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.743002892 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.743010998 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.743048906 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.743057966 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.743247986 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.743268967 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.743614912 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.743695021 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.743700981 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.743706942 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.743729115 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.743801117 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.744482994 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.744498014 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.748313904 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.748408079 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.748414993 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.750483990 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.750688076 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.750749111 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.750751972 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.750758886 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.750761986 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.751328945 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.752121925 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.752191067 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.752199888 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.758163929 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.758282900 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.758290052 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.758852959 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.758959055 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.758968115 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.759021997 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.759097099 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.759144068 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.759162903 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.759324074 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.759831905 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.759932041 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.759942055 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.765870094 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.765937090 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.765947104 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.766052961 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.766463995 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.766474009 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.766693115 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.767469883 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.767575979 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.767585039 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.773595095 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.773791075 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.773824930 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.774039030 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.774108887 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.774110079 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.774122000 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.774123907 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.774152040 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.774398088 CEST	49837	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.774408102 CEST	443	49837	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.774442911 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.774682045 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.774714947 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.774795055 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.775213957 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.775278091 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.775284052 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.775286913 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.775305033 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.778330088 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.778882027 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.778892040 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.779239893 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.779565096 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.779635906 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.779795885 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.781023979 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.781327963 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.781475067 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.781550884 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.781761885 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.781898022 CEST	49835	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.781915903 CEST	443	49835	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.782210112 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.782263994 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.782370090 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.782962084 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.783085108 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.783092976 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.783132076 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.783164024 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.783472061 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.783472061 CEST	49838	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.783488989 CEST	443	49838	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.783492088 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.783617973 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.784353971 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.784364939 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.790606022 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.790819883 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.790828943 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.793796062 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.793873072 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.794275999 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.794994116 CEST	49842	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.795001984 CEST	443	49842	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.795478106 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.795516014 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.795608044 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.796036005 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.796055079 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.797365904 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.797714949 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.797730923 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.798069954 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.798245907 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.798461914 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.798470974 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.798697948 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.798764944 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.799586058 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.805273056 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.805422068 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.805429935 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.812400103 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.813009977 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.813018084 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.819400072 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.819607973 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.819616079 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.820116043 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.826438904 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.826555967 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.826564074 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.832360029 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.832401037 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.833420992 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.833523035 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.833532095 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.834189892 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.834198952 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.834547043 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.835154057 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.835211992 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.835443020 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.839247942 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.839529037 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.839561939 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.840425968 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.840672970 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.840747118 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.840755939 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.840759039 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.841109037 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.841229916 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.841265917 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.844139099 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.847686052 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.847899914 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.848211050 CEST	49836	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.848218918 CEST	443	49836	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.849816084 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.849858046 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.849958897 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.850357056 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.850385904 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.880007982 CEST	49832	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.880019903 CEST	443	49832	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.880125046 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.884131908 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.895096064 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.895119905 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.941452026 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.962014914 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.962264061 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.962297916 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.963573933 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.963745117 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.963938951 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.964010954 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.964282990 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.964301109 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.964963913 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:17.965014935 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:17.965678930 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.965898991 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:17.966161966 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:17.966191053 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:17.966291904 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.966303110 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.966669083 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.968167067 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.968225002 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:17.968240976 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:17.969166040 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.969352007 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.969367027 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.970515013 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.970588923 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.970972061 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:17.971049070 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:17.971364021 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.001610041 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.001972914 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.001990080 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.003040075 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.003242970 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.003483057 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.003483057 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.003554106 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.005328894 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.005393982 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.005458117 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.005677938 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.006540060 CEST	49847	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.006547928 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.006557941 CEST	443	49847	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.010066032 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.010703087 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.010713100 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.011795044 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.011889935 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.012284040 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.012355089 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.012729883 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.012736082 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.015073061 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.015459061 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.015491962 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.016129017 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.020806074 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.020905018 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.021274090 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.021455050 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.021483898 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.021801949 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.021923065 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.021945000 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.021960974 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.022284985 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.022309065 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.022809982 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.022850037 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.022942066 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.023063898 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.023175001 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.023313999 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.023576975 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.023897886 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.023897886 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.023957014 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.026478052 CEST	49848	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.026499033 CEST	443	49848	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.051976919 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.052000999 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.055233002 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.058585882 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.058660984 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.058762074 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.058789015 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.058865070 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.064142942 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.065212011 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.065279007 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.065356016 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.065383911 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.065644026 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.067965984 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.067975044 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.067994118 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.068042040 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.068067074 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.079864025 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.081703901 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.081724882 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.085225105 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.085304976 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.086613894 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.086613894 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.086707115 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.092816114 CEST	49849	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.092830896 CEST	443	49849	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.097184896 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.097209930 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.097296953 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.098325968 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.098340988 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.098875999 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.101639986 CEST	49850	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.101694107 CEST	443	49850	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.110620975 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.116724014 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.133045912 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.133064985 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.179987907 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.188961983 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.189081907 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.189229965 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.189256907 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.189378977 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.189537048 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.190994024 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.191066980 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.191180944 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.191231966 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.192691088 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.192737103 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.193738937 CEST	49852	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.193749905 CEST	49851	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.193752050 CEST	443	49852	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.193772078 CEST	443	49851	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.194186926 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.194238901 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.194242001 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.194324970 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.194324970 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.195333958 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.195499897 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.195585966 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.195760012 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.195815086 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.196178913 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.196276903 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.196316957 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.200505972 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.200508118 CEST	49853	443	192.168.2.4	108.177.122.119
Apr 25, 2024 14:54:18.200520039 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.200525045 CEST	443	49853	108.177.122.119	192.168.2.4
Apr 25, 2024 14:54:18.200644970 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.201102972 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.201112986 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.226685047 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.226768017 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.230581999 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.231745005 CEST	49854	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.231765032 CEST	443	49854	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.232011080 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.232029915 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.232386112 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.232386112 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.232409000 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.235230923 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.235347986 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.236083984 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.236490011 CEST	49856	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.236496925 CEST	443	49856	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.236525059 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.236532927 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.236624002 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.237301111 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.237313032 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.241219997 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.241252899 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.241395950 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.241579056 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.241655111 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.241674900 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.241837978 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.241965055 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.242561102 CEST	49855	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.242588043 CEST	443	49855	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.242818117 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.242840052 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.242912054 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.243968010 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.243985891 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.267379045 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.267453909 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.267508984 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.267668962 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.268014908 CEST	49857	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.268029928 CEST	443	49857	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.270284891 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.270340919 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.270847082 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.271085024 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.271117926 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.286252975 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.307456970 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.307759047 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.308821917 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.308821917 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.309483051 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.309503078 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.309850931 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.310467958 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.310487032 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.323558092 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.323782921 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.323796988 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.324323893 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.324723005 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.324805021 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.324904919 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.325077057 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.325112104 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.425684929 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.426006079 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.426018953 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.426424026 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.426471949 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.426728010 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.426762104 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.426944017 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.427025080 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.427120924 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.428095102 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.428456068 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.428606033 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.428639889 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.432789087 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.432895899 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.432940006 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.432961941 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.433051109 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.433099985 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.434319973 CEST	49860	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.434350014 CEST	443	49860	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.463030100 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.468139887 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.470613956 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:18.470813036 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:18.470873117 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:18.471651077 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.471661091 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.473189116 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.473258018 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.473418951 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.474400997 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.474493027 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.474654913 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.474663019 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.475769997 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.476152897 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.476175070 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.480168104 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.480242014 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.480766058 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.481018066 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.481023073 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.483329058 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.483513117 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.483530045 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.483974934 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.484483004 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.484571934 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.484608889 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.500266075 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.521202087 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.521245956 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.521265984 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.526355982 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.526380062 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.527852058 CEST	49784	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:18.527878046 CEST	443	49784	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:18.528142929 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.528279066 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.528330088 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.528462887 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.528669119 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.528698921 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.530412912 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.530482054 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.530798912 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.530927896 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.530980110 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.536571026 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.542861938 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.543062925 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.543072939 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.544611931 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.544673920 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.544975996 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.545054913 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.545159101 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.567914963 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.570703983 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.570858955 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.570910931 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.571363926 CEST	49864	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:18.571376085 CEST	443	49864	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:18.578797102 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.578807116 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.588146925 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.594321966 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.594331980 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.609769106 CEST	49859	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.609797955 CEST	443	49859	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.633176088 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.648426056 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.650691986 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.650868893 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.650935888 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.650955915 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.651218891 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.651284933 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.651448965 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.651468039 CEST	443	49865	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.651520014 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.651520014 CEST	49865	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.667428017 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.667532921 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.667603970 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.673746109 CEST	49866	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.673758030 CEST	443	49866	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.690813065 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.690871954 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.690984964 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.690993071 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.691035986 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.691288948 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.694391966 CEST	49869	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.694397926 CEST	443	49869	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.701239109 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.701440096 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.701500893 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.701539993 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.701618910 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.701664925 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.702693939 CEST	49870	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.702707052 CEST	443	49870	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.707652092 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.707731009 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.707782030 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.707791090 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.707860947 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.707911968 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.711416006 CEST	49868	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.711425066 CEST	443	49868	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.727974892 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.728162050 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.728220940 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.728230953 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.728426933 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.728518009 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.728980064 CEST	49871	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.728988886 CEST	443	49871	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.759061098 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.759295940 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.759315968 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.760440111 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.760752916 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.760927916 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.760931969 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.761038065 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:18.767927885 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.768300056 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.768614054 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.769179106 CEST	49872	443	192.168.2.4	142.250.105.119
Apr 25, 2024 14:54:18.769186974 CEST	443	49872	142.250.105.119	192.168.2.4
Apr 25, 2024 14:54:18.801173925 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:18.804487944 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:18.804522038 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:18.804580927 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:18.804811001 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:18.804827929 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.019318104 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.019370079 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.019401073 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.019455910 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.019454956 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.019479990 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.019494057 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.019526005 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.019562006 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.026804924 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.034504890 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.034538031 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.034574986 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.034601927 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.034650087 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.035135984 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.036894083 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:19.036919117 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.038084984 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.038140059 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:19.040272951 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.048202038 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.048288107 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.048307896 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.096610069 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.129187107 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.133125067 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.133179903 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.133304119 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.133333921 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.134308100 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.140748978 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.148519039 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.148583889 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.148605108 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.156166077 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.156204939 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.156269073 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.156286955 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.157372952 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.163949966 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.171576023 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.171613932 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.171679020 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.171710014 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.174837112 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.178667068 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.185672045 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.185708046 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.185784101 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.185797930 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.188174009 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.192771912 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.199790001 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.199824095 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.199866056 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.199897051 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.200154066 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.206864119 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.206917048 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.207020998 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.207041025 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.213993073 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.214049101 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.221364021 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:19.221818924 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.222223997 CEST	49873	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.222256899 CEST	443	49873	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.224973917 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:19.224987984 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.277837038 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:19.449234009 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.449421883 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.449487925 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:19.482234955 CEST	49880	443	192.168.2.4	172.253.124.156
Apr 25, 2024 14:54:19.482259035 CEST	443	49880	172.253.124.156	192.168.2.4
Apr 25, 2024 14:54:19.595156908 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.595190048 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.595444918 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.595890045 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.595909119 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.827189922 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.879302979 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.898637056 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:19.898658037 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.899946928 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:19.942127943 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.072382927 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.072648048 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.076579094 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.120138884 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.303788900 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.304037094 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.306262970 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.344186068 CEST	49886	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.344213009 CEST	443	49886	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.591574907 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:20.591608047 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.591660976 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:20.607486010 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:20.607501984 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.645241976 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.645268917 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.645380020 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.652282953 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.652302027 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.773309946 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:20.773336887 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:20.773406029 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:20.773582935 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:20.773597002 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:20.834799051 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.835016966 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:20.835026979 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.835644007 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.836395025 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:20.836486101 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.836771965 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:20.836801052 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.836823940 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:20.880999088 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.884114027 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:20.885620117 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.885629892 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.886141062 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.887228012 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:20.887259007 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:20.887326002 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:20.895812988 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.895901918 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.896011114 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:20.896023989 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:20.896364927 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.896364927 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:20.896400928 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:20.999892950 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.000133038 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.000143051 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.000610113 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.000912905 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.001002073 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.002140045 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.048120975 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.097254038 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:21.097668886 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:21.097728968 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:21.099692106 CEST	49887	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:21.099704981 CEST	443	49887	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:21.126142025 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.126347065 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.126367092 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.130110025 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.130193949 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.130593061 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.130717993 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.130723953 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.130814075 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.163573980 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.163661957 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.163706064 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:21.163718939 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.163742065 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.163795948 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:21.163805008 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.167395115 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.167445898 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:21.167454004 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.172405005 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.172418118 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.175071001 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.175122023 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:21.175131083 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.182713032 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.182769060 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:21.182784081 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.182862997 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.182913065 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:21.183096886 CEST	49888	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:21.183109999 CEST	443	49888	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:21.216610909 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.234173059 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.234386921 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.234448910 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.237169027 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.237210989 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.237286091 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.238109112 CEST	49892	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.238120079 CEST	443	49892	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.240044117 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.240061045 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.349498034 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.349585056 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.349684000 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.350573063 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.350613117 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.354573011 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.354732990 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.354789972 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.355648041 CEST	49894	443	192.168.2.4	172.253.124.155
Apr 25, 2024 14:54:21.355658054 CEST	443	49894	172.253.124.155	192.168.2.4
Apr 25, 2024 14:54:21.465795994 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.469321012 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.469351053 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.470006943 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.470082045 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.471205950 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.471285105 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.471487045 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.471587896 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.471736908 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.471745968 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.535829067 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.580854893 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.581370115 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.581412077 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.581762075 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.582664967 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.582743883 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.583131075 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.624125957 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.707201004 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.708200932 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.708355904 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.708931923 CEST	49895	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:21.708954096 CEST	443	49895	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:21.824935913 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.825390100 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:21.825464964 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.825695992 CEST	49896	443	192.168.2.4	64.233.185.103
Apr 25, 2024 14:54:21.825726032 CEST	443	49896	64.233.185.103	192.168.2.4
Apr 25, 2024 14:54:23.311613083 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.311669111 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.311733961 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.311857939 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.311964035 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.312037945 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.312980890 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.312997103 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.313368082 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.313384056 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.647654057 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.652343988 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.687578917 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.687611103 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.687928915 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.687948942 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.688203096 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.688601971 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.689621925 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.689701080 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.690346956 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.690447092 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.691258907 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:23.736123085 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:23.740058899 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:24.035767078 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:24.036210060 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:24.036313057 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:24.036355972 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:24.036371946 CEST	443	49898	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:24.036382914 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:24.036423922 CEST	49898	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:28.535090923 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:28.535224915 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:28.535423994 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:28.562880039 CEST	49899	443	192.168.2.4	13.107.246.40
Apr 25, 2024 14:54:28.562899113 CEST	443	49899	13.107.246.40	192.168.2.4
Apr 25, 2024 14:54:36.319993019 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:36.320120096 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:36.320204973 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:36.320719957 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:36.320759058 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:36.932202101 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:36.932307005 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:36.936017990 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:36.936049938 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:36.936455965 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:36.948227882 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:36.992142916 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.531994104 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532031059 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532047987 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532140970 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:37.532206059 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532268047 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:37.532356977 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532394886 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532427073 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:37.532459021 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532483101 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.532582045 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:37.539866924 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:37.539905071 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:37.539940119 CEST	49976	443	192.168.2.4	40.127.169.103
Apr 25, 2024 14:54:37.539956093 CEST	443	49976	40.127.169.103	192.168.2.4
Apr 25, 2024 14:54:44.559299946 CEST	49724	80	192.168.2.4	23.47.204.77
Apr 25, 2024 14:54:44.668993950 CEST	80	49724	23.47.204.77	192.168.2.4
Apr 25, 2024 14:54:44.669065952 CEST	49724	80	192.168.2.4	23.47.204.77
Apr 25, 2024 14:54:45.088289022 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:45.088371038 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:45.088459969 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:45.088895082 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:45.088913918 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:45.322643042 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:45.323518991 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:45.323551893 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:45.323909044 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:45.324383020 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:45.324445963 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:45.381515980 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:51.637753963 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:51.637809038 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:51.637873888 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:51.638771057 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:51.638792038 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:51.864959955 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:51.879554987 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:51.879600048 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:51.880402088 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:51.881084919 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:51.881216049 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:51.881381035 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:51.881418943 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:51.881481886 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:51.928128958 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:52.127019882 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:52.127233028 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:52.127279997 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:52.129435062 CEST	49982	443	192.168.2.4	172.217.215.100
Apr 25, 2024 14:54:52.129456043 CEST	443	49982	172.217.215.100	192.168.2.4
Apr 25, 2024 14:54:52.138097048 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.138127089 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.138595104 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.139062881 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.139075041 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.365437031 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.365801096 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.365809917 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.366306067 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.367376089 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.367444038 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.367539883 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.408124924 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.592822075 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.592884064 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.594186068 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.594204903 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.594782114 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:52.594822884 CEST	443	49983	64.233.177.113	192.168.2.4
Apr 25, 2024 14:54:52.594973087 CEST	49983	443	192.168.2.4	64.233.177.113
Apr 25, 2024 14:54:55.314637899 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:55.314796925 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:54:55.314882040 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:57.248822927 CEST	49981	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:54:57.248861074 CEST	443	49981	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:45.149872065 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:45.149972916 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:45.150110960 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:45.150388002 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:45.150445938 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:45.377693892 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:45.378067970 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:45.378106117 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:45.378637075 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:45.379066944 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:45.379159927 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:45.426265001 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:55.387463093 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:55.387541056 CEST	443	49988	64.233.177.99	192.168.2.4
Apr 25, 2024 14:55:55.387594938 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:57.211057901 CEST	49988	443	192.168.2.4	64.233.177.99
Apr 25, 2024 14:55:57.211091042 CEST	443	49988	64.233.177.99	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 14:53:42.887916088 CEST	53	54618	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:42.889815092 CEST	53	56926	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:43.613503933 CEST	53	62908	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:45.036741018 CEST	63440	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:45.036937952 CEST	61244	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:45.146795988 CEST	53	61244	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:45.146889925 CEST	53	63440	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:51.505985975 CEST	59281	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:51.506371975 CEST	57609	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:51.616533995 CEST	53	59281	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:51.616894007 CEST	53	57609	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:53.201672077 CEST	60436	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:53.201888084 CEST	52410	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:53.311820030 CEST	53	60436	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:53.312906027 CEST	53	52410	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:55.305270910 CEST	53	59235	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:55.870655060 CEST	138	138	192.168.2.4	192.168.2.255
Apr 25, 2024 14:53:56.966850996 CEST	52325	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:56.966999054 CEST	54255	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:57.077265024 CEST	53	52325	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:57.079787970 CEST	53	54255	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:57.670363903 CEST	62844	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:57.670603991 CEST	54155	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:57.765284061 CEST	54417	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:57.765628099 CEST	61912	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:57.784028053 CEST	53	62844	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:57.784115076 CEST	53	54155	1.1.1.1	192.168.2.4
Apr 25, 2024 14:53:58.460699081 CEST	61050	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:53:58.460699081 CEST	62475	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:00.913634062 CEST	53	59584	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:01.157705069 CEST	53	58428	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:02.443806887 CEST	53	58338	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:03.624533892 CEST	53	58543	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:04.042347908 CEST	53	50734	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:05.189466953 CEST	56990	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:05.189599037 CEST	52241	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:05.299463034 CEST	53	52241	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:05.299788952 CEST	53	56990	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:13.957556009 CEST	56404	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:13.957974911 CEST	52029	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:14.067513943 CEST	53	56404	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:14.068381071 CEST	53	52029	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:15.279706001 CEST	65228	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:15.279900074 CEST	65497	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:15.389713049 CEST	53	65228	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:15.390863895 CEST	53	65497	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:15.562439919 CEST	53	59606	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:15.841249943 CEST	53	50596	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:16.167830944 CEST	53	62939	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:17.533970118 CEST	53	50745	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:17.986082077 CEST	53	50167	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:18.693278074 CEST	59228	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:18.693433046 CEST	51547	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:18.803303003 CEST	53	51547	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:18.803390026 CEST	53	59228	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:18.811173916 CEST	53	58109	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:20.759315968 CEST	55576	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:20.759480953 CEST	61037	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:20.869426966 CEST	53	55576	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:20.869649887 CEST	53	61037	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:21.103884935 CEST	57838	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:21.104036093 CEST	60377	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:21.214962959 CEST	53	57838	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:21.214987040 CEST	53	60377	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:22.366771936 CEST	53	49514	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:26.923563004 CEST	63729	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:26.924120903 CEST	60310	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:26.925390005 CEST	50267	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:26.925750017 CEST	49329	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:27.355447054 CEST	52089	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:27.355609894 CEST	62466	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:27.359698057 CEST	53673	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:27.359864950 CEST	51911	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:27.361296892 CEST	63846	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:27.361466885 CEST	54368	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:29.138848066 CEST	54631	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:29.143491983 CEST	60937	53	192.168.2.4	1.1.1.1
Apr 25, 2024 14:54:42.674596071 CEST	53	63539	1.1.1.1	192.168.2.4
Apr 25, 2024 14:54:47.463782072 CEST	53	54712	1.1.1.1	192.168.2.4
Apr 25, 2024 14:55:12.292026043 CEST	53	57741	1.1.1.1	192.168.2.4
Apr 25, 2024 14:55:59.593627930 CEST	53	57178	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 25, 2024 14:53:53.311889887 CEST	192.168.2.4	1.1.1.1	c1ec	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 14:53:45.036741018 CEST	192.168.2.4	1.1.1.1	0x9cd4	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:45.036937952 CEST	192.168.2.4	1.1.1.1	0x227	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 14:53:51.505985975 CEST	192.168.2.4	1.1.1.1	0xb343	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:51.506371975 CEST	192.168.2.4	1.1.1.1	0x1136	Standard query (0)	aka.ms	65	IN (0x0001)	false
Apr 25, 2024 14:53:53.201672077 CEST	192.168.2.4	1.1.1.1	0xe566	Standard query (0)	aka.ms	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:53.201888084 CEST	192.168.2.4	1.1.1.1	0x1a7d	Standard query (0)	aka.ms	65	IN (0x0001)	false
Apr 25, 2024 14:53:56.966850996 CEST	192.168.2.4	1.1.1.1	0x13dc	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:56.966999054 CEST	192.168.2.4	1.1.1.1	0x73bf	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 25, 2024 14:53:57.670363903 CEST	192.168.2.4	1.1.1.1	0xf753	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:57.670603991 CEST	192.168.2.4	1.1.1.1	0x361b	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 25, 2024 14:53:57.765284061 CEST	192.168.2.4	1.1.1.1	0x53ae	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:57.765628099 CEST	192.168.2.4	1.1.1.1	0x1d7	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Apr 25, 2024 14:53:58.460699081 CEST	192.168.2.4	1.1.1.1	0x58f1	Standard query (0)	c.s-microsoft.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:58.460699081 CEST	192.168.2.4	1.1.1.1	0xfd2e	Standard query (0)	c.s-microsoft.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:05.189466953 CEST	192.168.2.4	1.1.1.1	0xe882	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:05.189599037 CEST	192.168.2.4	1.1.1.1	0x3d07	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:13.957556009 CEST	192.168.2.4	1.1.1.1	0x9f2c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:13.957974911 CEST	192.168.2.4	1.1.1.1	0x607f	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:15.279706001 CEST	192.168.2.4	1.1.1.1	0x7f19	Standard query (0)	play-lh.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:15.279900074 CEST	192.168.2.4	1.1.1.1	0x6469	Standard query (0)	play-lh.googleusercontent.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:18.693278074 CEST	192.168.2.4	1.1.1.1	0x8043	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:18.693433046 CEST	192.168.2.4	1.1.1.1	0xcd9b	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 14:54:20.759315968 CEST	192.168.2.4	1.1.1.1	0xed0a	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:20.759480953 CEST	192.168.2.4	1.1.1.1	0xef15	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Apr 25, 2024 14:54:21.103884935 CEST	192.168.2.4	1.1.1.1	0x5170	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:21.104036093 CEST	192.168.2.4	1.1.1.1	0x53fd	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:26.923563004 CEST	192.168.2.4	1.1.1.1	0x3f37	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:26.924120903 CEST	192.168.2.4	1.1.1.1	0x7fc6	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:26.925390005 CEST	192.168.2.4	1.1.1.1	0xae21	Standard query (0)	is2-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:26.925750017 CEST	192.168.2.4	1.1.1.1	0x43b3	Standard query (0)	is2-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:27.355447054 CEST	192.168.2.4	1.1.1.1	0x1121	Standard query (0)	is5-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:27.355609894 CEST	192.168.2.4	1.1.1.1	0x1ad6	Standard query (0)	is5-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:27.359698057 CEST	192.168.2.4	1.1.1.1	0x4e59	Standard query (0)	is4-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:27.359864950 CEST	192.168.2.4	1.1.1.1	0xbca6	Standard query (0)	is4-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:27.361296892 CEST	192.168.2.4	1.1.1.1	0x2835	Standard query (0)	is3-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:27.361466885 CEST	192.168.2.4	1.1.1.1	0xd693	Standard query (0)	is3-ssl.mzstatic.com	65	IN (0x0001)	false
Apr 25, 2024 14:54:29.138848066 CEST	192.168.2.4	1.1.1.1	0x32eb	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:29.143491983 CEST	192.168.2.4	1.1.1.1	0x5d18	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 14:53:45.146795988 CEST	1.1.1.1	192.168.2.4	0x227	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 14:53:45.146889925 CEST	1.1.1.1	192.168.2.4	0x9cd4	No error (0)	www.google.com		64.233.177.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:45.146889925 CEST	1.1.1.1	192.168.2.4	0x9cd4	No error (0)	www.google.com		64.233.177.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:45.146889925 CEST	1.1.1.1	192.168.2.4	0x9cd4	No error (0)	www.google.com		64.233.177.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:45.146889925 CEST	1.1.1.1	192.168.2.4	0x9cd4	No error (0)	www.google.com		64.233.177.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:45.146889925 CEST	1.1.1.1	192.168.2.4	0x9cd4	No error (0)	www.google.com		64.233.177.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:45.146889925 CEST	1.1.1.1	192.168.2.4	0x9cd4	No error (0)	www.google.com		64.233.177.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:51.616533995 CEST	1.1.1.1	192.168.2.4	0xb343	No error (0)	aka.ms		23.35.30.151	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:53.311820030 CEST	1.1.1.1	192.168.2.4	0xe566	No error (0)	aka.ms		23.63.156.228	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:55.449002981 CEST	1.1.1.1	192.168.2.4	0x4687	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:55.491884947 CEST	1.1.1.1	192.168.2.4	0xdcc8	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:55.491884947 CEST	1.1.1.1	192.168.2.4	0xdcc8	No error (0)	shed.dual-low.part-0012.t-0009.t-msedge.net	part-0012.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:55.491884947 CEST	1.1.1.1	192.168.2.4	0xdcc8	No error (0)	part-0012.t-0009.t-msedge.net		13.107.246.40	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:55.491884947 CEST	1.1.1.1	192.168.2.4	0xdcc8	No error (0)	part-0012.t-0009.t-msedge.net		13.107.213.40	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:57.077265024 CEST	1.1.1.1	192.168.2.4	0x13dc	No error (0)	play-lh.googleusercontent.com		172.217.215.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:57.784028053 CEST	1.1.1.1	192.168.2.4	0xf753	No error (0)	play-lh.googleusercontent.com		142.250.105.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:57.824282885 CEST	1.1.1.1	192.168.2.4	0x95ba	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:57.824282885 CEST	1.1.1.1	192.168.2.4	0x95ba	No error (0)	shed.dual-low.part-0013.t-0009.t-msedge.net	part-0013.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:57.824282885 CEST	1.1.1.1	192.168.2.4	0x95ba	No error (0)	part-0013.t-0009.t-msedge.net		13.107.246.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:57.824282885 CEST	1.1.1.1	192.168.2.4	0x95ba	No error (0)	part-0013.t-0009.t-msedge.net		13.107.213.41	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:53:57.839634895 CEST	1.1.1.1	192.168.2.4	0x2bb3	No error (0)	kmas-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:57.875579119 CEST	1.1.1.1	192.168.2.4	0x1d7	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:57.876187086 CEST	1.1.1.1	192.168.2.4	0x53ae	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:58.570760965 CEST	1.1.1.1	192.168.2.4	0xfd2e	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:53:58.571876049 CEST	1.1.1.1	192.168.2.4	0x58f1	No error (0)	c.s-microsoft.com	c-s.cms.ms.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:05.299463034 CEST	1.1.1.1	192.168.2.4	0x3d07	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 14:54:05.299788952 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	www.google.com		64.233.185.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:05.299788952 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	www.google.com		64.233.185.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:05.299788952 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	www.google.com		64.233.185.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:05.299788952 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	www.google.com		64.233.185.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:05.299788952 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	www.google.com		64.233.185.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:05.299788952 CEST	1.1.1.1	192.168.2.4	0xe882	No error (0)	www.google.com		64.233.185.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:14.067513943 CEST	1.1.1.1	192.168.2.4	0x9f2c	No error (0)	play.google.com		172.217.215.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:14.067513943 CEST	1.1.1.1	192.168.2.4	0x9f2c	No error (0)	play.google.com		172.217.215.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:14.067513943 CEST	1.1.1.1	192.168.2.4	0x9f2c	No error (0)	play.google.com		172.217.215.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:14.067513943 CEST	1.1.1.1	192.168.2.4	0x9f2c	No error (0)	play.google.com		172.217.215.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:14.067513943 CEST	1.1.1.1	192.168.2.4	0x9f2c	No error (0)	play.google.com		172.217.215.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:14.067513943 CEST	1.1.1.1	192.168.2.4	0x9f2c	No error (0)	play.google.com		172.217.215.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:15.389713049 CEST	1.1.1.1	192.168.2.4	0x7f19	No error (0)	play-lh.googleusercontent.com		108.177.122.119	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:18.803390026 CEST	1.1.1.1	192.168.2.4	0x8043	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:18.803390026 CEST	1.1.1.1	192.168.2.4	0x8043	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:18.803390026 CEST	1.1.1.1	192.168.2.4	0x8043	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:18.803390026 CEST	1.1.1.1	192.168.2.4	0x8043	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:20.869426966 CEST	1.1.1.1	192.168.2.4	0xed0a	No error (0)	stats.g.doubleclick.net		172.253.124.155	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:20.869426966 CEST	1.1.1.1	192.168.2.4	0xed0a	No error (0)	stats.g.doubleclick.net		172.253.124.156	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:20.869426966 CEST	1.1.1.1	192.168.2.4	0xed0a	No error (0)	stats.g.doubleclick.net		172.253.124.154	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:20.869426966 CEST	1.1.1.1	192.168.2.4	0xed0a	No error (0)	stats.g.doubleclick.net		172.253.124.157	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:21.214962959 CEST	1.1.1.1	192.168.2.4	0x5170	No error (0)	play.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:21.214962959 CEST	1.1.1.1	192.168.2.4	0x5170	No error (0)	play.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:21.214962959 CEST	1.1.1.1	192.168.2.4	0x5170	No error (0)	play.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:21.214962959 CEST	1.1.1.1	192.168.2.4	0x5170	No error (0)	play.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:21.214962959 CEST	1.1.1.1	192.168.2.4	0x5170	No error (0)	play.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:21.214962959 CEST	1.1.1.1	192.168.2.4	0x5170	No error (0)	play.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 14:54:27.034212112 CEST	1.1.1.1	192.168.2.4	0x7fc6	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.035516977 CEST	1.1.1.1	192.168.2.4	0x3f37	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.036345959 CEST	1.1.1.1	192.168.2.4	0xae21	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.036839962 CEST	1.1.1.1	192.168.2.4	0x43b3	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.466345072 CEST	1.1.1.1	192.168.2.4	0x1121	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.466635942 CEST	1.1.1.1	192.168.2.4	0x1ad6	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.472243071 CEST	1.1.1.1	192.168.2.4	0xbca6	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.472266912 CEST	1.1.1.1	192.168.2.4	0x4e59	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.472575903 CEST	1.1.1.1	192.168.2.4	0xd693	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:27.473036051 CEST	1.1.1.1	192.168.2.4	0x2835	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:29.248603106 CEST	1.1.1.1	192.168.2.4	0x32eb	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 14:54:29.253937006 CEST	1.1.1.1	192.168.2.4	0x5d18	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

fs.microsoft.com

aka.ms

krs.microsoft.com

https:

play-lh.googleusercontent.com

www.google.com

play.google.com

stats.g.doubleclick.net

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49738	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 12:53:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0790) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=151787 Date: Thu, 25 Apr 2024 12:53:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	184.31.62.93	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 12:53:48 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=151787 Date: Thu, 25 Apr 2024 12:53:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-25 12:53:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49741	23.35.30.151	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:54 UTC	635	OUT	GET /o0ukef HTTP/1.1 Host: aka.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:53:55 UTC	436	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://aka.ms/krs?id=-crYd9Lj Request-Context: appId=cid-v1:b47e5e27-bf85-45ba-a97c-0377ce0e5779 X-Response-Cache-Status: True Expires: Thu, 25 Apr 2024 12:53:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 25 Apr 2024 12:53:55 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49740	23.35.30.151	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:55 UTC	644	OUT	GET /krs?id=-crYd9Lj HTTP/1.1 Host: aka.ms Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:53:55 UTC	452	IN	HTTP/1.1 301 Moved Permanently Content-Length: 0 Server: Kestrel Location: https://krs.microsoft.com/redirect?id=-crYd9Lj Request-Context: appId=cid-v1:26ef1154-5995-4d24-ad78-ef0b04f11587 X-Response-Cache-Status: True Expires: Thu, 25 Apr 2024 12:53:55 GMT Cache-Control: max-age=0, no-cache, no-store Pragma: no-cache Date: Thu, 25 Apr 2024 12:53:55 GMT Connection: close Strict-Transport-Security: max-age=31536000 ; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	13.107.246.40	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:55 UTC	791	OUT	GET /redirect?id=-crYd9Lj HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
2024-04-25 12:53:56 UTC	596	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:53:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: TiPMix=69.17850569958948; path=/; HttpOnly; Domain=krs.microsoft.com; Max-Age=3600; Secure; SameSite=None Set-Cookie: x-ms-routing-name=self; path=/; HttpOnly; Domain=krs.microsoft.com; Max-Age=3600; Secure; SameSite=None Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125356Z-16f56cb894fx9zr8vpqekagkqw00000003ug00000000870v X-Cache: CONFIG_NOCACHE
2024-04-25 12:53:56 UTC	1757	IN	Data Raw: 36 64 36 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 70 70 6c 65 2d 69 74 75 6e 65 73 2d 61 70 70 22 20 63 6f 6e 74 65 6e 74 3d 22 61 70 70 2d 69 64 3d 39 35 31 39 33 37 35 39 36 2c 20 61 70 70 2d 61 72 67 75 6d 65 6e 74 3d 68 74 74 70 73 3a 2f 2f 6b 72 73 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 Data Ascii: 6d6<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="apple-itunes-app" content="app-id=951937596, app-argument=https://krs.microsoft.c
2024-04-25 12:53:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	13.107.246.40	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:57 UTC	748	OUT	GET /css/styles.css HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://krs.microsoft.com/redirect?id=-crYd9Lj Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
2024-04-25 12:53:57 UTC	430	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:53:57 GMT Content-Type: text/css Content-Length: 555 Connection: close ETag: "1da8c5a0d5d162b" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125357Z-16f56cb894fsrrwtv9xx2sy9ns00000003rg00000000akcx X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-25 12:53:57 UTC	555	IN	Data Raw: ef bb bf 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 65 67 6f 65 20 55 49 2c 53 65 67 6f 65 55 49 2c 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 34 70 78 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 0d 0a 2e 66 6c 65 78 2d 72 6f 77 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 Data Ascii: .container { font-family: Segoe UI,SegoeUI,"Helvetica Neue",Helvetica,Arial,sans-serif; margin-top: 64px; display: flex; flex-direction: column; text-align: center; align-items: center;}.flex-row { display: flex

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49747	13.107.246.40	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:57 UTC	811	OUT	GET /images/GooglePlayStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=-crYd9Lj Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
2024-04-25 12:53:57 UTC	432	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:53:57 GMT Content-Type: image/png Content-Length: 9371 Connection: close ETag: "1da8c5a0898449b" Last-Modified: Thu, 11 Apr 2024 21:48:48 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125357Z-16f7b4795d4h54m2ae5y2wchuw00000007qg000000005x5v X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-25 12:53:57 UTC	9371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 a8 08 03 00 00 00 c0 6e 84 20 00 00 00 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da 6d 50 d1 0d 43 21 08 fc 77 8a 8e a0 80 0a e3 d0 be d7 a4 1b 74 fc a2 60 f2 6c 7b 89 27 1e 78 22 e9 7c bf 9e e9 36 00 85 12 d5 ce 4d 5a cb 06 12 12 50 0b 38 3b 74 72 c9 34 79 02 29 43 a8 9b 9e 74 5d 02 93 70 54 fa 91 9b ef 65 e9 71 61 ed 45 2d aa 17 23 7e 44 e2 be 27 84 c2 9f bf 8c 20 3a 1b 1d 8d f8 08 23 09 23 04 4f 94 30 50 ff 56 6e c2 fd fa 85 fb 99 77 b0 af 34 88 78 6f fb e7 dc 6d 7a 47 b5 77 10 e0 c4 82 d9 18 91 bc 01 1c 0b 13 aa 05 75 b2 8c 42 2b 53 63 9e 4a 0f 33 1b c8 bf 39 2d a4 0f 31 ad 59 4f 0b 2b 4a 7e 00 00 01 84 69 43 43 50 49 43 43 20 70 72 6f 66 Data Ascii: PNGIHDR4n zTXtRaw profile type exifxmPC!wt`l{'x"\|6MZP8;tr4y)Ct]pTeqaE-#~D' :##O0PVnw4xomzGwuB+ScJ39-1YO+J~iCCPICC prof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49749	13.107.246.40	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:57 UTC	809	OUT	GET /images/AppleAppStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/redirect?id=-crYd9Lj Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
2024-04-25 12:53:57 UTC	432	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:53:57 GMT Content-Type: image/png Content-Length: 6391 Connection: close ETag: "1da8c5a0d5d0cf7" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125357Z-16f56cb894fsrrwtv9xx2sy9ns00000003n000000000dnh0 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-25 12:53:57 UTC	6391	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 a0 08 03 00 00 00 e3 25 4f 7f 00 00 01 53 50 4c 54 45 00 00 00 a7 a7 a7 a6 a6 a6 a8 a8 a8 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a5 a5 a5 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 00 00 00 ff ff ff a6 a6 a6 59 59 59 4d 4d 4d 1b 1b 1b cc cc cc 04 04 04 fd fd fd fa fa fa f0 f0 f0 a3 a3 a3 69 69 69 33 33 33 94 94 94 bb bb bb e3 e3 e3 aa aa aa 08 08 08 ee ee ee a0 a0 a0 81 81 81 0c 0c 0c f4 f4 f4 de de de 21 21 21 d9 d9 d9 16 16 16 88 88 88 65 65 65 10 10 10 7d 7d 7d f6 f6 f6 0f 0f 0f c8 c8 c8 49 49 49 d2 d2 d2 70 70 70 25 25 25 9a 9a 9a 77 77 77 1f 1f 1f fc fc fc e8 e8 e8 e6 e6 e6 6d 6d 6d 3c 3c 3c 42 42 42 98 98 98 2b 2b 2b 28 Data Ascii: PNGIHDR%OSPLTEYYYMMMiii333!!!eee}}}IIIppp%%%wwwmmm<<<BBB+++(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49751	172.217.215.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:57 UTC	767	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://krs.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:53:57 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 12:31:11 GMT Expires: Fri, 26 Apr 2024 12:31:11 GMT Cache-Control: public, max-age=86400, no-transform Age: 1366 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:53:57 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-25 12:53:57 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-25 12:53:57 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-25 12:53:57 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-25 12:53:57 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-25 12:53:57 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-25 12:53:57 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-25 12:53:57 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49744	13.85.23.86	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:57 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GZoCnrt2d65Vk+w&MD=BKNv2Sed HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-25 12:53:57 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 6cea2e49-8895-4681-a3b6-38800ef96aaa MS-RequestId: 970ac03a-b56a-4487-af1c-20bc1755cf3d MS-CV: MSX0H4kF5km3J1gf.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 12:53:56 GMT Connection: close Content-Length: 24490
2024-04-25 12:53:57 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-25 12:53:57 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49755	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:58 UTC	530	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:53:58 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:56:06 GMT Expires: Fri, 26 Apr 2024 11:56:06 GMT Cache-Control: public, max-age=86400, no-transform Age: 3472 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:53:58 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-25 12:53:58 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-25 12:53:58 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-25 12:53:58 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-25 12:53:58 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-25 12:53:58 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-25 12:53:58 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-25 12:53:58 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49756	13.107.246.41	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:58 UTC	553	OUT	GET /images/GooglePlayStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
2024-04-25 12:53:58 UTC	432	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:53:58 GMT Content-Type: image/png Content-Length: 9371 Connection: close ETag: "1da8c5a0898449b" Last-Modified: Thu, 11 Apr 2024 21:48:48 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125358Z-16f7b4795d4xft4nk2mmryd7dc0000000900000000002m7f X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-25 12:53:58 UTC	9371	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 34 00 00 00 a8 08 03 00 00 00 c0 6e 84 20 00 00 00 c2 7a 54 58 74 52 61 77 20 70 72 6f 66 69 6c 65 20 74 79 70 65 20 65 78 69 66 00 00 78 da 6d 50 d1 0d 43 21 08 fc 77 8a 8e a0 80 0a e3 d0 be d7 a4 1b 74 fc a2 60 f2 6c 7b 89 27 1e 78 22 e9 7c bf 9e e9 36 00 85 12 d5 ce 4d 5a cb 06 12 12 50 0b 38 3b 74 72 c9 34 79 02 29 43 a8 9b 9e 74 5d 02 93 70 54 fa 91 9b ef 65 e9 71 61 ed 45 2d aa 17 23 7e 44 e2 be 27 84 c2 9f bf 8c 20 3a 1b 1d 8d f8 08 23 09 23 04 4f 94 30 50 ff 56 6e c2 fd fa 85 fb 99 77 b0 af 34 88 78 6f fb e7 dc 6d 7a 47 b5 77 10 e0 c4 82 d9 18 91 bc 01 1c 0b 13 aa 05 75 b2 8c 42 2b 53 63 9e 4a 0f 33 1b c8 bf 39 2d a4 0f 31 ad 59 4f 0b 2b 4a 7e 00 00 01 84 69 43 43 50 49 43 43 20 70 72 6f 66 Data Ascii: PNGIHDR4n zTXtRaw profile type exifxmPC!wt`l{'x"\|6MZP8;tr4y)Ct]pTeqaE-#~D' :##O0PVnw4xomzGwuB+ScJ39-1YO+J~iCCPICC prof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49757	13.107.246.41	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:58 UTC	551	OUT	GET /images/AppleAppStoreBadge.png HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
2024-04-25 12:53:58 UTC	432	IN	HTTP/1.1 200 OK Date: Thu, 25 Apr 2024 12:53:58 GMT Content-Type: image/png Content-Length: 6391 Connection: close ETag: "1da8c5a0d5d0cf7" Last-Modified: Thu, 11 Apr 2024 21:48:56 GMT Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125358Z-16f7b4795d446rhxfx5wgh3rk400000003w0000000001y62 X-Cache: CONFIG_NOCACHE Accept-Ranges: bytes
2024-04-25 12:53:58 UTC	6391	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e0 00 00 00 a0 08 03 00 00 00 e3 25 4f 7f 00 00 01 53 50 4c 54 45 00 00 00 a7 a7 a7 a6 a6 a6 a8 a8 a8 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a5 a5 a5 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a6 a7 a7 a7 a6 a6 a6 a6 a6 a6 00 00 00 ff ff ff a6 a6 a6 59 59 59 4d 4d 4d 1b 1b 1b cc cc cc 04 04 04 fd fd fd fa fa fa f0 f0 f0 a3 a3 a3 69 69 69 33 33 33 94 94 94 bb bb bb e3 e3 e3 aa aa aa 08 08 08 ee ee ee a0 a0 a0 81 81 81 0c 0c 0c f4 f4 f4 de de de 21 21 21 d9 d9 d9 16 16 16 88 88 88 65 65 65 10 10 10 7d 7d 7d f6 f6 f6 0f 0f 0f c8 c8 c8 49 49 49 d2 d2 d2 70 70 70 25 25 25 9a 9a 9a 77 77 77 1f 1f 1f fc fc fc e8 e8 e8 e6 e6 e6 6d 6d 6d 3c 3c 3c 42 42 42 98 98 98 2b 2b 2b 28 Data Ascii: PNGIHDR%OSPLTEYYYMMMiii333!!!eee}}}IIIppp%%%wwwmmm<<<BBB+++(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49769	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:53:59 UTC	923	OUT	GET /search?q=d+and+cafe&oq=D+and+Cafe&aqs=chrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7&sourceid=chrome&ie=UTF-8 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:00 UTC	2324	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM x-hallmonitor-challenge: CgsI6KSpsQYQ18KBQxIEuZhC5g Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-2tCKwlrYeOJOmrz5NDSiww' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Thu, 25 Apr 2024 12:54:00 GMT Server: gws Content-Length: 531 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-25-12; expires=Sat, 25-May-2024 12:54:00 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; expires=Tue, 22-Oct-2024 12:54:00 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320; expires=Fri, 25-Oct-2024 12:53:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:00 UTC	531	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 25 33 46 71 25 33 44 64 25 32 42 61 6e 64 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49768	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:00 UTC	1365	OUT	GET /sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:00 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Thu, 25 Apr 2024 12:54:00 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3559 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:00 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 65 61 72 63 68 3f 71 3d 64 2b 61 6e 64 2b 63 61 66 65 26 61 6d 70 3b 6f 71 3d 44 2b 61 6e 64 2b Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/search?q=d+and+cafe&oq=D+and+
2024-04-25 12:54:00 UTC	1255	IN	Data Raw: 6e 20 79 6f 75 72 20 77 65 62 20 62 72 6f 77 73 65 72 2e 0a 3c 2f 64 69 76 3e 0a 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 61 70 69 2e 6a 73 22 20 61 73 79 6e 63 20 64 65 66 65 72 3e 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 Data Ascii: n your web browser.</div></noscript><script src="https://www.google.com/recaptcha/api.js" async defer></script><script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-r
2024-04-25 12:54:00 UTC	1255	IN	Data Raw: 73 20 72 65 61 6c 6c 79 20 79 6f 75 20 73 65 6e 64 69 6e 67 20 74 68 65 20 72 65 71 75 65 73 74 73 2c 20 61 6e 64 20 6e 6f 74 20 61 20 72 6f 62 6f 74 2e 20 20 3c 61 20 68 72 65 66 3d 22 23 22 20 6f 6e 63 6c 69 63 6b 3d 22 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 69 6e 66 6f 44 69 76 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 27 62 6c 6f 63 6b 27 3b 22 3e 57 68 79 20 64 69 64 20 74 68 69 73 20 68 61 70 70 65 6e 3f 3c 2f 61 3e 3c 62 72 3e 3c 62 72 3e 0a 0a 3c 64 69 76 20 69 64 3d 22 69 6e 66 6f 44 69 76 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 20 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 20 6d 61 72 67 69 6e 3a 30 20 30 20 31 Data Ascii: s really you sending the requests, and not a robot. <a href="#" onclick="document.getElementById('infoDiv').style.display='block';">Why did this happen?</a><br><br><div id="infoDiv" style="display:none; background-color:#eee; padding:10px; margin:0 0 1
2024-04-25 12:54:00 UTC	150	IN	Data Raw: 61 71 73 3d 63 68 72 6f 6d 65 2e 30 2e 30 69 35 31 32 6a 30 69 32 32 69 33 30 69 33 39 35 6a 30 69 31 35 69 32 32 69 33 30 69 33 39 35 6a 30 69 32 32 69 33 30 69 33 39 35 6c 32 6a 36 39 69 36 30 6a 36 39 69 36 31 6c 32 2e 33 33 36 37 6a 31 6a 37 26 61 6d 70 3b 73 6f 75 72 63 65 69 64 3d 63 68 72 6f 6d 65 26 61 6d 70 3b 69 65 3d 55 54 46 2d 38 3c 62 72 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 64 69 76 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a Data Ascii: aqs=chrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7&sourceid=chrome&ie=UTF-8<br></div></div></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49770	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:00 UTC	1257	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:01 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 25 Apr 2024 12:54:00 GMT Date: Thu, 25 Apr 2024 12:54:00 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:01 UTC	727	IN	Data Raw: 34 63 36 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 4c6/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-25 12:54:01 UTC	502	IN	Data Raw: 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 70 6f 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 3b 70 6f 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 27 61 6e 6f 6e 79 6d 6f 75 73 27 3b 70 6f 2e 69 6e 74 65 67 72 69 74 79 3d 27 73 68 61 33 38 34 2d 30 6c 4a 6b 4f 56 48 44 79 33 49 74 59 6c 43 62 55 Data Ascii: cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);po.src='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-0lJkOVHDy3ItYlCbU
2024-04-25 12:54:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49772	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:02 UTC	1884	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=YyDnde3O9WYNuQVVY5g6-6dWdo0pEVC326lgJyDqJyqMH_ikw1360j7nEupoaiGuIsvVy42dd51Ct6aRPH9IzbjQ_BviMQQRgQyHgM_AVVXnCCWjWQCqjbjCZPQ5vuHaVZ9yreHO-QXNi1RG3cwsHEFlRH5amkj4GDO5zULH0Lm98oOx9sWiGXabv7eLQR8PhbmSQV-8qOcvZX1GFVxcZTu0T7EJaJPxFFjK6zgmNygiatJIqoVJlRTf_L1ro06FNWAV3U2dyRk5bQnIcu3UBMvy0IiFWjo&cb=zeozwrjmm3s0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:02 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:02 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-YMAf9sMsiSZfRlTV11v9Jg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:02 UTC	364	IN	Data Raw: 32 61 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2adf<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 59 4d 41 66 39 73 4d 73 69 53 5a 66 52 6c 54 56 31 31 76 39 4a 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="YMAf9sMsiSZfRlTV11v9Jg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 49 6c 74 51 53 65 38 5a 62 31 4e 59 39 42 69 36 35 37 4f 59 69 44 6d 35 61 36 70 4a 44 6a 79 74 51 67 4b 31 4e 50 43 6f 57 47 75 58 71 53 4e 55 59 6a 6c 34 37 46 38 42 62 69 56 42 57 35 59 52 6b 56 74 7a 66 76 38 51 5a 4d 6e 45 6a 2d 35 7a 42 33 6f 37 5a 79 56 34 6b 38 38 67 66 59 35 39 73 5f 36 31 4c 6f 77 48 47 59 57 55 68 48 6a 34 6a 52 4e 54 6a 63 45 43 36 57 42 5f 34 37 44 5f 4e 6d 2d 4d 6a 41 6e 7a 66 46 38 76 51 43 64 6f 33 49 78 5a 5f 61 48 64 5f 35 79 63 4c 4d 5f 33 39 4b 45 54 6a 74 70 38 35 42 4d 75 38 6a 45 45 6c 47 5f 78 6a 4c 47 43 66 41 6a 67 34 36 31 45 73 66 54 42 38 54 4d 5a 56 77 45 39 58 4b 69 45 6a 34 48 6b 7a 6a 74 37 65 58 59 54 57 33 75 6c 73 52 48 55 4c 78 57 4c 54 37 59 6d 42 47 71 51 58 68 63 69 49 71 45 62 2d 5a 51 56 75 52 34 Data Ascii: IltQSe8Zb1NY9Bi657OYiDm5a6pJDjytQgK1NPCoWGuXqSNUYjl47F8BbiVBW5YRkVtzfv8QZMnEj-5zB3o7ZyV4k88gfY59s_61LowHGYWUhHj4jRNTjcEC6WB_47D_Nm-MjAnzfF8vQCdo3IxZ_aHd_5ycLM_39KETjtp85BMu8jEElG_xjLGCfAjg461EsfTB8TMZVwE9XKiEj4Hkzjt7eXYTW3ulsRHULxWLT7YmBGqQXhciIqEb-ZQVuR4
2024-04-25 12:54:02 UTC	1255	IN	Data Raw: 38 78 5a 59 4f 6c 76 38 45 76 6f 66 56 39 31 5a 44 51 57 55 79 72 54 6a 39 4c 41 6d 48 57 6c 6a 77 53 4c 43 69 74 71 6e 63 69 67 49 72 58 62 5a 4b 71 32 38 4e 38 31 39 62 6f 46 58 42 34 49 5f 77 77 55 4a 66 71 65 74 67 61 4b 5f 4b 56 77 6c 6a 63 36 4c 75 68 6f 33 4a 58 6c 4c 58 64 2d 6f 76 61 35 4a 6a 5a 5f 55 7a 7a 4d 30 75 6a 47 51 38 46 48 56 79 68 69 4c 36 5f 37 33 36 6b 2d 73 45 5f 39 67 75 74 62 70 46 30 35 4d 58 2d 75 47 6e 5f 77 66 30 50 4c 5f 67 4c 78 76 49 6d 62 71 61 6e 63 78 7a 36 5a 71 41 2d 42 56 62 54 31 73 56 78 53 44 46 51 32 4e 75 32 5a 4d 50 2d 45 74 6b 31 49 31 6b 4a 4a 78 6b 42 4c 36 73 70 46 30 6c 36 62 69 67 35 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d Data Ascii: 8xZYOlv8EvofV91ZDQWUyrTj9LAmHWljwSLCitqncigIrXbZKq28N819boFXB4I_wwUJfqetgaK_KVwljc6Luho3JXlLXd-ova5JjZ_UzzM0ujGQ8FHVyhiL6_736k-sE_9gutbpF05MX-uGn_wf0PL_gLxvImbqancxz6ZqA-BVbT1sVxSDFQ2Nu2ZMP-Etk1I1kJJxkBL6spF0l6big5A"><script type="text/javascript" nonce=
2024-04-25 12:54:02 UTC	579	IN	Data Raw: 6c 76 61 6a 46 4d 63 6d 46 4b 61 44 56 59 63 58 46 4b 65 58 42 75 61 47 67 72 65 55 56 6a 64 57 31 32 54 6c 64 32 57 56 68 4b 53 6e 42 78 56 6b 70 42 56 57 34 72 51 58 4a 57 55 6b 59 35 54 32 6c 74 63 44 42 46 53 7a 45 79 62 32 74 6d 59 31 4a 48 63 6e 56 6b 63 6e 52 56 55 45 74 47 62 54 42 73 5a 56 4e 54 4d 55 31 72 57 6a 56 69 62 6c 4a 56 61 54 4a 55 65 54 4d 34 4e 58 4e 55 52 6b 46 71 64 47 45 79 57 6b 4e 52 59 54 51 34 62 30 6c 50 4e 45 56 75 53 32 52 55 62 45 4a 70 4e 58 42 53 5a 56 42 52 64 7a 42 4c 4b 31 70 76 61 56 4e 4c 4d 44 68 78 5a 6e 4a 6a 63 57 46 6b 51 32 4d 77 52 6b 39 61 53 6e 42 4d 4d 48 70 55 52 6b 4e 6f 55 33 5a 54 65 6d 31 71 4d 45 73 30 56 44 52 6d 63 30 6f 77 62 6d 30 32 4d 6c 6f 79 62 48 4d 35 62 32 68 6f 57 57 5a 57 63 32 78 6f 57 Data Ascii: lvajFMcmFKaDVYcXFKeXBuaGgreUVjdW12Tld2WVhKSnBxVkpBVW4rQXJWUkY5T2ltcDBFSzEyb2tmY1JHcnVkcnRVUEtGbTBsZVNTMU1rWjViblJVaTJUeTM4NXNURkFqdGEyWkNRYTQ4b0lPNEVuS2RUbEJpNXBSZVBRdzBLK1pvaVNLMDhxZnJjcWFkQ2MwRk9aSnBMMHpURkNoU3ZTem1qMEs0VDRmc0owbm02MloybHM5b2hoWWZWc2xoW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49776	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:03 UTC	1458	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=YyDnde3O9WYNuQVVY5g6-6dWdo0pEVC326lgJyDqJyqMH_ikw1360j7nEupoaiGuIsvVy42dd51Ct6aRPH9IzbjQ_BviMQQRgQyHgM_AVVXnCCWjWQCqjbjCZPQ5vuHaVZ9yreHO-QXNi1RG3cwsHEFlRH5amkj4GDO5zULH0Lm98oOx9sWiGXabv7eLQR8PhbmSQV-8qOcvZX1GFVxcZTu0T7EJaJPxFFjK6zgmNygiatJIqoVJlRTf_L1ro06FNWAV3U2dyRk5bQnIcu3UBMvy0IiFWjo&cb=zeozwrjmm3s0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:03 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Thu, 25 Apr 2024 12:54:03 GMT Date: Thu, 25 Apr 2024 12:54:03 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:03 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js');
2024-04-25 12:54:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49777	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:03 UTC	1446	OUT	GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=YyDnde3O9WYNuQVVY5g6-6dWdo0pEVC326lgJyDqJyqMH_ikw1360j7nEupoaiGuIsvVy42dd51Ct6aRPH9IzbjQ_BviMQQRgQyHgM_AVVXnCCWjWQCqjbjCZPQ5vuHaVZ9yreHO-QXNi1RG3cwsHEFlRH5amkj4GDO5zULH0Lm98oOx9sWiGXabv7eLQR8PhbmSQV-8qOcvZX1GFVxcZTu0T7EJaJPxFFjK6zgmNygiatJIqoVJlRTf_L1ro06FNWAV3U2dyRk5bQnIcu3UBMvy0IiFWjo&cb=zeozwrjmm3s0 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:03 UTC	810	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 18268 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 12:28:38 GMT Expires: Fri, 25 Apr 2025 12:28:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 16 Apr 2024 13:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 1525 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:03 UTC	445	IN	Data Raw: 2f 2a 20 41 6e 74 69 2d 73 70 61 6d 2e 20 57 61 6e 74 20 74 6f 20 73 61 79 20 68 65 6c 6c 6f 3f 20 43 6f 6e 74 61 63 74 20 28 62 61 73 65 36 34 29 20 59 6d 39 30 5a 33 56 68 63 6d 51 74 59 32 39 75 64 47 46 6a 64 45 42 6e 62 32 39 6e 62 47 55 75 59 32 39 74 20 2a 2f 20 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 21 28 4e 3d 28 52 3d 65 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 6e 75 6c 6c 29 2c 52 29 7c 7c 21 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 72 65 74 75 72 6e 20 4e 3b 74 72 79 7b 4e 3d 52 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 62 67 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 70 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 70 7d Data Ascii: /* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */ (function(){var f=function(R,N){if(!(N=(R=e.trustedTypes,null),R)\|\|!R.createPolicy)return N;try{N=R.createPolicy("bg",{createHTML:p,createScript:p,createScriptURL:p}
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 61 74 65 53 63 72 69 70 74 28 50 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 50 29 7b 72 65 74 75 72 6e 22 22 2b 50 7d 7d 28 65 29 28 41 72 72 61 79 28 37 38 32 34 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 2e 6a 6f 69 6e 28 22 5c 6e 22 29 2b 5b 27 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 27 2c 0a 27 27 2c 0a 27 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 27 2c 0a 27 2a 2f 27 2c 0a 27 76 61 72 20 52 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 72 65 74 75 72 6e 20 52 5b 4e 5d 3c 3c 32 34 7c 52 5b 28 4e 7c 30 29 2b 31 5d 3c 3c 31 36 7c 52 5b 28 4e 7c 30 29 2b 32 5d 3c 3c 38 7c 52 5b 28 4e 7c 30 29 2b 33 5d 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 34 33 38 3d 3d Data Ascii: ateScript(P)}:function(P){return""+P}}(e)(Array(7824Math.random()\|0).join("\n")+['(function(){/','',' SPDX-License-Identifier: Apache-2.0','*/','var Re=function(R,N){return R[N]<<24\|R[(N\|0)+1]<<16\|R[(N\|0)+2]<<8\|R[(N\|0)+3]},d=function(R,N,p){if(438==
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 5b 77 5d 2c 52 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 66 6f 72 28 4e 3d 5b 5d 3b 52 2d 2d 3b 29 4e 2e 70 75 73 68 28 32 35 35 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 29 3b 72 65 74 75 72 6e 20 4e 7d 2c 5a 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 28 4e 3d 4e 2e 58 5b 52 5d 2c 4e 29 29 74 68 72 6f 77 5b 4d 2c 33 30 2c 52 5d 3b 69 66 28 4e 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 4e 2e 63 72 65 61 74 65 28 29 3b 72 65 74 75 72 6e 28 4e 2e 63 72 65 61 74 65 28 33 2a 52 2a 52 2b 32 31 2a 52 2b 2d 33 34 29 2c 4e 29 2e 70 72 6f 74 6f 74 79 70 65 7d 2c 50 52 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 2c 6b 2c 50 29 7b 72 65 74 75 72 6e 20 50 3d 28 4e Data Ascii: [w],R);return N},c=function(R,N){for(N=[];R--;)N.push(255Math.random()\|0);return N},Z=function(R,N){if(void 0===(N=N.X[R],N))throw[M,30,R];if(N.value)return N.create();return(N.create(3RR+21R+-34),N).prototype},PR=function(R,N,p,e,w,T,k,P){return P=(N
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 67 69 3d 66 2c 32 5d 5d 2c 66 29 3c 3c 33 29 2d 34 3b 74 72 79 7b 54 2e 63 4f 3d 74 41 28 52 65 28 54 2c 28 66 7c 30 29 2b 34 29 2c 52 65 28 54 2c 66 29 2c 79 29 7d 63 61 74 63 68 28 61 29 7b 74 68 72 6f 77 20 61 3b 7d 7d 54 2e 70 75 73 68 28 54 2e 63 4f 5b 50 26 37 5d 5e 6b 29 7d 2c 77 3d 5a 28 35 39 2c 4e 29 29 3a 52 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 54 2e 70 75 73 68 28 6b 29 7d 2c 65 26 26 52 28 65 26 32 35 35 29 2c 4e 3d 70 2e 6c 65 6e 67 74 68 2c 65 3d 30 3b 65 3c 4e 3b 65 2b 2b 29 52 28 70 5b 65 5d 29 7d 2c 45 2c 56 30 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 28 70 3d 74 79 70 65 6f 66 20 52 2c 70 29 29 69 66 28 52 29 7b 69 66 28 52 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 72 65 74 Data Ascii: gi=f,2]],f)<<3)-4;try{T.cO=tA(Re(T,(f\|0)+4),Re(T,f),y)}catch(a){throw a;}}T.push(T.cO[P&7]^k)},w=Z(59,N)):R=function(k){T.push(k)},e&&R(e&255),N=p.length,e=0;e<N;e++)R(p[e])},E,V0=function(R,N,p){if("object"==(p=typeof R,p))if(R){if(R instanceof Array)ret
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 2c 28 4b 28 33 33 36 2c 52 2c 28 4b 28 34 38 35 2c 28 4b 28 28 64 28 35 35 2c 52 2c 28 4b 28 28 64 28 28 64 28 35 30 33 2c 52 2c 28 4b 28 31 32 37 2c 28 64 28 32 39 38 2c 52 2c 63 28 28 4b 28 34 31 38 2c 52 2c 28 4b 28 33 37 2c 52 2c 28 64 28 28 64 28 33 30 31 2c 52 2c 28 64 28 31 36 37 2c 28 4b 28 28 64 28 35 39 2c 52 2c 5b 30 2c 28 4b 28 31 37 31 2c 52 2c 28 4b 28 32 35 2c 28 4b 28 31 31 37 2c 28 4b 28 31 35 33 2c 52 2c 28 64 28 31 36 33 2c 52 2c 28 64 28 33 33 31 2c 28 64 28 34 33 38 2c 52 2c 28 52 2e 61 79 3d 28 4e 3d 28 28 52 2e 57 4f 3d 32 35 2c 52 29 2e 53 3d 28 52 2e 50 3d 5b 5d 2c 28 52 2e 54 3d 28 52 2e 6a 3d 66 61 6c 73 65 2c 52 29 2c 52 29 2e 4c 43 3d 30 2c 52 2e 5a 3d 28 28 28 28 52 2e 73 3d 30 2c 52 2e 59 3d 76 6f 69 64 20 30 2c 52 2e 42 3d Data Ascii: ,(K(336,R,(K(485,(K((d(55,R,(K((d((d(503,R,(K(127,(d(298,R,c((K(418,R,(K(37,R,(d((d(301,R,(d(167,(K((d(59,R,[0,(K(171,R,(K(25,(K(117,(K(153,R,(d(163,R,(d(331,(d(438,R,(R.ay=(N=((R.WO=25,R).S=(R.P=[],(R.T=(R.j=false,R),R).LC=0,R.Z=((((R.s=0,R.Y=void 0,R.B=
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 64 28 28 66 3d 28 61 3d 56 28 28 79 3d 56 28 50 29 2c 50 29 29 2c 56 29 28 50 29 2c 66 29 2c 50 2c 5a 28 79 2c 50 29 7c 7c 5a 28 61 2c 50 29 29 7d 29 2c 39 34 31 29 29 2c 34 34 29 2c 52 2c 72 29 2c 31 37 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 21 58 28 66 2c 74 72 75 65 2c 66 61 6c 73 65 2c 50 29 26 26 28 66 3d 54 32 28 50 29 2c 61 3d 66 2e 73 52 2c 79 3d 66 2e 6e 43 2c 50 2e 54 3d 3d 50 7c 7c 61 3d 3d 50 2e 5a 55 26 26 79 3d 3d 50 29 26 26 28 64 28 66 2e 7a 73 2c 50 2c 61 2e 61 70 70 6c 79 28 79 2c 66 2e 67 29 29 2c 50 2e 41 3d 50 2e 4e 28 29 29 7d 29 2c 30 29 29 2c 35 30 38 29 2c 52 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 2c 74 2c 47 2c 53 2c 43 2c 62 2c 42 2c 59 2c Data Ascii: unction(P,f,y,a){d((f=(a=V((y=V(P),P)),V)(P),f),P,Z(y,P)\|\|Z(a,P))}),941)),44),R,r),17),R,function(P,f,y,a){!X(f,true,false,P)&&(f=T2(P),a=f.sR,y=f.nC,P.T==P\|\|a==P.ZU&&y==P)&&(d(f.zs,P,a.apply(y,f.g)),P.A=P.N())}),0)),508),R,function(P,f,y,a,t,G,S,C,b,B,Y,
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 2c 50 29 29 2c 56 29 28 50 29 2c 5a 28 66 2c 50 29 29 2c 74 29 2c 50 29 2c 5a 28 53 2c 50 29 29 2c 79 3d 5a 28 79 2c 50 29 2c 53 29 29 29 7b 66 6f 72 28 61 20 69 6e 20 47 3d 5b 5d 2c 53 29 47 2e 70 75 73 68 28 61 29 3b 53 3d 47 7d 69 66 28 50 2e 54 3d 3d 50 29 66 6f 72 28 66 3d 30 3c 66 3f 66 3a 31 2c 50 3d 53 2e 6c 65 6e 67 74 68 2c 61 3d 30 3b 61 3c 50 3b 61 2b 3d 66 29 74 28 53 2e 73 6c 69 63 65 28 61 2c 28 61 7c 30 29 2b 28 66 7c 30 29 29 2c 79 29 7d 7d 29 2c 52 29 2e 48 4f 3d 30 2c 52 29 2c 66 75 6e 63 74 69 6f 6e 28 50 2c 66 2c 79 2c 61 29 7b 28 61 3d 56 28 28 79 3d 28 66 3d 56 28 50 29 2c 56 28 50 29 29 2c 50 29 29 2c 50 2e 54 3d 3d 50 29 26 26 28 79 3d 5a 28 79 2c 50 29 2c 61 3d 5a 28 61 2c 50 29 2c 5a 28 66 2c 50 29 5b 79 5d 3d 61 2c 32 34 37 3d Data Ascii: ,P)),V)(P),Z(f,P)),t),P),Z(S,P)),y=Z(y,P),S))){for(a in G=[],S)G.push(a);S=G}if(P.T==P)for(f=0<f?f:1,P=S.length,a=0;a<P;a+=f)t(S.slice(a,(a\|0)+(f\|0)),y)}}),R).HO=0,R),function(P,f,y,a){(a=V((y=(f=V(P),V(P)),P)),P.T==P)&&(y=Z(y,P),a=Z(a,P),Z(f,P)[y]=a,247=
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 28 52 28 66 75 6e 63 74 69 6f 6e 28 70 29 7b 70 28 4e 29 7d 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 5d 7d 2c 72 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 49 65 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 29 7b 72 65 74 75 72 6e 20 5a 28 28 64 28 34 33 38 2c 52 2c 28 46 79 28 4e 2c 28 28 65 3d 5a 28 34 33 38 2c 52 29 2c 52 2e 50 29 26 26 65 3c 52 2e 73 3f 28 64 28 34 33 38 2c 52 2c 52 2e 73 29 2c 5a 65 28 52 2c 70 29 29 3a 64 28 34 33 38 2c 52 2c 70 29 2c 52 29 29 2c 65 29 29 2c 32 36 31 29 2c 52 29 7d 2c 4e 5f 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 29 7b 72 65 74 75 72 6e 28 70 3d 6c 5b 4e 2e 57 5d 28 4e 2e 4f 52 29 2c 70 5b 4e 2e 57 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 Data Ascii: [function(){return N},(R(function(p){p(N)}),function(){})]},r=this\|\|self,Ie=function(R,N,p,e){return Z((d(438,R,(Fy(N,((e=Z(438,R),R.P)&&e<R.s?(d(438,R,R.s),Ze(R,p)):d(438,R,p),R)),e)),261),R)},N_=function(R,N,p){return(p=l[N.W](N.OR),p[N.W]=function(){re
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 5d 7c 30 29 2d 28 52 5b 28 28 4e 7c 30 29 2b 31 29 25 33 5d 7c 30 29 2d 28 65 7c 30 29 5e 28 31 3d 3d 4e 3f 65 3c 3c 70 3a 65 3e 3e 3e 70 29 7d 63 61 74 63 68 28 77 29 7b 74 68 72 6f 77 20 77 3b 7d 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 2c 70 2c 65 2c 77 2c 54 29 7b 69 66 28 21 70 2e 72 69 26 26 28 54 3d 76 6f 69 64 20 30 2c 4e 26 26 4e 5b 30 5d 3d 3d 3d 4d 26 26 28 54 3d 4e 5b 32 5d 2c 52 3d 4e 5b 31 5d 2c 4e 3d 76 6f 69 64 20 30 29 2c 65 3d 5a 28 31 37 32 2c 70 29 2c 30 3d 3d 65 2e 6c 65 6e 67 74 68 26 26 28 77 3d 5a 28 33 33 31 2c 70 29 3e 3e 33 2c 65 2e 70 75 73 68 28 52 2c 77 3e 3e 38 26 32 35 35 2c 77 26 32 35 35 29 2c 76 6f 69 64 20 30 21 3d 54 26 26 65 2e 70 75 73 68 28 54 26 32 35 35 29 29 2c 52 3d 22 22 2c 4e 26 26 28 4e 2e 6d 65 73 73 Data Ascii: ]\|0)-(R[((N\|0)+1)%3]\|0)-(e\|0)^(1==N?e<<p:e>>>p)}catch(w){throw w;}},n=function(R,N,p,e,w,T){if(!p.ri&&(T=void 0,N&&N[0]===M&&(T=N[2],R=N[1],N=void 0),e=Z(172,p),0==e.length&&(w=Z(331,p)>>3,e.push(R,w>>8&255,w&255),void 0!=T&&e.push(T&255)),R="",N&&(N.mess
2024-04-25 12:54:03 UTC	1255	IN	Data Raw: 41 3d 54 3b 69 66 28 21 6b 7c 7c 54 2d 65 2e 43 3c 65 2e 42 4f 2d 28 70 3f 32 35 35 3a 4e 3f 35 3a 32 29 29 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 72 65 74 75 72 6e 20 65 2e 5a 3d 28 64 28 34 33 38 2c 28 70 3d 5a 28 28 65 2e 74 54 3d 52 2c 4e 29 3f 33 33 31 3a 34 33 38 2c 65 29 2c 65 29 2c 65 2e 73 29 2c 65 2e 56 2e 70 75 73 68 28 5b 69 47 2c 70 2c 4e 3f 52 2b 31 3a 52 2c 65 2e 44 2c 65 2e 6a 2c 65 2e 76 2c 65 2e 69 5d 29 2c 44 65 29 2c 74 72 75 65 7d 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 52 2c 4e 29 7b 4e 2e 42 3d 28 28 4e 2e 42 3f 4e 2e 42 2b 22 7e 22 3a 22 45 3a 22 29 2b 52 2e 6d 65 73 73 61 67 65 2b 22 3a 22 2b 52 2e 73 74 61 63 6b 29 2e 73 6c 69 63 65 28 30 2c 32 30 34 38 29 7d 2c 44 65 3d 72 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b Data Ascii: A=T;if(!k\|\|T-e.C<e.BO-(p?255:N?5:2))return false;return e.Z=(d(438,(p=Z((e.tT=R,N)?331:438,e),e),e.s),e.V.push([iG,p,N?R+1:R,e.D,e.j,e.v,e.i]),De),true},H=function(R,N){N.B=((N.B?N.B+"~":"E:")+R.message+":"+R.stack).slice(0,2048)},De=r.requestIdleCallback

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49780	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:04 UTC	1521	OUT	GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:04 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:04 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-IjaEx4LGWqfl3c_D41-zng' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:04 UTC	364	IN	Data Raw: 31 64 31 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 Data Ascii: 1d14<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face
2024-04-25 12:54:04 UTC	1255	IN	Data Raw: 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e Data Ascii: v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fon
2024-04-25 12:54:04 UTC	1255	IN	Data Raw: 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 Data Ascii: 20AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E0
2024-04-25 12:54:04 UTC	1255	IN	Data Raw: 55 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b Data Ascii: U+04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-25 12:54:04 UTC	1255	IN	Data Raw: 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b Data Ascii: ce { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+
2024-04-25 12:54:04 UTC	1255	IN	Data Raw: 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: tic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight
2024-04-25 12:54:04 UTC	813	IN	Data Raw: 7d 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 49 6a 61 45 78 34 4c 47 57 71 66 6c 33 63 5f 44 34 31 2d 7a 6e 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f Data Ascii: }</style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="IjaEx4LGWqfl3c_D41-zng" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.co
2024-04-25 12:54:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49781	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:04 UTC	1312	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:05 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 05:56:20 GMT Expires: Fri, 03 May 2024 05:56:20 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 25065 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:05 UTC	549	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-25 12:54:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-25 12:54:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-25 12:54:05 UTC	1255	IN	Data Raw: ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-25 12:54:05 UTC	1116	IN	Data Raw: 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49782	64.233.185.103	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:05 UTC	722	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:05 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 01:52:10 GMT Expires: Fri, 03 May 2024 01:52:10 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 39715 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:05 UTC	549	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-25 12:54:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-25 12:54:05 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-25 12:54:05 UTC	1255	IN	Data Raw: ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-25 12:54:05 UTC	1116	IN	Data Raw: 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49783	13.107.246.40	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:13 UTC	918	OUT	GET /completeRedirect/-crYd9Lj?correlationId=a8a29aa0bd0ef81202324dbb48c51c9f&platformSelected=Android HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
2024-04-25 12:54:13 UTC	504	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 12:54:13 GMT Content-Length: 0 Connection: close Location: https://play.google.com/store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125413Z-16f7b4795d4hbs9nymf33py59c00000008ag0000000041rw X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49785	172.217.215.100	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:14 UTC	1068	OUT	GET /store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj HTTP/1.1 Host: play.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:14 UTC	2283	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:14 GMT Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-UG9iotdrqRp4Nyn--zejxw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/PlayStoreUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://market.android.com https://clients2.google.com https://payments.sandbox.google.com https://payments.google.com https://maps.googleapis.com https://translate.googleapis.com https://translate.google.com https://support.google.com https://www.gstatic.cn https://families.google.com https://clients1.google.com https://myaccount.google.com https://accounts.google.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/PlayStoreUi/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* reporting-endpoints: default="/_/PlayStoreUi/web-reports?context=eJzjitDikmII0JBikPj6kkkLiF-sZWV-B8QGx1mZzYA4-hQrcxwQf3vByvwHiJ3SZ7CGALFP_QzWOCBuvXmOdToQJ_07z1oCxFdc77HeAmIhHo5vS1ZuZBNYcHb3X0YAmrIpeg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 37 32 39 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6c 61 79 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 66 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 Data Ascii: 729e<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://play.google.com/"><link ref="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="width=device-width, initial-scale=1"><meta
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 67 65 2e 6e 75 6d 62 65 72 2e 62 61 6c 6c 2e 70 75 7a 7a 6c 65 5c 22 2c 5c 22 61 69 72 2e 41 69 72 73 68 69 70 32 5c 22 2c 5c 22 61 69 72 2e 45 70 69 63 42 61 74 74 6c 65 46 61 6e 74 61 73 79 35 5c 22 2c 5c 22 61 69 72 2e 62 67 2e 6c 61 6e 2e 4d 6f 6e 6f 70 6f 6c 69 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 62 75 72 61 63 6f 70 72 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 61 63 68 65 74 61 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 63 68 69 6e 63 68 6f 6e 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 64 6f 6d 69 6e 6f 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e 63 6f 6d 2e 6d 65 67 61 6a 6f 67 6f 73 2e 6d 6f 62 69 6c 65 5c 22 2c 5c 22 61 69 72 2e 62 72 2e Data Ascii: ge.number.ball.puzzle\",\"air.Airship2\",\"air.EpicBattleFantasy5\",\"air.bg.lan.Monopoli\",\"air.br.com.buracopro.mobile\",\"air.br.com.cacheta.mobile\",\"air.br.com.chinchon.mobile\",\"air.br.com.domino.mobile\",\"air.br.com.megajogos.mobile\",\"air.br.
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 6e 62 6c 6f 73 73 6f 6d 5c 22 2c 5c 22 61 6e 64 2e 76 6f 78 65 6c 63 75 62 65 2e 6d 61 74 63 68 62 6c 6f 63 6b 33 64 5c 22 2c 5c 22 61 70 70 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 2e 66 6f 75 72 65 71 75 61 6c 73 74 65 6e 5f 61 70 70 5c 22 2c 5c 22 61 70 70 2e 66 78 72 6f 79 61 6c 65 70 72 6f 2e 63 6f 6d 5c 22 2c 5c 22 61 70 70 2e 73 75 70 65 72 6b 69 63 6b 6f 66 66 5c 22 2c 5c 22 61 70 70 73 2e 72 2e 74 77 6f 74 68 6f 75 73 61 6e 64 66 6f 72 74 79 65 69 67 68 74 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 6a 69 67 73 61 77 2e 70 75 7a 7a 6c 65 2e 6f 6e 6c 69 6e 65 2e 66 72 65 65 5c 22 2c 5c 22 61 72 74 2e 63 6f 6c 6f 72 2e 70 6c 61 6e 65 74 2e 70 61 69 6e 74 2e 62 79 2e 6e 75 6d 62 65 72 2e 67 61 6d 65 2e 70 75 7a 7a 6c 65 2e 66 Data Ascii: nblossom\",\"and.voxelcube.matchblock3d\",\"app.fourequalsten.fourequalsten_app\",\"app.fxroyalepro.com\",\"app.superkickoff\",\"apps.r.twothousandfortyeight\",\"art.color.planet.jigsaw.puzzle.online.free\",\"art.color.planet.paint.by.number.game.puzzle.f
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 73 2e 73 75 6e 6e 79 62 75 6e 6e 69 65 73 2e 63 6f 6c 6f 72 69 6e 67 62 6f 6f 6b 5c 22 2c 5c 22 62 79 2e 72 65 64 74 6f 77 65 72 2e 41 34 61 71 75 61 50 72 69 6e 74 5c 22 2c 5c 22 62 79 2e 76 6f 73 74 72 61 77 2e 67 61 6d 65 2e 72 75 2e 6b 65 79 62 6f 61 72 64 5c 22 2c 5c 22 63 61 2e 68 79 70 65 72 68 69 70 70 6f 2e 61 64 76 65 6e 74 75 72 65 61 67 65 73 5c 22 2c 5c 22 63 61 2e 6c 62 63 73 74 75 64 69 6f 73 2e 68 65 6d 70 69 72 65 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 66 69 73 68 69 6e 67 5c 22 2c 5c 22 63 61 2e 72 6f 6f 66 64 6f 67 2e 70 6d 33 5c 22 2c 5c 22 63 61 66 65 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c 5c 22 63 61 72 2e 67 61 6d 65 73 2e 74 6f 64 64 6c 65 72 73 2e 61 6e 64 2e 6b 69 64 73 5c 22 2c Data Ascii: s.sunnybunnies.coloringbook\",\"by.redtower.A4aquaPrint\",\"by.vostraw.game.ru.keyboard\",\"ca.hyperhippo.adventureages\",\"ca.lbcstudios.hempire\",\"ca.roofdog.fishing\",\"ca.roofdog.pm3\",\"cafe.games.toddlers.and.kids\",\"car.games.toddlers.and.kids\",
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 48 6f 6d 65 73 74 65 61 64 5c 22 2c 5c 22 63 6f 6d 2e 45 74 65 72 6e 61 6c 53 74 75 64 69 6f 2e 47 72 61 73 73 4d 61 73 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 45 76 6f 54 41 70 70 73 2e 47 61 6d 65 4f 66 45 76 6f 6c 75 74 69 6f 6e 5c 22 2c 5c 22 63 6f 6d 2e 46 34 6e 74 6f 6d 47 61 6d 65 73 2e 47 65 6f 6d 65 74 72 79 4a 75 6d 70 33 44 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 42 61 6e 61 6e 61 4b 6f 6e 67 42 6c 61 73 74 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 31 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 44 47 45 6e 74 65 72 74 61 69 6e 6d 65 6e 74 2e 43 6f 76 65 72 4f 72 61 6e 67 65 32 2e 67 70 5c 22 2c 5c 22 63 6f 6d 2e 46 6c 61 6e 6e 65 2e 4d 69 Data Ascii: Homestead\",\"com.EternalStudio.GrassMaster\",\"com.EvoTApps.GameOfEvolution\",\"com.F4ntomGames.GeometryJump3D\",\"com.FDGEntertainment.BananaKongBlast.gp\",\"com.FDGEntertainment.CoverOrange1.gp\",\"com.FDGEntertainment.CoverOrange2.gp\",\"com.Flanne.Mi
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 22 63 6f 6d 2e 4f 4f 5a 4f 4f 47 4f 52 41 45 2e 43 68 61 72 61 63 74 65 72 4c 69 66 65 5c 22 2c 5c 22 63 6f 6d 2e 4f 4f 5a 4f 4f 47 4f 52 41 45 2e 43 68 61 72 61 63 74 65 72 4d 61 6b 65 72 5c 22 2c 5c 22 63 6f 6d 2e 4f 72 79 75 67 65 6e 2e 57 6f 72 6c 64 4f 66 50 72 61 6e 64 69 73 42 65 74 61 5c 22 2c 5c 22 63 6f 6d 2e 4f 73 4f 73 2e 54 69 6e 79 41 72 63 68 65 72 73 5c 22 2c 5c 22 63 6f 6d 2e 4f 77 69 6e 67 73 2e 41 72 72 6f 77 57 61 72 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 43 6f 6f 6b 69 6e 67 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 61 72 62 6f 73 6b 69 6e 73 49 6e 54 68 65 53 75 70 65 72 6d 61 72 6b 65 74 5c 22 2c 5c 22 63 6f 6d 2e 50 53 56 53 74 75 64 69 6f 2e 42 69 72 74 68 64 61 79 Data Ascii: "com.OOZOOGORAE.CharacterLife\",\"com.OOZOOGORAE.CharacterMaker\",\"com.Oryugen.WorldOfPrandisBeta\",\"com.OsOs.TinyArchers\",\"com.Owings.ArrowWar\",\"com.PSVStudio.BarboskinsCooking\",\"com.PSVStudio.BarboskinsInTheSupermarket\",\"com.PSVStudio.Birthday
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 31 31 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 63 61 72 57 61 73 68 39 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 63 61 72 77 61 73 68 34 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 65 6e 74 69 73 74 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 6f 63 74 6f 72 56 65 74 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 64 72 65 73 73 55 70 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 66 61 72 6d 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 68 61 69 72 35 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 64 73 42 75 73 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 6f 47 61 6d 65 73 2e 6b 69 6e 64 65 72 67 61 72 74 65 6e 33 5c 22 2c 5c 22 63 6f 6d 2e 59 6f 76 Data Ascii: 11\",\"com.YovoGames.carWash9\",\"com.YovoGames.carwash4\",\"com.YovoGames.dentist3\",\"com.YovoGames.doctorVet\",\"com.YovoGames.dressUp\",\"com.YovoGames.farm5\",\"com.YovoGames.hair5\",\"com.YovoGames.kidsBus\",\"com.YovoGames.kindergarten3\",\"com.Yov
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 6e 67 6f 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 68 61 71 75 65 73 74 2e 6e 61 75 74 69 63 61 6c 6c 69 66 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6c 70 68 61 71 75 65 73 74 2e 70 65 74 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 65 6e 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 62 6f 6f 6b 73 74 6f 72 65 6d 34 2e 72 75 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 72 61 63 69 6e 67 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 63 61 72 73 2e 6b 69 64 73 2e 74 6f 64 64 6c 65 72 73 2e 67 61 72 61 67 65 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 61 6d 61 79 61 73 6f 66 74 2e 64 69 6e 6f 73 61 75 Data Ascii: ngo\",\"com.alphaquest.nauticallife\",\"com.alphaquest.pet\",\"com.amayasoft.bookstorem4.en\",\"com.amayasoft.bookstorem4.ru\",\"com.amayasoft.cars.kids.racing.toddlers.garage.game\",\"com.amayasoft.cars.kids.toddlers.garage.game\",\"com.amayasoft.dinosau
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 70 2e 64 69 63 65 6a 69 67 73 61 77 5c 22 2c 5c 22 63 6f 6d 2e 61 74 72 69 6c 6c 69 6f 6e 67 61 6d 65 73 2e 63 68 65 73 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d 2e 61 75 65 72 2e 64 61 77 6e 62 72 65 61 6b 2e 74 72 69 61 6c 2e 73 69 6e 67 6c 65 2e 70 6c 61 79 65 72 2e 66 72 65 65 5c 22 2c 5c 22 63 6f 6d 2e 61 75 74 75 6d 6e 69 6e 74 65 72 61 63 74 69 76 65 2e 6d 79 72 75 6d 6d 79 5c 22 2c 5c 22 63 6f 6d 2e 61 76 65 63 74 6f 72 2e 69 74 77 2e 69 74 77 6d 6a 31 36 68 64 5c 22 2c 5c 22 63 6f 6d 2e 61 76 6f 6b 69 64 64 6f 2e 67 61 6d 65 73 2e 74 68 69 6e 6b 72 6f 6c 6c 73 5f 6b 69 6e 67 73 5f 61 6e 64 5f 71 75 65 65 6e 73 5c 22 2c 5c 22 63 6f 6d 2e 61 77 61 72 64 73 6d 65 64 69 61 67 72 6f 75 70 2e 64 69 61 6e 61 6e 6f 76 65 6c 73 6e 65 77 5c 22 2c 5c 22 63 6f 6d Data Ascii: p.dicejigsaw\",\"com.atrilliongames.chessnew\",\"com.auer.dawnbreak.trial.single.player.free\",\"com.autumninteractive.myrummy\",\"com.avector.itw.itwmj16hd\",\"com.avokiddo.games.thinkrolls_kings_and_queens\",\"com.awardsmediagroup.diananovelsnew\",\"com
2024-04-25 12:54:14 UTC	2283	IN	Data Raw: 6f 6d 2e 62 65 79 6f 6e 64 74 68 65 67 61 6d 65 2e 66 75 72 6e 69 73 68 2e 68 6f 6d 65 2e 67 61 6d 65 73 2e 68 6f 6d 65 73 63 61 70 65 73 2e 6c 69 66 65 2e 6f 63 64 5c 22 2c 5c 22 63 6f 6d 2e 62 66 61 2e 62 61 74 74 6c 65 6c 69 6e 65 73 5c 22 2c 5c 22 63 6f 6d 2e 62 67 66 2e 6d 65 72 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 67 61 6d 65 73 2e 62 61 74 61 6b 6f 6e 6c 69 6e 65 5c 22 2c 5c 22 63 6f 6d 2e 62 68 6f 6f 73 2e 6d 61 72 72 69 61 67 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 69 62 6f 6f 6d 2e 69 64 6c 65 73 68 65 6c 74 65 72 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 76 65 72 73 65 2e 77 6f 72 64 2e 73 65 61 72 63 68 2e 67 61 6d 65 5c 22 2c 5c 22 63 6f 6d 2e 62 69 62 6c 65 2e 77 6f 72 64 73 65 61 72 63 68 2e 63 72 6f 73 73 77 6f 72 64 2e 70 75 7a 7a 6c Data Ascii: om.beyondthegame.furnish.home.games.homescapes.life.ocd\",\"com.bfa.battlelines\",\"com.bgf.merge\",\"com.bhgames.batakonline\",\"com.bhoos.marriage\",\"com.bibiboom.idleshelter\",\"com.bible.verse.word.search.game\",\"com.bible.wordsearch.crossword.puzzl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49790	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:15 UTC	1105	OUT	GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:15 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33456 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11075 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:15 UTC	720	IN	Data Raw: 52 49 46 46 a8 82 00 00 57 45 42 50 56 50 38 4c 9b 82 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 74 72 cd 53 1e f7 e4 1f 70 f7 f4 5e 08 11 fd 9f 00 db ee 2e db bd 3b b9 bb 6d bb bb 1f b7 bd f2 ca 93 bf ba 2c b5 d5 5e 3c ed b6 8f 23 4a 2a a9 85 3d b9 db fb 3d b5 7f 6d db 6c 26 4c cf f3 08 6a 75 41 02 3c 24 11 49 0a 40 1f 43 14 9b d1 71 1c cd 90 14 b4 d0 ad 3a ea 50 55 92 f0 3d 3e 24 a5 04 64 51 75 64 62 29 01 4c 07 49 18 d3 7a ba 93 40 36 46 55 f5 2d 69 0a 59 a9 ea f2 62 f0 3d 02 d8 92 c8 2f 45 04 a9 a2 d6 fa 90 c2 e6 42 d2 5f 76 c6 04 91 94 00 49 3e aa 22 25 7c 47 07 e2 1f 24 71 48 30 76 06 70 1d 23 d2 98 77 ba 15 08 80 a7 31 08 d2 06 50 74 de f7 92 a4 1d 21 dd fa 09 a2 73 ef 0f 48 92 f3 65 87 02 92 44 4b 28 40 02 49 b2 ef d5 77 82 ad 4b d2 b5 39 42 ce f3 bd Data Ascii: RIFFWEBPVP8L/IM@lHtrSp^.;m,^<#J*==ml&LjuA<$I@Cq:PU=>$dQudb)LIz@6FU-iYb=/EB_vI>"%\|G$qH0vp#w1Pt!sHeDK(@IwK9B
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: a9 97 5b f8 5a 3b 0b 04 1e d1 d0 9c 36 a7 63 fd 00 70 bf 10 ec 3c 77 0a 02 8f 80 d6 58 3c 8c 71 06 70 6e a1 87 1e da 46 df ea 21 64 92 49 26 05 69 e7 81 70 19 00 e8 18 03 80 de 42 8b 75 8e be da ba ea 5a 00 00 5c d2 f9 6a 74 6c ac e3 1c 02 de 97 cf e5 6d 79 5b ab 3d 6c 3e 3b 3b a1 39 0d 97 26 00 86 4b 00 1a 7c 7d 89 f3 7c 71 cb e7 7a dc 37 00 04 4e 4e 00 02 3b c0 04 7c 0e 2c 9e 01 a4 cf d2 8d 74 2b 3d 0a d6 90 40 a4 90 90 e3 bf 76 d9 7a 74 0a 70 f9 e8 f3 5f 1f 11 53 c4 14 31 45 4c d9 f4 cf 94 4d 11 93 7d 3c 01 2c b1 2c 00 68 f0 eb d1 4c 6c 1e 60 a7 09 b0 c4 12 04 d0 5c 03 18 36 6c 58 b7 31 eb d6 ad 0f 00 03 10 c0 e7 3e 8e 3f 19 43 b7 6a cd 9a 6d 0c 60 d5 61 bb 03 f6 0b 4c 00 9c 01 e7 c4 7f 5c 6a 26 00 c0 8f 4b e5 e4 9c 50 8e 00 4c 07 18 0e e3 61 3f 40 7d Data Ascii: [Z;6cp<wX<qpnF!dI&ipBuZ\jtlmy[=l>;;9&K\|}\|qz7NN;\|,t+=@vztp_S1ELM}<,,hLl`\6lX1>?Cjm`aL\j&KPLa?@}
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: d9 b6 25 49 42 92 f3 b4 56 9d ff 8c 74 18 3a 85 ba d6 77 16 d3 92 24 c9 92 14 a9 45 71 5e 8e ce 27 ec 33 3d 26 80 ce b6 6d 6a e3 ea 1d 90 21 b6 cc 14 66 66 a6 3e 39 f4 07 4f 8b fd e9 c3 cc cc 6c 7b 49 66 ad d9 82 29 64 cd ee 64 e5 3e 22 26 e0 ff eb ff a1 0e 28 96 4a 77 42 85 74 a9 53 02 25 e9 4a 27 25 2a 75 4a 4a 77 91 e0 2e a4 53 81 4a 95 c2 51 4c 0a a9 54 2a 44 a9 22 00 01 09 00 ca 16 83 25 80 24 50 2a d5 40 a7 04 ba 98 a2 fb 54 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d a8 54 29 95 4a 17 4b a5 bb 90 02 fa 44 4a 1d a8 54 ba 13 aa 14 a2 a4 44 1d 25 92 44 85 54 aa 40 a7 a8 54 54 50 a9 53 28 29 a5 4e a5 22 91 4a a5 4e a1 54 71 c1 77 01 25 2a 95 4a d5 38 8d 19 e9 8a f5 e6 74 a4 d8 60 b5 53 8d 84 ac 0b 3a 3a aa 91 b9 05 41 e5 dc c2 a6 52 54 ab 18 29 aa 29 57 Data Ascii: %IBVt:w$Eq^'3=&mj!ff>9Ol{If)dd>"&(JwBtS%J'%uJJw.SJQLTD"%$P@TTDTDT)JKDJTD%DT@TTPS()N"JNTqw%*J8t`S::ART))W
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 05 21 04 44 62 15 0a 83 58 a0 58 96 50 21 70 a9 04 a8 14 c5 42 92 65 21 87 42 55 e3 0d d8 bd 94 69 09 dc 52 c6 64 ca 0b 69 74 4d a6 b3 9d 0e 4d 27 94 53 b6 29 55 ec 96 ed 76 ea 86 2b ec 74 ca 54 d0 75 04 ad 10 da e7 dc a8 52 8d 72 14 6f 48 e9 ea 3e d3 a5 bb dc 45 70 4b 0a c1 75 4a 8a 52 d4 c5 1a e9 1a 52 6e 47 8a ae 84 d6 82 94 3a d5 2d 57 13 46 e3 c8 e9 c8 94 4a d7 29 33 a5 a4 4e 39 37 4a ba 16 bc 82 14 4a 5a ab 6e 94 64 64 de a6 9a 8c 9c 73 50 2b a4 6e 9c 1b 2a 6d e4 9c 92 4d 06 d9 5b d6 94 ba e4 ca 39 51 da 06 78 81 a1 9c bb a8 c0 19 f0 5a c4 b9 c3 55 b7 98 f1 c6 ab 06 b4 5b 16 21 56 ad 45 3b 77 aa 52 75 bd 8c aa 44 8d 2b a5 18 46 2a 46 60 90 99 31 08 99 50 86 dc 21 ad 22 62 2c 86 c2 d5 46 67 21 69 4b 05 96 55 95 f1 66 07 0c 6e 23 e7 f1 f2 5a 8a 33 56 Data Ascii: !DbXXP!pBe!BUiRditMM'S)Uv+tTuRroH>EpKuJRRnG:-WFJ)3N97JJZnddsP+nmM[9QxZU[!VE;wRuD+FF`1P!"b,Fg!iKUfn#Z3V
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 19 e7 a9 b5 6b 82 ce 37 be 6e 54 d3 bd aa bc f7 e9 cc 49 e0 1b b8 89 e5 3c 85 bd 28 a9 db 59 4f 74 7a 66 29 4f dc 4e 52 53 2f ce e9 8b 19 c6 8a aa 43 96 50 b7 8a a9 09 b8 8a 64 12 e3 19 57 c2 95 4b 46 ab 4f 9d a5 62 15 bd 29 13 96 d3 42 02 a5 c9 2d 46 aa c4 b5 4b 25 04 3b 6b 0a 39 76 3a a3 1a 15 0b d9 99 c8 62 f3 b2 82 07 ca 95 13 4b c8 42 d5 2d a9 cf 9b e5 ad 60 79 63 8c 83 96 34 60 59 36 ad 25 96 31 d1 aa 55 08 45 ab 40 38 99 95 60 aa bc 20 18 06 b1 a0 6a c6 92 19 98 ad 24 58 82 d9 f4 28 92 55 19 19 75 b5 a1 a1 0a e7 8b 62 2d 8d aa 8c ba 62 28 0a 5d 23 18 d2 d2 24 a7 47 49 14 bc 0b 8c b9 60 aa d2 40 22 15 53 90 02 ec 56 75 d3 51 54 63 3a 64 2c 06 b7 5c 13 8a f4 b0 35 34 5d 63 b4 a4 08 ea 94 8c 19 20 2d 82 36 95 6a 84 6e 54 a9 14 d5 8e 4c 25 4a 9b 5b 6f Data Ascii: k7nTI<(YOtzf)ONRS/CPdWKFOb)B-FK%;k9v:bKB-`yc4`Y6%1UE@8` j$X(Uub-b(]#$GI`@"SVuQTc:d,\54]c -6jnTL%J[o
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: d6 94 5d 64 4a 09 2e b6 54 05 c2 ae 41 01 5a 1f 97 52 12 09 89 70 d2 9b 5e a1 e1 3d 40 22 50 d0 a1 b8 66 28 11 22 8c 30 59 2b b0 91 02 9c c2 d0 92 81 17 e0 19 b3 63 4c b7 b2 96 4a 41 38 de 43 e9 3c 4a 00 42 4c 78 69 16 51 44 51 e9 15 b3 38 45 10 5e 47 92 8e 96 ce a2 8a 14 42 f0 1e 08 95 22 c1 72 da 00 8e 51 54 a2 0a 2c 81 cd 84 c8 2a a6 22 59 88 61 a6 2b 13 b6 2a b4 6d 64 50 a5 32 dd 12 32 28 5a db 18 51 c1 a7 46 c6 32 ce 6c 6b 54 00 52 21 a1 a0 76 41 5d 4a d2 e5 5c a9 d4 cd 32 6f c1 c0 8e f6 b6 a2 07 e9 d6 6b 71 0a 8d 65 5b f6 ca 34 48 ed c5 b9 f7 81 37 08 0d 73 45 96 9a d2 e7 7a 7b a3 9f ff 76 5d fe 97 dd b2 39 ec 8e 49 2c 41 33 2d 44 19 b1 aa 42 43 bc f0 9a ea 24 54 11 19 9f fa cf 37 72 6a b6 02 20 1e 5d e2 df bf ba 60 0b 8e 09 48 60 b4 a5 24 0b 20 65 Data Ascii: ]dJ.TAZRp^=@"Pf("0Y+cLJA8C<JBLxiQDQ8E^GB"rQT,"Ya+mdP22(ZQF2lkTR!vA]J\2okqe[4H7sEz{v]9I,A3-DBC$T7rj ]`H`$ e
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 59 35 8d 6b 79 bc c5 e7 6f d8 d3 fb 72 56 cf ed 92 6d 9e 1c d8 36 2e cd b3 37 9c 0f ae 7f 3e b1 6b 8f 1f f1 94 d0 f3 a6 08 3c f1 c9 ff 7e 68 c3 5c d8 fd 74 e7 c6 bf 9e b8 fa ed 3b 97 74 fa f4 0f ed 3f ef 23 07 5a d7 55 3b fd 61 11 26 9e 47 6e c9 62 c0 fa 6c 51 c1 d4 94 a5 5b 78 2b 99 72 1f 8b 2c a6 66 33 ac f1 14 a5 7e 4a 6c 2e c6 f3 61 b6 da 18 ef 6a e6 55 48 89 ca b9 40 18 e9 ba 45 75 a9 b3 5d cc 94 a2 13 2a cd 62 2a 66 d1 9b 64 04 93 8f 46 61 8f 71 7a 36 29 db 98 26 75 d9 96 dc 50 5d fa 53 ff 73 ed 27 f3 4d 0f 5c 32 84 40 4e ed 95 b9 d9 77 ff d1 9a ff 7e df ec a3 51 d8 2e 19 51 22 30 66 46 0f a9 48 a0 29 74 b2 8b b8 8c 66 02 4c de ec 41 5c b0 10 85 02 a8 00 92 37 51 88 18 05 64 43 44 95 7a 73 ab 1f 3e e4 5b 2f 1f d1 2a f6 0f ae ba 6d f3 8a 9d 78 41 cf Data Ascii: Y5kyorVm6.7>k<~h\t;t?#ZU;a&GnblQ[x+r,f3~Jl.ajUH@Eu]bfdFaqz6)&uP]Ss'M\2@Nw~Q.Q"0fFH)tfLA\7QdCDzs>[/*mxA
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: c6 52 a9 54 a0 08 61 22 00 15 a1 52 f0 b0 36 67 2d 21 86 f7 ee 6c a7 b5 36 26 eb 3f bb ae c4 d4 14 ef ee a3 68 95 75 9e 4f 37 6e 29 ca fa b1 77 59 72 b5 d6 bc 6b eb 60 85 7e fd 70 7c 93 49 a1 b8 51 4b 74 49 59 95 c1 ba fb 14 18 05 28 6b 97 ec 63 1b 84 8a a9 29 c5 48 62 ae 2a 59 db 93 55 5c 55 85 98 2b 0e f6 88 f4 86 53 d1 f2 00 3c c0 71 50 f8 64 1b 95 00 c4 05 5a 2a 22 3d 40 23 52 5d fa 12 10 a0 17 2e 15 38 40 3a 0a c6 12 80 86 2e 28 c0 c5 49 e2 82 c1 f5 0a bd 11 94 c9 2c 21 ce 27 71 78 9f a8 43 34 44 02 41 08 15 71 e1 90 0a 66 db 84 11 c5 a8 a1 53 84 11 85 60 a2 f0 53 a5 c3 fb c9 40 89 33 a9 74 6d 4f 1e 72 eb e6 a6 8b aa 5e 5b a1 b8 6c aa 1f d3 4d 9e 02 9f 4b cd 16 b3 76 72 15 39 6e d8 d4 22 a9 46 b0 6a 5d 6e 34 fd 72 cd 60 0f 4a 67 b6 9c 6f 47 ee 7d d6 Data Ascii: RTa"R6g-!l6&?huO7n)wYrk`~p\|IQKtIY(kc)HbYU\U+S<qPdZ"=@#R].8@:.(I,!'qxC4DAqfS`S@3tmOr^[lMKvr9n"Fj]n4r`JgoG}
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 90 96 40 ce e4 2c 40 44 cc 3d ce 3f c6 6e 7a e9 fa d7 39 df ab cb 73 86 c4 a4 9e 13 6b dd 8e 8c 6a 29 a7 4e 65 50 d9 aa 6f 49 2e 26 d5 eb 67 ef a4 64 ca 79 74 cb e6 64 38 31 f3 3c 18 75 ac 4f 3d 5a 4b 65 52 b3 3e d5 93 34 ac 45 a3 2e cc aa db 09 51 e1 74 bd da 5e 47 a5 ab 9e a2 5d b9 92 bb cd 1d 53 4e b5 5e 57 3b 76 50 92 3e 36 b2 3c 6c 7b eb 37 9b 9d 59 1a b7 91 0f d9 a9 3e 75 29 2c f0 ea d7 c2 cb f0 9a f5 19 64 79 b3 fb 58 3f 1f c0 58 99 8f 24 36 8f f5 a1 a7 aa 36 eb c7 8d fb 50 5a 2a b4 fd 2f 45 c6 23 33 d3 9f 84 d8 e9 ce 56 1f 1f ec 4a 96 b6 ff ec ba 05 9b 42 b2 36 a5 07 19 96 25 8e ca 5a 9e 07 67 24 53 cb 29 81 5c 10 58 25 d6 86 4c 46 48 0c 21 d0 08 0a 54 4b 9b b0 f7 90 0b ec 76 a9 2b 13 cb 55 cd e6 c4 bc 61 c8 b1 db 12 16 81 22 6c 83 a1 ac 9b 22 6f Data Ascii: @,@D=?nz9skj)NePoI.&gdytd81<uO=ZKeR>4E.Qt^G]SN^W;vP>6<l{7Y>u),dyX?X$66PZ*/E#3VJB6%Zg$S)\X%LFH!TKv+Ua"l"o
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 65 8f 74 c2 2d b7 bf a8 f5 b4 47 fb d7 7c 5d e5 a4 de 86 fd eb 60 e8 d0 7e 1b ba c9 4d e7 6f 4a 47 63 c9 a5 f2 05 2e 83 f2 ad ca 55 32 3c 2c be 52 4d 8e 16 5f 6c 43 50 f7 d5 f6 8e 94 d0 20 6e 9e 0c 87 9b f2 dc aa 7a 8b e5 3c 5a de ff 18 e5 d1 87 f2 14 12 6b 5b ae d2 be 4f 51 b2 49 5c ce 42 a4 cb 36 65 81 94 ad 56 e5 f2 71 38 9c 92 1e 55 85 02 d0 48 2a 51 16 36 6a b3 fd d8 48 91 e1 56 dd 12 e0 71 eb 6e a5 31 d3 d2 7d e8 e8 52 d5 d0 0e 8b 54 31 26 6d 8b 2d d5 ee da 47 a2 b6 55 e1 bf 69 b0 a2 5a a9 d9 48 85 67 f8 ac d9 07 76 f0 43 e3 58 50 9a da e9 72 18 e6 47 3d e5 98 ca a6 d9 94 dc 96 c2 27 c1 98 b5 36 37 0b 4f b5 c5 ad 4f 99 ca 5a e1 3f a7 ae 3a db 9a cd e8 03 db 2e b5 40 5e 41 83 90 d6 b8 46 55 ab d6 de 62 e6 63 41 45 a4 35 b0 d3 73 4a b9 9b bd 53 46 d7 Data Ascii: et-G\|]`~MoJGc.U2<,RM_lCP nz<Zk[OQI\B6eVq8UH*Q6jHVqn1}RT1&m-GUiZHgvCXPrG='67OOZ?:.@^AFUbcAE5sJSF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49793	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:15 UTC	1107	OUT	GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:15 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 37564 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11075 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:15 UTC	720	IN	Data Raw: 52 49 46 46 b4 92 00 00 57 45 42 50 56 50 38 4c a8 92 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 4e 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a ba bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd 54 b7 ea ed db 02 30 8e 5d 75 b5 54 92 14 92 b4 e9 c5 80 00 41 2c d5 d5 5d fd 6f 75 37 f7 cb fb be 02 ef 12 6c e0 c5 06 ed b8 98 e2 da ca cc 5a 64 03 26 40 91 91 8a f0 ca f9 20 18 17 23 22 d2 11 8a 11 22 62 64 3a 73 49 6c 5b b6 a4 21 49 cb d7 d6 18 01 91 0c c6 c8 88 a8 af f6 4b 40 a4 22 9e 96 04 f3 04 06 ba 25 81 38 2f 81 c5 bd 0e 36 60 40 27 69 c7 9c cc 03 58 5a 64 db 87 08 4b 5c 18 25 62 31 eb 41 12 29 71 3f 81 27 a7 7f 9f 4e dd 55 c9 00 be 31 92 6c 8e 02 f4 fb 3d 92 e4 2d 30 e7 44 5f ed 80 69 b0 01 7d 36 b6 0d 0c c0 c6 9f 1f 1b 16 02 30 b6 56 9b 00 24 90 70 f7 57 Data Ascii: RIFFWEBPVP8L/IM8lFFNn/Y_<BD'*nzwT0]uTA,]ou7lZd&@ #""bd:sIl[!IK@"%8/6`@'iXZdK\%b1A)q?'NU1l=-0D_i}60V$pW
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: c2 71 75 bd f4 80 b3 32 b1 5e 6b 07 81 c0 80 8a ea a8 62 d9 5c 39 fb 9a 74 7e 98 e8 f3 8e 1f 3b 66 00 1c 80 fb 9b cb b5 9f f6 89 37 04 06 40 6d 4c ae 96 7e e8 e4 ab cd 62 fd 9d 0e b0 38 59 1c e9 eb a2 00 56 9c 6c c9 d6 27 02 81 00 40 c3 7a 00 00 e6 f5 56 df 71 87 23 eb 6e f1 07 3a 69 de 92 de a7 ad 21 1c 6f d6 7e 04 00 20 03 20 03 db d1 de 8c 6a 3f 1c 03 c0 e2 48 e6 9c b2 fb 1b dd 6e 3b 00 10 98 ed c1 ff 0c 4c 6e 65 64 40 e6 6b 83 7d 38 29 b3 31 60 98 01 a0 62 4f fe a7 e3 0c d8 35 60 80 d8 c8 80 0c b0 b2 19 bb dd 04 32 32 00 12 b0 9d fb 2e c8 00 80 be ba d9 d1 aa 07 40 06 8e 1b 60 cb e2 82 74 01 1c 75 40 c7 de b1 0c 00 78 3a 56 f6 fa 19 ca 0e 00 a8 9c 00 57 00 d4 89 b6 1c 83 32 82 0c f8 e2 88 6b 77 e1 ea d8 d9 1c 4a a5 0e 7d 53 3a 7c 91 00 8a 34 2f 57 20 Data Ascii: qu2^kb\9t~;f7@mL~b8YVl'@zVq#n:i!o~ j?Hn;Lned@k}8)1`bO5`22.@`tu@x:VW2kwJ}S:\|4/W
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 4a f7 29 2a 25 52 14 25 05 4a 2a a5 80 a2 a4 d4 90 a2 24 8a a2 c3 28 ba 45 09 a2 4f 4a d4 90 a2 e8 26 29 09 10 91 52 23 52 2a a5 80 a2 44 34 95 a2 90 48 51 53 11 91 a8 29 0a 15 14 45 4d 45 94 58 e4 5b 04 29 45 51 94 96 ab 65 0d 3a 71 bd 73 75 89 b8 91 69 53 06 49 ae 83 ba 74 29 83 75 82 22 c5 75 82 9b 24 a4 29 0d 2a 65 e2 74 23 61 04 dd 54 83 a2 d3 8d 4c 93 94 c1 6a 54 89 02 03 1a 01 6a 67 8d 90 4e 84 6b 81 02 64 82 46 4e 2a a9 4c 9c 24 a1 ba ec 26 3a ca 34 ab 61 72 46 76 dd 8a 10 c8 89 6b a2 a8 1a 57 63 94 40 4e d9 8d 03 68 2a 13 85 8c ab 6a 40 91 39 a7 5c b3 84 aa b1 26 48 ad cd e9 e0 44 0c 4d b3 1b 81 ce 34 ab 81 85 70 7a 2c 61 73 d2 2c c5 42 a1 94 05 21 56 8c 39 19 24 35 4b 69 28 1a 5b 08 1a cc 56 1a 24 4c b1 f5 56 d2 62 dc 66 94 40 44 81 05 35 05 8c Data Ascii: J)%R%J$(EOJ&)R#RD4HQS)EMEX[)EQe:qsuiSIt)u"u$)et#aTLjTjgNkdFNL$&:4arFvkWc@Nhj@9\&HDM4pz,as,B!V9$5Ki([V$LVbf@D5
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 9b 1a c9 bd 31 13 b5 d4 c1 b5 4b d5 6e 84 5e a1 51 99 5b 28 61 16 f2 2c c5 dc b0 6a 4b b3 bc e3 a9 85 b4 2d 17 80 a9 59 6a 73 53 8a 6a 3d 96 52 90 b1 22 61 b1 44 69 40 16 58 b3 2c 00 2b 2a 07 6e a0 29 05 96 61 11 ac 76 34 03 e2 42 41 c6 54 b2 bc b3 21 16 76 49 e6 e5 f1 2c 62 96 29 ca cd 94 8c f1 92 95 04 0b 44 b9 60 80 59 04 cb 18 2b 5c 52 14 c3 b2 46 85 54 40 fc 97 29 65 20 df b2 01 1c 28 0d 25 86 91 c4 22 cd 38 b6 ab 0d 80 4a 68 56 49 0d ac b4 55 0a a4 d0 44 95 4a a9 a6 d0 38 95 ba 91 2b a1 52 6a 4e 07 82 a2 6a 41 4b 8a 22 67 9a 2a 49 50 2b 35 d1 2d b7 1c 65 6e 24 2d 49 12 2a 51 25 23 32 4d 52 d2 94 04 25 51 dc 44 44 8a aa 4b 2e 25 c5 cd a2 26 8a a2 a8 06 55 4a 97 32 42 13 95 92 a0 89 6a 12 a5 72 c8 00 c3 54 32 b8 92 44 69 67 8d e2 52 e3 c8 c4 c4 25 ea Data Ascii: 1Kn^Q[(a,jK-YjsSj=R"aDi@X,+n)av4BAT!vI,b)D`Y+\RFT@)e (%"8JhVIUDJ8+RjNjAK"gIP+5-en$-I*Q%#2MR%QDDK.%&UJ2BjrT2DigR%
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 89 c0 04 2b a6 84 84 14 96 25 a7 a4 46 de 94 71 81 28 99 04 4b 11 66 a2 04 39 8d 99 92 0a 0f 8a 2c 16 30 a8 32 cb c8 59 68 76 85 c4 48 ac 4b bd 54 c2 54 0d 96 5a ed 60 54 c1 7c 08 b3 18 2a 60 ac 59 ab 54 3a 03 1a a5 4b 27 5c bd 54 29 15 de 11 1a e7 a0 49 55 0b a5 44 69 82 12 84 3b a9 36 8d 90 96 d5 45 8d 8b 43 27 ce 14 a1 7a 71 8d 49 e2 16 45 26 2d 01 20 40 62 56 32 4b 24 0b ca 60 8d 1d 00 88 60 f6 06 24 12 c4 68 64 20 99 88 a2 7a b1 03 24 00 56 94 22 34 08 b0 97 80 58 02 b2 22 85 23 51 38 00 38 f0 45 9b 98 28 05 b2 97 49 1a 43 90 19 60 74 93 88 40 ac ae 4b ed d8 c5 6d 55 9d 22 a9 51 d5 0e 9a 4a a7 3a 5d 75 23 84 7a 67 77 a2 9a 8c ac 13 34 ca 0e 9d b2 4e c9 a9 92 aa 16 6b 32 a3 1c 33 8d 5a 34 53 d7 16 51 63 5f d5 83 aa c7 88 cd ca ae a9 a9 e0 dd 37 aa 69 Data Ascii: +%Fq(Kf9,02YhvHKTTZ`T\|*`YT:K'\T)IUDi;6EC'zqIE&- @bV2K$``$hd z$V"4X"#Q88E(IC`t@KmU"QJ:]u#zgw4Nk23Z4SQc_7i
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 7e f7 e0 a9 67 bd 45 a9 8f d8 f8 ba c4 65 72 81 ac df 99 2b 3f f2 c7 47 fd e1 0b 6c ca 09 cf bd e6 bf 8b ff fd 88 2d af 3d 67 ee 7f b6 77 f3 f1 a0 6f ff db 9e 40 a6 7b e5 f1 21 73 8e 0f fb d3 33 de ff 4b fe 89 4c 2a 9b 69 06 40 55 16 ae 65 97 02 55 bb 64 92 46 4d a9 a6 94 44 e5 6e 14 97 28 ae 76 aa 71 2a ea 14 49 54 3a 71 54 e2 24 0a 1a a1 24 27 57 f0 79 a5 93 26 a5 36 74 01 52 7b d5 1a 94 f6 7a 4a 6f b9 da b1 52 4f aa ba 61 93 d3 ea bc 42 a9 a3 ea be 31 23 d6 5c 6f ab ec 52 cd 19 34 f6 82 24 91 c8 b8 82 07 96 5e f2 be ab f6 b9 5a 7c e2 d1 d6 fd 9f 7b c6 eb ce 1d f7 f0 cb 7e 71 ca 85 29 53 09 90 32 3d f0 78 42 79 df bd 20 2f 6d 5a fe e2 72 c9 d9 0f ed fb d1 77 22 ca 14 b5 cd ec 29 d7 a8 7b ef ee a7 ae fc c8 77 3f f0 9c 03 d7 f8 bd 97 f4 d8 43 79 ff b1 fc Data Ascii: ~gEer+?Gl-=gwo@{!s3KLi@UeUdFMDn(vqIT:qT$$'Wy&6tR{zJoROaB1#\oR4$^Z\|{~q)S2=xBy /mZrw"){w?Cy
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 77 4a c9 aa ac a2 ad 72 59 8e 59 85 aa 2c b3 3a 65 c5 42 76 64 39 3b 39 76 68 95 62 59 06 87 96 aa dc 74 8b a5 db 06 9b 49 d7 59 ae a7 d2 9b 9a ad dc b7 7c ba 84 ee 3d b5 ba d7 45 93 59 d5 fd 06 d7 68 87 fb a3 ca 09 4b 77 4f 96 de 26 6f 6e 69 f0 05 1d 30 5d 56 d1 8e 17 a4 c0 71 92 46 9e 18 ec ad 14 4d 38 b1 44 14 d3 1a 31 58 53 e4 76 92 06 81 54 c9 32 3a 5a 21 a8 ac 88 70 a2 84 98 25 91 15 4a 35 45 be e5 6c 51 58 88 53 87 1a 52 da 20 96 bd 64 a8 44 1d 6a 64 16 20 20 0b 91 9c 4a 06 58 66 29 70 25 96 90 81 09 4b 81 2b 0e 01 c2 70 a4 6d 90 a3 59 98 da c8 fa b8 62 50 54 bf 54 8e e4 54 cf ae dc 23 55 a7 77 ca af 9c d3 58 a9 87 72 2f 51 f2 f6 ad f3 34 d2 8c 74 f7 09 bc 51 5a 4f dc 7d 33 9d ca d8 0d 96 5c 49 99 6d 11 d5 1a 37 2c 32 cc c8 e3 5d 53 b0 8a b8 5e d7 Data Ascii: wJrYY,:eBvd9;9vhbYtIY\|=EYhKwO&oni0]VqFM8D1XSvT2:Z!p%J5ElQXSR dDjd JXf)p%K+pmYbPTTT#UwXr/Q4tQZO}3\Im7,2]S^
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 94 c8 e6 38 87 64 2c 9d c9 79 1a 2c b6 fc e7 6f 2f eb 19 db 5d 36 be 7d e1 7f 5e 7f d1 dd 2f fe c9 3d 5f fe f8 b6 cd a5 0f ac 7e f3 97 97 5e fb d4 76 9d 78 6e d7 f6 8d 1b cf 9c f5 d3 47 be fd c4 3b ef be df ca 60 74 e1 8d d3 6f ee 79 ee 92 fb 5e fc ee 0b 8e e0 01 d7 6d 65 7e f1 83 d7 5e 2f 5d bb ee 91 f7 fe f7 df 3f 3d e7 05 51 e8 db ee f1 99 1f ff cb 23 fe 73 73 c5 f6 a1 90 e7 6f bf bd 76 cf bf 39 fa 93 f7 1f f5 c9 a7 a5 91 db 33 77 3e 75 f9 9f 8f 3e 72 af 3b 10 62 ca b8 de 8b 39 ea bb f7 1f ff 2d 5e d9 7e 1d 99 7d 58 d6 ed d2 19 ff fb a6 63 fe f3 ad e7 7d f7 d8 55 a5 8c 65 cf fb e8 fb bf f3 98 5b 3f ef 86 7f 2b 67 3a e7 9a 93 ee c1 11 61 79 e5 85 f5 fd 8f 96 ca e6 53 6e 7a e5 6d ff 7c c9 71 7f 7b fd a5 37 be fe 99 0d cf 3a f9 2f af 3d f3 13 2f e5 aa 4c Data Ascii: 8d,y,o/]6}^/=_~^vxnG;`toy^me~^/]?=Q#ssov93w>u>r;b9-^~}Xc}Ue[?+g:aySnzm\|q{7:/=/L
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: ef d8 5d ce bb 65 d7 6e 28 59 17 d5 65 5d 52 96 1c 73 79 e3 52 69 d4 c1 d5 28 ba 1d ad b3 9d 13 d7 56 b5 c1 8d 03 aa 97 dd 71 55 10 61 d1 53 23 52 a6 65 4f 54 e4 f1 df fc 31 5f 0c 2d ff ff 7f 91 8c ae a9 2f 24 22 72 ef e4 e7 00 91 f2 e1 5f 1f 3d e7 52 d6 fe f3 ff 76 7e cb eb bf 7b 6c 0d 8e f8 f4 4d cc 3d f6 85 6b 6f ff 8f af 7c f6 4d 5f f8 c3 9f 7e f8 af 9f 47 5f 76 3e f7 87 fd 7f e5 e3 6f 3e 5f ff fb fe fe 99 3f f5 b5 ef 9f f0 c4 49 f7 9d df e5 54 8d 0e 7a fd 5d 9f 3c e7 54 8e bd a5 7e 79 96 1d 72 d1 b6 0c 3b b3 16 f7 0d 6b fb d1 75 77 51 88 4f 65 c2 72 e7 bd 2f 7f ed aa 9d 69 47 c9 0d a6 6d af 7c 67 ff 87 5f de f8 b5 b7 ff ea e7 16 1e f3 7b 2b 6e ff 92 a3 ce 7e 79 7b d7 e5 87 1f fa 86 a5 97 7c df f4 43 76 87 ef f8 d0 f1 17 f9 cd 67 ef b8 75 ed 66 c1 91 Data Ascii: ]en(Ye]RsyRi(VqUaS#ReOT1_-/$"r_=Rv~{lM=ko\|M_~G_v>o>_?ITz]<T~yr;kuwQOer/iGm\|g_{+n~y{\|Cvguf
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 66 89 c9 8e 1b 9b b8 9a c5 a2 a4 dd bf 10 2c 2f 9d 35 e3 49 13 3b b6 e3 6b cc 5b b6 c2 68 f7 97 3b b6 64 5b 54 ed b6 34 a1 46 cb a5 5c 8a 59 de c4 95 b2 56 37 aa a8 96 28 b4 22 ad 1d 58 35 b2 b4 01 1a 86 4c 0d 85 42 a9 cc 4e 49 52 92 08 a1 00 20 93 a4 3c 02 ce 1c 78 9c 4a c9 f0 88 50 2e 0f 5a 8a 94 cc 63 84 a1 97 47 82 cd da 49 a5 10 58 c5 44 cb ce 5b 01 ab 14 b0 43 00 10 87 04 c0 13 23 a7 c2 20 2f 0b 28 c9 ba 02 24 04 12 e1 44 0a 85 47 4a 82 c7 49 81 6c e9 50 c5 84 04 bb c4 81 87 01 88 1d b8 e0 f2 a0 15 4f 89 14 10 0b 46 62 49 81 20 27 42 d9 91 40 62 f0 8a a1 83 37 e5 d6 29 5a 29 37 95 52 d5 aa 6b 52 7f 54 50 19 14 e3 2d 3b 85 41 97 0e 5a 57 b3 aa e5 4a 25 ab 4e b1 db 15 74 9e 59 f5 2c a5 d3 53 ee 17 dd ba c9 ec fe 01 34 41 f5 99 e5 9d db b8 a9 1c 9a 27 Data Ascii: f,/5I;k[h;d[T4F\YV7("X5LBNIR <xJP.ZcGIXD[C# /($DGJIlPOFbI 'B@b7)Z)7RkRTP-;AZWJ%NtY,S4A'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49789	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:15 UTC	1106	OUT	GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:15 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32634 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11075 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:15 UTC	720	IN	Data Raw: 52 49 46 46 72 7f 00 00 57 45 42 50 56 50 38 4c 65 7f 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 ce 3e f1 7a af ff 82 67 76 ae 85 88 fe 4f 80 6d 77 97 ed de 9d dc dd b6 dd dd 8f db 5e 79 e5 c9 5f ad 96 0f d9 5e 3c ed b6 bb 22 29 89 16 f6 64 b7 f7 7b 6a ff db b6 d9 0c 8b e7 79 04 59 5d 90 00 0f 09 55 2b c7 5a bd 61 3b 3e 8e a3 79 35 d5 57 1d 75 a8 2a d3 f7 ab 95 38 24 69 a5 aa 3a 32 65 8c 91 5a 30 1d 24 20 55 55 cf 8b 3b 11 19 83 8c c1 18 41 55 7d 4b 8b 91 64 00 d3 e5 09 c2 77 00 7b b1 99 a9 c8 1f a8 4a 8b da 83 94 24 c4 c0 5e 44 cc 11 fb 53 55 34 20 40 00 a1 03 51 11 3f 36 35 73 48 ec bf c0 75 bc d9 cb d4 ad ff 82 24 5d 7b f9 fd ae 29 03 5e 91 31 34 86 6e 2d d8 7e 75 ae d6 2b 72 fe 98 80 97 7c 45 4b a8 82 00 82 d8 f7 ea 3b 60 eb 92 74 6d be 21 e7 f9 bb 16 Data Ascii: RIFFrWEBPVP8Le/IM8lFF>zgvOmw^y_^<")d{jyY]U+Za;>y5Wu*8$i:2eZ0$ UU;AU}Kdw{J$^DSU4 @Q?65sHu$]{)^14n-~u+r\|EK;`tm!
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 1f 38 01 75 b6 c9 dd b2 2e c6 47 8f cb d9 4d b7 62 12 08 87 00 40 c3 7a 41 c0 3f 6e 7a 2f 4c c6 86 2b d6 b5 87 be a3 69 46 35 87 03 00 2c f6 00 06 bd a5 e4 f8 c2 9b b1 5d 00 10 98 4d bd bc f3 50 01 73 ea 03 37 04 8c cd 36 00 18 f4 72 1b 00 00 15 db 33 bc 66 a7 62 c3 06 e9 4c bb e3 df 45 87 ae 3a 70 71 5e e3 cd 1b 42 ff 3f 1a 6e 8e 6b d0 79 e4 0d b0 35 ce 18 ec 2d e5 c7 41 4e 5b 43 0e 06 d0 8f 1a 00 f5 bc b7 bb 03 9b 5c a1 6f 6b 49 3b 78 d2 43 ae b4 c1 da 64 db c1 06 80 96 f5 be 34 90 0c 67 84 c7 70 1f 1e 47 2f 20 09 4f d3 dd f3 f8 e4 01 c2 43 b8 1f 1f 01 a0 d1 f4 b9 cd c8 1f f5 9f 86 fb b5 a1 71 72 c5 7a 01 67 a9 9d 4a 93 4f 68 79 b1 2c c0 d2 3b 34 e9 14 3f 5a 5e 9c 17 c0 b0 ea 0e 0f 12 d0 1f e4 ca 15 48 36 bb 55 59 a0 5c 7a 53 4d 91 ac 62 5b 25 30 d2 2a Data Ascii: 8u.GMb@zA?nz/L+iF5,]MPs76r3fbLE:pq^B?nky5-AN[C\okI;xCd4gpG/ OCqrzgJOhy,;4?Z^H6UY\zSMb[%0*
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 51 2d 9d e5 b4 14 45 51 ca a2 2a 00 01 09 00 b2 ab f8 a8 ca a2 a8 a6 58 14 b5 d8 91 62 57 23 fc a3 08 55 28 8a 6a 14 d5 34 94 a2 a8 86 4e 28 aa 45 51 7c 2e 8a bf d2 12 7b d0 a2 13 8a e2 0f a8 96 b2 50 43 67 41 d3 50 8a a2 8a 1d a1 28 ab 50 74 c4 42 2d 3a 8a 32 15 45 d1 11 8b aa 2b f9 2b aa a1 28 8a ba 24 97 b0 e2 ab dd 2d b9 41 b5 25 ba 8e 5a 01 76 4b 6e 78 d4 2a 9c 92 42 25 a7 b4 ad 96 75 35 ac 08 b5 95 ba 9d 55 2d 6a 19 72 80 59 26 6c 40 ad c2 15 69 51 6a 25 8b 92 6b 61 11 be a2 5d 14 a5 ac 2d 59 52 4d 6b 6a 2b d5 6a 99 9b d8 16 1f b5 5d b8 72 f5 5b 62 b7 1b 55 95 75 2a d9 a2 c8 55 72 15 51 95 75 12 5b 53 ea 6a 6a 8b b2 d6 26 57 8a c2 a5 4e 92 1d 44 ae c2 96 d0 5d 97 ba a5 a1 3a d9 2e b6 28 be ed c2 95 7a 84 52 77 05 14 97 6a 17 a8 20 d5 d0 51 55 dd 68 Data Ascii: Q-EQXbW#U(j4N(EQ\|.{PCgAP(PtB-:2E++($-A%ZvKnxB%u5U-jrY&l@iQj%ka]-YRMkj+j]r[bUu*UrQu[Sjj&WND]:.(zRwj QUh
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: df 46 6d 56 c9 fb d4 55 69 9d 24 27 56 db 2a 79 0b db 2c d8 b7 a2 2d ba e6 28 79 43 ae 2d f2 45 96 71 e9 aa 41 17 24 eb a1 2e 9d 6e ba 87 9d 6c 5e 33 c2 ee b1 4a b9 66 3d 5c 97 8e 1a 4d 77 57 a0 46 d6 ba 51 cb 71 d0 b0 92 a0 c2 4e 50 2a 94 31 95 4e b1 86 ca 89 1c 4b 37 9b 5d a4 d0 47 94 44 d1 54 27 5b 9c 38 ba 0f b8 4c 56 d6 a3 ba 10 8d c6 76 0d 51 94 c1 0d c8 51 68 ac 8a 94 eb 51 15 a2 28 54 1f 28 2a 72 c2 32 82 91 aa ff e3 a8 71 0a ef 71 2b 95 52 c3 6a 70 b9 00 3d 6a 17 a5 e2 3e dd 4a c9 20 3b 03 9d 0a ed 9e 50 aa 91 2d d2 34 64 23 6b 84 b6 24 2d d3 d0 a5 6e a9 8a 22 17 75 81 52 52 db 91 56 4b 2e cd 16 7f fd eb 47 ed 9f d5 ae d5 6a 99 16 69 2d d6 76 40 b5 a3 5a d2 2a b5 2d 54 28 72 83 35 50 db 31 5b 14 45 91 15 69 78 d4 22 5b 84 6a c9 16 d9 2a 4d 3f 6b Data Ascii: FmVUi$'Vy,-(yC-EqA$.nl^3Jf=\MwWFQqNP1NK7]GDT'[8LVvQQhQ(T(r2qq+Rjp=j>J ;P-4d#k$-n"uRRVK.Gji-v@Z-T(r5P1[Eix"[j*M?k
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: c8 6e 23 70 81 f3 e1 0e 41 d1 64 15 e8 66 53 cb 94 2e 9f e5 7a b4 9a 0a 74 c3 32 0c 7c 2b 59 da da 50 72 87 34 44 df 41 d6 52 b2 35 b9 48 83 86 2d 69 89 76 6a ba ed 2c eb 12 6e cc 5a 4d 4e a5 36 96 b9 e3 76 b1 f1 ad d9 9a a1 d0 91 4e 58 a4 ad 92 6b 14 b5 52 27 54 ab 65 5d 67 b6 1a 72 2d ed 6e 84 6a c9 2d 6b 8b 8e 76 8d 2c 54 6d 49 ae 01 1f c5 bb 49 56 4d db 25 dc 49 ca 46 9d 44 2b 71 6e 3e 5c 73 ab bd 4c 4e ac 66 99 bc 25 9b 36 72 da b4 45 e4 6e b1 53 64 6b 09 a7 64 e9 26 27 e1 04 ab b5 52 97 61 b5 8b 3a 2e ba a2 2b bb e6 bd 58 74 ee 4d fe 44 ee 8a d0 ab a7 de 6c 36 55 b6 df 22 db 45 f2 0f e7 a0 db fc 29 bc 69 b6 76 c8 af a8 0b e2 fb 56 6a 01 de 29 ed 58 a9 55 b6 b7 54 43 35 a7 92 95 a8 9b b1 75 b5 6e 77 a6 9d 15 95 a2 8e 9b 5a 81 6e 67 b8 92 82 17 bd 13 Data Ascii: n#pAdfS.zt2\|+YPr4DAR5H-ivj,nZMN6vNXkR'Te]gr-nj-kv,TmIIVM%IFD+qn>\sLNf%6rEnSdkd&'Ra:.+XtMDl6U"E)ivVj)XUTC5unwZng
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 76 85 6f c9 e2 ce f6 6d c3 1d c5 2f 96 31 8a 4a ab cd ac 2b 5c 14 ed 4b 72 fe 49 1f 95 bc db a4 d1 c5 1d 5f 5d 6f ce f7 d5 cb d7 47 f3 94 1d 2a 40 b1 1c 2a b1 c0 18 ad d4 11 61 61 d6 f6 85 fc e9 67 3f 64 0a 00 05 a1 84 41 80 c0 20 8c 3e 00 aa aa 12 a9 62 b7 39 de 22 51 75 ee 40 a1 51 54 28 05 db 0f 5f fe d5 47 6b a3 aa 50 32 81 c5 4e b0 00 68 30 4c 9c c2 00 54 19 9d 25 a3 94 94 c0 47 8d 13 28 90 5a 0d 7f f6 c9 0e ce f6 ed 92 13 45 5e a6 4e a9 5a 19 fb 22 0b 84 6f 4d 4e a7 f8 be 33 ed 35 6a a9 d2 de 1a ae dc e4 9d 8f 7d 2d e9 1f ce f6 96 55 29 de eb 26 b7 2f d5 df 57 0f a7 cc b5 ba 69 bf 4c ae 8d d2 8e d5 12 22 51 53 ad be a2 bb ec 8c fd c3 5c d1 91 3f 1e 36 ac fa f6 6e 74 25 1f fc 74 2d da 90 13 8b fc f2 77 7f 95 73 ca 78 18 87 d2 b1 f8 16 a1 f7 43 dd 0e Data Ascii: vom/1J+\KrI_]oG@aag?dA >b9"Qu@QT(_GkP2Nh0LT%G(ZE^NZ"oMN35j}-U)&/WiL"QS\?6nt%t-wsxC
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: fa c6 17 fc 82 9a e7 6f f8 99 af fd 3d ff f9 73 fe e9 96 df fe e2 e7 ff 7f e5 de ad 7f aa 14 49 1b 0e 2d 05 8a 2c cb c4 aa 51 11 29 4c e8 7a d3 e9 bc f1 ee d7 d7 5f c2 57 3e fd 52 48 30 8a 48 a4 2b 81 a8 af 9a 92 00 e9 ee cf aa 32 3e c3 79 26 15 1a 40 b2 6a 00 02 c1 98 a2 4b 25 c3 b9 14 7c 39 5e 71 5a a7 ce 08 88 1a 5d 55 40 90 a8 82 42 39 41 41 40 dd 04 00 be 1a 6f 7d 06 75 05 85 31 63 cc 9b 08 95 59 9a 59 2c 9c ec d4 a2 93 6c 11 f3 65 38 10 09 69 4d 31 55 89 b6 59 e6 9a 68 6f a6 bd 65 d5 15 d8 35 8a 8c 53 37 f5 c7 68 7b 74 fb f7 32 ed b7 6b 6e a7 9b fc 07 b9 d5 b1 fe 69 ea 9b a5 85 d1 76 47 12 9b 2c c9 bd 13 66 c9 54 76 19 dd 95 b5 ed 0c bf a4 28 94 ee ba 0b 9e fd a3 cf bf f2 99 eb e6 eb 6f e2 67 fe c1 af 3e ef 1b 77 cd df fc df cf 6f 5a 23 3e f7 0b be Data Ascii: o=sI-,Q)Lz_W>RH0H+2>y&@jK%\|9^qZ]U@B9AA@o}u1cYY,le8iM1UYhoe5S7h{t2knivG,fTv(og>woZ#>
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: a8 22 01 6a c2 28 2c 42 b8 69 4a 08 30 b5 42 95 10 6a 96 19 a5 82 04 9a 25 22 14 09 40 51 41 81 18 55 ca 20 55 4a 18 62 d3 9c 6b 8f 2f 44 94 d2 2a 05 88 03 50 e0 34 18 64 d8 48 32 9a 28 f7 e0 51 d2 a2 49 c3 c5 d2 5e 98 82 a4 62 d4 ff 30 7e f8 88 b4 0b 4d ac 4c e4 a9 4b e9 4b d3 b6 1e 9a 69 86 a6 2d 4a 1a 1b de fa ed 68 7f 90 9b dd fa 7e 3b 73 fe 45 c7 f7 4f 93 6f e9 6e bd 33 7d ff 2c b5 42 48 77 ce 94 aa aa 2f 67 17 2a 2a 96 5d f7 25 9a 20 de 97 1f 1d 61 eb bb 43 50 53 05 0f 1a 03 5a 53 80 a7 46 95 94 79 4e b9 28 dd 63 0f 9a 2b b0 0c 5b e9 59 b1 ea 5a d4 dd ba 15 9c 00 c2 0a 62 59 85 35 24 88 a8 42 0d 91 a9 94 40 59 41 19 0b 4d 20 88 12 82 52 53 f4 40 04 59 e7 8a 38 14 9c 13 2f 84 05 20 53 b1 12 ac 12 02 35 4e 53 70 42 20 e0 24 c2 c2 1a 08 14 56 d6 9f dc Data Ascii: "j(,BiJ0Bj%"@QAU UJbk/DP4dH2(QI^b0~MLKKi-Jh~;sEOon3},BHw/g*]% aCPSZSFyN(c+[YZbY5$B@YAM RS@Y8/ S5NSpB $V
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: a7 5c 6d 28 91 6c e2 1a f1 ac 89 84 a8 f3 23 e4 96 89 1a 31 5a ba 89 16 97 ae a1 32 29 d8 4e 2a 09 32 3a 0b f9 4c c1 9e ed f9 16 ab 21 4e 25 c2 b6 da 74 86 38 93 66 74 46 96 59 1e 6b 12 2a 7a 7c 59 92 8a 60 2d d1 42 0c 86 58 01 db 28 61 51 99 3a 94 ca aa 50 a1 4c 4e e1 7b 94 14 89 fb 14 dd 18 3c 6e 6a b7 01 73 4b c3 7d 88 8b 83 c8 c8 50 3e 26 89 5a 34 04 5e 16 5b de 69 6e fd e5 b7 08 0f b4 4d ec 9a 21 4d b2 8f 50 d4 f4 9d 46 b6 d1 92 8b 76 3b ac 50 bc 37 0f 4e 05 61 8b b0 57 25 1d 4e 98 24 0b a9 b2 cb 77 71 df 92 ce ba 9d 54 76 52 ac 34 f1 02 16 82 d2 04 7a b2 f4 fd 98 2c 4d 96 74 bc 2b 6b c9 92 e0 22 76 42 96 40 52 a9 b2 cc 70 1b a9 f8 fe d6 93 bf a1 6e dd a5 76 17 ee a2 83 13 7b 11 15 2a 21 db 32 6f de a5 65 6a 29 b7 e2 96 1d 47 bb 9b 84 51 32 b8 b6 65 Data Ascii: \m(l#1Z2)N2:L!N%t8ftFYkz\|Y`-BX(aQ:PLN{<njsK}P>&Z4^[inM!MPFv;P7NaW%N$wqTvR4z,Mt+k"vB@Rpnv{*!2oej)GQ2e
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 8b a5 10 4c f7 d4 29 90 4c 5a 74 96 40 c8 56 5d 23 c2 47 cd d8 5e 1e 5a 43 1a e4 56 66 d2 dd b4 26 34 f3 54 f9 9f bb 2b 6d 98 36 ba 7c 40 43 66 69 2b f7 11 71 64 21 90 44 32 da fa e4 56 e2 70 16 c5 a8 e3 68 9c e0 c3 28 ed 51 f9 49 09 82 2d 67 c6 90 d1 66 cc 6a 25 68 6c 15 ab 43 a7 9d 98 8d 93 6a 70 f3 32 57 5a b6 c2 a5 70 3b 6d 29 2d 2b db 33 72 9a 15 66 84 db 4a 90 c9 42 e6 26 de 28 01 57 ca d6 30 aa 2a 65 e9 50 d5 c7 0e 77 d1 69 37 4a 07 89 ce 6c 16 ad 82 3e eb a2 f4 2e 36 4a 32 a5 09 38 54 31 d7 3d 14 bb 7e 31 24 4c a0 cd 51 17 16 a8 ea b1 75 6a 15 27 19 43 a5 2a c8 28 e4 16 4f 4e 25 af 48 b5 36 f9 96 5c f1 97 7a 8b 19 c0 32 3d 92 7d d0 4e 16 de df df f0 a5 e1 1b 4d d2 5b b5 3c 29 d1 61 7c 5b 45 be e4 3b 50 65 b1 49 3a b8 ea 4a c7 74 43 85 0a 9c b1 c8 Data Ascii: L)LZt@V]#G^ZCVf&4T+m6\|@Cfi+qd!D2Vph(QI-gfj%hlCjp2WZp;m)-+3rfJB&(W0ePwi7Jl>.6J28T1=~1$LQuj'C(ON%H6\z2=}NM[<)a\|[E;PeI:JtC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49791	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:15 UTC	1106	OUT	GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:15 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13388 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11075 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:15 UTC	720	IN	Data Raw: 52 49 46 46 44 34 00 00 57 45 42 50 56 50 38 20 38 34 00 00 d0 a2 00 9d 01 2a 28 01 28 01 3e 45 20 8d 44 a2 a2 21 12 1a 0d a4 28 04 44 b3 b7 70 b9 f8 88 57 cd 05 bd bb c5 cf 87 31 56 eb a7 f2 7f 74 de ec fd 40 79 80 7e 9f fe 9c 75 80 fe 67 e8 03 f9 17 f6 7f d8 cf 64 df f5 5f e9 3d c4 7e b3 7f 8e f7 00 fe 4d fe 1b ac 03 f5 77 d8 17 f9 97 f7 af 55 9f f6 ff b8 5f 04 9f b7 3f b7 ff 00 ff b2 5f fb 7a c0 3a 8f fa 35 fc fb f1 6b cc a7 e5 5f ce ff 19 3f bb ff d5 f5 7f f1 1f 92 7e 9d fd 97 f5 c3 fb 6f fc 5f f4 bf 0d 5f c3 f8 49 e5 ff f0 bf 99 7e e6 ff 0b fa 83 f4 af ec bf df ff bc ff 65 ff e1 fe af ef 37 ef bf e0 ff 28 bc e1 f8 27 fb 9f e5 17 f6 bf 90 2f c7 ff 8b ff 56 fe cb fb 0d fd c3 f6 bf dc 97 fa 1e d9 9d 3f fd 2f f8 0f 50 5f 4c be 55 fd eb fb 6f f9 6f f7 5f Data Ascii: RIFFD4WEBPVP8 84*((>E D!(DpW1Vt@y~ugd_=~MwU_?_z:5k_?~o__I~e7('/V?/P_LUoo_
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 1d 83 1a 6f f6 df 24 a0 3b 6d 67 23 02 5f ed be 49 38 a6 39 0e 2a 92 ed 60 bd 74 35 f1 1f ff f4 42 f2 76 fb 08 b6 c6 ed 2d fd 38 48 93 f1 0d 93 7a 9c 2e 59 f1 37 e3 fe 3d 94 ba 20 b9 9c 2b 77 17 2a 16 d1 0e 14 c5 8f 4e c1 57 73 bc 0a 91 c0 39 f9 6b 04 4f 32 71 a3 14 c5 1f d8 a7 70 7c 9d 4b da f2 66 0d db 07 b2 0d fb f2 f6 7d a6 1e 1a df 5c cf b0 c4 d2 ee 74 7a bf 69 16 e4 04 c6 fb 71 da 7c 0b f5 61 a6 30 60 2f 4c 64 8e 76 89 a4 58 be a4 20 53 d9 d0 64 8b 92 c7 16 fa af 20 31 22 5d a4 39 a6 f0 1d ed 8e f7 43 4d 55 b4 3d 64 41 27 88 09 e7 cd 70 46 56 f3 8f 50 5a 3d 04 b2 70 8d 69 38 1e 22 2b ce 08 66 6c 58 3b 1b 0d 75 d5 b6 60 63 37 ee 85 b3 c7 1e 5c 44 1d 2f bd 37 ed 8f 30 3c 85 b1 9e 30 71 7f 05 fd 1f a0 c4 83 93 f6 57 ba 9d 5b 8f 1b d6 d8 4f d1 a4 74 18 Data Ascii: o$;mg#_I89`t5Bv-8Hz.Y7= +wNWs9kO2qp\|Kf}\tziq\|a0`/LdvX Sd 1"]9CMU=dA'pFVPZ=pi8"+flX;u`c7\D/70<0qW[Ot
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: ec 5f be 57 8b 7b df e4 0f b8 a0 df ef f4 f9 08 80 80 1d 20 84 21 b6 d0 40 25 d5 0f 8f 98 3e 63 77 05 49 70 c1 f1 84 07 7a 32 b0 06 dd 6e 04 35 b4 b9 ee fa 44 c2 91 ca 00 b9 2f d1 b7 5d 91 06 15 68 09 73 fc e5 11 63 b7 5d 0f 17 6f 50 08 a6 05 e3 16 36 56 fb dd 73 02 9c 23 c4 3c f3 a7 5a 64 17 c8 33 6c 87 72 bf d2 2f 29 1a 7c 7c 76 de 54 1c af 7f 8a a0 ea c2 bc dc c2 8f 62 aa f3 3b a6 96 4c 44 57 1f 2d 06 b8 8d 41 74 6a 8d 26 ff 51 d1 20 11 e7 af 6e 58 9a 41 07 83 1b 8e 3c f0 38 4c b5 33 b7 07 8e 6d be 0c 49 72 b6 1d cd 95 85 1f e9 82 e0 91 25 11 77 c1 fc 43 93 ad f4 22 82 91 67 95 06 f3 d3 4f 1c 18 a3 94 65 d8 cb a6 ab 97 cb b2 9b ef 31 ca 51 44 8b 4e 4f 60 d1 e1 89 33 33 17 e6 0b 6e a9 b3 39 89 38 a9 a8 e8 aa 24 dd 52 20 37 0a 6d 90 ce f4 39 17 81 be b4 Data Ascii: _W{ !@%>cwIpz2n5D/]hsc]oP6Vs#<Zd3lr/)\|\|vTb;LDW-Atj&Q nXA<8L3mIr%wC"gOe1QDNO`33n98$R 7m9
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 3a 86 91 53 a7 44 66 f2 ad a1 df 18 9b 67 6c 39 5d e4 36 93 93 db c6 bf 3b 8e ac 0e 7c 74 32 ec 39 c6 2d ea 9a ee 28 fd 3d f9 cb d5 86 b3 71 c6 1b f6 42 ad ac bc 08 18 48 a0 3f 2c 61 4a 09 f8 78 6d c9 7a 19 2b 7c 9d 02 64 dc a5 de 92 cd 64 f0 87 4f 5a 49 e8 ea 1c f3 75 94 ea b3 64 cc 7e 74 65 0b 73 be 8c cb ba 6e 5f 61 57 cf 51 39 f3 b8 3a 29 bd d5 25 2e 59 8b 79 a1 19 0c 68 5e 98 a0 fe 5b 32 ff 64 21 0a 1b 1b a9 a2 f3 7d 23 6c 11 6c fd a6 e6 22 81 f9 e2 1d 4f e8 b6 11 2b 76 6d 05 66 11 6c 9c aa fb f1 80 e6 85 84 48 a7 ef be f7 75 01 f6 ed 7d 75 ff 55 a6 1c 34 de 3e 1e 87 1a f2 23 3f ac 3c 85 a3 33 a1 3f 6b 09 b1 64 41 82 e1 db be 8d 15 23 cb 99 47 19 4a 49 5f e1 06 ed ac 4a 40 7a ef ea 75 6f c8 ea f4 23 40 8c 13 fe df 46 f7 fa 2f 60 f2 b3 41 05 1e 00 84 Data Ascii: :SDfgl9]6;\|t29-(=qBH?,aJxmz+\|ddOZIud~tesn_aWQ9:)%.Yyh^[2d!}#ll"O+vmflHu}uU4>#?<3?kdA#GJI_J@zuo#@F/`A
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: bb f5 0f 7c 8e 3a 96 af a7 b8 9d e5 77 c8 c0 95 79 d4 41 4a f2 c3 b4 ad 7a 88 55 61 92 c6 70 97 4e f5 4a ed ff 43 70 fa 50 cb 41 02 42 2b d6 02 41 1b 58 61 9e e2 23 f8 56 20 40 8f 94 bc 56 30 7f 44 50 4a d5 7e be 18 3b 6b ba 94 17 92 73 d6 62 c0 d7 84 e6 1c 37 ab 72 ba e4 90 fa 17 22 f1 97 60 9c f9 f7 9f ee aa 3e ac 5a 92 26 0b f3 e9 43 85 93 6b 8a 81 47 50 2a 86 d4 75 a6 36 fb eb 75 97 c2 de 85 22 ee 8a ac f8 57 49 d1 47 16 85 ab be 7e 79 d2 97 94 4d 0b 1d d8 1d eb 0e 36 54 85 6b d5 46 03 cc 14 24 05 08 9a 0a 1c e6 65 c8 d5 26 c0 11 c7 a5 27 66 c0 57 96 27 d3 87 50 df a1 2f f7 e6 04 9b 7f 7a 24 5d b6 61 fc bf 8e f8 53 f3 67 cf e4 e6 f8 45 4f 47 70 77 dd ed 90 1b f0 2f 52 99 c7 8d 68 cf 5d a3 28 e3 8f f8 af 0f e0 af f4 be 44 94 3f 67 c8 d2 8b d3 24 dd 22 Data Ascii: \|:wyAJzUapNJCpPAB+AXa#V @V0DPJ~;ksb7r"`>Z&CkGP*u6u"WIG~yM6TkF$e&'fW'P/z$]aSgEOGpw/Rh](D?g$"
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 4b dc 31 c1 f7 1b 4b 1e 78 38 60 f6 24 86 ad ef c5 be 4b ea f9 1d 92 22 14 d5 4f f2 66 c5 a2 bd 30 69 9e aa 06 c3 04 ca 1a 91 d2 8e e1 25 a1 28 28 3a 5b 27 fd 0f 79 3d 14 57 83 41 5b 2a 64 e8 71 ee 09 3c f7 6f d8 d1 30 5b f2 dc 04 32 31 84 0b f5 b3 65 b7 c7 2b ff 13 34 ae a0 e9 3f b2 1a b7 a6 de e8 2e 56 53 34 9f 1e c6 78 9f a1 e0 d2 8b d1 fa 82 ce 8d 37 9d eb 2b 03 86 f6 a1 ff 26 3c 5d ec 25 4b 65 99 41 cd cc e0 71 93 92 3e e0 66 ec 53 98 b9 62 3e 58 b2 13 2e d7 95 f3 a9 9a c6 42 06 c9 df 85 ce f7 68 46 4f 11 26 78 4e 73 fe 44 51 55 5a 5b 82 2c a1 17 95 4a 55 e2 d4 4b 00 10 ea e1 a3 4e d7 fe 93 e5 36 6c 76 72 78 a6 98 bf 2c cb 10 56 f8 9c 6a 06 1a b8 11 83 95 73 0d da d7 e9 6d b7 70 3e b4 f2 cc 85 45 c4 19 cd 79 a6 d2 d2 63 e6 b7 5b d0 f1 a1 da fc e5 1a Data Ascii: K1Kx8`$K"Of0i%((:['y=WA[*dq<o0[21e+4?.VS4x7+&<]%KeAq>fSb>X.BhFO&xNsDQUZ[,JUKN6lvrx,Vjsmp>Eyc[
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: e8 fb 67 ce e7 d3 63 db 7e 16 0c 13 bf 4f c4 f1 9e 2b fd 7b 80 b3 39 c1 c2 e8 e8 32 58 f6 de c3 1d ba 32 f6 90 7d 14 26 a1 7b b5 b9 4a 49 97 b1 f8 f6 51 d9 52 e4 30 a2 6a 58 fc 9b e2 74 ff 40 a8 95 3f cb 84 a2 8a 56 70 d7 82 a9 36 b6 f0 45 15 7c ed 86 15 d1 7f bb e0 92 bd 30 11 48 cf e3 64 66 8b 86 df 80 bd 35 f0 6e b5 bc 08 d3 3c 0d 4e bd f7 e2 9d c9 b9 ef f6 fe 64 7c 52 22 4a 68 3d be 61 5d 56 0f d0 d0 b8 c3 0a 56 a9 61 ba cb 45 49 a8 1e 4d b2 f4 42 70 df a3 47 0b 2a d6 a7 e7 88 76 82 bc 20 56 2c 0b d4 b2 82 43 9d 56 e7 35 c0 a8 60 89 20 1b 4c 1c 0d 96 b2 ae 26 66 fb e9 d8 e7 49 ba 55 14 53 b2 c8 d2 46 c3 aa 9d 97 95 b2 c8 9e 52 b9 f1 af 4b 15 23 b3 9f 46 59 40 ef 72 fc 8e c2 ad 6e 71 68 66 bd bc 20 72 58 93 99 52 be 48 93 4b f8 d5 3b f3 2f f2 68 1b f5 Data Ascii: gc~O+{92X2}&{JIQR0jXt@?Vp6E\|0Hdf5n<Nd\|R"Jh=a]VVaEIMBpG*v V,CV5` L&fIUSFRK#FY@rnqhf rXRHK;/h
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: cc a0 22 c3 51 6d e0 1d 59 92 c4 09 27 0b 60 03 b8 bc fc e0 a5 3f 20 0e 19 f3 74 55 08 ed 1f 7f 9d 8a e5 c8 11 ef d5 e9 41 b5 7b a5 49 1c 4b 84 63 2f 90 b5 85 6a 01 ec 68 a7 99 d9 9c 72 3f d8 3f f6 07 ea 48 7f 5d 9a 25 f9 12 0f dd ab a5 4e 14 da e3 be 54 02 34 e5 66 54 e2 65 e4 eb 00 c8 7e e9 d8 da 93 53 fb f3 6d ab 1c 6a 73 16 3a 7f 2b 22 e5 39 f9 21 8e 4c b4 87 2b c5 34 67 0e 28 6f 12 02 32 62 28 05 b9 c5 a4 83 a1 40 29 e3 04 24 2e 36 c7 79 36 86 65 66 2f 35 58 e1 94 bc 65 d5 e4 44 53 b6 ea c3 a6 df 22 2e 71 d8 53 8b cd e9 f8 7f 33 75 60 20 5e 5e 7d 3b 5b 7f 83 09 31 bf f0 ce 65 6d 10 54 2b dd 7f 13 ef 88 37 6c c8 06 7b b8 83 63 47 6e 08 76 a7 22 c9 34 97 07 cc c7 7e ef f6 f0 71 a5 2f 47 7e 80 df 59 7b 9b 31 8e dd 31 92 2c d4 cf b5 76 71 de 08 2c 3e a0 Data Ascii: "QmY'`? tUA{IKc/jhr??H]%NT4fTe~Smjs:+"9!L+4g(o2b(@)$.6y6ef/5XeDS".qS3u` ^^};[1emT+7l{cGnv"4~q/G~Y{11,vq,>
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: cc 31 5f 00 d8 9c 17 42 c5 c4 b2 09 0b 24 17 8f c5 ac c4 e2 99 29 fd 12 7e 92 ce 09 1e c6 44 4b 74 c9 fd 40 3c 69 bd c8 22 1c 2f 05 9c 3a b8 e7 59 ef 4d 24 d0 e6 a5 6f 72 5b ac 7b a8 bb 64 af e4 3f c8 f6 08 f5 17 90 61 92 58 73 30 8e c0 4f 04 9c 9e bc f0 d0 52 a9 e3 d7 92 7e fd f0 c3 b6 a2 98 29 77 49 0f 79 52 a4 35 bc 25 14 e4 a2 a7 fe 89 03 d3 68 69 e8 f9 19 26 a2 26 6a 59 cc 4a a5 af ce 72 e5 cd 84 cb ff 3a be 51 2a b9 2d 02 29 2d 54 1a 72 86 f4 04 2c 12 1a 79 0c c9 c1 1e 33 21 4c 77 0e 4a f2 dd 81 34 e7 d1 6d ae c1 20 73 16 a6 dd ca 91 5f 21 c6 98 77 6e 76 1e 59 75 3f c4 e1 fd e0 03 54 c2 7c 8a fe 96 92 68 70 1e e8 5c 65 0e 25 e2 c5 fd 2d 89 ea c9 e5 89 c0 35 a6 26 c6 b6 b7 e6 d6 6e ac 05 24 1c 51 81 05 9a c9 d8 ab 25 4a 7d 9f 56 a6 6a ab ce 89 20 2e Data Ascii: 1_B$)~DKt@<i"/:YM$or[{d?aXs0OR~)wIyR5%hi&&jYJr:Q*-)-Tr,y3!LwJ4m s_!wnvYu?T\|hp\e%-5&n$Q%J}Vj .
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 90 e5 38 99 89 88 73 80 4f c6 fb 8a 13 00 37 f7 0a 91 9b b3 ca e8 05 a3 ef dd dd ad cc 0a 12 73 14 65 a5 51 f5 5b 1b bf 26 97 61 88 b6 72 8f 3f a2 e7 38 1d 65 e4 17 35 86 91 67 50 ba 3a 4b 50 92 b8 c6 ac 41 0e 1e a4 c8 24 47 91 0e cb a2 e0 43 28 83 f7 dc 4d 56 e5 5a a2 94 96 c3 93 e6 e0 1c 37 4d d0 bc 04 9f e6 6d 0d 7d e0 aa b1 a3 70 31 dd 3e 21 d1 72 9c 2d 3a 77 a4 5b c7 7b 40 86 13 da 07 55 cd b7 d8 eb 6f e8 f4 dd e9 7a bb 81 9b ae 3e bc a7 37 24 5a 5e 51 3b f0 69 78 bd 23 58 25 57 33 90 77 e9 37 9e e8 a1 93 d0 89 a7 21 1e 71 de 8e 54 25 33 97 d5 d2 8c c7 e8 ff 3c 9d 1c 3a 4e f3 15 18 50 e8 02 9b b7 c1 10 86 ae 00 5b 51 f6 9f 8d 6a 9e c4 a4 dc df 5f 2b c8 2e e9 9f 65 6d 01 bd eb db 4c 65 8e 9c a1 19 c1 56 cb de a8 70 f7 ac 18 21 1b d1 99 53 af 79 10 37 Data Ascii: 8sO7seQ[&ar?8e5gP:KPA$GC(MVZ7Mm}p1>!r-:w[{@Uoz>7$Z^Q;ix#X%W3w7!qT%3<:NP[Qj_+.emLeVp!Sy7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49792	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:15 UTC	1106	OUT	GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:15 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6842 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11075 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:15 UTC	721	IN	Data Raw: 52 49 46 46 b2 1a 00 00 57 45 42 50 56 50 38 20 a6 1a 00 00 90 6e 00 9d 01 2a 28 01 28 01 3e 3d 1c 8c 44 a2 21 a1 11 99 cc c4 20 03 c4 b4 b7 77 30 68 01 e8 a8 65 a0 f9 00 03 d0 03 a4 93 21 97 cb df e3 3b 3f fe b1 f8 f3 fb 8d eb 4f e2 7f 1a fd 43 fb 27 eb d7 f6 ef f8 9f ec 39 94 f4 af fb 3f 41 7f 8b 7d 80 fa 57 f6 3f d8 1f ec 7f b5 7f 79 7f 6e ff 45 e1 3f c2 5f e8 bf 25 3e 01 7f 18 fe 3f fc f3 f2 0f fb 77 ed 2f b9 7e cb ad 73 f6 2f d4 17 d3 5f 92 7f 5a fe f3 fb 41 fd af f7 5b d9 4b f6 bf cc ef 72 7e c6 ff 80 fc 80 fa 00 fe 2b fc 8b fb 47 f5 ff d9 cf ee 1f ff fe b1 ff 5b fd 3f c6 f3 ea 7f eb ff 62 fe 00 ff 8f ff 3b ff 2d fd fb fc b7 fc af f4 5f ff fe d9 ff 8d ff 57 fd ff fc 9f fe 9f f2 9e d9 7f 36 fe ef fe e7 fb e7 f9 df fc 1f de bf ff fe 02 ff 22 fe 75 fe Data Ascii: RIFFWEBPVP8 n*((>=D! w0he!;?OC'9?A}W?ynE?_%>?w/~s/_ZA[Kr~+G[?b;-_W6"u
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: a0 8f 8b 8a ff eb 89 82 d5 8f b8 cd 57 aa 38 39 2d f7 4e 73 82 66 30 59 89 a0 c2 96 c2 25 5f 36 e7 b1 77 08 ef bc 32 5c f4 4b b7 82 39 68 5a af 86 b5 6c a9 2e 8f 25 53 05 78 98 9f 38 e2 87 7b 53 ff 52 09 9d 12 e5 3b d8 e8 10 f4 80 83 98 00 80 23 7a 93 7c 4b 52 cf 7c b1 49 f9 6c c5 5a ad 1a ef 81 1f f9 30 76 62 72 3d 1a 0b 4a ad 9b 6c 39 76 6e 7c db 93 b7 2c 1d 77 b8 26 7a 16 4e 6d f5 8a 3a 88 48 12 83 24 62 36 f7 7f 85 3c 13 b3 94 df fe 47 d7 00 4e 6e 4a 5e d7 75 3c 0f f0 b1 c4 5b 98 00 80 93 6b a0 70 36 22 ce a0 b1 3b e1 86 fa 09 b1 83 08 ca e1 b3 f3 0c 9c 48 fe b8 00 00 fe ff c1 6c 80 bf 97 78 b1 ad 22 28 c8 84 59 f3 a8 a5 5b c3 af 78 8c 59 4d 8a ac 1e 37 23 bf fc c2 51 28 ea af 84 15 21 c7 07 ff e2 cd 30 64 79 fd 1f d1 08 65 5c b2 24 bb f8 c9 b2 b4 8f Data Ascii: W89-Nsf0Y%_6w2\K9hZl.%Sx8{SR;#z\|KR\|IlZ0vbr=Jl9vn\|,w&zNm:H$b6<GNnJ^u<[kp6";Hlx"(Y[xYM7#Q(!0dye\$
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: e2 2d f6 9c f4 09 07 b0 88 91 a3 92 a1 23 00 3a ca 8b 94 67 20 43 41 79 68 71 03 6d 7b 3e 5a 21 86 f6 a2 1b a0 9f f9 a0 fc ab 9c be 80 62 08 e1 f7 f6 39 c2 ed cb 0e 45 03 41 b0 81 73 5d a5 13 c7 34 f8 1b c1 89 5c 76 7c 29 88 16 9a cf 3c 96 2f 55 65 15 3f 22 f6 bc bc f7 01 d5 df 8c 7a 0a 93 00 b2 3b b4 7d 2c a0 f0 85 27 ba ae 65 de 87 1e d5 13 dc 6b 5e d3 58 2b 60 30 d7 9a 5f c3 78 20 db dd 5a 35 a4 03 b2 1a e1 68 c9 67 7d a4 28 5c fc 7f f4 41 fc 2a 1a 16 2f 00 5f 83 5a d4 d3 06 30 8d 98 31 cf 79 3c ea 06 a1 d7 5a 13 55 88 ad 45 80 3e a5 e3 37 8b ac b7 5e 57 96 ff f9 da a6 4c 6d b6 11 d2 c9 3f f9 04 1e c3 3b 2c ac 8f 5f 8c df b7 ae 81 97 3c 91 15 54 94 d3 8c f0 8c 01 35 c2 59 9d 08 c3 c3 92 b1 8e b2 86 56 e8 be a5 df e1 5f 48 15 0e b4 39 dc 69 3f 5f 82 7b Data Ascii: -#:g CAyhqm{>Z!b9EAs]4\v\|)</Ue?"z;},'ek^X+`0_x Z5hg}(\A*/_Z01y<ZUE>7^WLm?;,_<T5YV_H9i?_{
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 2b 0d dc 78 0b 83 fc 35 63 08 a8 a5 b1 7d a9 f8 6c 1c bf c1 c9 d3 75 14 80 fd 22 c8 fd 07 5d 5c 84 45 7f d2 76 eb 1c 24 3d 12 01 27 9f 45 cc f7 ff 51 77 69 05 bf d2 d6 e5 24 71 da b3 ed 43 37 24 03 e7 c0 54 9d a6 36 c3 cd ff ec a7 ff f8 ca b5 f0 61 95 5f 9e c7 b6 80 0e ea c5 7c 67 a9 c7 9d 5f 8e c6 51 79 84 54 45 cc e5 b4 77 e5 0c 7f f0 06 4b e4 0a fa b2 e4 87 55 07 9e f0 f3 c6 72 44 1d d1 d0 86 6d 9f 45 2d de 18 17 ce 76 db 2e db a8 6b aa 55 56 dd 76 cb c9 4a 77 5c 84 0c b0 69 c5 7a 61 71 62 48 74 04 15 45 c9 4f f0 8d 30 1e 72 6f 4e 02 a5 32 fa fb 01 5f dc 97 9c 0c 70 3a ca 8f dd e8 2c 86 cf d5 cd 44 a3 09 42 c9 35 54 12 71 59 e4 5b 1f 81 b3 64 3a 2a 1d cd 89 94 56 20 4e 91 c7 0e 24 9d 32 78 c2 3e b1 bd a1 a2 99 4b 4b 96 5f 42 73 72 ad 5b ee 14 41 90 0c Data Ascii: +x5c}lu"]\Ev$='EQwi$qC7$T6a_\|g_QyTEwKUrDmE-v.kUVvJw\izaqbHtEO0roN2_p:,DB5TqY[d:*V N$2x>KK_Bsr[A
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: f9 57 36 49 d0 7e 64 00 8b 84 0b e3 4a 83 31 e9 78 13 c5 1c 1b 38 f7 5b 42 c5 06 20 3f 0d ed b6 32 52 a7 4c 92 45 0b 09 db 21 6a 8f 1f 33 ae af 15 b4 9e ac b6 ca 19 16 d4 fd b3 be 99 4e 18 95 87 f8 13 a9 e4 14 38 b6 e3 bf fa e9 d4 c8 a3 04 c0 e3 b0 22 0d bd 7c 86 2c 69 b5 e4 fd 38 af 70 6f c5 48 f3 e2 4e 30 a9 61 bf c2 07 4c 0d f5 a3 d4 9c 7f 35 f9 99 ad 31 23 05 de 0f 4f 05 70 f7 ba aa a7 57 18 34 f2 b0 5f d9 1f 9a f8 25 06 70 1f 16 1b 73 6f 14 65 08 fd 79 dc e8 58 c3 1e 84 6c f1 9e c7 ca be 27 b1 9d ef c1 ae 12 dd e4 63 4d 7a 08 32 0e ea ec 65 48 c9 53 10 38 75 a2 86 7e 28 43 34 c3 2e 64 fd 17 6c 64 16 fb 22 ac bf 1c 8d e3 60 11 bf cb 44 6a f1 75 02 88 99 b4 50 1d 50 63 38 c6 31 5e 4f ca 3b ec 17 c6 8c a4 67 8f 1f c9 09 7d 0d e4 17 62 d1 fd 8d ed 19 12 Data Ascii: W6I~dJ1x8[B ?2RLE!j3N8"\|,i8poHN0aL51#OpW4_%psoeyXl'cMz2eHS8u~(C4.dld"`DjuPPc81^O;g}b
2024-04-25 12:54:15 UTC	1101	IN	Data Raw: 60 d7 8e b4 96 52 4d 0c 18 80 39 33 02 db 32 bd 25 0b 8e b9 d7 31 d0 f5 d6 16 fd 79 6f a3 11 b5 ed 5b b9 24 a1 ef 51 a5 3f f6 ab 8d e2 78 db fa 21 ec e1 3c 0d 00 26 a3 0f e8 ab 09 a6 19 d9 34 f1 8e ab aa 52 cd e6 e1 6e 89 e2 b2 66 16 89 ce 58 1c d7 43 c7 47 7f c3 16 ef 81 32 e4 be 93 e9 83 d2 0d 56 ed c9 f6 1d 4a 38 d4 c7 b1 7b 14 7e 96 c2 1e cd 7e 4d a9 68 c6 68 ae af 6b 47 bf 0a 66 44 69 32 49 34 93 aa e4 b9 f3 85 d9 0b 45 bc f8 cc 4b 18 87 cb 20 6a 29 4a 14 1f e3 1f 4c c7 b5 cb f0 0d c4 ef 51 e7 82 d8 07 65 c1 17 b6 6a 87 98 6e f7 74 c3 5a e4 b7 09 3d 03 89 3f 3f 39 b1 48 2d 10 c4 80 dc a2 ba b9 be c1 64 37 a3 a0 43 64 1d 7e 57 5d 37 a2 ce 66 a6 7c 10 1b 1e 3b 81 e4 e5 05 f0 ab 31 98 d0 bd 24 2a 39 79 ff 7b dc 2a 17 d3 0e 2f d7 c7 c0 31 f7 c2 8a a5 a6 Data Ascii: `RM932%1yo[$Q?x!<&4RnfXCG2VJ8{~~MhhkGfDi2I4EK j)JLQejntZ=??9H-d7Cd~W]7f\|;1$9y{/1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49788	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:15 UTC	1103	OUT	GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:15 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34202 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11075 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:15 UTC	720	IN	Data Raw: 52 49 46 46 92 85 00 00 57 45 42 50 56 50 38 4c 85 85 00 00 2f a5 c0 49 00 4d 40 8c 64 2b 6c 93 bb 8f 65 be 1e ee bf 60 90 26 25 44 f4 7f 02 ba bb e7 ac ee 9e 6f b7 9e 73 76 77 cf 39 ef 9e dd a7 3e f5 d6 a7 a9 76 b7 da b3 ed ee 7b f6 9c 0e 13 d5 24 e9 e3 9c dd 73 f6 fb b9 cd 7f e8 e6 65 c2 76 df b7 50 55 a8 17 24 c0 4d 32 54 80 2a e6 c3 92 73 12 88 63 0c 0f 05 79 ac 51 c3 2a d9 03 90 c4 37 52 1b 49 55 8d 9c 58 39 70 18 24 40 ad e0 8b 6f a2 7a 19 a8 cd aa f9 75 ff 23 72 dc ae 56 a1 48 c8 21 40 b7 de 43 4d 12 92 43 11 17 cb 3c fb 40 48 12 4c e2 41 e5 ef 8f e7 03 44 de 6f 55 71 59 58 4f 03 a9 c8 eb a5 ca 50 ed ee 59 6a eb 02 ae b1 12 48 f2 35 92 6c 73 9a f8 7a 11 54 47 40 73 ca ef 77 1d 46 f9 72 7d 3d 50 40 81 09 f1 73 52 17 7b f6 cf 8f 0d 78 22 89 47 a8 02 Data Ascii: RIFFWEBPVP8L/IM@d+le`&%Dosvw9>v{$sevPU$M2TscyQ7RIUX9p$@ozu#rVH!@CMC<@HLADoUqYXOPYjH5lszTG@swFr}=P@sR{x"G
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: de 0a 16 14 af f7 0b c5 e7 ea fd 98 01 47 e1 d3 7b 9f 3e 18 97 82 82 37 54 34 b7 82 b1 be 3b 04 02 83 1b 68 c3 ab 77 63 5e 8f c1 4d 01 40 c7 76 e2 c4 ea d8 51 3c dd 6d f3 76 e2 cd a9 a1 3a 17 4f 00 30 dc 4e c8 e3 6f de 1d fb 09 80 82 e6 74 84 d3 35 e0 21 0a 56 1f 8f 27 ff fe f3 e2 0c 67 61 c1 d2 00 50 01 50 fa 56 fa fe d6 f7 47 df 9d b9 de 58 20 ee 4e 42 07 ee d1 e6 11 3e 14 03 1f b0 03 76 34 9c b0 e1 c6 a7 27 79 da ef 91 9c bd 6b 00 d4 7d f7 7f 37 76 b9 c2 71 bc 08 ed c9 7d 17 a3 d2 0e 73 97 cb 09 f7 10 c0 d0 7b 34 90 f2 09 3d 00 a0 eb d6 ce 28 be f0 09 6d 68 68 c0 86 ed 04 db cc 87 16 b1 78 cd b8 d2 c6 70 19 c0 d2 87 16 cf 40 68 68 f1 bd 8d 61 1b 80 b3 2f df 05 d0 df 8d ca 15 48 4e b9 c9 36 31 a6 b2 4f ab 22 78 f8 b4 b6 4b 00 6c d7 e7 ee 07 7c d7 0c 9d Data Ascii: G{>7T4;hwc^M@vQ<mv:O0Not5!V'gaPPVGX NB>v4'yk}7vq}s{4=(mhhxp@hha/HN61O"xKl\|
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 03 e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 a6 74 a9 a6 33 2d 56 ae c1 d6 5d 29 8a a8 53 ce 94 4a 69 39 2d 4b 15 51 27 b6 31 84 5a 55 53 2a 6a ac d2 42 2a 39 d7 89 33 23 29 2d 33 05 ea da b9 ba 30 29 0e a6 b3 0d 48 d7 74 a6 85 96 24 57 2f 23 d9 b9 d2 19 95 81 a8 c8 a0 28 ae 34 ce 95 05 a2 b5 48 07 61 dc 92 44 87 66 57 8c 04 4e 65 d7 bb 42 c3 72 37 0b 4b c8 23 b5 85 a1 9c b0 47 58 11 96 89 90 64 e7 cc aa 91 ec a4 b8 62 86 25 65 cc c8 a1 24 a7 c7 a3 d1 c0 b8 92 3a 4a 92 73 da 59 08 67 b5 33 2a 16 cc 5a 04 76 aa b8 a2 77 76 08 27 7a 16 01 a9 1b ad 1a 10 64 95 4e 39 8a 24 f5 54 12 0a a9 2b 5a c0 88 4a cb a3 c2 29 b3 3c 23 84 e4 8a c6 52 74 14 a3 20 4c 18 85 a2 24 27 8d 72 b9 88 0e 20 8a 4e 55 09 42 a1 4c 50 25 0e 03 8e 62 14 85 08 47 85 d4 54 87 Data Ascii: XT\t3-V])SJi9-KQ'1ZUSjB93#)-30)Ht$W/#(4HaDfWNeBr7K#GXdb%e$:JsYg3*Zvwv'zdN9$T+ZJ)<#Rt L$'r NUBLP%bGT
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 4a 65 31 66 28 89 12 8a ff 72 aa 72 48 be e5 46 c8 85 8a 51 c1 62 09 69 29 9d e5 b2 bb ba 11 82 02 66 0a 75 c8 a4 5b 51 a1 04 a6 94 24 51 26 30 a6 a8 0d 4e 8a 24 ea 5c 5d 28 52 29 0d 6a 44 08 ae e9 94 54 0a 9a 64 4a 77 b9 cb a5 9a 3b 2a 5d 2a 95 22 29 25 35 50 d3 09 55 3a 55 0a 52 21 36 25 05 95 d2 91 25 22 36 43 a6 54 2a 95 32 52 12 1d d5 00 53 8a 2a 05 53 ca 54 48 72 51 23 34 9a a4 46 4e 2a a5 6a 33 43 2c 19 a3 a6 ac 58 4a ad 65 06 9c da 41 67 94 88 16 8c 98 b1 b1 58 8f 32 89 a9 35 d0 c4 94 d3 b0 31 d5 58 42 4d 94 44 19 a6 53 a6 b3 a8 e0 1c 81 3a 96 d2 cb 89 18 d5 51 31 12 a9 ec cc e9 98 88 52 6d 6c 8d 2a 75 28 8e d0 d4 f8 cc ee 50 4a 95 da 7d b6 21 35 6a 9f 69 64 aa 71 d0 12 ba 24 d5 38 da 28 04 89 74 28 75 92 d5 7d 44 a5 52 66 79 82 14 82 69 21 49 42 Data Ascii: Je1f(rrHFQbi)fu[Q$Q&0N$\](R)jDTdJw;]")%5PU:UR!6%%"6CT2RSSTHrQ#4FNj3C,XJeAgX251XBMDS:Q1Rmlu(PJ}!5jidq$8(t(u}DRfyi!IB
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 19 25 69 8d e9 71 c2 04 9d 58 23 60 3a 17 6d 6c b1 4d e5 84 4a 86 ca 2e 98 a4 29 a7 55 1b 00 7a b3 9d 52 a6 06 73 0a 86 6c 70 62 4e 64 b1 94 ab 29 46 b3 54 c7 59 2d 75 61 56 9d 0d a5 8e 7d 95 af 94 5e 96 b4 b5 6a 67 32 89 bc 7d 4a 99 ce 82 37 cc 01 37 f9 ca ec 24 53 33 ca 47 aa 46 d2 f5 94 6b 10 3a a7 b0 63 21 16 d1 76 a1 44 95 9c 72 46 80 3a 65 e3 62 d9 7a aa 9d 65 85 80 8e ab 1a 09 dc 4c d1 82 20 9f b5 c7 92 54 ac 56 d5 41 4e 5d ef 8a 3d 90 96 2a 1e c1 10 60 ab 72 26 91 02 fa 4e 29 41 f0 55 d5 41 d5 76 ba 95 c7 94 54 44 7d ca ea a8 53 6d 2d 76 d0 d4 91 f9 46 49 a9 c8 b7 4a e7 4a a9 1e aa 36 2a 5f 00 11 00 51 d8 d9 81 d1 b1 ab 06 48 65 b9 0d 06 ac 20 0a 45 96 32 4b ba 64 f1 8c 99 b8 28 2a 11 26 a8 14 56 ed 10 72 44 a1 b8 b3 28 b5 51 81 49 38 17 04 a1 60 Data Ascii: %iqX#`:mlMJ.)UzRslpbNd)FTY-uaV}^jg2}J77$S3GFk:c!vDrF:ebzeL TVAN]=`r&N)AUAvTD}Sm-vFIJJ6_QHe E2Kd(*&VrD(QI8`
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: c7 0b 1b 36 5e 18 5d 00 54 85 2a 7a 0b 14 16 50 a9 b0 80 70 1d 83 af 6d f8 90 84 29 5c 00 9f fd dc 8d bf 3f 72 14 b0 c8 78 8b 44 c5 87 cc 24 02 03 50 65 92 b8 d8 88 04 01 c0 b9 8c 9b b3 8c 00 11 76 e2 08 83 2a 28 23 0a af be 67 3d d2 b7 b7 2e 01 6f 88 7a 8a 62 a1 ec 01 06 61 9e aa 9c 0e e9 7a a6 da 36 d5 10 b9 ed 2a 5a 6c b0 e7 b2 c7 9c dc c9 d1 76 51 11 d2 d9 ae d2 3d 57 6e 8f 16 a7 48 5b 5c b5 0f 95 b6 92 d3 64 c9 39 60 46 3a f7 4b 6f fb 76 b4 b5 8c 48 20 c5 ca 16 53 8e 06 31 a5 66 bf 72 f3 16 06 b5 68 1a 5d 34 a8 05 ea 03 ab 34 6c 63 0d 5b 37 12 4c ed 6a f7 f9 21 23 62 03 8e 6a 41 60 5c 14 11 2e b4 85 81 49 0a 39 e4 22 a6 30 a5 ae a8 d5 bd 47 e6 d6 5d c9 84 49 2c 43 34 62 04 98 c4 ca b8 8b 3d 18 62 0a c5 a6 dd 92 8e 63 54 ee 9a f4 05 e7 be 11 e4 ec ee Data Ascii: 6^]TzPpm)\?rxD$Pev(#g=.ozbaz6*ZlvQ=WnH[\d9`F:KovH S1frh]44lc[7Lj!#bjA`\.I9"0G]I,C4b=bcT
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 15 67 e4 1d ef 78 f5 b6 cb ae 4b c7 f6 12 09 31 5b ef d9 91 6f 3e b0 66 8a 63 5b a8 c7 5b c9 94 bb 2d b2 98 9a 8b 61 8d a7 28 f5 53 62 73 31 9e 9b d9 6a 63 bc ab 99 57 21 25 2a e7 00 61 a4 eb 14 d5 a5 ce 76 30 53 8a 4e a8 34 8b a9 18 c9 b8 04 83 18 1a e2 8f 3e f2 8f 82 8a c1 c4 bb 9e 68 46 d5 88 c7 af 7f f5 ed 1f 3f f9 bd d8 bc 6b d9 8f 3e fb a1 97 bb e7 ce aa d3 e6 7d cf 3b 17 02 20 25 00 b0 b2 20 01 90 b2 26 ed 13 40 4d 5c bf 5c 75 86 3e 62 25 d5 71 d8 b1 e3 39 64 5d e2 72 38 4f 4e 4a 70 de 73 a0 57 eb 43 f7 3f 7b 76 74 e7 83 b7 cf 3d 8f 87 7f f2 d5 81 ed 9d 3f 65 79 0c ca 93 aa af 10 4a dd f7 7c ea aa 2a 8a 02 d5 51 50 34 1d 9b ab 74 95 a6 3a 78 f5 c5 68 e2 c3 b8 0a 50 40 d1 e0 eb 00 f4 45 cf e1 eb 8c 53 5a af df a5 10 90 20 83 4f e2 fa b9 0d 15 08 a3 Data Ascii: gxK1[o>fc[[-a(Sbs1jcW!%av0SN4>hF?k>}; % &@M\\u>b%q9d]r8ONJpsWC?{vt=?eyJ\|QP4t:xhP@ESZ O
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: dc 3c 89 1b 99 25 75 83 84 93 49 56 8a a9 20 45 08 5c 56 88 a3 5e 41 92 ac cf 4c ba 38 93 a0 26 2e ad 86 a6 4a 6c 57 cf db fd f1 de eb ef ff e6 a3 25 b3 ef 9f 3f f3 48 55 63 63 41 c1 05 11 f1 94 d4 86 b5 5c 11 9a 00 74 a7 65 c8 e7 45 a1 07 73 59 c3 56 89 db 88 b3 84 05 30 a6 9a 87 94 e3 04 28 e8 68 3a b6 4a 82 1c b0 3c b1 50 a3 a9 34 11 32 9e 11 d7 ea 39 de fc 18 ff f5 83 c7 5c e4 85 17 97 a5 ee 21 fb 38 67 7e 48 37 d1 46 8b 09 83 aa cd ba ab 78 4a e7 88 a8 86 ee 2a 45 52 55 bd b2 43 6e 15 c8 b2 55 a5 c4 d4 14 cf ba 5d 58 65 ed e7 ee c6 2d 45 59 2f 7b 96 25 57 6b cd b3 2e 6d ac d0 af 17 db 37 99 14 8a 1b b5 44 97 94 55 19 ac bb bb c0 28 40 59 57 c9 6e bb 10 c0 87 d6 99 98 10 4d 8c 69 20 00 d6 d0 11 08 d4 e4 32 c8 31 86 01 e4 72 83 04 08 92 aa 64 ca 06 b9 Data Ascii: <%uIV E\V^AL8&.JlW%?HUccA\teEsYV0(h:J<P429\!8g~H7FxJ*ERUCnU]Xe-EY/{%Wk.m7DU(@YWnMi 21rd
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 6e fe f8 55 5d ba 78 65 d9 e2 5a de 7b 51 dd ad 1b 8b 8a 52 cf ae f8 2a 74 f6 b6 f2 ee a8 d6 ec aa fd 85 ae 5d 52 f2 51 b5 6f a9 52 ed 2a bf f1 76 2c 82 77 67 0e 1a 9d 8f 96 76 87 5a 51 dd 7d 84 b5 ec a8 ad d2 31 56 6e cf 32 8f b1 0d 23 5f 5f 57 69 62 c9 17 b2 33 8c fd 02 a7 3b 2d f9 c6 f9 d2 d6 74 c8 5b e4 64 bc e4 03 ed 61 32 f5 45 79 d3 7e 27 4d ea 0d 7c 98 6b ea 89 6f 9f bb 69 a7 1d 68 bf 4c 1d 6b c6 3e 1d f5 d5 30 3a e5 bc 3b a5 d5 a6 f6 2b 9d d3 1d 4b f7 91 f3 65 ea 30 9d f3 63 a4 25 94 37 ce 23 55 ea dd e7 bc 19 3b e9 a5 eb a7 73 3e 57 db e4 ad aa 5f eb 4c ac 75 db 32 aa a5 9c 3d 8b b0 38 ad 77 b7 8d 31 a9 5e af bd 9d 92 29 a7 7c 75 f7 01 2b 79 d6 6b 36 46 1d eb ae 6f ad a5 32 a9 59 77 f5 24 0d 6b d1 a8 0b b3 ea b6 43 54 38 5d cf ba bc 46 a5 ab 9e Data Ascii: nU]xeZ{QRt]RQoRv,wgvZQ}1Vn2#__Wib3;-t[da2Ey~'M\|koihLk>0:;+Ke0c%7#U;s>W_Lu2=8w1^)\|u+yk6Fo2Yw$kCT8]F
2024-04-25 12:54:15 UTC	1255	IN	Data Raw: 82 b9 a9 14 85 1e a0 6a 54 a2 02 df 14 b5 34 9a 4f 0a 1b 53 52 89 2f 75 24 51 74 da 14 05 c3 06 79 ba 11 4a 45 cb 4d 21 8e 4f 4a 27 a6 28 a8 8e 92 9e 2c cd 49 d3 51 01 4d b5 42 e5 42 ae 6a 2e 17 e5 2c 1b 5c c4 21 74 eb 22 55 10 ab 6b 0c 60 72 4e 4f f5 7e 06 86 48 5f 3f 53 b5 4f f9 72 ef ad ab 1e 49 dd 7a 16 9f 98 93 90 db c7 5d b6 8d d5 ed ab 7b fb c8 74 ce 5c f9 08 6b 69 4b fb 6e 57 3b 25 26 7b aa f7 c1 35 19 57 bd 37 95 31 6d f1 1e 77 d5 37 ca d8 ac ca bb 54 b3 36 8b 77 e9 0c 3b e6 dd 68 a3 49 ea 5b cb be d2 09 a7 dc de 51 eb 69 8f f6 d3 7c 1d e5 a4 9e 86 fd 74 30 74 68 bf 0d 9d e4 a6 f3 9e d2 d6 58 72 a8 7c 80 c3 a0 7c aa 72 94 0c 5f 16 1f a9 26 5b 8b 0f b6 21 a8 fb e8 f2 b6 94 70 54 de 7b ac d1 b8 c5 4f 57 d5 5b 2c e7 ab e5 fd 65 d4 54 af c5 5f 55 f5 Data Ascii: jT4OSR/u$QtyJEM!OJ'(,IQMBBj.,\!t"Uk`rNO~H_?SOrIz]{t\kiKnW;%&{5W71mw7T6w;hI[Qi\|t0thXr\|\|r_&[!pT{OW[,eT_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49800	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1106	OUT	GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9646 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:41 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11075 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 a6 25 00 00 57 45 42 50 56 50 38 20 9a 25 00 00 f0 8d 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 12 7a 7d 58 28 04 04 b2 b7 7c 2f dd 83 78 17 1b b8 97 db 96 8b d2 cb a2 fe c1 e6 ef 45 fe 8f af 1d 0e f9 27 f2 0f fc 8f b8 ef 78 df d8 3d 80 7e 43 ff 81 ee 01 fa 6b fe 77 f9 3f f8 0f 68 cf d0 0f 72 3f af 3f a3 be e0 3f 95 ff 6e fd 8c f6 22 ff 63 fd cb dc 6f eb 47 f5 ef e4 bf e0 3e 40 3f 94 ff 3d f4 18 f6 00 fe 55 fd 67 d8 03 f8 8f f2 ef bf ff 94 2f f0 5f b1 ff 02 ff b0 df b2 3f 00 9f ce 3f bd 7f f7 ff 67 ee 01 e8 01 d4 3f d9 3e c3 3f b1 7e 44 7f 6b ff 67 eb 9f e2 ff 23 fd 27 f1 ab fb 8f fd df f2 9f 21 ff d7 78 4e 89 07 c5 7e be fd 4b f1 ff fb 17 fe af f6 bf 79 ff 92 ff 7b f8 29 e6 ef c2 ef e9 ff 28 7e 00 bf 1f fe 4b fd 4b f2 63 fb bf ed 2f 1b Data Ascii: RIFF%WEBPVP8 %*((>ADz}X(\|/xE'x=~Ckw?hr???n"coG>@?=Ug/_??g?>?~Dkg#'!xN~Ky{)(~KKc/
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: c7 af 5f de 8d 8e 61 28 c2 f8 6f 08 af 97 2a 86 83 d2 04 91 49 db 38 1f 55 6c 9a 88 0a c5 ed 2c c6 4a 33 4f 4b 65 99 d0 68 15 20 f2 02 eb 16 74 a5 db 09 8f a4 19 b2 d0 fd f4 14 67 b6 fb d7 ea 1b 92 90 b1 4d c0 3a 91 4a b0 39 f6 f2 be 67 59 80 7a bf 30 63 2c 70 bb 23 70 e8 83 87 a2 a9 84 df 39 e5 1a a6 46 5c f7 e2 eb 45 a3 e8 13 a8 88 85 38 e0 c7 90 1e a5 38 7f b4 85 4e 6a 90 d6 ea ce 52 20 c3 a1 f8 a5 b2 e9 9e 59 dd 65 82 e5 49 d3 4f bd 8c 7b 95 42 c7 5d 24 ee 41 f4 f1 67 4d f3 75 e7 70 9d 12 22 bf aa 93 4e 88 b8 7b 4f 55 25 48 3d aa ef 99 84 7d d6 a1 de 29 97 8c 09 a9 3b e2 85 5e 3e 9b 64 88 86 6c 82 70 57 da 9b 75 c4 0d 5b a3 9d 94 13 76 5a 90 c0 92 59 2e ed a9 12 64 1d 24 8f 6d f4 fe 07 44 31 77 8b f8 67 d9 88 1d dd 0b a5 97 e2 0c 96 e4 9a 3e 31 7e 1a Data Ascii: _a(o*I8Ul,J3OKeh tgM:J9gYz0c,p#p9F\E88NjR YeIO{B]$AgMup"N{OU%H=});^>dlpWu[vZY.d$mD1wg>1~
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f4 29 6c 20 5e 0c 07 95 9c 33 a3 9a 8e a5 4d 5f 4d 05 8e ee 8c 2a 1d ef 19 51 14 22 4c fb dc cc f6 a2 29 2b 8b 23 cb a2 bc b3 f9 50 3d 1a 02 6e dc 3f 94 7a a3 2e 0e 80 2e 12 0c 18 ef a2 c2 fa 95 0e 7b c9 43 f3 3e d3 a6 97 24 8e 7b 8b 18 d5 55 1e 39 88 89 e1 e3 3b 10 f8 66 13 4f 9a e0 4a 58 1f d6 11 07 5d 02 b0 5b 44 d8 9b f7 8d de c1 f4 62 cf de 66 4e 67 b4 4d 23 db 01 f4 eb 96 ac e8 1d 91 70 72 d2 e1 99 06 50 87 ed 1f c9 61 f9 ff 66 d6 0c 6d ba c3 cb 5e 39 1a 57 05 5e bf 02 c7 03 c5 b0 eb 7f 20 29 b0 1f ea 05 cc 5b fb db 73 d8 d5 d2 9d 9c 50 30 03 9d 27 eb b3 56 1a 18 1e 40 ff 66 df f4 86 b2 70 4c a3 a5 67 9d 5d 04 f7 55 f5 f8 b3 14 46 a7 ad ce 91 2e 92 de da c1 39 e6 2f e8 98 ab 75 27 08 2b 84 d4 6c a8 8a 82 6e 49 4a a8 59 0c 6f e0 5f 9e 6e 4b 21 59 37 Data Ascii: )l ^3M_M*Q"L)+#P=n?z..{C>${U9;fOJX][DbfNgM#prPafm^9W^ )[sP0'V@fpLg]UF.9/u'+lnIJYo_nK!Y7
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 7b 78 cd 57 64 bc 74 80 fa 7d 8b 10 dc f4 15 0c 7f a3 72 5c ab ac 74 26 0c 25 66 e4 67 24 f6 3d 56 52 7d 43 6d fe ca 7b 3e 99 77 62 e2 ed 98 b1 f0 cc 41 2f f8 7e 57 4c 10 e7 50 b9 fa b3 0d 65 05 a9 41 2d ac 81 d8 18 2b 5f 2b 42 52 3b 86 d1 90 6e 89 b6 1f df 2a f2 4a 5d c6 6f dc 23 5b 61 bc 9d ee 26 00 83 5e c9 8e a5 db 98 06 8b fd 98 80 3f 59 22 4d 6d 45 80 eb 67 01 43 da a6 f0 4f 18 7c b5 92 29 8b 5e 06 8b 8b 40 de 6f 7e b9 53 35 5f 3b 3d 53 97 3f 75 3e e8 ab f6 60 ef af 80 41 c3 1f b4 3c d8 e9 e2 d3 23 6a f4 f4 8f bb ab 5b 9b 56 1e b3 98 f9 34 1f e3 ca 58 76 7a 4b 32 e3 28 ab c7 7c 18 4f 88 f5 77 32 c5 24 f1 6e ea bc 96 a7 37 33 55 11 9c 5a ba 80 58 64 23 bd 62 1c 89 5b 74 0c 79 b5 12 2c f8 06 03 4a b7 7c d0 99 04 24 b5 bd 1b ea e8 46 ed 52 34 3f 5c bf Data Ascii: {xWdt}r\t&%fg$=VR}Cm{>wbA/~WLPeA-+_+BR;n*J]o#[a&^?Y"MmEgCO\|)^@o~S5_;=S?u>`A<#j[V4XvzK2(\|Ow2$n73UZXd#b[ty,J\|$FR4?\
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: ee dc 95 85 3a c0 36 2a d4 e3 68 13 ca 23 be 2e fe c6 cd d3 b9 8a d2 24 93 8b 2c c1 1e 9f 03 39 e0 17 ab af eb 06 59 97 aa 31 df 5a 91 d9 d1 eb 31 23 6c c7 d2 e9 ac 48 8f 56 23 0e 61 d2 15 55 e0 88 2b 87 53 9e a4 58 fc 4e 29 06 c3 ad 28 55 95 d6 f9 37 26 0f 2c 9b ae 51 b7 ce 34 5c d8 e2 42 17 2a 11 a5 98 89 bb 7f 30 b5 79 8f eb c2 02 03 a7 4d 2d 6e ee 95 32 d1 e3 a1 6f 62 59 f3 08 d6 70 a3 fa 80 0f 86 72 85 1d 45 10 03 9b 2f 0b 20 66 99 81 ad 21 73 6e dd 4b 43 f5 06 15 7e 70 93 8b cd 28 7e 95 15 2e 66 30 24 4a be 28 7a 6a 7e 66 d7 3a 51 4a 2d 64 a4 22 ef 23 b9 24 4b a7 85 8e 21 1c 45 d6 46 ee 31 35 d9 f4 27 9f fd 53 3b 52 60 cf 17 44 c9 1c e2 11 93 51 12 08 84 6d 26 c5 76 bb 3b 67 17 21 d0 b4 16 d2 da 92 00 d8 e2 60 b5 e6 c9 f6 98 77 50 b9 ed 91 0f 06 51 Data Ascii: :6h#.$,9Y1Z1#lHV#aU+SXN)(U7&,Q4\B0yM-n2obYprE/ f!snKC~p(~.f0$J(zj~f:QJ-d"#$K!EF15'S;R`DQm&v;g!`wPQ
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: b8 d4 f0 4f c3 cd d2 6b 9c d3 62 2a 01 7d de 57 df 2a eb a2 1f 4b e1 f7 24 2a aa 3b 9c 01 0a d4 70 a9 94 b3 08 bb f2 41 a3 5d e8 7d 6d 5a d5 e2 7d 88 2c 78 4f c5 b9 7e 09 9e 93 c5 8b 1d de c1 43 06 bf 6d c9 4e 87 4f f9 aa e8 01 5d 88 e7 75 db b8 af cf 59 3c 6c a9 94 f7 ee 70 d2 b9 3f 94 79 51 89 76 f5 77 6d d1 8e 35 57 c3 c6 47 22 b6 db 3c 6f 50 65 43 4f 6f bd 38 76 7e 7c 06 9f f4 50 df 1c 16 7f 48 4f 0a 2d 18 68 42 c9 d2 b3 fb 11 09 f5 ea 5e 4e f4 42 9d cc 2a 8d c0 18 af 3f 47 99 f9 ff 37 7d f8 f2 2f 17 5c c7 10 8a d0 b4 c1 43 4b ed fc 35 b3 d7 65 37 de 6c da c7 9e 34 21 c5 ab 95 f9 c8 aa 7d 2e c3 f8 83 e8 09 fe d2 86 74 e4 7c a8 d6 82 9e bb e2 21 9a 61 6b c8 26 06 67 6f 60 9a 03 1b 4b 20 1b a9 eb 30 6f 6b a5 98 a7 db 5b e4 a6 04 85 1f 47 bb 97 90 b5 7c Data Ascii: Okb}WK$;pA]}mZ},xO~CmNO]uY<lp?yQvwm5WG"<oPeCOo8v~\|PHO-hB^NB?G7}/\CK5e7l4!}.t\|!ak&go`K 0ok[G\|
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f9 14 df 0a d2 77 bf 13 4f 01 69 0b 2d 66 69 bc 7a 6f c3 ba f9 a5 73 a5 f8 c8 97 82 e8 01 c1 09 0a 4b 69 32 62 c5 c3 4c 52 03 75 97 a8 e4 40 a5 59 f0 2f 2e f1 cb 38 12 aa 1e 82 4c be c9 b3 4d 37 fb 60 bc 06 f7 1e 79 87 a1 29 6c 29 bf c3 57 01 58 fc 00 0d 6c c6 35 80 00 3a 1b 3a a8 49 38 71 9e 68 a3 cc 4f 9b d5 d1 e2 39 b7 03 6f 92 78 62 09 04 eb 7a 5a 55 b9 97 2c 1b d5 a0 f3 7e 20 16 ff 2d 4f 35 e7 b3 f0 0d 3c 5f 25 a8 81 69 87 fd d5 54 ed 25 58 ff ed 36 3f cb ea d3 e9 4e 10 f9 83 f3 15 18 07 27 e9 bb ed 0c 83 9c 82 0a cc cf d5 f3 5d 60 53 86 ae e5 76 73 8f 1a 4a 0e 59 a6 d0 cc 20 65 74 fc bb 0d e7 f5 0c 99 45 de 43 5a 96 e3 b5 6a 2e 84 fd ae 29 7a df ac a2 44 c4 ac 62 08 1c cf 0f 8a 5d e6 12 a7 20 9b bf 4f f7 25 68 19 f8 64 6c b3 22 65 bc da 1c 62 36 19 Data Ascii: wOi-fizosKi2bLRu@Y/.8LM7`y)l)WXl5::I8qhO9oxbzZU,~ -O5<_%iT%X6?N']`SvsJY etECZj.)zDb] O%hdl"eb6
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 26 f9 76 4c d3 c2 d7 11 a1 ca 8e 00 82 32 14 c4 b4 df 25 34 53 34 a5 8b 05 1b c8 dd 9b 6b 26 d4 09 e6 3c f3 96 5f 89 20 40 c0 c9 80 2a 40 fd d2 fb 3e 0c 68 06 f8 c0 a9 cf 84 ff 70 53 0c 47 8a 03 4e a7 68 c0 e3 69 fd 84 9f ff b9 3d 70 0f 74 ef 7e d0 ae 1f cf 21 94 c9 c0 3b 62 0f f8 30 15 78 87 24 39 7a 16 3f 11 dd bd c4 12 1e 2e a0 82 27 46 19 8d 66 e5 11 2a 69 64 00 36 33 5b e3 09 08 df 8d 4a ba 0f 83 03 05 62 10 aa 14 a6 4c e8 d0 a0 4a 37 ba 07 03 53 02 d4 5e 46 0f 6b bd e3 fd f2 a7 4c ac 50 40 55 61 b8 0d 42 57 0c 38 22 c1 f3 18 4b 7f 9e df a5 6d 11 60 32 db 00 67 b3 ae 35 67 be 35 79 64 22 ba c0 02 c1 91 c9 c3 bd 3b f2 d5 3f 38 c9 5c 2d 89 c4 cf c9 27 f5 8d 69 fb e6 a1 37 77 ab 96 c7 58 ac f4 de 06 8d 14 e8 83 11 ef 9a 25 b0 66 5f 20 bf 03 c9 80 cf 5e Data Ascii: &vL2%4S4k&<_ @@>hpSGNhi=pt~!;b0x$9z?.'Ffid63[JbLJ7S^FkLP@UaBW8"Km`2g5g5yd";?8\-'i7wX%f_ ^
2024-04-25 12:54:16 UTC	140	IN	Data Raw: 7a 6a 36 4a 38 1e 85 7a 1f 1c 85 e4 8d a7 9f 70 0c d3 3e 10 b4 af 64 fc 6f a4 fd a8 66 e9 10 41 ab 87 d1 68 38 ad dc f8 f9 51 85 f1 39 ed be 34 f9 9d 3c cc 54 79 13 09 d6 e3 3a 14 40 1d eb 4d 4e d5 97 8b 85 13 e6 2d 51 8f 3f ee f9 13 48 06 96 ec c0 36 f6 3b 5c 4f a3 f5 c2 1b a1 14 0b 2c 01 5e 6c ff 91 b5 9d 95 61 4b c9 84 5a 66 9a f0 08 b4 e2 7e 44 00 ea 24 e9 4e 0e 7e b2 e1 96 19 00 95 b0 36 fa 3a c0 62 e6 66 00 00 Data Ascii: zj6J8zp>dofAh8Q94<Ty:@MN-Q?H6;\O,^laKZf~D$N~6:bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49801	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1105	OUT	GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10312 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:39:17 GMT Expires: Fri, 26 Apr 2024 11:39:17 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4499 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 40 28 00 00 57 45 42 50 56 50 38 20 34 28 00 00 10 95 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 11 aa 9d d4 28 04 04 b4 b7 70 b6 e0 8f 7c 30 c0 de 07 cc 97 e2 bf 00 3e 59 67 80 e7 71 fe bd fb 19 c0 81 ea 01 fb 1d ec 01 fa dd e9 a3 ec 7d fb 81 e8 97 ff ff 59 0b ce 3f d5 3b 5a fe d3 f8 e1 e7 6f e2 bf 1c fd 3b f1 93 fb bf ff 1f f3 bf 0b 1f be f8 44 ea ff b3 3f 72 7f 8a 7d 59 fa a7 f7 2f d8 1f ed ff b9 5f 7b 3f 9c ff 0b e1 6f c7 ff e3 7d 40 bf 1d fe 3d fd 33 fb 07 ec 8f f6 ff da 0e 39 9d 5b cc 17 d4 7f 98 ff 73 fe f1 fe 2f fc e7 f6 ef dd 7f 65 5f da 3f 2f bf b7 7c 21 f5 df fa f7 e5 3f f7 7f b0 0f e3 1f cc 3f b4 ff 71 fd 95 fe fd ff e7 ea ff f3 9f e9 3c 74 7e d9 fe 9b fc c7 f9 2f 80 2f e4 7f d2 7f c8 ff 65 ff 4f ff a3 fd 77 ff ff b6 8f e5 7f Data Ascii: RIFF@(WEBPVP8 4(*((>AD(p\|0>Ygq}Y?;Zo;D?r}Y/_{?o}@=39[s/e_?/\|!??q<t~//eOw
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 8d 54 66 c8 0d d6 2d 5f 30 52 22 5b db a6 d4 92 85 46 ef 0e 48 b0 53 43 b6 f8 a6 1a 39 54 82 68 a3 be 17 d5 3f 90 85 77 15 50 0e 0f fa ac f7 07 ac 0c 1f 30 04 d2 da ae 25 6f f6 f3 11 ad d9 ae f5 37 06 2d 63 7f a9 4b 26 34 08 0a fc 52 d2 79 42 16 3c 78 f0 e8 d8 6f c7 f1 d2 de e9 c4 94 70 b7 3e 16 36 20 08 f0 a3 d9 8d cb b0 62 79 5b 36 23 b2 3a 66 df a4 16 bc 23 a9 d6 9c 8e bc c7 09 fa a5 7b cd f3 e3 29 1f 11 85 d4 b6 dc fb 10 61 5b b1 13 b7 9f 09 9c 31 93 a2 d4 7a a8 cf 26 dc 8d 24 31 0d f0 b1 c2 90 18 9f 5b 06 53 f8 02 b1 eb 03 8d e2 9c 76 8d a2 6a f7 1c 8d ff 5b 3a ae 39 6e 33 91 b7 08 1e 13 c2 29 69 69 22 96 4e 0e cb 13 2b 41 c5 fc cc d0 c6 aa cb 7f 47 28 07 ef f4 0f 8f 6e 4c 5a b1 2d d5 ea df 55 58 97 40 c9 61 b5 99 7e 09 f6 c3 23 9e e0 d4 29 b6 11 8a Data Ascii: Tf-_0R"[FHSC9Th?wP0%o7-cK&4RyB<xop>6 by[6#:f#{)a[1z&$1[Svj[:9n3)ii"N+AG(nLZ-UX@a~#)
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a3 cc 72 ca a4 f3 ec 7f 9b 1b 7e eb 75 28 34 a9 d9 fd 64 bb 7f ac ad 2c d4 8e 79 27 9b 30 c5 83 31 fe 57 55 44 a3 ef 4e 7a dc 31 c3 fa 2c 74 d9 33 d8 b7 a6 87 c4 92 4e 0d c8 a2 34 ab 58 45 77 f4 9b 44 ed fc 86 65 79 56 ce 21 a8 33 c7 79 64 83 b8 91 f7 af 62 e0 f1 ec e9 a4 9b 4d 55 79 4b 01 0d da 56 7a 19 a1 33 99 a6 e4 d3 05 a1 09 4d b6 8d f8 a5 96 41 f3 70 cc 8e c4 ed 90 37 7e 13 a6 86 5f 6b a8 e5 4b be d1 c1 13 ea b5 6f 36 3a 4d ab de 80 4f c0 ef c0 ff 31 1b a9 d9 7b d1 d8 9d 79 97 68 3c 43 42 56 98 f5 1a 8a 44 e6 37 28 af 56 5d bf 2a bc ba dd 00 1d b2 6b b1 0d 31 b3 76 13 e8 cd b3 3c 1b 7f c2 5d 51 23 8d 03 8b c5 32 25 5b fa d9 0d 99 e9 27 bb c7 ec d6 18 53 19 0e 0e 5f 0d ae 23 b0 02 d9 81 98 8f 89 20 4e b2 36 eb 80 c4 b6 a2 f0 00 fc 7f 66 72 1b 67 11 Data Ascii: r~u(4d,y'01WUDNz1,t3N4XEwDeyV!3ydbMUyKVz3MAp7~_kKo6:MO1{yh<CBVD7(V]*k1v<]Q#2%['S_# N6frg
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 83 88 af bf 35 6f f9 37 cb 92 1c a8 ad 4f e1 a0 e0 b2 7f cf da fd f0 6a ed 57 97 a9 d3 88 42 d5 d1 7b a5 25 56 e8 13 b3 01 74 c1 54 47 20 e1 51 68 b9 98 c4 be da be a2 03 ef b2 b3 17 5e ab 78 12 5c b9 19 9d 78 57 e3 19 51 29 d6 60 25 24 fe 7f b0 2f 08 49 a2 6e 90 bd 8a a2 0e b5 41 a7 71 1d ef e7 c3 45 e7 e4 63 d2 3e 7a 5d 4d 3a 39 3e 90 dd 4c fa 63 37 97 a0 ad 34 48 96 7b ec 49 15 cb 73 c7 54 87 7b 49 03 84 8a ec 01 c3 f4 a6 6a 01 69 0a 0c ca cc 82 73 ef d8 58 da f0 87 73 41 33 58 3b 8c 3b 5d bd dd 95 75 41 56 64 9b 57 0a 00 c0 55 1e be f0 77 ca a0 4d 50 03 0f 06 bd d9 fe e9 c6 d9 d9 0b 68 e6 d9 9d 4c 0c eb 87 9a 83 f6 77 d7 df 21 8a 6f 5f 34 ff cb a5 91 08 66 61 d1 4f 76 e6 41 91 1d 2e 1f 06 8f 08 f6 9b ff 3d 83 ad 5a 3c a8 b9 21 ad e2 a2 da ce f1 9c ad Data Ascii: 5o7OjWB{%VtTG Qh^x\xWQ)`%$/InAqEc>z]M:9>Lc74H{IsT{IjisXsA3X;;]uAVdWUwMPhLw!o_4faOvA.=Z<!
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: bf 2b 35 f9 2f 51 43 2a 11 9c ab 5a d0 70 45 37 12 01 5d 4f 71 aa c8 b5 77 33 1e 9d 22 23 ad 02 15 de 1c 59 71 76 39 58 fd 66 c3 0c ec 11 ea 2a 76 e8 dc 12 eb b2 56 06 9b 90 b7 ca d3 67 ee 1f aa a6 a6 cf f4 46 89 9a 86 dd 70 10 0c ff 72 6c b2 72 31 bb 1d 44 2c 27 6c 84 7e 76 cd 8a 9f 3c d7 af ad 61 87 57 e0 ed 54 f9 38 91 4f 00 c1 ee 51 10 da 08 f6 a0 ed cc d1 e6 e8 e2 fd 0a 90 7e 35 3a 7c 0e f1 e2 38 1d 5e dd a6 0f 02 66 fe b8 bd a4 ae 87 ea b6 af e1 ad 66 98 f7 0a 1a e6 99 72 93 09 dc 8a e9 50 80 77 31 4d 9b 89 13 d8 16 ad 65 cf 53 e6 09 b4 38 ec 99 9d 4d c7 a2 4f 60 34 25 15 dc 59 a7 3c b7 b3 db c8 bd 39 39 f1 fe f7 c3 c7 f3 b0 75 0f f1 b9 5e c6 a5 3e d0 dd b8 17 4e e8 ea 8b 3e 9c a9 da 7e 2f f7 ea bd c1 50 22 08 c2 7f 14 a4 61 75 13 fa 58 b6 c2 12 8d Data Ascii: +5/QCZpE7]Oqw3"#Yqv9XfvVgFprlr1D,'l~v<aWT8OQ~5:\|8^ffrPw1MeS8MO`4%Y<99u^>N>~/P"auX
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a9 c9 de f0 bd 0d 1a 4f 56 c7 68 a3 ec ed d7 78 d4 1e 8a 6f 8d 62 8c 6a ec 79 14 1c 1b a5 26 25 87 57 38 b0 4c 00 dc 8d 22 e8 89 94 84 56 5b 5f 36 79 28 12 b5 85 3a 0a f9 8b 9a f4 99 0c 21 9a 21 40 ed 93 5e 71 87 a6 21 6c 57 4a e0 1e 04 42 73 04 96 9d 2c 67 f7 67 e0 67 ad ff 8b 05 ca 87 f5 dc 0b 36 63 2f 9d 24 01 21 e5 b8 85 14 1e 8c bf dc 4f 71 f1 5e c3 c5 91 10 c5 6b c3 11 5c 01 a7 0c 84 27 db 55 95 e5 63 84 96 c5 bf 4c 6a f5 d9 83 4f ff 92 a4 d2 25 99 4d fe 74 d9 cf 20 c5 53 83 ee 60 ef 0a 7d 57 60 0b db 2a 1a 5f 84 ca a6 18 11 7e 98 32 5e 3e c1 ab 39 c0 81 17 a8 4a 7a 04 04 4c 13 c7 9c 53 03 b0 40 7d c3 cd 24 0b cb 04 fb f1 75 98 6a e0 24 1a 9b 3d 2e 00 0b 79 28 c3 73 63 80 4b 26 70 19 9e 29 43 0b 26 1f 90 54 72 c0 e0 6b 04 d7 e4 43 56 10 b5 e8 cf 3f Data Ascii: OVhxobjy&%W8L"V[_6y(:!!@^q!lWJBs,ggg6c/$!Oq^k\'UcLjO%Mt S`}W`*_~2^>9JzLS@}$uj$=.y(scK&p)C&TrkCV?
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 17 cc 7b 1f cd 47 58 9f 81 ea 81 ee 6e 7d 21 4d 77 ae 42 b2 98 5e d0 1b 4e 41 6d 4a ba 49 51 6d b9 6c e1 62 22 32 2a 64 d4 ca 53 c0 b9 59 c2 73 d5 a7 39 d7 16 50 9b 92 6e fb b7 d2 25 18 4a ee fe 05 6a da 9f 75 61 21 ad 42 ea 56 1c fd 0c 53 3a 29 19 ae d2 f7 ae ae 74 ce bd 46 cf 27 21 8d 4a 7e d8 ff ea 3c 40 7f 9e b2 cd 30 0e d0 72 d3 56 51 f5 d6 5e 29 bb 1e 35 e3 24 40 18 aa 65 21 63 f0 08 1b 81 3b 1f 4c e9 77 4a 94 7c 84 64 4f a8 4b 2e a8 c3 f7 6f 48 4a 26 8a dd ca 22 73 f5 f0 be 94 32 06 8f e5 c6 0d 7e 84 05 ba 58 60 e2 23 db 57 05 1b 6a 2b ac 58 4f 2e 38 ca 86 9b a4 63 b7 24 86 01 09 4e 8f 54 20 cc e4 ff e6 cf 7c c6 b7 e4 5f 0f 06 b5 a6 23 f9 12 f6 93 aa 86 39 c4 1f f6 0d 39 1d 39 b5 10 d3 83 ff 0a 60 3d d7 30 75 de e7 d8 76 6b 6e 82 22 78 77 f2 c5 03 Data Ascii: {GXn}!MwB^NAmJIQmlb"2*dSYs9Pn%Jjua!BVS:)tF'!J~<@0rVQ^)5$@e!c;LwJ\|dOK.oHJ&"s2~X`#Wj+XO.8c$NT \|_#999`=0uvkn"xw
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f8 59 b1 c0 bd 88 84 3f 30 81 9b 21 b9 97 5e ce 17 56 b7 b1 b1 99 63 e1 90 a5 7b 26 57 c1 f2 68 f7 23 e9 38 f6 f3 63 7e 9a 04 a9 00 0d 07 ce e0 6a 8b 54 32 35 15 f8 48 3a 13 08 6f 33 81 96 1a 3c b7 8b 81 d6 de 1c f6 b6 db 40 4f 3e 4c f3 f1 20 34 42 77 ef a2 71 cc 39 11 d5 df dd 84 2f a2 c0 eb c4 d9 4f be fe 3f 79 48 a2 f9 e4 88 25 2d 63 47 8f 81 28 4e 44 5b 0c 93 a9 85 17 9b cf ae eb 73 4d d9 da 5f 7d df 8f ba c1 b3 97 a5 8e 50 ab db 98 09 70 dc a1 40 70 04 aa c4 7e 61 25 12 9c 8e e7 d5 4e ee a3 22 43 90 ea 22 3c ce 29 9d de 31 c6 d5 f3 ea d2 80 20 9e df 7a ed 7c e6 81 73 48 64 91 11 7f 0a f1 06 82 52 36 e0 06 33 73 de ee e1 1e 92 f4 41 4a 3d ab 94 ce 66 a1 0f fe 1a 18 03 6d d7 e6 ab e3 6e bc bb 89 8f 6d 4e 47 00 cd 79 f3 d7 f3 8f d7 97 e9 dd a7 36 e0 8c Data Ascii: Y?0!^Vc{&Wh#8c~jT25H:o3<@O>L 4Bwq9/O?yH%-cG(ND[sM_}Pp@p~a%N"C"<)1 z\|sHdR63sAJ=fmnmNGy6
2024-04-25 12:54:16 UTC	806	IN	Data Raw: be 8c 0b 55 89 49 1d 63 a0 f5 d9 46 9f 06 24 6f c4 9b bd 30 f3 07 f8 e7 d0 cb 32 27 20 c2 10 0a 55 bc f7 de ae d3 c0 1c 5e 1d 20 f4 40 73 0f a5 8c 73 3c b3 49 a7 79 a5 84 27 68 47 40 a0 86 13 45 d8 91 07 a2 7e b8 eb 5c 1f 55 93 43 02 34 8d 71 31 65 cf 98 46 c6 92 3d 1b b7 d3 32 ea f4 e9 35 36 67 21 cd 87 e2 c4 a4 f1 cc 7c 5a 14 4e 2c c6 5d a3 05 8f 71 b7 b0 e6 aa 46 9c 9e ea 09 3a 9a af 15 06 6f 01 94 54 37 d8 10 93 e3 2f ee 08 38 59 c4 ad f9 ee d3 33 b1 b6 de b2 53 36 06 11 43 59 60 ac 4a a0 68 3a 16 29 49 8e 92 34 ea e7 42 be d5 71 21 b3 3c a2 15 df 2a 85 65 e8 49 95 23 cd 1d de 32 d7 d3 b9 02 66 75 a0 f5 05 67 1a d5 85 a1 f5 2e 45 38 cb 3f e3 64 14 3b cb 76 77 df ff fb 65 c0 5b a7 22 d3 c8 b8 af b6 7c ef 8b 5d ef 8a 6c e9 b3 c6 bc 1a 35 06 43 ad d3 13 Data Ascii: UIcF$o02' U^ @ss<Iy'hG@E~\UC4q1eF=256g!\|ZN,]qF:oT7/8Y3S6CY`Jh:)I4Bq!<*eI#2fug.E8?d;vwe["\|]l5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49803	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	530	OUT	GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 6842 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5667 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	722	IN	Data Raw: 52 49 46 46 b2 1a 00 00 57 45 42 50 56 50 38 20 a6 1a 00 00 90 6e 00 9d 01 2a 28 01 28 01 3e 3d 1c 8c 44 a2 21 a1 11 99 cc c4 20 03 c4 b4 b7 77 30 68 01 e8 a8 65 a0 f9 00 03 d0 03 a4 93 21 97 cb df e3 3b 3f fe b1 f8 f3 fb 8d eb 4f e2 7f 1a fd 43 fb 27 eb d7 f6 ef f8 9f ec 39 94 f4 af fb 3f 41 7f 8b 7d 80 fa 57 f6 3f d8 1f ec 7f b5 7f 79 7f 6e ff 45 e1 3f c2 5f e8 bf 25 3e 01 7f 18 fe 3f fc f3 f2 0f fb 77 ed 2f b9 7e cb ad 73 f6 2f d4 17 d3 5f 92 7f 5a fe f3 fb 41 fd af f7 5b d9 4b f6 bf cc ef 72 7e c6 ff 80 fc 80 fa 00 fe 2b fc 8b fb 47 f5 ff d9 cf ee 1f ff fe b1 ff 5b fd 3f c6 f3 ea 7f eb ff 62 fe 00 ff 8f ff 3b ff 2d fd fb fc b7 fc af f4 5f ff fe d9 ff 8d ff 57 fd ff fc 9f fe 9f f2 9e d9 7f 36 fe ef fe e7 fb e7 f9 df fc 1f de bf ff fe 02 ff 22 fe 75 fe Data Ascii: RIFFWEBPVP8 n*((>=D! w0he!;?OC'9?A}W?ynE?_%>?w/~s/_ZA[Kr~+G[?b;-_W6"u
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 8f 8b 8a ff eb 89 82 d5 8f b8 cd 57 aa 38 39 2d f7 4e 73 82 66 30 59 89 a0 c2 96 c2 25 5f 36 e7 b1 77 08 ef bc 32 5c f4 4b b7 82 39 68 5a af 86 b5 6c a9 2e 8f 25 53 05 78 98 9f 38 e2 87 7b 53 ff 52 09 9d 12 e5 3b d8 e8 10 f4 80 83 98 00 80 23 7a 93 7c 4b 52 cf 7c b1 49 f9 6c c5 5a ad 1a ef 81 1f f9 30 76 62 72 3d 1a 0b 4a ad 9b 6c 39 76 6e 7c db 93 b7 2c 1d 77 b8 26 7a 16 4e 6d f5 8a 3a 88 48 12 83 24 62 36 f7 7f 85 3c 13 b3 94 df fe 47 d7 00 4e 6e 4a 5e d7 75 3c 0f f0 b1 c4 5b 98 00 80 93 6b a0 70 36 22 ce a0 b1 3b e1 86 fa 09 b1 83 08 ca e1 b3 f3 0c 9c 48 fe b8 00 00 fe ff c1 6c 80 bf 97 78 b1 ad 22 28 c8 84 59 f3 a8 a5 5b c3 af 78 8c 59 4d 8a ac 1e 37 23 bf fc c2 51 28 ea af 84 15 21 c7 07 ff e2 cd 30 64 79 fd 1f d1 08 65 5c b2 24 bb f8 c9 b2 b4 8f af Data Ascii: W89-Nsf0Y%_6w2\K9hZl.%Sx8{SR;#z\|KR\|IlZ0vbr=Jl9vn\|,w&zNm:H$b6<GNnJ^u<[kp6";Hlx"(Y[xYM7#Q(!0dye\$
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 2d f6 9c f4 09 07 b0 88 91 a3 92 a1 23 00 3a ca 8b 94 67 20 43 41 79 68 71 03 6d 7b 3e 5a 21 86 f6 a2 1b a0 9f f9 a0 fc ab 9c be 80 62 08 e1 f7 f6 39 c2 ed cb 0e 45 03 41 b0 81 73 5d a5 13 c7 34 f8 1b c1 89 5c 76 7c 29 88 16 9a cf 3c 96 2f 55 65 15 3f 22 f6 bc bc f7 01 d5 df 8c 7a 0a 93 00 b2 3b b4 7d 2c a0 f0 85 27 ba ae 65 de 87 1e d5 13 dc 6b 5e d3 58 2b 60 30 d7 9a 5f c3 78 20 db dd 5a 35 a4 03 b2 1a e1 68 c9 67 7d a4 28 5c fc 7f f4 41 fc 2a 1a 16 2f 00 5f 83 5a d4 d3 06 30 8d 98 31 cf 79 3c ea 06 a1 d7 5a 13 55 88 ad 45 80 3e a5 e3 37 8b ac b7 5e 57 96 ff f9 da a6 4c 6d b6 11 d2 c9 3f f9 04 1e c3 3b 2c ac 8f 5f 8c df b7 ae 81 97 3c 91 15 54 94 d3 8c f0 8c 01 35 c2 59 9d 08 c3 c3 92 b1 8e b2 86 56 e8 be a5 df e1 5f 48 15 0e b4 39 dc 69 3f 5f 82 7b 04 Data Ascii: -#:g CAyhqm{>Z!b9EAs]4\v\|)</Ue?"z;},'ek^X+`0_x Z5hg}(\A*/_Z01y<ZUE>7^WLm?;,_<T5YV_H9i?_{
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 0d dc 78 0b 83 fc 35 63 08 a8 a5 b1 7d a9 f8 6c 1c bf c1 c9 d3 75 14 80 fd 22 c8 fd 07 5d 5c 84 45 7f d2 76 eb 1c 24 3d 12 01 27 9f 45 cc f7 ff 51 77 69 05 bf d2 d6 e5 24 71 da b3 ed 43 37 24 03 e7 c0 54 9d a6 36 c3 cd ff ec a7 ff f8 ca b5 f0 61 95 5f 9e c7 b6 80 0e ea c5 7c 67 a9 c7 9d 5f 8e c6 51 79 84 54 45 cc e5 b4 77 e5 0c 7f f0 06 4b e4 0a fa b2 e4 87 55 07 9e f0 f3 c6 72 44 1d d1 d0 86 6d 9f 45 2d de 18 17 ce 76 db 2e db a8 6b aa 55 56 dd 76 cb c9 4a 77 5c 84 0c b0 69 c5 7a 61 71 62 48 74 04 15 45 c9 4f f0 8d 30 1e 72 6f 4e 02 a5 32 fa fb 01 5f dc 97 9c 0c 70 3a ca 8f dd e8 2c 86 cf d5 cd 44 a3 09 42 c9 35 54 12 71 59 e4 5b 1f 81 b3 64 3a 2a 1d cd 89 94 56 20 4e 91 c7 0e 24 9d 32 78 c2 3e b1 bd a1 a2 99 4b 4b 96 5f 42 73 72 ad 5b ee 14 41 90 0c 42 Data Ascii: x5c}lu"]\Ev$='EQwi$qC7$T6a_\|g_QyTEwKUrDmE-v.kUVvJw\izaqbHtEO0roN2_p:,DB5TqY[d:*V N$2x>KK_Bsr[AB
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 57 36 49 d0 7e 64 00 8b 84 0b e3 4a 83 31 e9 78 13 c5 1c 1b 38 f7 5b 42 c5 06 20 3f 0d ed b6 32 52 a7 4c 92 45 0b 09 db 21 6a 8f 1f 33 ae af 15 b4 9e ac b6 ca 19 16 d4 fd b3 be 99 4e 18 95 87 f8 13 a9 e4 14 38 b6 e3 bf fa e9 d4 c8 a3 04 c0 e3 b0 22 0d bd 7c 86 2c 69 b5 e4 fd 38 af 70 6f c5 48 f3 e2 4e 30 a9 61 bf c2 07 4c 0d f5 a3 d4 9c 7f 35 f9 99 ad 31 23 05 de 0f 4f 05 70 f7 ba aa a7 57 18 34 f2 b0 5f d9 1f 9a f8 25 06 70 1f 16 1b 73 6f 14 65 08 fd 79 dc e8 58 c3 1e 84 6c f1 9e c7 ca be 27 b1 9d ef c1 ae 12 dd e4 63 4d 7a 08 32 0e ea ec 65 48 c9 53 10 38 75 a2 86 7e 28 43 34 c3 2e 64 fd 17 6c 64 16 fb 22 ac bf 1c 8d e3 60 11 bf cb 44 6a f1 75 02 88 99 b4 50 1d 50 63 38 c6 31 5e 4f ca 3b ec 17 c6 8c a4 67 8f 1f c9 09 7d 0d e4 17 62 d1 fd 8d ed 19 12 46 Data Ascii: W6I~dJ1x8[B ?2RLE!j3N8"\|,i8poHN0aL51#OpW4_%psoeyXl'cMz2eHS8u~(C4.dld"`DjuPPc81^O;g}bF
2024-04-25 12:54:16 UTC	1100	IN	Data Raw: d7 8e b4 96 52 4d 0c 18 80 39 33 02 db 32 bd 25 0b 8e b9 d7 31 d0 f5 d6 16 fd 79 6f a3 11 b5 ed 5b b9 24 a1 ef 51 a5 3f f6 ab 8d e2 78 db fa 21 ec e1 3c 0d 00 26 a3 0f e8 ab 09 a6 19 d9 34 f1 8e ab aa 52 cd e6 e1 6e 89 e2 b2 66 16 89 ce 58 1c d7 43 c7 47 7f c3 16 ef 81 32 e4 be 93 e9 83 d2 0d 56 ed c9 f6 1d 4a 38 d4 c7 b1 7b 14 7e 96 c2 1e cd 7e 4d a9 68 c6 68 ae af 6b 47 bf 0a 66 44 69 32 49 34 93 aa e4 b9 f3 85 d9 0b 45 bc f8 cc 4b 18 87 cb 20 6a 29 4a 14 1f e3 1f 4c c7 b5 cb f0 0d c4 ef 51 e7 82 d8 07 65 c1 17 b6 6a 87 98 6e f7 74 c3 5a e4 b7 09 3d 03 89 3f 3f 39 b1 48 2d 10 c4 80 dc a2 ba b9 be c1 64 37 a3 a0 43 64 1d 7e 57 5d 37 a2 ce 66 a6 7c 10 1b 1e 3b 81 e4 e5 05 f0 ab 31 98 d0 bd 24 2a 39 79 ff 7b dc 2a 17 d3 0e 2f d7 c7 c0 31 f7 c2 8a a5 a6 55 Data Ascii: RM932%1yo[$Q?x!<&4RnfXCG2VJ8{~~MhhkGfDi2I4EK j)JLQejntZ=??9H-d7Cd~W]7f\|;1$9y{/1U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49802	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	530	OUT	GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 13388 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:48 GMT Expires: Fri, 26 Apr 2024 11:19:48 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5668 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 44 34 00 00 57 45 42 50 56 50 38 20 38 34 00 00 d0 a2 00 9d 01 2a 28 01 28 01 3e 45 20 8d 44 a2 a2 21 12 1a 0d a4 28 04 44 b3 b7 70 b9 f8 88 57 cd 05 bd bb c5 cf 87 31 56 eb a7 f2 7f 74 de ec fd 40 79 80 7e 9f fe 9c 75 80 fe 67 e8 03 f9 17 f6 7f d8 cf 64 df f5 5f e9 3d c4 7e b3 7f 8e f7 00 fe 4d fe 1b ac 03 f5 77 d8 17 f9 97 f7 af 55 9f f6 ff b8 5f 04 9f b7 3f b7 ff 00 ff b2 5f fb 7a c0 3a 8f fa 35 fc fb f1 6b cc a7 e5 5f ce ff 19 3f bb ff d5 f5 7f f1 1f 92 7e 9d fd 97 f5 c3 fb 6f fc 5f f4 bf 0d 5f c3 f8 49 e5 ff f0 bf 99 7e e6 ff 0b fa 83 f4 af ec bf df ff bc ff 65 ff e1 fe af ef 37 ef bf e0 ff 28 bc e1 f8 27 fb 9f e5 17 f6 bf 90 2f c7 ff 8b ff 56 fe cb fb 0d fd c3 f6 bf dc 97 fa 1e d9 9d 3f fd 2f f8 0f 50 5f 4c be 55 fd eb fb 6f f9 6f f7 5f Data Ascii: RIFFD4WEBPVP8 84*((>E D!(DpW1Vt@y~ugd_=~MwU_?_z:5k_?~o__I~e7('/V?/P_LUoo_
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 83 1a 6f f6 df 24 a0 3b 6d 67 23 02 5f ed be 49 38 a6 39 0e 2a 92 ed 60 bd 74 35 f1 1f ff f4 42 f2 76 fb 08 b6 c6 ed 2d fd 38 48 93 f1 0d 93 7a 9c 2e 59 f1 37 e3 fe 3d 94 ba 20 b9 9c 2b 77 17 2a 16 d1 0e 14 c5 8f 4e c1 57 73 bc 0a 91 c0 39 f9 6b 04 4f 32 71 a3 14 c5 1f d8 a7 70 7c 9d 4b da f2 66 0d db 07 b2 0d fb f2 f6 7d a6 1e 1a df 5c cf b0 c4 d2 ee 74 7a bf 69 16 e4 04 c6 fb 71 da 7c 0b f5 61 a6 30 60 2f 4c 64 8e 76 89 a4 58 be a4 20 53 d9 d0 64 8b 92 c7 16 fa af 20 31 22 5d a4 39 a6 f0 1d ed 8e f7 43 4d 55 b4 3d 64 41 27 88 09 e7 cd 70 46 56 f3 8f 50 5a 3d 04 b2 70 8d 69 38 1e 22 2b ce 08 66 6c 58 3b 1b 0d 75 d5 b6 60 63 37 ee 85 b3 c7 1e 5c 44 1d 2f bd 37 ed 8f 30 3c 85 b1 9e 30 71 7f 05 fd 1f a0 c4 83 93 f6 57 ba 9d 5b 8f 1b d6 d8 4f d1 a4 74 18 af Data Ascii: o$;mg#_I89`t5Bv-8Hz.Y7= +wNWs9kO2qp\|Kf}\tziq\|a0`/LdvX Sd 1"]9CMU=dA'pFVPZ=pi8"+flX;u`c7\D/70<0qW[Ot
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 5f be 57 8b 7b df e4 0f b8 a0 df ef f4 f9 08 80 80 1d 20 84 21 b6 d0 40 25 d5 0f 8f 98 3e 63 77 05 49 70 c1 f1 84 07 7a 32 b0 06 dd 6e 04 35 b4 b9 ee fa 44 c2 91 ca 00 b9 2f d1 b7 5d 91 06 15 68 09 73 fc e5 11 63 b7 5d 0f 17 6f 50 08 a6 05 e3 16 36 56 fb dd 73 02 9c 23 c4 3c f3 a7 5a 64 17 c8 33 6c 87 72 bf d2 2f 29 1a 7c 7c 76 de 54 1c af 7f 8a a0 ea c2 bc dc c2 8f 62 aa f3 3b a6 96 4c 44 57 1f 2d 06 b8 8d 41 74 6a 8d 26 ff 51 d1 20 11 e7 af 6e 58 9a 41 07 83 1b 8e 3c f0 38 4c b5 33 b7 07 8e 6d be 0c 49 72 b6 1d cd 95 85 1f e9 82 e0 91 25 11 77 c1 fc 43 93 ad f4 22 82 91 67 95 06 f3 d3 4f 1c 18 a3 94 65 d8 cb a6 ab 97 cb b2 9b ef 31 ca 51 44 8b 4e 4f 60 d1 e1 89 33 33 17 e6 0b 6e a9 b3 39 89 38 a9 a8 e8 aa 24 dd 52 20 37 0a 6d 90 ce f4 39 17 81 be b4 9f Data Ascii: _W{ !@%>cwIpz2n5D/]hsc]oP6Vs#<Zd3lr/)\|\|vTb;LDW-Atj&Q nXA<8L3mIr%wC"gOe1QDNO`33n98$R 7m9
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 86 91 53 a7 44 66 f2 ad a1 df 18 9b 67 6c 39 5d e4 36 93 93 db c6 bf 3b 8e ac 0e 7c 74 32 ec 39 c6 2d ea 9a ee 28 fd 3d f9 cb d5 86 b3 71 c6 1b f6 42 ad ac bc 08 18 48 a0 3f 2c 61 4a 09 f8 78 6d c9 7a 19 2b 7c 9d 02 64 dc a5 de 92 cd 64 f0 87 4f 5a 49 e8 ea 1c f3 75 94 ea b3 64 cc 7e 74 65 0b 73 be 8c cb ba 6e 5f 61 57 cf 51 39 f3 b8 3a 29 bd d5 25 2e 59 8b 79 a1 19 0c 68 5e 98 a0 fe 5b 32 ff 64 21 0a 1b 1b a9 a2 f3 7d 23 6c 11 6c fd a6 e6 22 81 f9 e2 1d 4f e8 b6 11 2b 76 6d 05 66 11 6c 9c aa fb f1 80 e6 85 84 48 a7 ef be f7 75 01 f6 ed 7d 75 ff 55 a6 1c 34 de 3e 1e 87 1a f2 23 3f ac 3c 85 a3 33 a1 3f 6b 09 b1 64 41 82 e1 db be 8d 15 23 cb 99 47 19 4a 49 5f e1 06 ed ac 4a 40 7a ef ea 75 6f c8 ea f4 23 40 8c 13 fe df 46 f7 fa 2f 60 f2 b3 41 05 1e 00 84 40 Data Ascii: SDfgl9]6;\|t29-(=qBH?,aJxmz+\|ddOZIud~tesn_aWQ9:)%.Yyh^[2d!}#ll"O+vmflHu}uU4>#?<3?kdA#GJI_J@zuo#@F/`A@
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f5 0f 7c 8e 3a 96 af a7 b8 9d e5 77 c8 c0 95 79 d4 41 4a f2 c3 b4 ad 7a 88 55 61 92 c6 70 97 4e f5 4a ed ff 43 70 fa 50 cb 41 02 42 2b d6 02 41 1b 58 61 9e e2 23 f8 56 20 40 8f 94 bc 56 30 7f 44 50 4a d5 7e be 18 3b 6b ba 94 17 92 73 d6 62 c0 d7 84 e6 1c 37 ab 72 ba e4 90 fa 17 22 f1 97 60 9c f9 f7 9f ee aa 3e ac 5a 92 26 0b f3 e9 43 85 93 6b 8a 81 47 50 2a 86 d4 75 a6 36 fb eb 75 97 c2 de 85 22 ee 8a ac f8 57 49 d1 47 16 85 ab be 7e 79 d2 97 94 4d 0b 1d d8 1d eb 0e 36 54 85 6b d5 46 03 cc 14 24 05 08 9a 0a 1c e6 65 c8 d5 26 c0 11 c7 a5 27 66 c0 57 96 27 d3 87 50 df a1 2f f7 e6 04 9b 7f 7a 24 5d b6 61 fc bf 8e f8 53 f3 67 cf e4 e6 f8 45 4f 47 70 77 dd ed 90 1b f0 2f 52 99 c7 8d 68 cf 5d a3 28 e3 8f f8 af 0f e0 af f4 be 44 94 3f 67 c8 d2 8b d3 24 dd 22 71 Data Ascii: \|:wyAJzUapNJCpPAB+AXa#V @V0DPJ~;ksb7r"`>Z&CkGP*u6u"WIG~yM6TkF$e&'fW'P/z$]aSgEOGpw/Rh](D?g$"q
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: dc 31 c1 f7 1b 4b 1e 78 38 60 f6 24 86 ad ef c5 be 4b ea f9 1d 92 22 14 d5 4f f2 66 c5 a2 bd 30 69 9e aa 06 c3 04 ca 1a 91 d2 8e e1 25 a1 28 28 3a 5b 27 fd 0f 79 3d 14 57 83 41 5b 2a 64 e8 71 ee 09 3c f7 6f d8 d1 30 5b f2 dc 04 32 31 84 0b f5 b3 65 b7 c7 2b ff 13 34 ae a0 e9 3f b2 1a b7 a6 de e8 2e 56 53 34 9f 1e c6 78 9f a1 e0 d2 8b d1 fa 82 ce 8d 37 9d eb 2b 03 86 f6 a1 ff 26 3c 5d ec 25 4b 65 99 41 cd cc e0 71 93 92 3e e0 66 ec 53 98 b9 62 3e 58 b2 13 2e d7 95 f3 a9 9a c6 42 06 c9 df 85 ce f7 68 46 4f 11 26 78 4e 73 fe 44 51 55 5a 5b 82 2c a1 17 95 4a 55 e2 d4 4b 00 10 ea e1 a3 4e d7 fe 93 e5 36 6c 76 72 78 a6 98 bf 2c cb 10 56 f8 9c 6a 06 1a b8 11 83 95 73 0d da d7 e9 6d b7 70 3e b4 f2 cc 85 45 c4 19 cd 79 a6 d2 d2 63 e6 b7 5b d0 f1 a1 da fc e5 1a f7 Data Ascii: 1Kx8`$K"Of0i%((:['y=WA[*dq<o0[21e+4?.VS4x7+&<]%KeAq>fSb>X.BhFO&xNsDQUZ[,JUKN6lvrx,Vjsmp>Eyc[
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: fb 67 ce e7 d3 63 db 7e 16 0c 13 bf 4f c4 f1 9e 2b fd 7b 80 b3 39 c1 c2 e8 e8 32 58 f6 de c3 1d ba 32 f6 90 7d 14 26 a1 7b b5 b9 4a 49 97 b1 f8 f6 51 d9 52 e4 30 a2 6a 58 fc 9b e2 74 ff 40 a8 95 3f cb 84 a2 8a 56 70 d7 82 a9 36 b6 f0 45 15 7c ed 86 15 d1 7f bb e0 92 bd 30 11 48 cf e3 64 66 8b 86 df 80 bd 35 f0 6e b5 bc 08 d3 3c 0d 4e bd f7 e2 9d c9 b9 ef f6 fe 64 7c 52 22 4a 68 3d be 61 5d 56 0f d0 d0 b8 c3 0a 56 a9 61 ba cb 45 49 a8 1e 4d b2 f4 42 70 df a3 47 0b 2a d6 a7 e7 88 76 82 bc 20 56 2c 0b d4 b2 82 43 9d 56 e7 35 c0 a8 60 89 20 1b 4c 1c 0d 96 b2 ae 26 66 fb e9 d8 e7 49 ba 55 14 53 b2 c8 d2 46 c3 aa 9d 97 95 b2 c8 9e 52 b9 f1 af 4b 15 23 b3 9f 46 59 40 ef 72 fc 8e c2 ad 6e 71 68 66 bd bc 20 72 58 93 99 52 be 48 93 4b f8 d5 3b f3 2f f2 68 1b f5 60 Data Ascii: gc~O+{92X2}&{JIQR0jXt@?Vp6E\|0Hdf5n<Nd\|R"Jh=a]VVaEIMBpG*v V,CV5` L&fIUSFRK#FY@rnqhf rXRHK;/h`
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a0 22 c3 51 6d e0 1d 59 92 c4 09 27 0b 60 03 b8 bc fc e0 a5 3f 20 0e 19 f3 74 55 08 ed 1f 7f 9d 8a e5 c8 11 ef d5 e9 41 b5 7b a5 49 1c 4b 84 63 2f 90 b5 85 6a 01 ec 68 a7 99 d9 9c 72 3f d8 3f f6 07 ea 48 7f 5d 9a 25 f9 12 0f dd ab a5 4e 14 da e3 be 54 02 34 e5 66 54 e2 65 e4 eb 00 c8 7e e9 d8 da 93 53 fb f3 6d ab 1c 6a 73 16 3a 7f 2b 22 e5 39 f9 21 8e 4c b4 87 2b c5 34 67 0e 28 6f 12 02 32 62 28 05 b9 c5 a4 83 a1 40 29 e3 04 24 2e 36 c7 79 36 86 65 66 2f 35 58 e1 94 bc 65 d5 e4 44 53 b6 ea c3 a6 df 22 2e 71 d8 53 8b cd e9 f8 7f 33 75 60 20 5e 5e 7d 3b 5b 7f 83 09 31 bf f0 ce 65 6d 10 54 2b dd 7f 13 ef 88 37 6c c8 06 7b b8 83 63 47 6e 08 76 a7 22 c9 34 97 07 cc c7 7e ef f6 f0 71 a5 2f 47 7e 80 df 59 7b 9b 31 8e dd 31 92 2c d4 cf b5 76 71 de 08 2c 3e a0 53 Data Ascii: "QmY'`? tUA{IKc/jhr??H]%NT4fTe~Smjs:+"9!L+4g(o2b(@)$.6y6ef/5XeDS".qS3u` ^^};[1emT+7l{cGnv"4~q/G~Y{11,vq,>S
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 31 5f 00 d8 9c 17 42 c5 c4 b2 09 0b 24 17 8f c5 ac c4 e2 99 29 fd 12 7e 92 ce 09 1e c6 44 4b 74 c9 fd 40 3c 69 bd c8 22 1c 2f 05 9c 3a b8 e7 59 ef 4d 24 d0 e6 a5 6f 72 5b ac 7b a8 bb 64 af e4 3f c8 f6 08 f5 17 90 61 92 58 73 30 8e c0 4f 04 9c 9e bc f0 d0 52 a9 e3 d7 92 7e fd f0 c3 b6 a2 98 29 77 49 0f 79 52 a4 35 bc 25 14 e4 a2 a7 fe 89 03 d3 68 69 e8 f9 19 26 a2 26 6a 59 cc 4a a5 af ce 72 e5 cd 84 cb ff 3a be 51 2a b9 2d 02 29 2d 54 1a 72 86 f4 04 2c 12 1a 79 0c c9 c1 1e 33 21 4c 77 0e 4a f2 dd 81 34 e7 d1 6d ae c1 20 73 16 a6 dd ca 91 5f 21 c6 98 77 6e 76 1e 59 75 3f c4 e1 fd e0 03 54 c2 7c 8a fe 96 92 68 70 1e e8 5c 65 0e 25 e2 c5 fd 2d 89 ea c9 e5 89 c0 35 a6 26 c6 b6 b7 e6 d6 6e ac 05 24 1c 51 81 05 9a c9 d8 ab 25 4a 7d 9f 56 a6 6a ab ce 89 20 2e c7 Data Ascii: 1_B$)~DKt@<i"/:YM$or[{d?aXs0OR~)wIyR5%hi&&jYJr:Q*-)-Tr,y3!LwJ4m s_!wnvYu?T\|hp\e%-5&n$Q%J}Vj .
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: e5 38 99 89 88 73 80 4f c6 fb 8a 13 00 37 f7 0a 91 9b b3 ca e8 05 a3 ef dd dd ad cc 0a 12 73 14 65 a5 51 f5 5b 1b bf 26 97 61 88 b6 72 8f 3f a2 e7 38 1d 65 e4 17 35 86 91 67 50 ba 3a 4b 50 92 b8 c6 ac 41 0e 1e a4 c8 24 47 91 0e cb a2 e0 43 28 83 f7 dc 4d 56 e5 5a a2 94 96 c3 93 e6 e0 1c 37 4d d0 bc 04 9f e6 6d 0d 7d e0 aa b1 a3 70 31 dd 3e 21 d1 72 9c 2d 3a 77 a4 5b c7 7b 40 86 13 da 07 55 cd b7 d8 eb 6f e8 f4 dd e9 7a bb 81 9b ae 3e bc a7 37 24 5a 5e 51 3b f0 69 78 bd 23 58 25 57 33 90 77 e9 37 9e e8 a1 93 d0 89 a7 21 1e 71 de 8e 54 25 33 97 d5 d2 8c c7 e8 ff 3c 9d 1c 3a 4e f3 15 18 50 e8 02 9b b7 c1 10 86 ae 00 5b 51 f6 9f 8d 6a 9e c4 a4 dc df 5f 2b c8 2e e9 9f 65 6d 01 bd eb db 4c 65 8e 9c a1 19 c1 56 cb de a8 70 f7 ac 18 21 1b d1 99 53 af 79 10 37 9f Data Ascii: 8sO7seQ[&ar?8e5gP:KPA$GC(MVZ7Mm}p1>!r-:w[{@Uoz>7$Z^Q;ix#X%W3w7!qT%3<:NP[Qj_+.emLeVp!Sy7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49804	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1099	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1880 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 12:18:50 GMT Expires: Fri, 26 Apr 2024 12:18:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 2126 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	722	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 4c 44 07 00 00 2f 3f c0 0f 00 4d 28 6a db 48 92 3b cf 2e 7f c2 27 85 88 fe 4f 80 cf 6c 4d 42 ba bf a0 9d 83 59 27 2c 58 45 92 1d a5 2b 3a e2 5f d7 9d 70 83 02 3e c1 82 99 b6 6d cc 1f 5e cf 02 a8 76 0e 82 81 b4 6d b2 fd fe 35 4e 4a ff 13 5f 64 29 10 e0 80 25 57 f6 47 2e 5d 80 85 8b 01 3c 02 2c 0c 1e 18 63 c0 c2 0b 22 01 fc c3 43 8b da 3f 43 d2 53 dd 3d 58 7c 5e c4 b6 6d 5b 57 b6 6d e7 3a 27 57 b6 6d 5f da 36 3e db b1 b1 f6 56 5f ec ec a6 bf d9 bb f0 b7 27 ae ae 9c 09 fb 4c fa 4c e6 2e b6 f3 8f 93 9e 9c 54 9c 4c 6c dc da 4e 8e ec 48 92 14 c9 8a a8 ee 7b cc 4c 22 3c fd e5 a1 ff 63 9e ee 4a b9 d6 b6 29 92 f2 7e 55 d5 33 8b bb bb 6b 04 a1 66 ae f7 e0 ee a4 e4 dc 02 b9 bb 84 ae 19 c4 ee ee 30 33 2b 6d 55 7f 4c 80 09 Data Ascii: RIFFPWEBPVP8LD/?M(jH;.'OlMBY',XE+:_p>m^vm5NJ_d)%WG.]<,c"C?CS=X\|^m[Wm:'Wm_6>V_'LL.TLlNH{L"<cJ)~U3kf03+mUL
2024-04-25 12:54:16 UTC	1158	IN	Data Raw: 56 19 94 92 b6 a0 98 f3 8e 26 82 b5 c5 e4 f1 77 61 a5 f7 c7 f3 7b 78 43 ff 65 f8 3b 8d 01 99 b8 74 70 19 e8 d0 10 b2 d1 62 4f 4e 9e ca 90 33 7b 78 ba 7d 7d f9 35 8d fe 8d f0 df 58 64 62 44 5c 91 17 d4 a5 62 1c 49 ad 91 0a f4 4e 39 29 af d3 f7 2f 0a 6a fa 3e 0c c3 ef 41 eb 6b 00 a5 a1 7a f0 92 86 00 04 20 3b 96 a7 2b c4 86 a9 af 06 a4 e1 1a c0 4b 77 58 c4 81 e8 0a 99 df 9a f5 a9 1f c3 80 6a 9b a6 b5 d4 cd dd cc 49 d2 06 a3 68 c4 60 33 51 53 99 18 43 77 30 a8 ea d7 32 a0 4f 48 b8 d9 80 3b 60 b1 24 47 d1 df 39 49 79 51 05 a2 fa 12 40 15 90 03 3a 32 a2 9c 44 43 23 9b 38 36 f9 1d 23 5e 1c e9 cb 46 7a 35 fc 7a a3 91 55 dc 52 6c f3 57 d3 19 23 19 03 f4 16 1f de 06 22 a7 bb 2e 8b 6e 2b 94 e2 42 94 26 eb df c6 e3 af fa a3 cd f7 41 4d 7b fd b0 e5 ba b7 06 ac 6b fd Data Ascii: V&wa{xCe;tpbON3{x}}5XdbD\bIN9)/j>Akz ;+KwXjIh`3QSCw02OH;`$G9IyQ@:2DC#86#^Fz5zURlW#".n+B&AM{k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49805	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1100	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:51:33 GMT Expires: Fri, 26 Apr 2024 11:51:33 GMT Cache-Control: public, max-age=86400, no-transform Age: 3763 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	722	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 f2 76 7e 5d fe 84 2f 0c 11 fd 9f 00 9f 61 90 96 a1 ca 3a b0 dd 8f 21 f1 5e b0 8d 24 c9 49 5b 88 d7 26 9a cb 3f 4f 88 81 71 23 49 8d 0a 13 00 22 ff 18 3d 67 5f 6a db 48 52 63 7e 88 f9 43 ec 7f 2a 1f df 44 a2 91 00 30 28 24 a9 f9 89 25 03 b6 17 b6 77 5d 6b 0c 7b 7b 01 05 44 13 23 23 01 a8 ae bf c4 a9 71 5a ac 76 9d 00 20 31 b1 b0 80 1f 0f 1d d8 d6 d6 48 8e a4 96 86 67 96 cd cc cc cc cc 8c 91 d7 d1 da 11 33 73 c6 cc cc cc cc cc cc cc 3c cc 33 2d f8 03 75 ab 5a da 6c a3 bb 9e 4c ea 2a 99 3d a5 ea da d0 ec 70 c1 cc f6 62 64 66 7b 29 34 43 e4 2a 39 b4 b6 1d 92 f4 7e ff 5f d5 e6 28 5a db b6 6d db de cc 66 ba 99 bd 91 6d db b6 cd b1 3d d5 7d ba 1a 7f 7d 72 64 db 56 6d 65 ae Data Ascii: RIFFWEBPVP8L/?EmIv~]/a:!^$I[&?Oq#I"=g_jHRc~CD0($%w]k{{D##qZv 1Hg3s<3-uZlL=pbdf{)4C*9~_(Zmfm=}}rdVme
2024-04-25 12:54:16 UTC	1246	IN	Data Raw: c5 3b 72 55 6b 97 f9 ed fb 6e a4 5a 11 0a 78 49 06 d8 05 21 48 96 50 8b ca 3c 6c c7 e6 de f3 7f 85 ff bf a1 d5 ba fe ef a1 82 5f 9b be d9 33 61 bb 11 0f d4 94 73 c2 3e 9d b7 ae 37 16 e6 11 10 3c 72 83 1c 94 36 c8 38 15 20 13 43 40 88 01 cd be bf 99 6d 5a db b5 db 3e 56 5b f5 e9 b7 46 ce 43 63 89 8c d3 0f 91 89 10 87 c2 52 03 f4 df 23 d9 b8 64 c6 91 51 86 40 96 24 42 9a e4 1f ea c0 22 5a f9 42 81 ca a1 8c 16 a7 39 59 10 0a 45 35 f8 d5 95 f2 42 b6 1c b8 61 18 f9 53 22 20 08 fd cf c0 c7 80 72 75 26 77 78 68 96 82 08 28 a6 74 55 2c 15 47 94 45 d8 7c 89 00 18 02 df 37 ae b3 5e 28 b9 71 c8 46 b5 c5 0f 41 0e 6d 00 81 8e 18 de ed e9 59 af 5b 24 83 00 99 42 05 d7 20 ae 31 aa 6c 2a 21 41 18 84 41 18 c8 1a 02 e5 ac 73 b8 d0 10 e6 9c 9d 31 b4 fe 3b 13 84 41 28 81 20 Data Ascii: ;rUknZxI!HP<l_3as>7<r68 C@mZ>V[FCcR#dQ@$B"ZB9YE5BaS" ru&wxh(tU,GE\|7^(qFAmY[$B 1l*!AAs1;A(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49806	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	529	OUT	GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 33456 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5667 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 a8 82 00 00 57 45 42 50 56 50 38 4c 9b 82 00 00 2f a5 c0 49 00 4d 40 6c db 48 92 74 72 cd 53 1e f7 e4 1f 70 f7 f4 5e 08 11 fd 9f 00 db ee 2e db bd 3b b9 bb 6d bb bb 1f b7 bd f2 ca 93 bf ba 2c b5 d5 5e 3c ed b6 8f 23 4a 2a a9 85 3d b9 db fb 3d b5 7f 6d db 6c 26 4c cf f3 08 6a 75 41 02 3c 24 11 49 0a 40 1f 43 14 9b d1 71 1c cd 90 14 b4 d0 ad 3a ea 50 55 92 f0 3d 3e 24 a5 04 64 51 75 64 62 29 01 4c 07 49 18 d3 7a ba 93 40 36 46 55 f5 2d 69 0a 59 a9 ea f2 62 f0 3d 02 d8 92 c8 2f 45 04 a9 a2 d6 fa 90 c2 e6 42 d2 5f 76 c6 04 91 94 00 49 3e aa 22 25 7c 47 07 e2 1f 24 71 48 30 76 06 70 1d 23 d2 98 77 ba 15 08 80 a7 31 08 d2 06 50 74 de f7 92 a4 1d 21 dd fa 09 a2 73 ef 0f 48 92 f3 65 87 02 92 44 4b 28 40 02 49 b2 ef d5 77 82 ad 4b d2 b5 39 42 ce f3 bd Data Ascii: RIFFWEBPVP8L/IM@lHtrSp^.;m,^<#J*==ml&LjuA<$I@Cq:PU=>$dQudb)LIz@6FU-iYb=/EB_vI>"%\|G$qH0vp#w1Pt!sHeDK(@IwK9B
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 97 5b f8 5a 3b 0b 04 1e d1 d0 9c 36 a7 63 fd 00 70 bf 10 ec 3c 77 0a 02 8f 80 d6 58 3c 8c 71 06 70 6e a1 87 1e da 46 df ea 21 64 92 49 26 05 69 e7 81 70 19 00 e8 18 03 80 de 42 8b 75 8e be da ba ea 5a 00 00 5c d2 f9 6a 74 6c ac e3 1c 02 de 97 cf e5 6d 79 5b ab 3d 6c 3e 3b 3b a1 39 0d 97 26 00 86 4b 00 1a 7c 7d 89 f3 7c 71 cb e7 7a dc 37 00 04 4e 4e 00 02 3b c0 04 7c 0e 2c 9e 01 a4 cf d2 8d 74 2b 3d 0a d6 90 40 a4 90 90 e3 bf 76 d9 7a 74 0a 70 f9 e8 f3 5f 1f 11 53 c4 14 31 45 4c d9 f4 cf 94 4d 11 93 7d 3c 01 2c b1 2c 00 68 f0 eb d1 4c 6c 1e 60 a7 09 b0 c4 12 04 d0 5c 03 18 36 6c 58 b7 31 eb d6 ad 0f 00 03 10 c0 e7 3e 8e 3f 19 43 b7 6a cd 9a 6d 0c 60 d5 61 bb 03 f6 0b 4c 00 9c 01 e7 c4 7f 5c 6a 26 00 c0 8f 4b e5 e4 9c 50 8e 00 4c 07 18 0e e3 61 3f 40 7d 02 Data Ascii: [Z;6cp<wX<qpnF!dI&ipBuZ\jtlmy[=l>;;9&K\|}\|qz7NN;\|,t+=@vztp_S1ELM}<,,hLl`\6lX1>?Cjm`aL\j&KPLa?@}
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: b6 25 49 42 92 f3 b4 56 9d ff 8c 74 18 3a 85 ba d6 77 16 d3 92 24 c9 92 14 a9 45 71 5e 8e ce 27 ec 33 3d 26 80 ce b6 6d 6a e3 ea 1d 90 21 b6 cc 14 66 66 a6 3e 39 f4 07 4f 8b fd e9 c3 cc cc 6c 7b 49 66 ad d9 82 29 64 cd ee 64 e5 3e 22 26 e0 ff eb ff a1 0e 28 96 4a 77 42 85 74 a9 53 02 25 e9 4a 27 25 2a 75 4a 4a 77 91 e0 2e a4 53 81 4a 95 c2 51 4c 0a a9 54 2a 44 a9 22 00 01 09 00 ca 16 83 25 80 24 50 2a d5 40 a7 04 ba 98 a2 fb 54 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d a8 54 29 95 4a 17 4b a5 bb 90 02 fa 44 4a 1d a8 54 ba 13 aa 14 a2 a4 44 1d 25 92 44 85 54 aa 40 a7 a8 54 54 50 a9 53 28 29 a5 4e a5 22 91 4a a5 4e a1 54 71 c1 77 01 25 2a 95 4a d5 38 8d 19 e9 8a f5 e6 74 a4 d8 60 b5 53 8d 84 ac 0b 3a 3a aa 91 b9 05 41 e5 dc c2 a6 52 54 ab 18 29 aa 29 57 77 Data Ascii: %IBVt:w$Eq^'3=&mj!ff>9Ol{If)dd>"&(JwBtS%J'%uJJw.SJQLTD"%$P@TTDTDT)JKDJTD%DT@TTPS()N"JNTqw%*J8t`S::ART))Ww
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 21 04 44 62 15 0a 83 58 a0 58 96 50 21 70 a9 04 a8 14 c5 42 92 65 21 87 42 55 e3 0d d8 bd 94 69 09 dc 52 c6 64 ca 0b 69 74 4d a6 b3 9d 0e 4d 27 94 53 b6 29 55 ec 96 ed 76 ea 86 2b ec 74 ca 54 d0 75 04 ad 10 da e7 dc a8 52 8d 72 14 6f 48 e9 ea 3e d3 a5 bb dc 45 70 4b 0a c1 75 4a 8a 52 d4 c5 1a e9 1a 52 6e 47 8a ae 84 d6 82 94 3a d5 2d 57 13 46 e3 c8 e9 c8 94 4a d7 29 33 a5 a4 4e 39 37 4a ba 16 bc 82 14 4a 5a ab 6e 94 64 64 de a6 9a 8c 9c 73 50 2b a4 6e 9c 1b 2a 6d e4 9c 92 4d 06 d9 5b d6 94 ba e4 ca 39 51 da 06 78 81 a1 9c bb a8 c0 19 f0 5a c4 b9 c3 55 b7 98 f1 c6 ab 06 b4 5b 16 21 56 ad 45 3b 77 aa 52 75 bd 8c aa 44 8d 2b a5 18 46 2a 46 60 90 99 31 08 99 50 86 dc 21 ad 22 62 2c 86 c2 d5 46 67 21 69 4b 05 96 55 95 f1 66 07 0c 6e 23 e7 f1 f2 5a 8a 33 56 a9 Data Ascii: !DbXXP!pBe!BUiRditMM'S)Uv+tTuRroH>EpKuJRRnG:-WFJ)3N97JJZnddsP+nmM[9QxZU[!VE;wRuD+FF`1P!"b,Fg!iKUfn#Z3V
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: e7 a9 b5 6b 82 ce 37 be 6e 54 d3 bd aa bc f7 e9 cc 49 e0 1b b8 89 e5 3c 85 bd 28 a9 db 59 4f 74 7a 66 29 4f dc 4e 52 53 2f ce e9 8b 19 c6 8a aa 43 96 50 b7 8a a9 09 b8 8a 64 12 e3 19 57 c2 95 4b 46 ab 4f 9d a5 62 15 bd 29 13 96 d3 42 02 a5 c9 2d 46 aa c4 b5 4b 25 04 3b 6b 0a 39 76 3a a3 1a 15 0b d9 99 c8 62 f3 b2 82 07 ca 95 13 4b c8 42 d5 2d a9 cf 9b e5 ad 60 79 63 8c 83 96 34 60 59 36 ad 25 96 31 d1 aa 55 08 45 ab 40 38 99 95 60 aa bc 20 18 06 b1 a0 6a c6 92 19 98 ad 24 58 82 d9 f4 28 92 55 19 19 75 b5 a1 a1 0a e7 8b 62 2d 8d aa 8c ba 62 28 0a 5d 23 18 d2 d2 24 a7 47 49 14 bc 0b 8c b9 60 aa d2 40 22 15 53 90 02 ec 56 75 d3 51 54 63 3a 64 2c 06 b7 5c 13 8a f4 b0 35 34 5d 63 b4 a4 08 ea 94 8c 19 20 2d 82 36 95 6a 84 6e 54 a9 14 d5 8e 4c 25 4a 9b 5b 6f 8a Data Ascii: k7nTI<(YOtzf)ONRS/CPdWKFOb)B-FK%;k9v:bKB-`yc4`Y6%1UE@8` j$X(Uub-b(]#$GI`@"SVuQTc:d,\54]c -6jnTL%J[o
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 94 5d 64 4a 09 2e b6 54 05 c2 ae 41 01 5a 1f 97 52 12 09 89 70 d2 9b 5e a1 e1 3d 40 22 50 d0 a1 b8 66 28 11 22 8c 30 59 2b b0 91 02 9c c2 d0 92 81 17 e0 19 b3 63 4c b7 b2 96 4a 41 38 de 43 e9 3c 4a 00 42 4c 78 69 16 51 44 51 e9 15 b3 38 45 10 5e 47 92 8e 96 ce a2 8a 14 42 f0 1e 08 95 22 c1 72 da 00 8e 51 54 a2 0a 2c 81 cd 84 c8 2a a6 22 59 88 61 a6 2b 13 b6 2a b4 6d 64 50 a5 32 dd 12 32 28 5a db 18 51 c1 a7 46 c6 32 ce 6c 6b 54 00 52 21 a1 a0 76 41 5d 4a d2 e5 5c a9 d4 cd 32 6f c1 c0 8e f6 b6 a2 07 e9 d6 6b 71 0a 8d 65 5b f6 ca 34 48 ed c5 b9 f7 81 37 08 0d 73 45 96 9a d2 e7 7a 7b a3 9f ff 76 5d fe 97 dd b2 39 ec 8e 49 2c 41 33 2d 44 19 b1 aa 42 43 bc f0 9a ea 24 54 11 19 9f fa cf 37 72 6a b6 02 20 1e 5d e2 df bf ba 60 0b 8e 09 48 60 b4 a5 24 0b 20 65 56 Data Ascii: ]dJ.TAZRp^=@"Pf("0Y+cLJA8C<JBLxiQDQ8E^GB"rQT,"Ya+mdP22(ZQF2lkTR!vA]J\2okqe[4H7sEz{v]9I,A3-DBC$T7rj ]`H`$ eV
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 35 8d 6b 79 bc c5 e7 6f d8 d3 fb 72 56 cf ed 92 6d 9e 1c d8 36 2e cd b3 37 9c 0f ae 7f 3e b1 6b 8f 1f f1 94 d0 f3 a6 08 3c f1 c9 ff 7e 68 c3 5c d8 fd 74 e7 c6 bf 9e b8 fa ed 3b 97 74 fa f4 0f ed 3f ef 23 07 5a d7 55 3b fd 61 11 26 9e 47 6e c9 62 c0 fa 6c 51 c1 d4 94 a5 5b 78 2b 99 72 1f 8b 2c a6 66 33 ac f1 14 a5 7e 4a 6c 2e c6 f3 61 b6 da 18 ef 6a e6 55 48 89 ca b9 40 18 e9 ba 45 75 a9 b3 5d cc 94 a2 13 2a cd 62 2a 66 d1 9b 64 04 93 8f 46 61 8f 71 7a 36 29 db 98 26 75 d9 96 dc 50 5d fa 53 ff 73 ed 27 f3 4d 0f 5c 32 84 40 4e ed 95 b9 d9 77 ff d1 9a ff 7e df ec a3 51 d8 2e 19 51 22 30 66 46 0f a9 48 a0 29 74 b2 8b b8 8c 66 02 4c de ec 41 5c b0 10 85 02 a8 00 92 37 51 88 18 05 64 43 44 95 7a 73 ab 1f 3e e4 5b 2f 1f d1 2a f6 0f ae ba 6d f3 8a 9d 78 41 cf 9a Data Ascii: 5kyorVm6.7>k<~h\t;t?#ZU;a&GnblQ[x+r,f3~Jl.ajUH@Eu]bfdFaqz6)&uP]Ss'M\2@Nw~Q.Q"0fFH)tfLA\7QdCDzs>[/*mxA
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 52 a9 54 a0 08 61 22 00 15 a1 52 f0 b0 36 67 2d 21 86 f7 ee 6c a7 b5 36 26 eb 3f bb ae c4 d4 14 ef ee a3 68 95 75 9e 4f 37 6e 29 ca fa b1 77 59 72 b5 d6 bc 6b eb 60 85 7e fd 70 7c 93 49 a1 b8 51 4b 74 49 59 95 c1 ba fb 14 18 05 28 6b 97 ec 63 1b 84 8a a9 29 c5 48 62 ae 2a 59 db 93 55 5c 55 85 98 2b 0e f6 88 f4 86 53 d1 f2 00 3c c0 71 50 f8 64 1b 95 00 c4 05 5a 2a 22 3d 40 23 52 5d fa 12 10 a0 17 2e 15 38 40 3a 0a c6 12 80 86 2e 28 c0 c5 49 e2 82 c1 f5 0a bd 11 94 c9 2c 21 ce 27 71 78 9f a8 43 34 44 02 41 08 15 71 e1 90 0a 66 db 84 11 c5 a8 a1 53 84 11 85 60 a2 f0 53 a5 c3 fb c9 40 89 33 a9 74 6d 4f 1e 72 eb e6 a6 8b aa 5e 5b a1 b8 6c aa 1f d3 4d 9e 02 9f 4b cd 16 b3 76 72 15 39 6e d8 d4 22 a9 46 b0 6a 5d 6e 34 fd 72 cd 60 0f 4a 67 b6 9c 6f 47 ee 7d d6 f5 Data Ascii: RTa"R6g-!l6&?huO7n)wYrk`~p\|IQKtIY(kc)HbYU\U+S<qPdZ"=@#R].8@:.(I,!'qxC4DAqfS`S@3tmOr^[lMKvr9n"Fj]n4r`JgoG}
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 96 40 ce e4 2c 40 44 cc 3d ce 3f c6 6e 7a e9 fa d7 39 df ab cb 73 86 c4 a4 9e 13 6b dd 8e 8c 6a 29 a7 4e 65 50 d9 aa 6f 49 2e 26 d5 eb 67 ef a4 64 ca 79 74 cb e6 64 38 31 f3 3c 18 75 ac 4f 3d 5a 4b 65 52 b3 3e d5 93 34 ac 45 a3 2e cc aa db 09 51 e1 74 bd da 5e 47 a5 ab 9e a2 5d b9 92 bb cd 1d 53 4e b5 5e 57 3b 76 50 92 3e 36 b2 3c 6c 7b eb 37 9b 9d 59 1a b7 91 0f d9 a9 3e 75 29 2c f0 ea d7 c2 cb f0 9a f5 19 64 79 b3 fb 58 3f 1f c0 58 99 8f 24 36 8f f5 a1 a7 aa 36 eb c7 8d fb 50 5a 2a b4 fd 2f 45 c6 23 33 d3 9f 84 d8 e9 ce 56 1f 1f ec 4a 96 b6 ff ec ba 05 9b 42 b2 36 a5 07 19 96 25 8e ca 5a 9e 07 67 24 53 cb 29 81 5c 10 58 25 d6 86 4c 46 48 0c 21 d0 08 0a 54 4b 9b b0 f7 90 0b ec 76 a9 2b 13 cb 55 cd e6 c4 bc 61 c8 b1 db 12 16 81 22 6c 83 a1 ac 9b 22 6f 8a Data Ascii: @,@D=?nz9skj)NePoI.&gdytd81<uO=ZKeR>4E.Qt^G]SN^W;vP>6<l{7Y>u),dyX?X$66PZ*/E#3VJB6%Zg$S)\X%LFH!TKv+Ua"l"o
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 8f 74 c2 2d b7 bf a8 f5 b4 47 fb d7 7c 5d e5 a4 de 86 fd eb 60 e8 d0 7e 1b ba c9 4d e7 6f 4a 47 63 c9 a5 f2 05 2e 83 f2 ad ca 55 32 3c 2c be 52 4d 8e 16 5f 6c 43 50 f7 d5 f6 8e 94 d0 20 6e 9e 0c 87 9b f2 dc aa 7a 8b e5 3c 5a de ff 18 e5 d1 87 f2 14 12 6b 5b ae d2 be 4f 51 b2 49 5c ce 42 a4 cb 36 65 81 94 ad 56 e5 f2 71 38 9c 92 1e 55 85 02 d0 48 2a 51 16 36 6a b3 fd d8 48 91 e1 56 dd 12 e0 71 eb 6e a5 31 d3 d2 7d e8 e8 52 d5 d0 0e 8b 54 31 26 6d 8b 2d d5 ee da 47 a2 b6 55 e1 bf 69 b0 a2 5a a9 d9 48 85 67 f8 ac d9 07 76 f0 43 e3 58 50 9a da e9 72 18 e6 47 3d e5 98 ca a6 d9 94 dc 96 c2 27 c1 98 b5 36 37 0b 4f b5 c5 ad 4f 99 ca 5a e1 3f a7 ae 3a db 9a cd e8 03 db 2e b5 40 5e 41 83 90 d6 b8 46 55 ab d6 de 62 e6 63 41 45 a4 35 b0 d3 73 4a b9 9b bd 53 46 d7 48 Data Ascii: t-G\|]`~MoJGc.U2<,RM_lCP nz<Zk[OQI\B6eVq8UH*Q6jHVqn1}RT1&m-GUiZHgvCXPrG='67OOZ?:.@^AFUbcAE5sJSFH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49809	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	530	OUT	GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 32634 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5667 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 72 7f 00 00 57 45 42 50 56 50 38 4c 65 7f 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 ce 3e f1 7a af ff 82 67 76 ae 85 88 fe 4f 80 6d 77 97 ed de 9d dc dd b6 dd dd 8f db 5e 79 e5 c9 5f ad 96 0f d9 5e 3c ed b6 bb 22 29 89 16 f6 64 b7 f7 7b 6a ff db b6 d9 0c 8b e7 79 04 59 5d 90 00 0f 09 55 2b c7 5a bd 61 3b 3e 8e a3 79 35 d5 57 1d 75 a8 2a d3 f7 ab 95 38 24 69 a5 aa 3a 32 65 8c 91 5a 30 1d 24 20 55 55 cf 8b 3b 11 19 83 8c c1 18 41 55 7d 4b 8b 91 64 00 d3 e5 09 c2 77 00 7b b1 99 a9 c8 1f a8 4a 8b da 83 94 24 c4 c0 5e 44 cc 11 fb 53 55 34 20 40 00 a1 03 51 11 3f 36 35 73 48 ec bf c0 75 bc d9 cb d4 ad ff 82 24 5d 7b f9 fd ae 29 03 5e 91 31 34 86 6e 2d d8 7e 75 ae d6 2b 72 fe 98 80 97 7c 45 4b a8 82 00 82 d8 f7 ea 3b 60 eb 92 74 6d be 21 e7 f9 bb 16 Data Ascii: RIFFrWEBPVP8Le/IM8lFF>zgvOmw^y_^<")d{jyY]U+Za;>y5Wu*8$i:2eZ0$ UU;AU}Kdw{J$^DSU4 @Q?65sHu$]{)^14n-~u+r\|EK;`tm!
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 38 01 75 b6 c9 dd b2 2e c6 47 8f cb d9 4d b7 62 12 08 87 00 40 c3 7a 41 c0 3f 6e 7a 2f 4c c6 86 2b d6 b5 87 be a3 69 46 35 87 03 00 2c f6 00 06 bd a5 e4 f8 c2 9b b1 5d 00 10 98 4d bd bc f3 50 01 73 ea 03 37 04 8c cd 36 00 18 f4 72 1b 00 00 15 db 33 bc 66 a7 62 c3 06 e9 4c bb e3 df 45 87 ae 3a 70 71 5e e3 cd 1b 42 ff 3f 1a 6e 8e 6b d0 79 e4 0d b0 35 ce 18 ec 2d e5 c7 41 4e 5b 43 0e 06 d0 8f 1a 00 f5 bc b7 bb 03 9b 5c a1 6f 6b 49 3b 78 d2 43 ae b4 c1 da 64 db c1 06 80 96 f5 be 34 90 0c 67 84 c7 70 1f 1e 47 2f 20 09 4f d3 dd f3 f8 e4 01 c2 43 b8 1f 1f 01 a0 d1 f4 b9 cd c8 1f f5 9f 86 fb b5 a1 71 72 c5 7a 01 67 a9 9d 4a 93 4f 68 79 b1 2c c0 d2 3b 34 e9 14 3f 5a 5e 9c 17 c0 b0 ea 0e 0f 12 d0 1f e4 ca 15 48 36 bb 55 59 a0 5c 7a 53 4d 91 ac 62 5b 25 30 d2 2a 35 Data Ascii: 8u.GMb@zA?nz/L+iF5,]MPs76r3fbLE:pq^B?nky5-AN[C\okI;xCd4gpG/ OCqrzgJOhy,;4?Z^H6UY\zSMb[%0*5
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 2d 9d e5 b4 14 45 51 ca a2 2a 00 01 09 00 b2 ab f8 a8 ca a2 a8 a6 58 14 b5 d8 91 62 57 23 fc a3 08 55 28 8a 6a 14 d5 34 94 a2 a8 86 4e 28 aa 45 51 7c 2e 8a bf d2 12 7b d0 a2 13 8a e2 0f a8 96 b2 50 43 67 41 d3 50 8a a2 8a 1d a1 28 ab 50 74 c4 42 2d 3a 8a 32 15 45 d1 11 8b aa 2b f9 2b aa a1 28 8a ba 24 97 b0 e2 ab dd 2d b9 41 b5 25 ba 8e 5a 01 76 4b 6e 78 d4 2a 9c 92 42 25 a7 b4 ad 96 75 35 ac 08 b5 95 ba 9d 55 2d 6a 19 72 80 59 26 6c 40 ad c2 15 69 51 6a 25 8b 92 6b 61 11 be a2 5d 14 a5 ac 2d 59 52 4d 6b 6a 2b d5 6a 99 9b d8 16 1f b5 5d b8 72 f5 5b 62 b7 1b 55 95 75 2a d9 a2 c8 55 72 15 51 95 75 12 5b 53 ea 6a 6a 8b b2 d6 26 57 8a c2 a5 4e 92 1d 44 ae c2 96 d0 5d 97 ba a5 a1 3a d9 2e b6 28 be ed c2 95 7a 84 52 77 05 14 97 6a 17 a8 20 d5 d0 51 55 dd 68 5d Data Ascii: -EQXbW#U(j4N(EQ\|.{PCgAP(PtB-:2E++($-A%ZvKnxB%u5U-jrY&l@iQj%ka]-YRMkj+j]r[bUu*UrQu[Sjj&WND]:.(zRwj QUh]
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 46 6d 56 c9 fb d4 55 69 9d 24 27 56 db 2a 79 0b db 2c d8 b7 a2 2d ba e6 28 79 43 ae 2d f2 45 96 71 e9 aa 41 17 24 eb a1 2e 9d 6e ba 87 9d 6c 5e 33 c2 ee b1 4a b9 66 3d 5c 97 8e 1a 4d 77 57 a0 46 d6 ba 51 cb 71 d0 b0 92 a0 c2 4e 50 2a 94 31 95 4e b1 86 ca 89 1c 4b 37 9b 5d a4 d0 47 94 44 d1 54 27 5b 9c 38 ba 0f b8 4c 56 d6 a3 ba 10 8d c6 76 0d 51 94 c1 0d c8 51 68 ac 8a 94 eb 51 15 a2 28 54 1f 28 2a 72 c2 32 82 91 aa ff e3 a8 71 0a ef 71 2b 95 52 c3 6a 70 b9 00 3d 6a 17 a5 e2 3e dd 4a c9 20 3b 03 9d 0a ed 9e 50 aa 91 2d d2 34 64 23 6b 84 b6 24 2d d3 d0 a5 6e a9 8a 22 17 75 81 52 52 db 91 56 4b 2e cd 16 7f fd eb 47 ed 9f d5 ae d5 6a 99 16 69 2d d6 76 40 b5 a3 5a d2 2a b5 2d 54 28 72 83 35 50 db 31 5b 14 45 91 15 69 78 d4 22 5b 84 6a c9 16 d9 2a 4d 3f 6b a5 Data Ascii: FmVUi$'Vy,-(yC-EqA$.nl^3Jf=\MwWFQqNP1NK7]GDT'[8LVvQQhQ(T(r2qq+Rjp=j>J ;P-4d#k$-n"uRRVK.Gji-v@Z-T(r5P1[Eix"[j*M?k
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 6e 23 70 81 f3 e1 0e 41 d1 64 15 e8 66 53 cb 94 2e 9f e5 7a b4 9a 0a 74 c3 32 0c 7c 2b 59 da da 50 72 87 34 44 df 41 d6 52 b2 35 b9 48 83 86 2d 69 89 76 6a ba ed 2c eb 12 6e cc 5a 4d 4e a5 36 96 b9 e3 76 b1 f1 ad d9 9a a1 d0 91 4e 58 a4 ad 92 6b 14 b5 52 27 54 ab 65 5d 67 b6 1a 72 2d ed 6e 84 6a c9 2d 6b 8b 8e 76 8d 2c 54 6d 49 ae 01 1f c5 bb 49 56 4d db 25 dc 49 ca 46 9d 44 2b 71 6e 3e 5c 73 ab bd 4c 4e ac 66 99 bc 25 9b 36 72 da b4 45 e4 6e b1 53 64 6b 09 a7 64 e9 26 27 e1 04 ab b5 52 97 61 b5 8b 3a 2e ba a2 2b bb e6 bd 58 74 ee 4d fe 44 ee 8a d0 ab a7 de 6c 36 55 b6 df 22 db 45 f2 0f e7 a0 db fc 29 bc 69 b6 76 c8 af a8 0b e2 fb 56 6a 01 de 29 ed 58 a9 55 b6 b7 54 43 35 a7 92 95 a8 9b b1 75 b5 6e 77 a6 9d 15 95 a2 8e 9b 5a 81 6e 67 b8 92 82 17 bd 13 21 Data Ascii: n#pAdfS.zt2\|+YPr4DAR5H-ivj,nZMN6vNXkR'Te]gr-nj-kv,TmIIVM%IFD+qn>\sLNf%6rEnSdkd&'Ra:.+XtMDl6U"E)ivVj)XUTC5unwZng!
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 85 6f c9 e2 ce f6 6d c3 1d c5 2f 96 31 8a 4a ab cd ac 2b 5c 14 ed 4b 72 fe 49 1f 95 bc db a4 d1 c5 1d 5f 5d 6f ce f7 d5 cb d7 47 f3 94 1d 2a 40 b1 1c 2a b1 c0 18 ad d4 11 61 61 d6 f6 85 fc e9 67 3f 64 0a 00 05 a1 84 41 80 c0 20 8c 3e 00 aa aa 12 a9 62 b7 39 de 22 51 75 ee 40 a1 51 54 28 05 db 0f 5f fe d5 47 6b a3 aa 50 32 81 c5 4e b0 00 68 30 4c 9c c2 00 54 19 9d 25 a3 94 94 c0 47 8d 13 28 90 5a 0d 7f f6 c9 0e ce f6 ed 92 13 45 5e a6 4e a9 5a 19 fb 22 0b 84 6f 4d 4e a7 f8 be 33 ed 35 6a a9 d2 de 1a ae dc e4 9d 8f 7d 2d e9 1f ce f6 96 55 29 de eb 26 b7 2f d5 df 57 0f a7 cc b5 ba 69 bf 4c ae 8d d2 8e d5 12 22 51 53 ad be a2 bb ec 8c fd c3 5c d1 91 3f 1e 36 ac fa f6 6e 74 25 1f fc 74 2d da 90 13 8b fc f2 77 7f 95 73 ca 78 18 87 d2 b1 f8 16 a1 f7 43 dd 0e ba Data Ascii: om/1J+\KrI_]oG@aag?dA >b9"Qu@QT(_GkP2Nh0LT%G(ZE^NZ"oMN35j}-U)&/WiL"QS\?6nt%t-wsxC
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: c6 17 fc 82 9a e7 6f f8 99 af fd 3d ff f9 73 fe e9 96 df fe e2 e7 ff 7f e5 de ad 7f aa 14 49 1b 0e 2d 05 8a 2c cb c4 aa 51 11 29 4c e8 7a d3 e9 bc f1 ee d7 d7 5f c2 57 3e fd 52 48 30 8a 48 a4 2b 81 a8 af 9a 92 00 e9 ee cf aa 32 3e c3 79 26 15 1a 40 b2 6a 00 02 c1 98 a2 4b 25 c3 b9 14 7c 39 5e 71 5a a7 ce 08 88 1a 5d 55 40 90 a8 82 42 39 41 41 40 dd 04 00 be 1a 6f 7d 06 75 05 85 31 63 cc 9b 08 95 59 9a 59 2c 9c ec d4 a2 93 6c 11 f3 65 38 10 09 69 4d 31 55 89 b6 59 e6 9a 68 6f a6 bd 65 d5 15 d8 35 8a 8c 53 37 f5 c7 68 7b 74 fb f7 32 ed b7 6b 6e a7 9b fc 07 b9 d5 b1 fe 69 ea 9b a5 85 d1 76 47 12 9b 2c c9 bd 13 66 c9 54 76 19 dd 95 b5 ed 0c bf a4 28 94 ee ba 0b 9e fd a3 cf bf f2 99 eb e6 eb 6f e2 67 fe c1 af 3e ef 1b 77 cd df fc df cf 6f 5a 23 3e f7 0b be f2 Data Ascii: o=sI-,Q)Lz_W>RH0H+2>y&@jK%\|9^qZ]U@B9AA@o}u1cYY,le8iM1UYhoe5S7h{t2knivG,fTv(og>woZ#>
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 22 01 6a c2 28 2c 42 b8 69 4a 08 30 b5 42 95 10 6a 96 19 a5 82 04 9a 25 22 14 09 40 51 41 81 18 55 ca 20 55 4a 18 62 d3 9c 6b 8f 2f 44 94 d2 2a 05 88 03 50 e0 34 18 64 d8 48 32 9a 28 f7 e0 51 d2 a2 49 c3 c5 d2 5e 98 82 a4 62 d4 ff 30 7e f8 88 b4 0b 4d ac 4c e4 a9 4b e9 4b d3 b6 1e 9a 69 86 a6 2d 4a 1a 1b de fa ed 68 7f 90 9b dd fa 7e 3b 73 fe 45 c7 f7 4f 93 6f e9 6e bd 33 7d ff 2c b5 42 48 77 ce 94 aa aa 2f 67 17 2a 2a 96 5d f7 25 9a 20 de 97 1f 1d 61 eb bb 43 50 53 05 0f 1a 03 5a 53 80 a7 46 95 94 79 4e b9 28 dd 63 0f 9a 2b b0 0c 5b e9 59 b1 ea 5a d4 dd ba 15 9c 00 c2 0a 62 59 85 35 24 88 a8 42 0d 91 a9 94 40 59 41 19 0b 4d 20 88 12 82 52 53 f4 40 04 59 e7 8a 38 14 9c 13 2f 84 05 20 53 b1 12 ac 12 02 35 4e 53 70 42 20 e0 24 c2 c2 1a 08 14 56 d6 9f dc 62 Data Ascii: "j(,BiJ0Bj%"@QAU UJbk/DP4dH2(QI^b0~MLKKi-Jh~;sEOon3},BHw/g*]% aCPSZSFyN(c+[YZbY5$B@YAM RS@Y8/ S5NSpB $Vb
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 5c 6d 28 91 6c e2 1a f1 ac 89 84 a8 f3 23 e4 96 89 1a 31 5a ba 89 16 97 ae a1 32 29 d8 4e 2a 09 32 3a 0b f9 4c c1 9e ed f9 16 ab 21 4e 25 c2 b6 da 74 86 38 93 66 74 46 96 59 1e 6b 12 2a 7a 7c 59 92 8a 60 2d d1 42 0c 86 58 01 db 28 61 51 99 3a 94 ca aa 50 a1 4c 4e e1 7b 94 14 89 fb 14 dd 18 3c 6e 6a b7 01 73 4b c3 7d 88 8b 83 c8 c8 50 3e 26 89 5a 34 04 5e 16 5b de 69 6e fd e5 b7 08 0f b4 4d ec 9a 21 4d b2 8f 50 d4 f4 9d 46 b6 d1 92 8b 76 3b ac 50 bc 37 0f 4e 05 61 8b b0 57 25 1d 4e 98 24 0b a9 b2 cb 77 71 df 92 ce ba 9d 54 76 52 ac 34 f1 02 16 82 d2 04 7a b2 f4 fd 98 2c 4d 96 74 bc 2b 6b c9 92 e0 22 76 42 96 40 52 a9 b2 cc 70 1b a9 f8 fe d6 93 bf a1 6e dd a5 76 17 ee a2 83 13 7b 11 15 2a 21 db 32 6f de a5 65 6a 29 b7 e2 96 1d 47 bb 9b 84 51 32 b8 b6 65 1c Data Ascii: \m(l#1Z2)N2:L!N%t8ftFYkz\|Y`-BX(aQ:PLN{<njsK}P>&Z4^[inM!MPFv;P7NaW%N$wqTvR4z,Mt+k"vB@Rpnv{*!2oej)GQ2e
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a5 10 4c f7 d4 29 90 4c 5a 74 96 40 c8 56 5d 23 c2 47 cd d8 5e 1e 5a 43 1a e4 56 66 d2 dd b4 26 34 f3 54 f9 9f bb 2b 6d 98 36 ba 7c 40 43 66 69 2b f7 11 71 64 21 90 44 32 da fa e4 56 e2 70 16 c5 a8 e3 68 9c e0 c3 28 ed 51 f9 49 09 82 2d 67 c6 90 d1 66 cc 6a 25 68 6c 15 ab 43 a7 9d 98 8d 93 6a 70 f3 32 57 5a b6 c2 a5 70 3b 6d 29 2d 2b db 33 72 9a 15 66 84 db 4a 90 c9 42 e6 26 de 28 01 57 ca d6 30 aa 2a 65 e9 50 d5 c7 0e 77 d1 69 37 4a 07 89 ce 6c 16 ad 82 3e eb a2 f4 2e 36 4a 32 a5 09 38 54 31 d7 3d 14 bb 7e 31 24 4c a0 cd 51 17 16 a8 ea b1 75 6a 15 27 19 43 a5 2a c8 28 e4 16 4f 4e 25 af 48 b5 36 f9 96 5c f1 97 7a 8b 19 c0 32 3d 92 7d d0 4e 16 de df df f0 a5 e1 1b 4d d2 5b b5 3c 29 d1 61 7c 5b 45 be e4 3b 50 65 b1 49 3a b8 ea 4a c7 74 43 85 0a 9c b1 c8 48 Data Ascii: L)LZt@V]#G^ZCVf&4T+m6\|@Cfi+qd!D2Vph(QI-gfj%hlCjp2WZp;m)-+3rfJB&(W0ePwi7Jl>.6J28T1=~1$LQuj'C(ON%H6\z2=}NM[<)a\|[E;PeI:JtCH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49808	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1099	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2840 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:01:12 GMT Expires: Fri, 26 Apr 2024 10:01:12 GMT Cache-Control: public, max-age=86400, no-transform Age: 10384 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 10 0b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c7 0a 00 00 2f 3f c0 0f 00 4d 28 6e db 36 82 94 f4 e5 74 ff 81 af 19 22 fa 3f 01 7c ae a0 60 e2 12 b2 e7 62 eb 0c 74 0b 75 90 2a de 0b b7 b5 6d 2b d1 5e 44 84 54 40 44 ff 45 b9 eb b8 fb d4 c0 36 92 24 27 fd c2 a4 30 bf 30 2f ff e8 d0 1a 8a 6d 23 49 8a ea 33 f9 fc 23 62 66 36 d9 e8 ff 04 e0 cf 5a 38 8a ee bf 18 00 39 de 33 6c f3 6a 4c 11 1b e0 ac 98 ce 7b 05 67 25 3a 20 57 25 ad da cf 95 ee d7 57 02 50 ee 57 24 6b 55 7d ad 0c 15 00 10 04 6b 65 ac 8c 3e be 1b 2c 6d db 76 4c 92 74 dd ef f7 85 13 55 d5 63 db b6 6d ef fa 98 bd f1 07 66 69 db f6 cc ca b6 6d 97 6d 27 23 11 11 df 7b 2f 32 aa fa 8b 58 f6 ea 09 0f b4 6d 9b b6 6d db 56 cc b5 cd e1 31 96 6d db b6 ad Data Ascii: RIFFWEBPVP8X??VP8L/?M(n6t"?\|`btu*m+^DT@DE6$'00/m#I3#bf6Z893ljL{g%: W%WPW$kU}ke>,mvLtUcmfimm'#{/2XmmV1m
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 70 d6 3a 5b 50 00 28 85 84 82 cb 98 21 73 b5 14 33 34 62 18 82 03 84 69 66 25 28 13 41 8a dc 50 59 0c 4b 25 bb f2 f8 bf 57 ef 73 9a 97 98 c0 5f df d7 77 4e 22 42 2d 9a 89 5c 79 ae 63 4d ae 85 21 97 b2 87 f9 f8 16 d8 5d 1e 20 03 04 1c 41 10 43 94 20 a0 b2 e0 86 9a dd 41 90 ea 56 8b d3 fe 5b fe 00 f5 5d 5a 41 ff e3 45 13 48 74 32 1d 15 ff 1a e2 d0 d2 fc 96 e5 76 28 12 85 24 e4 a8 4a ed c7 74 db 87 e6 e8 fe e5 66 00 11 21 40 62 47 e1 40 83 20 06 30 69 4e 66 f6 44 0e 3f 54 87 1b a8 0b fe ef f3 66 8d 73 d5 1c 62 69 fa 9f 6f ed e8 1b 4b 65 6e 99 ee 39 2a 05 a7 44 82 82 62 b1 9b 49 cb e1 c4 70 d6 e7 9c f9 90 f6 4f 43 88 80 02 ec 08 10 07 24 d0 ec 30 73 0c 65 a6 ec b2 8e f6 ea a7 6a 5d 97 56 52 fd a3 74 06 7e 77 c8 eb 5f 3b e4 d9 5b 45 25 cd 66 05 15 ac a8 60 62 Data Ascii: p:[P(!s34bif%(APYK%Ws_wN"B-\ycM!] AC AV[]ZAEHt2v($Jtf!@bG@ 0iNfD?TfsbioKen9*DbIpOC$0sej]VRt~w_;[E%f`b
2024-04-25 12:54:16 UTC	864	IN	Data Raw: ef 76 7c 87 c7 9f d9 01 a8 7b 7e 6e 7d ff 7b 8e d5 20 53 b8 b4 43 58 e1 ff 8d b9 d7 0a 89 00 cd b9 f8 dd 9b f4 85 d7 7a 4c af 71 f7 3e ef 70 c2 fa 16 8f 3d bf f3 b3 07 47 ff a0 5a a5 bc b5 e4 61 d0 f8 9c 93 4e 6a ed 39 ec fa f8 37 8b c8 00 b5 9b ff bc e2 f7 93 5f 1e 8b 02 44 84 45 28 ac d0 7e a5 d7 45 22 8b 30 dd 6a 4e ef 7f d4 c1 97 5e ff e3 8e 08 17 5b f3 d3 e6 ce 69 b0 c8 70 44 1e 09 a4 46 6b 9c ce 14 dd 69 12 c0 04 97 eb ef 6f 3e f7 ef ee 42 75 82 02 44 84 c2 16 f6 26 ba 9d 4c 20 22 ee b1 0b 1f 7f c4 de 5b 9f fc f9 eb 5f 74 89 02 98 de 6d d3 5f 96 ef 55 dd 4c 21 c6 16 f4 97 d2 5c 0b 61 07 c5 ed 76 d1 1f 5e 32 fd 5e ff 93 1f dc fd c8 0b 4e bd 29 57 6b b8 68 a8 2f 56 fd f7 bb 2f 4c 9d c5 0a 22 2c 22 4a fc 3b ec 1e 0b 43 0c 76 b6 77 81 45 9d 9d f7 40 79 Data Ascii: v\|{~n}{ SCXzLq>p=GZaNj97_DE(~E"0jN^[ipDFkio>BuD&L "[_tm_UL!\av^2^N)Wkh/V/L","J;CvwE@y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49807	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	531	OUT	GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 37564 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5667 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 b4 92 00 00 57 45 42 50 56 50 38 4c a8 92 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 46 4e 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a ba bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd 54 b7 ea ed db 02 30 8e 5d 75 b5 54 92 14 92 b4 e9 c5 80 00 41 2c d5 d5 5d fd 6f 75 37 f7 cb fb be 02 ef 12 6c e0 c5 06 ed b8 98 e2 da ca cc 5a 64 03 26 40 91 91 8a f0 ca f9 20 18 17 23 22 d2 11 8a 11 22 62 64 3a 73 49 6c 5b b6 a4 21 49 cb d7 d6 18 01 91 0c c6 c8 88 a8 af f6 4b 40 a4 22 9e 96 04 f3 04 06 ba 25 81 38 2f 81 c5 bd 0e 36 60 40 27 69 c7 9c cc 03 58 5a 64 db 87 08 4b 5c 18 25 62 31 eb 41 12 29 71 3f 81 27 a7 7f 9f 4e dd 55 c9 00 be 31 92 6c 8e 02 f4 fb 3d 92 e4 2d 30 e7 44 5f ed 80 69 b0 01 7d 36 b6 0d 0c c0 c6 9f 1f 1b 16 02 30 b6 56 9b 00 24 90 70 f7 57 Data Ascii: RIFFWEBPVP8L/IM8lFFNn/Y_<BD'*nzwT0]uTA,]ou7lZd&@ #""bd:sIl[!IK@"%8/6`@'iXZdK\%b1A)q?'NU1l=-0D_i}60V$pW
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 71 75 bd f4 80 b3 32 b1 5e 6b 07 81 c0 80 8a ea a8 62 d9 5c 39 fb 9a 74 7e 98 e8 f3 8e 1f 3b 66 00 1c 80 fb 9b cb b5 9f f6 89 37 04 06 40 6d 4c ae 96 7e e8 e4 ab cd 62 fd 9d 0e b0 38 59 1c e9 eb a2 00 56 9c 6c c9 d6 27 02 81 00 40 c3 7a 00 00 e6 f5 56 df 71 87 23 eb 6e f1 07 3a 69 de 92 de a7 ad 21 1c 6f d6 7e 04 00 20 03 20 03 db d1 de 8c 6a 3f 1c 03 c0 e2 48 e6 9c b2 fb 1b dd 6e 3b 00 10 98 ed c1 ff 0c 4c 6e 65 64 40 e6 6b 83 7d 38 29 b3 31 60 98 01 a0 62 4f fe a7 e3 0c d8 35 60 80 d8 c8 80 0c b0 b2 19 bb dd 04 32 32 00 12 b0 9d fb 2e c8 00 80 be ba d9 d1 aa 07 40 06 8e 1b 60 cb e2 82 74 01 1c 75 40 c7 de b1 0c 00 78 3a 56 f6 fa 19 ca 0e 00 a8 9c 00 57 00 d4 89 b6 1c 83 32 82 0c f8 e2 88 6b 77 e1 ea d8 d9 1c 4a a5 0e 7d 53 3a 7c 91 00 8a 34 2f 57 20 a5 Data Ascii: qu2^kb\9t~;f7@mL~b8YVl'@zVq#n:i!o~ j?Hn;Lned@k}8)1`bO5`22.@`tu@x:VW2kwJ}S:\|4/W
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f7 29 2a 25 52 14 25 05 4a 2a a5 80 a2 a4 d4 90 a2 24 8a a2 c3 28 ba 45 09 a2 4f 4a d4 90 a2 e8 26 29 09 10 91 52 23 52 2a a5 80 a2 44 34 95 a2 90 48 51 53 11 91 a8 29 0a 15 14 45 4d 45 94 58 e4 5b 04 29 45 51 94 96 ab 65 0d 3a 71 bd 73 75 89 b8 91 69 53 06 49 ae 83 ba 74 29 83 75 82 22 c5 75 82 9b 24 a4 29 0d 2a 65 e2 74 23 61 04 dd 54 83 a2 d3 8d 4c 93 94 c1 6a 54 89 02 03 1a 01 6a 67 8d 90 4e 84 6b 81 02 64 82 46 4e 2a a9 4c 9c 24 a1 ba ec 26 3a ca 34 ab 61 72 46 76 dd 8a 10 c8 89 6b a2 a8 1a 57 63 94 40 4e d9 8d 03 68 2a 13 85 8c ab 6a 40 91 39 a7 5c b3 84 aa b1 26 48 ad cd e9 e0 44 0c 4d b3 1b 81 ce 34 ab 81 85 70 7a 2c 61 73 d2 2c c5 42 a1 94 05 21 56 8c 39 19 24 35 4b 69 28 1a 5b 08 1a cc 56 1a 24 4c b1 f5 56 d2 62 dc 66 94 40 44 81 05 35 05 8c 5a Data Ascii: )%R%J$(EOJ&)R#RD4HQS)EMEX[)EQe:qsuiSIt)u"u$)et#aTLjTjgNkdFNL$&:4arFvkWc@Nhj@9\&HDM4pz,as,B!V9$5Ki([V$LVbf@D5Z
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 1a c9 bd 31 13 b5 d4 c1 b5 4b d5 6e 84 5e a1 51 99 5b 28 61 16 f2 2c c5 dc b0 6a 4b b3 bc e3 a9 85 b4 2d 17 80 a9 59 6a 73 53 8a 6a 3d 96 52 90 b1 22 61 b1 44 69 40 16 58 b3 2c 00 2b 2a 07 6e a0 29 05 96 61 11 ac 76 34 03 e2 42 41 c6 54 b2 bc b3 21 16 76 49 e6 e5 f1 2c 62 96 29 ca cd 94 8c f1 92 95 04 0b 44 b9 60 80 59 04 cb 18 2b 5c 52 14 c3 b2 46 85 54 40 fc 97 29 65 20 df b2 01 1c 28 0d 25 86 91 c4 22 cd 38 b6 ab 0d 80 4a 68 56 49 0d ac b4 55 0a a4 d0 44 95 4a a9 a6 d0 38 95 ba 91 2b a1 52 6a 4e 07 82 a2 6a 41 4b 8a 22 67 9a 2a 49 50 2b 35 d1 2d b7 1c 65 6e 24 2d 49 12 2a 51 25 23 32 4d 52 d2 94 04 25 51 dc 44 44 8a aa 4b 2e 25 c5 cd a2 26 8a a2 a8 06 55 4a 97 32 42 13 95 92 a0 89 6a 12 a5 72 c8 00 c3 54 32 b8 92 44 69 67 8d e2 52 e3 c8 c4 c4 25 ea 1a Data Ascii: 1Kn^Q[(a,jK-YjsSj=R"aDi@X,+n)av4BAT!vI,b)D`Y+\RFT@)e (%"8JhVIUDJ8+RjNjAK"gIP+5-en$-I*Q%#2MR%QDDK.%&UJ2BjrT2DigR%
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: c0 04 2b a6 84 84 14 96 25 a7 a4 46 de 94 71 81 28 99 04 4b 11 66 a2 04 39 8d 99 92 0a 0f 8a 2c 16 30 a8 32 cb c8 59 68 76 85 c4 48 ac 4b bd 54 c2 54 0d 96 5a ed 60 54 c1 7c 08 b3 18 2a 60 ac 59 ab 54 3a 03 1a a5 4b 27 5c bd 54 29 15 de 11 1a e7 a0 49 55 0b a5 44 69 82 12 84 3b a9 36 8d 90 96 d5 45 8d 8b 43 27 ce 14 a1 7a 71 8d 49 e2 16 45 26 2d 01 20 40 62 56 32 4b 24 0b ca 60 8d 1d 00 88 60 f6 06 24 12 c4 68 64 20 99 88 a2 7a b1 03 24 00 56 94 22 34 08 b0 97 80 58 02 b2 22 85 23 51 38 00 38 f0 45 9b 98 28 05 b2 97 49 1a 43 90 19 60 74 93 88 40 ac ae 4b ed d8 c5 6d 55 9d 22 a9 51 d5 0e 9a 4a a7 3a 5d 75 23 84 7a 67 77 a2 9a 8c ac 13 34 ca 0e 9d b2 4e c9 a9 92 aa 16 6b 32 a3 1c 33 8d 5a 34 53 d7 16 51 63 5f d5 83 aa c7 88 cd ca ae a9 a9 e0 dd 37 aa 69 06 Data Ascii: +%Fq(Kf9,02YhvHKTTZ`T\|*`YT:K'\T)IUDi;6EC'zqIE&- @bV2K$``$hd z$V"4X"#Q88E(IC`t@KmU"QJ:]u#zgw4Nk23Z4SQc_7i
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f7 e0 a9 67 bd 45 a9 8f d8 f8 ba c4 65 72 81 ac df 99 2b 3f f2 c7 47 fd e1 0b 6c ca 09 cf bd e6 bf 8b ff fd 88 2d af 3d 67 ee 7f b6 77 f3 f1 a0 6f ff db 9e 40 a6 7b e5 f1 21 73 8e 0f fb d3 33 de ff 4b fe 89 4c 2a 9b 69 06 40 55 16 ae 65 97 02 55 bb 64 92 46 4d a9 a6 94 44 e5 6e 14 97 28 ae 76 aa 71 2a ea 14 49 54 3a 71 54 e2 24 0a 1a a1 24 27 57 f0 79 a5 93 26 a5 36 74 01 52 7b d5 1a 94 f6 7a 4a 6f b9 da b1 52 4f aa ba 61 93 d3 ea bc 42 a9 a3 ea be 31 23 d6 5c 6f ab ec 52 cd 19 34 f6 82 24 91 c8 b8 82 07 96 5e f2 be ab f6 b9 5a 7c e2 d1 d6 fd 9f 7b c6 eb ce 1d f7 f0 cb 7e 71 ca 85 29 53 09 90 32 3d f0 78 42 79 df bd 20 2f 6d 5a fe e2 72 c9 d9 0f ed fb d1 77 22 ca 14 b5 cd ec 29 d7 a8 7b ef ee a7 ae fc c8 77 3f f0 9c 03 d7 f8 bd 97 f4 d8 43 79 ff b1 fc f5 Data Ascii: gEer+?Gl-=gwo@{!s3KLi@UeUdFMDn(vqIT:qT$$'Wy&6tR{zJoROaB1#\oR4$^Z\|{~q)S2=xBy /mZrw"){w?Cy
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 4a c9 aa ac a2 ad 72 59 8e 59 85 aa 2c b3 3a 65 c5 42 76 64 39 3b 39 76 68 95 62 59 06 87 96 aa dc 74 8b a5 db 06 9b 49 d7 59 ae a7 d2 9b 9a ad dc b7 7c ba 84 ee 3d b5 ba d7 45 93 59 d5 fd 06 d7 68 87 fb a3 ca 09 4b 77 4f 96 de 26 6f 6e 69 f0 05 1d 30 5d 56 d1 8e 17 a4 c0 71 92 46 9e 18 ec ad 14 4d 38 b1 44 14 d3 1a 31 58 53 e4 76 92 06 81 54 c9 32 3a 5a 21 a8 ac 88 70 a2 84 98 25 91 15 4a 35 45 be e5 6c 51 58 88 53 87 1a 52 da 20 96 bd 64 a8 44 1d 6a 64 16 20 20 0b 91 9c 4a 06 58 66 29 70 25 96 90 81 09 4b 81 2b 0e 01 c2 70 a4 6d 90 a3 59 98 da c8 fa b8 62 50 54 bf 54 8e e4 54 cf ae dc 23 55 a7 77 ca af 9c d3 58 a9 87 72 2f 51 f2 f6 ad f3 34 d2 8c 74 f7 09 bc 51 5a 4f dc 7d 33 9d ca d8 0d 96 5c 49 99 6d 11 d5 1a 37 2c 32 cc c8 e3 5d 53 b0 8a b8 5e d7 0a Data Ascii: JrYY,:eBvd9;9vhbYtIY\|=EYhKwO&oni0]VqFM8D1XSvT2:Z!p%J5ElQXSR dDjd JXf)p%K+pmYbPTTT#UwXr/Q4tQZO}3\Im7,2]S^
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: c8 e6 38 87 64 2c 9d c9 79 1a 2c b6 fc e7 6f 2f eb 19 db 5d 36 be 7d e1 7f 5e 7f d1 dd 2f fe c9 3d 5f fe f8 b6 cd a5 0f ac 7e f3 97 97 5e fb d4 76 9d 78 6e d7 f6 8d 1b cf 9c f5 d3 47 be fd c4 3b ef be df ca 60 74 e1 8d d3 6f ee 79 ee 92 fb 5e fc ee 0b 8e e0 01 d7 6d 65 7e f1 83 d7 5e 2f 5d bb ee 91 f7 fe f7 df 3f 3d e7 05 51 e8 db ee f1 99 1f ff cb 23 fe 73 73 c5 f6 a1 90 e7 6f bf bd 76 cf bf 39 fa 93 f7 1f f5 c9 a7 a5 91 db 33 77 3e 75 f9 9f 8f 3e 72 af 3b 10 62 ca b8 de 8b 39 ea bb f7 1f ff 2d 5e d9 7e 1d 99 7d 58 d6 ed d2 19 ff fb a6 63 fe f3 ad e7 7d f7 d8 55 a5 8c 65 cf fb e8 fb bf f3 98 5b 3f ef 86 7f 2b 67 3a e7 9a 93 ee c1 11 61 79 e5 85 f5 fd 8f 96 ca e6 53 6e 7a e5 6d ff 7c c9 71 7f 7b fd a5 37 be fe 99 0d cf 3a f9 2f af 3d f3 13 2f e5 aa 4c c6 Data Ascii: 8d,y,o/]6}^/=_~^vxnG;`toy^me~^/]?=Q#ssov93w>u>r;b9-^~}Xc}Ue[?+g:aySnzm\|q{7:/=/L
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: d8 5d ce bb 65 d7 6e 28 59 17 d5 65 5d 52 96 1c 73 79 e3 52 69 d4 c1 d5 28 ba 1d ad b3 9d 13 d7 56 b5 c1 8d 03 aa 97 dd 71 55 10 61 d1 53 23 52 a6 65 4f 54 e4 f1 df fc 31 5f 0c 2d ff ff 7f 91 8c ae a9 2f 24 22 72 ef e4 e7 00 91 f2 e1 5f 1f 3d e7 52 d6 fe f3 ff 76 7e cb eb bf 7b 6c 0d 8e f8 f4 4d cc 3d f6 85 6b 6f ff 8f af 7c f6 4d 5f f8 c3 9f 7e f8 af 9f 47 5f 76 3e f7 87 fd 7f e5 e3 6f 3e 5f ff fb fe fe 99 3f f5 b5 ef 9f f0 c4 49 f7 9d df e5 54 8d 0e 7a fd 5d 9f 3c e7 54 8e bd a5 7e 79 96 1d 72 d1 b6 0c 3b b3 16 f7 0d 6b fb d1 75 77 51 88 4f 65 c2 72 e7 bd 2f 7f ed aa 9d 69 47 c9 0d a6 6d af 7c 67 ff 87 5f de f8 b5 b7 ff ea e7 16 1e f3 7b 2b 6e ff 92 a3 ce 7e 79 7b d7 e5 87 1f fa 86 a5 97 7c df f4 43 76 87 ef f8 d0 f1 17 f9 cd 67 ef b8 75 ed 66 c1 91 ab Data Ascii: ]en(Ye]RsyRi(VqUaS#ReOT1_-/$"r_=Rv~{lM=ko\|M_~G_v>o>_?ITz]<T~yr;kuwQOer/iGm\|g_{+n~y{\|Cvguf
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 89 c9 8e 1b 9b b8 9a c5 a2 a4 dd bf 10 2c 2f 9d 35 e3 49 13 3b b6 e3 6b cc 5b b6 c2 68 f7 97 3b b6 64 5b 54 ed b6 34 a1 46 cb a5 5c 8a 59 de c4 95 b2 56 37 aa a8 96 28 b4 22 ad 1d 58 35 b2 b4 01 1a 86 4c 0d 85 42 a9 cc 4e 49 52 92 08 a1 00 20 93 a4 3c 02 ce 1c 78 9c 4a c9 f0 88 50 2e 0f 5a 8a 94 cc 63 84 a1 97 47 82 cd da 49 a5 10 58 c5 44 cb ce 5b 01 ab 14 b0 43 00 10 87 04 c0 13 23 a7 c2 20 2f 0b 28 c9 ba 02 24 04 12 e1 44 0a 85 47 4a 82 c7 49 81 6c e9 50 c5 84 04 bb c4 81 87 01 88 1d b8 e0 f2 a0 15 4f 89 14 10 0b 46 62 49 81 20 27 42 d9 91 40 62 f0 8a a1 83 37 e5 d6 29 5a 29 37 95 52 d5 aa 6b 52 7f 54 50 19 14 e3 2d 3b 85 41 97 0e 5a 57 b3 aa e5 4a 25 ab 4e b1 db 15 74 9e 59 f5 2c a5 d3 53 ee 17 dd ba c9 ec fe 01 34 41 f5 99 e5 9d db b8 a9 1c 9a 27 70 Data Ascii: ,/5I;k[h;d[T4F\YV7("X5LBNIR <xJP.ZcGIXD[C# /($DGJIlPOFbI 'B@b7)Z)7RkRTP-;AZWJ%NtY,S4A'p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49811	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	527	OUT	GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34202 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:48 GMT Expires: Fri, 26 Apr 2024 11:19:48 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5668 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 92 85 00 00 57 45 42 50 56 50 38 4c 85 85 00 00 2f a5 c0 49 00 4d 40 8c 64 2b 6c 93 bb 8f 65 be 1e ee bf 60 90 26 25 44 f4 7f 02 ba bb e7 ac ee 9e 6f b7 9e 73 76 77 cf 39 ef 9e dd a7 3e f5 d6 a7 a9 76 b7 da b3 ed ee 7b f6 9c 0e 13 d5 24 e9 e3 9c dd 73 f6 fb b9 cd 7f e8 e6 65 c2 76 df b7 50 55 a8 17 24 c0 4d 32 54 80 2a e6 c3 92 73 12 88 63 0c 0f 05 79 ac 51 c3 2a d9 03 90 c4 37 52 1b 49 55 8d 9c 58 39 70 18 24 40 ad e0 8b 6f a2 7a 19 a8 cd aa f9 75 ff 23 72 dc ae 56 a1 48 c8 21 40 b7 de 43 4d 12 92 43 11 17 cb 3c fb 40 48 12 4c e2 41 e5 ef 8f e7 03 44 de 6f 55 71 59 58 4f 03 a9 c8 eb a5 ca 50 ed ee 59 6a eb 02 ae b1 12 48 f2 35 92 6c 73 9a f8 7a 11 54 47 40 73 ca ef 77 1d 46 f9 72 7d 3d 50 40 81 09 f1 73 52 17 7b f6 cf 8f 0d 78 22 89 47 a8 02 Data Ascii: RIFFWEBPVP8L/IM@d+le`&%Dosvw9>v{$sevPU$M2TscyQ7RIUX9p$@ozu#rVH!@CMC<@HLADoUqYXOPYjH5lszTG@swFr}=P@sR{x"G
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 0a 16 14 af f7 0b c5 e7 ea fd 98 01 47 e1 d3 7b 9f 3e 18 97 82 82 37 54 34 b7 82 b1 be 3b 04 02 83 1b 68 c3 ab 77 63 5e 8f c1 4d 01 40 c7 76 e2 c4 ea d8 51 3c dd 6d f3 76 e2 cd a9 a1 3a 17 4f 00 30 dc 4e c8 e3 6f de 1d fb 09 80 82 e6 74 84 d3 35 e0 21 0a 56 1f 8f 27 ff fe f3 e2 0c 67 61 c1 d2 00 50 01 50 fa 56 fa fe d6 f7 47 df 9d b9 de 58 20 ee 4e 42 07 ee d1 e6 11 3e 14 03 1f b0 03 76 34 9c b0 e1 c6 a7 27 79 da ef 91 9c bd 6b 00 d4 7d f7 7f 37 76 b9 c2 71 bc 08 ed c9 7d 17 a3 d2 0e 73 97 cb 09 f7 10 c0 d0 7b 34 90 f2 09 3d 00 a0 eb d6 ce 28 be f0 09 6d 68 68 c0 86 ed 04 db cc 87 16 b1 78 cd b8 d2 c6 70 19 c0 d2 87 16 cf 40 68 68 f1 bd 8d 61 1b 80 b3 2f df 05 d0 df 8d ca 15 48 4e b9 c9 36 31 a6 b2 4f ab 22 78 f8 b4 b6 4b 00 6c d7 e7 ee 07 7c d7 0c 9d 8e Data Ascii: G{>7T4;hwc^M@vQ<mv:O0Not5!V'gaPPVGX NB>v4'yk}7vq}s{4=(mhhxp@hha/HN61O"xKl\|
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 a6 74 a9 a6 33 2d 56 ae c1 d6 5d 29 8a a8 53 ce 94 4a 69 39 2d 4b 15 51 27 b6 31 84 5a 55 53 2a 6a ac d2 42 2a 39 d7 89 33 23 29 2d 33 05 ea da b9 ba 30 29 0e a6 b3 0d 48 d7 74 a6 85 96 24 57 2f 23 d9 b9 d2 19 95 81 a8 c8 a0 28 ae 34 ce 95 05 a2 b5 48 07 61 dc 92 44 87 66 57 8c 04 4e 65 d7 bb 42 c3 72 37 0b 4b c8 23 b5 85 a1 9c b0 47 58 11 96 89 90 64 e7 cc aa 91 ec a4 b8 62 86 25 65 cc c8 a1 24 a7 c7 a3 d1 c0 b8 92 3a 4a 92 73 da 59 08 67 b5 33 2a 16 cc 5a 04 76 aa b8 a2 77 76 08 27 7a 16 01 a9 1b ad 1a 10 64 95 4e 39 8a 24 f5 54 12 0a a9 2b 5a c0 88 4a cb a3 c2 29 b3 3c 23 84 e4 8a c6 52 74 14 a3 20 4c 18 85 a2 24 27 8d 72 b9 88 0e 20 8a 4e 55 09 42 a1 4c 50 25 0e 03 8e 62 14 85 08 47 85 d4 54 87 41 Data Ascii: XT\t3-V])SJi9-KQ'1ZUSjB93#)-30)Ht$W/#(4HaDfWNeBr7K#GXdb%e$:JsYg3*Zvwv'zdN9$T+ZJ)<#Rt L$'r NUBLP%bGTA
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 65 31 66 28 89 12 8a ff 72 aa 72 48 be e5 46 c8 85 8a 51 c1 62 09 69 29 9d e5 b2 bb ba 11 82 02 66 0a 75 c8 a4 5b 51 a1 04 a6 94 24 51 26 30 a6 a8 0d 4e 8a 24 ea 5c 5d 28 52 29 0d 6a 44 08 ae e9 94 54 0a 9a 64 4a 77 b9 cb a5 9a 3b 2a 5d 2a 95 22 29 25 35 50 d3 09 55 3a 55 0a 52 21 36 25 05 95 d2 91 25 22 36 43 a6 54 2a 95 32 52 12 1d d5 00 53 8a 2a 05 53 ca 54 48 72 51 23 34 9a a4 46 4e 2a a5 6a 33 43 2c 19 a3 a6 ac 58 4a ad 65 06 9c da 41 67 94 88 16 8c 98 b1 b1 58 8f 32 89 a9 35 d0 c4 94 d3 b0 31 d5 58 42 4d 94 44 19 a6 53 a6 b3 a8 e0 1c 81 3a 96 d2 cb 89 18 d5 51 31 12 a9 ec cc e9 98 88 52 6d 6c 8d 2a 75 28 8e d0 d4 f8 cc ee 50 4a 95 da 7d b6 21 35 6a 9f 69 64 aa 71 d0 12 ba 24 d5 38 da 28 04 89 74 28 75 92 d5 7d 44 a5 52 66 79 82 14 82 69 21 49 42 bd Data Ascii: e1f(rrHFQbi)fu[Q$Q&0N$\](R)jDTdJw;]")%5PU:UR!6%%"6CT2RSSTHrQ#4FNj3C,XJeAgX251XBMDS:Q1Rmlu(PJ}!5jidq$8(t(u}DRfyi!IB
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 25 69 8d e9 71 c2 04 9d 58 23 60 3a 17 6d 6c b1 4d e5 84 4a 86 ca 2e 98 a4 29 a7 55 1b 00 7a b3 9d 52 a6 06 73 0a 86 6c 70 62 4e 64 b1 94 ab 29 46 b3 54 c7 59 2d 75 61 56 9d 0d a5 8e 7d 95 af 94 5e 96 b4 b5 6a 67 32 89 bc 7d 4a 99 ce 82 37 cc 01 37 f9 ca ec 24 53 33 ca 47 aa 46 d2 f5 94 6b 10 3a a7 b0 63 21 16 d1 76 a1 44 95 9c 72 46 80 3a 65 e3 62 d9 7a aa 9d 65 85 80 8e ab 1a 09 dc 4c d1 82 20 9f b5 c7 92 54 ac 56 d5 41 4e 5d ef 8a 3d 90 96 2a 1e c1 10 60 ab 72 26 91 02 fa 4e 29 41 f0 55 d5 41 d5 76 ba 95 c7 94 54 44 7d ca ea a8 53 6d 2d 76 d0 d4 91 f9 46 49 a9 c8 b7 4a e7 4a a9 1e aa 36 2a 5f 00 11 00 51 d8 d9 81 d1 b1 ab 06 48 65 b9 0d 06 ac 20 0a 45 96 32 4b ba 64 f1 8c 99 b8 28 2a 11 26 a8 14 56 ed 10 72 44 a1 b8 b3 28 b5 51 81 49 38 17 04 a1 60 4e Data Ascii: %iqX#`:mlMJ.)UzRslpbNd)FTY-uaV}^jg2}J77$S3GFk:c!vDrF:ebzeL TVAN]=`r&N)AUAvTD}Sm-vFIJJ6_QHe E2Kd(*&VrD(QI8`N
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 0b 1b 36 5e 18 5d 00 54 85 2a 7a 0b 14 16 50 a9 b0 80 70 1d 83 af 6d f8 90 84 29 5c 00 9f fd dc 8d bf 3f 72 14 b0 c8 78 8b 44 c5 87 cc 24 02 03 50 65 92 b8 d8 88 04 01 c0 b9 8c 9b b3 8c 00 11 76 e2 08 83 2a 28 23 0a af be 67 3d d2 b7 b7 2e 01 6f 88 7a 8a 62 a1 ec 01 06 61 9e aa 9c 0e e9 7a a6 da 36 d5 10 b9 ed 2a 5a 6c b0 e7 b2 c7 9c dc c9 d1 76 51 11 d2 d9 ae d2 3d 57 6e 8f 16 a7 48 5b 5c b5 0f 95 b6 92 d3 64 c9 39 60 46 3a f7 4b 6f fb 76 b4 b5 8c 48 20 c5 ca 16 53 8e 06 31 a5 66 bf 72 f3 16 06 b5 68 1a 5d 34 a8 05 ea 03 ab 34 6c 63 0d 5b 37 12 4c ed 6a f7 f9 21 23 62 03 8e 6a 41 60 5c 14 11 2e b4 85 81 49 0a 39 e4 22 a6 30 a5 ae a8 d5 bd 47 e6 d6 5d c9 84 49 2c 43 34 62 04 98 c4 ca b8 8b 3d 18 62 0a c5 a6 dd 92 8e 63 54 ee 9a f4 05 e7 be 11 e4 ec ee ec Data Ascii: 6^]TzPpm)\?rxD$Pev(#g=.ozbaz6*ZlvQ=WnH[\d9`F:KovH S1frh]44lc[7Lj!#bjA`\.I9"0G]I,C4b=bcT
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 67 e4 1d ef 78 f5 b6 cb ae 4b c7 f6 12 09 31 5b ef d9 91 6f 3e b0 66 8a 63 5b a8 c7 5b c9 94 bb 2d b2 98 9a 8b 61 8d a7 28 f5 53 62 73 31 9e 9b d9 6a 63 bc ab 99 57 21 25 2a e7 00 61 a4 eb 14 d5 a5 ce 76 30 53 8a 4e a8 34 8b a9 18 c9 b8 04 83 18 1a e2 8f 3e f2 8f 82 8a c1 c4 bb 9e 68 46 d5 88 c7 af 7f f5 ed 1f 3f f9 bd d8 bc 6b d9 8f 3e fb a1 97 bb e7 ce aa d3 e6 7d cf 3b 17 02 20 25 00 b0 b2 20 01 90 b2 26 ed 13 40 4d 5c bf 5c 75 86 3e 62 25 d5 71 d8 b1 e3 39 64 5d e2 72 38 4f 4e 4a 70 de 73 a0 57 eb 43 f7 3f 7b 76 74 e7 83 b7 cf 3d 8f 87 7f f2 d5 81 ed 9d 3f 65 79 0c ca 93 aa af 10 4a dd f7 7c ea aa 2a 8a 02 d5 51 50 34 1d 9b ab 74 95 a6 3a 78 f5 c5 68 e2 c3 b8 0a 50 40 d1 e0 eb 00 f4 45 cf e1 eb 8c 53 5a af df a5 10 90 20 83 4f e2 fa b9 0d 15 08 a3 ce Data Ascii: gxK1[o>fc[[-a(Sbs1jcW!%av0SN4>hF?k>}; % &@M\\u>b%q9d]r8ONJpsWC?{vt=?eyJ\|QP4t:xhP@ESZ O
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 3c 89 1b 99 25 75 83 84 93 49 56 8a a9 20 45 08 5c 56 88 a3 5e 41 92 ac cf 4c ba 38 93 a0 26 2e ad 86 a6 4a 6c 57 cf db fd f1 de eb ef ff e6 a3 25 b3 ef 9f 3f f3 48 55 63 63 41 c1 05 11 f1 94 d4 86 b5 5c 11 9a 00 74 a7 65 c8 e7 45 a1 07 73 59 c3 56 89 db 88 b3 84 05 30 a6 9a 87 94 e3 04 28 e8 68 3a b6 4a 82 1c b0 3c b1 50 a3 a9 34 11 32 9e 11 d7 ea 39 de fc 18 ff f5 83 c7 5c e4 85 17 97 a5 ee 21 fb 38 67 7e 48 37 d1 46 8b 09 83 aa cd ba ab 78 4a e7 88 a8 86 ee 2a 45 52 55 bd b2 43 6e 15 c8 b2 55 a5 c4 d4 14 cf ba 5d 58 65 ed e7 ee c6 2d 45 59 2f 7b 96 25 57 6b cd b3 2e 6d ac d0 af 17 db 37 99 14 8a 1b b5 44 97 94 55 19 ac bb bb c0 28 40 59 57 c9 6e bb 10 c0 87 d6 99 98 10 4d 8c 69 20 00 d6 d0 11 08 d4 e4 32 c8 31 86 01 e4 72 83 04 08 92 aa 64 ca 06 b9 2c Data Ascii: <%uIV E\V^AL8&.JlW%?HUccA\teEsYV0(h:J<P429\!8g~H7FxJ*ERUCnU]Xe-EY/{%Wk.m7DU(@YWnMi 21rd,
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: fe f8 55 5d ba 78 65 d9 e2 5a de 7b 51 dd ad 1b 8b 8a 52 cf ae f8 2a 74 f6 b6 f2 ee a8 d6 ec aa fd 85 ae 5d 52 f2 51 b5 6f a9 52 ed 2a bf f1 76 2c 82 77 67 0e 1a 9d 8f 96 76 87 5a 51 dd 7d 84 b5 ec a8 ad d2 31 56 6e cf 32 8f b1 0d 23 5f 5f 57 69 62 c9 17 b2 33 8c fd 02 a7 3b 2d f9 c6 f9 d2 d6 74 c8 5b e4 64 bc e4 03 ed 61 32 f5 45 79 d3 7e 27 4d ea 0d 7c 98 6b ea 89 6f 9f bb 69 a7 1d 68 bf 4c 1d 6b c6 3e 1d f5 d5 30 3a e5 bc 3b a5 d5 a6 f6 2b 9d d3 1d 4b f7 91 f3 65 ea 30 9d f3 63 a4 25 94 37 ce 23 55 ea dd e7 bc 19 3b e9 a5 eb a7 73 3e 57 db e4 ad aa 5f eb 4c ac 75 db 32 aa a5 9c 3d 8b b0 38 ad 77 b7 8d 31 a9 5e af bd 9d 92 29 a7 7c 75 f7 01 2b 79 d6 6b 36 46 1d eb ae 6f ad a5 32 a9 59 77 f5 24 0d 6b d1 a8 0b b3 ea b6 43 54 38 5d cf ba bc 46 a5 ab 9e a2 Data Ascii: U]xeZ{QRt]RQoRv,wgvZQ}1Vn2#__Wib3;-t[da2Ey~'M\|koihLk>0:;+Ke0c%7#U;s>W_Lu2=8w1^)\|u+yk6Fo2Yw$kCT8]F
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: b9 a9 14 85 1e a0 6a 54 a2 02 df 14 b5 34 9a 4f 0a 1b 53 52 89 2f 75 24 51 74 da 14 05 c3 06 79 ba 11 4a 45 cb 4d 21 8e 4f 4a 27 a6 28 a8 8e 92 9e 2c cd 49 d3 51 01 4d b5 42 e5 42 ae 6a 2e 17 e5 2c 1b 5c c4 21 74 eb 22 55 10 ab 6b 0c 60 72 4e 4f f5 7e 06 86 48 5f 3f 53 b5 4f f9 72 ef ad ab 1e 49 dd 7a 16 9f 98 93 90 db c7 5d b6 8d d5 ed ab 7b fb c8 74 ce 5c f9 08 6b 69 4b fb 6e 57 3b 25 26 7b aa f7 c1 35 19 57 bd 37 95 31 6d f1 1e 77 d5 37 ca d8 ac ca bb 54 b3 36 8b 77 e9 0c 3b e6 dd 68 a3 49 ea 5b cb be d2 09 a7 dc de 51 eb 69 8f f6 d3 7c 1d e5 a4 9e 86 fd 74 30 74 68 bf 0d 9d e4 a6 f3 9e d2 d6 58 72 a8 7c 80 c3 a0 7c aa 72 94 0c 5f 16 1f a9 26 5b 8b 0f b6 21 a8 fb e8 f2 b6 94 70 54 de 7b ac d1 b8 c5 4f 57 d5 5b 2c e7 ab e5 fd 65 d4 54 af c5 5f 55 f5 ed Data Ascii: jT4OSR/u$QtyJEM!OJ'(,IQMBBj.,\!t"Uk`rNO~H_?SOrIz]{t\kiKnW;%&{5W71mw7T6w;hI[Qi\|t0thXr\|\|r_&[!pT{OW[,eT_U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49810	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1099	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1552 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:41 GMT Expires: Fri, 26 Apr 2024 09:49:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 11075 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 08 06 00 00 57 45 42 50 56 50 38 4c fc 05 00 00 2f 3f c0 0f 00 09 05 6d db 30 da bf fc 11 77 c3 10 d1 ff 09 a0 e7 ea 31 7c 54 15 a0 65 d0 bb 44 44 33 08 2e 14 b5 8d e4 78 f7 2a 7f b4 fb bf 82 41 71 db 36 6e 8a 69 d7 5e a7 a6 6d 24 c9 dd ee de 0f e1 f8 a3 3b 00 57 f4 7f 02 fc 8b 77 a7 73 fb e5 4d 8e 4d a7 90 ea 00 d0 cd 89 c6 f1 02 00 3f e5 74 ba 83 4f 0f 5d f7 ff 14 db cd cc ae 99 99 99 19 3b 07 9f c1 e9 f0 09 9c 2a 4a cf cc 79 04 e6 57 60 66 66 c6 cb 7c ed 0b 67 67 27 70 d6 d2 d9 ed 5c 7d c3 c9 6c 94 95 dc 79 65 9d 36 cc b8 92 cb 80 19 ee 54 ae ac 9c ca 15 bb 8d 24 0b 92 64 d3 b6 7a 36 ef 3a d7 f7 e8 da b6 9e 6d db e6 97 6d db b6 df 97 6d db b6 6d db 6f 63 20 47 92 a4 48 8a a8 39 66 7c 9d fe aa 2d d3 31 cc 5c 65 4c 80 06 ac 80 d8 fa 05 6d d2 Data Ascii: RIFFWEBPVP8L/?m0w1\|TeDD3.xAq6ni^m$;WwsMM?tO];JyW`ff\|gg'p\}lye6T$dz6:mmmmoc GH9f\|-1\eLm
2024-04-25 12:54:16 UTC	831	IN	Data Raw: 25 34 be 10 ac 93 41 4d a9 5d eb ab 0e c1 4e 83 35 31 c0 a6 38 8f fa c3 2d 8e 45 b7 14 b6 ba 66 27 d9 0e ad bb 4a b2 b1 93 61 c5 52 42 f0 b9 0f 53 f2 e7 90 b5 79 78 6a e6 be ba cf 67 97 18 5c 3b e6 57 2d 64 d5 67 89 e3 c7 d2 d1 8f ea 17 85 7b bf 83 c0 4d 04 be b0 7c 5f d1 f9 ad 33 70 a0 76 21 14 7e b5 18 0d 9d bc cf e6 5b 63 08 b4 ed 17 ef 30 d8 76 10 c4 ef b5 17 3f 2a 37 75 c3 80 57 e7 4f c9 30 85 0f a9 15 b6 32 b0 5b ee 77 e1 14 93 61 b0 18 f0 90 2c 08 06 34 3a ee d5 a7 1a 2f 8e 65 43 57 fa 88 9e 82 cf 0a 20 45 72 6f 28 9c 0f 3a 00 63 31 e4 00 cb 2d 15 1f fe f6 77 f1 a6 ff 19 51 c3 b1 ae d3 e1 da e0 d9 48 35 c2 a2 70 8a f3 47 6a c9 bb 7d b9 5e be 3f 5e dc 66 36 16 57 47 47 3e df fd 92 13 2e fd 9e 98 e9 f4 e0 41 48 91 82 c2 29 42 03 41 92 7f d3 da a0 d6 Data Ascii: %4AM]N518-Ef'JaRBSyxjg\;W-dg{M\|_3pv!~[c0v?*7uWO02[wa,4:/eCW Ero(:c1-wQH5pGj}^?^f6WGG>.AH)BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49816	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1106	OUT	GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9002 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:30:18 GMT Expires: Fri, 26 Apr 2024 11:30:18 GMT Cache-Control: public, max-age=86400, no-transform Age: 5038 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	722	IN	Data Raw: 52 49 46 46 22 23 00 00 57 45 42 50 56 50 38 4c 15 23 00 00 2f ef c0 3b 00 09 48 92 24 c7 6d a2 7a 06 20 a4 69 fd ff c1 00 08 7a 3d 47 f4 7f 02 f8 5f 8f 23 d7 3d 1d 49 5f 64 c0 93 81 3a aa 7b 71 47 35 cd dd 0d 28 e0 96 76 b2 f4 48 d8 64 22 bb c0 67 0e 16 92 90 1e 10 68 8d 14 8d ca 5b 12 78 73 d5 24 dd ca f4 64 43 55 15 71 2f 13 47 48 6a ad d9 41 1c cc 8b 37 8e 6a 23 f3 0c b0 d4 3f d7 35 c6 18 37 96 36 d8 af 57 ef fd 33 da 99 16 6e 8d de 33 c7 a8 07 80 06 d0 fb 18 3a 70 5b 6c 7b 3f b9 7c 0f e2 e0 bf b9 80 23 d9 76 63 a5 71 aa 57 df c0 c3 7b 50 4c c4 fe d7 44 4c e4 91 66 84 8f 1d 49 92 ac 2a b9 fc 78 e3 0e 73 ff 83 b1 76 97 70 1b db b6 aa 2c dc e1 ff 8f 47 1c 5c 22 42 fa af 44 6b 20 a5 ff 13 20 c1 7f f7 69 92 59 e1 b6 dd 35 f4 92 6d 65 16 4e be 86 ce 18 b8 Data Ascii: RIFF"#WEBPVP8L#/;H$mz iz=G_#=I_d:{qG5(vHd"gh[xs$dCUq/GHjA7j#?576W3n3:p[l{?\|#vcqW{PLDLfI*xsvp,G\"BDk iY5meN
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 5a 69 cf bf 30 73 ba 7a 3a a0 30 a3 6b ea 9f 52 a5 14 ba e2 82 aa 16 9c 23 27 0a 76 68 ce a1 e5 dd 0e 73 b2 e4 ea e0 9c b3 27 f6 2d cc d4 61 66 26 55 aa ac d1 b6 76 4c 92 74 ee f3 7d 91 91 ec 88 52 db b6 6d db b6 6d db e6 2f db 63 5b 6d db ee 2e 2b 39 61 e4 87 f7 f1 1d c9 b6 6a db b6 6d 45 e4 52 6a ad ad cd de fb 80 c9 cc cc cc 3c c5 98 ca a0 2a 53 0b a6 3f 9e 12 30 f3 5a 83 5b ab 25 c5 04 34 e0 13 fe ff 84 ff ff a0 dc 91 23 21 16 69 a0 e6 25 42 84 58 60 cd 94 75 da 8b c0 8c 5c 24 64 10 a1 22 60 f8 3a c3 4f 67 38 60 f8 3a c3 4f 67 38 60 f8 39 94 1a 9f 8e 5f f5 03 ef fc cd 65 21 de f5 46 ef 5f 72 ae 9b 1e 5f e9 cd 1b 03 9c a2 18 19 58 6b 38 27 1a e0 80 01 be ce 70 4e 34 c0 01 03 7c 9d e1 9c 68 80 03 06 b8 01 f8 07 87 5b f9 ad 33 de 5c 6b cc 1a 62 e6 fa 82 Data Ascii: Zi0sz:0kR#'vhs'-af&UvLt}Rmm/c[m.+9ajmERj<*S?0Z[%4#!i%BX`u\$d"`:Og8`:Og8`9_e!F_r_Xk8'pN4\|h[3\kb
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 8d b5 a1 ea 1a 8f bf 49 d3 b5 a6 56 66 de 37 8e 5b ef c7 31 e2 f1 a7 d8 4b dd cc cb ea 0b 30 a4 83 ca 63 4f 96 a1 b2 8d b9 3b 0a 7f fd b0 64 df 9b 89 c7 df 72 f5 75 1f f1 ac 5d b0 d7 fd 2b c3 1f 83 32 96 cd 5c 3b 3e e4 ee e3 71 b4 cb 59 73 b0 fc b3 1f 5b 0a 99 84 14 58 a4 87 a4 23 b6 50 8d d1 b4 3d 78 54 6b ff ca 8a 6d 75 e9 30 57 c9 d6 c4 9a 71 e0 d0 03 dd d6 b1 e7 1e a3 a4 5c 8c e9 2a 70 3f c1 f9 1a 1f 58 f7 3d 87 57 8b eb 89 af 8b d4 84 a8 54 b2 ad b7 8f 21 a1 36 66 ce 25 db 7e 2e 57 35 44 d5 92 c9 6f 66 c0 ba 7a a7 19 9f 5b f1 d9 4d ea fa 1a ec 45 ee 28 5a 04 d2 d8 4a 48 b4 30 56 59 84 9b 6a ce 4b a8 e1 a8 92 d5 62 cd 48 89 91 9a 0d ac e3 92 ed 88 15 86 53 13 6d c1 3c d7 e8 5a b9 35 2e 6e 52 2a 24 8c 72 46 26 eb 74 47 f4 d9 9f b7 fb 16 3c fe 1e b6 0a Data Ascii: IVf7[1K0cO;dru]+2\;>qYs[X#P=xTkmu0Wq\p?X=WT!6f%~.W5Dofz[ME(ZJH0VYjKbHSm<Z5.nR$rF&tG<
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 60 bd 79 4d 0e 4e 70 ef 27 a9 ac 2a 5b b9 51 4e e8 02 4a d9 82 67 f7 7c 6b 20 b9 85 f5 5a cf 89 a2 80 8a 00 fa 00 cd 90 05 ed 35 3a 52 c0 80 2e 44 8f 33 52 9a 95 93 73 f7 0b 9a 42 da 3f 44 84 d6 b5 78 3d 0a 14 2d 79 76 f4 9c 28 0a 88 b5 3d 08 02 00 c7 fa cc 26 3a 80 11 cd 5a 55 fb 97 81 6c 53 19 39 1e e4 98 7e 3a 94 ea f4 c0 6e 32 56 bc 83 02 69 27 8b ab ef 39 b9 00 14 28 42 e6 56 20 77 bb e7 2d 00 23 eb 08 81 fa 7c 16 57 5d 8e 7b e3 29 6f f3 82 6e a6 32 5e ca 6d e0 03 9c ab 90 d4 a1 92 8a 08 99 2d a2 4d 59 68 1b 5a 92 c8 aa 96 ac 17 80 40 45 62 ab 10 ab a1 99 5d d9 ac 2e 66 63 84 9f f5 4d 6d d3 15 4e 1f eb be 31 db 97 bb 68 4f d3 21 95 0b 49 e4 60 c8 8e 79 a9 ad 88 2d 24 f6 de 97 a6 99 ca 6c d4 58 19 77 57 c0 4e 92 46 56 91 b5 a2 80 28 42 b2 22 54 58 9b Data Ascii: `yMNp'*[QNJg\|k Z5:R.D3RsB?Dx=-yv(=&:ZUlS9~:n2Vi'9(BV w-#\|W]{)on2^m-MYhZ@Eb].fcMmN1hO!I`y-$lXwWNFV(B"TX
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f2 cb 0f 5f 7c 7a f8 20 fb e0 66 b5 ae 02 b4 b5 81 2e 38 00 08 d1 7a 6d 44 49 c9 04 6e 1d 25 84 ad e2 11 2e 2c 4f 44 03 40 e2 13 5d 72 10 65 68 a0 68 a1 06 f4 cb ee 53 a0 62 60 d4 f1 96 f5 62 75 a0 d6 38 ee c1 18 6d 24 ea d2 c4 01 6b 48 4a 3b b4 b7 1b a2 e5 91 1f 2c 75 67 a6 a6 08 1b 97 08 43 30 ef 3c e7 ac 59 b0 8b 0f e5 60 aa 72 06 4c 6c 62 0a 4a 19 7d 37 c4 c4 1d 40 d9 44 00 e5 78 ab 62 78 4d 77 4e 14 18 48 c6 c8 7e 1c 62 c4 ba c1 cb 95 75 ed 60 1a 46 7b ee 6b 25 30 1e ce 9c 2f 55 aa cd 5b 42 8b 79 73 38 7b e1 3f 70 f1 db 38 43 e7 13 c4 0c 55 84 4c 21 87 46 9c 00 0a 17 f6 af 00 fc a6 07 87 2e d7 60 20 03 69 8f f6 ae da fa 8f b4 75 a5 0d 37 8c bf 30 da 8b 71 2f 9f e8 1b 3b 7d b2 19 e0 3d 6a 89 60 34 6f c6 56 70 8e 89 ca c5 07 d0 25 61 b4 6e a8 12 15 a2 Data Ascii: _\|z f.8zmDIn%.,OD@]rehhSb`bu8m$kHJ;,ugC0<Y`rLlbJ}7@DxbxMwNH~bu`F{k%0/U[Bys8{?p8CUL!F.` iu70q/;}=j`4oVp%an
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 60 b6 09 42 df a9 cc be 8a 93 2f 37 82 89 77 7e 3a 18 8e 49 dc da 3c e2 c6 f1 ee b1 1d 5a 9c a6 9a 7e 79 49 3c 71 d9 1a 49 88 e6 0d c1 16 5a d1 24 b6 91 eb da 8d b4 13 38 da 32 21 7a f5 60 84 60 ec d7 50 74 a9 f9 78 1f 9e f5 60 bf eb df bb 21 9f c2 e6 d0 b4 0e 55 65 96 34 ae 1e 38 33 16 59 d4 25 f1 0b 8c c6 2f 0c e3 bf d9 76 41 66 03 30 a3 f9 a5 f3 ea 73 dc fa 1d b9 fe 66 be 13 8f ea 1c 31 99 4f 15 62 86 1c 3b f0 04 0f a6 60 b6 00 cf b2 4f 98 d6 f4 71 a9 d9 03 b1 8f c5 34 a6 85 4d 48 5d 32 a6 ef 4c fb ad d4 14 be f7 45 89 86 9e 05 e3 17 92 62 14 41 52 49 44 34 cb 95 f1 8c a9 b4 11 98 de cb fe 16 7c 75 fb 93 59 c7 20 26 02 07 53 55 4c c8 8c b0 02 86 63 40 e2 db 5b 0a 50 aa 65 b8 40 cc 14 84 7b 00 09 0c e1 e9 2d 2c 61 35 3f 6d 9e c6 66 a9 9a 9c f6 0d ee 43 Data Ascii: `B/7w~:I<Z~yI<qIZ$82!z``Ptx`!Ue483Y%/vAf0sf1Ob;`Oq4MH]2LEbARID4\|uY &SULc@[Pe@{-,a5?mfC
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 36 ef 86 77 70 98 0f e6 77 35 89 a9 09 f2 ff 95 ed 56 dc 86 2b 39 b9 e8 50 a4 49 39 a9 e7 1b d9 c4 47 4e 6e 90 4c a7 95 92 60 e0 18 e0 6c 19 6e eb 31 96 f5 be c4 52 69 45 db 7a 5a 64 16 a8 f9 6c bb 87 11 3e 7e 39 72 ea ab b8 22 ca 48 79 a3 be 51 7e eb d9 65 f0 e7 89 71 e0 59 f2 52 85 26 18 b7 b7 64 3f 01 06 ae 94 25 88 1e dd a9 6c 20 5b 38 5c 80 23 b7 69 e5 ec 33 db a2 30 5a 76 d6 4c cd f2 2f ff 7a 6d aa 58 67 f2 63 b8 db 2e 59 96 a5 29 77 77 3d a4 6f 81 09 b6 53 c1 dc fe 02 f6 d5 c3 fb aa c6 c3 e1 fb 0e dd e1 b0 30 cf e7 a8 32 53 b7 a0 33 35 d8 51 05 87 3b a7 18 05 8f f0 a0 94 a7 6a c2 06 e2 88 af b3 1a 5e 9d d3 48 fe 87 b4 5d 6e f3 d5 5d f9 b3 a5 b1 63 79 9e 5b 51 a5 ae ce 30 0b 26 ce b3 2f 4d 8a 37 ce a7 e3 f0 a0 8e df 3d d3 dd 37 23 74 d3 1e c8 09 12 Data Ascii: 6wpw5V+9PI9GNnL`ln1RiEzZdl>~9r"HyQ~eqYR&d?%l [8\#i30ZvL/zmXgc.Y)ww=oS02S35Q;j^H]n]cy[Q0&/M7=7#t
2024-04-25 12:54:16 UTC	750	IN	Data Raw: 51 00 1b 40 63 7d 52 48 28 00 59 58 4d 28 ac 4f 0a 09 05 20 0b ab 09 85 f5 49 21 a1 00 64 61 35 a1 b0 be ed 9e 1c 77 9f 89 d9 bb c8 d9 31 4d d8 0a 39 e9 a8 ce 8a 33 67 aa 57 b8 75 7d c5 59 6b 38 18 38 27 db 8a b3 d6 70 30 70 4e b6 15 67 ad e1 60 e0 9c 6c 2b 0e a0 f9 c9 53 f3 99 38 30 77 4f 7c a2 69 d2 31 69 a8 ff ac a7 ff 0a a3 93 bd bb 4e 4c 62 02 c5 9c d9 85 71 b2 6e b8 a7 53 08 28 e6 cc 2e 8c 93 75 c3 3d 9d 42 40 31 67 76 61 9c ac 1b ee e9 14 02 8a 39 b3 0b ab 33 83 8b 4f 71 00 d3 dc 42 22 be e9 eb 16 69 e7 9b 96 8e cf 79 f7 13 57 9d 51 47 a7 13 00 4c 28 46 e2 21 0a e6 dc e3 00 db f9 6e 06 41 31 12 0f 51 30 e7 1e 07 d8 ce 77 33 08 8a 91 78 88 82 39 f7 38 c0 76 be 9b 41 50 8c c4 11 45 cc 83 2b 6b 32 3f 11 70 9a 82 6f a9 fc bf 98 6e b2 39 fc dc 37 3f d4 Data Ascii: Q@c}RH(YXM(O I!da5w1M93gWu}Yk88'p0pNg`l+S80wO\|i1iNLbqnS(.u=B@1gva93OqB"iyWQGL(F!nA1Q0w3x98vAPE+k2?pon97?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49817	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1117	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:49:20 GMT Expires: Fri, 26 Apr 2024 10:49:20 GMT Cache-Control: public, max-age=86400, no-transform Age: 7496 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49818	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	530	OUT	GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 9646 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5667 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	722	IN	Data Raw: 52 49 46 46 a6 25 00 00 57 45 42 50 56 50 38 20 9a 25 00 00 f0 8d 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 12 7a 7d 58 28 04 04 b2 b7 7c 2f dd 83 78 17 1b b8 97 db 96 8b d2 cb a2 fe c1 e6 ef 45 fe 8f af 1d 0e f9 27 f2 0f fc 8f b8 ef 78 df d8 3d 80 7e 43 ff 81 ee 01 fa 6b fe 77 f9 3f f8 0f 68 cf d0 0f 72 3f af 3f a3 be e0 3f 95 ff 6e fd 8c f6 22 ff 63 fd cb dc 6f eb 47 f5 ef e4 bf e0 3e 40 3f 94 ff 3d f4 18 f6 00 fe 55 fd 67 d8 03 f8 8f f2 ef bf ff 94 2f f0 5f b1 ff 02 ff b0 df b2 3f 00 9f ce 3f bd 7f f7 ff 67 ee 01 e8 01 d4 3f d9 3e c3 3f b1 7e 44 7f 6b ff 67 eb 9f e2 ff 23 fd 27 f1 ab fb 8f fd df f2 9f 21 ff d7 78 4e 89 07 c5 7e be fd 4b f1 ff fb 17 fe af f6 bf 79 ff 92 ff 7b f8 29 e6 ef c2 ef e9 ff 28 7e 00 bf 1f fe 4b fd 4b f2 63 fb bf ed 2f 1b Data Ascii: RIFF%WEBPVP8 %*((>ADz}X(\|/xE'x=~Ckw?hr???n"coG>@?=Ug/_??g?>?~Dkg#'!xN~Ky{)(~KKc/
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: af 5f de 8d 8e 61 28 c2 f8 6f 08 af 97 2a 86 83 d2 04 91 49 db 38 1f 55 6c 9a 88 0a c5 ed 2c c6 4a 33 4f 4b 65 99 d0 68 15 20 f2 02 eb 16 74 a5 db 09 8f a4 19 b2 d0 fd f4 14 67 b6 fb d7 ea 1b 92 90 b1 4d c0 3a 91 4a b0 39 f6 f2 be 67 59 80 7a bf 30 63 2c 70 bb 23 70 e8 83 87 a2 a9 84 df 39 e5 1a a6 46 5c f7 e2 eb 45 a3 e8 13 a8 88 85 38 e0 c7 90 1e a5 38 7f b4 85 4e 6a 90 d6 ea ce 52 20 c3 a1 f8 a5 b2 e9 9e 59 dd 65 82 e5 49 d3 4f bd 8c 7b 95 42 c7 5d 24 ee 41 f4 f1 67 4d f3 75 e7 70 9d 12 22 bf aa 93 4e 88 b8 7b 4f 55 25 48 3d aa ef 99 84 7d d6 a1 de 29 97 8c 09 a9 3b e2 85 5e 3e 9b 64 88 86 6c 82 70 57 da 9b 75 c4 0d 5b a3 9d 94 13 76 5a 90 c0 92 59 2e ed a9 12 64 1d 24 8f 6d f4 fe 07 44 31 77 8b f8 67 d9 88 1d dd 0b a5 97 e2 0c 96 e4 9a 3e 31 7e 1a 7f Data Ascii: _a(o*I8Ul,J3OKeh tgM:J9gYz0c,p#p9F\E88NjR YeIO{B]$AgMup"N{OU%H=});^>dlpWu[vZY.d$mD1wg>1~
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 29 6c 20 5e 0c 07 95 9c 33 a3 9a 8e a5 4d 5f 4d 05 8e ee 8c 2a 1d ef 19 51 14 22 4c fb dc cc f6 a2 29 2b 8b 23 cb a2 bc b3 f9 50 3d 1a 02 6e dc 3f 94 7a a3 2e 0e 80 2e 12 0c 18 ef a2 c2 fa 95 0e 7b c9 43 f3 3e d3 a6 97 24 8e 7b 8b 18 d5 55 1e 39 88 89 e1 e3 3b 10 f8 66 13 4f 9a e0 4a 58 1f d6 11 07 5d 02 b0 5b 44 d8 9b f7 8d de c1 f4 62 cf de 66 4e 67 b4 4d 23 db 01 f4 eb 96 ac e8 1d 91 70 72 d2 e1 99 06 50 87 ed 1f c9 61 f9 ff 66 d6 0c 6d ba c3 cb 5e 39 1a 57 05 5e bf 02 c7 03 c5 b0 eb 7f 20 29 b0 1f ea 05 cc 5b fb db 73 d8 d5 d2 9d 9c 50 30 03 9d 27 eb b3 56 1a 18 1e 40 ff 66 df f4 86 b2 70 4c a3 a5 67 9d 5d 04 f7 55 f5 f8 b3 14 46 a7 ad ce 91 2e 92 de da c1 39 e6 2f e8 98 ab 75 27 08 2b 84 d4 6c a8 8a 82 6e 49 4a a8 59 0c 6f e0 5f 9e 6e 4b 21 59 37 2f Data Ascii: )l ^3M_M*Q"L)+#P=n?z..{C>${U9;fOJX][DbfNgM#prPafm^9W^ )[sP0'V@fpLg]UF.9/u'+lnIJYo_nK!Y7/
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 78 cd 57 64 bc 74 80 fa 7d 8b 10 dc f4 15 0c 7f a3 72 5c ab ac 74 26 0c 25 66 e4 67 24 f6 3d 56 52 7d 43 6d fe ca 7b 3e 99 77 62 e2 ed 98 b1 f0 cc 41 2f f8 7e 57 4c 10 e7 50 b9 fa b3 0d 65 05 a9 41 2d ac 81 d8 18 2b 5f 2b 42 52 3b 86 d1 90 6e 89 b6 1f df 2a f2 4a 5d c6 6f dc 23 5b 61 bc 9d ee 26 00 83 5e c9 8e a5 db 98 06 8b fd 98 80 3f 59 22 4d 6d 45 80 eb 67 01 43 da a6 f0 4f 18 7c b5 92 29 8b 5e 06 8b 8b 40 de 6f 7e b9 53 35 5f 3b 3d 53 97 3f 75 3e e8 ab f6 60 ef af 80 41 c3 1f b4 3c d8 e9 e2 d3 23 6a f4 f4 8f bb ab 5b 9b 56 1e b3 98 f9 34 1f e3 ca 58 76 7a 4b 32 e3 28 ab c7 7c 18 4f 88 f5 77 32 c5 24 f1 6e ea bc 96 a7 37 33 55 11 9c 5a ba 80 58 64 23 bd 62 1c 89 5b 74 0c 79 b5 12 2c f8 06 03 4a b7 7c d0 99 04 24 b5 bd 1b ea e8 46 ed 52 34 3f 5c bf 95 Data Ascii: xWdt}r\t&%fg$=VR}Cm{>wbA/~WLPeA-+_+BR;n*J]o#[a&^?Y"MmEgCO\|)^@o~S5_;=S?u>`A<#j[V4XvzK2(\|Ow2$n73UZXd#b[ty,J\|$FR4?\
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: dc 95 85 3a c0 36 2a d4 e3 68 13 ca 23 be 2e fe c6 cd d3 b9 8a d2 24 93 8b 2c c1 1e 9f 03 39 e0 17 ab af eb 06 59 97 aa 31 df 5a 91 d9 d1 eb 31 23 6c c7 d2 e9 ac 48 8f 56 23 0e 61 d2 15 55 e0 88 2b 87 53 9e a4 58 fc 4e 29 06 c3 ad 28 55 95 d6 f9 37 26 0f 2c 9b ae 51 b7 ce 34 5c d8 e2 42 17 2a 11 a5 98 89 bb 7f 30 b5 79 8f eb c2 02 03 a7 4d 2d 6e ee 95 32 d1 e3 a1 6f 62 59 f3 08 d6 70 a3 fa 80 0f 86 72 85 1d 45 10 03 9b 2f 0b 20 66 99 81 ad 21 73 6e dd 4b 43 f5 06 15 7e 70 93 8b cd 28 7e 95 15 2e 66 30 24 4a be 28 7a 6a 7e 66 d7 3a 51 4a 2d 64 a4 22 ef 23 b9 24 4b a7 85 8e 21 1c 45 d6 46 ee 31 35 d9 f4 27 9f fd 53 3b 52 60 cf 17 44 c9 1c e2 11 93 51 12 08 84 6d 26 c5 76 bb 3b 67 17 21 d0 b4 16 d2 da 92 00 d8 e2 60 b5 e6 c9 f6 98 77 50 b9 ed 91 0f 06 51 c0 Data Ascii: :6h#.$,9Y1Z1#lHV#aU+SXN)(U7&,Q4\B0yM-n2obYprE/ f!snKC~p(~.f0$J(zj~f:QJ-d"#$K!EF15'S;R`DQm&v;g!`wPQ
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: d4 f0 4f c3 cd d2 6b 9c d3 62 2a 01 7d de 57 df 2a eb a2 1f 4b e1 f7 24 2a aa 3b 9c 01 0a d4 70 a9 94 b3 08 bb f2 41 a3 5d e8 7d 6d 5a d5 e2 7d 88 2c 78 4f c5 b9 7e 09 9e 93 c5 8b 1d de c1 43 06 bf 6d c9 4e 87 4f f9 aa e8 01 5d 88 e7 75 db b8 af cf 59 3c 6c a9 94 f7 ee 70 d2 b9 3f 94 79 51 89 76 f5 77 6d d1 8e 35 57 c3 c6 47 22 b6 db 3c 6f 50 65 43 4f 6f bd 38 76 7e 7c 06 9f f4 50 df 1c 16 7f 48 4f 0a 2d 18 68 42 c9 d2 b3 fb 11 09 f5 ea 5e 4e f4 42 9d cc 2a 8d c0 18 af 3f 47 99 f9 ff 37 7d f8 f2 2f 17 5c c7 10 8a d0 b4 c1 43 4b ed fc 35 b3 d7 65 37 de 6c da c7 9e 34 21 c5 ab 95 f9 c8 aa 7d 2e c3 f8 83 e8 09 fe d2 86 74 e4 7c a8 d6 82 9e bb e2 21 9a 61 6b c8 26 06 67 6f 60 9a 03 1b 4b 20 1b a9 eb 30 6f 6b a5 98 a7 db 5b e4 a6 04 85 1f 47 bb 97 90 b5 7c 2f Data Ascii: Okb}WK$;pA]}mZ},xO~CmNO]uY<lp?yQvwm5WG"<oPeCOo8v~\|PHO-hB^NB?G7}/\CK5e7l4!}.t\|!ak&go`K 0ok[G\|/
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 14 df 0a d2 77 bf 13 4f 01 69 0b 2d 66 69 bc 7a 6f c3 ba f9 a5 73 a5 f8 c8 97 82 e8 01 c1 09 0a 4b 69 32 62 c5 c3 4c 52 03 75 97 a8 e4 40 a5 59 f0 2f 2e f1 cb 38 12 aa 1e 82 4c be c9 b3 4d 37 fb 60 bc 06 f7 1e 79 87 a1 29 6c 29 bf c3 57 01 58 fc 00 0d 6c c6 35 80 00 3a 1b 3a a8 49 38 71 9e 68 a3 cc 4f 9b d5 d1 e2 39 b7 03 6f 92 78 62 09 04 eb 7a 5a 55 b9 97 2c 1b d5 a0 f3 7e 20 16 ff 2d 4f 35 e7 b3 f0 0d 3c 5f 25 a8 81 69 87 fd d5 54 ed 25 58 ff ed 36 3f cb ea d3 e9 4e 10 f9 83 f3 15 18 07 27 e9 bb ed 0c 83 9c 82 0a cc cf d5 f3 5d 60 53 86 ae e5 76 73 8f 1a 4a 0e 59 a6 d0 cc 20 65 74 fc bb 0d e7 f5 0c 99 45 de 43 5a 96 e3 b5 6a 2e 84 fd ae 29 7a df ac a2 44 c4 ac 62 08 1c cf 0f 8a 5d e6 12 a7 20 9b bf 4f f7 25 68 19 f8 64 6c b3 22 65 bc da 1c 62 36 19 f8 Data Ascii: wOi-fizosKi2bLRu@Y/.8LM7`y)l)WXl5::I8qhO9oxbzZU,~ -O5<_%iT%X6?N']`SvsJY etECZj.)zDb] O%hdl"eb6
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f9 76 4c d3 c2 d7 11 a1 ca 8e 00 82 32 14 c4 b4 df 25 34 53 34 a5 8b 05 1b c8 dd 9b 6b 26 d4 09 e6 3c f3 96 5f 89 20 40 c0 c9 80 2a 40 fd d2 fb 3e 0c 68 06 f8 c0 a9 cf 84 ff 70 53 0c 47 8a 03 4e a7 68 c0 e3 69 fd 84 9f ff b9 3d 70 0f 74 ef 7e d0 ae 1f cf 21 94 c9 c0 3b 62 0f f8 30 15 78 87 24 39 7a 16 3f 11 dd bd c4 12 1e 2e a0 82 27 46 19 8d 66 e5 11 2a 69 64 00 36 33 5b e3 09 08 df 8d 4a ba 0f 83 03 05 62 10 aa 14 a6 4c e8 d0 a0 4a 37 ba 07 03 53 02 d4 5e 46 0f 6b bd e3 fd f2 a7 4c ac 50 40 55 61 b8 0d 42 57 0c 38 22 c1 f3 18 4b 7f 9e df a5 6d 11 60 32 db 00 67 b3 ae 35 67 be 35 79 64 22 ba c0 02 c1 91 c9 c3 bd 3b f2 d5 3f 38 c9 5c 2d 89 c4 cf c9 27 f5 8d 69 fb e6 a1 37 77 ab 96 c7 58 ac f4 de 06 8d 14 e8 83 11 ef 9a 25 b0 66 5f 20 bf 03 c9 80 cf 5e 5b Data Ascii: vL2%4S4k&<_ @@>hpSGNhi=pt~!;b0x$9z?.'Ffid63[JbLJ7S^FkLP@UaBW8"Km`2g5g5yd";?8\-'i7wX%f_ ^[
2024-04-25 12:54:16 UTC	139	IN	Data Raw: 6a 36 4a 38 1e 85 7a 1f 1c 85 e4 8d a7 9f 70 0c d3 3e 10 b4 af 64 fc 6f a4 fd a8 66 e9 10 41 ab 87 d1 68 38 ad dc f8 f9 51 85 f1 39 ed be 34 f9 9d 3c cc 54 79 13 09 d6 e3 3a 14 40 1d eb 4d 4e d5 97 8b 85 13 e6 2d 51 8f 3f ee f9 13 48 06 96 ec c0 36 f6 3b 5c 4f a3 f5 c2 1b a1 14 0b 2c 01 5e 6c ff 91 b5 9d 95 61 4b c9 84 5a 66 9a f0 08 b4 e2 7e 44 00 ea 24 e9 4e 0e 7e b2 e1 96 19 00 95 b0 36 fa 3a c0 62 e6 66 00 00 Data Ascii: j6J8zp>dofAh8Q94<Ty:@MN-Q?H6;\O,^laKZf~D$N~6:bf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49819	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	529	OUT	GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 10312 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:48 GMT Expires: Fri, 26 Apr 2024 11:19:48 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5668 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	721	IN	Data Raw: 52 49 46 46 40 28 00 00 57 45 42 50 56 50 38 20 34 28 00 00 10 95 00 9d 01 2a 28 01 28 01 3e 41 1e 8c 44 a2 a1 a1 11 aa 9d d4 28 04 04 b4 b7 70 b6 e0 8f 7c 30 c0 de 07 cc 97 e2 bf 00 3e 59 67 80 e7 71 fe bd fb 19 c0 81 ea 01 fb 1d ec 01 fa dd e9 a3 ec 7d fb 81 e8 97 ff ff 59 0b ce 3f d5 3b 5a fe d3 f8 e1 e7 6f e2 bf 1c fd 3b f1 93 fb bf ff 1f f3 bf 0b 1f be f8 44 ea ff b3 3f 72 7f 8a 7d 59 fa a7 f7 2f d8 1f ed ff b9 5f 7b 3f 9c ff 0b e1 6f c7 ff e3 7d 40 bf 1d fe 3d fd 33 fb 07 ec 8f f6 ff da 0e 39 9d 5b cc 17 d4 7f 98 ff 73 fe f1 fe 2f fc e7 f6 ef dd 7f 65 5f da 3f 2f bf b7 7c 21 f5 df fa f7 e5 3f f7 7f b0 0f e3 1f cc 3f b4 ff 71 fd 95 fe fd ff e7 ea ff f3 9f e9 3c 74 7e d9 fe 9b fc c7 f9 2f 80 2f e4 7f d2 7f c8 ff 65 ff 4f ff a3 fd 77 ff ff b6 8f e5 7f Data Ascii: RIFF@(WEBPVP8 4(*((>AD(p\|0>Ygq}Y?;Zo;D?r}Y/_{?o}@=39[s/e_?/\|!??q<t~//eOw
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 8d 54 66 c8 0d d6 2d 5f 30 52 22 5b db a6 d4 92 85 46 ef 0e 48 b0 53 43 b6 f8 a6 1a 39 54 82 68 a3 be 17 d5 3f 90 85 77 15 50 0e 0f fa ac f7 07 ac 0c 1f 30 04 d2 da ae 25 6f f6 f3 11 ad d9 ae f5 37 06 2d 63 7f a9 4b 26 34 08 0a fc 52 d2 79 42 16 3c 78 f0 e8 d8 6f c7 f1 d2 de e9 c4 94 70 b7 3e 16 36 20 08 f0 a3 d9 8d cb b0 62 79 5b 36 23 b2 3a 66 df a4 16 bc 23 a9 d6 9c 8e bc c7 09 fa a5 7b cd f3 e3 29 1f 11 85 d4 b6 dc fb 10 61 5b b1 13 b7 9f 09 9c 31 93 a2 d4 7a a8 cf 26 dc 8d 24 31 0d f0 b1 c2 90 18 9f 5b 06 53 f8 02 b1 eb 03 8d e2 9c 76 8d a2 6a f7 1c 8d ff 5b 3a ae 39 6e 33 91 b7 08 1e 13 c2 29 69 69 22 96 4e 0e cb 13 2b 41 c5 fc cc d0 c6 aa cb 7f 47 28 07 ef f4 0f 8f 6e 4c 5a b1 2d d5 ea df 55 58 97 40 c9 61 b5 99 7e 09 f6 c3 23 9e e0 d4 29 b6 11 8a Data Ascii: Tf-_0R"[FHSC9Th?wP0%o7-cK&4RyB<xop>6 by[6#:f#{)a[1z&$1[Svj[:9n3)ii"N+AG(nLZ-UX@a~#)
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a3 cc 72 ca a4 f3 ec 7f 9b 1b 7e eb 75 28 34 a9 d9 fd 64 bb 7f ac ad 2c d4 8e 79 27 9b 30 c5 83 31 fe 57 55 44 a3 ef 4e 7a dc 31 c3 fa 2c 74 d9 33 d8 b7 a6 87 c4 92 4e 0d c8 a2 34 ab 58 45 77 f4 9b 44 ed fc 86 65 79 56 ce 21 a8 33 c7 79 64 83 b8 91 f7 af 62 e0 f1 ec e9 a4 9b 4d 55 79 4b 01 0d da 56 7a 19 a1 33 99 a6 e4 d3 05 a1 09 4d b6 8d f8 a5 96 41 f3 70 cc 8e c4 ed 90 37 7e 13 a6 86 5f 6b a8 e5 4b be d1 c1 13 ea b5 6f 36 3a 4d ab de 80 4f c0 ef c0 ff 31 1b a9 d9 7b d1 d8 9d 79 97 68 3c 43 42 56 98 f5 1a 8a 44 e6 37 28 af 56 5d bf 2a bc ba dd 00 1d b2 6b b1 0d 31 b3 76 13 e8 cd b3 3c 1b 7f c2 5d 51 23 8d 03 8b c5 32 25 5b fa d9 0d 99 e9 27 bb c7 ec d6 18 53 19 0e 0e 5f 0d ae 23 b0 02 d9 81 98 8f 89 20 4e b2 36 eb 80 c4 b6 a2 f0 00 fc 7f 66 72 1b 67 11 Data Ascii: r~u(4d,y'01WUDNz1,t3N4XEwDeyV!3ydbMUyKVz3MAp7~_kKo6:MO1{yh<CBVD7(V]*k1v<]Q#2%['S_# N6frg
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 83 88 af bf 35 6f f9 37 cb 92 1c a8 ad 4f e1 a0 e0 b2 7f cf da fd f0 6a ed 57 97 a9 d3 88 42 d5 d1 7b a5 25 56 e8 13 b3 01 74 c1 54 47 20 e1 51 68 b9 98 c4 be da be a2 03 ef b2 b3 17 5e ab 78 12 5c b9 19 9d 78 57 e3 19 51 29 d6 60 25 24 fe 7f b0 2f 08 49 a2 6e 90 bd 8a a2 0e b5 41 a7 71 1d ef e7 c3 45 e7 e4 63 d2 3e 7a 5d 4d 3a 39 3e 90 dd 4c fa 63 37 97 a0 ad 34 48 96 7b ec 49 15 cb 73 c7 54 87 7b 49 03 84 8a ec 01 c3 f4 a6 6a 01 69 0a 0c ca cc 82 73 ef d8 58 da f0 87 73 41 33 58 3b 8c 3b 5d bd dd 95 75 41 56 64 9b 57 0a 00 c0 55 1e be f0 77 ca a0 4d 50 03 0f 06 bd d9 fe e9 c6 d9 d9 0b 68 e6 d9 9d 4c 0c eb 87 9a 83 f6 77 d7 df 21 8a 6f 5f 34 ff cb a5 91 08 66 61 d1 4f 76 e6 41 91 1d 2e 1f 06 8f 08 f6 9b ff 3d 83 ad 5a 3c a8 b9 21 ad e2 a2 da ce f1 9c ad Data Ascii: 5o7OjWB{%VtTG Qh^x\xWQ)`%$/InAqEc>z]M:9>Lc74H{IsT{IjisXsA3X;;]uAVdWUwMPhLw!o_4faOvA.=Z<!
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: bf 2b 35 f9 2f 51 43 2a 11 9c ab 5a d0 70 45 37 12 01 5d 4f 71 aa c8 b5 77 33 1e 9d 22 23 ad 02 15 de 1c 59 71 76 39 58 fd 66 c3 0c ec 11 ea 2a 76 e8 dc 12 eb b2 56 06 9b 90 b7 ca d3 67 ee 1f aa a6 a6 cf f4 46 89 9a 86 dd 70 10 0c ff 72 6c b2 72 31 bb 1d 44 2c 27 6c 84 7e 76 cd 8a 9f 3c d7 af ad 61 87 57 e0 ed 54 f9 38 91 4f 00 c1 ee 51 10 da 08 f6 a0 ed cc d1 e6 e8 e2 fd 0a 90 7e 35 3a 7c 0e f1 e2 38 1d 5e dd a6 0f 02 66 fe b8 bd a4 ae 87 ea b6 af e1 ad 66 98 f7 0a 1a e6 99 72 93 09 dc 8a e9 50 80 77 31 4d 9b 89 13 d8 16 ad 65 cf 53 e6 09 b4 38 ec 99 9d 4d c7 a2 4f 60 34 25 15 dc 59 a7 3c b7 b3 db c8 bd 39 39 f1 fe f7 c3 c7 f3 b0 75 0f f1 b9 5e c6 a5 3e d0 dd b8 17 4e e8 ea 8b 3e 9c a9 da 7e 2f f7 ea bd c1 50 22 08 c2 7f 14 a4 61 75 13 fa 58 b6 c2 12 8d Data Ascii: +5/QCZpE7]Oqw3"#Yqv9XfvVgFprlr1D,'l~v<aWT8OQ~5:\|8^ffrPw1MeS8MO`4%Y<99u^>N>~/P"auX
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a9 c9 de f0 bd 0d 1a 4f 56 c7 68 a3 ec ed d7 78 d4 1e 8a 6f 8d 62 8c 6a ec 79 14 1c 1b a5 26 25 87 57 38 b0 4c 00 dc 8d 22 e8 89 94 84 56 5b 5f 36 79 28 12 b5 85 3a 0a f9 8b 9a f4 99 0c 21 9a 21 40 ed 93 5e 71 87 a6 21 6c 57 4a e0 1e 04 42 73 04 96 9d 2c 67 f7 67 e0 67 ad ff 8b 05 ca 87 f5 dc 0b 36 63 2f 9d 24 01 21 e5 b8 85 14 1e 8c bf dc 4f 71 f1 5e c3 c5 91 10 c5 6b c3 11 5c 01 a7 0c 84 27 db 55 95 e5 63 84 96 c5 bf 4c 6a f5 d9 83 4f ff 92 a4 d2 25 99 4d fe 74 d9 cf 20 c5 53 83 ee 60 ef 0a 7d 57 60 0b db 2a 1a 5f 84 ca a6 18 11 7e 98 32 5e 3e c1 ab 39 c0 81 17 a8 4a 7a 04 04 4c 13 c7 9c 53 03 b0 40 7d c3 cd 24 0b cb 04 fb f1 75 98 6a e0 24 1a 9b 3d 2e 00 0b 79 28 c3 73 63 80 4b 26 70 19 9e 29 43 0b 26 1f 90 54 72 c0 e0 6b 04 d7 e4 43 56 10 b5 e8 cf 3f Data Ascii: OVhxobjy&%W8L"V[_6y(:!!@^q!lWJBs,ggg6c/$!Oq^k\'UcLjO%Mt S`}W`*_~2^>9JzLS@}$uj$=.y(scK&p)C&TrkCV?
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 17 cc 7b 1f cd 47 58 9f 81 ea 81 ee 6e 7d 21 4d 77 ae 42 b2 98 5e d0 1b 4e 41 6d 4a ba 49 51 6d b9 6c e1 62 22 32 2a 64 d4 ca 53 c0 b9 59 c2 73 d5 a7 39 d7 16 50 9b 92 6e fb b7 d2 25 18 4a ee fe 05 6a da 9f 75 61 21 ad 42 ea 56 1c fd 0c 53 3a 29 19 ae d2 f7 ae ae 74 ce bd 46 cf 27 21 8d 4a 7e d8 ff ea 3c 40 7f 9e b2 cd 30 0e d0 72 d3 56 51 f5 d6 5e 29 bb 1e 35 e3 24 40 18 aa 65 21 63 f0 08 1b 81 3b 1f 4c e9 77 4a 94 7c 84 64 4f a8 4b 2e a8 c3 f7 6f 48 4a 26 8a dd ca 22 73 f5 f0 be 94 32 06 8f e5 c6 0d 7e 84 05 ba 58 60 e2 23 db 57 05 1b 6a 2b ac 58 4f 2e 38 ca 86 9b a4 63 b7 24 86 01 09 4e 8f 54 20 cc e4 ff e6 cf 7c c6 b7 e4 5f 0f 06 b5 a6 23 f9 12 f6 93 aa 86 39 c4 1f f6 0d 39 1d 39 b5 10 d3 83 ff 0a 60 3d d7 30 75 de e7 d8 76 6b 6e 82 22 78 77 f2 c5 03 Data Ascii: {GXn}!MwB^NAmJIQmlb"2*dSYs9Pn%Jjua!BVS:)tF'!J~<@0rVQ^)5$@e!c;LwJ\|dOK.oHJ&"s2~X`#Wj+XO.8c$NT \|_#999`=0uvkn"xw
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f8 59 b1 c0 bd 88 84 3f 30 81 9b 21 b9 97 5e ce 17 56 b7 b1 b1 99 63 e1 90 a5 7b 26 57 c1 f2 68 f7 23 e9 38 f6 f3 63 7e 9a 04 a9 00 0d 07 ce e0 6a 8b 54 32 35 15 f8 48 3a 13 08 6f 33 81 96 1a 3c b7 8b 81 d6 de 1c f6 b6 db 40 4f 3e 4c f3 f1 20 34 42 77 ef a2 71 cc 39 11 d5 df dd 84 2f a2 c0 eb c4 d9 4f be fe 3f 79 48 a2 f9 e4 88 25 2d 63 47 8f 81 28 4e 44 5b 0c 93 a9 85 17 9b cf ae eb 73 4d d9 da 5f 7d df 8f ba c1 b3 97 a5 8e 50 ab db 98 09 70 dc a1 40 70 04 aa c4 7e 61 25 12 9c 8e e7 d5 4e ee a3 22 43 90 ea 22 3c ce 29 9d de 31 c6 d5 f3 ea d2 80 20 9e df 7a ed 7c e6 81 73 48 64 91 11 7f 0a f1 06 82 52 36 e0 06 33 73 de ee e1 1e 92 f4 41 4a 3d ab 94 ce 66 a1 0f fe 1a 18 03 6d d7 e6 ab e3 6e bc bb 89 8f 6d 4e 47 00 cd 79 f3 d7 f3 8f d7 97 e9 dd a7 36 e0 8c Data Ascii: Y?0!^Vc{&Wh#8c~jT25H:o3<@O>L 4Bwq9/O?yH%-cG(ND[sM_}Pp@p~a%N"C"<)1 z\|sHdR63sAJ=fmnmNGy6
2024-04-25 12:54:16 UTC	806	IN	Data Raw: be 8c 0b 55 89 49 1d 63 a0 f5 d9 46 9f 06 24 6f c4 9b bd 30 f3 07 f8 e7 d0 cb 32 27 20 c2 10 0a 55 bc f7 de ae d3 c0 1c 5e 1d 20 f4 40 73 0f a5 8c 73 3c b3 49 a7 79 a5 84 27 68 47 40 a0 86 13 45 d8 91 07 a2 7e b8 eb 5c 1f 55 93 43 02 34 8d 71 31 65 cf 98 46 c6 92 3d 1b b7 d3 32 ea f4 e9 35 36 67 21 cd 87 e2 c4 a4 f1 cc 7c 5a 14 4e 2c c6 5d a3 05 8f 71 b7 b0 e6 aa 46 9c 9e ea 09 3a 9a af 15 06 6f 01 94 54 37 d8 10 93 e3 2f ee 08 38 59 c4 ad f9 ee d3 33 b1 b6 de b2 53 36 06 11 43 59 60 ac 4a a0 68 3a 16 29 49 8e 92 34 ea e7 42 be d5 71 21 b3 3c a2 15 df 2a 85 65 e8 49 95 23 cd 1d de 32 d7 d3 b9 02 66 75 a0 f5 05 67 1a d5 85 a1 f5 2e 45 38 cb 3f e3 64 14 3b cb 76 77 df ff fb 65 c0 5b a7 22 d3 c8 b8 af b6 7c ef 8b 5d ef 8a 6c e9 b3 c6 bc 1a 35 06 43 ad d3 13 Data Ascii: UIcF$o02' U^ @ss<Iy'hG@E~\UC4q1eF=256g!\|ZN,]qF:oT7/8Y3S6CY`Jh:)I4Bq!<*eI#2fug.E8?d;vwe["\|]l5C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49820	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1105	OUT	GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51228 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11076 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	720	IN	Data Raw: 52 49 46 46 14 c8 00 00 57 45 42 50 56 50 38 4c 08 c8 00 00 2f a5 c0 49 00 4d 40 8c 24 39 6e 53 b3 b8 07 c4 82 f9 07 0c 50 76 08 11 fd 9f 00 fe 28 a9 d4 f1 0f ad 9e c8 78 48 b2 a5 b8 68 02 d8 18 db 92 6a b6 72 82 2c 24 6b 0c 90 32 05 cf b4 8d 4f 40 99 a9 c5 33 9f 47 11 61 03 18 03 54 3d 55 10 82 01 50 04 51 f9 3c 63 8c 90 10 88 06 18 63 44 55 09 71 8d 00 f1 1d 02 83 cd ef e6 aa 5f 0c e8 f2 c7 40 3b 82 f9 00 ba d9 b2 85 80 04 49 c5 69 23 3e 23 2a 00 83 f1 88 38 26 b0 c2 40 6f 10 3a ee 16 e0 e3 1e 07 60 ce 01 0c ae 7a de b2 6d 50 f2 ed 8d b9 5a e8 a3 eb b2 e6 2c 31 3e 36 97 bd 35 65 7f 78 6f cf b4 73 4a 82 71 a9 2a e7 de 7b 4b 2d 87 8e b7 ab 6c 78 7b 69 29 00 89 88 ee 7e 33 7b 6f 83 00 37 a0 ee 99 69 db 60 43 77 81 dd dd 8e 32 30 05 ab 4d c3 21 09 6c 0d f5 Data Ascii: RIFFWEBPVP8L/IM@$9nSPv(xHhjr,$k2O@3GaT=UPQ<ccDUq_@;Ii#>#8&@o:`zmPZ,1>65exosJq{K-lx{i)~3{o7i`Cw20M!l
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 24 30 44 a2 be 97 f9 d8 ff ec 0e 65 d4 4c fd 62 96 00 09 90 24 49 bc 11 6f 22 81 b8 cf b5 4e f7 f0 1a 1f 64 78 7b dd cd 09 6e 01 40 80 24 df 38 7a 43 00 d8 c7 11 81 de eb 63 87 d5 01 ee 25 49 14 6f 4a 82 0c 06 f1 60 b4 6d 2d 7f 5c fe e8 17 33 00 ef 78 0f 90 43 92 8a 8f d3 c6 62 86 2b 74 46 0a a1 dd dd cf 2f 33 7c e6 fd 8d f7 00 49 0e 49 02 a3 fc 1a c6 b2 0b 9d 8b 6e 0e fd 2c 3c 28 09 58 f5 38 a7 f7 b9 e9 d4 d4 52 53 b4 74 ea 23 fd 64 3e bd 6e 7e d4 01 10 79 56 d7 62 36 b7 f9 bf e8 54 b4 b5 35 fc 79 b1 8b cd 6d b9 6a 5e 59 03 c0 1b 51 97 a8 f4 5e 87 ce b9 cc a5 b5 2f 1a ad b2 ce fd 01 e3 d5 04 49 02 c4 4a ef 6d 4d af 55 2a bd 55 20 42 c1 89 ef 66 02 00 4c ab 24 ec eb 25 8b b7 7a ad d7 ba b8 74 89 63 19 31 f6 16 f7 f3 d1 f4 db c9 4f 3f 9c fd 26 a0 24 2b 0d Data Ascii: $0DeLb$Io"Ndx{n@$8zCc%IoJ`m-\3xCb+tF/3\|IIn,<(X8RSt#d>n~yVb6T5ymj^YQ^/IJmMU*U BfL$%ztc1O?&$+
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 41 30 67 02 60 0c ee 3d f7 ec d9 62 02 f8 bf ff bf de 72 23 e9 f3 f9 e2 a1 cb 54 b7 b8 5c 66 b6 43 4e 1c 70 b0 bb 43 cd 1c 98 66 66 e6 ee 34 c6 ed 4c 27 1d 68 ee 0e 33 74 da 31 87 13 33 c4 50 55 76 95 8b e9 56 5d be e7 dc 03 5f f8 7c 3e 3f d4 b5 dd f4 07 bc 67 54 6a 69 e0 6a a8 c1 9a 74 66 16 4b a3 a3 d5 99 89 ce 82 7f f8 2a 3b 5e b2 6a 19 bc 50 83 d1 d5 e8 0e 7c 17 4e 4b 74 16 06 2d 79 18 bc d1 69 28 45 b5 e0 1f ce 40 2d e7 2c 43 14 a5 87 a2 5a b8 9a 39 03 a5 11 7e 35 62 b0 86 67 32 50 6a b9 c1 3f 54 7e b8 6a d5 62 74 96 a1 b5 c3 63 c9 ea f5 ae ee 28 f2 42 69 75 06 bc 9c 5a 06 77 d4 e0 55 69 78 a6 06 6a 29 7b 96 b9 14 35 95 9a bb 4b 91 b3 7c 17 ee 72 ee 0f 1e 89 79 c6 1a 6a b0 26 db 50 8a 74 b7 55 d2 0a 03 b6 6d 87 25 49 7a df ef fb 23 e2 f8 a4 2a 2b cb Data Ascii: A0g`=br#T\fCNpCff4L'h3t13PUvV]_\|>?gTjijtfK;^jP\|NKt-yi(E@-,CZ9~5bg2Pj?T~jbtc(BiuZwUixj){5K\|ryj&PtUm%Iz#+
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 84 e1 b8 c1 8a 1d f3 16 20 dc 33 bc 3a 88 43 82 8c 7b 20 00 27 d8 9a 42 22 ca e6 75 02 ec 47 67 f3 90 80 00 5c 01 88 ec c2 09 0f 35 76 41 2c 05 64 29 7a 75 04 90 14 80 0d 0a 19 7b 92 ed 56 8d 9a 78 7a 52 33 d3 ab 5b f2 5a 80 41 6b b7 d6 46 aa d7 47 54 5f 94 74 b6 07 5b 53 48 49 f6 57 54 d8 35 d1 42 71 c2 39 6b 6c 49 49 61 f3 71 4a 0a b0 e3 90 02 0a a6 70 e0 74 0f b6 ab 31 ba 8c 8e 99 1b 90 ac 86 25 c7 1d ab 1b 54 37 cf 6c 56 47 28 37 a3 5b e6 04 60 9e 90 7b 52 00 62 ff 25 25 11 d4 00 c5 2b 21 9c 31 e5 b4 ad 01 34 08 b5 5d c2 06 5c 81 00 48 b2 0b 24 25 25 41 f2 14 61 f7 25 91 36 65 a3 ba e3 e6 ea 20 50 1d 92 0a 64 15 8e a3 4f 34 69 dc 42 05 47 47 f6 63 42 4a 4a dd 8d ec 03 27 05 92 ed e1 04 48 82 a4 50 77 54 f0 00 21 05 48 61 33 9c ab 0d 01 ae 38 a3 b0 79 Data Ascii: 3:C{ 'B"uGg\5vA,d)zu{VxzR3[ZAkFGT_t[SHIWT5Bq9klIIaqJpt1%T7lVG(7[`{Rb%%+!14]\H$%%Aa%6e PdO4iBGGcBJJ'HPwT!Ha38y
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: b5 3c d7 ab ff e0 73 5d b3 5d ee cf 7f d1 e5 6e ab 9d d0 0f bf f9 2e e7 5e 62 7d ad de fb b8 c6 16 87 fb 9d 21 67 9a 69 00 e4 29 45 64 0b b0 08 72 ba 4a fa c1 d9 27 13 9b a6 0c 60 ec fa 82 11 83 31 06 92 51 35 24 8b 93 bb c1 6e 3c 53 ce b2 1d b9 8f c6 c9 0b 36 72 6d 71 73 55 10 09 ea 33 f8 b3 43 7b bf ab 9e 5c e6 63 ef b9 e2 b7 bf 57 60 28 7c d9 db 7e ff 04 cd ac aa a5 dd a5 b3 71 97 f4 00 e7 f9 3e f0 07 10 f5 32 bf f6 39 2f f8 9e 3f 68 83 5e f2 07 3f ed 46 a7 1e e4 93 f3 60 5c c8 5a ff b4 50 11 81 9e 67 b6 56 87 c7 10 87 33 ec c1 10 70 4e d1 1e 37 3e 37 01 c3 e7 6c de 7c d3 b9 02 84 02 0e ec 2f 52 1b ad 04 1a 02 0a 3c 03 9e f6 62 1d 49 96 9c bf d9 38 86 a8 6f c6 36 6a e2 f5 d9 3a 5e 7d b4 55 94 a2 e0 99 67 5b 25 32 0e c3 1e 19 77 a6 82 ed 7c 14 40 07 67 Data Ascii: <s]]n.^b}!gi)EdrJ'`1Q5$n<S6rmqsU3C{\cW`(\|~q>29/?h^?F`\ZPgV3pN7>7l\|/R<bI8o6j:^}Ug[%2w\|@g
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 92 11 b8 4a 1a 27 6f c6 33 90 7e 83 8b 3d 9a 09 f9 08 b5 cb 57 4e f4 78 74 72 03 b0 f1 80 60 1a 1a 6e e9 00 00 78 d3 e8 9c 26 1f fd fb 3f f8 58 3f f9 c1 e5 be fb 63 ef aa 09 00 91 46 80 16 e8 00 00 20 22 66 3c d3 2b fe ec d3 fc db 5f 7c 5a bc de 5b 7c 24 b8 cc a0 15 5c ac 80 4e 00 e8 04 23 64 c1 8a c8 54 00 5c 1c 86 7f e4 0c 11 0e 09 28 0e 1a 7b a8 fa b1 22 85 49 dd 85 cb dc f1 ba 73 b5 ac 86 35 a1 1d 25 26 85 46 55 c5 2e a5 83 df 58 6b 39 d7 85 91 46 f3 cb be bc bc ec 9c 27 67 6d 61 22 00 80 16 00 30 ef 9e 50 7f ba b7 fc fe bf 99 2f d6 04 98 34 06 93 76 00 04 9b 5e ec 9b 57 ca 74 a3 8f 04 80 72 13 b8 78 29 66 a6 41 c3 2e 30 a6 6a f3 20 db 60 20 4e 0d 20 26 15 27 4d d7 43 8a 54 79 ee 68 4f ed 81 9d d3 ab 64 55 59 ad a5 59 57 83 75 c6 43 fa 88 93 45 83 5d Data Ascii: J'o3~=WNxtr`nx&?X?cF "f<+_\|Z[\|$\N#dT\({"Is5%&FU.Xk9F'gma"0P/4v^Wtrx)fA.0j ` N &'MCTyhOdUYYWuCE]
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 2e d9 be ee d3 60 d3 af f4 dc f5 67 98 ae 03 8f f3 e1 3f a3 02 97 f2 5c ff fe 47 46 50 eb 4f 75 fd cd e9 46 5f dd 0d 1c 4e b7 a0 de 18 00 82 30 10 b6 16 a0 23 04 98 50 0d bd be be 16 01 01 13 aa 69 75 a6 5a d5 52 8a eb 2a d7 f3 62 49 94 b2 c1 9b f2 9b 7c f2 29 a9 34 7e 8f 2b 4c 2f 9f 5d 52 02 ad c0 c6 e6 79 7d ba 54 23 db 3c ee 79 0f 74 1a 55 3d fb a1 db 8b 52 63 c9 e3 7d f1 57 54 53 23 c4 97 3b 7b ba d9 8f 7d 81 4c eb 8e da 10 18 46 bc 06 bc e8 03 7f f5 15 7f ec 37 af 0c 47 3d c4 09 3a 4f cf a6 6a 13 43 af 3f fe e7 5d 1d bc 6b 84 b2 dd f8 fe f3 cd 2f 67 49 ed 19 67 78 b5 fe 0b 3e 88 17 33 f1 73 76 f4 98 a2 db 4a 6e f0 85 95 a7 b7 8e 5c 30 5c 3f 7d 13 22 1e e5 d4 2d 1c ad 1c e8 66 df ff b1 8f e3 ba 70 e2 22 f9 f5 7e d0 f3 f7 b6 dc eb fa dc 27 00 88 00 a4 Data Ascii: .`g?\GFPOuF_N0#PiuZR*bI\|)4~+L/]Ry}T#<ytU=Rc}WTS#;{}LF7G=:OjC?]k/gIgx>3svJn\0\?}"-fp"~'
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a4 f9 2d de 9b 0a 1a dc 3c 9d 30 d4 cd 04 60 ee 80 86 73 61 5a 63 c2 f1 74 10 18 39 1d 10 05 41 68 58 23 11 48 9d 1e 32 22 99 a9 00 d0 79 0c 74 e8 02 40 10 20 b2 b4 23 04 c0 7f 0d 2b 10 ec d8 54 03 8a a0 40 01 ae b8 62 27 44 e6 11 aa 65 46 5a 00 b9 14 1c 12 d5 e4 7c 30 9c dc 77 a5 25 cc 52 27 8d 46 3d 46 c5 11 3d a0 60 c8 c0 82 37 3e f4 23 20 0d f1 c5 70 22 91 c1 bb 3b 9a 3a 00 00 d2 d0 60 b0 a1 06 0d 00 80 4c 10 00 a0 a5 03 82 00 00 c1 d8 62 80 14 80 d9 03 76 75 07 14 80 1d 50 00 84 cd ab 20 6b a5 1e ed 88 5f dd 90 74 15 66 98 a5 23 4c e1 11 59 eb 3c 7b 9a 32 0b e5 2a 1d 8e 7a d5 6a 26 c6 77 13 63 f1 a6 05 27 5a ad 1f 4b 19 0c 43 8c 48 3e e2 e4 39 1c dc 84 3c 66 2c 12 44 e4 75 01 22 60 ce 0c c2 a4 41 68 0e 4d 92 86 49 53 60 66 34 50 90 01 40 0d 04 b4 80 Data Ascii: -<0`saZct9AhX#H2"yt@ #+T@b'DeFZ\|0w%R'F=F=`7># p";:`LbvuP k_tf#LY<{2*zj&wc'ZKCH>9<f,Du"`AhMIS`f4P@
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: ed af 59 f5 ff fe 17 ab 6f b1 ea 3f b7 fa b6 cb ff 8c 15 ff c2 19 0f 79 06 ce 6a 13 f1 e4 ca fd d2 57 c7 d9 1a 9c de 11 f7 39 05 93 ea 50 5b 9c 22 06 98 66 08 26 15 bd e3 34 6d 76 cf 24 ed 8e af a1 b9 f0 b2 f7 3f 0f af 41 3b f5 e1 79 be d0 44 92 37 3d 6d b2 11 4e 77 80 04 4c 98 84 cd ba e3 4d 33 78 de 87 fa 79 de f2 09 2d df e4 61 4f 2b b6 b0 0b 82 d9 65 4f e1 8c bf f1 6b df c1 fb df f3 d1 5f 74 ce 1a 9c ae 66 8a e9 fd 98 34 05 00 10 82 06 43 46 08 fc a1 c4 3b 48 e3 38 7e f6 f8 8f 3c 6b f3 7e 84 31 47 46 b2 0b 04 e4 e8 40 8f 56 84 81 c1 02 30 03 ec a0 aa 55 ad 00 69 98 06 82 68 a7 0d ae fe 63 23 1f b8 6e 42 59 a1 d7 77 4a 2a d8 fd 1f 75 a1 17 ab 6e 83 fc fd fa 33 6e f7 d2 3a c7 9f 74 47 47 b6 39 6a 4e f3 2d ed ef db 3c 71 fe 69 b6 ab 05 77 ad 60 e8 7d 39 Data Ascii: Yo?yjW9P["f&4mv$?A;yD7=mNwLM3xy-aO+eOk_tf4CF;H8~<k~1GF@V0Uihc#nBYwJ*un3n:tGG9jN-<qiw`}9
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 32 79 8b 4a fa f0 5c 78 db b7 f6 ba f6 e5 fe c7 1e f8 9d cd 36 d5 00 38 02 d7 bf f5 97 3e ae fb cb 7a cc 97 f1 fb 57 ac 62 ef 53 b0 58 ed 5b bd 31 4f f6 8a fd b6 ff b1 9c e3 fb e6 ed fe 61 7d dc e7 ec f6 fc f4 b2 d5 ef e2 00 81 d1 0e 01 bb 0f 00 f0 f0 0a a0 12 32 61 6a c2 b4 1e a1 d5 b6 c4 84 75 15 a9 83 e8 24 23 e3 f5 bd 64 62 9d 42 25 2e 80 b6 71 68 c8 38 bd 91 d3 78 6c 79 39 f5 22 48 a2 e6 c1 20 62 91 e1 27 a3 8e 70 78 31 15 b2 5c 79 37 a3 27 69 d3 ea 7f e2 92 20 00 a6 d4 80 53 dd ae 75 35 64 e3 ec 98 b9 70 bf eb 5f 5d f8 f6 37 fa bd f4 8f 73 5a 15 ac 95 88 10 c0 65 bf d2 37 be 9d e3 c7 39 6e cb e7 fb 12 af 60 a7 b7 e5 dc bf e8 17 7f d6 7c f9 af ff fc df fd 26 bf bf 9e f7 2f 6b f4 1d 39 c7 0f 4d 9f 74 bb 5b d6 e1 ff 41 60 b6 de a7 ed 1d 7f c2 58 68 10 Data Ascii: 2yJ\x68>zWbSX[1Oa}2aju$#dbB%.qh8xly9"H b'px1\y7'i Su5dp_]7sZe79n`\|&/k9Mt[A`Xh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49821	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1106	OUT	GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 36974 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11076 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	720	IN	Data Raw: 52 49 46 46 66 90 00 00 57 45 42 50 56 50 38 4c 5a 90 00 00 2f a5 c0 49 00 4d 48 6c db 48 90 24 d8 53 ae b2 ab 71 f9 07 3c 3d fb 1f 42 44 ff 27 a0 aa 22 cd 64 24 f9 ec 4a dd 52 f7 c5 96 7d b4 92 7d db 91 f4 a2 2d f9 91 ba b3 a3 48 12 f5 36 ee 23 d9 6b ee f6 ac bb 77 07 df 07 f7 da 9e 77 4b 18 4e 77 db 70 92 9e 19 48 bb dc dd 75 03 ec d8 33 91 ba 5f 01 80 62 d2 dd d1 4c 53 1a bd c0 7c bf 94 99 09 98 99 24 9b d1 a5 07 40 91 d3 c9 ee 36 47 d2 8e 01 30 f9 92 d6 33 04 00 f7 5e 86 6b 33 58 a0 0e fb 00 c0 39 07 d7 c5 bb a9 2b 29 49 9e 4b b5 50 96 e9 0b 00 02 f5 f0 8f b6 99 7c bc 8b 27 91 48 bd 96 17 e0 a0 6c 51 b2 0d 64 a7 80 da 75 2e ab c6 77 d6 34 bd 6d fc c2 1d 5a dd 92 1a 48 be 8e 39 73 bb 12 e4 1c 1c bc cf 47 e1 00 33 94 1d cd 07 70 50 bd 54 92 cc f3 22 00 Data Ascii: RIFFfWEBPVP8LZ/IMHlH$Sq<=BD'"d$JR}}-H6#kwwKNwpHu3_bLS\|$@6G03^k3X9+)IKP\|'HlQdu.w4mZH9sG3pPT"
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 8a 15 8b 98 c0 56 e3 0b 0b e5 a6 06 e7 b9 bc 95 cf 27 20 86 61 b1 9a e8 21 fe fc e0 2b 00 0c 58 5c 5c 5c 3e af 19 00 58 2c 10 41 5b 57 f7 d0 3b 00 16 02 02 7f 6a e3 e2 45 b7 1b 00 01 24 fe fc d8 06 76 b7 9b 6b e1 9a 42 44 14 c0 08 80 cc 33 cf 9f 56 be 53 f1 6b 3d 3b 65 ed cf 36 d0 5c 0b 57 fc 1c b1 28 cf 1f d7 73 67 cf 1f 1f b2 93 4c be 57 d9 45 26 71 77 64 b3 5b 75 70 32 39 83 01 15 20 41 02 01 56 7c 5f ec cd e0 f7 14 f9 dc 33 57 ec 78 12 42 21 49 0f 62 cd bd ba 61 cd da de d8 07 b7 07 5f 1d be af 38 53 67 e5 c9 bc ac 79 e7 c9 bc 98 28 8a e2 f7 ee 74 67 e1 6e e1 61 ea 49 8a 61 60 ea 4c 9d b8 cb 48 3c 19 46 67 52 8c 8b 27 cd 11 62 22 a5 38 71 b7 70 97 99 b8 c6 ae a5 6b 38 7c eb d9 79 de 7d 67 bc f2 02 ea dc 48 23 3d c0 50 8c 7d 4f bb 5e 76 0d 38 c7 08 8c Data Ascii: V' a!+X\\\>X,A[W;jE$vkBD3VSk=;e6\W(sgLWE&qwd[up29 AV\|_3WxB!Iba_8Sgy(tgnaIa`LH<FgR'b"8qpk8\|y}gH#=P}O^v8
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 35 0a 81 63 0a b3 7c 9a 70 03 48 2b 9a 18 87 8e 4a d3 7a 72 13 40 23 80 e1 81 ab 0e 5b 66 95 10 0b 4c c5 ec d4 2c 4d 16 a0 d9 81 d5 6d 18 61 96 88 29 64 5b 00 8b 49 78 28 26 ad cc aa 41 30 0d 40 10 80 60 04 0e c4 51 16 41 d1 d2 07 07 22 64 c4 11 11 31 10 c7 21 23 62 1c 21 43 96 21 08 2c 47 07 30 10 5b a1 52 b6 0a ab 10 dd 5a ae 08 84 c8 48 62 a5 00 aa 32 a6 62 57 39 30 4a 19 02 4a 0b 15 4a 24 56 a5 50 8c 72 d0 2a 26 ac 00 7a 15 43 a2 8c 11 94 00 89 31 15 91 d2 28 65 83 48 33 82 00 30 1e 66 18 3c 46 03 6c ca 10 49 24 8f 21 03 05 08 20 20 01 00 51 46 60 44 c4 65 94 18 07 a4 11 40 40 a9 32 54 a3 24 8e 43 a5 f1 74 4a 65 b5 3a 0b b4 02 11 62 a7 83 34 40 c0 34 03 80 26 20 14 89 88 5a 8a 56 6d f9 b3 b1 c4 b1 1c 38 22 14 90 ad b0 9a 62 52 40 0b 31 12 c4 b6 02 80 Data Ascii: 5c\|pH+Jzr@#[fL,Mma)d[Ix(&A0@`QA"d1!#b!C!,G0[RZHb2bW90JJJ$VPr*&zC1(eH30f<FlI$! QF`De@@2T$CtJe:b4@4& ZVm8"bR@1
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 45 70 48 ad 04 44 a2 c1 08 01 06 ca 80 48 cc 24 4a 81 0c 95 ba 72 9a c0 59 f6 84 22 c7 cd 2a 22 90 0e 44 95 c0 42 dd 6a 45 44 60 8c 23 01 23 23 b4 6a 14 4b 91 08 2b 89 c4 12 88 81 63 89 b1 a2 03 28 51 56 d0 b1 95 52 71 84 12 04 50 22 54 13 2a 81 41 a0 0f 0e 03 37 00 64 a0 c1 21 28 62 10 41 55 e0 d2 a0 84 00 12 31 62 09 a0 50 6a 0c 00 14 12 40 1a 9f dd 50 73 4c 37 6d ec 84 41 b1 42 8b 94 ad 59 47 37 a6 c4 12 26 6e 02 63 80 11 33 a5 85 63 5c 4b d3 51 3b 96 6b 52 64 05 00 07 e2 56 49 71 a3 ca a8 d2 02 34 29 10 8a 9a 0a 45 42 85 2a 88 96 24 a9 88 0d 00 6c 62 19 07 cc c5 04 04 9b 63 01 04 40 09 1c 62 ca 10 09 8c 71 d9 14 a0 0c 88 10 09 6a 45 33 0c d4 67 28 b5 12 d7 56 49 94 60 95 2a 6d d7 95 d2 c5 8d a8 40 40 16 29 e3 12 c4 40 4a a4 88 bc 42 4d 93 da 1a 6e 58 Data Ascii: EpHDH$JrY""DBjED`###jK+c(QVRqP"TA7d!(bAU1bPj@PsL7mABYG7&nc3c\KQ;kRdVIq4)EB$lbc@bqjE3g(VI`m@@)@JBMnX
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 04 20 8e 4c a7 20 0d 42 0b 21 b5 4a 55 cb 31 84 88 4a 85 ca 88 32 5a 22 b1 8c 03 40 34 72 98 21 80 11 23 82 30 cb 54 0d c4 d8 84 00 47 84 00 32 4a 80 74 41 1d a6 ab 5a 4d 2b 01 50 01 91 8e e9 56 c4 a3 d0 0e a2 28 48 f3 aa 11 d5 b8 91 c0 90 52 06 66 90 b1 08 a1 59 42 5d 56 58 9d 56 a7 d5 14 38 46 c4 88 a7 12 b0 6a 84 e1 b4 16 33 59 2f 2d 01 60 b5 40 80 ba 55 41 62 a0 44 31 e3 88 71 44 8c 10 e0 a5 98 28 05 65 20 a4 e0 22 80 94 e3 72 e0 22 12 81 02 41 b3 90 e8 32 2e 73 96 40 53 02 61 51 aa 39 00 04 c5 02 34 43 51 53 b7 3a a2 91 5d 81 88 30 a3 41 d9 9e 89 46 20 21 b2 76 53 55 af 54 3a a5 11 a6 4c 81 db c6 01 84 a2 0a b3 0c 2a 42 98 90 92 45 95 a8 08 65 90 95 a4 51 19 05 05 81 88 81 03 18 08 14 31 40 c1 4d 13 62 2e a6 c1 22 28 e3 28 18 08 2c 87 3a 84 a8 c6 17 Data Ascii: L B!JU1J2Z"@4r!#0TG2JtAZM+PV(HRfYB]VXV8Fj3Y/-`@UAbD1qD(e "r"A2.s@SaQ94CQS:]0AF !vSUT:L*BEeQ1@Mb."((,:
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 01 00 58 02 0c 61 08 30 48 0a 4b 82 9c 42 33 d9 fa bf fc e6 37 ff b7 7d e6 11 66 48 1f db df f8 c5 47 fe 36 a7 2c 65 0c 20 98 25 26 48 50 30 aa b4 96 24 5c 02 17 fa b3 7f 34 95 77 6e c6 b4 20 56 2b 25 27 c4 d3 9e 44 a6 a4 6a 15 91 25 78 63 35 42 9e fa 3c c7 e6 d1 18 03 e2 14 f5 a4 08 86 91 68 19 40 4d 62 89 45 90 34 62 85 19 15 0c 20 8c 2a 4c 40 04 04 00 60 90 30 80 24 58 68 81 53 09 03 0c 31 02 82 31 e2 78 6c 9a 9e 6c fb cd 6f 7e b7 df 7c 6a f6 e4 06 ab 9b 0f 3e f2 6b 7e f1 31 d7 22 45 46 29 49 d4 12 4d b2 48 3c ea ae 64 2e 29 2a 88 df 75 4b 96 69 c4 34 6e 40 41 ad 58 05 ca a2 d6 1d ab 31 9a 99 c9 0c 5a e3 a1 11 34 82 b0 ae 56 32 a0 62 ea 6c 5a 2a 7b 15 16 55 9b 55 02 6d 6b 56 b0 4d 50 8a 5b 02 60 62 95 12 00 22 06 50 30 22 02 f1 08 14 41 2c 11 11 cd 18 Data Ascii: Xa0HKB37}fHG6,e %&HP0$\4wn V+%'Dj%xc5B<h@MbE4b L@`0$XhS11xllo~\|j>k~1"EF)IMH<d.)uKi4n@AX1Z4V2blZ*{UUmkVMP[`b"P0"A,
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: db 25 d3 7f fe e5 1d 27 02 b8 2c 82 28 11 05 62 62 20 46 04 06 16 48 8c 51 8c 34 45 00 2c 01 20 46 c4 05 62 ca 08 81 51 91 29 2b b2 92 21 49 8d 5a 55 13 c5 4f ab 6a 1d 21 ad 6e 56 0c 2d 00 98 13 4a 82 dc b2 9c ca 03 59 ec 1e 94 19 37 2b 2c 56 33 3a 06 1a 89 05 18 31 ea 50 46 19 8a a9 b1 82 59 56 58 64 36 90 d4 eb be 9c ad fb 7a ee 4f c7 e7 fe ec f6 71 5f b0 bb f1 ea fe f8 7b a5 a3 b7 fa c7 9f 3a 5f 4e 00 2c bb 2c 81 47 04 0a 70 c4 00 24 8e 11 82 88 21 08 41 44 8c 88 88 81 80 20 ca 40 00 02 21 80 2a c4 2a 56 ad 30 d1 20 eb 6a ce d2 56 d5 44 b5 c9 94 86 d8 3a 49 cd 3b 24 ab 48 8d 42 a7 2d b0 5a 06 81 ad ea 16 19 0c 46 d9 56 8c 22 80 31 a8 8c 58 ca b6 15 c6 58 60 43 d8 08 6c b0 cd 07 78 f0 03 bc fa 72 cf fc d6 f8 d1 c7 3f d3 3c e9 6f 7d c9 76 e9 17 a3 0e 5e Data Ascii: %',(bb FHQ4E, FbQ)+!IZUOj!nV-JY7+,V3:1PFYVXd6zOq_{:_N,,Gp$!AD @!**V0 jVD:I;$HB-ZFV"1XX`Clxr?<o}v^
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 02 80 22 a9 85 64 21 ad 55 03 21 33 b1 35 84 09 26 b5 a9 58 a5 b3 38 28 9b 08 a1 92 0a 85 0f 52 81 43 a9 50 5a 95 a2 22 6a 4a 5c 22 ab 92 b2 01 40 62 cd ad 1d ba e5 99 27 b7 91 c5 b9 f1 ab 5b ce 51 42 48 cc 7e f1 f8 02 3b 10 24 48 81 18 18 88 01 00 03 8d 04 02 21 88 11 8f 88 18 12 c7 90 a6 8c 18 88 90 51 8c c0 88 91 51 e0 6d 60 00 2b 34 78 b5 00 28 15 22 48 2a 15 0b 93 88 aa 19 14 44 69 45 50 55 75 4c 91 62 75 88 8a 88 38 e4 50 37 11 37 37 ad 4a 09 c2 15 54 2a 00 80 ae 0e 3c b8 b6 5d ac f1 ab 5f 3d b5 fd 72 9d 29 0b 00 42 fa fd ef fc fa 3a 08 00 10 0e 09 60 00 40 a9 49 c8 a5 8c 81 31 80 08 00 23 22 80 28 b2 41 08 02 00 ca a6 c0 40 e0 75 04 02 00 a2 08 06 42 d3 98 08 54 0b 4b ac 32 a6 59 4b 09 a0 49 ae 64 ca 13 98 52 d3 d2 20 12 29 fa b6 74 33 10 ef ee 84 Data Ascii: "d!U!35&X8(RCPZ"jJ\"@b'[QBH~;$H!QQm`+4x("HDiEPUuLbu8P777JT<]_=r)B:`@I1#"(A@uBTK2YKIdR )t3
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 43 00 50 38 81 43 01 5c 67 04 00 b8 74 de 6d dc f9 9e 4f d8 1c 06 e4 12 4b b9 bc 19 40 60 a0 80 ae 44 70 09 1c 61 10 28 31 02 82 00 46 2c 21 80 a0 09 53 0a 42 8a 88 84 57 09 bc 46 53 22 80 08 b9 91 22 cb 22 4d 34 32 d5 ca f1 21 47 1c 61 a4 44 7c c4 74 30 3a 96 9b 8a aa 43 57 15 4c 1f cf 2a 46 cb 07 05 a1 00 40 e2 43 9f 3d db 67 dd 79 c8 de 73 b9 f2 9f ea 5e d7 ff 37 cd 0b c4 e3 ed bd 88 1b 7f 1f 05 00 15 40 00 66 2e de f0 f5 4f db bc 10 e3 88 08 d1 10 cd 88 52 96 61 62 c0 c4 18 11 32 04 02 44 00 8f 08 20 10 0b c4 14 44 0c 41 88 29 12 00 44 13 8c 80 00 42 88 20 a0 08 8d e1 e6 5a 2b 24 9d 5d 02 91 d5 b4 f3 e2 e3 90 48 91 12 90 ae 74 91 ce e8 a6 ac ee 09 e9 dd e8 a0 8c 00 2e a3 04 00 13 f9 aa 9f e8 d1 3f ad 0e 06 ef 40 fb 84 bd 8b d9 78 ac dd 53 23 bf 35 a7 Data Ascii: CP8C\gtmOK@`Dpa(1F,!SBWFS"""M42!GaD\|t0:CWL*F@C=gys^7@f.ORab2D DA)DB Z+$]Ht.?@xS#5
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 55 f1 e1 ba 02 10 52 c8 a3 1a 49 28 01 44 28 23 29 a3 b8 25 8d b4 30 aa b4 03 bc e8 5b 1f 2d 1b 06 80 40 08 80 81 c0 18 80 08 8e 88 06 80 19 88 28 82 26 36 01 34 58 40 56 52 12 01 01 00 82 26 6a cd 19 4e 45 55 92 45 a8 6b 25 6e 5b 97 be ed 2c 25 45 a9 12 a9 93 10 42 20 8e 11 81 e6 00 ba 9c 5c 25 06 08 bc 52 55 94 71 83 4c b3 a2 b5 42 86 97 d2 7c 92 b3 f0 20 20 80 26 70 00 01 60 8c 18 0f 88 60 20 42 80 40 2c 05 88 1e 89 40 29 00 35 00 18 28 15 05 10 89 28 4d dc 1c 87 2a 25 9a 2c 5a 47 43 0a 37 b8 22 3a 21 70 d4 65 e9 46 8e 23 99 22 87 d2 45 c5 22 55 81 11 91 c9 12 a1 a1 9d d4 76 12 1a f5 47 24 10 00 80 28 c0 ea 63 25 08 00 0c 91 30 e8 72 1c 47 c4 e8 82 01 2c 12 45 a2 08 30 20 90 01 40 a4 08 29 92 29 b8 45 37 ad 10 29 75 29 21 67 b8 c9 54 49 d9 11 1f 57 1f Data Ascii: URI(D(#)%0[-@(&64X@VR&jNEUEk%n[,%EB \%RUqLB\| &p`` B@,@)5((M*%,ZGC7":!peF#"E"UvG$(c%0rG,E0 @))E7)u)!gTIW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49822	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1106	OUT	GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34150 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11076 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	720	IN	Data Raw: 52 49 46 46 5e 85 00 00 57 45 42 50 56 50 38 4c 52 85 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 22 67 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a bb bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd eb a5 2f 24 75 49 ea cd 5b 5d dd 03 39 6d 5b 9b ee a5 ab fa be 96 ea 7f ab bb 1b c0 00 66 2c ef fb 0a cc d9 06 5e ec 99 1e f9 cf 14 d7 d6 18 a3 98 12 08 09 10 ca 91 43 99 c9 b5 0f b2 e2 48 38 33 87 33 93 8c 30 52 cd 8e 58 06 36 30 39 2f 5f 5b 0c a6 15 fb cc ac af 24 1b 91 5c 3c 2d d9 c6 9c 0d 74 4b c4 f5 92 58 8c 18 63 6c 7e a1 83 15 41 1c 37 92 22 22 00 2e c0 9b cb 25 d3 b2 ee 06 22 2d e2 d2 21 49 0c 89 48 ce 63 02 cf 98 26 e4 8d 40 4b 95 4c 04 e7 98 18 49 b6 e2 98 68 fe 7e cf 12 11 c1 46 96 be da d8 5c 86 3e 27 03 11 11 76 f8 f3 63 c3 29 22 6c ad 36 71 54 84 bb bf Data Ascii: RIFF^WEBPVP8LR/IM8lF"gn/Y_<BD'*nzw/$uI[]9m[f,^CH8330RX609/_[$\<-tKXcl~A7"".%"-!IHc&@KLIh~F\>'vc)"l6qT
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: bd 8f cf 00 8f 04 00 1a e6 23 56 97 56 97 00 7e 77 9d 15 a9 86 b0 dc 4c ab 61 b3 fa b3 07 00 cc 77 6d 83 35 77 6c 98 50 0d 61 31 03 50 cb 00 00 ee df 03 bc 2f 77 f3 fa fa 8e 9b e9 0b 2f ce da 1e 80 c0 e4 1c 9e 29 10 7e d9 f7 59 7f 46 18 36 a3 eb fd 01 13 a6 06 00 51 27 6f 7b 77 ba a3 b2 66 82 4b 80 6a 9a ff ef 95 61 35 87 db f5 31 2e 4e 2a f0 44 13 2c 6c 5e f3 d0 02 58 30 01 c0 05 f2 72 f8 cf 01 9c 2c e2 7c b9 8f 00 40 fc b6 bd 34 33 58 0a 00 75 db da df 99 2e 2a 8c 8b 67 8f ca e2 7e 0b bb 4a 0b 8c 2e 8a 27 9b b2 ac 59 93 c6 25 84 1d 97 c0 4e 6d bd 80 44 d1 77 b6 5e 93 cc f1 ef 65 b9 52 77 00 d0 b4 a9 0c 48 08 46 c9 ff fe a3 a2 a0 00 33 e6 05 4e 22 c1 e6 6f 6b b7 30 48 7d bd 50 76 dd d8 81 45 01 eb eb e3 fe 66 84 9d 82 72 f9 a1 ec ba 53 07 88 84 71 1f ec Data Ascii: #VV~wLawm5wlPa1P/w/)~YF6Q'o{wfKja51.ND,l^X0r,\|@43Xu.g~J.'Y%NmDw^eRwHF3N"ok0H}PvEfrSq
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 54 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d 00 04 00 e3 01 dd 85 14 d0 27 52 ea 40 a5 d2 9d 50 a5 10 25 25 ea 28 91 24 2a a4 52 05 3a 45 a5 a2 82 4a 9d 42 49 29 75 2a 15 89 54 2a 75 0a a5 8a 0b be 0b 28 51 a9 54 aa c6 69 cc 48 57 ac 37 a7 23 c5 06 ab 9d 6a 24 64 5d d0 d1 51 8d cc 29 08 2a e7 14 36 95 a2 5a c5 48 81 65 b8 26 65 cb 5c 43 1b 60 ae c9 1a 05 9b a9 1b 14 80 46 30 20 68 33 03 e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 16 06 d6 a6 6e 3c cd 60 eb ae 14 45 d4 29 67 4a a5 b4 9c 96 a5 8a a8 13 db 18 42 ad aa 29 15 35 56 69 21 95 9c eb c4 99 91 94 96 99 02 75 ed 5c 5d 98 14 07 d3 d9 06 a4 6b 3a d3 42 4b 92 ab 97 91 ec 5c e9 8c ca 40 54 64 50 14 57 1a e7 ca 02 d1 5a a4 83 30 6e 49 a2 43 b3 2b 46 02 07 d3 ee ed 14 97 67 6c 0f 14 21 27 b6 82 Data Ascii: TTDTD'R@P%%($R:EJBI)uTu(QTiHW7#j$d]Q)*6ZHe&e\C`F0 h3XT\n<`E)gJB)5Vi!u\]k:BK\@TdPWZ0nIC+Fgl!'
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 54 da c8 d9 25 9b 0c b2 b7 ac 29 75 c9 91 b3 a3 b4 0d f0 02 43 39 77 51 81 33 e0 b5 88 73 87 ab 6e 31 e3 8d 57 0d 68 b7 2c 42 ac 5a 8b 76 ee 54 a5 ea 7a 19 55 89 1a 57 4a 31 8c 54 8c c0 20 33 63 10 32 a1 0c b9 43 5a 45 c4 58 0c 85 ab 8d ce 42 d2 25 15 58 56 55 c6 9b 1d 30 b8 0b 39 8f 97 d7 52 9c b1 4a 65 b3 0a cb f2 c8 15 12 83 a4 b2 c8 42 ac a5 c8 58 96 89 2e 54 2a 8b 31 43 49 94 50 fc 97 53 95 43 f2 2d 37 42 2e 54 8c 0a 16 4b 48 4b e9 2c 97 dd d5 8d 10 14 30 53 a8 43 26 dd 8a 0a 25 30 a5 24 89 32 81 31 45 6d 70 52 24 51 e7 ea 42 91 4a 69 50 23 42 70 4d a7 a4 52 d0 24 53 ba cb 5d 2e d5 dc 51 e9 52 a9 14 49 29 a9 81 9a 4e a8 d2 a9 52 90 0a b1 29 29 a8 94 8e 2c 11 b1 19 32 a5 52 a9 94 91 92 e8 a8 06 98 52 54 29 98 52 a6 42 92 8b 1a a1 d1 24 35 72 52 29 55 Data Ascii: T%)uC9wQ3sn1Wh,BZvTzUWJ1T 3c2CZEXB%XVU09RJeBX.T*1CIPSC-7B.TKHK,0SC&%0$21EmpR$QBJiP#BpMR$S].QRI)NR)),2RRT)RB$5rR)U
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: c6 92 19 98 ad 24 58 82 b9 e8 51 24 ab 32 32 ea 6a 43 43 15 ce 17 c5 5a 1a 55 19 75 c5 50 14 ba 46 30 a4 a5 49 4e 8f 92 28 78 07 18 73 c1 54 a5 81 44 2a a6 20 05 d8 a9 ea a6 a3 a8 c6 74 c8 58 0c 4e b9 26 14 e9 61 6b 68 ba c6 68 49 11 d4 29 19 33 40 5a 04 6d 2a d5 08 9d a8 52 29 aa 1d 99 4a 94 36 b7 de 14 55 0a ba a8 29 75 6a 6d ca a0 8a 0d 4e 9b d0 a5 d2 e9 38 a3 24 ad 31 3d 4e 98 a0 13 6b 04 4c e7 a2 8d 2d b6 a9 9c 50 c9 50 d9 05 93 34 e5 b4 6a 03 40 6f b6 53 ca d4 60 4e c1 90 0d 4e cc 89 2c 96 72 35 c5 68 96 ea 38 ab a5 2e cc aa b3 a1 d4 b1 af f2 48 e9 65 49 5b ab 76 26 93 c8 db b7 94 e9 2c f8 c0 1c 70 93 47 66 27 99 9a 51 be 52 35 92 ae b7 5c 83 d0 39 85 1d 0b b1 88 b6 0b 25 aa e4 94 33 02 d4 29 1b 17 cb d6 53 ed 2c 2b 04 74 5c d5 48 e0 66 8a 16 04 f9 Data Ascii: $XQ$22jCCZUuPF0IN(xsTD* tXN&akhhI)3@Zm*R)J6U)ujmN8$1=NkL-PP4j@oS`NN,r5h8.HeI[v&,pGf'QR5\9%3)S,+t\Hf
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 02 90 0a 09 05 b5 03 ea 52 92 2e e7 48 a5 6e 96 79 0b 06 76 b4 b7 15 3d 48 b7 5e 8b 5d 68 2c db b2 57 a6 41 6a 2f ce b9 0f 72 86 ca bb 51 53 38 30 92 cd 0b 0f 6d ea 4f 06 09 84 17 2f f5 47 bf fc 2c 5a cd 6f de fc f1 b2 2b 53 84 46 12 68 24 2a 35 77 5d 1a ff 7f e7 6b 91 04 30 18 4a a0 05 10 a8 85 90 2a 00 b2 84 04 fa a1 50 b4 04 b2 a4 cc af 7e f1 f1 a5 6b 97 37 46 e7 5f fe cb ca 54 06 c3 04 98 28 24 47 98 3a f8 f8 09 07 3a 85 6a 14 a0 56 58 03 b4 65 ca bb fe f3 a7 91 24 85 29 49 21 38 6a a1 a6 40 d5 a8 78 e6 6a b3 e4 68 6f e7 9c 20 65 53 75 0a c5 42 d9 0b 0c c2 bc 55 39 1d d2 f5 4e b5 6d aa 21 72 db 55 b4 d8 60 cf 65 af 39 b9 93 a3 ed a2 22 a4 b3 5d a5 7b ae dc 5e 2d 4e 91 b6 b8 6a 5f 2a 6d a5 b1 67 dd 69 41 d7 d1 5d af d4 35 33 65 1f 48 0b 75 36 ab bd c8 Data Ascii: R.Hnyv=H^]h,WAj/rQS80mO/G,Zo+SFh$5w]k0JP~k7F_T($G::jVXe$)I!8j@xjho eSuBU9Nm!rU`e9"]{^-Nj_*mgiA]53eHu6
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: ea 82 f0 04 b0 f4 db ca 9c 86 11 5f 79 f2 3d 5f 3e f7 bd 89 a9 ba 9d b3 b2 23 12 df ff 97 57 f3 3f e8 62 07 48 10 82 a8 26 0c ad e3 b3 cf be e3 47 be fe ed 7f c4 8e 4a 5b 8d 8c 6c 0c a5 fa cc 80 56 18 0d c8 14 bf a8 1c 59 0e 5a 32 18 50 45 50 03 a0 89 56 a2 ec 0a af 86 f8 0e 09 a6 da 00 0d c0 68 29 23 7b 96 77 30 c9 a9 ca 29 4a 67 ba b2 ee 9c 29 85 bc 14 07 05 5a 55 47 24 35 54 3b 45 da 00 db a9 b6 8b ca d5 ac 6b 17 ec 13 57 f5 50 9a 3e 75 73 b7 a9 f6 ed 92 ee 70 95 3f 40 57 86 fa a8 ea cd 90 d2 54 fb c5 e9 cd cb f9 ed cc 29 4f f2 d5 e2 75 31 e0 05 d7 2a 9c 20 f3 e1 ff f5 fb cf 1c fe f8 a6 d7 fe bb 8a 11 89 fe ee ef e9 72 76 df 75 63 7d e6 bf 00 24 a7 53 4b 61 e3 9e 45 1b b2 36 2f bc 2b 45 fb e3 6f df fd df 93 be fc 47 62 8d d2 47 52 76 bd a3 c2 64 e6 f5 Data Ascii: _y=_>#W?bH&GJ[lVYZ2PEPVh)#{w0)Jg)ZUG$5T;EkWP>usp?@WT)Ou1* rvuc}$SKaE6/+EoGbGRvd
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 9b 9b 2e aa 7a 6d 85 e2 b2 a9 7e 4c 37 79 0a dc 97 9a 2d 66 5d c9 55 e4 b8 61 53 8b a4 1a c1 aa 75 b9 d1 f4 97 6b 06 7b 50 3a b3 e5 7c 3b 72 ee b3 8e f7 51 e5 2d 5c d7 9e ea 7d cc 35 92 94 d7 5d 1c 95 52 ef ba f8 4a d5 d5 6b 5d bf cb 3a 20 71 ea 4a f4 0e 15 6a 9b 53 48 8a 90 a2 15 11 11 d6 a5 11 0d 85 2c 99 78 9a d2 49 01 6b 18 af 2c 25 71 65 48 1a aa a4 ad 91 a4 a9 c0 57 59 85 eb e7 95 05 47 4d 40 e0 61 48 71 85 4d 98 6a 45 92 a4 0c 81 16 4c 88 ba 32 8c 0a 08 e1 e9 4b 1b 93 10 52 0c 13 60 9c d6 b2 86 18 1e 93 24 a8 ab 35 ec f8 92 c0 80 2f 6d 48 4a 09 9a ca 62 ef eb b2 5e 90 6e 4f e5 3b 54 33 e3 3c ae 88 44 ea 75 57 5e a9 66 6f 54 f9 2e d7 51 9c da 77 57 5b 3b 95 ea 5d 8b 6f c1 74 b3 99 8f b3 36 9e 4a d7 85 8c 4d 89 2e eb 01 e5 47 cb 4e 67 e1 2c 27 ee ee Data Ascii: .zm~L7y-f]UaSuk{P:\|;rQ-\}5]RJk]: qJjSH,xIk,%qeHWYGM@aHqMjEL2KR`$5/mHJb^nO;T3<DuW^foT.QwW[;]ot6JM.GNg,'
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 4b 1c 95 b5 bc 29 27 31 ab 0d 55 ca 82 c0 2a b1 36 64 4a a2 a9 03 8a 11 a5 a8 96 2e c2 b5 87 5c 60 77 95 ba 32 b1 5c d5 6c 4e cc 1b 86 1c bb 4b c2 22 50 09 97 c1 50 ad 4d 91 37 45 9b 3b 8c 2d 37 df 06 d0 11 d8 c4 d6 46 94 c4 99 a3 a8 54 d5 3b 4d 99 a6 e6 34 58 77 b2 a0 e2 de 39 3a 89 42 eb d0 4b b9 d3 69 73 a6 94 14 9d af 86 bd c1 1d d5 9d 6b 3a 17 35 66 af a1 14 55 a5 a9 33 55 ff 47 5c 2a 97 38 de 45 2f cb e5 e8 82 75 5a 2b 8d 93 a4 56 4e d8 76 22 5d cf 5a 79 46 d5 d5 ab ec 57 ba eb 4e ce f6 5f 42 ad 48 f9 ac e5 9d bb b1 49 8c ea 08 37 77 5c 7a 77 8c d9 e5 d1 f5 59 8b 07 65 4c a2 3e 3e ea 18 2e d7 57 4e 47 2e 79 54 7a b7 d0 35 8f f3 91 6b 3a b9 c9 e3 6c 07 95 dd 2f b6 e3 93 32 4f ad fa a2 4a 4d 98 4f b7 34 4a 62 0f 4b ef 8c 8d 4e b7 f8 16 e9 69 43 5f 6c Data Ascii: K)'1U6dJ.\`w2\lNK"PPM7E;-7FT;M4Xw9:BKisk:5fU3UG\8E/uZ+VNv"]ZyFWN_BHI7w\zwYeL>>.WNG.yTz5k:l/2OJMO4JbKNiC_l
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: a7 1c 53 b9 68 2e 4a 6e 4b e1 4e 30 66 ad 8b 93 85 a7 da e2 d4 5d a6 b2 56 f8 cb a9 53 27 cd 56 2a 4f 2e 6e 09 eb 22 65 8b 4a d1 e2 36 6e a3 aa 55 6b 6f 31 73 5b b0 c6 e2 36 54 2f 97 03 b5 4d 7a 15 29 1c 8f 4d 6d 4c e0 31 ad c5 a4 8f 4e 77 dd 55 b7 ab 46 e9 ce 5a 83 2d 04 9f b9 4e dd f5 86 9c a3 4a c3 a8 02 69 b7 08 74 b9 7a a0 cd 60 67 ca b5 19 55 b4 6c 1c 1a d9 39 7b d0 28 51 76 29 dd e9 82 d3 39 1b 25 1a ab bc 05 2d dd b9 76 91 8d 6c f2 c6 f9 8e da c9 a0 f3 dc 15 2f 89 ae dd 9c b7 a5 cd 19 59 8f e9 9a 0a f0 e2 eb a0 8a f5 e6 bc e8 ca 35 8e bc a6 6a 05 9d bd 60 27 88 8a b2 5a 8a e5 89 26 5a 23 ae 6e dc c8 82 b2 8b 6d aa a9 eb d1 aa 53 0c 59 a2 56 ab d3 e9 a3 67 72 dc bc 10 dc 4e ce d2 3c 4d f3 e6 a4 b6 98 ea b4 33 97 fd 7a 30 26 fa 35 27 a9 86 e9 5e 5b Data Ascii: Sh.JnKN0f]VS'V*O.n"eJ6nUko1s[6T/Mz)MmL1NwUFZ-NJitz`gUl9{(Qv)9%-vl/Y5j`'Z&Z#nmSYVgrN<M3z0&5'^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49823	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	1107	OUT	GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:16 UTC	535	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 31756 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:40 GMT Expires: Fri, 26 Apr 2024 09:49:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11076 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:16 UTC	720	IN	Data Raw: 52 49 46 46 04 7c 00 00 57 45 42 50 56 50 38 4c f8 7b 00 00 2f a5 c0 49 00 4d 38 8c 24 35 6c 72 87 e2 40 20 fd 17 2c d9 69 21 a2 ff 13 50 55 95 19 55 95 4f b7 ca cc aa aa cc fc 56 56 9d ea ae 9e 2f 6c e8 8e 53 56 a6 cf b7 aa 5c 72 f5 0a 04 88 2d 2b b3 b2 fe cd aa e2 f1 da be df af e0 dd 74 03 5f ba 49 5f af 97 80 7a 1a e9 06 6c 60 ac b5 56 32 f6 da 8e 63 ac 58 46 d8 0a 6e 31 5d 37 84 dc 4e 47 c4 ea 08 47 1b 04 da c3 a2 9b 50 ce a7 4f b7 13 36 c4 83 fc a8 af f0 78 77 95 4a 08 d0 c0 74 03 55 da 2a 6b b5 30 b3 05 2d 2d 7b 80 e3 1d 73 00 ba 0f ba 05 c4 36 6c d0 db 70 9e d9 22 0e 7d ea 6e 17 72 5a eb 40 b7 2a cb 2d 38 8f 03 5c 6b 1a 46 22 36 0f 99 76 2b b7 e3 d0 a8 12 6a c4 a6 fe 7e d7 41 b9 55 3f 1e ae b0 6f a6 7d 3f e0 6e 7c ff d8 78 e2 78 0b 01 08 08 56 7d Data Ascii: RIFF\|WEBPVP8L{/IM8$5lr@ ,i!PUUOVV/lSV\r-+t_I_zl`V2cXFn1]7NGGPO6xwJtUk0--{s6lp"}nrZ@-8\kF"6v+j~AU?o}?n\|xxV}
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 13 3a 81 40 00 20 31 de f0 c5 4c d6 4b bc 3d 96 31 12 61 ff 29 ad c1 17 13 7b 64 bd f6 15 2b 9a 75 b8 06 80 d5 1e 66 f7 88 cd 93 79 f1 93 5f 2c 75 00 02 69 0d 66 26 be 0f 9c 3d 1b ec 37 8f 33 2e f9 66 0f 98 f5 8d 97 0d 1a 60 81 69 00 40 da 4e 81 86 09 b0 c0 02 06 40 be 5c cf 01 68 c0 e7 1c 9b 4b be 4e fc 87 17 c0 0b 2e 31 01 00 2e f7 72 f5 f2 03 c9 94 7b 00 1c 02 d0 d6 e4 c7 8e 59 5e a6 00 e2 30 1c ee fd 18 e1 d0 e8 05 c6 2c cb d4 4e 58 ce 4e c3 69 00 07 6d f4 43 90 f2 d4 fe 23 4c 68 07 00 48 63 3d 5c a3 7a ec 29 d0 97 1a 0e 01 18 18 1b f8 af 34 07 da c1 21 a0 1d ba 4d 07 96 be 00 1c 12 22 44 f3 df 01 52 17 a4 0e 8c 10 8d 1b 90 6c d7 39 4b 4b ae b3 49 19 5d 71 ff c3 5e 1c 9b 00 53 0c 7f e9 17 1e 0d 42 23 71 4f d2 d6 43 0e 31 c4 50 e3 76 4c 62 52 93 a7 99 Data Ascii: :@ 1LK=1a){d+ufy_,uif&=73.f`i@N@\hKN.1.r{Y^0,NXNimC#LhHc=\z)4!M"DRl9KKI]q^SB#qOC1PvLbR
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 58 d4 cd 53 35 ab b5 ed 09 d1 cc de a6 36 94 0d d2 ee 6d 8a cb 13 db 03 8d 90 89 ad c1 c0 24 d8 04 33 c4 93 6a 0c 49 8b f6 cc 45 d2 48 db d4 5e 1e d2 2b b5 89 84 44 f7 ca c5 c5 65 6d 9b 60 42 68 d1 6d 89 b1 25 b7 a5 c0 63 ed 79 aa e5 0d da a6 ee 2d cd d8 a8 7b 3d d5 32 d8 e6 61 cb 58 3d 93 43 84 08 b9 d7 a8 12 83 4d dd 58 5e d4 e8 26 17 d8 d0 9e 5c 1b 63 68 53 b7 12 c4 42 29 64 ec a8 14 12 21 51 9d 84 a0 58 96 11 0d 46 2d 0a 49 aa 05 55 e4 65 45 28 85 90 a2 22 30 38 08 05 b1 6e c5 31 08 28 0b 21 64 22 f0 a2 2c 45 2c 44 bc f3 2e 62 89 09 06 2c 09 84 50 26 68 19 b1 12 2a e5 41 5e 90 12 2f 0a 25 62 19 64 49 3a 65 28 19 2a 2f 2f 2b 61 4b 2c 24 92 f2 b2 2c 2b 45 12 05 76 64 ca 20 63 52 02 9e d4 14 58 16 4a a1 94 08 85 52 b0 bd ba 13 cf 3d 6c ad 3d 5e 17 68 7a Data Ascii: XS56m$3jIEH^+Dem`Bhm%cy-{=2aX=CMX^&\chSB)d!QXF-IUeE("08n1(!d",E,D.b,P&hA^/%bdI:e(//+aK,$,+Evd cRXJR=l=^hz
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 76 7b a9 05 00 d0 06 55 2c d8 b2 16 04 c5 5a d0 d2 aa 3a b2 31 9b 55 d9 44 a5 c0 ed 52 5b ed aa ed 64 49 da 15 dc 4d 6a cb 86 3b c5 da 54 d4 8d b5 f1 da 6e bb 76 f7 42 ab 76 b8 5b d6 ad 76 e8 38 bb ed 60 bb 4a 56 a8 42 5b 6b 68 2d 91 56 74 62 61 1e 74 4f d4 78 c1 c9 d4 86 2a bd a5 8e 79 35 02 6f a5 bb 05 e5 d4 d4 89 59 b6 97 7a cd 14 28 af 97 6e ab 6c 6e 2f 75 8b 0e b6 59 37 14 43 60 9b 6e d3 6a 11 75 25 18 49 ae a7 00 d0 9e 5c 2d d2 6a a5 6e 0c 21 e6 9e 54 cb c8 3d a9 2d 64 7a 4b bd 37 8b 34 e8 58 ba ed 7a c1 c9 b0 01 d8 93 bc f1 0e 48 bb 7b a6 db 58 d8 bd 92 37 a6 29 ea 6d 03 60 d5 b1 87 0b 05 35 eb b5 50 28 eb bb ac 2d 53 ed 49 bd 78 41 af e4 bb 92 62 8c 67 a8 33 90 9a 6a 89 99 8a 5a c3 24 15 bc 0d 8c 21 53 61 cb 98 94 ac 19 c8 1d 85 a5 a0 05 24 05 c4 Data Ascii: v{U,Z:1UDR[dIMj;TnvBv[v8`JVB[kh-VtbatOx*y5oYz(nln/uY7C`nju%I\-jn!T=-dzK74XzH{X7)m`5P(-SIxAbg3jZ$!Sa$
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: d0 71 e3 b6 2c eb de a5 3b a0 65 2b 75 b0 b6 7a 67 1d a5 8e e8 50 19 dd f2 5a f6 c0 69 c9 0d d6 da 33 eb 2d c1 bc 37 fa 0a ba 27 21 6f 1e 5e ad 56 4d ee 7e 82 d6 12 eb b7 f2 3a 65 5b 7d 25 f5 aa 5a f6 42 3f 03 b7 08 93 2c 83 2a 0c 12 c4 21 f7 73 f7 f6 8b 1b 57 74 a1 85 84 d9 45 6a 00 30 28 94 51 85 94 44 c0 19 75 99 5a 28 81 23 a5 2c 16 13 53 92 12 75 a0 02 21 6b 12 43 75 91 9a c2 b2 e4 22 0b d4 94 a4 04 0e 45 20 a0 12 38 cd 11 52 43 a3 4e 93 90 d8 28 64 39 cf 98 a2 01 f3 f3 4a 96 c4 3a 65 b5 40 85 ad ce 33 0c 95 46 7e 92 5c 61 f0 e6 d1 2b b3 9c a4 be 84 0a a8 2f e6 9c 41 ad 97 d1 b7 54 c6 b2 1a cb 52 c8 5b 9a 95 62 a5 8d b3 0c 24 71 5b 29 2b 69 51 53 88 ae a4 9e 30 74 ed 4b a5 56 41 a4 a2 52 2d 40 1e 27 24 24 8c a1 eb d5 5b ee 7d d9 99 4f bd f0 91 9f fd Data Ascii: q,;e+uzgPZi3-7'!o^VM~:e[}%ZB?,*!sWtEj0(QDuZ(#,Su!kCu"E 8RCN(d9J:e@3F~\a+/ATR[b$q[)+iQS0tKVAR-@'$$[}O
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 70 e2 8e ef a0 09 68 77 f6 46 6b e6 ec 82 e1 d9 1c 5a 87 ad 5e 99 e9 ec ef 7c f5 55 dd be 90 aa e3 41 fb 9d 7e e6 8d 4f 79 f3 27 df 69 cf 75 31 51 f0 e9 3b ff 9b 0f de 33 fd 51 0d 09 a5 f3 4f 67 84 17 76 9b e6 79 fa 3e cc a2 c5 f4 bb 93 92 19 8b c3 1b be ff 91 d2 a2 31 9e aa 08 35 cc b6 37 7b e3 f8 0e 5d 51 a5 cc 62 17 a1 da 9d 4c dd 82 b2 cd 6a 88 20 31 e2 94 51 d0 76 ef 99 fa 2e b4 95 a3 0c 51 29 c8 72 3a 11 2a 43 2d 64 67 87 54 57 46 4e 27 05 36 84 3d d5 8e ce e4 ce 08 28 c4 76 ee b2 84 ca c4 5e d1 94 85 03 7c cc 16 30 c4 44 16 b2 2a 0b 29 5a 25 48 6b 92 ba 49 cc 88 41 16 d4 19 8a 0c e7 fd cc f1 d9 6f 9f fd 70 66 ea b3 f2 0d 4f 79 f7 bb df c1 8f e6 f3 ef f8 ff f7 de e3 b2 2b 9e 72 f8 f9 03 f7 41 b3 5c 97 01 a0 94 b3 45 1d 51 6a 31 a1 4d 19 9c 5d d2 5b Data Ascii: phwFkZ^\|UA~Oy'iu1Q;3QOgvy>157{]QbLj 1Qv.Q)r:C-dgTWFN'6=(v^\|0D)Z%HkIAopfOy+rA\EQj1M][
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 29 57 2d ae 44 4b 5b c8 c4 31 95 c5 b4 29 49 e8 38 dd 02 55 c1 65 99 45 e8 92 ed 9a 8f dc 54 5b de 58 5d a2 e2 d0 14 0a 28 16 c0 6a b9 34 e2 51 28 1b 00 34 32 45 3c 90 82 76 19 71 b9 14 8e ba 62 4d ee 1a eb c0 10 92 11 eb 33 c5 32 43 20 d6 31 45 5d 0a 47 29 43 31 1e 0d 88 10 51 57 55 95 42 ac 9a 10 7a 53 6c 15 63 94 d5 ab 48 c7 c8 51 9c 3e 35 86 46 e4 2e 77 9e 8f 8b 4a 59 0f 7d 2b 19 1c 1b b3 ea 9c dc 4d 52 d3 3e bb 26 f1 b2 69 24 8e c6 30 c5 63 e2 a6 e2 68 3a b9 d9 06 dc d9 16 8f 13 54 10 9d b2 5a 1b 66 15 2b 0a 9d 6c 21 b2 10 9c c2 12 38 59 65 84 0a 01 14 59 91 8a 3a 84 32 12 12 72 42 c4 a7 64 48 1d 43 ca 60 21 21 11 24 00 00 19 a0 1a 06 ce c5 08 a0 84 18 00 c0 22 40 a0 2a b2 aa 96 15 50 55 2c c4 8c b2 0c 2d 31 40 a2 2c 80 52 a5 96 08 18 88 9a 51 10 30 Data Ascii: )W-DK[1)I8UeET[X](j4Q(42E<vqbM32C 1E]G)C1QWUBzSlcHQ>5F.wJY}+MR>&i$0ch:TZf+l!8YeY:2rBdHC`!!$"@*PU,-1@,RQ0
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: c2 15 87 9f 9e f2 3e 3e 7e dc 73 67 a2 dc fc d2 55 37 4f 7b cf e1 f4 77 72 9b 33 70 fd e9 92 fd b1 7f 7a d7 13 ff fc 2e 17 9e ba 4d c4 dc 70 6d be 79 c6 ed 7e 40 6e 3d ee 08 6b fa b7 33 2e 7d e3 9f 77 7d e8 1d 2f 38 fe f8 73 d7 5f 75 58 77 95 97 7d fb 71 ff f8 e1 3f ae 7c c5 9f f3 70 fd f6 e4 9c fb 86 3f 3d eb 97 b7 e6 a6 3b 5f 74 9a a2 d1 9a 78 2a cd a7 77 e9 5c a5 5a 9b 8d 25 c1 d9 72 c6 6a 9a 48 45 bc 36 a6 2f b3 9a 42 71 f2 44 ab cc ac 04 2d ba 5e 44 20 84 25 b5 82 75 6b 30 c0 21 ed 06 ab af bf f4 a9 bd 39 f9 51 4f ff f8 bd b6 d9 9d 6f e8 d4 20 99 df 78 ef f2 b6 5b f9 da 57 2f be c1 5b 7d f2 c3 17 df d2 8c d3 f5 be b7 7c e3 c3 fb dd 19 1f ff e6 f7 dc 79 fb c4 27 bf 6f aa e7 9e ab 37 72 dd f0 eb 27 7e fa 4e 2f 7c e6 ad 0e 5f fb e5 cd 57 bf f0 a1 8f dc Data Ascii: >>~sgU7O{wr3pz.Mpmy~@n=k3.}w}/8s_uXw}q?\|p?=;_tx*w\Z%rjHE6/BqD-^D %uk0!9QOo x[W/[}\|y'o7r'~N/\|_W
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: f1 bf b9 fb da 4b 1f b8 cb 4b 5e 7b ca fb b7 fa c9 fb bf fa 88 b3 de e9 93 b7 7c d5 c2 f5 7c e0 eb eb 45 8f 3d 9a 5e de 7e f6 89 7f dc f7 c9 1f 7a fb af fe 55 9b 39 1d 6e be 2a b4 5e 41 6a 45 90 b4 3d 2b de e5 43 1e 71 f7 ec b5 b7 56 1d f7 9a 73 1e 9b 9b b6 dc f1 b9 af 6e 0f bc ff 5f de fc ef 8f 39 f9 c3 1f df b1 e7 bd fd cf f7 bd ff bf dd fe bf 0f 79 d5 eb bf ea 11 fb bf e4 cb ff 7a cf ad 97 4c d8 38 fd 8d bc fd a1 8f 1d e5 ac f8 d0 fb ed 73 cf b3 83 f1 e9 9f 8e bd f7 63 77 79 ec 9f 4f 7e 28 8d f7 cf bf dd 0b 56 6f bb 78 ec 3f cf 3e f1 96 d7 f6 3e a8 27 fc 7d fb ce 9f b7 a6 f5 c4 bf 38 9c f0 8f ff ef 7f d7 ff f3 1b 3a cb 2c 12 62 d1 42 76 2d 28 5c b3 ac 16 54 5a 89 36 4a b5 8a 2a 1b f2 9a 77 75 d6 c9 51 ee b0 02 4e e5 ee cc 66 49 59 c7 d6 33 e1 5a 39 57 Data Ascii: KK^{\|\|E=^~zU9n^AjE=+CqVsn_9yzL8scwyO~(Vox?>>'}8:,bBv-(\TZ6JwuQNfIY3Z9W
2024-04-25 12:54:16 UTC	1255	IN	Data Raw: 46 29 09 32 59 2a 51 25 35 10 ad 54 c4 81 38 a6 3e c9 12 88 2a 83 61 91 68 0a f5 aa 20 d6 63 01 4a 1c 49 4e 64 5a e4 04 41 59 02 3b 59 f6 fd 98 2c 4b 96 3a de 95 f5 64 29 b8 88 9f 90 27 50 2a 55 9e 15 6e 33 25 5c e7 f2 9c 83 8a 8a 65 76 17 ee a2 83 93 7d 16 15 2a 21 fb 72 6f dd a5 65 8a 00 9b ac c4 20 2b 11 82 1a 02 24 84 72 32 8c 46 6c 22 00 03 8a 72 5a db 1e 8a 3a 0f 9a 26 09 a4 00 8b 42 0e 03 b6 26 42 49 a8 e8 d2 61 d0 4f 32 f5 22 a6 b5 66 48 c5 90 ad 23 84 e2 82 6a 24 53 82 36 44 d6 a8 80 0f 46 74 a0 19 0d 29 d2 60 34 6d a0 46 69 c3 aa 9c 11 07 06 09 15 3d 1d 49 1f 13 cb 23 20 69 4f 46 d8 51 53 81 4a 46 a4 c7 88 02 1c d4 32 60 1a 71 84 44 24 c2 50 7a 46 a9 a9 d7 46 4d 45 99 1a 2d 40 31 59 28 74 85 d8 97 f6 62 38 dc 0e 3a 73 50 d9 9d ab db 2e 2a b7 92 Data Ascii: F)2YQ%5T8>ah cJINdZAY;Y,K:d)'PUn3%\ev}!roe +$r2Fl"rZ:&B&BIaO2"fH#j$S6DFt)`4mFi=I# iOFQSJF2`qD$PzFFME-@1Y(tb8:sP.*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49825	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	523	OUT	GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1880 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 12:31:58 GMT Expires: Fri, 26 Apr 2024 12:31:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 1339 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 50 07 00 00 57 45 42 50 56 50 38 4c 44 07 00 00 2f 3f c0 0f 00 4d 28 6a db 48 92 3b cf 2e 7f c2 27 85 88 fe 4f 80 cf 6c 4d 42 ba bf a0 9d 83 59 27 2c 58 45 92 1d a5 2b 3a e2 5f d7 9d 70 83 02 3e c1 82 99 b6 6d cc 1f 5e cf 02 a8 76 0e 82 81 b4 6d b2 fd fe 35 4e 4a ff 13 5f 64 29 10 e0 80 25 57 f6 47 2e 5d 80 85 8b 01 3c 02 2c 0c 1e 18 63 c0 c2 0b 22 01 fc c3 43 8b da 3f 43 d2 53 dd 3d 58 7c 5e c4 b6 6d 5b 57 b6 6d e7 3a 27 57 b6 6d 5f da 36 3e db b1 b1 f6 56 5f ec ec a6 bf d9 bb f0 b7 27 ae ae 9c 09 fb 4c fa 4c e6 2e b6 f3 8f 93 9e 9c 54 9c 4c 6c dc da 4e 8e ec 48 92 14 c9 8a a8 ee 7b cc 4c 22 3c fd e5 a1 ff 63 9e ee 4a b9 d6 b6 29 92 f2 7e 55 d5 33 8b bb bb 6b 04 a1 66 ae f7 e0 ee a4 e4 dc 02 b9 bb 84 ae 19 c4 ee ee 30 33 2b 6d 55 7f 4c 80 09 Data Ascii: RIFFPWEBPVP8LD/?M(jH;.'OlMBY',XE+:_p>m^vm5NJ_d)%WG.]<,c"C?CS=X\|^m[Wm:'Wm_6>V_'LL.TLlNH{L"<cJ)~U3kf03+mUL
2024-04-25 12:54:17 UTC	1158	IN	Data Raw: 56 19 94 92 b6 a0 98 f3 8e 26 82 b5 c5 e4 f1 77 61 a5 f7 c7 f3 7b 78 43 ff 65 f8 3b 8d 01 99 b8 74 70 19 e8 d0 10 b2 d1 62 4f 4e 9e ca 90 33 7b 78 ba 7d 7d f9 35 8d fe 8d f0 df 58 64 62 44 5c 91 17 d4 a5 62 1c 49 ad 91 0a f4 4e 39 29 af d3 f7 2f 0a 6a fa 3e 0c c3 ef 41 eb 6b 00 a5 a1 7a f0 92 86 00 04 20 3b 96 a7 2b c4 86 a9 af 06 a4 e1 1a c0 4b 77 58 c4 81 e8 0a 99 df 9a f5 a9 1f c3 80 6a 9b a6 b5 d4 cd dd cc 49 d2 06 a3 68 c4 60 33 51 53 99 18 43 77 30 a8 ea d7 32 a0 4f 48 b8 d9 80 3b 60 b1 24 47 d1 df 39 49 79 51 05 a2 fa 12 40 15 90 03 3a 32 a2 9c 44 43 23 9b 38 36 f9 1d 23 5e 1c e9 cb 46 7a 35 fc 7a a3 91 55 dc 52 6c f3 57 d3 19 23 19 03 f4 16 1f de 06 22 a7 bb 2e 8b 6e 2b 94 e2 42 94 26 eb df c6 e3 af fa a3 cd f7 41 4d 7b fd b0 e5 ba b7 06 ac 6b fd Data Ascii: V&wa{xCe;tpbON3{x}}5XdbD\bIN9)/j>Akz ;+KwXjIh`3QSCw02OH;`$G9IyQ@:2DC#86#^Fz5zURlW#".n+B&AM{k

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49824	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	524	OUT	GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 5668 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 45 6d 1b 49 f2 76 7e 5d fe 84 2f 0c 11 fd 9f 00 9f 61 90 96 a1 ca 3a b0 dd 8f 21 f1 5e b0 8d 24 c9 49 5b 88 d7 26 9a cb 3f 4f 88 81 71 23 49 8d 0a 13 00 22 ff 18 3d 67 5f 6a db 48 52 63 7e 88 f9 43 ec 7f 2a 1f df 44 a2 91 00 30 28 24 a9 f9 89 25 03 b6 17 b6 77 5d 6b 0c 7b 7b 01 05 44 13 23 23 01 a8 ae bf c4 a9 71 5a ac 76 9d 00 20 31 b1 b0 80 1f 0f 1d d8 d6 d6 48 8e a4 96 86 67 96 cd cc cc cc cc 8c 91 d7 d1 da 11 33 73 c6 cc cc cc cc cc cc cc 3c cc 33 2d f8 03 75 ab 5a da 6c a3 bb 9e 4c ea 2a 99 3d a5 ea da d0 ec 70 c1 cc f6 62 64 66 7b 29 34 43 e4 2a 39 b4 b6 1d 92 f4 7e ff 5f d5 e6 28 5a db b6 6d db de cc 66 ba 99 bd 91 6d db b6 cd b1 3d d5 7d ba 1a 7f 7d 72 64 db 56 6d 65 ae Data Ascii: RIFFWEBPVP8L/?EmIv~]/a:!^$I[&?Oq#I"=g_jHRc~CD0($%w]k{{D##qZv 1Hg3s<3-uZlL=pbdf{)4C*9~_(Zmfm=}}rdVme
2024-04-25 12:54:17 UTC	1246	IN	Data Raw: c5 3b 72 55 6b 97 f9 ed fb 6e a4 5a 11 0a 78 49 06 d8 05 21 48 96 50 8b ca 3c 6c c7 e6 de f3 7f 85 ff bf a1 d5 ba fe ef a1 82 5f 9b be d9 33 61 bb 11 0f d4 94 73 c2 3e 9d b7 ae 37 16 e6 11 10 3c 72 83 1c 94 36 c8 38 15 20 13 43 40 88 01 cd be bf 99 6d 5a db b5 db 3e 56 5b f5 e9 b7 46 ce 43 63 89 8c d3 0f 91 89 10 87 c2 52 03 f4 df 23 d9 b8 64 c6 91 51 86 40 96 24 42 9a e4 1f ea c0 22 5a f9 42 81 ca a1 8c 16 a7 39 59 10 0a 45 35 f8 d5 95 f2 42 b6 1c b8 61 18 f9 53 22 20 08 fd cf c0 c7 80 72 75 26 77 78 68 96 82 08 28 a6 74 55 2c 15 47 94 45 d8 7c 89 00 18 02 df 37 ae b3 5e 28 b9 71 c8 46 b5 c5 0f 41 0e 6d 00 81 8e 18 de ed e9 59 af 5b 24 83 00 99 42 05 d7 20 ae 31 aa 6c 2a 21 41 18 84 41 18 c8 1a 02 e5 ac 73 b8 d0 10 e6 9c 9d 31 b4 fe 3b 13 84 41 28 81 20 Data Ascii: ;rUknZxI!HP<l_3as>7<r68 C@mZ>V[FCcR#dQ@$B"ZB9YE5BaS" ru&wxh(tU,GE\|7^(qFAmY[$B 1l*!AAs1;A(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49826	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	523	OUT	GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2840 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:14:06 GMT Expires: Fri, 26 Apr 2024 11:14:06 GMT Cache-Control: public, max-age=86400, no-transform Age: 6011 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 10 0b 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c c7 0a 00 00 2f 3f c0 0f 00 4d 28 6e db 36 82 94 f4 e5 74 ff 81 af 19 22 fa 3f 01 7c ae a0 60 e2 12 b2 e7 62 eb 0c 74 0b 75 90 2a de 0b b7 b5 6d 2b d1 5e 44 84 54 40 44 ff 45 b9 eb b8 fb d4 c0 36 92 24 27 fd c2 a4 30 bf 30 2f ff e8 d0 1a 8a 6d 23 49 8a ea 33 f9 fc 23 62 66 36 d9 e8 ff 04 e0 cf 5a 38 8a ee bf 18 00 39 de 33 6c f3 6a 4c 11 1b e0 ac 98 ce 7b 05 67 25 3a 20 57 25 ad da cf 95 ee d7 57 02 50 ee 57 24 6b 55 7d ad 0c 15 00 10 04 6b 65 ac 8c 3e be 1b 2c 6d db 76 4c 92 74 dd ef f7 85 13 55 d5 63 db b6 6d ef fa 98 bd f1 07 66 69 db f6 cc ca b6 6d 97 6d 27 23 11 11 df 7b 2f 32 aa fa 8b 58 f6 ea 09 0f b4 6d 9b b6 6d db 56 cc b5 cd e1 31 96 6d db b6 ad Data Ascii: RIFFWEBPVP8X??VP8L/?M(n6t"?\|`btu*m+^DT@DE6$'00/m#I3#bf6Z893ljL{g%: W%WPW$kU}ke>,mvLtUcmfimm'#{/2XmmV1m
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: d6 3a 5b 50 00 28 85 84 82 cb 98 21 73 b5 14 33 34 62 18 82 03 84 69 66 25 28 13 41 8a dc 50 59 0c 4b 25 bb f2 f8 bf 57 ef 73 9a 97 98 c0 5f df d7 77 4e 22 42 2d 9a 89 5c 79 ae 63 4d ae 85 21 97 b2 87 f9 f8 16 d8 5d 1e 20 03 04 1c 41 10 43 94 20 a0 b2 e0 86 9a dd 41 90 ea 56 8b d3 fe 5b fe 00 f5 5d 5a 41 ff e3 45 13 48 74 32 1d 15 ff 1a e2 d0 d2 fc 96 e5 76 28 12 85 24 e4 a8 4a ed c7 74 db 87 e6 e8 fe e5 66 00 11 21 40 62 47 e1 40 83 20 06 30 69 4e 66 f6 44 0e 3f 54 87 1b a8 0b fe ef f3 66 8d 73 d5 1c 62 69 fa 9f 6f ed e8 1b 4b 65 6e 99 ee 39 2a 05 a7 44 82 82 62 b1 9b 49 cb e1 c4 70 d6 e7 9c f9 90 f6 4f 43 88 80 02 ec 08 10 07 24 d0 ec 30 73 0c 65 a6 ec b2 8e f6 ea a7 6a 5d 97 56 52 fd a3 74 06 7e 77 c8 eb 5f 3b e4 d9 5b 45 25 cd 66 05 15 ac a8 60 62 00 Data Ascii: :[P(!s34bif%(APYK%Ws_wN"B-\ycM!] AC AV[]ZAEHt2v($Jtf!@bG@ 0iNfD?TfsbioKen9*DbIpOC$0sej]VRt~w_;[E%f`b
2024-04-25 12:54:17 UTC	863	IN	Data Raw: 76 7c 87 c7 9f d9 01 a8 7b 7e 6e 7d ff 7b 8e d5 20 53 b8 b4 43 58 e1 ff 8d b9 d7 0a 89 00 cd b9 f8 dd 9b f4 85 d7 7a 4c af 71 f7 3e ef 70 c2 fa 16 8f 3d bf f3 b3 07 47 ff a0 5a a5 bc b5 e4 61 d0 f8 9c 93 4e 6a ed 39 ec fa f8 37 8b c8 00 b5 9b ff bc e2 f7 93 5f 1e 8b 02 44 84 45 28 ac d0 7e a5 d7 45 22 8b 30 dd 6a 4e ef 7f d4 c1 97 5e ff e3 8e 08 17 5b f3 d3 e6 ce 69 b0 c8 70 44 1e 09 a4 46 6b 9c ce 14 dd 69 12 c0 04 97 eb ef 6f 3e f7 ef ee 42 75 82 02 44 84 c2 16 f6 26 ba 9d 4c 20 22 ee b1 0b 1f 7f c4 de 5b 9f fc f9 eb 5f 74 89 02 98 de 6d d3 5f 96 ef 55 dd 4c 21 c6 16 f4 97 d2 5c 0b 61 07 c5 ed 76 d1 1f 5e 32 fd 5e ff 93 1f dc fd c8 0b 4e bd 29 57 6b b8 68 a8 2f 56 fd f7 bb 2f 4c 9d c5 0a 22 2c 22 4a fc 3b ec 1e 0b 43 0c 76 b6 77 81 45 9d 9d f7 40 79 e7 Data Ascii: v\|{~n}{ SCXzLq>p=GZaNj97_DE(~E"0jN^[ipDFkio>BuD&L "[_tm_UL!\av^2^N)Wkh/V/L","J;CvwE@y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49827	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:16 UTC	523	OUT	GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1552 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:35:59 GMT Expires: Fri, 26 Apr 2024 10:35:59 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 8298 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 08 06 00 00 57 45 42 50 56 50 38 4c fc 05 00 00 2f 3f c0 0f 00 09 05 6d db 30 da bf fc 11 77 c3 10 d1 ff 09 a0 e7 ea 31 7c 54 15 a0 65 d0 bb 44 44 33 08 2e 14 b5 8d e4 78 f7 2a 7f b4 fb bf 82 41 71 db 36 6e 8a 69 d7 5e a7 a6 6d 24 c9 dd ee de 0f e1 f8 a3 3b 00 57 f4 7f 02 fc 8b 77 a7 73 fb e5 4d 8e 4d a7 90 ea 00 d0 cd 89 c6 f1 02 00 3f e5 74 ba 83 4f 0f 5d f7 ff 14 db cd cc ae 99 99 99 19 3b 07 9f c1 e9 f0 09 9c 2a 4a cf cc 79 04 e6 57 60 66 66 c6 cb 7c ed 0b 67 67 27 70 d6 d2 d9 ed 5c 7d c3 c9 6c 94 95 dc 79 65 9d 36 cc b8 92 cb 80 19 ee 54 ae ac 9c ca 15 bb 8d 24 0b 92 64 d3 b6 7a 36 ef 3a d7 f7 e8 da b6 9e 6d db e6 97 6d db b6 df 97 6d db b6 6d db 6f 63 20 47 92 a4 48 8a a8 39 66 7c 9d fe aa 2d d3 31 cc 5c 65 4c 80 06 ac 80 d8 fa 05 6d d2 Data Ascii: RIFFWEBPVP8L/?m0w1\|TeDD3.xAq6ni^m$;WwsMM?tO];JyW`ff\|gg'p\}lye6T$dz6:mmmmoc GH9f\|-1\eLm
2024-04-25 12:54:17 UTC	830	IN	Data Raw: 34 be 10 ac 93 41 4d a9 5d eb ab 0e c1 4e 83 35 31 c0 a6 38 8f fa c3 2d 8e 45 b7 14 b6 ba 66 27 d9 0e ad bb 4a b2 b1 93 61 c5 52 42 f0 b9 0f 53 f2 e7 90 b5 79 78 6a e6 be ba cf 67 97 18 5c 3b e6 57 2d 64 d5 67 89 e3 c7 d2 d1 8f ea 17 85 7b bf 83 c0 4d 04 be b0 7c 5f d1 f9 ad 33 70 a0 76 21 14 7e b5 18 0d 9d bc cf e6 5b 63 08 b4 ed 17 ef 30 d8 76 10 c4 ef b5 17 3f 2a 37 75 c3 80 57 e7 4f c9 30 85 0f a9 15 b6 32 b0 5b ee 77 e1 14 93 61 b0 18 f0 90 2c 08 06 34 3a ee d5 a7 1a 2f 8e 65 43 57 fa 88 9e 82 cf 0a 20 45 72 6f 28 9c 0f 3a 00 63 31 e4 00 cb 2d 15 1f fe f6 77 f1 a6 ff 19 51 c3 b1 ae d3 e1 da e0 d9 48 35 c2 a2 70 8a f3 47 6a c9 bb 7d b9 5e be 3f 5e dc 66 36 16 57 47 47 3e df fd 92 13 2e fd 9e 98 e9 f4 e0 41 48 91 82 c2 29 42 03 41 92 7f d3 da a0 d6 9f Data Ascii: 4AM]N518-Ef'JaRBSyxjg\;W-dg{M\|_3pv!~[c0v?*7uWO02[wa,4:/eCW Ero(:c1-wQH5pGj}^?^f6WGG>.AH)BA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49828	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1106	OUT	GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8956 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:41 GMT Expires: Fri, 26 Apr 2024 09:49:41 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 11076 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	721	IN	Data Raw: 52 49 46 46 f4 22 00 00 57 45 42 50 56 50 38 20 e8 22 00 00 50 8b 00 9d 01 2a 28 01 28 01 3e 41 20 8d 44 a2 a2 21 12 69 35 18 28 04 04 b2 b7 70 b6 c8 fe bc 43 a2 f1 eb d2 91 7d 2b f2 a3 fa a7 ec 77 ca cd 33 f9 c7 e1 3f 60 1d 22 c5 a3 d5 3f 72 3f 43 fd d7 f1 ef dd 5f f8 ff 61 1f 9a 7f ca fb 82 7e 8b ff 84 fe f5 fb 7b fe 7f ff ff cb bf a8 0f d6 ff 50 7f d1 ff b3 ff cc ff 49 fb ff f2 d3 fd cb f5 c3 dc f7 fa af ec bf a7 7f e6 7e 40 3f a4 7f 93 eb 0b fd 6b f6 08 fd 5e f4 a7 fd b8 f8 31 fd 8e fd bd f8 11 fe 83 fe 2f fe cf e7 ff 70 07 52 7f 56 7f cb 76 b9 fd c3 f2 a3 d0 3f 0f 3e 43 f5 d7 fb 7f fe 2f 82 4f e3 3c 1d 74 c7 fc bf 44 3f 8f 7d 95 fb cf f7 bf da 8f f0 7f b6 ff 78 ff 98 ff 5d e1 2f c7 9f f2 7d 41 7f 1d fe 5b fd df f2 9b fb bf ee 7f 1e 28 00 fc b7 f9 df Data Ascii: RIFF"WEBPVP8 "P*((>A D!i5(pC}+w3?`"?r?C_a~{PI~@?k^1/pRVv?>C/O<tD?}x]/}A[(
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 7b 23 18 59 94 f9 f3 a0 a0 1b ef bd ac de ea 49 03 ab 1d 2a 23 09 4a 0b 32 44 81 30 1a aa 62 44 3d 60 23 55 6e 5a 50 67 64 f0 dd 80 3e 77 0d 3f 83 c7 d6 e3 1d 4f 9e a7 d4 d0 f8 fe 14 23 94 74 28 66 7f ce 51 73 3e 5b 1e b4 fe df bd 5b ab 4c e3 b3 57 5c fd fd 44 80 90 39 2d c3 f9 05 1e 48 d5 e3 57 b2 55 08 25 f8 17 90 1b b4 4f 39 4b 84 a2 12 4d 0a c2 9f 36 ab 54 2a 27 50 4a f3 43 14 bf 39 ad 09 bc 3b 2b 35 47 1d 88 4f ee 49 54 45 25 2b da 70 b3 a9 dd df 7e cf e7 57 8c c6 32 f2 5a e8 0f 9d 37 9d bf 46 21 89 16 9c b7 85 ff f6 73 36 12 5b 3c e8 70 dd 60 36 d7 fc 73 a3 58 a3 21 cf de 94 b0 78 df 99 9a 28 7b 96 a1 20 fc 9a a9 4c 13 6d 22 16 b6 6f dd 61 a2 9b 61 c1 e6 f5 99 57 1d ee 8a 3c 85 74 16 ab f9 00 a4 63 00 b8 9c 80 91 09 f3 15 45 f9 c0 b7 dd 4b c8 50 7c Data Ascii: {#YI#J2D0bD=`#UnZPgd>w?O#t(fQs>[[LW\D9-HWU%O9KM6T'PJC9;+5GOITE%+p~W2Z7F!s6[<p`6sX!x({ Lm"oaaW<tcEKP\|
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 5c 5c fa 46 85 75 cc 3b 9f 41 fd 57 b0 ea 59 40 0e 66 0e 8d e1 fe 73 26 12 11 bf 6c 3d ca c9 ce 03 03 e1 89 5a f2 9e 1b fe 77 63 3f 4d ad b4 eb cb 21 df e5 f9 c5 45 96 5c 69 28 ff 0f 38 96 fc b5 54 04 f6 ff d3 56 3f d5 48 d0 4b 75 97 b8 5b 5e f4 d0 7a da 22 d5 80 82 82 d3 d9 74 ca 90 56 91 ab 89 dd 2b 7e ef fd 31 9d a2 c5 95 fe 62 5e 40 7c 04 bc 8b 5a c8 b3 80 eb a3 ab 27 8e 51 0e 9e af 66 d3 c0 80 26 79 ae 51 00 20 1d 80 cd 04 e2 0d a5 92 49 91 3a f5 ef 10 e5 99 bc e1 a0 f8 10 5b c9 a3 1c ee 8d bc aa 53 42 09 8c 8b c6 f1 e9 ce 81 3d 8f 84 86 25 d8 27 71 e4 13 5d 5d 18 66 4d 81 0b 86 d0 2d c2 45 25 97 26 46 c3 67 84 0d 09 6c 27 24 69 9b 41 81 00 2f 42 3e f0 f0 86 28 75 83 ee db 41 97 68 c4 9f 53 d0 bc 60 ca 12 70 3b 89 f1 f5 a4 2e 9e 2c 14 33 74 25 b8 2e Data Ascii: \\Fu;AWY@fs&l=Zwc?M!E\i(8TV?HKu[^z"tV+~1b^@\|Z'Qf&yQ I:[SB=%'q]]fM-E%&Fgl'$iA/B>(uAhS`p;.,3t%.
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 95 bd 23 f1 7c c0 15 f7 b9 f6 c4 8c 38 2f 1b 5c 5f d1 27 09 1d 05 a6 5c a8 6a 6a e0 5d d2 5d f5 4c 96 bc 1a 9a 44 e8 96 3f 21 30 c5 43 a1 5b 67 eb 11 b4 8c eb 6b de f9 b9 b0 26 e2 50 47 9d e4 b1 af 78 f9 41 2d bf 42 a5 ab 3c 32 6d 44 8f 21 74 fb e1 ac 6d cd 62 5e f4 59 38 e8 3a e3 d2 d1 43 20 39 6d fe ca f8 0d d2 13 83 84 f0 4f 73 5a d9 2b 73 9e 50 c5 70 2c 57 ae d2 27 54 1a 8b 77 89 db 56 f7 3c 07 4f 72 3c 42 c6 c7 fa 11 14 ac cd 32 c7 71 27 79 94 6c 54 5e d2 2f 94 97 62 4d 41 b4 83 3c 24 f8 07 b6 58 90 4c 10 2b 5d 17 b0 a5 33 8e 5d 97 ba fb 57 7b 7d 46 b3 a8 2c ae a7 1e 9e 5a 3c 69 da 35 d9 30 4f d9 bc c6 ab 0c 11 48 f3 df 2b af ec 79 c3 c4 f7 62 1f 0a 2c 16 c3 ef 23 5e 4e 7b 86 01 63 1e bb a6 c2 69 d6 2b 0a 51 cb 4e 8c 84 c5 f0 c3 f2 8c e5 a3 90 c5 ad Data Ascii: #\|8/\_'\jj]]LD?!0C[gk&PGxA-B<2mD!tmb^Y8:C 9mOsZ+sPp,W'TwV<Or<B2q'ylT^/bMA<$XL+]3]W{}F,Z<i50OH+yb,#^N{ci+QN
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: f1 22 06 9a d7 96 99 d3 bf 5a 63 9c 1e 31 32 da 1c a8 d5 5c cb 69 7f ee 5f 53 29 dd 8a 15 a2 29 b0 58 f8 4f 1d e8 55 f3 dc 8b a2 41 e0 c6 1e 87 31 98 27 ec e4 7c 4b a6 00 1a 2a e3 3f 11 c7 4d 76 ef 44 3a 6e f7 68 c8 20 77 9d 22 0d 0f 5e a2 e2 d4 c3 89 2c 39 cc 3c ab 9d 6f c0 bc b4 b6 1d 33 7a 51 d7 55 e4 28 81 19 32 08 cc f1 91 c2 08 87 eb 6b 53 e4 00 a7 ac 93 b3 47 69 c2 43 7b d7 72 3a 30 db 10 b7 55 45 60 a8 76 8d 53 a4 1e 23 6c c8 38 03 3a be 59 3c 52 03 85 81 82 19 5f cb 72 ab f8 71 b2 1b 6e 38 fa 9f fb e0 85 7c da 00 af 0e f9 c5 7a 3f 21 64 bd ca 97 57 4a 8f 0e 81 6a 57 46 17 23 f8 ed a3 d0 b2 6d ea e3 e7 ea 5d f9 6d 85 f8 27 4f 53 a7 f1 f8 fe 6c ea be 49 bf c7 40 7b 85 a1 b6 94 30 ee 72 ff df 4c 58 20 88 ce de 86 ac a8 df b1 e4 98 9b 64 d5 63 77 ec Data Ascii: "Zc12\i_S))XOUA1'\|K*?MvD:nh w"^,9<o3zQU(2kSGiC{r:0UE`vS#l8:Y<R_rqn8\|z?!dWJjWF#m]m'OSlI@{0rLX dcw
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 27 0a 16 96 71 85 ca ec 2f b1 05 fd 8f d4 c4 28 f3 bd 0b 1c bb c3 c2 7e 80 df 3b 8d a8 7d b5 b1 f3 6e d1 18 1c 9b c4 18 e6 a1 8b e9 47 00 50 2d e1 00 50 0f 49 91 fc 61 bb a9 6f 9d 98 0d 9a 6f 4f 69 f5 5e 78 b8 cc b3 cf 88 c8 a0 4f db 25 18 95 32 52 3f c6 c6 0f 5a 39 8a 90 40 33 71 18 f9 d5 e8 2f 34 7d 30 37 8e d6 c9 94 0b 66 6d d8 3c 7d d8 ee d0 54 a0 9e f7 b0 af 25 e1 9a bb bb ea 07 70 39 f3 35 5b a6 77 ce 13 e5 0c d4 e3 b5 f9 7e 04 7c f3 7c e6 af 65 50 15 9f 23 ce 54 c7 b7 7b 34 61 58 90 3f b4 65 0e 12 e9 d9 44 b0 5e f1 a0 2e 8f 06 f6 d5 71 18 9b 01 2d 0c 62 0b ce 44 a8 56 f7 db e5 d1 fb 8f 4a d7 4e 5d 8c 8c 1f 95 63 7e 1b 00 7b 71 cc 65 82 c1 81 7f f3 06 47 72 72 eb 4e e2 f2 d1 d7 2e 9a 62 4a ff 99 96 d6 cd f6 50 a0 9c 9d 39 ba b3 c8 74 5e 92 d0 15 8b Data Ascii: 'q/(~;}nGP-PIaooOi^xO%2R?Z9@3q/4}07fm<}T%p95[w~\|\|eP#T{4aX?eD^.q-bDVJN]c~{qeGrrN.bJP9t^
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 58 a3 65 c2 fa 21 d4 bb 7b 57 31 bb 4c 6c 9a 59 f0 78 1c a4 9f 65 75 ab 3e 53 07 8e c6 21 71 ca bb ed c0 b6 e2 a6 11 88 fe 1b fb 6e ee e4 12 37 e2 d7 0a 9f f0 17 c2 b2 d6 26 a9 8c 0d 44 5f ad 11 46 4a 48 f8 1b 75 b3 04 bb f6 bc e2 3e 53 c9 8e b2 53 a8 e2 a4 ff 82 88 c3 88 5e 8e 13 c7 0b 02 10 74 d1 b0 c8 5a 4e 6c e4 7a a4 9d 3c aa e3 b6 ef 99 fb 1c c9 8b 68 9d 29 9f f1 00 3a e9 bc c1 8b 97 2d ef af 3b cb b1 7b 18 0e 02 44 04 36 00 a5 61 39 1c 74 c1 f6 7b 91 64 94 ea 8c 36 e8 5d d9 33 ec 37 12 23 e8 c6 54 a3 ce d1 dd c8 a0 2b e9 34 83 b5 11 b4 c6 8d 7c e0 f5 2e f3 53 6a 40 47 6c 4f da 20 99 ce be 39 de d2 a3 82 20 0b e7 e5 24 d6 5e 6f f4 36 71 1f 7b b0 20 87 21 c5 0a e6 1b e4 40 e4 f9 ea 7a fa cb 34 3c 76 3e 0b 28 08 3b fc 13 48 d4 14 d1 0b 88 ee 9f db e0 Data Ascii: Xe!{W1LlYxeu>S!qn7&D_FJHu>SS^tZNlz<h):-;{D6a9t{d6]37#T+4\|.Sj@GlO 9 $^o6q{ !@z4<v>(;H
2024-04-25 12:54:17 UTC	705	IN	Data Raw: a2 06 a4 f2 50 f2 d8 53 60 bb fd 02 c9 45 92 93 e3 b4 01 95 7b 87 49 db 1f a3 6f 60 2c 0f 59 71 5a 83 7b 90 3d bd 73 6f cc 80 28 0e fa a5 8e 8b 91 79 b3 fb 03 1b 90 2f 78 b7 d7 30 18 00 7c 8f e9 80 34 9b a6 a6 82 6b 07 e9 f3 e5 05 87 ff 87 f9 fd d9 37 33 89 cf 1d 16 a0 e7 a2 50 c4 3c 55 d1 67 41 af 0c bb 9b 3b 16 d6 f5 73 62 47 21 4d c4 aa f9 af b7 00 2d a3 67 e7 52 65 cb 80 5f d7 87 e4 50 60 2d 1f 80 d5 51 e5 33 f9 85 35 c9 e6 ef c4 a6 fa 87 38 60 39 04 65 ab 73 3a 4b 14 63 e1 4b 61 84 3f fa 31 27 1b 92 4b 1f 01 35 4f 4f e1 ce e5 0b 6d 1a 60 3a 06 bb 60 b4 82 c7 09 81 f7 ff 2e 7f 79 40 f1 8a 5c b1 f1 42 96 7c 25 d6 61 ea 96 8f af 22 cb 46 0d 53 b1 42 58 5b 8e c3 0a ae f5 14 c5 87 3f a0 6d 66 b4 71 de aa 21 90 ff 9e 02 c2 db 63 40 5d 34 dc 08 b4 1f e7 03 Data Ascii: PS`E{Io`,YqZ{=so(y/x0\|4k73P<UgA;sbG!M-gRe_P`-Q358`9es:KcKa?1'K5OOm`:`.y@\B\|%a"FSBX[?mfq!c@]4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49829	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1109	OUT	GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 244 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:55:28 GMT Expires: Fri, 26 Apr 2024 11:55:28 GMT Cache-Control: public, max-age=86400, no-transform Age: 3529 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	244	IN	Data Raw: 52 49 46 46 ec 00 00 00 57 45 42 50 56 50 38 4c df 00 00 00 2f 13 c0 04 10 35 b8 8d 00 46 6d 34 88 57 23 e9 ec 2e 30 44 ce 5d a0 e7 1d 98 4a 7f 17 ac 72 d9 c6 6c e9 32 81 14 e1 36 b6 6d 55 f9 91 0b 0e 35 b8 43 fc 28 e5 bf 18 0d b5 04 27 76 69 c7 aa b0 08 52 dd 0a dc 46 6d 02 74 97 f5 0c fd 83 e4 d5 5c 08 e8 5f 10 eb 9f 59 ee 92 d8 0c d5 ee 92 63 3b 20 f2 8a da b5 d3 8d 17 1c 1d 90 10 c2 7c 20 d6 c9 b1 15 12 70 6b e5 a9 d9 62 bc ce e3 cd bf 60 b9 a6 ab 81 96 8b f8 81 a4 07 70 bb fc 82 85 2f c2 82 37 32 3c e6 f9 ee fc b3 06 f1 f3 8c 98 cf 41 51 96 af e4 01 0b 9f cd 0d a7 59 c3 d5 40 cd 45 72 45 d2 03 f8 9a fd 64 1c e9 a5 5d 3a 9a ae 4b 47 92 5e 05 40 4c d6 53 8e 8f 67 9b e1 7a c4 f7 5e fb 67 c4 7a 67 81 b3 5c 98 4a 45 01 00 Data Ascii: RIFFWEBPVP8L/5Fm4W#.0D]Jrl26mU5C('viRFmt\_Yc; \| pkb`p/72<AQY@ErEd]:KG^@LSgz^gzg\JE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49830	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	541	OUT	GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 170 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:27:09 GMT Expires: Fri, 26 Apr 2024 10:27:09 GMT Cache-Control: public, max-age=86400, no-transform Age: 8828 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	170	IN	Data Raw: 52 49 46 46 a2 00 00 00 57 45 42 50 56 50 38 4c 95 00 00 00 2f 0f c0 03 10 05 d4 da b6 96 47 af 93 94 43 2d c4 c5 c5 c5 31 33 2b 4e dc 38 2e 81 99 14 33 db 71 8c 47 bc f7 4d 0d 11 47 fe 9f 00 d0 7e be 34 fc 32 49 50 5f 9e ea 29 a5 9c a4 fe bc bb 5a 3a d5 7d e9 f6 9e fe 95 24 ad e4 d5 af c9 bf aa d7 20 4f 8f cb c5 ea a4 11 2c a5 94 91 8a 86 fd 51 55 bb 8a b7 fe 54 07 8d c2 ab 24 cf 3f 25 f9 db e8 e6 fe 7a 29 3b 49 32 5a 39 d5 fa 7f 3d 24 f9 de d5 7b f8 2f 75 a8 94 32 70 e1 63 6a 90 5c 9a bd fd 25 6d 00 00 Data Ascii: RIFFWEBPVP8L/GC-13+N8.3qGMG~42IP_)Z:}$ O,QUT$?%z);I2Z9=${/u2pcj\%m

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49831	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1108	OUT	GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 332 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:47:01 GMT Expires: Fri, 26 Apr 2024 09:47:01 GMT Cache-Control: public, max-age=86400, no-transform Age: 11236 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	332	IN	Data Raw: 52 49 46 46 44 01 00 00 57 45 42 50 56 50 38 4c 37 01 00 00 2f 13 c0 04 10 95 c0 ae 6d db d8 73 db fc 63 db f6 ab 6d db ce ab 5b 48 15 e9 c0 da b1 0b 58 d1 97 71 bf 7c 88 80 63 5b db f1 2a b6 6d 1b 23 b0 4a 77 99 45 3a bb 75 72 6f c7 0e 9d d5 7a 00 b6 6d 5b ef 04 f0 11 4a b2 98 6c 1d 6c 19 58 4e 48 fa 8c f5 44 3c 24 41 22 58 ef 6b 29 fb a4 be ba 97 bd 79 e1 84 13 57 f6 96 37 54 7d 82 e4 09 90 b7 c4 83 b9 cb 56 ea 47 0c a9 76 34 01 64 05 89 1d 90 25 01 5a bb 1e da 8a 7f 79 29 6f 10 e1 a7 dc bb fb 02 c8 b8 cd 5d 7e e0 30 6a 53 2f 8e 02 12 19 84 a1 a5 de 24 81 97 7c fb 4b ce a9 ad 9c 96 19 c8 38 4d f8 00 0c 3d fe cb 49 fc 71 9d 7f 83 aa 5b c8 39 73 1c f9 11 2f 0e 46 3a 01 6a 87 cf a2 05 7b 6e e8 00 32 c4 ff 64 1c 23 41 3c ac 54 ee 41 ce 69 c8 83 b3 8d 2f 09 Data Ascii: RIFFDWEBPVP8L7/mscm[HXq\|c[*m#JwE:urozm[JllXNHD<$A"Xk)yW7T}VGv4d%Zy)o]~0jS/$\|K8M=Iq[9s/F:j{n2d#A<TAi/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49832	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1108	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 266 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 08:58:54 GMT Expires: Fri, 26 Apr 2024 08:58:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 14123 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	266	IN	Data Raw: 52 49 46 46 02 01 00 00 57 45 42 50 56 50 38 4c f6 00 00 00 2f 13 c0 04 10 07 a1 10 92 24 67 ae ce df ed 18 fe 11 72 5e 0d 45 8d 24 45 bd fe e5 e1 00 7e 38 d8 03 9a 41 db 48 8e cc 1f dc 41 38 1d 8c f2 25 6c 23 db 56 72 bf ff 1f b9 62 39 0d 50 03 fd b7 c0 10 d1 81 4e 00 00 5b 6e 1a 50 b4 02 09 14 81 82 ac ef b4 ef 36 5c e8 77 1c 2b e8 bc e7 fe fc 86 58 a3 fd f7 d3 55 27 cc dc 06 23 ef 7d b8 ef bd d3 59 db ae bb c8 00 41 02 78 64 42 04 fd 00 86 91 24 25 da 77 77 e3 f1 fc c3 74 c8 20 a2 ff 0a dc b6 51 7c cc f0 0c f8 a1 2c 11 0d 03 91 92 0c b1 c4 c4 71 08 16 89 44 14 40 21 48 d0 aa 4e 98 70 aa 35 a4 a2 bb b5 d3 2a 60 ee e9 d5 b4 6d 73 d1 7e f6 6c 9c 06 02 df 5c 2f ad 5b 2f d4 f4 75 3d 14 81 40 1f d7 ed 58 16 c7 1d 34 6a 3d c6 7d ff ff 65 64 69 dd 69 cb d2 fe Data Ascii: RIFFWEBPVP8L/$gr^E$E~8AHA8%l#Vrb9PN[nP6\w+XU'#}YAxdB$%wwt Q\|,qD@!HNp5*`ms~l\/[/u=@X4j=}edii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49833	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1108	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 240 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:02:54 GMT Expires: Fri, 26 Apr 2024 09:02:54 GMT Cache-Control: public, max-age=86400, no-transform Age: 13883 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c db 00 00 00 2f 13 c0 04 10 ff a0 a0 8d 24 65 fc 1b bc 27 15 cc bf 36 94 46 92 14 75 fe 11 a2 f0 48 d4 0f ab a8 6d 24 27 fc f1 dd ef 50 f4 3e 3b 4c 02 00 4c 33 66 c5 53 0c fa fd 2b 51 85 07 00 a5 59 00 02 08 d0 00 02 08 10 10 c0 82 92 6a 9e 73 2e aa 18 29 fe ff d3 77 bf e2 7f 42 3f 86 56 d2 79 3f f0 bb 9f 8e 39 cd 8f ef dc cb f5 be a8 7e 60 01 12 43 01 8e 31 b3 62 00 86 91 24 29 59 ec f1 c3 e5 8d cd 3f 4f 1c 02 88 e8 ff 04 e0 ed 79 2b d2 e6 67 ca 69 1c 56 92 5c 87 71 2a f7 66 9e 9e f7 a0 35 0e b5 c6 a1 31 c8 8a 20 28 32 18 73 aa a3 52 ec ae 08 e3 98 f2 77 3d 95 62 7f ca 1a 84 29 90 86 30 f6 c8 f9 28 89 95 8a 93 c8 bb a3 65 e3 e1 b6 1c a1 a9 a5 12 a9 a4 6e f0 6e 00 Data Ascii: RIFFWEBPVP8L/$e'6FuHm$'P>;LL3fS+QYjs.)wB?Vy?9~`C1b$)Y?Oy+giV\q*f51 (2sRw=b)0(enn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49834	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1091	OUT	GET /a-/ALV-UjXu_LA0yHlVyZP-9D4A1_oAR5qpsouGW-A4uLCPF6Kh5IVQKX8=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1958 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:39:17 GMT Expires: Fri, 26 Apr 2024 11:39:17 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v7" Content-Type: image/webp Vary: Origin Age: 4500 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 9e 07 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 1f 00 00 1f 00 00 56 50 38 4c 56 07 00 00 2f 1f c0 07 10 09 85 6d db a0 21 ad 34 8a e8 7f 14 40 3e 48 61 00 60 a1 a6 91 14 e8 4a 42 89 82 1f 3d f8 af 10 80 00 a4 a8 6d db c8 d1 fe 53 5e 99 ff bf cc 0f 82 65 9b b0 ff 2f ae d1 ff 90 41 91 97 82 87 45 8b d4 3d f6 3b 64 9a 19 e6 41 44 22 3a b2 ad 2d 92 9c ef fb fe 2c 18 66 66 46 4b cb 94 4c 99 72 65 81 c5 0c 1e 33 0e 33 36 14 53 66 fe f9 ff 46 76 d5 1a 9e 66 0f 1d 29 4c ab 43 16 43 8a 71 01 b2 06 5c 2d a0 3d 31 9a d4 9e d0 55 8c 27 57 ae 2c d6 02 c8 d5 1a 98 33 26 82 12 24 db a6 6d ab c6 dc fb dc 67 db b6 6d db b6 6d db b6 dd 64 cb b6 6d db fc ff d9 e6 5a 72 ae 6d 3b 24 e9 79 be ea af cd 99 b5 6d 7b 23 7b 37 b3 8d 9f b0 29 23 6f 66 db 88 Data Ascii: RIFFWEBPVP8XVP8LV/m!4@>Ha`JB=mS^e/AE=;dAD":-,ffFKLre336SfFvf)LCCq\-=1U'W,3&$mgmmdmZrm;$ym{#{7)#of
2024-04-25 12:54:17 UTC	1236	IN	Data Raw: 00 50 ca 84 6d 1d 12 d5 d8 db ba 43 7c 12 d8 79 07 9e c1 b5 fb 12 ff 6d bb 62 5f 06 6c a2 68 b8 00 70 05 08 c7 b1 84 0c 61 8f 7f 2b 51 04 c4 1a 9d 43 80 a4 04 fa 05 6b ea 3f a8 84 1c b0 b7 9a d8 d7 f5 4f 68 9b 90 e4 21 b4 ed a7 c0 8e 83 1a ff 52 10 0e 30 28 bc 22 50 34 60 54 bc cf f2 58 80 03 13 73 c7 3b a7 93 eb 35 ff 08 45 48 80 36 24 52 21 96 49 13 62 1d 20 6c b1 80 11 00 30 b6 e6 6b 81 04 0c e0 10 3b 48 ae 83 34 90 84 de 52 a1 38 f3 5b 5b 36 7d 52 d0 27 41 b7 3f 1b 85 1a 2f 20 63 e4 43 40 4e e4 7a d8 04 6d 00 06 f1 dd 4f 6c e2 ea 8f e5 8e 34 b4 7a 8c e1 08 30 9a 50 ac f9 2f 72 f0 0b ed ad 3d d2 e2 98 14 f8 38 60 48 21 89 84 81 5f 24 00 72 bc d2 09 ef b7 69 92 b0 6d 31 de 88 94 02 27 a1 b8 aa 26 ef 01 91 21 ce f8 28 07 1f 84 93 fa 2d b9 2f 00 20 2b 9f Data Ascii: PmC\|ymb_lhpa+QCk?Oh!R0("P4`TXs;5EH6$R!Ib l0k;H4R8[[6}R'A?/ cC@NzmOl4z0P/r=8`H!_$rim1'&!(-/ +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49835	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	530	OUT	GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 36974 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:48 GMT Expires: Fri, 26 Apr 2024 11:19:48 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5669 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	721	IN	Data Raw: 52 49 46 46 66 90 00 00 57 45 42 50 56 50 38 4c 5a 90 00 00 2f a5 c0 49 00 4d 48 6c db 48 90 24 d8 53 ae b2 ab 71 f9 07 3c 3d fb 1f 42 44 ff 27 a0 aa 22 cd 64 24 f9 ec 4a dd 52 f7 c5 96 7d b4 92 7d db 91 f4 a2 2d f9 91 ba b3 a3 48 12 f5 36 ee 23 d9 6b ee f6 ac bb 77 07 df 07 f7 da 9e 77 4b 18 4e 77 db 70 92 9e 19 48 bb dc dd 75 03 ec d8 33 91 ba 5f 01 80 62 d2 dd d1 4c 53 1a bd c0 7c bf 94 99 09 98 99 24 9b d1 a5 07 40 91 d3 c9 ee 36 47 d2 8e 01 30 f9 92 d6 33 04 00 f7 5e 86 6b 33 58 a0 0e fb 00 c0 39 07 d7 c5 bb a9 2b 29 49 9e 4b b5 50 96 e9 0b 00 02 f5 f0 8f b6 99 7c bc 8b 27 91 48 bd 96 17 e0 a0 6c 51 b2 0d 64 a7 80 da 75 2e ab c6 77 d6 34 bd 6d fc c2 1d 5a dd 92 1a 48 be 8e 39 73 bb 12 e4 1c 1c bc cf 47 e1 00 33 94 1d cd 07 70 50 bd 54 92 cc f3 22 00 Data Ascii: RIFFfWEBPVP8LZ/IMHlH$Sq<=BD'"d$JR}}-H6#kwwKNwpHu3_bLS\|$@6G03^k3X9+)IKP\|'HlQdu.w4mZH9sG3pPT"
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 15 8b 98 c0 56 e3 0b 0b e5 a6 06 e7 b9 bc 95 cf 27 20 86 61 b1 9a e8 21 fe fc e0 2b 00 0c 58 5c 5c 5c 3e af 19 00 58 2c 10 41 5b 57 f7 d0 3b 00 16 02 02 7f 6a e3 e2 45 b7 1b 00 01 24 fe fc d8 06 76 b7 9b 6b e1 9a 42 44 14 c0 08 80 cc 33 cf 9f 56 be 53 f1 6b 3d 3b 65 ed cf 36 d0 5c 0b 57 fc 1c b1 28 cf 1f d7 73 67 cf 1f 1f b2 93 4c be 57 d9 45 26 71 77 64 b3 5b 75 70 32 39 83 01 15 20 41 02 01 56 7c 5f ec cd e0 f7 14 f9 dc 33 57 ec 78 12 42 21 49 0f 62 cd bd ba 61 cd da de d8 07 b7 07 5f 1d be af 38 53 67 e5 c9 bc ac 79 e7 c9 bc 98 28 8a e2 f7 ee 74 67 e1 6e e1 61 ea 49 8a 61 60 ea 4c 9d b8 cb 48 3c 19 46 67 52 8c 8b 27 cd 11 62 22 a5 38 71 b7 70 97 99 b8 c6 ae a5 6b 38 7c eb d9 79 de 7d 67 bc f2 02 ea dc 48 23 3d c0 50 8c 7d 4f bb 5e 76 0d 38 c7 08 8c 50 Data Ascii: V' a!+X\\\>X,A[W;jE$vkBD3VSk=;e6\W(sgLWE&qwd[up29 AV\|_3WxB!Iba_8Sgy(tgnaIa`LH<FgR'b"8qpk8\|y}gH#=P}O^v8P
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 0a 81 63 0a b3 7c 9a 70 03 48 2b 9a 18 87 8e 4a d3 7a 72 13 40 23 80 e1 81 ab 0e 5b 66 95 10 0b 4c c5 ec d4 2c 4d 16 a0 d9 81 d5 6d 18 61 96 88 29 64 5b 00 8b 49 78 28 26 ad cc aa 41 30 0d 40 10 80 60 04 0e c4 51 16 41 d1 d2 07 07 22 64 c4 11 11 31 10 c7 21 23 62 1c 21 43 96 21 08 2c 47 07 30 10 5b a1 52 b6 0a ab 10 dd 5a ae 08 84 c8 48 62 a5 00 aa 32 a6 62 57 39 30 4a 19 02 4a 0b 15 4a 24 56 a5 50 8c 72 d0 2a 26 ac 00 7a 15 43 a2 8c 11 94 00 89 31 15 91 d2 28 65 83 48 33 82 00 30 1e 66 18 3c 46 03 6c ca 10 49 24 8f 21 03 05 08 20 20 01 00 51 46 60 44 c4 65 94 18 07 a4 11 40 40 a9 32 54 a3 24 8e 43 a5 f1 74 4a 65 b5 3a 0b b4 02 11 62 a7 83 34 40 c0 34 03 80 26 20 14 89 88 5a 8a 56 6d f9 b3 b1 c4 b1 1c 38 22 14 90 ad b0 9a 62 52 40 0b 31 12 c4 b6 02 80 00 Data Ascii: c\|pH+Jzr@#[fL,Mma)d[Ix(&A0@`QA"d1!#b!C!,G0[RZHb2bW90JJJ$VPr*&zC1(eH30f<FlI$! QF`De@@2T$CtJe:b4@4& ZVm8"bR@1
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 70 48 ad 04 44 a2 c1 08 01 06 ca 80 48 cc 24 4a 81 0c 95 ba 72 9a c0 59 f6 84 22 c7 cd 2a 22 90 0e 44 95 c0 42 dd 6a 45 44 60 8c 23 01 23 23 b4 6a 14 4b 91 08 2b 89 c4 12 88 81 63 89 b1 a2 03 28 51 56 d0 b1 95 52 71 84 12 04 50 22 54 13 2a 81 41 a0 0f 0e 03 37 00 64 a0 c1 21 28 62 10 41 55 e0 d2 a0 84 00 12 31 62 09 a0 50 6a 0c 00 14 12 40 1a 9f dd 50 73 4c 37 6d ec 84 41 b1 42 8b 94 ad 59 47 37 a6 c4 12 26 6e 02 63 80 11 33 a5 85 63 5c 4b d3 51 3b 96 6b 52 64 05 00 07 e2 56 49 71 a3 ca a8 d2 02 34 29 10 8a 9a 0a 45 42 85 2a 88 96 24 a9 88 0d 00 6c 62 19 07 cc c5 04 04 9b 63 01 04 40 09 1c 62 ca 10 09 8c 71 d9 14 a0 0c 88 10 09 6a 45 33 0c d4 67 28 b5 12 d7 56 49 94 60 95 2a 6d d7 95 d2 c5 8d a8 40 40 16 29 e3 12 c4 40 4a a4 88 bc 42 4d 93 da 1a 6e 58 04 Data Ascii: pHDH$JrY""DBjED`###jK+c(QVRqP"TA7d!(bAU1bPj@PsL7mABYG7&nc3c\KQ;kRdVIq4)EB$lbc@bqjE3g(VI`m@@)@JBMnX
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 20 8e 4c a7 20 0d 42 0b 21 b5 4a 55 cb 31 84 88 4a 85 ca 88 32 5a 22 b1 8c 03 40 34 72 98 21 80 11 23 82 30 cb 54 0d c4 d8 84 00 47 84 00 32 4a 80 74 41 1d a6 ab 5a 4d 2b 01 50 01 91 8e e9 56 c4 a3 d0 0e a2 28 48 f3 aa 11 d5 b8 91 c0 90 52 06 66 90 b1 08 a1 59 42 5d 56 58 9d 56 a7 d5 14 38 46 c4 88 a7 12 b0 6a 84 e1 b4 16 33 59 2f 2d 01 60 b5 40 80 ba 55 41 62 a0 44 31 e3 88 71 44 8c 10 e0 a5 98 28 05 65 20 a4 e0 22 80 94 e3 72 e0 22 12 81 02 41 b3 90 e8 32 2e 73 96 40 53 02 61 51 aa 39 00 04 c5 02 34 43 51 53 b7 3a a2 91 5d 81 88 30 a3 41 d9 9e 89 46 20 21 b2 76 53 55 af 54 3a a5 11 a6 4c 81 db c6 01 84 a2 0a b3 0c 2a 42 98 90 92 45 95 a8 08 65 90 95 a4 51 19 05 05 81 88 81 03 18 08 14 31 40 c1 4d 13 62 2e a6 c1 22 28 e3 28 18 08 2c 87 3a 84 a8 c6 17 2a Data Ascii: L B!JU1J2Z"@4r!#0TG2JtAZM+PV(HRfYB]VXV8Fj3Y/-`@UAbD1qD(e "r"A2.s@SaQ94CQS:]0AF !vSUT:LBEeQ1@Mb."((,:
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 00 58 02 0c 61 08 30 48 0a 4b 82 9c 42 33 d9 fa bf fc e6 37 ff b7 7d e6 11 66 48 1f db df f8 c5 47 fe 36 a7 2c 65 0c 20 98 25 26 48 50 30 aa b4 96 24 5c 02 17 fa b3 7f 34 95 77 6e c6 b4 20 56 2b 25 27 c4 d3 9e 44 a6 a4 6a 15 91 25 78 63 35 42 9e fa 3c c7 e6 d1 18 03 e2 14 f5 a4 08 86 91 68 19 40 4d 62 89 45 90 34 62 85 19 15 0c 20 8c 2a 4c 40 04 04 00 60 90 30 80 24 58 68 81 53 09 03 0c 31 02 82 31 e2 78 6c 9a 9e 6c fb cd 6f 7e b7 df 7c 6a f6 e4 06 ab 9b 0f 3e f2 6b 7e f1 31 d7 22 45 46 29 49 d4 12 4d b2 48 3c ea ae 64 2e 29 2a 88 df 75 4b 96 69 c4 34 6e 40 41 ad 58 05 ca a2 d6 1d ab 31 9a 99 c9 0c 5a e3 a1 11 34 82 b0 ae 56 32 a0 62 ea 6c 5a 2a 7b 15 16 55 9b 55 02 6d 6b 56 b0 4d 50 8a 5b 02 60 62 95 12 00 22 06 50 30 22 02 f1 08 14 41 2c 11 11 cd 18 28 Data Ascii: Xa0HKB37}fHG6,e %&HP0$\4wn V+%'Dj%xc5B<h@MbE4b L@`0$XhS11xllo~\|j>k~1"EF)IMH<d.)uKi4n@AX1Z4V2blZ*{UUmkVMP[`b"P0"A,(
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 25 d3 7f fe e5 1d 27 02 b8 2c 82 28 11 05 62 62 20 46 04 06 16 48 8c 51 8c 34 45 00 2c 01 20 46 c4 05 62 ca 08 81 51 91 29 2b b2 92 21 49 8d 5a 55 13 c5 4f ab 6a 1d 21 ad 6e 56 0c 2d 00 98 13 4a 82 dc b2 9c ca 03 59 ec 1e 94 19 37 2b 2c 56 33 3a 06 1a 89 05 18 31 ea 50 46 19 8a a9 b1 82 59 56 58 64 36 90 d4 eb be 9c ad fb 7a ee 4f c7 e7 fe ec f6 71 5f b0 bb f1 ea fe f8 7b a5 a3 b7 fa c7 9f 3a 5f 4e 00 2c bb 2c 81 47 04 0a 70 c4 00 24 8e 11 82 88 21 08 41 44 8c 88 88 81 80 20 ca 40 00 02 21 80 2a c4 2a 56 ad 30 d1 20 eb 6a ce d2 56 d5 44 b5 c9 94 86 d8 3a 49 cd 3b 24 ab 48 8d 42 a7 2d b0 5a 06 81 ad ea 16 19 0c 46 d9 56 8c 22 80 31 a8 8c 58 ca b6 15 c6 58 60 43 d8 08 6c b0 cd 07 78 f0 03 bc fa 72 cf fc d6 f8 d1 c7 3f d3 3c e9 6f 7d c9 76 e9 17 a3 0e 5e fe Data Ascii: %',(bb FHQ4E, FbQ)+!IZUOj!nV-JY7+,V3:1PFYVXd6zOq_{:_N,,Gp$!AD @!**V0 jVD:I;$HB-ZFV"1XX`Clxr?<o}v^
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 80 22 a9 85 64 21 ad 55 03 21 33 b1 35 84 09 26 b5 a9 58 a5 b3 38 28 9b 08 a1 92 0a 85 0f 52 81 43 a9 50 5a 95 a2 22 6a 4a 5c 22 ab 92 b2 01 40 62 cd ad 1d ba e5 99 27 b7 91 c5 b9 f1 ab 5b ce 51 42 48 cc 7e f1 f8 02 3b 10 24 48 81 18 18 88 01 00 03 8d 04 02 21 88 11 8f 88 18 12 c7 90 a6 8c 18 88 90 51 8c c0 88 91 51 e0 6d 60 00 2b 34 78 b5 00 28 15 22 48 2a 15 0b 93 88 aa 19 14 44 69 45 50 55 75 4c 91 62 75 88 8a 88 38 e4 50 37 11 37 37 ad 4a 09 c2 15 54 2a 00 80 ae 0e 3c b8 b6 5d ac f1 ab 5f 3d b5 fd 72 9d 29 0b 00 42 fa fd ef fc fa 3a 08 00 10 0e 09 60 00 40 a9 49 c8 a5 8c 81 31 80 08 00 23 22 80 28 b2 41 08 02 00 ca a6 c0 40 e0 75 04 02 00 a2 08 06 42 d3 98 08 54 0b 4b ac 32 a6 59 4b 09 a0 49 ae 64 ca 13 98 52 d3 d2 20 12 29 fa b6 74 33 10 ef ee 84 aa Data Ascii: "d!U!35&X8(RCPZ"jJ\"@b'[QBH~;$H!QQm`+4x("HDiEPUuLbu8P777JT<]_=r)B:`@I1#"(A@uBTK2YKIdR )t3
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 00 50 38 81 43 01 5c 67 04 00 b8 74 de 6d dc f9 9e 4f d8 1c 06 e4 12 4b b9 bc 19 40 60 a0 80 ae 44 70 09 1c 61 10 28 31 02 82 00 46 2c 21 80 a0 09 53 0a 42 8a 88 84 57 09 bc 46 53 22 80 08 b9 91 22 cb 22 4d 34 32 d5 ca f1 21 47 1c 61 a4 44 7c c4 74 30 3a 96 9b 8a aa 43 57 15 4c 1f cf 2a 46 cb 07 05 a1 00 40 e2 43 9f 3d db 67 dd 79 c8 de 73 b9 f2 9f ea 5e d7 ff 37 cd 0b c4 e3 ed bd 88 1b 7f 1f 05 00 15 40 00 66 2e de f0 f5 4f db bc 10 e3 88 08 d1 10 cd 88 52 96 61 62 c0 c4 18 11 32 04 02 44 00 8f 08 20 10 0b c4 14 44 0c 41 88 29 12 00 44 13 8c 80 00 42 88 20 a0 08 8d e1 e6 5a 2b 24 9d 5d 02 91 d5 b4 f3 e2 e3 90 48 91 12 90 ae 74 91 ce e8 a6 ac ee 09 e9 dd e8 a0 8c 00 2e a3 04 00 13 f9 aa 9f e8 d1 3f ad 0e 06 ef 40 fb 84 bd 8b d9 78 ac dd 53 23 bf 35 a7 5b Data Ascii: P8C\gtmOK@`Dpa(1F,!SBWFS"""M42!GaD\|t0:CWL*F@C=gys^7@f.ORab2D DA)DB Z+$]Ht.?@xS#5[
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: f1 e1 ba 02 10 52 c8 a3 1a 49 28 01 44 28 23 29 a3 b8 25 8d b4 30 aa b4 03 bc e8 5b 1f 2d 1b 06 80 40 08 80 81 c0 18 80 08 8e 88 06 80 19 88 28 82 26 36 01 34 58 40 56 52 12 01 01 00 82 26 6a cd 19 4e 45 55 92 45 a8 6b 25 6e 5b 97 be ed 2c 25 45 a9 12 a9 93 10 42 20 8e 11 81 e6 00 ba 9c 5c 25 06 08 bc 52 55 94 71 83 4c b3 a2 b5 42 86 97 d2 7c 92 b3 f0 20 20 80 26 70 00 01 60 8c 18 0f 88 60 20 42 80 40 2c 05 88 1e 89 40 29 00 35 00 18 28 15 05 10 89 28 4d dc 1c 87 2a 25 9a 2c 5a 47 43 0a 37 b8 22 3a 21 70 d4 65 e9 46 8e 23 99 22 87 d2 45 c5 22 55 81 11 91 c9 12 a1 a1 9d d4 76 12 1a f5 47 24 10 00 80 28 c0 ea 63 25 08 00 0c 91 30 e8 72 1c 47 c4 e8 82 01 2c 12 45 a2 08 30 20 90 01 40 a4 08 29 92 29 b8 45 37 ad 10 29 75 29 21 67 b8 c9 54 49 d9 11 1f 57 1f 52 Data Ascii: RI(D(#)%0[-@(&64X@VR&jNEUEk%n[,%EB \%RUqLB\| &p`` B@,@)5((M*%,ZGC7":!peF#"E"UvG$(c%0rG,E0 @))E7)u)!gTIWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49838	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	530	OUT	GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 34150 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:48 GMT Expires: Fri, 26 Apr 2024 11:19:48 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5669 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	721	IN	Data Raw: 52 49 46 46 5e 85 00 00 57 45 42 50 56 50 38 4c 52 85 00 00 2f a5 c0 49 00 4d 38 6c db 46 92 22 67 6e 2f 59 cf f5 5f f0 3c d7 42 44 ff 27 a0 bb bb 2a bb bb 6e 97 ae aa ee ee aa 7a bb ba 77 bd eb a5 2f 24 75 49 ea cd 5b 5d dd 03 39 6d 5b 9b ee a5 ab fa be 96 ea 7f ab bb 1b c0 00 66 2c ef fb 0a cc d9 06 5e ec 99 1e f9 cf 14 d7 d6 18 a3 98 12 08 09 10 ca 91 43 99 c9 b5 0f b2 e2 48 38 33 87 33 93 8c 30 52 cd 8e 58 06 36 30 39 2f 5f 5b 0c a6 15 fb cc ac af 24 1b 91 5c 3c 2d d9 c6 9c 0d 74 4b c4 f5 92 58 8c 18 63 6c 7e a1 83 15 41 1c 37 92 22 22 00 2e c0 9b cb 25 d3 b2 ee 06 22 2d e2 d2 21 49 0c 89 48 ce 63 02 cf 98 26 e4 8d 40 4b 95 4c 04 e7 98 18 49 b6 e2 98 68 fe 7e cf 12 11 c1 46 96 be da d8 5c 86 3e 27 03 11 11 76 f8 f3 63 c3 29 22 6c ad 36 71 54 84 bb bf Data Ascii: RIFF^WEBPVP8LR/IM8lF"gn/Y_<BD'*nzw/$uI[]9m[f,^CH8330RX609/_[$\<-tKXcl~A7"".%"-!IHc&@KLIh~F\>'vc)"l6qT
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 8f cf 00 8f 04 00 1a e6 23 56 97 56 97 00 7e 77 9d 15 a9 86 b0 dc 4c ab 61 b3 fa b3 07 00 cc 77 6d 83 35 77 6c 98 50 0d 61 31 03 50 cb 00 00 ee df 03 bc 2f 77 f3 fa fa 8e 9b e9 0b 2f ce da 1e 80 c0 e4 1c 9e 29 10 7e d9 f7 59 7f 46 18 36 a3 eb fd 01 13 a6 06 00 51 27 6f 7b 77 ba a3 b2 66 82 4b 80 6a 9a ff ef 95 61 35 87 db f5 31 2e 4e 2a f0 44 13 2c 6c 5e f3 d0 02 58 30 01 c0 05 f2 72 f8 cf 01 9c 2c e2 7c b9 8f 00 40 fc b6 bd 34 33 58 0a 00 75 db da df 99 2e 2a 8c 8b 67 8f ca e2 7e 0b bb 4a 0b 8c 2e 8a 27 9b b2 ac 59 93 c6 25 84 1d 97 c0 4e 6d bd 80 44 d1 77 b6 5e 93 cc f1 ef 65 b9 52 77 00 d0 b4 a9 0c 48 08 46 c9 ff fe a3 a2 a0 00 33 e6 05 4e 22 c1 e6 6f 6b b7 30 48 7d bd 50 76 dd d8 81 45 01 eb eb e3 fe 66 84 9d 82 72 f9 a1 ec ba 53 07 88 84 71 1f ec 80 Data Ascii: #VV~wLawm5wlPa1P/w/)~YF6Q'o{wfKja51.ND,l^X0r,\|@43Xu.g~J.'Y%NmDw^eRwHF3N"ok0H}PvEfrSq
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 8a 2a a8 54 aa 04 a9 92 44 85 54 aa 44 1d 00 04 00 e3 01 dd 85 14 d0 27 52 ea 40 a5 d2 9d 50 a5 10 25 25 ea 28 91 24 2a a4 52 05 3a 45 a5 a2 82 4a 9d 42 49 29 75 2a 15 89 54 2a 75 0a a5 8a 0b be 0b 28 51 a9 54 aa c6 69 cc 48 57 ac 37 a7 23 c5 06 ab 9d 6a 24 64 5d d0 d1 51 8d cc 29 08 2a e7 14 36 95 a2 5a c5 48 81 65 b8 26 65 cb 5c 43 1b 60 ae c9 1a 05 9b a9 1b 14 80 46 30 20 68 33 03 e8 0a 58 83 54 88 9a 82 c1 95 a4 aa a6 5c a9 14 e9 d8 16 06 d6 a6 6e 3c cd 60 eb ae 14 45 d4 29 67 4a a5 b4 9c 96 a5 8a a8 13 db 18 42 ad aa 29 15 35 56 69 21 95 9c eb c4 99 91 94 96 99 02 75 ed 5c 5d 98 14 07 d3 d9 06 a4 6b 3a d3 42 4b 92 ab 97 91 ec 5c e9 8c ca 40 54 64 50 14 57 1a e7 ca 02 d1 5a a4 83 30 6e 49 a2 43 b3 2b 46 02 07 d3 ee ed 14 97 67 6c 0f 14 21 27 b6 82 81 Data Ascii: TDTD'R@P%%($R:EJBI)uTu(QTiHW7#j$d]Q)*6ZHe&e\C`F0 h3XT\n<`E)gJB)5Vi!u\]k:BK\@TdPWZ0nIC+Fgl!'
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: da c8 d9 25 9b 0c b2 b7 ac 29 75 c9 91 b3 a3 b4 0d f0 02 43 39 77 51 81 33 e0 b5 88 73 87 ab 6e 31 e3 8d 57 0d 68 b7 2c 42 ac 5a 8b 76 ee 54 a5 ea 7a 19 55 89 1a 57 4a 31 8c 54 8c c0 20 33 63 10 32 a1 0c b9 43 5a 45 c4 58 0c 85 ab 8d ce 42 d2 25 15 58 56 55 c6 9b 1d 30 b8 0b 39 8f 97 d7 52 9c b1 4a 65 b3 0a cb f2 c8 15 12 83 a4 b2 c8 42 ac a5 c8 58 96 89 2e 54 2a 8b 31 43 49 94 50 fc 97 53 95 43 f2 2d 37 42 2e 54 8c 0a 16 4b 48 4b e9 2c 97 dd d5 8d 10 14 30 53 a8 43 26 dd 8a 0a 25 30 a5 24 89 32 81 31 45 6d 70 52 24 51 e7 ea 42 91 4a 69 50 23 42 70 4d a7 a4 52 d0 24 53 ba cb 5d 2e d5 dc 51 e9 52 a9 14 49 29 a9 81 9a 4e a8 d2 a9 52 90 0a b1 29 29 a8 94 8e 2c 11 b1 19 32 a5 52 a9 94 91 92 e8 a8 06 98 52 54 29 98 52 a6 42 92 8b 1a a1 d1 24 35 72 52 29 55 9b Data Ascii: %)uC9wQ3sn1Wh,BZvTzUWJ1T 3c2CZEXB%XVU09RJeBX.T*1CIPSC-7B.TKHK,0SC&%0$21EmpR$QBJiP#BpMR$S].QRI)NR)),2RRT)RB$5rR)U
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 92 19 98 ad 24 58 82 b9 e8 51 24 ab 32 32 ea 6a 43 43 15 ce 17 c5 5a 1a 55 19 75 c5 50 14 ba 46 30 a4 a5 49 4e 8f 92 28 78 07 18 73 c1 54 a5 81 44 2a a6 20 05 d8 a9 ea a6 a3 a8 c6 74 c8 58 0c 4e b9 26 14 e9 61 6b 68 ba c6 68 49 11 d4 29 19 33 40 5a 04 6d 2a d5 08 9d a8 52 29 aa 1d 99 4a 94 36 b7 de 14 55 0a ba a8 29 75 6a 6d ca a0 8a 0d 4e 9b d0 a5 d2 e9 38 a3 24 ad 31 3d 4e 98 a0 13 6b 04 4c e7 a2 8d 2d b6 a9 9c 50 c9 50 d9 05 93 34 e5 b4 6a 03 40 6f b6 53 ca d4 60 4e c1 90 0d 4e cc 89 2c 96 72 35 c5 68 96 ea 38 ab a5 2e cc aa b3 a1 d4 b1 af f2 48 e9 65 49 5b ab 76 26 93 c8 db b7 94 e9 2c f8 c0 1c 70 93 47 66 27 99 9a 51 be 52 35 92 ae b7 5c 83 d0 39 85 1d 0b b1 88 b6 0b 25 aa e4 94 33 02 d4 29 1b 17 cb d6 53 ed 2c 2b 04 74 5c d5 48 e0 66 8a 16 04 f9 ac Data Ascii: $XQ$22jCCZUuPF0IN(xsTD* tXN&akhhI)3@Zm*R)J6U)ujmN8$1=NkL-PP4j@oS`NN,r5h8.HeI[v&,pGf'QR5\9%3)S,+t\Hf
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 90 0a 09 05 b5 03 ea 52 92 2e e7 48 a5 6e 96 79 0b 06 76 b4 b7 15 3d 48 b7 5e 8b 5d 68 2c db b2 57 a6 41 6a 2f ce b9 0f 72 86 ca bb 51 53 38 30 92 cd 0b 0f 6d ea 4f 06 09 84 17 2f f5 47 bf fc 2c 5a cd 6f de fc f1 b2 2b 53 84 46 12 68 24 2a 35 77 5d 1a ff 7f e7 6b 91 04 30 18 4a a0 05 10 a8 85 90 2a 00 b2 84 04 fa a1 50 b4 04 b2 a4 cc af 7e f1 f1 a5 6b 97 37 46 e7 5f fe cb ca 54 06 c3 04 98 28 24 47 98 3a f8 f8 09 07 3a 85 6a 14 a0 56 58 03 b4 65 ca bb fe f3 a7 91 24 85 29 49 21 38 6a a1 a6 40 d5 a8 78 e6 6a b3 e4 68 6f e7 9c 20 65 53 75 0a c5 42 d9 0b 0c c2 bc 55 39 1d d2 f5 4e b5 6d aa 21 72 db 55 b4 d8 60 cf 65 af 39 b9 93 a3 ed a2 22 a4 b3 5d a5 7b ae dc 5e 2d 4e 91 b6 b8 6a 5f 2a 6d a5 b1 67 dd 69 41 d7 d1 5d af d4 35 33 65 1f 48 0b 75 36 ab bd c8 c6 Data Ascii: R.Hnyv=H^]h,WAj/rQS80mO/G,Zo+SFh$5w]k0JP~k7F_T($G::jVXe$)I!8j@xjho eSuBU9Nm!rU`e9"]{^-Nj_*mgiA]53eHu6
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 82 f0 04 b0 f4 db ca 9c 86 11 5f 79 f2 3d 5f 3e f7 bd 89 a9 ba 9d b3 b2 23 12 df ff 97 57 f3 3f e8 62 07 48 10 82 a8 26 0c ad e3 b3 cf be e3 47 be fe ed 7f c4 8e 4a 5b 8d 8c 6c 0c a5 fa cc 80 56 18 0d c8 14 bf a8 1c 59 0e 5a 32 18 50 45 50 03 a0 89 56 a2 ec 0a af 86 f8 0e 09 a6 da 00 0d c0 68 29 23 7b 96 77 30 c9 a9 ca 29 4a 67 ba b2 ee 9c 29 85 bc 14 07 05 5a 55 47 24 35 54 3b 45 da 00 db a9 b6 8b ca d5 ac 6b 17 ec 13 57 f5 50 9a 3e 75 73 b7 a9 f6 ed 92 ee 70 95 3f 40 57 86 fa a8 ea cd 90 d2 54 fb c5 e9 cd cb f9 ed cc 29 4f f2 d5 e2 75 31 e0 05 d7 2a 9c 20 f3 e1 ff f5 fb cf 1c fe f8 a6 d7 fe bb 8a 11 89 fe ee ef e9 72 76 df 75 63 7d e6 bf 00 24 a7 53 4b 61 e3 9e 45 1b b2 36 2f bc 2b 45 fb e3 6f df fd df 93 be fc 47 62 8d d2 47 52 76 bd a3 c2 64 e6 f5 c7 Data Ascii: _y=_>#W?bH&GJ[lVYZ2PEPVh)#{w0)Jg)ZUG$5T;EkWP>usp?@WT)Ou1* rvuc}$SKaE6/+EoGbGRvd
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 9b 2e aa 7a 6d 85 e2 b2 a9 7e 4c 37 79 0a dc 97 9a 2d 66 5d c9 55 e4 b8 61 53 8b a4 1a c1 aa 75 b9 d1 f4 97 6b 06 7b 50 3a b3 e5 7c 3b 72 ee b3 8e f7 51 e5 2d 5c d7 9e ea 7d cc 35 92 94 d7 5d 1c 95 52 ef ba f8 4a d5 d5 6b 5d bf cb 3a 20 71 ea 4a f4 0e 15 6a 9b 53 48 8a 90 a2 15 11 11 d6 a5 11 0d 85 2c 99 78 9a d2 49 01 6b 18 af 2c 25 71 65 48 1a aa a4 ad 91 a4 a9 c0 57 59 85 eb e7 95 05 47 4d 40 e0 61 48 71 85 4d 98 6a 45 92 a4 0c 81 16 4c 88 ba 32 8c 0a 08 e1 e9 4b 1b 93 10 52 0c 13 60 9c d6 b2 86 18 1e 93 24 a8 ab 35 ec f8 92 c0 80 2f 6d 48 4a 09 9a ca 62 ef eb b2 5e 90 6e 4f e5 3b 54 33 e3 3c ae 88 44 ea 75 57 5e a9 66 6f 54 f9 2e d7 51 9c da 77 57 5b 3b 95 ea 5d 8b 6f c1 74 b3 99 8f b3 36 9e 4a d7 85 8c 4d 89 2e eb 01 e5 47 cb 4e 67 e1 2c 27 ee ee 5c Data Ascii: .zm~L7y-f]UaSuk{P:\|;rQ-\}5]RJk]: qJjSH,xIk,%qeHWYGM@aHqMjEL2KR`$5/mHJb^nO;T3<DuW^foT.QwW[;]ot6JM.GNg,'\
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 1c 95 b5 bc 29 27 31 ab 0d 55 ca 82 c0 2a b1 36 64 4a a2 a9 03 8a 11 a5 a8 96 2e c2 b5 87 5c 60 77 95 ba 32 b1 5c d5 6c 4e cc 1b 86 1c bb 4b c2 22 50 09 97 c1 50 ad 4d 91 37 45 9b 3b 8c 2d 37 df 06 d0 11 d8 c4 d6 46 94 c4 99 a3 a8 54 d5 3b 4d 99 a6 e6 34 58 77 b2 a0 e2 de 39 3a 89 42 eb d0 4b b9 d3 69 73 a6 94 14 9d af 86 bd c1 1d d5 9d 6b 3a 17 35 66 af a1 14 55 a5 a9 33 55 ff 47 5c 2a 97 38 de 45 2f cb e5 e8 82 75 5a 2b 8d 93 a4 56 4e d8 76 22 5d cf 5a 79 46 d5 d5 ab ec 57 ba eb 4e ce f6 5f 42 ad 48 f9 ac e5 9d bb b1 49 8c ea 08 37 77 5c 7a 77 8c d9 e5 d1 f5 59 8b 07 65 4c a2 3e 3e ea 18 2e d7 57 4e 47 2e 79 54 7a b7 d0 35 8f f3 91 6b 3a b9 c9 e3 6c 07 95 dd 2f b6 e3 93 32 4f ad fa a2 4a 4d 98 4f b7 34 4a 62 0f 4b ef 8c 8d 4e b7 f8 16 e9 69 43 5f 6c 6f Data Ascii: )'1U6dJ.\`w2\lNK"PPM7E;-7FT;M4Xw9:BKisk:5fU3UG\8E/uZ+VNv"]ZyFWN_BHI7w\zwYeL>>.WNG.yTz5k:l/2OJMO4JbKNiC_lo
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 1c 53 b9 68 2e 4a 6e 4b e1 4e 30 66 ad 8b 93 85 a7 da e2 d4 5d a6 b2 56 f8 cb a9 53 27 cd 56 2a 4f 2e 6e 09 eb 22 65 8b 4a d1 e2 36 6e a3 aa 55 6b 6f 31 73 5b b0 c6 e2 36 54 2f 97 03 b5 4d 7a 15 29 1c 8f 4d 6d 4c e0 31 ad c5 a4 8f 4e 77 dd 55 b7 ab 46 e9 ce 5a 83 2d 04 9f b9 4e dd f5 86 9c a3 4a c3 a8 02 69 b7 08 74 b9 7a a0 cd 60 67 ca b5 19 55 b4 6c 1c 1a d9 39 7b d0 28 51 76 29 dd e9 82 d3 39 1b 25 1a ab bc 05 2d dd b9 76 91 8d 6c f2 c6 f9 8e da c9 a0 f3 dc 15 2f 89 ae dd 9c b7 a5 cd 19 59 8f e9 9a 0a f0 e2 eb a0 8a f5 e6 bc e8 ca 35 8e bc a6 6a 05 9d bd 60 27 88 8a b2 5a 8a e5 89 26 5a 23 ae 6e dc c8 82 b2 8b 6d aa a9 eb d1 aa 53 0c 59 a2 56 ab d3 e9 a3 67 72 dc bc 10 dc 4e ce d2 3c 4d f3 e6 a4 b6 98 ea b4 33 97 fd 7a 30 26 fa 35 27 a9 86 e9 5e 5b c9 Data Ascii: Sh.JnKN0f]VS'V*O.n"eJ6nUko1s[6T/Mz)MmL1NwUFZ-NJitz`gUl9{(Qv)9%-vl/Y5j`'Z&Z#nmSYVgrN<M3z0&5'^[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49837	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	531	OUT	GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 31756 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:48 GMT Expires: Fri, 26 Apr 2024 11:19:48 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5669 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	721	IN	Data Raw: 52 49 46 46 04 7c 00 00 57 45 42 50 56 50 38 4c f8 7b 00 00 2f a5 c0 49 00 4d 38 8c 24 35 6c 72 87 e2 40 20 fd 17 2c d9 69 21 a2 ff 13 50 55 95 19 55 95 4f b7 ca cc aa aa cc fc 56 56 9d ea ae 9e 2f 6c e8 8e 53 56 a6 cf b7 aa 5c 72 f5 0a 04 88 2d 2b b3 b2 fe cd aa e2 f1 da be df af e0 dd 74 03 5f ba 49 5f af 97 80 7a 1a e9 06 6c 60 ac b5 56 32 f6 da 8e 63 ac 58 46 d8 0a 6e 31 5d 37 84 dc 4e 47 c4 ea 08 47 1b 04 da c3 a2 9b 50 ce a7 4f b7 13 36 c4 83 fc a8 af f0 78 77 95 4a 08 d0 c0 74 03 55 da 2a 6b b5 30 b3 05 2d 2d 7b 80 e3 1d 73 00 ba 0f ba 05 c4 36 6c d0 db 70 9e d9 22 0e 7d ea 6e 17 72 5a eb 40 b7 2a cb 2d 38 8f 03 5c 6b 1a 46 22 36 0f 99 76 2b b7 e3 d0 a8 12 6a c4 a6 fe 7e d7 41 b9 55 3f 1e ae b0 6f a6 7d 3f e0 6e 7c ff d8 78 e2 78 0b 01 08 08 56 7d Data Ascii: RIFF\|WEBPVP8L{/IM8$5lr@ ,i!PUUOVV/lSV\r-+t_I_zl`V2cXFn1]7NGGPO6xwJtUk0--{s6lp"}nrZ@-8\kF"6v+j~AU?o}?n\|xxV}
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 3a 81 40 00 20 31 de f0 c5 4c d6 4b bc 3d 96 31 12 61 ff 29 ad c1 17 13 7b 64 bd f6 15 2b 9a 75 b8 06 80 d5 1e 66 f7 88 cd 93 79 f1 93 5f 2c 75 00 02 69 0d 66 26 be 0f 9c 3d 1b ec 37 8f 33 2e f9 66 0f 98 f5 8d 97 0d 1a 60 81 69 00 40 da 4e 81 86 09 b0 c0 02 06 40 be 5c cf 01 68 c0 e7 1c 9b 4b be 4e fc 87 17 c0 0b 2e 31 01 00 2e f7 72 f5 f2 03 c9 94 7b 00 1c 02 d0 d6 e4 c7 8e 59 5e a6 00 e2 30 1c ee fd 18 e1 d0 e8 05 c6 2c cb d4 4e 58 ce 4e c3 69 00 07 6d f4 43 90 f2 d4 fe 23 4c 68 07 00 48 63 3d 5c a3 7a ec 29 d0 97 1a 0e 01 18 18 1b f8 af 34 07 da c1 21 a0 1d ba 4d 07 96 be 00 1c 12 22 44 f3 df 01 52 17 a4 0e 8c 10 8d 1b 90 6c d7 39 4b 4b ae b3 49 19 5d 71 ff c3 5e 1c 9b 00 53 0c 7f e9 17 1e 0d 42 23 71 4f d2 d6 43 0e 31 c4 50 e3 76 4c 62 52 93 a7 99 39 Data Ascii: :@ 1LK=1a){d+ufy_,uif&=73.f`i@N@\hKN.1.r{Y^0,NXNimC#LhHc=\z)4!M"DRl9KKI]q^SB#qOC1PvLbR9
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: d4 cd 53 35 ab b5 ed 09 d1 cc de a6 36 94 0d d2 ee 6d 8a cb 13 db 03 8d 90 89 ad c1 c0 24 d8 04 33 c4 93 6a 0c 49 8b f6 cc 45 d2 48 db d4 5e 1e d2 2b b5 89 84 44 f7 ca c5 c5 65 6d 9b 60 42 68 d1 6d 89 b1 25 b7 a5 c0 63 ed 79 aa e5 0d da a6 ee 2d cd d8 a8 7b 3d d5 32 d8 e6 61 cb 58 3d 93 43 84 08 b9 d7 a8 12 83 4d dd 58 5e d4 e8 26 17 d8 d0 9e 5c 1b 63 68 53 b7 12 c4 42 29 64 ec a8 14 12 21 51 9d 84 a0 58 96 11 0d 46 2d 0a 49 aa 05 55 e4 65 45 28 85 90 a2 22 30 38 08 05 b1 6e c5 31 08 28 0b 21 64 22 f0 a2 2c 45 2c 44 bc f3 2e 62 89 09 06 2c 09 84 50 26 68 19 b1 12 2a e5 41 5e 90 12 2f 0a 25 62 19 64 49 3a 65 28 19 2a 2f 2f 2b 61 4b 2c 24 92 f2 b2 2c 2b 45 12 05 76 64 ca 20 63 52 02 9e d4 14 58 16 4a a1 94 08 85 52 b0 bd ba 13 cf 3d 6c ad 3d 5e 17 68 7a cc Data Ascii: S56m$3jIEH^+Dem`Bhm%cy-{=2aX=CMX^&\chSB)d!QXF-IUeE("08n1(!d",E,D.b,P&hA^/%bdI:e(//+aK,$,+Evd cRXJR=l=^hz
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 7b a9 05 00 d0 06 55 2c d8 b2 16 04 c5 5a d0 d2 aa 3a b2 31 9b 55 d9 44 a5 c0 ed 52 5b ed aa ed 64 49 da 15 dc 4d 6a cb 86 3b c5 da 54 d4 8d b5 f1 da 6e bb 76 f7 42 ab 76 b8 5b d6 ad 76 e8 38 bb ed 60 bb 4a 56 a8 42 5b 6b 68 2d 91 56 74 62 61 1e 74 4f d4 78 c1 c9 d4 86 2a bd a5 8e 79 35 02 6f a5 bb 05 e5 d4 d4 89 59 b6 97 7a cd 14 28 af 97 6e ab 6c 6e 2f 75 8b 0e b6 59 37 14 43 60 9b 6e d3 6a 11 75 25 18 49 ae a7 00 d0 9e 5c 2d d2 6a a5 6e 0c 21 e6 9e 54 cb c8 3d a9 2d 64 7a 4b bd 37 8b 34 e8 58 ba ed 7a c1 c9 b0 01 d8 93 bc f1 0e 48 bb 7b a6 db 58 d8 bd 92 37 a6 29 ea 6d 03 60 d5 b1 87 0b 05 35 eb b5 50 28 eb bb ac 2d 53 ed 49 bd 78 41 af e4 bb 92 62 8c 67 a8 33 90 9a 6a 89 99 8a 5a c3 24 15 bc 0d 8c 21 53 61 cb 98 94 ac 19 c8 1d 85 a5 a0 05 24 05 c4 2b Data Ascii: {U,Z:1UDR[dIMj;TnvBv[v8`JVB[kh-VtbatOx*y5oYz(nln/uY7C`nju%I\-jn!T=-dzK74XzH{X7)m`5P(-SIxAbg3jZ$!Sa$+
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 71 e3 b6 2c eb de a5 3b a0 65 2b 75 b0 b6 7a 67 1d a5 8e e8 50 19 dd f2 5a f6 c0 69 c9 0d d6 da 33 eb 2d c1 bc 37 fa 0a ba 27 21 6f 1e 5e ad 56 4d ee 7e 82 d6 12 eb b7 f2 3a 65 5b 7d 25 f5 aa 5a f6 42 3f 03 b7 08 93 2c 83 2a 0c 12 c4 21 f7 73 f7 f6 8b 1b 57 74 a1 85 84 d9 45 6a 00 30 28 94 51 85 94 44 c0 19 75 99 5a 28 81 23 a5 2c 16 13 53 92 12 75 a0 02 21 6b 12 43 75 91 9a c2 b2 e4 22 0b d4 94 a4 04 0e 45 20 a0 12 38 cd 11 52 43 a3 4e 93 90 d8 28 64 39 cf 98 a2 01 f3 f3 4a 96 c4 3a 65 b5 40 85 ad ce 33 0c 95 46 7e 92 5c 61 f0 e6 d1 2b b3 9c a4 be 84 0a a8 2f e6 9c 41 ad 97 d1 b7 54 c6 b2 1a cb 52 c8 5b 9a 95 62 a5 8d b3 0c 24 71 5b 29 2b 69 51 53 88 ae a4 9e 30 74 ed 4b a5 56 41 a4 a2 52 2d 40 1e 27 24 24 8c a1 eb d5 5b ee 7d d9 99 4f bd f0 91 9f fd f1 Data Ascii: q,;e+uzgPZi3-7'!o^VM~:e[}%ZB?,*!sWtEj0(QDuZ(#,Su!kCu"E 8RCN(d9J:e@3F~\a+/ATR[b$q[)+iQS0tKVAR-@'$$[}O
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: e2 8e ef a0 09 68 77 f6 46 6b e6 ec 82 e1 d9 1c 5a 87 ad 5e 99 e9 ec ef 7c f5 55 dd be 90 aa e3 41 fb 9d 7e e6 8d 4f 79 f3 27 df 69 cf 75 31 51 f0 e9 3b ff 9b 0f de 33 fd 51 0d 09 a5 f3 4f 67 84 17 76 9b e6 79 fa 3e cc a2 c5 f4 bb 93 92 19 8b c3 1b be ff 91 d2 a2 31 9e aa 08 35 cc b6 37 7b e3 f8 0e 5d 51 a5 cc 62 17 a1 da 9d 4c dd 82 b2 cd 6a 88 20 31 e2 94 51 d0 76 ef 99 fa 2e b4 95 a3 0c 51 29 c8 72 3a 11 2a 43 2d 64 67 87 54 57 46 4e 27 05 36 84 3d d5 8e ce e4 ce 08 28 c4 76 ee b2 84 ca c4 5e d1 94 85 03 7c cc 16 30 c4 44 16 b2 2a 0b 29 5a 25 48 6b 92 ba 49 cc 88 41 16 d4 19 8a 0c e7 fd cc f1 d9 6f 9f fd 70 66 ea b3 f2 0d 4f 79 f7 bb df c1 8f e6 f3 ef f8 ff f7 de e3 b2 2b 9e 72 f8 f9 03 f7 41 b3 5c 97 01 a0 94 b3 45 1d 51 6a 31 a1 4d 19 9c 5d d2 5b 06 Data Ascii: hwFkZ^\|UA~Oy'iu1Q;3QOgvy>157{]QbLj 1Qv.Q)r:C-dgTWFN'6=(v^\|0D)Z%HkIAopfOy+rA\EQj1M][
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 57 2d ae 44 4b 5b c8 c4 31 95 c5 b4 29 49 e8 38 dd 02 55 c1 65 99 45 e8 92 ed 9a 8f dc 54 5b de 58 5d a2 e2 d0 14 0a 28 16 c0 6a b9 34 e2 51 28 1b 00 34 32 45 3c 90 82 76 19 71 b9 14 8e ba 62 4d ee 1a eb c0 10 92 11 eb 33 c5 32 43 20 d6 31 45 5d 0a 47 29 43 31 1e 0d 88 10 51 57 55 95 42 ac 9a 10 7a 53 6c 15 63 94 d5 ab 48 c7 c8 51 9c 3e 35 86 46 e4 2e 77 9e 8f 8b 4a 59 0f 7d 2b 19 1c 1b b3 ea 9c dc 4d 52 d3 3e bb 26 f1 b2 69 24 8e c6 30 c5 63 e2 a6 e2 68 3a b9 d9 06 dc d9 16 8f 13 54 10 9d b2 5a 1b 66 15 2b 0a 9d 6c 21 b2 10 9c c2 12 38 59 65 84 0a 01 14 59 91 8a 3a 84 32 12 12 72 42 c4 a7 64 48 1d 43 ca 60 21 21 11 24 00 00 19 a0 1a 06 ce c5 08 a0 84 18 00 c0 22 40 a0 2a b2 aa 96 15 50 55 2c c4 8c b2 0c 2d 31 40 a2 2c 80 52 a5 96 08 18 88 9a 51 10 30 55 Data Ascii: W-DK[1)I8UeET[X](j4Q(42E<vqbM32C 1E]G)C1QWUBzSlcHQ>5F.wJY}+MR>&i$0ch:TZf+l!8YeY:2rBdHC`!!$"@*PU,-1@,RQ0U
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 15 87 9f 9e f2 3e 3e 7e dc 73 67 a2 dc fc d2 55 37 4f 7b cf e1 f4 77 72 9b 33 70 fd e9 92 fd b1 7f 7a d7 13 ff fc 2e 17 9e ba 4d c4 dc 70 6d be 79 c6 ed 7e 40 6e 3d ee 08 6b fa b7 33 2e 7d e3 9f 77 7d e8 1d 2f 38 fe f8 73 d7 5f 75 58 77 95 97 7d fb 71 ff f8 e1 3f ae 7c c5 9f f3 70 fd f6 e4 9c fb 86 3f 3d eb 97 b7 e6 a6 3b 5f 74 9a a2 d1 9a 78 2a cd a7 77 e9 5c a5 5a 9b 8d 25 c1 d9 72 c6 6a 9a 48 45 bc 36 a6 2f b3 9a 42 71 f2 44 ab cc ac 04 2d ba 5e 44 20 84 25 b5 82 75 6b 30 c0 21 ed 06 ab af bf f4 a9 bd 39 f9 51 4f ff f8 bd b6 d9 9d 6f e8 d4 20 99 df 78 ef f2 b6 5b f9 da 57 2f be c1 5b 7d f2 c3 17 df d2 8c d3 f5 be b7 7c e3 c3 fb dd 19 1f ff e6 f7 dc 79 fb c4 27 bf 6f aa e7 9e ab 37 72 dd f0 eb 27 7e fa 4e 2f 7c e6 ad 0e 5f fb e5 cd 57 bf f0 a1 8f dc ee Data Ascii: >>~sgU7O{wr3pz.Mpmy~@n=k3.}w}/8s_uXw}q?\|p?=;_tx*w\Z%rjHE6/BqD-^D %uk0!9QOo x[W/[}\|y'o7r'~N/\|_W
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: bf b9 fb da 4b 1f b8 cb 4b 5e 7b ca fb b7 fa c9 fb bf fa 88 b3 de e9 93 b7 7c d5 c2 f5 7c e0 eb eb 45 8f 3d 9a 5e de 7e f6 89 7f dc f7 c9 1f 7a fb af fe 55 9b 39 1d 6e be 2a b4 5e 41 6a 45 90 b4 3d 2b de e5 43 1e 71 f7 ec b5 b7 56 1d f7 9a 73 1e 9b 9b b6 dc f1 b9 af 6e 0f bc ff 5f de fc ef 8f 39 f9 c3 1f df b1 e7 bd fd cf f7 bd ff bf dd fe bf 0f 79 d5 eb bf ea 11 fb bf e4 cb ff 7a cf ad 97 4c d8 38 fd 8d bc fd a1 8f 1d e5 ac f8 d0 fb ed 73 cf b3 83 f1 e9 9f 8e bd f7 63 77 79 ec 9f 4f 7e 28 8d f7 cf bf dd 0b 56 6f bb 78 ec 3f cf 3e f1 96 d7 f6 3e a8 27 fc 7d fb ce 9f b7 a6 f5 c4 bf 38 9c f0 8f ff ef 7f d7 ff f3 1b 3a cb 2c 12 62 d1 42 76 2d 28 5c b3 ac 16 54 5a 89 36 4a b5 8a 2a 1b f2 9a 77 75 d6 c9 51 ee b0 02 4e e5 ee cc 66 49 59 c7 d6 33 e1 5a 39 57 b3 Data Ascii: KK^{\|\|E=^~zU9n^AjE=+CqVsn_9yzL8scwyO~(Vox?>>'}8:,bBv-(\TZ6JwuQNfIY3Z9W
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 29 09 32 59 2a 51 25 35 10 ad 54 c4 81 38 a6 3e c9 12 88 2a 83 61 91 68 0a f5 aa 20 d6 63 01 4a 1c 49 4e 64 5a e4 04 41 59 02 3b 59 f6 fd 98 2c 4b 96 3a de 95 f5 64 29 b8 88 9f 90 27 50 2a 55 9e 15 6e 33 25 5c e7 f2 9c 83 8a 8a 65 76 17 ee a2 83 93 7d 16 15 2a 21 fb 72 6f dd a5 65 8a 00 9b ac c4 20 2b 11 82 1a 02 24 84 72 32 8c 46 6c 22 00 03 8a 72 5a db 1e 8a 3a 0f 9a 26 09 a4 00 8b 42 0e 03 b6 26 42 49 a8 e8 d2 61 d0 4f 32 f5 22 a6 b5 66 48 c5 90 ad 23 84 e2 82 6a 24 53 82 36 44 d6 a8 80 0f 46 74 a0 19 0d 29 d2 60 34 6d a0 46 69 c3 aa 9c 11 07 06 09 15 3d 1d 49 1f 13 cb 23 20 69 4f 46 d8 51 53 81 4a 46 a4 c7 88 02 1c d4 32 60 1a 71 84 44 24 c2 50 7a 46 a9 a9 d7 46 4d 45 99 1a 2d 40 31 59 28 74 85 d8 97 f6 62 38 dc 0e 3a 73 50 d9 9d ab db 2e 2a b7 92 b5 Data Ascii: )2YQ%5T8>ah cJINdZAY;Y,K:d)'PUn3%\ev}!roe +$r2Fl"rZ:&B&BIaO2"fH#j$S6DFt)`4mFi=I# iOFQSJF2`qD$PzFFME-@1Y(tb8:sP.*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49836	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	529	OUT	GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 51228 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:48 GMT Expires: Fri, 26 Apr 2024 11:19:48 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5669 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	721	IN	Data Raw: 52 49 46 46 14 c8 00 00 57 45 42 50 56 50 38 4c 08 c8 00 00 2f a5 c0 49 00 4d 40 8c 24 39 6e 53 b3 b8 07 c4 82 f9 07 0c 50 76 08 11 fd 9f 00 fe 28 a9 d4 f1 0f ad 9e c8 78 48 b2 a5 b8 68 02 d8 18 db 92 6a b6 72 82 2c 24 6b 0c 90 32 05 cf b4 8d 4f 40 99 a9 c5 33 9f 47 11 61 03 18 03 54 3d 55 10 82 01 50 04 51 f9 3c 63 8c 90 10 88 06 18 63 44 55 09 71 8d 00 f1 1d 02 83 cd ef e6 aa 5f 0c e8 f2 c7 40 3b 82 f9 00 ba d9 b2 85 80 04 49 c5 69 23 3e 23 2a 00 83 f1 88 38 26 b0 c2 40 6f 10 3a ee 16 e0 e3 1e 07 60 ce 01 0c ae 7a de b2 6d 50 f2 ed 8d b9 5a e8 a3 eb b2 e6 2c 31 3e 36 97 bd 35 65 7f 78 6f cf b4 73 4a 82 71 a9 2a e7 de 7b 4b 2d 87 8e b7 ab 6c 78 7b 69 29 00 89 88 ee 7e 33 7b 6f 83 00 37 a0 ee 99 69 db 60 43 77 81 dd dd 8e 32 30 05 ab 4d c3 21 09 6c 0d f5 Data Ascii: RIFFWEBPVP8L/IM@$9nSPv(xHhjr,$k2O@3GaT=UPQ<ccDUq_@;Ii#>#8&@o:`zmPZ,1>65exosJq{K-lx{i)~3{o7i`Cw20M!l
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 30 44 a2 be 97 f9 d8 ff ec 0e 65 d4 4c fd 62 96 00 09 90 24 49 bc 11 6f 22 81 b8 cf b5 4e f7 f0 1a 1f 64 78 7b dd cd 09 6e 01 40 80 24 df 38 7a 43 00 d8 c7 11 81 de eb 63 87 d5 01 ee 25 49 14 6f 4a 82 0c 06 f1 60 b4 6d 2d 7f 5c fe e8 17 33 00 ef 78 0f 90 43 92 8a 8f d3 c6 62 86 2b 74 46 0a a1 dd dd cf 2f 33 7c e6 fd 8d f7 00 49 0e 49 02 a3 fc 1a c6 b2 0b 9d 8b 6e 0e fd 2c 3c 28 09 58 f5 38 a7 f7 b9 e9 d4 d4 52 53 b4 74 ea 23 fd 64 3e bd 6e 7e d4 01 10 79 56 d7 62 36 b7 f9 bf e8 54 b4 b5 35 fc 79 b1 8b cd 6d b9 6a 5e 59 03 c0 1b 51 97 a8 f4 5e 87 ce b9 cc a5 b5 2f 1a ad b2 ce fd 01 e3 d5 04 49 02 c4 4a ef 6d 4d af 55 2a bd 55 20 42 c1 89 ef 66 02 00 4c ab 24 ec eb 25 8b b7 7a ad d7 ba b8 74 89 63 19 31 f6 16 f7 f3 d1 f4 db c9 4f 3f 9c fd 26 a0 24 2b 0d 26 Data Ascii: 0DeLb$Io"Ndx{n@$8zCc%IoJ`m-\3xCb+tF/3\|IIn,<(X8RSt#d>n~yVb6T5ymj^YQ^/IJmMU*U BfL$%ztc1O?&$+&
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 30 67 02 60 0c ee 3d f7 ec d9 62 02 f8 bf ff bf de 72 23 e9 f3 f9 e2 a1 cb 54 b7 b8 5c 66 b6 43 4e 1c 70 b0 bb 43 cd 1c 98 66 66 e6 ee 34 c6 ed 4c 27 1d 68 ee 0e 33 74 da 31 87 13 33 c4 50 55 76 95 8b e9 56 5d be e7 dc 03 5f f8 7c 3e 3f d4 b5 dd f4 07 bc 67 54 6a 69 e0 6a a8 c1 9a 74 66 16 4b a3 a3 d5 99 89 ce 82 7f f8 2a 3b 5e b2 6a 19 bc 50 83 d1 d5 e8 0e 7c 17 4e 4b 74 16 06 2d 79 18 bc d1 69 28 45 b5 e0 1f ce 40 2d e7 2c 43 14 a5 87 a2 5a b8 9a 39 03 a5 11 7e 35 62 b0 86 67 32 50 6a b9 c1 3f 54 7e b8 6a d5 62 74 96 a1 b5 c3 63 c9 ea f5 ae ee 28 f2 42 69 75 06 bc 9c 5a 06 77 d4 e0 55 69 78 a6 06 6a 29 7b 96 b9 14 35 95 9a bb 4b 91 b3 7c 17 ee 72 ee 0f 1e 89 79 c6 1a 6a b0 26 db 50 8a 74 b7 55 d2 0a 03 b6 6d 87 25 49 7a df ef fb 23 e2 f8 a4 2a 2b cb 55 Data Ascii: 0g`=br#T\fCNpCff4L'h3t13PUvV]_\|>?gTjijtfK;^jP\|NKt-yi(E@-,CZ9~5bg2Pj?T~jbtc(BiuZwUixj){5K\|ryj&PtUm%Iz#+U
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: e1 b8 c1 8a 1d f3 16 20 dc 33 bc 3a 88 43 82 8c 7b 20 00 27 d8 9a 42 22 ca e6 75 02 ec 47 67 f3 90 80 00 5c 01 88 ec c2 09 0f 35 76 41 2c 05 64 29 7a 75 04 90 14 80 0d 0a 19 7b 92 ed 56 8d 9a 78 7a 52 33 d3 ab 5b f2 5a 80 41 6b b7 d6 46 aa d7 47 54 5f 94 74 b6 07 5b 53 48 49 f6 57 54 d8 35 d1 42 71 c2 39 6b 6c 49 49 61 f3 71 4a 0a b0 e3 90 02 0a a6 70 e0 74 0f b6 ab 31 ba 8c 8e 99 1b 90 ac 86 25 c7 1d ab 1b 54 37 cf 6c 56 47 28 37 a3 5b e6 04 60 9e 90 7b 52 00 62 ff 25 25 11 d4 00 c5 2b 21 9c 31 e5 b4 ad 01 34 08 b5 5d c2 06 5c 81 00 48 b2 0b 24 25 25 41 f2 14 61 f7 25 91 36 65 a3 ba e3 e6 ea 20 50 1d 92 0a 64 15 8e a3 4f 34 69 dc 42 05 47 47 f6 63 42 4a 4a dd 8d ec 03 27 05 92 ed e1 04 48 82 a4 50 77 54 f0 00 21 05 48 61 33 9c ab 0d 01 ae 38 a3 b0 79 65 Data Ascii: 3:C{ 'B"uGg\5vA,d)zu{VxzR3[ZAkFGT_t[SHIWT5Bq9klIIaqJpt1%T7lVG(7[`{Rb%%+!14]\H$%%Aa%6e PdO4iBGGcBJJ'HPwT!Ha38ye
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 3c d7 ab ff e0 73 5d b3 5d ee cf 7f d1 e5 6e ab 9d d0 0f bf f9 2e e7 5e 62 7d ad de fb b8 c6 16 87 fb 9d 21 67 9a 69 00 e4 29 45 64 0b b0 08 72 ba 4a fa c1 d9 27 13 9b a6 0c 60 ec fa 82 11 83 31 06 92 51 35 24 8b 93 bb c1 6e 3c 53 ce b2 1d b9 8f c6 c9 0b 36 72 6d 71 73 55 10 09 ea 33 f8 b3 43 7b bf ab 9e 5c e6 63 ef b9 e2 b7 bf 57 60 28 7c d9 db 7e ff 04 cd ac aa a5 dd a5 b3 71 97 f4 00 e7 f9 3e f0 07 10 f5 32 bf f6 39 2f f8 9e 3f 68 83 5e f2 07 3f ed 46 a7 1e e4 93 f3 60 5c c8 5a ff b4 50 11 81 9e 67 b6 56 87 c7 10 87 33 ec c1 10 70 4e d1 1e 37 3e 37 01 c3 e7 6c de 7c d3 b9 02 84 02 0e ec 2f 52 1b ad 04 1a 02 0a 3c 03 9e f6 62 1d 49 96 9c bf d9 38 86 a8 6f c6 36 6a e2 f5 d9 3a 5e 7d b4 55 94 a2 e0 99 67 5b 25 32 0e c3 1e 19 77 a6 82 ed 7c 14 40 07 67 55 Data Ascii: <s]]n.^b}!gi)EdrJ'`1Q5$n<S6rmqsU3C{\cW`(\|~q>29/?h^?F`\ZPgV3pN7>7l\|/R<bI8o6j:^}Ug[%2w\|@gU
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 11 b8 4a 1a 27 6f c6 33 90 7e 83 8b 3d 9a 09 f9 08 b5 cb 57 4e f4 78 74 72 03 b0 f1 80 60 1a 1a 6e e9 00 00 78 d3 e8 9c 26 1f fd fb 3f f8 58 3f f9 c1 e5 be fb 63 ef aa 09 00 91 46 80 16 e8 00 00 20 22 66 3c d3 2b fe ec d3 fc db 5f 7c 5a bc de 5b 7c 24 b8 cc a0 15 5c ac 80 4e 00 e8 04 23 64 c1 8a c8 54 00 5c 1c 86 7f e4 0c 11 0e 09 28 0e 1a 7b a8 fa b1 22 85 49 dd 85 cb dc f1 ba 73 b5 ac 86 35 a1 1d 25 26 85 46 55 c5 2e a5 83 df 58 6b 39 d7 85 91 46 f3 cb be bc bc ec 9c 27 67 6d 61 22 00 80 16 00 30 ef 9e 50 7f ba b7 fc fe bf 99 2f d6 04 98 34 06 93 76 00 04 9b 5e ec 9b 57 ca 74 a3 8f 04 80 72 13 b8 78 29 66 a6 41 c3 2e 30 a6 6a f3 20 db 60 20 4e 0d 20 26 15 27 4d d7 43 8a 54 79 ee 68 4f ed 81 9d d3 ab 64 55 59 ad a5 59 57 83 75 c6 43 fa 88 93 45 83 5d 19 Data Ascii: J'o3~=WNxtr`nx&?X?cF "f<+_\|Z[\|$\N#dT\({"Is5%&FU.Xk9F'gma"0P/4v^Wtrx)fA.0j ` N &'MCTyhOdUYYWuCE]
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: d9 be ee d3 60 d3 af f4 dc f5 67 98 ae 03 8f f3 e1 3f a3 02 97 f2 5c ff fe 47 46 50 eb 4f 75 fd cd e9 46 5f dd 0d 1c 4e b7 a0 de 18 00 82 30 10 b6 16 a0 23 04 98 50 0d bd be be 16 01 01 13 aa 69 75 a6 5a d5 52 8a eb 2a d7 f3 62 49 94 b2 c1 9b f2 9b 7c f2 29 a9 34 7e 8f 2b 4c 2f 9f 5d 52 02 ad c0 c6 e6 79 7d ba 54 23 db 3c ee 79 0f 74 1a 55 3d fb a1 db 8b 52 63 c9 e3 7d f1 57 54 53 23 c4 97 3b 7b ba d9 8f 7d 81 4c eb 8e da 10 18 46 bc 06 bc e8 03 7f f5 15 7f ec 37 af 0c 47 3d c4 09 3a 4f cf a6 6a 13 43 af 3f fe e7 5d 1d bc 6b 84 b2 dd f8 fe f3 cd 2f 67 49 ed 19 67 78 b5 fe 0b 3e 88 17 33 f1 73 76 f4 98 a2 db 4a 6e f0 85 95 a7 b7 8e 5c 30 5c 3f 7d 13 22 1e e5 d4 2d 1c ad 1c e8 66 df ff b1 8f e3 ba 70 e2 22 f9 f5 7e d0 f3 f7 b6 dc eb fa dc 27 00 88 00 a4 71 Data Ascii: `g?\GFPOuF_N0#PiuZR*bI\|)4~+L/]Ry}T#<ytU=Rc}WTS#;{}LF7G=:OjC?]k/gIgx>3svJn\0\?}"-fp"~'q
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: f9 2d de 9b 0a 1a dc 3c 9d 30 d4 cd 04 60 ee 80 86 73 61 5a 63 c2 f1 74 10 18 39 1d 10 05 41 68 58 23 11 48 9d 1e 32 22 99 a9 00 d0 79 0c 74 e8 02 40 10 20 b2 b4 23 04 c0 7f 0d 2b 10 ec d8 54 03 8a a0 40 01 ae b8 62 27 44 e6 11 aa 65 46 5a 00 b9 14 1c 12 d5 e4 7c 30 9c dc 77 a5 25 cc 52 27 8d 46 3d 46 c5 11 3d a0 60 c8 c0 82 37 3e f4 23 20 0d f1 c5 70 22 91 c1 bb 3b 9a 3a 00 00 d2 d0 60 b0 a1 06 0d 00 80 4c 10 00 a0 a5 03 82 00 00 c1 d8 62 80 14 80 d9 03 76 75 07 14 80 1d 50 00 84 cd ab 20 6b a5 1e ed 88 5f dd 90 74 15 66 98 a5 23 4c e1 11 59 eb 3c 7b 9a 32 0b e5 2a 1d 8e 7a d5 6a 26 c6 77 13 63 f1 a6 05 27 5a ad 1f 4b 19 0c 43 8c 48 3e e2 e4 39 1c dc 84 3c 66 2c 12 44 e4 75 01 22 60 ce 0c c2 a4 41 68 0e 4d 92 86 49 53 60 66 34 50 90 01 40 0d 04 b4 80 80 Data Ascii: -<0`saZct9AhX#H2"yt@ #+T@b'DeFZ\|0w%R'F=F=`7># p";:`LbvuP k_tf#LY<{2*zj&wc'ZKCH>9<f,Du"`AhMIS`f4P@
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: af 59 f5 ff fe 17 ab 6f b1 ea 3f b7 fa b6 cb ff 8c 15 ff c2 19 0f 79 06 ce 6a 13 f1 e4 ca fd d2 57 c7 d9 1a 9c de 11 f7 39 05 93 ea 50 5b 9c 22 06 98 66 08 26 15 bd e3 34 6d 76 cf 24 ed 8e af a1 b9 f0 b2 f7 3f 0f af 41 3b f5 e1 79 be d0 44 92 37 3d 6d b2 11 4e 77 80 04 4c 98 84 cd ba e3 4d 33 78 de 87 fa 79 de f2 09 2d df e4 61 4f 2b b6 b0 0b 82 d9 65 4f e1 8c bf f1 6b df c1 fb df f3 d1 5f 74 ce 1a 9c ae 66 8a e9 fd 98 34 05 00 10 82 06 43 46 08 fc a1 c4 3b 48 e3 38 7e f6 f8 8f 3c 6b f3 7e 84 31 47 46 b2 0b 04 e4 e8 40 8f 56 84 81 c1 02 30 03 ec a0 aa 55 ad 00 69 98 06 82 68 a7 0d ae fe 63 23 1f b8 6e 42 59 a1 d7 77 4a 2a d8 fd 1f 75 a1 17 ab 6e 83 fc fd fa 33 6e f7 d2 3a c7 9f 74 47 47 b6 39 6a 4e f3 2d ed ef db 3c 71 fe 69 b6 ab 05 77 ad 60 e8 7d 39 a3 Data Ascii: Yo?yjW9P["f&4mv$?A;yD7=mNwLM3xy-aO+eOk_tf4CF;H8~<k~1GF@V0Uihc#nBYwJ*un3n:tGG9jN-<qiw`}9
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 79 8b 4a fa f0 5c 78 db b7 f6 ba f6 e5 fe c7 1e f8 9d cd 36 d5 00 38 02 d7 bf f5 97 3e ae fb cb 7a cc 97 f1 fb 57 ac 62 ef 53 b0 58 ed 5b bd 31 4f f6 8a fd b6 ff b1 9c e3 fb e6 ed fe 61 7d dc e7 ec f6 fc f4 b2 d5 ef e2 00 81 d1 0e 01 bb 0f 00 f0 f0 0a a0 12 32 61 6a c2 b4 1e a1 d5 b6 c4 84 75 15 a9 83 e8 24 23 e3 f5 bd 64 62 9d 42 25 2e 80 b6 71 68 c8 38 bd 91 d3 78 6c 79 39 f5 22 48 a2 e6 c1 20 62 91 e1 27 a3 8e 70 78 31 15 b2 5c 79 37 a3 27 69 d3 ea 7f e2 92 20 00 a6 d4 80 53 dd ae 75 35 64 e3 ec 98 b9 70 bf eb 5f 5d f8 f6 37 fa bd f4 8f 73 5a 15 ac 95 88 10 c0 65 bf d2 37 be 9d e3 c7 39 6e cb e7 fb 12 af 60 a7 b7 e5 dc bf e8 17 7f d6 7c f9 af ff fc df fd 26 bf bf 9e f7 2f 6b f4 1d 39 c7 0f 4d 9f 74 bb 5b d6 e1 ff 41 60 b6 de a7 ed 1d 7f c2 58 68 10 c6 Data Ascii: yJ\x68>zWbSX[1Oa}2aju$#dbB%.qh8xly9"H b'px1\y7'i Su5dp_]7sZe79n`\|&/k9Mt[A`Xh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49841	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1100	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 984 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:22:55 GMT Expires: Fri, 26 Apr 2024 09:22:55 GMT Cache-Control: public, max-age=86400, no-transform Age: 12682 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 d0 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 88 03 00 00 2f 3f c0 0f 00 e7 04 a1 91 24 47 52 0e 7f c6 67 2a ce ff 43 70 d0 36 92 24 35 7f a6 87 60 ef ab d8 41 db 48 92 d4 fc 99 1e 82 bd af e2 f9 5f 07 0c 21 b8 e3 ce 36 10 00 14 80 e0 4e 70 27 ac 6c b3 12 56 b6 79 1f c0 1d 45 01 05 56 f6 ff 83 15 05 82 3b 8a f2 51 d9 26 28 ee 6c 13 94 fb 46 59 51 00 f6 ff 83 b0 b2 4d 00 d8 66 1b b0 01 77 0e 00 20 04 80 00 0a dc 37 95 00 e1 f6 fb b1 51 14 e5 fe fb a9 ec ff b7 62 73 7d 1e 07 ca ed 79 6c 53 b1 f1 ff ab c0 29 83 df 8f 52 b1 69 73 79 bd 84 10 82 12 de da 54 ce 9d 73 e7 7e c7 9d 7f 70 07 b4 6e 6d 4f db 58 df 30 33 33 33 33 33 33 33 cf 1c 3e c3 3c 6f 99 2b 47 76 ec 58 e6 fe db c8 ca 27 5f ce 55 44 ff 27 00 Data Ascii: RIFFWEBPVP8X??VP8L/?$GRg*Cp6$5`AH_!6Np'lVyEV;Q&(lFYQMfw 7Qbs}ylS)RisyTs~pnmOX03333333><o+GvX'_UD'
2024-04-25 12:54:17 UTC	262	IN	Data Raw: 0f 24 47 77 a3 69 55 04 08 31 8e 67 5a d4 0d 44 ab 9a 1a dd 1c 50 ab 89 e8 81 44 5b b1 80 98 d7 a7 80 7c 40 44 ab 15 58 e5 53 22 4a 3a d0 38 4a ec b7 3d 74 24 44 f4 54 f2 a0 98 41 2b 14 c4 07 e2 1f 25 07 a0 56 d0 8c 02 cc f2 21 ed f7 91 2d b1 40 9b 15 fc fd f4 50 72 21 9f 7f cc ab bd 22 ab 9f 84 77 6c 7e 0e 76 f1 ee a0 a7 56 da d9 11 78 07 df 09 3e 38 9f 45 40 76 27 a6 fd 9f 1d d8 ec 77 fe b2 44 b5 ae 7e d8 15 5f 6c a9 76 d8 0e b7 d9 39 5e 87 fd ec 94 8d 3b 11 aa d8 f8 7f 0e d7 a2 9f 75 54 d3 29 2e 4e e2 98 f5 30 17 a8 6a 9b 97 df 5c d6 ca 9a e7 b9 44 95 db 64 e4 de d8 b5 78 ca 68 a2 b1 d3 96 ef 7d 18 aa 1a 2a df 27 03 95 64 79 96 26 ca 97 5d f8 7d 15 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 Data Ascii: $GwiU1gZDPD[\|@DXS"J:8J=t$DTA+%V!-@Pr!"wl~vVx>8E@v'wD~_lv9^;uT).N0j\Ddxh}'dy&]}EXIF"II1P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49840	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	530	OUT	GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 8956 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5668 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 f4 22 00 00 57 45 42 50 56 50 38 20 e8 22 00 00 50 8b 00 9d 01 2a 28 01 28 01 3e 41 20 8d 44 a2 a2 21 12 69 35 18 28 04 04 b2 b7 70 b6 c8 fe bc 43 a2 f1 eb d2 91 7d 2b f2 a3 fa a7 ec 77 ca cd 33 f9 c7 e1 3f 60 1d 22 c5 a3 d5 3f 72 3f 43 fd d7 f1 ef dd 5f f8 ff 61 1f 9a 7f ca fb 82 7e 8b ff 84 fe f5 fb 7b fe 7f ff ff cb bf a8 0f d6 ff 50 7f d1 ff b3 ff cc ff 49 fb ff f2 d3 fd cb f5 c3 dc f7 fa af ec bf a7 7f e6 7e 40 3f a4 7f 93 eb 0b fd 6b f6 08 fd 5e f4 a7 fd b8 f8 31 fd 8e fd bd f8 11 fe 83 fe 2f fe cf e7 ff 70 07 52 7f 56 7f cb 76 b9 fd c3 f2 a3 d0 3f 0f 3e 43 f5 d7 fb 7f fe 2f 82 4f e3 3c 1d 74 c7 fc bf 44 3f 8f 7d 95 fb cf f7 bf da 8f f0 7f b6 ff 78 ff 98 ff 5d e1 2f c7 9f f2 7d 41 7f 1d fe 5b fd df f2 9b fb bf ee 7f 1e 28 00 fc b7 f9 df Data Ascii: RIFF"WEBPVP8 "P*((>A D!i5(pC}+w3?`"?r?C_a~{PI~@?k^1/pRVv?>C/O<tD?}x]/}A[(
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 23 18 59 94 f9 f3 a0 a0 1b ef bd ac de ea 49 03 ab 1d 2a 23 09 4a 0b 32 44 81 30 1a aa 62 44 3d 60 23 55 6e 5a 50 67 64 f0 dd 80 3e 77 0d 3f 83 c7 d6 e3 1d 4f 9e a7 d4 d0 f8 fe 14 23 94 74 28 66 7f ce 51 73 3e 5b 1e b4 fe df bd 5b ab 4c e3 b3 57 5c fd fd 44 80 90 39 2d c3 f9 05 1e 48 d5 e3 57 b2 55 08 25 f8 17 90 1b b4 4f 39 4b 84 a2 12 4d 0a c2 9f 36 ab 54 2a 27 50 4a f3 43 14 bf 39 ad 09 bc 3b 2b 35 47 1d 88 4f ee 49 54 45 25 2b da 70 b3 a9 dd df 7e cf e7 57 8c c6 32 f2 5a e8 0f 9d 37 9d bf 46 21 89 16 9c b7 85 ff f6 73 36 12 5b 3c e8 70 dd 60 36 d7 fc 73 a3 58 a3 21 cf de 94 b0 78 df 99 9a 28 7b 96 a1 20 fc 9a a9 4c 13 6d 22 16 b6 6f dd 61 a2 9b 61 c1 e6 f5 99 57 1d ee 8a 3c 85 74 16 ab f9 00 a4 63 00 b8 9c 80 91 09 f3 15 45 f9 c0 b7 dd 4b c8 50 7c 50 Data Ascii: #YI#J2D0bD=`#UnZPgd>w?O#t(fQs>[[LW\D9-HWU%O9KM6T'PJC9;+5GOITE%+p~W2Z7F!s6[<p`6sX!x({ Lm"oaaW<tcEKP\|P
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 5c fa 46 85 75 cc 3b 9f 41 fd 57 b0 ea 59 40 0e 66 0e 8d e1 fe 73 26 12 11 bf 6c 3d ca c9 ce 03 03 e1 89 5a f2 9e 1b fe 77 63 3f 4d ad b4 eb cb 21 df e5 f9 c5 45 96 5c 69 28 ff 0f 38 96 fc b5 54 04 f6 ff d3 56 3f d5 48 d0 4b 75 97 b8 5b 5e f4 d0 7a da 22 d5 80 82 82 d3 d9 74 ca 90 56 91 ab 89 dd 2b 7e ef fd 31 9d a2 c5 95 fe 62 5e 40 7c 04 bc 8b 5a c8 b3 80 eb a3 ab 27 8e 51 0e 9e af 66 d3 c0 80 26 79 ae 51 00 20 1d 80 cd 04 e2 0d a5 92 49 91 3a f5 ef 10 e5 99 bc e1 a0 f8 10 5b c9 a3 1c ee 8d bc aa 53 42 09 8c 8b c6 f1 e9 ce 81 3d 8f 84 86 25 d8 27 71 e4 13 5d 5d 18 66 4d 81 0b 86 d0 2d c2 45 25 97 26 46 c3 67 84 0d 09 6c 27 24 69 9b 41 81 00 2f 42 3e f0 f0 86 28 75 83 ee db 41 97 68 c4 9f 53 d0 bc 60 ca 12 70 3b 89 f1 f5 a4 2e 9e 2c 14 33 74 25 b8 2e 06 Data Ascii: \Fu;AWY@fs&l=Zwc?M!E\i(8TV?HKu[^z"tV+~1b^@\|Z'Qf&yQ I:[SB=%'q]]fM-E%&Fgl'$iA/B>(uAhS`p;.,3t%.
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: bd 23 f1 7c c0 15 f7 b9 f6 c4 8c 38 2f 1b 5c 5f d1 27 09 1d 05 a6 5c a8 6a 6a e0 5d d2 5d f5 4c 96 bc 1a 9a 44 e8 96 3f 21 30 c5 43 a1 5b 67 eb 11 b4 8c eb 6b de f9 b9 b0 26 e2 50 47 9d e4 b1 af 78 f9 41 2d bf 42 a5 ab 3c 32 6d 44 8f 21 74 fb e1 ac 6d cd 62 5e f4 59 38 e8 3a e3 d2 d1 43 20 39 6d fe ca f8 0d d2 13 83 84 f0 4f 73 5a d9 2b 73 9e 50 c5 70 2c 57 ae d2 27 54 1a 8b 77 89 db 56 f7 3c 07 4f 72 3c 42 c6 c7 fa 11 14 ac cd 32 c7 71 27 79 94 6c 54 5e d2 2f 94 97 62 4d 41 b4 83 3c 24 f8 07 b6 58 90 4c 10 2b 5d 17 b0 a5 33 8e 5d 97 ba fb 57 7b 7d 46 b3 a8 2c ae a7 1e 9e 5a 3c 69 da 35 d9 30 4f d9 bc c6 ab 0c 11 48 f3 df 2b af ec 79 c3 c4 f7 62 1f 0a 2c 16 c3 ef 23 5e 4e 7b 86 01 63 1e bb a6 c2 69 d6 2b 0a 51 cb 4e 8c 84 c5 f0 c3 f2 8c e5 a3 90 c5 ad 7b Data Ascii: #\|8/\_'\jj]]LD?!0C[gk&PGxA-B<2mD!tmb^Y8:C 9mOsZ+sPp,W'TwV<Or<B2q'ylT^/bMA<$XL+]3]W{}F,Z<i50OH+yb,#^N{ci+QN{
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 22 06 9a d7 96 99 d3 bf 5a 63 9c 1e 31 32 da 1c a8 d5 5c cb 69 7f ee 5f 53 29 dd 8a 15 a2 29 b0 58 f8 4f 1d e8 55 f3 dc 8b a2 41 e0 c6 1e 87 31 98 27 ec e4 7c 4b a6 00 1a 2a e3 3f 11 c7 4d 76 ef 44 3a 6e f7 68 c8 20 77 9d 22 0d 0f 5e a2 e2 d4 c3 89 2c 39 cc 3c ab 9d 6f c0 bc b4 b6 1d 33 7a 51 d7 55 e4 28 81 19 32 08 cc f1 91 c2 08 87 eb 6b 53 e4 00 a7 ac 93 b3 47 69 c2 43 7b d7 72 3a 30 db 10 b7 55 45 60 a8 76 8d 53 a4 1e 23 6c c8 38 03 3a be 59 3c 52 03 85 81 82 19 5f cb 72 ab f8 71 b2 1b 6e 38 fa 9f fb e0 85 7c da 00 af 0e f9 c5 7a 3f 21 64 bd ca 97 57 4a 8f 0e 81 6a 57 46 17 23 f8 ed a3 d0 b2 6d ea e3 e7 ea 5d f9 6d 85 f8 27 4f 53 a7 f1 f8 fe 6c ea be 49 bf c7 40 7b 85 a1 b6 94 30 ee 72 ff df 4c 58 20 88 ce de 86 ac a8 df b1 e4 98 9b 64 d5 63 77 ec bc Data Ascii: "Zc12\i_S))XOUA1'\|K*?MvD:nh w"^,9<o3zQU(2kSGiC{r:0UE`vS#l8:Y<R_rqn8\|z?!dWJjWF#m]m'OSlI@{0rLX dcw
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: 0a 16 96 71 85 ca ec 2f b1 05 fd 8f d4 c4 28 f3 bd 0b 1c bb c3 c2 7e 80 df 3b 8d a8 7d b5 b1 f3 6e d1 18 1c 9b c4 18 e6 a1 8b e9 47 00 50 2d e1 00 50 0f 49 91 fc 61 bb a9 6f 9d 98 0d 9a 6f 4f 69 f5 5e 78 b8 cc b3 cf 88 c8 a0 4f db 25 18 95 32 52 3f c6 c6 0f 5a 39 8a 90 40 33 71 18 f9 d5 e8 2f 34 7d 30 37 8e d6 c9 94 0b 66 6d d8 3c 7d d8 ee d0 54 a0 9e f7 b0 af 25 e1 9a bb bb ea 07 70 39 f3 35 5b a6 77 ce 13 e5 0c d4 e3 b5 f9 7e 04 7c f3 7c e6 af 65 50 15 9f 23 ce 54 c7 b7 7b 34 61 58 90 3f b4 65 0e 12 e9 d9 44 b0 5e f1 a0 2e 8f 06 f6 d5 71 18 9b 01 2d 0c 62 0b ce 44 a8 56 f7 db e5 d1 fb 8f 4a d7 4e 5d 8c 8c 1f 95 63 7e 1b 00 7b 71 cc 65 82 c1 81 7f f3 06 47 72 72 eb 4e e2 f2 d1 d7 2e 9a 62 4a ff 99 96 d6 cd f6 50 a0 9c 9d 39 ba b3 c8 74 5e 92 d0 15 8b 30 Data Ascii: q/(~;}nGP-PIaooOi^xO%2R?Z9@3q/4}07fm<}T%p95[w~\|\|eP#T{4aX?eD^.q-bDVJN]c~{qeGrrN.bJP9t^0
2024-04-25 12:54:17 UTC	1255	IN	Data Raw: a3 65 c2 fa 21 d4 bb 7b 57 31 bb 4c 6c 9a 59 f0 78 1c a4 9f 65 75 ab 3e 53 07 8e c6 21 71 ca bb ed c0 b6 e2 a6 11 88 fe 1b fb 6e ee e4 12 37 e2 d7 0a 9f f0 17 c2 b2 d6 26 a9 8c 0d 44 5f ad 11 46 4a 48 f8 1b 75 b3 04 bb f6 bc e2 3e 53 c9 8e b2 53 a8 e2 a4 ff 82 88 c3 88 5e 8e 13 c7 0b 02 10 74 d1 b0 c8 5a 4e 6c e4 7a a4 9d 3c aa e3 b6 ef 99 fb 1c c9 8b 68 9d 29 9f f1 00 3a e9 bc c1 8b 97 2d ef af 3b cb b1 7b 18 0e 02 44 04 36 00 a5 61 39 1c 74 c1 f6 7b 91 64 94 ea 8c 36 e8 5d d9 33 ec 37 12 23 e8 c6 54 a3 ce d1 dd c8 a0 2b e9 34 83 b5 11 b4 c6 8d 7c e0 f5 2e f3 53 6a 40 47 6c 4f da 20 99 ce be 39 de d2 a3 82 20 0b e7 e5 24 d6 5e 6f f4 36 71 1f 7b b0 20 87 21 c5 0a e6 1b e4 40 e4 f9 ea 7a fa cb 34 3c 76 3e 0b 28 08 3b fc 13 48 d4 14 d1 0b 88 ee 9f db e0 57 Data Ascii: e!{W1LlYxeu>S!qn7&D_FJHu>SS^tZNlz<h):-;{D6a9t{d6]37#T+4\|.Sj@GlO 9 $^o6q{ !@z4<v>(;HW
2024-04-25 12:54:17 UTC	704	IN	Data Raw: 06 a4 f2 50 f2 d8 53 60 bb fd 02 c9 45 92 93 e3 b4 01 95 7b 87 49 db 1f a3 6f 60 2c 0f 59 71 5a 83 7b 90 3d bd 73 6f cc 80 28 0e fa a5 8e 8b 91 79 b3 fb 03 1b 90 2f 78 b7 d7 30 18 00 7c 8f e9 80 34 9b a6 a6 82 6b 07 e9 f3 e5 05 87 ff 87 f9 fd d9 37 33 89 cf 1d 16 a0 e7 a2 50 c4 3c 55 d1 67 41 af 0c bb 9b 3b 16 d6 f5 73 62 47 21 4d c4 aa f9 af b7 00 2d a3 67 e7 52 65 cb 80 5f d7 87 e4 50 60 2d 1f 80 d5 51 e5 33 f9 85 35 c9 e6 ef c4 a6 fa 87 38 60 39 04 65 ab 73 3a 4b 14 63 e1 4b 61 84 3f fa 31 27 1b 92 4b 1f 01 35 4f 4f e1 ce e5 0b 6d 1a 60 3a 06 bb 60 b4 82 c7 09 81 f7 ff 2e 7f 79 40 f1 8a 5c b1 f1 42 96 7c 25 d6 61 ea 96 8f af 22 cb 46 0d 53 b1 42 58 5b 8e c3 0a ae f5 14 c5 87 3f a0 6d 66 b4 71 de aa 21 90 ff 9e 02 c2 db 63 40 5d 34 dc 08 b4 1f e7 03 48 Data Ascii: PS`E{Io`,YqZ{=so(y/x0\|4k73P<UgA;sbG!M-gRe_P`-Q358`9es:KcKa?1'K5OOm`:`.y@\B\|%a"FSBX[?mfq!c@]4H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49839	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1101	OUT	GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:39:17 GMT Expires: Fri, 26 Apr 2024 11:39:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 4500 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	722	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 ca fd fe cf f3 07 bc 30 44 f4 7f 02 f8 ef 37 23 60 e9 76 81 5a 15 c0 6a 3a e0 05 2c 18 45 92 ed a4 7f 06 4e 5f 00 c9 bf 32 24 c4 2b 68 60 1b 49 52 a3 46 9a 14 36 f9 07 87 29 5e 9a 6c 23 49 72 d2 af 25 60 e1 93 7f 54 04 02 55 fd 4f fd c1 37 02 0c 00 18 a8 98 3d ca 95 17 60 f8 41 66 34 ee be 2e 40 db c0 7c a7 f3 7e bb 08 f0 23 33 d5 0b bb 08 00 7c 07 f8 f3 d8 61 ff 4f 75 ec 6a c6 b0 76 98 99 99 99 99 99 99 99 99 99 99 b1 63 66 66 66 66 66 66 a6 65 b2 cf 14 6b 45 e7 9e 94 f8 53 ca 19 2b d3 ad 72 46 d6 76 5e c5 7d 68 a4 74 b9 e0 2e f0 ef 42 96 4e 92 c7 6f 1e 94 17 24 49 da b6 1d b2 f3 bc 5f 55 35 62 db 36 e7 27 53 db b6 93 b9 b3 84 8c bc 82 64 03 36 67 b6 6d 27 c7 55 dd Data Ascii: RIFFWEBPVP8L/?m90D7#`vZj:,EN_2$+h`IRF6)^l#Ir%`TUO7=`Af4.@\|~#3\|aOujvcffffffekES+rFv^}ht.BNo$I_U5b6'Sd6gm'U
2024-04-25 12:54:17 UTC	1246	IN	Data Raw: fd 6b bd 1e 65 ee 86 c6 db 51 f6 56 f2 8e d9 99 9d de e6 d7 bd f4 6a dd 0b 6f d6 38 cf 6e 37 3e df f2 be d4 25 5e 7c fa 3d c9 df 64 ab b2 a8 02 2e 09 40 f1 53 30 97 76 c2 a5 5c e3 5d b6 bf b3 3e 81 00 e0 c9 66 d6 3d 99 9b 4c 1a b9 36 e1 21 81 15 7b a6 b1 9e 4a 3f 91 b2 27 3d 66 a9 fc 59 b7 55 bb 7f cf dc 7c 91 2e 96 13 a5 32 a1 1d 1c ac 36 79 e6 80 b4 68 62 a0 f5 85 a1 c8 a2 ed 26 a7 6b 0b 14 78 1b 65 b1 42 51 20 2d a1 43 e0 a8 72 f7 47 32 c6 28 9a 6f 4f ec af a7 46 3a 4f 24 4d 41 a2 52 b4 e0 d2 8f e8 cc fc f6 31 d6 8c 41 db d7 f2 c6 e5 a5 df c3 a0 0c 68 16 28 18 81 4c 41 32 97 56 03 d0 71 7d ce 2a 2d cd af ea af bf c4 d7 cf e9 9a 5e e4 84 a3 9c 0d 49 85 20 ee 2a 7b 3f ea 43 d6 4c ce 71 57 e5 5f 55 dc 6c 31 9c 90 93 b1 5c 2e 8c 22 85 52 98 a5 e2 fa 43 c5 Data Ascii: keQVjo8n7>%^\|=d.@S0v\]>f=L6!{J?'=fYU\|.26yhb&kxeBQ -CrG2(oOF:O$MAR1Ah(LA2Vq}-^I {?CLqW_Ul1\."RC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49842	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	533	OUT	GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:17 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 244 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:17:39 GMT Expires: Fri, 26 Apr 2024 10:17:39 GMT Cache-Control: public, max-age=86400, no-transform Age: 9398 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:17 UTC	244	IN	Data Raw: 52 49 46 46 ec 00 00 00 57 45 42 50 56 50 38 4c df 00 00 00 2f 13 c0 04 10 35 b8 8d 00 46 6d 34 88 57 23 e9 ec 2e 30 44 ce 5d a0 e7 1d 98 4a 7f 17 ac 72 d9 c6 6c e9 32 81 14 e1 36 b6 6d 55 f9 91 0b 0e 35 b8 43 fc 28 e5 bf 18 0d b5 04 27 76 69 c7 aa b0 08 52 dd 0a dc 46 6d 02 74 97 f5 0c fd 83 e4 d5 5c 08 e8 5f 10 eb 9f 59 ee 92 d8 0c d5 ee 92 63 3b 20 f2 8a da b5 d3 8d 17 1c 1d 90 10 c2 7c 20 d6 c9 b1 15 12 70 6b e5 a9 d9 62 bc ce e3 cd bf 60 b9 a6 ab 81 96 8b f8 81 a4 07 70 bb fc 82 85 2f c2 82 37 32 3c e6 f9 ee fc b3 06 f1 f3 8c 98 cf 41 51 96 af e4 01 0b 9f cd 0d a7 59 c3 d5 40 cd 45 72 45 d2 03 f8 9a fd 64 1c e9 a5 5d 3a 9a ae 4b 47 92 5e 05 40 4c d6 53 8e 8f 67 9b e1 7a c4 f7 5e fb 67 c4 7a 67 81 b3 5c 98 4a 45 01 00 Data Ascii: RIFFWEBPVP8L/5Fm4W#.0D]Jrl26mU5C('viRFmt\_Yc; \| pkb`p/72<AQY@ErEd]:KG^@LSgz^gzg\JE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49847	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1100	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1832 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:03:34 GMT Expires: Fri, 26 Apr 2024 09:03:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 13843 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	721	IN	Data Raw: 52 49 46 46 20 07 00 00 57 45 42 50 56 50 38 4c 14 07 00 00 2f 3f c0 0f 00 09 45 6d db 40 ca be cd f8 03 be 30 44 f4 7f 02 78 aa 06 92 ab 36 5c d0 66 cc 0b 16 6c 1b 49 52 54 87 0f d6 ea 2d 86 fc f3 bc 1c d8 36 92 a4 a8 74 d6 ea ac 0b 00 f3 8f 0f 1e 0d 45 6d 23 b9 49 3f f7 7a 21 b0 c7 e0 fa 9f ca c3 28 03 d0 33 60 bf 7f 66 e5 05 5c e0 5e 56 66 76 10 02 10 66 d6 64 0b b5 ce f8 01 c2 cf 7f ec 7a a8 01 00 33 49 12 3f 18 45 74 e5 ff 53 64 2b 33 b3 72 0d 77 77 77 77 78 01 22 32 e7 05 34 75 32 77 77 88 c9 c8 29 22 77 77 d7 eb ee b2 bb d3 c8 de 5b 33 37 24 fa bd 03 f5 af 7f 61 1d e1 9c 6c ab ab 70 49 b7 0a 6d f4 bc 01 72 ed ff 04 64 53 93 75 88 67 5b 8b 9e 1c d7 f3 00 b8 47 16 3a d9 4d e4 d8 b6 6d da d6 98 7b 3f eb db b6 ad 1a 30 b3 19 fa 67 ca 6c c4 0a 55 01 db Data Ascii: RIFF WEBPVP8L/?Em@0Dx6\flIRT-6tEm#I?z!(3`f\^Vfvfdz3I?EtSd+3rwwwwx"24u2ww)"ww[37$alpImrdSug[G:Mm{?0glU
2024-04-25 12:54:18 UTC	1111	IN	Data Raw: 6e f0 a9 d1 5c a9 37 b8 fb 2c 60 14 50 d5 0d a3 98 3a 3f c9 ee 43 3c eb 4a 03 cc c4 ac b6 77 66 39 f4 c6 e0 af 3e 05 5f c5 49 f3 7d ee a9 b4 aa c0 d4 6b 14 7e ae 02 9a 58 3a 3e ce da 2d 9f 8d c5 9a 88 2c b5 69 66 0a 3d 68 41 ef f6 c4 75 3b bc 3b ff d6 2c 63 8e e1 44 f6 5e 92 8a 00 00 ab 3f 5a a5 90 08 25 c5 57 b6 47 1d cb 8e ad 6a 1c d6 74 e3 d7 2a 9b 1b b0 fe 63 f7 9c 3d c7 23 3b 76 1a 65 70 9f d1 9a 9d 8f 0c 78 41 d6 be 00 92 20 12 60 20 10 67 bb fb 74 72 61 e5 75 05 00 cb 2e 6c 7d b1 27 9c 7b 63 96 b9 43 03 b0 0c 07 df d1 04 b0 ab 21 de f3 ef 9a 83 09 aa 67 cc 3a 5e a2 75 75 27 ad 93 6f db 3d 98 65 42 34 80 16 e8 fb b4 97 40 1d 1e a9 38 52 b2 98 45 c7 d1 e7 93 6e e2 21 0b 65 27 1a 8c 1b f8 8b 32 8a 34 01 30 80 66 cf 82 49 d7 5d 43 b6 1e 7b 2f dc 9e 71 Data Ascii: n\7,`P:?C<Jwf9>_I}k~X:>-,if=hAu;;,cD^?Z%WGjt*c=#;vepxA ` gtrau.l}'{cC!g:^uu'o=eB4@8REn!e'240fI]C{/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49848	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1101	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2226 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:41 GMT Expires: Fri, 26 Apr 2024 09:49:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 11076 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	721	IN	Data Raw: 52 49 46 46 aa 08 00 00 57 45 42 50 56 50 38 4c 9e 08 00 00 2f 3f c0 0f 00 4d 30 68 24 49 51 06 ee ee a1 cf bf e0 07 0d 11 fd 9f 00 fd cc ed 4a f2 ba e1 94 d8 b7 40 ba f1 9a 96 ca 58 3b 7a c2 db 73 c1 b8 6d 23 47 da f8 dc fe cb 4b 97 a3 b1 af c3 15 b0 35 b0 8d 24 c9 49 d7 5b 6f 69 81 0c 00 9b fc 03 c3 a2 d8 46 92 d4 68 d0 2e f9 47 b7 26 f0 5a 4b a3 ff 09 46 0f 0e 3a 00 00 d8 fe 5f f7 91 29 d3 86 cd 0c c0 06 1c 97 7c 28 3f 65 02 00 6c d8 be d4 db c3 4e 4c 02 60 0a 22 2a 71 7d 6c 6a b3 7d 3f 00 80 ee fe 7b 56 b5 59 6d 04 03 0f 25 f8 ff 0c c9 d2 3f ab 7b 7a 3c b3 b6 6d db b6 8d bb 6d 7b 6f b6 6d db b6 bd cf b6 cd 79 af bb 2b 97 33 d5 3d b7 77 fa 45 bc 5b e6 c4 cb e5 43 45 ad b7 df 8b 5e 9c 1e 26 32 76 4f 4f db 7b dc cd c5 89 b5 3c d9 e8 08 49 b7 b6 19 92 f4 Data Ascii: RIFFWEBPVP8L/?M0h$IQJ@X;zsm#GK5$I[oiFh.G&ZKF:_)\|(?elNL`"*q}lj}?{VYm%?{z<mm{omy+3=wE[CE^&2vOO{<I
2024-04-25 12:54:18 UTC	1255	IN	Data Raw: 24 bc 04 20 93 c2 4b 18 01 32 d4 ce b7 c2 66 62 d0 80 b9 0b 93 4c 9d 41 30 c6 f8 69 63 91 06 fa f1 40 12 70 c1 28 c4 fa 1a 09 2e 14 40 20 ce c8 ef aa f6 b5 69 ff 59 e7 6e 55 e4 e9 90 86 74 14 00 d5 2f 4d 92 41 06 5a 73 8e d6 16 94 48 c2 4d c9 04 60 04 60 86 66 e4 d9 fa 5e d5 ad 5f ce dd 65 ba a0 c1 f7 a1 00 10 99 ee 39 c8 b8 1c 19 aa 23 d1 31 12 08 2c c7 60 8c 26 61 84 4f 1c f8 02 44 81 b0 b8 2c cb c8 47 6b bb 8d 63 51 10 55 84 48 2f 01 01 65 e0 33 82 34 44 22 d5 2e 5c f4 76 61 9e bc 8c 17 35 c4 d5 e6 6d 35 5f 5a 79 75 2a 27 83 ee 19 30 c8 fa e8 99 32 c4 4a c0 70 82 be c1 15 cc c2 21 0e 2d 45 99 4a a9 1f 01 65 4c 7a 90 db 21 ac fd 75 f5 4e d4 cd fd 6d de 82 00 b8 b1 ea 35 1e 1c d9 66 67 92 99 62 10 f6 54 9e 2b 24 47 7d 01 01 b2 e1 0a 38 4d 0a 23 41 50 b9 Data Ascii: $ K2fbLA0ic@p(.@ iYnUt/MAZsHM``f^_e9#1,`&aOD,GkcQUH/e34D".\va5m5_Zyu*'02Jp!-EJeLz!uNm5fgbT+$G}8M#AP
2024-04-25 12:54:18 UTC	250	IN	Data Raw: 6c c7 aa 5c 18 a3 f6 e4 2e f9 79 04 ad 07 a3 12 46 69 9d 92 da eb 93 02 00 9b 6c 05 a7 73 6a ef cd cf 13 88 f9 48 a9 ff ac d9 e1 f5 82 92 ba e4 eb e5 8e df ba 0e af fb 26 8f 62 6b 0c 00 f8 04 fb 6a 8f 98 14 34 38 01 85 0e 30 53 b8 6b fe c2 54 e9 f3 88 cf fb 94 b7 82 90 91 71 6c 2e 9b 2d 7f 31 6a 2c 8f 32 b6 29 c3 20 17 26 bd 24 80 ae b0 0d d8 32 bb 9d 37 6f 01 71 3b f8 7a cf 0a 66 c8 d2 92 b1 fc c5 f2 1e e5 bf 01 30 49 e5 bd dd 12 2e 93 c0 fa c5 f3 88 eb 16 da 4b 9d a6 b9 48 48 d7 8b e5 e5 ef f5 48 82 a1 38 89 b2 57 26 20 b6 2d e8 10 f7 55 d1 5e 6c 53 1e 34 da 48 8f f7 00 22 18 2c 82 d8 34 a9 46 8e ef 50 1a 6f e6 f6 6a 7b c8 34 65 19 87 c1 86 61 f2 95 b5 9c 2c 9e da a2 94 76 46 dd 6b aa 02 a8 2b 20 30 01 32 b3 64 d1 a4 42 a9 b6 48 74 eb 0a Data Ascii: l\.yFilsjH&bkj480SkTql.-1j,2) &$27oq;zf0I.KHHH8W& -U^lS4H",4FPoj{4ea,vFk+ 02dBHt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49849	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1100	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1494 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:03:34 GMT Expires: Fri, 26 Apr 2024 09:03:34 GMT Cache-Control: public, max-age=86400, no-transform Age: 13844 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	721	IN	Data Raw: 52 49 46 46 ce 05 00 00 57 45 42 50 56 50 38 4c c1 05 00 00 2f 3f c0 0f 00 09 45 6d db 40 4a f7 cc f8 23 be 28 44 f4 7f 02 38 8a 48 94 1e 2a 0e 49 23 a0 3e e6 05 a3 36 92 1c 59 fb ca f9 00 2c 7f 9a a7 e5 60 b4 6d db a4 f1 d0 e0 d0 14 02 41 88 9e e0 ff 39 13 fa 3f 01 b6 78 cf 05 40 80 cb 3e 73 7c 00 80 78 1d 0e e0 82 78 32 19 00 08 c8 64 e7 07 05 80 86 b7 88 8e fc 7f 8a 6d a5 7b 8e 3e c7 dd 5d 72 52 77 77 77 0b 5f 84 86 ee 64 4e e8 ee 99 43 ea ee ee 0e d7 fd 74 a3 67 e4 e1 d1 2f 62 07 a7 fe e8 95 0c cb 6e 0d 3a 45 4a 7c 6b b2 b3 83 5b 4f 4e d5 7f 01 14 d9 54 67 bd 02 fc 5a ce 0e 6e bd 65 9c 5d 90 91 c8 c1 b6 ed d8 9b eb 79 df d8 b6 6d 8f d9 8d cd 9c 9c d5 a9 ed cd 76 77 b7 a3 dd cd 36 a6 d8 f8 1e d9 b5 b6 1d 7b 74 dd ef ff bf ff 17 db 4e ce ac 43 67 d4 c5 Data Ascii: RIFFWEBPVP8L/?Em@J#(D8H*I#>6Y,`mA9?x@>s\|xx2dm{>]rRwww_dNCtg/bn:EJ\|k[ONTgZne]ymvw6{tNCg
2024-04-25 12:54:18 UTC	773	IN	Data Raw: 8f 3b bd 3e d9 01 17 8c d7 c1 71 d1 ea 7b 52 db 34 1f 71 c2 96 03 c4 66 c0 c0 08 ef ff 59 86 af b8 98 5b 24 3b 1c a3 3c 7d ad f6 d9 6f 01 2b d6 e7 9f e5 3a 92 01 05 6c 8c 44 c1 51 24 ed 48 61 18 50 2e 28 77 7a fb 6a cb ac 8e d4 67 d2 d5 98 27 91 39 c3 3a d4 54 29 45 cc 3c 50 c1 6b c9 0d 79 43 4c 4c 3c 40 f3 32 7e 5c 77 cd 9c 31 00 ab 1e 78 d9 cc db 08 64 92 0a 73 ca 21 ed 90 46 d2 e8 bf b4 6b 94 e0 42 08 19 32 4f ca 42 cc a4 14 82 51 2c 8f 0d 01 c0 2c 61 f9 56 de 80 b9 c2 86 a5 fa 6e 2f dd e3 a5 02 40 ba c6 d6 f7 4f 0a 06 17 33 9f 9e bd 20 c1 0b 32 bf 19 18 8c 3c cd d5 1d b6 9e c1 03 af 02 56 28 d3 bc e5 0d 85 e9 38 50 21 b6 7d 7d 59 55 16 04 fa ba 53 ba 16 e0 52 a2 31 d0 e9 05 2b c7 c6 30 f1 0b 33 27 f6 7a 79 fd 73 bd a6 b5 4a e6 5e fa 2f 4c be 78 e1 01 Data Ascii: ;>q{R4qfY[$;<}o+:lDQ$HaP.(wzjg'9:T)E<PkyCLL<@2~\w1xds!FkB2OBQ,,aVn/@O3 2<V(8P!}}YUSR1+03'zysJ^/Lx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49850	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1100	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1670 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:41 GMT Expires: Fri, 26 Apr 2024 09:49:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 11077 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	721	IN	Data Raw: 52 49 46 46 7e 06 00 00 57 45 42 50 56 50 38 4c 71 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 31 ea f8 5d 8f 3f e1 45 21 a2 ff 13 80 33 17 18 80 30 76 0d c4 98 7c 80 85 eb 48 b6 95 a8 71 d7 2f 97 fc a3 22 04 8a 18 d8 8d 41 49 23 49 52 c1 cd a2 95 30 fe 15 ee 3d 80 51 24 49 8a 73 a9 60 19 8f ff d7 ff 09 30 1f fe 54 ee f8 c8 c9 d1 c6 0f 40 0a d0 6a 9b 50 02 f5 a3 17 7b 89 d4 1b b9 1c 4a 97 24 0f 0b 78 78 99 f6 02 8f 3c 00 de 7c f8 2d a2 23 ff bf e2 c8 e9 d7 c3 cc 68 76 c4 ec 88 f1 02 be 04 3b f2 0d 7c 03 47 2e c7 8e 1d 31 33 33 33 33 ce 88 07 5a ea d7 55 d6 13 cc 38 c4 9f 49 d1 a6 ff 7a d5 06 45 1b 8e 23 97 aa 5e d0 97 50 29 db 1b 6c 39 fb 1f c0 a9 4a d9 3b c1 46 74 12 33 3b df dc 77 58 07 72 68 db 36 b5 67 9d 87 ff 8f 6d 9b 95 ad ca 36 2b 3b 55 52 da b6 6d db 49 Data Ascii: RIFF~WEBPVP8Lq/?Em1]?E!30v\|Hq/"AI#IR0=Q$Is`0T@jP{J$xx<\|-#hv;\|G.13333ZU8IzE#^P)l9J;Ft3;wXrh6gm6+;URmI
2024-04-25 12:54:18 UTC	949	IN	Data Raw: ea 08 df a4 b5 05 f2 a2 96 12 12 b7 a1 71 cb 03 d0 05 4e 50 9d 75 cb 74 07 76 6f 9b 7b b5 54 67 1e 95 c7 60 b1 91 99 76 f8 41 db 88 d9 6a 26 45 04 03 81 1a bc a3 96 90 66 89 5e 48 00 52 ec 0b fd 78 52 58 1f 08 6c 42 19 0e e9 91 43 4b c4 11 eb 86 e3 46 69 5b 39 9c 38 77 7c 01 22 1b 45 cd 3a 54 ad 45 0c cd 60 0d 87 f0 18 12 fc f1 c4 c2 62 dc 9f 9c f0 a7 ba 90 84 d0 c0 6a 58 04 46 5e 40 eb 4e 0e d4 be c2 2a 83 9d 07 90 fb ef 7a a0 34 23 1b 15 d7 98 58 1b f6 25 ba 84 21 fa b6 e4 84 4b 04 62 63 b5 01 2c 10 28 b0 32 20 0f 9d 15 29 dd f9 55 92 c5 58 49 00 6f 88 f8 1d 48 3d 69 26 c5 b6 ee 2b 23 16 53 46 83 8a ad c4 0c 0b 46 ae e0 08 16 60 18 90 25 f8 21 fa 5b fb f4 cb 2e c9 8b 78 5d 03 9b 14 7f a3 61 28 84 41 08 53 a9 4e db 75 52 67 3a 09 5f cc 80 40 cb 5a e7 0d Data Ascii: qNPutvo{Tg`vAj&Ef^HRxRXlBCKFi[98w\|"E:TE`bjXF^@N*z4#X%!Kbc,(2 )UXIoH=i&+#SFF`%![.x]a(ASNuRg:_@Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49851	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1100	OUT	GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2620 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:49:41 GMT Expires: Fri, 26 Apr 2024 09:49:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 11077 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	721	IN	Data Raw: 52 49 46 46 34 0a 00 00 57 45 42 50 56 50 38 4c 28 0a 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 97 eb fd 2c 7f c4 3f 30 44 f4 7f 02 d8 a7 66 5b 36 68 34 03 e4 c3 1f 5a cb 5a 1a 3b c3 11 1a 1b 5b 68 2c cc b4 6d e3 b3 fc e1 ed 1a 97 90 50 d4 36 92 63 ed d5 e7 42 b9 c6 1f da 49 49 23 49 52 39 58 fe f8 b7 75 23 e1 f0 1d e9 7f 22 09 49 92 4f 00 c0 07 e1 20 42 00 40 14 00 a8 00 41 e0 09 82 0a 50 dd 1b b3 f7 fb d7 98 cb 05 60 d2 01 10 d9 91 b6 4d 91 6c 27 e7 9e cb cc cc cc cc d7 14 33 33 33 4b 2e 33 5b cc cc cc cc cc ac 83 97 99 99 51 d3 1d d1 9d 55 3d 67 56 f0 da 62 ca c8 68 a7 4c 59 ed 4c 4c 94 57 02 4b 1e 75 b4 a7 1d 30 7c 22 53 66 c6 ef 89 ec f6 26 4a b4 87 36 25 2d 62 56 22 47 0e 64 db a6 6d cd b9 0f be 6d db b6 ed 67 db 2f fb d1 8f 6c 1b 91 6d db b6 6d f3 d9 d6 Data Ascii: RIFF4WEBPVP8L(/?m9,?0Df[6h4ZZ;[h,mP6cBII#IR9Xu#"IO B@AP`Ml'333K.3[QU=gVbhLYLLWKu0\|"Sf&J6%-bV"Gdmmg/lmm
2024-04-25 12:54:18 UTC	1255	IN	Data Raw: 1e b0 8d 35 ab b3 58 71 6a 32 f7 fb 04 34 5c 62 4f 19 4f 25 23 63 b3 7a 58 01 af 38 ce b3 4f b0 42 15 16 2b ce cb e5 66 47 00 a3 ea 59 15 15 db 95 2c 33 45 cb 10 e0 39 bb 79 da 09 36 6c c0 62 c5 b1 1f b8 f5 49 80 1e ea 47 df c9 52 e6 7c ab 7b 55 1c 87 23 e8 4d 17 b9 f5 71 76 6b ce ca d5 99 70 9c 9d c1 27 af f1 34 97 cb af 01 08 2d 27 df c2 3c a7 6e 4f f4 13 5e be f1 12 b7 3e c6 ae cd 59 a5 3a 13 8a b3 d2 f9 d4 75 9e 26 5c 61 0d 00 d4 fd 38 18 04 93 25 63 20 68 9b 2a 56 16 23 7e be e9 12 b7 3c ce 6e cd 58 a5 0a 9d f5 c9 eb 3c 03 5c 7e 35 00 10 7b 31 11 a6 d4 76 95 44 db 40 1f 55 e4 e4 9b 2f 73 eb 6d ec 5c 8f cf e6 6b ee 6d fe 73 b9 95 90 cd 96 93 ef ca a6 cc b3 62 3f 8a 61 fe 7d e0 cd f7 b8 ed 36 76 ac c7 67 b3 9a 7f 97 a7 80 cb 2d 03 72 22 10 cc b7 29 24 Data Ascii: 5Xqj24\bOO%#czX8OB+fGY,3E9y6lbIGR\|{U#Mqvkp'4-'<nO^>Y:u&\a8%c h*V#~<nX<\~5{1vD@U/sm\kmsb?a}6vg-r")$
2024-04-25 12:54:18 UTC	644	IN	Data Raw: dc c0 9f c7 80 5d c0 6b ad 90 ae 3f e2 81 0b fd e8 12 bf 68 5c f1 06 c9 7a 2f e4 c6 1f 72 78 74 86 56 74 c7 3e f5 7e 23 6e dd 6c b0 af 15 d1 e2 34 8d 6b c0 a8 35 df 6a 08 98 67 c9 66 b4 63 65 5f 7f 53 66 f9 4a da a3 5b d6 35 86 9e bf fa f0 d3 d2 8b f5 fa 91 64 9c d0 85 25 c8 68 8e 88 37 bb b1 50 a1 13 dd b8 f3 c0 db c7 39 a1 05 f4 d3 ac 0e e9 51 4a 2f d0 42 da 7d f8 e1 67 3f 4d cd 83 13 9f 75 b4 be d8 4e e0 24 75 7d 43 f0 5c 32 63 36 46 bb 5a fe f0 db 02 a7 a8 f8 af f3 da 79 04 90 24 96 04 73 00 73 20 96 50 f0 3e 89 4b 0d 79 22 49 ba 56 bf 87 6e c0 8d d3 20 49 7a 9a d2 63 dd 8a 9b 39 2d 1f 39 5c 2e 2c 4b 63 c4 d1 65 6c 95 68 37 44 49 20 25 6d 56 dd f7 3e 6c 78 86 64 97 38 6d 6b 8f 1d 6e d2 fe 97 d2 0b 54 79 97 f0 08 ad ec eb 94 8f 32 af a6 f8 10 58 a4 25 Data Ascii: ]k?h\z/rxtVt>~#nl4k5jgfce_SfJ[5d%h7P9QJ/B}g?MuN$u}C\2c6FZy$ss P>Ky"IVn Izc9-9\.,Kcelh7DI %mV>lxd8mknTy2X%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49852	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	532	OUT	GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 332 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:25:41 GMT Expires: Fri, 26 Apr 2024 10:25:41 GMT Cache-Control: public, max-age=86400, no-transform Age: 8917 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	332	IN	Data Raw: 52 49 46 46 44 01 00 00 57 45 42 50 56 50 38 4c 37 01 00 00 2f 13 c0 04 10 95 c0 ae 6d db d8 73 db fc 63 db f6 ab 6d db ce ab 5b 48 15 e9 c0 da b1 0b 58 d1 97 71 bf 7c 88 80 63 5b db f1 2a b6 6d 1b 23 b0 4a 77 99 45 3a bb 75 72 6f c7 0e 9d d5 7a 00 b6 6d 5b ef 04 f0 11 4a b2 98 6c 1d 6c 19 58 4e 48 fa 8c f5 44 3c 24 41 22 58 ef 6b 29 fb a4 be ba 97 bd 79 e1 84 13 57 f6 96 37 54 7d 82 e4 09 90 b7 c4 83 b9 cb 56 ea 47 0c a9 76 34 01 64 05 89 1d 90 25 01 5a bb 1e da 8a 7f 79 29 6f 10 e1 a7 dc bb fb 02 c8 b8 cd 5d 7e e0 30 6a 53 2f 8e 02 12 19 84 a1 a5 de 24 81 97 7c fb 4b ce a9 ad 9c 96 19 c8 38 4d f8 00 0c 3d fe cb 49 fc 71 9d 7f 83 aa 5b c8 39 73 1c f9 11 2f 0e 46 3a 01 6a 87 cf a2 05 7b 6e e8 00 32 c4 ff 64 1c 23 41 3c ac 54 ee 41 ce 69 c8 83 b3 8d 2f 09 Data Ascii: RIFFDWEBPVP8L7/mscm[HXq\|c[*m#JwE:urozm[JllXNHD<$A"Xk)yW7T}VGv4d%Zy)o]~0jS/$\|K8M=Iq[9s/F:j{n2d#A<TAi/

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49853	108.177.122.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	1100	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1162 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:34:58 GMT Expires: Fri, 26 Apr 2024 11:34:58 GMT Cache-Control: public, max-age=86400, no-transform Age: 4760 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	722	IN	Data Raw: 52 49 46 46 82 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 3a 04 00 00 2f 3f c0 0f 00 e7 27 21 92 24 47 92 62 f9 93 3a 42 5a df ed 4c fa 89 7f 0e 92 22 49 92 24 49 bd 8f e7 b2 5a fe 38 96 c1 d9 1d 26 21 92 24 47 92 a2 9f 3f a7 47 a4 f5 ff 4c a7 cf 7f ca ca 1f 09 15 68 e9 1d 11 86 0a 88 40 2a e0 3f 7b 8d 98 a9 04 b2 9b b0 30 44 05 a0 02 1a 02 95 00 44 30 42 0c 41 f4 39 e6 da 63 88 86 84 dd f8 b2 d8 0d 04 cf 40 20 a1 4f f6 44 43 40 84 3e d9 93 40 2a a1 6f 06 9b 76 cc 25 c4 50 f4 4d 3b 6c 16 d0 d8 d1 20 fb 4c 68 b1 ac ab 0b e9 81 30 ce bb 16 8d be b9 74 1c bd 2a c4 80 06 b4 74 e9 62 34 26 c1 d8 0d 08 70 00 18 5d 84 07 33 20 84 80 96 cb e2 9b 99 99 96 0e 02 c2 60 fa 1e e7 2e 03 34 a4 83 9c 7b cd ac a9 c0 c2 66 11 ba Data Ascii: RIFFWEBPVP8X??VP8L:/?'!$Gb:BZL"I$IZ8&!$G?GLh@?{0DD0BA9c@ ODC@>@ov%PM;l Lh0t*tb4&p]3 `.4{f
2024-04-25 12:54:18 UTC	440	IN	Data Raw: 86 ec 17 b8 2c b5 f6 b5 c1 c0 7a 63 00 ec e5 a8 e0 1a ed be 9d 75 f8 1e 53 ce 49 85 ca 99 86 6a a0 c7 9c 14 40 77 d3 52 18 11 b1 36 c6 68 a6 72 a6 76 3c 70 a4 fb 71 7d 00 2b 84 88 52 16 4e 89 88 45 84 89 88 58 44 84 4b 56 eb 47 a2 fb 6a 1b 26 01 d8 c7 11 51 fa d9 43 cb 1e fe c5 d4 f0 eb 37 df fc ff 47 b6 99 f8 cd bb e6 ce bd fb 71 2e 95 fe 0b bd 52 71 17 00 18 ec 1b 88 48 ee 54 89 52 fb 59 7d 6a a2 54 d5 8e ba 59 2e 49 12 55 f5 bb 2d 95 1d 8d 15 c6 cf 06 d0 47 98 f2 e6 26 33 5e da 55 4d b7 b9 e4 fd 6f 8e 51 bb 58 99 96 2c 5d fb d6 5a 2e d9 08 dc 2b 53 01 f4 fc 81 29 4b 2d 30 be d3 ce 3e a7 de 95 b0 93 fa 5e 4f 53 ab b4 30 95 5a 5f 83 cc 91 c2 d4 da 22 ab 93 c9 3e a7 de 66 b9 3e b9 cf 4c 4b 96 7f f8 de 17 69 a9 c8 fd d5 05 58 ef af c0 d4 5a 72 fa 2d 7f a8 Data Ascii: ,zcuSIj@wR6hrv<pq}+RNEXDKVGj&QC7Gq.RqHTRY}jTY.IU-G&3^UMoQX,]Z.+S)K-0>^OS0Z_">f>LKiXZr-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49854	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:17 UTC	532	OUT	GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 266 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:01:49 GMT Expires: Fri, 26 Apr 2024 10:01:49 GMT Cache-Control: public, max-age=86400, no-transform Age: 10349 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	266	IN	Data Raw: 52 49 46 46 02 01 00 00 57 45 42 50 56 50 38 4c f6 00 00 00 2f 13 c0 04 10 07 a1 10 92 24 67 ae ce df ed 18 fe 11 72 5e 0d 45 8d 24 45 bd fe e5 e1 00 7e 38 d8 03 9a 41 db 48 8e cc 1f dc 41 38 1d 8c f2 25 6c 23 db 56 72 bf ff 1f b9 62 39 0d 50 03 fd b7 c0 10 d1 81 4e 00 00 5b 6e 1a 50 b4 02 09 14 81 82 ac ef b4 ef 36 5c e8 77 1c 2b e8 bc e7 fe fc 86 58 a3 fd f7 d3 55 27 cc dc 06 23 ef 7d b8 ef bd d3 59 db ae bb c8 00 41 02 78 64 42 04 fd 00 86 91 24 25 da 77 77 e3 f1 fc c3 74 c8 20 a2 ff 0a dc b6 51 7c cc f0 0c f8 a1 2c 11 0d 03 91 92 0c b1 c4 c4 71 08 16 89 44 14 40 21 48 d0 aa 4e 98 70 aa 35 a4 a2 bb b5 d3 2a 60 ee e9 d5 b4 6d 73 d1 7e f6 6c 9c 06 02 df 5c 2f ad 5b 2f d4 f4 75 3d 14 81 40 1f d7 ed 58 16 c7 1d 34 6a 3d c6 7d ff ff 65 64 69 dd 69 cb d2 fe Data Ascii: RIFFWEBPVP8L/$gr^E$E~8AHA8%l#Vrb9PN[nP6\w+XU'#}YAxdB$%wwt Q\|,qD@!HNp5*`ms~l\/[/u=@X4j=}edii

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49856	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	532	OUT	GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 240 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:18:04 GMT Expires: Fri, 26 Apr 2024 10:18:04 GMT Cache-Control: public, max-age=86400, no-transform Age: 9374 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	240	IN	Data Raw: 52 49 46 46 e8 00 00 00 57 45 42 50 56 50 38 4c db 00 00 00 2f 13 c0 04 10 ff a0 a0 8d 24 65 fc 1b bc 27 15 cc bf 36 94 46 92 14 75 fe 11 a2 f0 48 d4 0f ab a8 6d 24 27 fc f1 dd ef 50 f4 3e 3b 4c 02 00 4c 33 66 c5 53 0c fa fd 2b 51 85 07 00 a5 59 00 02 08 d0 00 02 08 10 10 c0 82 92 6a 9e 73 2e aa 18 29 fe ff d3 77 bf e2 7f 42 3f 86 56 d2 79 3f f0 bb 9f 8e 39 cd 8f ef dc cb f5 be a8 7e 60 01 12 43 01 8e 31 b3 62 00 86 91 24 29 59 ec f1 c3 e5 8d cd 3f 4f 1c 02 88 e8 ff 04 e0 ed 79 2b d2 e6 67 ca 69 1c 56 92 5c 87 71 2a f7 66 9e 9e f7 a0 35 0e b5 c6 a1 31 c8 8a 20 28 32 18 73 aa a3 52 ec ae 08 e3 98 f2 77 3d 95 62 7f ca 1a 84 29 90 86 30 f6 c8 f9 28 89 95 8a 93 c8 bb a3 65 e3 e1 b6 1c a1 a9 a5 12 a9 a4 6e f0 6e 00 Data Ascii: RIFFWEBPVP8L/$e'6FuHm$'P>;LL3fS+QYjs.)wB?Vy?9~`C1b$)Y?Oy+giV\q*f51 (2sRw=b)0(enn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49855	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	515	OUT	GET /a-/ALV-UjXu_LA0yHlVyZP-9D4A1_oAR5qpsouGW-A4uLCPF6Kh5IVQKX8=s32-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1958 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:50 GMT Expires: Fri, 26 Apr 2024 11:19:50 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v7" Content-Type: image/webp Vary: Origin Age: 5668 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	722	IN	Data Raw: 52 49 46 46 9e 07 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 18 00 00 00 1f 00 00 1f 00 00 56 50 38 4c 56 07 00 00 2f 1f c0 07 10 09 85 6d db a0 21 ad 34 8a e8 7f 14 40 3e 48 61 00 60 a1 a6 91 14 e8 4a 42 89 82 1f 3d f8 af 10 80 00 a4 a8 6d db c8 d1 fe 53 5e 99 ff bf cc 0f 82 65 9b b0 ff 2f ae d1 ff 90 41 91 97 82 87 45 8b d4 3d f6 3b 64 9a 19 e6 41 44 22 3a b2 ad 2d 92 9c ef fb fe 2c 18 66 66 46 4b cb 94 4c 99 72 65 81 c5 0c 1e 33 0e 33 36 14 53 66 fe f9 ff 46 76 d5 1a 9e 66 0f 1d 29 4c ab 43 16 43 8a 71 01 b2 06 5c 2d a0 3d 31 9a d4 9e d0 55 8c 27 57 ae 2c d6 02 c8 d5 1a 98 33 26 82 12 24 db a6 6d ab c6 dc fb dc 67 db b6 6d db b6 6d db b6 dd 64 cb b6 6d db fc ff d9 e6 5a 72 ae 6d 3b 24 e9 79 be ea af cd 99 b5 6d 7b 23 7b 37 b3 8d 9f b0 29 23 6f 66 db 88 Data Ascii: RIFFWEBPVP8XVP8LV/m!4@>Ha`JB=mS^e/AE=;dAD":-,ffFKLre336SfFvf)LCCq\-=1U'W,3&$mgmmdmZrm;$ym{#{7)#of
2024-04-25 12:54:18 UTC	1236	IN	Data Raw: 00 50 ca 84 6d 1d 12 d5 d8 db ba 43 7c 12 d8 79 07 9e c1 b5 fb 12 ff 6d bb 62 5f 06 6c a2 68 b8 00 70 05 08 c7 b1 84 0c 61 8f 7f 2b 51 04 c4 1a 9d 43 80 a4 04 fa 05 6b ea 3f a8 84 1c b0 b7 9a d8 d7 f5 4f 68 9b 90 e4 21 b4 ed a7 c0 8e 83 1a ff 52 10 0e 30 28 bc 22 50 34 60 54 bc cf f2 58 80 03 13 73 c7 3b a7 93 eb 35 ff 08 45 48 80 36 24 52 21 96 49 13 62 1d 20 6c b1 80 11 00 30 b6 e6 6b 81 04 0c e0 10 3b 48 ae 83 34 90 84 de 52 a1 38 f3 5b 5b 36 7d 52 d0 27 41 b7 3f 1b 85 1a 2f 20 63 e4 43 40 4e e4 7a d8 04 6d 00 06 f1 dd 4f 6c e2 ea 8f e5 8e 34 b4 7a 8c e1 08 30 9a 50 ac f9 2f 72 f0 0b ed ad 3d d2 e2 98 14 f8 38 60 48 21 89 84 81 5f 24 00 72 bc d2 09 ef b7 69 92 b0 6d 31 de 88 94 02 27 a1 b8 aa 26 ef 01 91 21 ce f8 28 07 1f 84 93 fa 2d b9 2f 00 20 2b 9f Data Ascii: PmC\|ymb_lhpa+QCk?Oh!R0("P4`TXs;5EH6$R!Ib l0k;H4R8[[6}R'A?/ cC@NzmOl4z0P/r=8`H!_$rim1'&!(-/ +

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49857	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	525	OUT	GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1968 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:36:40 GMT Expires: Fri, 26 Apr 2024 10:36:40 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 8258 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	722	IN	Data Raw: 52 49 46 46 a8 07 00 00 57 45 42 50 56 50 38 4c 9c 07 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 ca fd fe cf f3 07 bc 30 44 f4 7f 02 f8 ef 37 23 60 e9 76 81 5a 15 c0 6a 3a e0 05 2c 18 45 92 ed a4 7f 06 4e 5f 00 c9 bf 32 24 c4 2b 68 60 1b 49 52 a3 46 9a 14 36 f9 07 87 29 5e 9a 6c 23 49 72 d2 af 25 60 e1 93 7f 54 04 02 55 fd 4f fd c1 37 02 0c 00 18 a8 98 3d ca 95 17 60 f8 41 66 34 ee be 2e 40 db c0 7c a7 f3 7e bb 08 f0 23 33 d5 0b bb 08 00 7c 07 f8 f3 d8 61 ff 4f 75 ec 6a c6 b0 76 98 99 99 99 99 99 99 99 99 99 99 b1 63 66 66 66 66 66 66 a6 65 b2 cf 14 6b 45 e7 9e 94 f8 53 ca 19 2b d3 ad 72 46 d6 76 5e c5 7d 68 a4 74 b9 e0 2e f0 ef 42 96 4e 92 c7 6f 1e 94 17 24 49 da b6 1d b2 f3 bc 5f 55 35 62 db 36 e7 27 53 db b6 93 b9 b3 84 8c bc 82 64 03 36 67 b6 6d 27 c7 55 dd Data Ascii: RIFFWEBPVP8L/?m90D7#`vZj:,EN_2$+h`IRF6)^l#Ir%`TUO7=`Af4.@\|~#3\|aOujvcffffffekES+rFv^}ht.BNo$I_U5b6'Sd6gm'U
2024-04-25 12:54:18 UTC	1246	IN	Data Raw: fd 6b bd 1e 65 ee 86 c6 db 51 f6 56 f2 8e d9 99 9d de e6 d7 bd f4 6a dd 0b 6f d6 38 cf 6e 37 3e df f2 be d4 25 5e 7c fa 3d c9 df 64 ab b2 a8 02 2e 09 40 f1 53 30 97 76 c2 a5 5c e3 5d b6 bf b3 3e 81 00 e0 c9 66 d6 3d 99 9b 4c 1a b9 36 e1 21 81 15 7b a6 b1 9e 4a 3f 91 b2 27 3d 66 a9 fc 59 b7 55 bb 7f cf dc 7c 91 2e 96 13 a5 32 a1 1d 1c ac 36 79 e6 80 b4 68 62 a0 f5 85 a1 c8 a2 ed 26 a7 6b 0b 14 78 1b 65 b1 42 51 20 2d a1 43 e0 a8 72 f7 47 32 c6 28 9a 6f 4f ec af a7 46 3a 4f 24 4d 41 a2 52 b4 e0 d2 8f e8 cc fc f6 31 d6 8c 41 db d7 f2 c6 e5 a5 df c3 a0 0c 68 16 28 18 81 4c 41 32 97 56 03 d0 71 7d ce 2a 2d cd af ea af bf c4 d7 cf e9 9a 5e e4 84 a3 9c 0d 49 85 20 ee 2a 7b 3f ea 43 d6 4c ce 71 57 e5 5f 55 dc 6c 31 9c 90 93 b1 5c 2e 8c 22 85 52 98 a5 e2 fa 43 c5 Data Ascii: keQVjo8n7>%^\|=d.@S0v\]>f=L6!{J?'=fYU\|.26yhb&kxeBQ -CrG2(oOF:O$MAR1Ah(LA2Vq}-^I {?CLqW_Ul1\."RC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49859	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	524	OUT	GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 984 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:49 GMT Expires: Fri, 26 Apr 2024 11:19:49 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 5669 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	723	IN	Data Raw: 52 49 46 46 d0 03 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 88 03 00 00 2f 3f c0 0f 00 e7 04 a1 91 24 47 52 0e 7f c6 67 2a ce ff 43 70 d0 36 92 24 35 7f a6 87 60 ef ab d8 41 db 48 92 d4 fc 99 1e 82 bd af e2 f9 5f 07 0c 21 b8 e3 ce 36 10 00 14 80 e0 4e 70 27 ac 6c b3 12 56 b6 79 1f c0 1d 45 01 05 56 f6 ff 83 15 05 82 3b 8a f2 51 d9 26 28 ee 6c 13 94 fb 46 59 51 00 f6 ff 83 b0 b2 4d 00 d8 66 1b b0 01 77 0e 00 20 04 80 00 0a dc 37 95 00 e1 f6 fb b1 51 14 e5 fe fb a9 ec ff b7 62 73 7d 1e 07 ca ed 79 6c 53 b1 f1 ff ab c0 29 83 df 8f 52 b1 69 73 79 bd 84 10 82 12 de da 54 ce 9d 73 e7 7e c7 9d 7f 70 07 b4 6e 6d 4f db 58 df 30 33 33 33 33 33 33 33 cf 1c 3e c3 3c 6f 99 2b 47 76 ec 58 e6 fe db c8 ca 27 5f ce 55 44 ff 27 00 Data Ascii: RIFFWEBPVP8X??VP8L/?$GRg*Cp6$5`AH_!6Np'lVyEV;Q&(lFYQMfw 7Qbs}ylS)RisyTs~pnmOX03333333><o+GvX'_UD'
2024-04-25 12:54:18 UTC	261	IN	Data Raw: 24 47 77 a3 69 55 04 08 31 8e 67 5a d4 0d 44 ab 9a 1a dd 1c 50 ab 89 e8 81 44 5b b1 80 98 d7 a7 80 7c 40 44 ab 15 58 e5 53 22 4a 3a d0 38 4a ec b7 3d 74 24 44 f4 54 f2 a0 98 41 2b 14 c4 07 e2 1f 25 07 a0 56 d0 8c 02 cc f2 21 ed f7 91 2d b1 40 9b 15 fc fd f4 50 72 21 9f 7f cc ab bd 22 ab 9f 84 77 6c 7e 0e 76 f1 ee a0 a7 56 da d9 11 78 07 df 09 3e 38 9f 45 40 76 27 a6 fd 9f 1d d8 ec 77 fe b2 44 b5 ae 7e d8 15 5f 6c a9 76 d8 0e b7 d9 39 5e 87 fd ec 94 8d 3b 11 aa d8 f8 7f 0e d7 a2 9f 75 54 d3 29 2e 4e e2 98 f5 30 17 a8 6a 9b 97 df 5c d6 ca 9a e7 b9 44 95 db 64 e4 de d8 b5 78 ca 68 a2 b1 d3 96 ef 7d 18 aa 1a 2a df 27 03 95 64 79 96 26 ca 97 5d f8 7d 15 45 58 49 46 22 00 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 50 69 Data Ascii: $GwiU1gZDPD[\|@DXS"J:8J=t$DTA+%V!-@Pr!"wl~vVx>8E@v'wD~_lv9^;uT).N0j\Ddxh}'dy&]}EXIF"II1Pi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49860	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	1308	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:18 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Thu, 25 Apr 2024 12:54:18 GMT Date: Thu, 25 Apr 2024 12:54:18 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:18 UTC	727	IN	Data Raw: 35 37 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 57e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-25 12:54:18 UTC	686	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 76 61 72 20 73 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 2c 74 74 3d 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 63 70 3d 74 74 26 26 74 74 2e 63 72 65 61 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var s='https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js',tt=w.trustedTypes,cp=tt&&tt.crea
2024-04-25 12:54:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49864	172.217.215.100	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	1367	OUT	POST /play/log?format=json&authuser&proto_v2=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4331 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:18 UTC	4331	OUT	Data Raw: 5b 5b 32 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 57 69 6e 64 6f 77 73 22 2c 6e 75 6c 6c 2c 22 31 30 2e 30 22 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 22 65 6e 2d 55 53 22 2c 22 63 68 72 6f 6d 65 22 2c 22 31 31 37 2e 30 2e 30 2e 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5c 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 2c 20 5c 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 5c 22 3b 76 3d 5c 22 38 5c 22 2c 20 5c 22 43 68 72 6f 6d 69 75 6d 5c 22 3b 76 3d 5c 22 31 31 37 5c 22 22 5d 5d 2c 36 35 2c 5b 5b 22 31 37 31 34 30 34 39 36 35 36 38 30 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[2,null,[null,null,"Windows",null,"10.0"],null,null,null,null,null,["en-US","chrome","117.0.0.0",null,null,null,null,null,null,null,"\"Google Chrome\";v=\"117\", \"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"117\""]],65,[["1714049656805",null,null,null,null,
2024-04-25 12:54:18 UTC	685	IN	HTTP/1.1 200 OK Content-Type: text/plain; charset=utf-8 Access-Control-Allow-Origin: https://play.google.com Access-Control-Allow-Credentials: true Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:18 GMT Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:18 UTC	32	IN	Data Raw: 31 61 0d 0a 5b 22 39 30 30 30 30 30 22 2c 22 31 37 31 34 30 34 39 36 35 38 35 30 36 22 5d 0d 0a Data Ascii: 1a["900000","1714049658506"]
2024-04-25 12:54:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49866	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	1253	OUT	GET /tools/feedback/chat_load.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:18 UTC	891	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:18 GMT Location: https://www.gstatic.com/feedback/js/ghelp/fk319e6a408/chat_load.js Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'report-sample' 'nonce-SvtVgj3gCQ6HUBMyO89w7Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/asx-frontend-server/ Content-Security-Policy: require-trusted-types-for 'script';report-uri /tools/feedback/cspreport Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49865	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	524	OUT	GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1832 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:35:27 GMT Expires: Fri, 26 Apr 2024 11:35:27 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 4731 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	722	IN	Data Raw: 52 49 46 46 20 07 00 00 57 45 42 50 56 50 38 4c 14 07 00 00 2f 3f c0 0f 00 09 45 6d db 40 ca be cd f8 03 be 30 44 f4 7f 02 78 aa 06 92 ab 36 5c d0 66 cc 0b 16 6c 1b 49 52 54 87 0f d6 ea 2d 86 fc f3 bc 1c d8 36 92 a4 a8 74 d6 ea ac 0b 00 f3 8f 0f 1e 0d 45 6d 23 b9 49 3f f7 7a 21 b0 c7 e0 fa 9f ca c3 28 03 d0 33 60 bf 7f 66 e5 05 5c e0 5e 56 66 76 10 02 10 66 d6 64 0b b5 ce f8 01 c2 cf 7f ec 7a a8 01 00 33 49 12 3f 18 45 74 e5 ff 53 64 2b 33 b3 72 0d 77 77 77 77 78 01 22 32 e7 05 34 75 32 77 77 88 c9 c8 29 22 77 77 d7 eb ee b2 bb d3 c8 de 5b 33 37 24 fa bd 03 f5 af 7f 61 1d e1 9c 6c ab ab 70 49 b7 0a 6d f4 bc 01 72 ed ff 04 64 53 93 75 88 67 5b 8b 9e 1c d7 f3 00 b8 47 16 3a d9 4d e4 d8 b6 6d da d6 98 7b 3f eb db b6 ad 1a 30 b3 19 fa 67 ca 6c c4 0a 55 01 db Data Ascii: RIFF WEBPVP8L/?Em@0Dx6\flIRT-6tEm#I?z!(3`f\^Vfvfdz3I?EtSd+3rwwwwx"24u2ww)"ww[37$alpImrdSug[G:Mm{?0glU
2024-04-25 12:54:18 UTC	1110	IN	Data Raw: f0 a9 d1 5c a9 37 b8 fb 2c 60 14 50 d5 0d a3 98 3a 3f c9 ee 43 3c eb 4a 03 cc c4 ac b6 77 66 39 f4 c6 e0 af 3e 05 5f c5 49 f3 7d ee a9 b4 aa c0 d4 6b 14 7e ae 02 9a 58 3a 3e ce da 2d 9f 8d c5 9a 88 2c b5 69 66 0a 3d 68 41 ef f6 c4 75 3b bc 3b ff d6 2c 63 8e e1 44 f6 5e 92 8a 00 00 ab 3f 5a a5 90 08 25 c5 57 b6 47 1d cb 8e ad 6a 1c d6 74 e3 d7 2a 9b 1b b0 fe 63 f7 9c 3d c7 23 3b 76 1a 65 70 9f d1 9a 9d 8f 0c 78 41 d6 be 00 92 20 12 60 20 10 67 bb fb 74 72 61 e5 75 05 00 cb 2e 6c 7d b1 27 9c 7b 63 96 b9 43 03 b0 0c 07 df d1 04 b0 ab 21 de f3 ef 9a 83 09 aa 67 cc 3a 5e a2 75 75 27 ad 93 6f db 3d 98 65 42 34 80 16 e8 fb b4 97 40 1d 1e a9 38 52 b2 98 45 c7 d1 e7 93 6e e2 21 0b 65 27 1a 8c 1b f8 8b 32 8a 34 01 30 80 66 cf 82 49 d7 5d 43 b6 1e 7b 2f dc 9e 71 e9 Data Ascii: \7,`P:?C<Jwf9>_I}k~X:>-,if=hAu;;,cD^?Z%WGjt*c=#;vepxA ` gtrau.l}'{cC!g:^uu'o=eB4@8REn!e'240fI]C{/q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49869	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	525	OUT	GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 2226 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 11:19:50 GMT Expires: Fri, 26 Apr 2024 11:19:50 GMT Cache-Control: public, max-age=86400, no-transform Age: 5668 ETag: "v1" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	722	IN	Data Raw: 52 49 46 46 aa 08 00 00 57 45 42 50 56 50 38 4c 9e 08 00 00 2f 3f c0 0f 00 4d 30 68 24 49 51 06 ee ee a1 cf bf e0 07 0d 11 fd 9f 00 fd cc ed 4a f2 ba e1 94 d8 b7 40 ba f1 9a 96 ca 58 3b 7a c2 db 73 c1 b8 6d 23 47 da f8 dc fe cb 4b 97 a3 b1 af c3 15 b0 35 b0 8d 24 c9 49 d7 5b 6f 69 81 0c 00 9b fc 03 c3 a2 d8 46 92 d4 68 d0 2e f9 47 b7 26 f0 5a 4b a3 ff 09 46 0f 0e 3a 00 00 d8 fe 5f f7 91 29 d3 86 cd 0c c0 06 1c 97 7c 28 3f 65 02 00 6c d8 be d4 db c3 4e 4c 02 60 0a 22 2a 71 7d 6c 6a b3 7d 3f 00 80 ee fe 7b 56 b5 59 6d 04 03 0f 25 f8 ff 0c c9 d2 3f ab 7b 7a 3c b3 b6 6d db b6 8d bb 6d 7b 6f b6 6d db b6 bd cf b6 cd 79 af bb 2b 97 33 d5 3d b7 77 fa 45 bc 5b e6 c4 cb e5 43 45 ad b7 df 8b 5e 9c 1e 26 32 76 4f 4f db 7b dc cd c5 89 b5 3c d9 e8 08 49 b7 b6 19 92 f4 Data Ascii: RIFFWEBPVP8L/?M0h$IQJ@X;zsm#GK5$I[oiFh.G&ZKF:_)\|(?elNL`"*q}lj}?{VYm%?{z<mm{omy+3=wE[CE^&2vOO{<I
2024-04-25 12:54:18 UTC	1255	IN	Data Raw: bc 04 20 93 c2 4b 18 01 32 d4 ce b7 c2 66 62 d0 80 b9 0b 93 4c 9d 41 30 c6 f8 69 63 91 06 fa f1 40 12 70 c1 28 c4 fa 1a 09 2e 14 40 20 ce c8 ef aa f6 b5 69 ff 59 e7 6e 55 e4 e9 90 86 74 14 00 d5 2f 4d 92 41 06 5a 73 8e d6 16 94 48 c2 4d c9 04 60 04 60 86 66 e4 d9 fa 5e d5 ad 5f ce dd 65 ba a0 c1 f7 a1 00 10 99 ee 39 c8 b8 1c 19 aa 23 d1 31 12 08 2c c7 60 8c 26 61 84 4f 1c f8 02 44 81 b0 b8 2c cb c8 47 6b bb 8d 63 51 10 55 84 48 2f 01 01 65 e0 33 82 34 44 22 d5 2e 5c f4 76 61 9e bc 8c 17 35 c4 d5 e6 6d 35 5f 5a 79 75 2a 27 83 ee 19 30 c8 fa e8 99 32 c4 4a c0 70 82 be c1 15 cc c2 21 0e 2d 45 99 4a a9 1f 01 65 4c 7a 90 db 21 ac fd 75 f5 4e d4 cd fd 6d de 82 00 b8 b1 ea 35 1e 1c d9 66 67 92 99 62 10 f6 54 9e 2b 24 47 7d 01 01 b2 e1 0a 38 4d 0a 23 41 50 b9 80 Data Ascii: K2fbLA0ic@p(.@ iYnUt/MAZsHM``f^_e9#1,`&aOD,GkcQUH/e34D".\va5m5_Zyu*'02Jp!-EJeLz!uNm5fgbT+$G}8M#AP
2024-04-25 12:54:18 UTC	249	IN	Data Raw: c7 aa 5c 18 a3 f6 e4 2e f9 79 04 ad 07 a3 12 46 69 9d 92 da eb 93 02 00 9b 6c 05 a7 73 6a ef cd cf 13 88 f9 48 a9 ff ac d9 e1 f5 82 92 ba e4 eb e5 8e df ba 0e af fb 26 8f 62 6b 0c 00 f8 04 fb 6a 8f 98 14 34 38 01 85 0e 30 53 b8 6b fe c2 54 e9 f3 88 cf fb 94 b7 82 90 91 71 6c 2e 9b 2d 7f 31 6a 2c 8f 32 b6 29 c3 20 17 26 bd 24 80 ae b0 0d d8 32 bb 9d 37 6f 01 71 3b f8 7a cf 0a 66 c8 d2 92 b1 fc c5 f2 1e e5 bf 01 30 49 e5 bd dd 12 2e 93 c0 fa c5 f3 88 eb 16 da 4b 9d a6 b9 48 48 d7 8b e5 e5 ef f5 48 82 a1 38 89 b2 57 26 20 b6 2d e8 10 f7 55 d1 5e 6c 53 1e 34 da 48 8f f7 00 22 18 2c 82 d8 34 a9 46 8e ef 50 1a 6f e6 f6 6a 7b c8 34 65 19 87 c1 86 61 f2 95 b5 9c 2c 9e da a2 94 76 46 dd 6b aa 02 a8 2b 20 30 01 32 b3 64 d1 a4 42 a9 b6 48 74 eb 0a Data Ascii: \.yFilsjH&bkj480SkTql.-1j,2) &$27oq;zf0I.KHHH8W& -U^lS4H",4FPoj{4ea,vFk+ 02dBHt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49870	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	524	OUT	GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	534	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1494 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 09:55:23 GMT Expires: Fri, 26 Apr 2024 09:55:23 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 10735 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	721	IN	Data Raw: 52 49 46 46 ce 05 00 00 57 45 42 50 56 50 38 4c c1 05 00 00 2f 3f c0 0f 00 09 45 6d db 40 4a f7 cc f8 23 be 28 44 f4 7f 02 38 8a 48 94 1e 2a 0e 49 23 a0 3e e6 05 a3 36 92 1c 59 fb ca f9 00 2c 7f 9a a7 e5 60 b4 6d db a4 f1 d0 e0 d0 14 02 41 88 9e e0 ff 39 13 fa 3f 01 b6 78 cf 05 40 80 cb 3e 73 7c 00 80 78 1d 0e e0 82 78 32 19 00 08 c8 64 e7 07 05 80 86 b7 88 8e fc 7f 8a 6d a5 7b 8e 3e c7 dd 5d 72 52 77 77 77 0b 5f 84 86 ee 64 4e e8 ee 99 43 ea ee ee 0e d7 fd 74 a3 67 e4 e1 d1 2f 62 07 a7 fe e8 95 0c cb 6e 0d 3a 45 4a 7c 6b b2 b3 83 5b 4f 4e d5 7f 01 14 d9 54 67 bd 02 fc 5a ce 0e 6e bd 65 9c 5d 90 91 c8 c1 b6 ed d8 9b eb 79 df d8 b6 6d 8f d9 8d cd 9c 9c d5 a9 ed cd 76 77 b7 a3 dd cd 36 a6 d8 f8 1e d9 b5 b6 1d 7b 74 dd ef ff bf ff 17 db 4e ce ac 43 67 d4 c5 Data Ascii: RIFFWEBPVP8L/?Em@J#(D8H*I#>6Y,`mA9?x@>s\|xx2dm{>]rRwww_dNCtg/bn:EJ\|k[ONTgZne]ymvw6{tNCg
2024-04-25 12:54:18 UTC	773	IN	Data Raw: 8f 3b bd 3e d9 01 17 8c d7 c1 71 d1 ea 7b 52 db 34 1f 71 c2 96 03 c4 66 c0 c0 08 ef ff 59 86 af b8 98 5b 24 3b 1c a3 3c 7d ad f6 d9 6f 01 2b d6 e7 9f e5 3a 92 01 05 6c 8c 44 c1 51 24 ed 48 61 18 50 2e 28 77 7a fb 6a cb ac 8e d4 67 d2 d5 98 27 91 39 c3 3a d4 54 29 45 cc 3c 50 c1 6b c9 0d 79 43 4c 4c 3c 40 f3 32 7e 5c 77 cd 9c 31 00 ab 1e 78 d9 cc db 08 64 92 0a 73 ca 21 ed 90 46 d2 e8 bf b4 6b 94 e0 42 08 19 32 4f ca 42 cc a4 14 82 51 2c 8f 0d 01 c0 2c 61 f9 56 de 80 b9 c2 86 a5 fa 6e 2f dd e3 a5 02 40 ba c6 d6 f7 4f 0a 06 17 33 9f 9e bd 20 c1 0b 32 bf 19 18 8c 3c cd d5 1d b6 9e c1 03 af 02 56 28 d3 bc e5 0d 85 e9 38 50 21 b6 7d 7d 59 55 16 04 fa ba 53 ba 16 e0 52 a2 31 d0 e9 05 2b c7 c6 30 f1 0b 33 27 f6 7a 79 fd 73 bd a6 b5 4a e6 5e fa 2f 4c be 78 e1 01 Data Ascii: ;>q{R4qfY[$;<}o+:lDQ$HaP.(wzjg'9:T)E<PkyCLL<@2~\w1xds!FkB2OBQ,,aVn/@O3 2<V(8P!}}YUSR1+03'zysJ^/Lx

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49868	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	524	OUT	GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1670 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 10:56:54 GMT Expires: Fri, 26 Apr 2024 10:56:54 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 7044 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	722	IN	Data Raw: 52 49 46 46 7e 06 00 00 57 45 42 50 56 50 38 4c 71 06 00 00 2f 3f c0 0f 00 09 45 6d 1b 31 ea f8 5d 8f 3f e1 45 21 a2 ff 13 80 33 17 18 80 30 76 0d c4 98 7c 80 85 eb 48 b6 95 a8 71 d7 2f 97 fc a3 22 04 8a 18 d8 8d 41 49 23 49 52 c1 cd a2 95 30 fe 15 ee 3d 80 51 24 49 8a 73 a9 60 19 8f ff d7 ff 09 30 1f fe 54 ee f8 c8 c9 d1 c6 0f 40 0a d0 6a 9b 50 02 f5 a3 17 7b 89 d4 1b b9 1c 4a 97 24 0f 0b 78 78 99 f6 02 8f 3c 00 de 7c f8 2d a2 23 ff bf e2 c8 e9 d7 c3 cc 68 76 c4 ec 88 f1 02 be 04 3b f2 0d 7c 03 47 2e c7 8e 1d 31 33 33 33 33 ce 88 07 5a ea d7 55 d6 13 cc 38 c4 9f 49 d1 a6 ff 7a d5 06 45 1b 8e 23 97 aa 5e d0 97 50 29 db 1b 6c 39 fb 1f c0 a9 4a d9 3b c1 46 74 12 33 3b df dc 77 58 07 72 68 db 36 b5 67 9d 87 ff 8f 6d 9b 95 ad ca 36 2b 3b 55 52 da b6 6d db 49 Data Ascii: RIFF~WEBPVP8Lq/?Em1]?E!30v\|Hq/"AI#IR0=Q$Is`0T@jP{J$xx<\|-#hv;\|G.13333ZU8IzE#^P)l9J;Ft3;wXrh6gm6+;URmI
2024-04-25 12:54:18 UTC	948	IN	Data Raw: 08 df a4 b5 05 f2 a2 96 12 12 b7 a1 71 cb 03 d0 05 4e 50 9d 75 cb 74 07 76 6f 9b 7b b5 54 67 1e 95 c7 60 b1 91 99 76 f8 41 db 88 d9 6a 26 45 04 03 81 1a bc a3 96 90 66 89 5e 48 00 52 ec 0b fd 78 52 58 1f 08 6c 42 19 0e e9 91 43 4b c4 11 eb 86 e3 46 69 5b 39 9c 38 77 7c 01 22 1b 45 cd 3a 54 ad 45 0c cd 60 0d 87 f0 18 12 fc f1 c4 c2 62 dc 9f 9c f0 a7 ba 90 84 d0 c0 6a 58 04 46 5e 40 eb 4e 0e d4 be c2 2a 83 9d 07 90 fb ef 7a a0 34 23 1b 15 d7 98 58 1b f6 25 ba 84 21 fa b6 e4 84 4b 04 62 63 b5 01 2c 10 28 b0 32 20 0f 9d 15 29 dd f9 55 92 c5 58 49 00 6f 88 f8 1d 48 3d 69 26 c5 b6 ee 2b 23 16 53 46 83 8a ad c4 0c 0b 46 ae e0 08 16 60 18 90 25 f8 21 fa 5b fb f4 cb 2e c9 8b 78 5d 03 9b 14 7f a3 61 28 84 41 08 53 a9 4e db 75 52 67 3a 09 5f cc 80 40 cb 5a e7 0d 3e Data Ascii: qNPutvo{Tg`vAj&Ef^HRxRXlBCKFi[98w\|"E:TE`bjXF^@N*z4#X%!Kbc,(2 )UXIoH=i&+#SFF`%![.x]a(ASNuRg:_@Z>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49871	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	524	OUT	GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/webp Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 26 Apr 2024 12:54:18 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 12:54:18 GMT Server: fife Content-Length: 2620 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	733	IN	Data Raw: 52 49 46 46 34 0a 00 00 57 45 42 50 56 50 38 4c 28 0a 00 00 2f 3f c0 0f 00 09 05 6d 1b 39 97 eb fd 2c 7f c4 3f 30 44 f4 7f 02 d8 a7 66 5b 36 68 34 03 e4 c3 1f 5a cb 5a 1a 3b c3 11 1a 1b 5b 68 2c cc b4 6d e3 b3 fc e1 ed 1a 97 90 50 d4 36 92 63 ed d5 e7 42 b9 c6 1f da 49 49 23 49 52 39 58 fe f8 b7 75 23 e1 f0 1d e9 7f 22 09 49 92 4f 00 c0 07 e1 20 42 00 40 14 00 a8 00 41 e0 09 82 0a 50 dd 1b b3 f7 fb d7 98 cb 05 60 d2 01 10 d9 91 b6 4d 91 6c 27 e7 9e cb cc cc cc cc d7 14 33 33 33 4b 2e 33 5b cc cc cc cc cc ac 83 97 99 99 51 d3 1d d1 9d 55 3d 67 56 f0 da 62 ca c8 68 a7 4c 59 ed 4c 4c 94 57 02 4b 1e 75 b4 a7 1d 30 7c 22 53 66 c6 ef 89 ec f6 26 4a b4 87 36 25 2d 62 56 22 47 0e 64 db a6 6d cd b9 0f be 6d db b6 ed 67 db 2f fb d1 8f 6c 1b 91 6d db b6 6d f3 d9 d6 Data Ascii: RIFF4WEBPVP8L(/?m9,?0Df[6h4ZZ;[h,mP6cBII#IR9Xu#"IO B@AP`Ml'333K.3[QU=gVbhLYLLWKu0\|"Sf&J6%-bV"Gdmmg/lmm
2024-04-25 12:54:18 UTC	1255	IN	Data Raw: 04 34 5c 62 4f 19 4f 25 23 63 b3 7a 58 01 af 38 ce b3 4f b0 42 15 16 2b ce cb e5 66 47 00 a3 ea 59 15 15 db 95 2c 33 45 cb 10 e0 39 bb 79 da 09 36 6c c0 62 c5 b1 1f b8 f5 49 80 1e ea 47 df c9 52 e6 7c ab 7b 55 1c 87 23 e8 4d 17 b9 f5 71 76 6b ce ca d5 99 70 9c 9d c1 27 af f1 34 97 cb af 01 08 2d 27 df c2 3c a7 6e 4f f4 13 5e be f1 12 b7 3e c6 ae cd 59 a5 3a 13 8a b3 d2 f9 d4 75 9e 26 5c 61 0d 00 d4 fd 38 18 04 93 25 63 20 68 9b 2a 56 16 23 7e be e9 12 b7 3c ce 6e cd 58 a5 0a 9d f5 c9 eb 3c 03 5c 7e 35 00 10 7b 31 11 a6 d4 76 95 44 db 40 1f 55 e4 e4 9b 2f 73 eb 6d ec 5c 8f cf e6 6b ee 6d fe 73 b9 95 90 cd 96 93 ef ca a6 cc b3 62 3f 8a 61 fe 7d e0 cd f7 b8 ed 36 76 ac c7 67 b3 9a 7f 97 a7 80 cb 2d 03 72 22 10 cc b7 29 24 cf 0e 12 15 c3 8e 0f 91 b7 cc e5 b6 Data Ascii: 4\bOO%#czX8OB+fGY,3E9y6lbIGR\|{U#Mqvkp'4-'<nO^>Y:u&\a8%c h*V#~<nX<\~5{1vD@U/sm\kmsb?a}6vg-r")$
2024-04-25 12:54:18 UTC	632	IN	Data Raw: e2 81 0b fd e8 12 bf 68 5c f1 06 c9 7a 2f e4 c6 1f 72 78 74 86 56 74 c7 3e f5 7e 23 6e dd 6c b0 af 15 d1 e2 34 8d 6b c0 a8 35 df 6a 08 98 67 c9 66 b4 63 65 5f 7f 53 66 f9 4a da a3 5b d6 35 86 9e bf fa f0 d3 d2 8b f5 fa 91 64 9c d0 85 25 c8 68 8e 88 37 bb b1 50 a1 13 dd b8 f3 c0 db c7 39 a1 05 f4 d3 ac 0e e9 51 4a 2f d0 42 da 7d f8 e1 67 3f 4d cd 83 13 9f 75 b4 be d8 4e e0 24 75 7d 43 f0 5c 32 63 36 46 bb 5a fe f0 db 02 a7 a8 f8 af f3 da 79 04 90 24 96 04 73 00 73 20 96 50 f0 3e 89 4b 0d 79 22 49 ba 56 bf 87 6e c0 8d d3 20 49 7a 9a d2 63 dd 8a 9b 39 2d 1f 39 5c 2e 2c 4b 63 c4 d1 65 6c 95 68 37 44 49 20 25 6d 56 dd f7 3e 6c 78 86 64 97 38 6d 6b 8f 1d 6e d2 fe 97 d2 0b 54 79 97 f0 08 ad ec eb 94 8f 32 af a6 f8 10 58 a4 25 d7 a4 fe b8 62 2b 37 1e 4f fe bd d9 Data Ascii: h\z/rxtVt>~#nl4k5jgfce_SfJ[5d%h7P9QJ/B}g?MuN$u}C\2c6FZy$ss P>Ky"IVn Izc9-9\.,Kcelh7DI %mV>lxd8mknTy2X%b+7O

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49872	142.250.105.119	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	524	OUT	GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1 Host: play-lh.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:18 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.webp" X-Content-Type-Options: nosniff Server: fife Content-Length: 1162 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 12:17:47 GMT Expires: Fri, 26 Apr 2024 12:17:47 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1" Content-Type: image/webp Vary: Origin Age: 2191 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:18 UTC	722	IN	Data Raw: 52 49 46 46 82 04 00 00 57 45 42 50 56 50 38 58 0a 00 00 00 08 00 00 00 3f 00 00 3f 00 00 56 50 38 4c 3a 04 00 00 2f 3f c0 0f 00 e7 27 21 92 24 47 92 62 f9 93 3a 42 5a df ed 4c fa 89 7f 0e 92 22 49 92 24 49 bd 8f e7 b2 5a fe 38 96 c1 d9 1d 26 21 92 24 47 92 a2 9f 3f a7 47 a4 f5 ff 4c a7 cf 7f ca ca 1f 09 15 68 e9 1d 11 86 0a 88 40 2a e0 3f 7b 8d 98 a9 04 b2 9b b0 30 44 05 a0 02 1a 02 95 00 44 30 42 0c 41 f4 39 e6 da 63 88 86 84 dd f8 b2 d8 0d 04 cf 40 20 a1 4f f6 44 43 40 84 3e d9 93 40 2a a1 6f 06 9b 76 cc 25 c4 50 f4 4d 3b 6c 16 d0 d8 d1 20 fb 4c 68 b1 ac ab 0b e9 81 30 ce bb 16 8d be b9 74 1c bd 2a c4 80 06 b4 74 e9 62 34 26 c1 d8 0d 08 70 00 18 5d 84 07 33 20 84 80 96 cb e2 9b 99 99 96 0e 02 c2 60 fa 1e e7 2e 03 34 a4 83 9c 7b cd ac a9 c0 c2 66 11 ba Data Ascii: RIFFWEBPVP8X??VP8L:/?'!$Gb:BZL"I$IZ8&!$G?GLh@?{0DD0BA9c@ ODC@>@ov%PM;l Lh0t*tb4&p]3 `.4{f
2024-04-25 12:54:18 UTC	440	IN	Data Raw: 86 ec 17 b8 2c b5 f6 b5 c1 c0 7a 63 00 ec e5 a8 e0 1a ed be 9d 75 f8 1e 53 ce 49 85 ca 99 86 6a a0 c7 9c 14 40 77 d3 52 18 11 b1 36 c6 68 a6 72 a6 76 3c 70 a4 fb 71 7d 00 2b 84 88 52 16 4e 89 88 45 84 89 88 58 44 84 4b 56 eb 47 a2 fb 6a 1b 26 01 d8 c7 11 51 fa d9 43 cb 1e fe c5 d4 f0 eb 37 df fc ff 47 b6 99 f8 cd bb e6 ce bd fb 71 2e 95 fe 0b bd 52 71 17 00 18 ec 1b 88 48 ee 54 89 52 fb 59 7d 6a a2 54 d5 8e ba 59 2e 49 12 55 f5 bb 2d 95 1d 8d 15 c6 cf 06 d0 47 98 f2 e6 26 33 5e da 55 4d b7 b9 e4 fd 6f 8e 51 bb 58 99 96 2c 5d fb d6 5a 2e d9 08 dc 2b 53 01 f4 fc 81 29 4b 2d 30 be d3 ce 3e a7 de 95 b0 93 fa 5e 4f 53 ab b4 30 95 5a 5f 83 cc 91 c2 d4 da 22 ab 93 c9 3e a7 de 66 b9 3e b9 cf 4c 4b 96 7f f8 de 17 69 a9 c8 fd d5 05 58 ef af c0 d4 5a 72 fa 2d 7f a8 Data Ascii: ,zcuSIj@wR6hrv<pq}+RNEXDKVGj&QC7Gq.RqHTRY}jTY.IU-G&3^UMoQX,]Z.+S)K-0>^OS0Z_">f>LKiXZr-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49873	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:18 UTC	1562	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=9st82i90u303 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:19 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:18 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-y7_4WP6dn1eQMNC7FXnqRg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:19 UTC	364	IN	Data Raw: 32 61 66 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af5<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 37 5f 34 57 50 36 64 6e 31 65 51 4d 4e 43 37 46 58 6e 71 52 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/styles__ltr.css"><script nonce="y7_4WP6dn1eQMNC7FXnqRg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 48 46 67 54 52 50 59 69 4d 53 57 70 43 58 44 77 42 36 32 42 52 6e 43 54 39 66 6e 4c 51 70 77 74 37 5f 51 62 73 51 4b 63 70 48 49 6e 64 52 73 43 4e 46 47 76 69 39 51 6a 35 69 54 79 79 42 77 52 58 4a 35 4d 55 62 58 46 37 70 37 6d 6c 45 5f 6b 79 51 32 53 66 5f 38 51 65 4e 43 5f 74 68 42 4c 68 55 47 58 6d 51 49 49 38 30 48 38 6d 4d 77 72 31 73 77 56 33 39 37 77 38 52 2d 35 50 39 62 6d 56 75 59 6c 4a 42 61 32 71 6a 70 30 62 67 61 47 54 6c 5f 6b 37 6d 37 37 34 45 5f 6c 57 4c 77 74 75 5f 4e 6c 68 46 42 51 63 49 45 33 79 56 76 54 62 6e 66 48 71 57 44 6f 34 34 46 45 75 72 42 6e 72 43 44 6c 50 2d 2d 41 54 38 63 4e 35 30 43 56 63 53 55 66 46 78 70 42 6d 65 52 34 55 46 57 51 51 45 35 56 79 2d 44 58 46 76 7a 61 30 6e 58 4f 79 79 34 31 58 61 5a 4e 35 44 6e 74 55 6f 75 Data Ascii: HFgTRPYiMSWpCXDwB62BRnCT9fnLQpwt7_QbsQKcpHIndRsCNFGvi9Qj5iTyyBwRXJ5MUbXF7p7mlE_kyQ2Sf_8QeNC_thBLhUGXmQII80H8mMwr1swV397w8R-5P9bmVuYlJBa2qjp0bgaGTl_k7m774E_lWLwtu_NlhFBQcIE3yVvTbnfHqWDo44FEurBnrCDlP--AT8cN50CVcSUfFxpBmeR4UFWQQE5Vy-DXFvza0nXOyy41XaZN5DntUou
2024-04-25 12:54:19 UTC	1255	IN	Data Raw: 7a 6b 46 44 55 37 33 55 61 63 48 46 77 4d 65 5a 4d 2d 33 66 46 57 77 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 79 37 5f 34 57 50 36 64 6e 31 65 51 4d 4e 43 37 46 58 6e 71 52 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 39 73 61 31 52 59 63 54 51 35 57 55 63 31 58 32 56 71 4d 58 63 33 62 54 52 55 4f 55 35 33 58 7a 46 4d 65 44 46 50 59 32 51 78 5a 33 52 6c 56 31 46 77 63 32 5a 57 58 31 52 72 4c 6d 70 7a 5c 78 32 32 Data Ascii: zkFDU73UacHFwMeZM-3fFWw"><script type="text/javascript" nonce="y7_4WP6dn1eQMNC7FXnqRg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy9sa1RYcTQ5WUc1X2VqMXc3bTRUOU53XzFMeDFPY2QxZ3RlV1Fwc2ZWX1RrLmpz\x22
2024-04-25 12:54:19 UTC	601	IN	Data Raw: 68 70 5a 6e 64 78 65 6a 4a 55 59 33 5a 48 64 6a 64 77 4e 30 39 49 65 43 39 54 5a 6d 78 68 52 45 35 73 64 56 4e 5a 5a 6d 59 78 56 33 56 36 54 32 6c 44 63 30 6f 33 51 6c 4a 50 55 30 49 32 5a 45 4a 33 4f 47 70 47 4e 6c 55 35 54 32 46 6e 4d 54 5a 43 64 6b 68 48 4d 57 5a 53 56 57 74 4d 64 53 39 6b 64 56 4a 53 4e 6b 35 53 4d 6d 4e 79 65 45 4e 4a 4b 7a 49 72 53 32 38 72 62 56 41 72 64 6b 4e 4c 63 57 46 51 61 33 46 77 5a 6b 5a 51 56 55 35 6c 63 32 4a 59 53 6b 39 73 5a 54 56 36 4d 44 41 72 4b 33 5a 32 4e 30 56 52 61 45 35 51 5a 55 6c 74 55 6b 4e 7a 57 54 4a 33 63 6d 52 35 63 31 46 44 64 6d 6f 34 52 6e 70 50 63 31 46 72 64 6a 4d 76 51 57 49 77 53 6e 59 33 59 7a 64 4c 53 44 6c 54 65 46 52 34 4e 32 74 54 4e 6d 51 35 5a 32 4e 43 56 7a 46 61 62 6b 68 4f 4d 54 4d 35 63 Data Ascii: hpZndxejJUY3ZHdjdwN09IeC9TZmxhRE5sdVNZZmYxV3V6T2lDc0o3QlJPU0I2ZEJ3OGpGNlU5T2FnMTZCdkhHMWZSVWtMdS9kdVJSNk5SMmNyeENJKzIrS28rbVArdkNLcWFQa3FwZkZQVU5lc2JYSk9sZTV6MDArK3Z2N0VRaE5QZUltUkNzWTJ3cmR5c1FDdmo4RnpPc1FrdjMvQWIwSnY3YzdLSDlTeFR4N2tTNmQ5Z2NCVzFabkhOMTM5c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49880	172.253.124.156	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:19 UTC	1209	OUT	POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&gjid=1174901316&_gid=2015979708.1714049658&_u=YEBAAEAAAAAAACgDI~&z=1088505056 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:19 UTC	593	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 12:54:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:19 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49886	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:20 UTC	1433	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&_u=YEBAAEAAAAAAACgDI~&z=1513772729 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:20 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 12:54:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49887	172.217.215.100	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:20 UTC	1644	OUT	POST /_/PlayStoreUi/browserinfo?f.sid=4639271897183098544&bl=boq_playuiserver_20240423.08_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=53660&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320; _ga=GA1.3.1041261354.1714049658; _gid=GA1.3.2015979708.1714049658; _gat_UA199959031=1; _gcl_au=1.1.316331430.1714049659
2024-04-25 12:54:20 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 30 25 32 43 30 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C0%2C0%5D%5D&
2024-04-25 12:54:21 UTC	1240	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:21 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-site Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:21 UTC	15	IN	Data Raw: 35 64 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 Data Ascii: 5d)]}'[[["f
2024-04-25 12:54:21 UTC	84	IN	Data Raw: 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 32 37 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 37 2c 22 2d 38 32 33 35 38 35 30 35 35 39 33 35 39 34 39 33 38 31 32 22 2c 31 31 30 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 33 5d 5d 5d 0d 0a Data Ascii: .mt"],["di",27],["af.httprm",27,"-8235850559359493812",110],["e",4,null,null,93]]]
2024-04-25 12:54:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49888	64.233.177.99	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:20 UTC	1556	OUT	POST /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 7714 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-protobuffer sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=9st82i90u303 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:20 UTC	7714	OUT	Data Raw: 0a 18 56 36 5f 38 35 71 70 63 32 58 66 32 73 62 65 33 78 54 6e 52 74 65 37 6d 12 a4 0f 30 33 41 46 63 57 65 41 34 34 63 4f 42 4d 44 67 57 77 70 71 55 36 32 4a 51 4f 6a 70 57 4c 37 31 47 4a 5f 45 38 55 6b 39 51 56 74 52 72 44 35 65 35 79 6b 6b 56 35 73 64 52 31 7a 4d 61 4c 76 56 62 6b 52 2d 36 73 69 71 6b 64 32 4d 2d 48 53 62 31 69 69 58 58 73 6d 55 35 7a 5a 41 47 2d 6c 75 6a 68 44 2d 53 76 4d 79 54 30 34 6c 6b 6a 51 6e 36 57 56 49 74 6e 45 4f 52 53 63 72 4a 78 4d 63 6b 30 69 73 5a 48 34 48 2d 79 44 5f 2d 6a 56 4b 57 39 44 57 41 42 51 56 4c 46 69 36 44 53 52 34 77 41 75 53 50 79 57 62 67 37 46 6d 53 72 49 36 37 63 57 4d 56 4b 68 35 47 39 43 7a 70 5a 64 33 33 64 6e 33 79 33 6e 5f 7a 65 4e 4a 55 4e 34 72 34 56 67 50 6d 59 4d 6d 39 6f 70 74 71 34 78 49 6b 73 Data Ascii: V6_85qpc2Xf2sbe3xTnRte7m03AFcWeA44cOBMDgWwpqU62JQOjpWL71GJ_E8Uk9QVtRrD5e5ykkV5sdR1zMaLvVbkR-6siqkd2M-HSb1iiXXsmU5zZAG-lujhD-SvMyT04lkjQn6WVItnEORScrJxMck0isZH4H-yD_-jVKW9DWABQVLFi6DSR4wAuSPyWbg7FmSrI67cWMVKh5G9CzpZd33dn3y3n_zeNJUN4r4VgPmYMm9optq4xIks
2024-04-25 12:54:21 UTC	696	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Date: Thu, 25 Apr 2024 12:54:21 GMT Expires: Thu, 25 Apr 2024 12:54:21 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: _GRECAPTCHA=09AKPP-6e9yL7wY6iHFACKg90WZCD294_4lvVJQqNIh102J0IKsaKHO18AtQyGEwi0B5rNoPBEc_W-r5s3PSTf3go;Path=/recaptcha;Expires=Tue, 22-Oct-2024 12:54:21 GMT;Secure;HttpOnly;Priority=HIGH;SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:21 UTC	559	IN	Data Raw: 61 36 61 0d 0a 29 5d 7d 27 0a 5b 22 72 72 65 73 70 22 2c 22 30 33 41 46 63 57 65 41 34 4b 74 61 58 68 48 6d 59 41 76 6b 77 41 2d 67 58 52 53 41 33 5a 71 67 7a 32 68 50 49 62 66 46 36 4f 56 43 4b 50 65 47 62 39 59 55 6a 45 34 36 52 4b 72 69 47 52 74 75 65 76 77 41 61 6c 6f 44 6d 75 7a 45 62 68 77 6f 48 48 56 5a 4c 47 5a 2d 43 41 66 34 42 32 70 6f 66 30 76 42 53 6c 35 66 31 77 64 54 77 33 50 79 36 44 35 67 57 49 78 43 6b 4d 61 69 30 66 64 32 56 4a 6c 79 67 36 32 65 31 55 32 51 46 38 6c 73 64 2d 42 57 6f 51 64 45 4e 50 4b 78 76 37 73 48 79 43 68 36 35 5a 7a 68 7a 6f 5a 4a 64 67 61 44 69 42 75 44 75 44 64 53 41 35 7a 54 32 54 50 61 57 52 64 30 36 2d 6e 4d 6b 69 67 66 45 4c 4d 50 55 62 6e 47 50 36 55 75 76 65 59 74 66 5f 6c 5f 31 4a 37 72 64 52 6a 78 6c 66 42 Data Ascii: a6a)]}'["rresp","03AFcWeA4KtaXhHmYAvkwA-gXRSA3Zqgz2hPIbfF6OVCKPeGb9YUjE46RKriGRtuevwAaloDmuzEbhwoHHVZLGZ-CAf4B2pof0vBSl5f1wdTw3Py6D5gWIxCkMai0fd2VJlyg62e1U2QF8lsd-BWoQdENPKxv7sHyCh65ZzhzoZJdgaDiBuDuDdSA5zT2TPaWRd06-nMkigfELMPUbnGP6UuveYtf_l_1J7rdRjxlfB
2024-04-25 12:54:21 UTC	1255	IN	Data Raw: 4f 77 39 56 70 38 76 6e 59 73 65 34 57 4f 66 66 47 6d 39 78 6f 69 68 6d 48 72 39 63 63 4c 67 47 56 4b 57 52 49 41 42 68 55 6b 52 6b 48 77 67 6f 59 59 6c 35 37 50 47 49 39 5a 78 78 77 43 66 54 74 66 63 32 6b 6f 78 38 63 49 72 6b 43 61 6b 4d 79 61 65 73 54 41 70 7a 38 4f 61 44 43 6f 6e 78 2d 75 4d 71 39 54 36 59 46 57 33 6c 65 67 6e 33 7a 59 33 52 46 5a 75 38 74 42 62 59 6f 52 73 31 59 79 56 38 4c 52 49 57 30 75 4c 71 73 43 5a 73 41 31 6b 36 58 39 76 39 58 4a 49 36 33 2d 59 65 72 52 78 59 6d 6f 46 4e 55 43 2d 79 4e 64 50 50 44 71 62 6d 6c 34 61 61 30 37 77 6c 78 50 52 55 69 36 41 41 6d 4d 2d 6c 55 30 78 55 31 30 51 71 63 31 6d 57 76 38 66 58 61 6b 49 5f 39 59 6a 68 59 70 4b 65 48 32 70 6f 6d 64 68 32 78 33 48 56 71 43 43 22 2c 6e 75 6c 6c 2c 31 32 30 2c 6e Data Ascii: Ow9Vp8vnYse4WOffGm9xoihmHr9ccLgGVKWRIABhUkRkHwgoYYl57PGI9ZxxwCfTtfc2kox8cIrkCakMyaesTApz8OaDConx-uMq9T6YFW3legn3zY3RFZu8tBbYoRs1YyV8LRIW0uLqsCZsA1k6X9v9XJI63-YerRxYmoFNUC-yNdPPDqbml4aa07wlxPRUi6AAmM-lU0xU10Qqc1mWv8fXakI_9YjhYpKeH2pomdh2x3HVqCC",null,120,n
2024-04-25 12:54:21 UTC	859	IN	Data Raw: 31 63 31 53 6b 6f 76 64 33 56 4d 61 32 56 4c 54 58 46 45 65 55 6f 35 4c 31 70 4a 5a 30 70 70 52 57 70 72 52 58 42 68 5a 57 5a 5a 4f 48 4e 74 57 45 5a 59 54 30 39 75 63 46 41 30 62 6e 5a 33 5a 48 52 56 4f 55 78 48 52 6d 51 34 61 31 70 6e 54 48 5a 59 4d 6b 56 43 64 31 4e 6b 52 55 31 4a 65 57 56 71 56 6b 56 59 55 31 4e 77 57 56 70 69 59 30 70 4d 4e 6c 70 46 61 6d 46 36 52 6b 45 34 53 47 39 78 4e 32 64 6f 4d 56 6f 30 57 55 4e 32 52 46 51 31 64 57 5a 47 53 57 46 73 4e 6d 4a 68 65 6a 68 6f 53 57 39 73 52 6a 46 45 59 56 46 36 5a 6e 41 77 52 79 73 72 61 31 4e 52 52 32 49 79 4e 31 68 35 4e 32 46 49 55 32 46 6b 56 46 64 47 65 57 67 31 52 6d 4a 71 57 47 6c 4d 65 44 67 35 52 6b 31 30 62 54 4d 79 61 44 56 51 54 6c 49 78 51 6c 5a 4a 57 55 70 6b 62 47 39 78 56 45 59 33 Data Ascii: 1c1Skovd3VMa2VLTXFEeUo5L1pJZ0ppRWprRXBhZWZZOHNtWEZYT09ucFA0bnZ3ZHRVOUxHRmQ4a1pnTHZYMkVCd1NkRU1JeWVqVkVYU1NwWVpiY0pMNlpFamF6RkE4SG9xN2doMVo0WUN2RFQ1dWZGSWFsNmJhejhoSW9sRjFEYVF6ZnAwRysra1NRR2IyN1h5N2FIU2FkVFdGeWg1RmJqWGlMeDg5Rk10bTMyaDVQTlIxQlZJWUpkbG9xVEY3
2024-04-25 12:54:21 UTC	1255	IN	Data Raw: 32 34 61 31 0d 0a 52 34 62 6b 55 79 65 47 52 6f 4d 31 4a 33 56 32 74 51 54 32 74 6d 59 31 6b 30 61 30 5a 68 63 6c 5a 4c 55 32 31 50 63 56 42 57 54 48 6b 34 54 57 68 74 56 6d 4e 6e 61 45 56 49 53 55 74 4e 54 30 39 4f 4e 45 70 76 63 45 52 70 51 31 52 50 4d 45 78 32 5a 47 6c 61 62 6c 67 72 59 69 73 7a 55 46 51 79 62 30 4a 5a 56 33 64 75 51 69 39 4d 53 44 56 7a 59 6b 31 73 5a 6a 42 50 56 47 64 58 56 55 35 47 55 6c 42 6a 5a 47 74 55 65 47 64 51 64 6c 42 71 56 31 70 5a 57 56 41 76 4d 55 64 51 56 58 64 57 4d 6b 45 30 4c 7a 56 72 55 47 78 4f 63 6b 55 78 52 45 31 6a 52 7a 52 4a 4e 57 5a 6b 65 6a 4e 58 62 47 74 43 5a 45 4a 44 4f 58 51 34 56 47 39 50 5a 30 68 30 63 31 64 43 4d 31 64 6a 4e 6d 64 70 63 6c 4e 58 57 58 63 33 4c 7a 42 6d 54 6e 52 70 65 56 5a 50 51 33 68 Data Ascii: 24a1R4bkUyeGRoM1J3V2tQT2tmY1k0a0ZhclZLU21PcVBWTHk4TWhtVmNnaEVISUtNT09ONEpvcERpQ1RPMEx2ZGlablgrYiszUFQyb0JZV3duQi9MSDVzYk1sZjBPVGdXVU5GUlBjZGtUeGdQdlBqV1pZWVAvMUdQVXdWMkE0LzVrUGxOckUxRE1jRzRJNWZkejNXbGtCZEJDOXQ4VG9PZ0h0c1dCM1djNmdpclNXWXc3LzBmTnRpeVZPQ3h
2024-04-25 12:54:21 UTC	1255	IN	Data Raw: 4d 61 58 5a 32 4b 31 49 33 4e 55 4e 57 63 45 46 77 4d 56 42 54 5a 31 64 76 61 30 64 75 61 46 56 56 54 32 34 30 55 33 63 7a 51 79 39 4d 51 6b 6c 57 65 55 35 48 53 46 46 43 4e 55 78 73 52 6b 35 6f 4e 30 6b 72 57 47 78 75 51 6b 70 6d 5a 32 46 72 5a 56 55 30 62 46 68 49 62 30 35 48 64 33 70 6f 64 55 5a 6d 64 6e 4a 72 57 47 51 30 5a 55 74 53 53 6d 56 47 65 47 4e 5a 64 47 31 73 62 47 52 77 61 56 56 45 5a 33 64 78 56 55 4a 79 4e 6b 5a 71 54 6e 6c 6f 52 57 6b 7a 63 33 6f 35 64 6a 4a 54 4f 58 68 43 59 33 51 77 53 7a 4d 79 52 48 70 48 62 55 64 76 64 6a 6c 76 52 58 64 6d 4e 6e 56 50 56 46 56 48 63 33 4e 43 52 6a 52 49 4c 7a 45 33 63 6d 70 54 55 45 6c 30 4d 55 34 77 63 31 70 4a 62 6e 6b 33 62 45 6c 72 51 6b 45 31 51 57 68 56 55 30 68 54 4c 7a 4a 6e 57 6e 51 34 55 6a Data Ascii: MaXZ2K1I3NUNWcEFwMVBTZ1dva0duaFVVT240U3czQy9MQklWeU5HSFFCNUxsRk5oN0krWGxuQkpmZ2FrZVU0bFhIb05Hd3podUZmdnJrWGQ0ZUtSSmVGeGNZdG1sbGRwaVVEZ3dxVUJyNkZqTnloRWkzc3o5djJTOXhCY3QwSzMyRHpHbUdvdjlvRXdmNnVPVFVHc3NCRjRILzE3cmpTUEl0MU4wc1pJbnk3bElrQkE1QWhVU0hTLzJnWnQ4Uj
2024-04-25 12:54:21 UTC	1255	IN	Data Raw: 5a 48 4e 6c 4e 76 65 47 63 79 53 55 35 52 63 6b 59 33 4d 58 68 32 55 7a 56 52 57 6d 34 79 51 30 39 4b 65 6e 70 6c 53 6e 6f 30 51 7a 67 35 64 45 64 71 59 31 68 48 57 55 4a 73 63 57 51 72 51 57 46 69 53 44 56 47 63 6b 70 58 4e 7a 4a 4c 55 6a 6c 6d 5a 69 74 52 61 44 56 69 64 6b 31 35 57 6b 4a 78 62 6a 68 70 4f 46 5a 6a 4e 6b 52 6a 61 6a 51 30 52 57 34 35 59 57 6c 72 55 31 46 75 61 32 31 73 57 56 46 42 61 32 5a 58 55 32 35 47 55 6e 6c 48 52 45 68 58 61 58 52 54 55 6d 30 7a 4d 6c 67 79 61 45 5a 6e 61 55 4a 73 4f 45 56 53 63 46 64 79 4d 46 6b 78 4d 31 70 56 64 56 46 76 62 56 68 55 5a 48 6c 52 52 47 46 45 52 6a 4e 44 62 44 4e 49 52 30 56 78 52 55 68 6e 56 33 46 36 5a 57 30 72 57 6a 52 32 56 33 42 5a 55 7a 55 78 54 30 74 42 52 54 56 33 4e 6d 4a 44 52 54 64 4b 4f Data Ascii: ZHNlNveGcySU5RckY3MXh2UzVRWm4yQ09KenplSno0Qzg5dEdqY1hHWUJscWQrQWFiSDVGckpXNzJLUjlmZitRaDVidk15WkJxbjhpOFZjNkRjajQ0RW45YWlrU1Fua21sWVFBa2ZXU25GUnlHREhXaXRTUm0zMlgyaEZnaUJsOEVScFdyMFkxM1pVdVFvbVhUZHlRRGFERjNDbDNIR0VxRUhnV3F6ZW0rWjR2V3BZUzUxT0tBRTV3NmJDRTdKO
2024-04-25 12:54:21 UTC	1255	IN	Data Raw: 47 39 6c 5a 33 56 6e 53 6b 68 58 59 54 49 31 56 48 46 6f 5a 79 39 46 63 46 68 75 56 44 4d 7a 63 45 64 4d 5a 54 52 45 54 6b 64 48 54 47 4a 33 54 46 41 72 55 6a 5a 71 65 6c 55 33 61 6d 77 77 4d 45 6c 4a 51 30 78 4f 63 30 6c 43 59 6a 42 49 56 7a 52 69 64 7a 4e 70 52 57 34 76 64 46 6f 33 54 56 56 58 59 32 4a 77 4e 48 4d 34 64 30 39 56 57 47 52 34 56 6b 73 30 56 6e 4a 45 52 6a 4e 4b 5a 54 5a 77 53 55 46 4f 4c 7a 6c 57 62 31 46 4e 56 33 52 31 52 30 78 4b 65 69 39 70 65 44 64 6d 65 6b 56 4b 65 46 46 59 63 6b 64 43 65 56 70 4b 55 30 39 59 59 31 64 6f 63 6e 6c 5a 61 55 45 78 63 44 52 6b 55 33 4a 57 54 56 46 69 65 6b 46 50 54 46 41 78 61 6b 56 30 57 6b 46 4b 59 57 4e 31 5a 32 39 44 61 79 38 33 53 6b 68 43 53 6b 52 48 63 44 64 55 57 54 6c 42 53 6a 68 72 52 57 35 78 Data Ascii: G9lZ3VnSkhXYTI1VHFoZy9FcFhuVDMzcEdMZTRETkdHTGJ3TFArUjZqelU3amwwMElJQ0xOc0lCYjBIVzRidzNpRW4vdFo3TVVXY2JwNHM4d09VWGR4Vks0VnJERjNKZTZwSUFOLzlWb1FNV3R1R0xKei9peDdmekVKeFFYckdCeVpKU09YY1docnlZaUExcDRkU3JWTVFiekFPTFAxakV0WkFKYWN1Z29Day83SkhCSkRHcDdUWTlBSjhrRW5x
2024-04-25 12:54:21 UTC	1255	IN	Data Raw: 54 7a 56 4d 5a 6e 6b 31 65 45 78 6e 65 47 6c 32 57 47 70 6e 4d 33 6b 79 51 6e 52 49 55 58 6c 5a 62 54 4e 57 54 30 4e 6d 5a 6d 59 79 53 44 41 72 55 6d 46 59 59 32 4e 6a 64 47 34 72 63 6c 4a 4b 4d 56 42 73 4f 46 70 49 5a 55 46 54 4e 33 70 71 55 48 56 57 5a 32 77 35 4d 6b 52 5a 53 57 31 77 5a 6d 49 33 62 69 39 6a 4e 7a 5a 47 56 30 56 34 54 30 78 52 61 56 4e 44 62 32 31 58 53 32 52 61 52 7a 56 79 55 33 42 30 53 55 68 52 53 45 4e 71 56 33 5a 70 52 55 78 44 4d 57 56 74 61 32 56 4b 5a 6e 52 5a 52 30 56 6b 62 54 4a 78 52 6b 56 61 61 56 52 6c 61 57 64 7a 63 6a 6c 71 62 6e 68 34 63 47 46 6f 5a 56 45 78 53 6e 51 34 52 45 45 35 4e 33 42 75 4b 7a 5a 49 55 44 4a 30 55 48 67 72 4e 6b 34 31 62 55 6c 4e 56 54 56 55 63 46 52 73 64 48 68 53 56 48 64 6e 65 6e 4e 6c 51 6d 68 Data Ascii: TzVMZnk1eExneGl2WGpnM3kyQnRIUXlZbTNWT0NmZmYySDArUmFYY2NjdG4rclJKMVBsOFpIZUFTN3pqUHVWZ2w5MkRZSW1wZmI3bi9jNzZGV0V4T0xRaVNDb21XS2RaRzVyU3B0SUhRSENqV3ZpRUxDMWVta2VKZnRZR0VkbTJxRkVaaVRlaWdzcjlqbnh4cGFoZVExSnQ4REE5N3BuKzZIUDJ0UHgrNk41bUlNVTVUcFRsdHhSVHdnenNlQmh
2024-04-25 12:54:21 UTC	1255	IN	Data Raw: 69 4d 6c 56 30 4d 47 46 51 63 44 68 4b 5a 30 55 7a 64 6c 6c 47 52 45 68 54 65 43 74 33 53 30 59 33 54 43 74 30 62 48 41 35 65 57 31 47 4d 48 52 42 59 31 64 53 61 33 6f 31 4e 58 52 76 63 48 63 79 56 48 70 4e 53 56 4a 48 51 7a 64 78 52 6c 56 5a 4e 30 6f 32 51 32 56 6d 62 31 64 49 65 57 78 4d 53 33 49 79 4d 43 74 6f 59 6a 46 5a 4e 45 52 75 64 45 52 74 62 6a 63 76 63 47 5a 54 61 6c 51 34 59 55 4a 50 63 30 6f 76 55 6a 5a 77 52 55 74 68 5a 54 42 58 63 54 4d 35 62 6d 4e 33 51 6c 4e 6d 61 7a 4a 34 61 55 74 51 63 57 39 4f 52 47 4a 58 55 48 46 42 64 55 78 6e 52 55 78 79 56 6b 46 5a 4d 33 70 32 63 30 74 7a 57 47 63 34 57 57 4d 33 4d 48 42 70 51 58 42 53 5a 47 39 77 5a 6a 55 76 56 33 46 75 4d 54 5a 48 5a 53 74 43 4e 6d 46 6a 57 57 68 6c 64 58 46 73 56 31 70 43 5a 30 Data Ascii: iMlV0MGFQcDhKZ0UzdllGREhTeCt3S0Y3TCt0bHA5eW1GMHRBY1dSa3o1NXRvcHcyVHpNSVJHQzdxRlVZN0o2Q2Vmb1dIeWxMS3IyMCtoYjFZNERudERtbjcvcGZTalQ4YUJPc0ovUjZwRUthZTBXcTM5bmN3QlNmazJ4aUtQcW9ORGJXUHFBdUxnRUxyVkFZM3p2c0tzWGc4WWM3MHBpQXBSZG9wZjUvV3FuMTZHZStCNmFjWWhldXFsV1pCZ0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49892	64.233.185.103	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:20 UTC	858	OUT	GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&_u=YEBAAEAAAAAAACgDI~&z=1513772729 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:21 UTC	539	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 12:54:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49894	172.253.124.155	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:21 UTC	618	OUT	GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&gjid=1174901316&_gid=2015979708.1714049658&_u=YEBAAEAAAAAAACgDI~&z=1088505056 HTTP/1.1 Host: stats.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 12:54:21 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=10886400; includeSubDomains; preload Date: Thu, 25 Apr 2024 12:54:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Last-Modified: Sun, 17 May 1998 03:00:00 GMT X-Content-Type-Options: nosniff Content-Type: text/plain Cross-Origin-Resource-Policy: cross-origin Server: Golfe2 Content-Length: 2 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:21 UTC	2	IN	Data Raw: 31 67 Data Ascii: 1g

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49895	64.233.177.113	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:21 UTC	1049	OUT	GET /_/PlayStoreUi/browserinfo?f.sid=4639271897183098544&bl=boq_playuiserver_20240423.08_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=53660&rt=j HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320; _gid=GA1.3.2015979708.1714049658; _gat_UA199959031=1; _gcl_au=1.1.316331430.1714049659; _ga=GA1.1.1041261354.1714049658; _ga_6VGGZHMLM2=GS1.1.1714049660.1.0.1714049660.0.0.0
2024-04-25 12:54:21 UTC	1139	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 12:54:21 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/PlayStoreUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:21 UTC	116	IN	Data Raw: 38 33 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 39 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 38 2c 22 2d 33 37 34 34 34 31 38 35 36 33 30 32 35 33 34 39 31 34 34 22 2c 31 31 30 5d 2c 5b 22 65 22 Data Ascii: 83)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",9],["af.httprm",8,"-3744418563025349144",110],["e"
2024-04-25 12:54:21 UTC	21	IN	Data Raw: 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 31 5d 5d 5d 0d 0a Data Ascii: ,4,null,null,131]]]
2024-04-25 12:54:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49896	64.233.185.103	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:21 UTC	878	OUT	GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _GRECAPTCHA=09AKPP-6e9yL7wY6iHFACKg90WZCD294_4lvVJQqNIh102J0IKsaKHO18AtQyGEwi0B5rNoPBEc_W-r5s3PSTf3go; 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
2024-04-25 12:54:21 UTC	518	IN	HTTP/1.1 405 HTTP method GET is not supported by this URL Content-Type: text/html; charset=UTF-8 Date: Thu, 25 Apr 2024 12:54:21 GMT Expires: Thu, 25 Apr 2024 12:54:21 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:21 UTC	244	IN	Data Raw: 65 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 48 54 54 50 20 6d 65 74 68 6f 64 20 47 45 54 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 20 62 79 20 74 68 69 73 20 55 52 4c 3c 2f 48 31 3e 0a 3c 48 32 3e 45 72 72 6f 72 20 34 30 35 3c 2f 48 32 3e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ee<HTML><HEAD><TITLE>HTTP method GET is not supported by this URL</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>HTTP method GET is not supported by this URL</H1><H2>Error 405</H2></BODY></HTML>
2024-04-25 12:54:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49898	13.107.246.40	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:23 UTC	914	OUT	GET /completeRedirect/-crYd9Lj?correlationId=a8a29aa0bd0ef81202324dbb48c51c9f&platformSelected=iOS HTTP/1.1 Host: krs.microsoft.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
2024-04-25 12:54:24 UTC	471	IN	HTTP/1.1 302 Found Date: Thu, 25 Apr 2024 12:54:23 GMT Content-Length: 0 Connection: close Location: https://apps.apple.com/us/app/id951937596?referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj Strict-Transport-Security: max-age=2592000 Request-Context: appId=cid-v1:21c5cddf-c4b1-44ff-854e-6e2d0ac6af45 x-azure-ref: 20240425T125423Z-16f56cb894fbfb7s01cn307u5w00000003n000000000bgf9 X-Cache: CONFIG_NOCACHE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49976	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:36 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GZoCnrt2d65Vk+w&MD=BKNv2Sed HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-25 12:54:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 3a14c72a-c268-454b-ba47-b7b2b7cef5b2 MS-RequestId: ce4990ff-882b-435b-bfb9-5adb879b9ad5 MS-CV: E+p0uDOBsE69Qt/k.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 12:54:37 GMT Connection: close Content-Length: 25457
2024-04-25 12:54:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-25 12:54:37 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49982	172.217.215.100	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:51 UTC	1591	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1026 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://play.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://play.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320; _gid=GA1.3.2015979708.1714049658; _gat_UA199959031=1; _gcl_au=1.1.316331430.1714049659; _ga=GA1.1.1041261354.1714049658; _ga_6VGGZHMLM2=GS1.1.1714049660.1.0.1714049660.0.0.0; OTZ=7529094_48_52_123900_48_436380
2024-04-25 12:54:51 UTC	1026	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 70 6c 61 79 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 34 32 33 2e 30 38 5f 70 30 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 38 34 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_playuiserver_20240423.08_p0",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1884,
2024-04-25 12:54:52 UTC	934	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://play.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=B-KR1Pm7ww9r5orDhpn4D-iyA0k3yePsqHcCVG6JD6gOR-AV85YSrd32PvjsQvY3rho5njC3rfmnYqTI4QzjtJbZK8kMqx-vI4ESla6hnp1fxRPiJGW-lekC28wnQaX7UbjSVEHOARktCgYr9U6YFBxrnrd-wf3wnzOSxcyiDdEguv0bbQL7VsgO; expires=Fri, 25-Oct-2024 12:54:52 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 25 Apr 2024 12:54:52 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 12:54:52 GMT Connection: close Transfer-Encoding: chunked
2024-04-25 12:54:52 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-25 12:54:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49983	64.233.177.113	443	5440	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 12:54:52 UTC	975	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; _gid=GA1.3.2015979708.1714049658; _gat_UA199959031=1; _gcl_au=1.1.316331430.1714049659; _ga=GA1.1.1041261354.1714049658; _ga_6VGGZHMLM2=GS1.1.1714049660.1.0.1714049660.0.0.0; OTZ=7529094_48_52_123900_48_436380; NID=513=B-KR1Pm7ww9r5orDhpn4D-iyA0k3yePsqHcCVG6JD6gOR-AV85YSrd32PvjsQvY3rho5njC3rfmnYqTI4QzjtJbZK8kMqx-vI4ESla6hnp1fxRPiJGW-lekC28wnQaX7UbjSVEHOARktCgYr9U6YFBxrnrd-wf3wnzOSxcyiDdEguv0bbQL7VsgO
2024-04-25 12:54:52 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 25 Apr 2024 12:54:52 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 12:54:52 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-25 12:54:52 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Target ID:	0
Start time:	14:53:36
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\ATT00002.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:53:39
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1976 --field-trial-handle=2012,i,9608964629998709726,7678094856405373894,262144 /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high
Has exited:	false

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: ATT00002.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/ATT00002.html	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM	HTTP Parser: No favicon
Source: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=YyDnde3O9WYNuQVVY5g6-6dWdo0pEVC326lgJyDqJyqMH_ikw1360j7nEupoaiGuIsvVy42dd51Ct6aRPH9IzbjQ_BviMQQRgQyHgM_AVVXnCCWjWQCqjbjCZPQ5vuHaVZ9yreHO-QXNi1RG3cwsHEFlRH5amkj4GDO5zULH0Lm98oOx9sWiGXabv7eLQR8PhbmSQV-8qOcvZX1GFVxcZTu0T7EJaJPxFFjK6zgmNygiatJIqoVJlRTf_L1ro06FNWAV3U2dyRk5bQnIcu3UBMvy0IiFWjo&cb=zeozwrjmm3s0	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=9st82i90u303	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/microsoft-outlook/id951937596?referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj	HTTP Parser: No favicon

Source: Joe Sandbox View	IP Address: 13.107.246.41 13.107.246.41
Source: Joe Sandbox View	IP Address: 13.107.246.41 13.107.246.41
Source: Joe Sandbox View	IP Address: 13.107.246.40 13.107.246.40
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /o0ukef HTTP/1.1Host: aka.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /krs?id=-crYd9Lj HTTP/1.1Host: aka.msConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /redirect?id=-crYd9Lj HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE
Source: global traffic	HTTP traffic detected: GET /css/styles.css HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://krs.microsoft.com/redirect?id=-crYd9LjAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/GooglePlayStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=-crYd9LjAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/AppleAppStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/redirect?id=-crYd9LjAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://krs.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GZoCnrt2d65Vk+w&MD=BKNv2Sed HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/GooglePlayStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /images/AppleAppStoreBadge.png HTTP/1.1Host: krs.microsoft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /search?q=d+and+cafe&oq=D+and+Cafe&aqs=chrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=YyDnde3O9WYNuQVVY5g6-6dWdo0pEVC326lgJyDqJyqMH_ikw1360j7nEupoaiGuIsvVy42dd51Ct6aRPH9IzbjQ_BviMQQRgQyHgM_AVVXnCCWjWQCqjbjCZPQ5vuHaVZ9yreHO-QXNi1RG3cwsHEFlRH5amkj4GDO5zULH0Lm98oOx9sWiGXabv7eLQR8PhbmSQV-8qOcvZX1GFVxcZTu0T7EJaJPxFFjK6zgmNygiatJIqoVJlRTf_L1ro06FNWAV3U2dyRk5bQnIcu3UBMvy0IiFWjo&cb=zeozwrjmm3s0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=YyDnde3O9WYNuQVVY5g6-6dWdo0pEVC326lgJyDqJyqMH_ikw1360j7nEupoaiGuIsvVy42dd51Ct6aRPH9IzbjQ_BviMQQRgQyHgM_AVVXnCCWjWQCqjbjCZPQ5vuHaVZ9yreHO-QXNi1RG3cwsHEFlRH5amkj4GDO5zULH0Lm98oOx9sWiGXabv7eLQR8PhbmSQV-8qOcvZX1GFVxcZTu0T7EJaJPxFFjK6zgmNygiatJIqoVJlRTf_L1ro06FNWAV3U2dyRk5bQnIcu3UBMvy0IiFWjo&cb=zeozwrjmm3s0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=YyDnde3O9WYNuQVVY5g6-6dWdo0pEVC326lgJyDqJyqMH_ikw1360j7nEupoaiGuIsvVy42dd51Ct6aRPH9IzbjQ_BviMQQRgQyHgM_AVVXnCCWjWQCqjbjCZPQ5vuHaVZ9yreHO-QXNi1RG3cwsHEFlRH5amkj4GDO5zULH0Lm98oOx9sWiGXabv7eLQR8PhbmSQV-8qOcvZX1GFVxcZTu0T7EJaJPxFFjK6zgmNygiatJIqoVJlRTf_L1ro06FNWAV3U2dyRk5bQnIcu3UBMvy0IiFWjo&cb=zeozwrjmm3s0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3Dd%2Band%2Bcafe%26oq%3DD%2Band%2BCafe%26aqs%3Dchrome.0.0i512j0i22i30i395j0i15i22i30i395j0i22i30i395l2j69i60j69i61l2.3367j1j7%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgS5mELmGOekqbEGIjBAGAs3AWTaAFT7zsY4ASMG5IjmnAcUkMBr1XvJeDRvACZ-H3WnuS2RtESotZzX6AwyAXJaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /completeRedirect/-crYd9Lj?correlationId=a8a29aa0bd0ef81202324dbb48c51c9f&platformSelected=Android HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /store/apps/details?id=com.microsoft.office.outlook&referrer=kmas_id%253d8056fe16-66ff-f9ba-9c4f-864fbc9f1920%2526ocid%253dcmmowokyo5v%2526rid%253d-crYd9Lj HTTP/1.1Host: play.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GVRLt5tJktN6GFBwYGTwYCxM4ZfzLOiNmHVAxn005vtwHTl6UU_H1j41YB2jqkzzBkg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /JNx-IkOV70MpfhAk2IFgDiOhy1y5vtAM7R0FQUHauXEwj-N5Eb-Y1FVHMGrABhdvrY8=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /R_sK5aIekdUHjCXTorJDrpp0Fv-Z163nwKgPYxgzkSBcaA7RLsdE8seBKUB6TLpDzw=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13eRoJ6pOfZXh47PB_JP9Xboa5dtsJEp6kRoFfIiJhvL5fBjF7UL5-9_rZNUZDAKEZY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pCeuuqjXDTifvlSIJbi16A7v53-2iAR2nReOYLl01T9-Pc8XPCYXV69Z6OXw4AJuEEK_=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hPuCthxxi-CvjKqD3dlWChReythzmSLsUFK-QN76a6r3XkoaPXbY8xnPbBUYGhXP=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Zk9elS0eGXDr0L4W6-Ey7YwHbRNjkyezHC8iCc8rWp64lNIjlByS8TDF9qDSZbiEWY4=w240-h480-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WUXO8KU3W1V_5Dyt6-vf0Fy5IzWCoBnhrwHNaWYFn0xe1vblJtr4M_VposQMKb0Q-U=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bKscbGXwtOqxpKrahaQiA6pZUx19uxbeaBRX7a_GhQIhTM7efEa9timfoTCi5IahOA=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jKU64njy8urP89V1O63eJxMtvWjDGETPlHVIhDv9WZAYzsSxRWyWZkUlBJZj_HbkHA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_1CV99jklLbXuun-6E7eCPR-sKKeZc602rhw_QHZz-qm7xrPdgWsJVc7NtFkkliI8No=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /VYvJqGnrQiKkbbyLyMeiL-GM3go4tBIA64uVEGQazLXD4p_M3F45kHyt42o_6d5VXA=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kmxAt02yG8Hp-TzZHDoRGFtB70QFz7njpWQzQp8KANztd-DozlJipu8tprSn80Q8pw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /IciOnDFecb5Xt50Q2jlcNC0LPI7LEGxNojroo-s3AozcyS-vDCwtq4fn7u3wZmRna8OewG9PBrWC-i7i=w48-h16-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjXu_LA0yHlVyZP-9D4A1_oAR5qpsouGW-A4uLCPF6Kh5IVQKX8=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Ef8yF68h5PN5OmgcJ7CKpdWKzy30yr8WARHh7K_sk8_t8VCMrHGEQCesVwz5em_W3OY=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /NbRuGWyH1bodqBICeVAAgwM8Gfr8cZDW3LMtIdsSGtiO1WGvh_9qHrdDmDXWyNSKjYM=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Kxy-pmgAqC1CqO_Qpke7zdZ4ca1UR9cUFp_ovRZNcGtzJ1QWJJrNEcKQc_Xbbatbfw63=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_WDKdMcdBCXCOaVgaAW532JLksW04VJx50FMjI1h-fI5Lf7fEyFo8YswHbvVuoixdg=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /n9XA29r3awZGfISZAGmAd_e6KzsOxZpU64wdyTahWW76vRgaAyoPHOYJSN-w68Ri0uI=w526-h296-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /iFstqoxDElUVv4T3KxkxP3OTcuFvWF5ZQQjT7aIxy4n2uaVigCCykxeG6EZV9FQ10X1itPj1oORm=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /12USW7aflgz466ifDehKTnMoAep_VHxDmKJ6jEBoDZWCSefOC-ThRX14Mqe0r8KF9XCzrpMqJts=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /W5DPtvB8Fhmkn5LbFZki_OHL3ZI1Rdc-AFul19UK4f7np2NMjLE5QquD6H0HAeEJ977u3WH4yaQ=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ohRyQRA9rNfhp7xLW0MtW1soD8SEX45Oec7MyH3FaxtukWUG_6GKVpvh3JiugzryLi7Bia02HPw=s20-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjXu_LA0yHlVyZP-9D4A1_oAR5qpsouGW-A4uLCPF6Kh5IVQKX8=s32-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nP2a6TMB-96l-qVzKuJ1I9rXsFATyw7pCM-ZVvnUuZqA3Q2kuPUitqOxG9Q8moSOijlz=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /hihXCV-0wxOXB5N7uBREaJeCVK0BDjNEBtKwNAncftZMflpEvasiKXn7vCKxu9qGpvk=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?trustedtypes=true&render=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /tools/feedback/chat_load.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /AbbckPwXir54znQLkxMunKYPvoSW68gTZWZsx6URWlB-t_kUXZAvQOj8t4gnIncokVM=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94uR6O49JmqiMMMsrfoDlWvWkqLf6rfE25zOH2BWnuzozzlfY1qnKaNzuQbUcupcpX9L=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /37EzETO6gZyKmCg2kBIFX1e9gkubxZrVa5fHJ6yOaa7VvEShHjKv2RdtwnZt9Sk258s=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6AWr-qrhGT0ohjw0koq3bM8GHEFg1gTurald4FjCDg2RulTp4y_VVsYWUtw7Fo6lsQo=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /YtGn2T9ADy5Hs4cKVoDgGb7fPuMkdXVcszVE1oiozfE4AxhDNq0RkwajYs1FxcrMDpw=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /BkRfMfIRPR9hUnmIYGDgHHKjow-g18-ouP6B2ko__VnyUHSi1spcc78UtZ4sVUtBH4g=s64-rw HTTP/1.1Host: play-lh.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0&co=aHR0cHM6Ly9wbGF5Lmdvb2dsZS5jb206NDQz&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=invisible&cb=9st82i90u303 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&_u=YEBAAEAAAAAAACgDI~&z=1513772729 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCJDKzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://play.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&_u=YEBAAEAAAAAAACgDI~&z=1513772729 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-19995903-1&cid=1041261354.1714049658&jid=1991548453&gjid=1174901316&_gid=2015979708.1714049658&_u=YEBAAEAAAAAAACgDI~&z=1088505056 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/PlayStoreUi/browserinfo?f.sid=4639271897183098544&bl=boq_playuiserver_20240423.08_p0&hl=en-US&authuser&soc-app=121&soc-platform=1&soc-device=1&_reqid=53660&rt=j HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320; _gid=GA1.3.2015979708.1714049658; _gat_UA199959031=1; _gcl_au=1.1.316331430.1714049659; _ga=GA1.1.1041261354.1714049658; _ga_6VGGZHMLM2=GS1.1.1714049660.1.0.1714049660.0.0.0
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/reload?k=6LcA2tEZAAAAAJj7FTYTF9cZ4NL3ShgBCBfkWov0 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AKPP-6e9yL7wY6iHFACKg90WZCD294_4lvVJQqNIh102J0IKsaKHO18AtQyGEwi0B5rNoPBEc_W-r5s3PSTf3go; 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; NID=513=LQivrLzxUaT9CWN025rFvozaSMBrCtBRKUqFwhLgr9VwJEvIBUCS0y56TmlExvzUQpL1aDiUsVbOXH0UneX3RHFBtsncZj6SzUeau_WFDes2lm9GRPp8hN5V-lFSt_3mALyPgTwZmUJp8s_gMP3j-8syGF3aMsV2gLWYCe9g320
Source: global traffic	HTTP traffic detected: GET /completeRedirect/-crYd9Lj?correlationId=a8a29aa0bd0ef81202324dbb48c51c9f&platformSelected=iOS HTTP/1.1Host: krs.microsoft.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: MC1=GUID=749eee6039c5489b9db3000c7ab3f399&HASH=749e&LV=202310&V=4&LU=1696413236917; MUID=375E6F2E0D8F6B9C2CEB7C8E098F6DFE; TiPMix=69.17850569958948; x-ms-routing-name=self
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=GZoCnrt2d65Vk+w&MD=BKNv2Sed HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-25-12; AEC=AQTF6HyJvirUqnM2Hi29XDqRAQLgjd89thSw2eBmi07ro5GziEgXx73RT6c; _gid=GA1.3.2015979708.1714049658; _gat_UA199959031=1; _gcl_au=1.1.316331430.1714049659; _ga=GA1.1.1041261354.1714049658; _ga_6VGGZHMLM2=GS1.1.1714049660.1.0.1714049660.0.0.0; OTZ=7529094_48_52_123900_48_436380; NID=513=B-KR1Pm7ww9r5orDhpn4D-iyA0k3yePsqHcCVG6JD6gOR-AV85YSrd32PvjsQvY3rho5njC3rfmnYqTI4QzjtJbZK8kMqx-vI4ESla6hnp1fxRPiJGW-lekC28wnQaX7UbjSVEHOARktCgYr9U6YFBxrnrd-wf3wnzOSxcyiDdEguv0bbQL7VsgO

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: aka.ms
Source: global traffic	DNS traffic detected: DNS query: play-lh.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: is1-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is2-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is5-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is4-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is3-ssl.mzstatic.com

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.62.93
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 13.85.23.86
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103

Source: chromecache_270.2.dr	String found in binary or memory: "https://www.facebook.com/AppStore/" equals www.facebook.com (Facebook)
Source: chromecache_270.2.dr	String found in binary or memory: <p dir="false" data-test-bidi>Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.<br /><br />Here's what you'll love about Outlook for iOS:<br /><br />- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.<br /><br />- Swipe to quickly schedule, delete and archive messages.<br /><br />- Share your meeting availability with just a tap and easily find times to meet with others.<br /><br />- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.<br /><br />- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.<br /><br />- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.<br /><br />--<br /><br />Outlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.<br /><br />--<br /><br />To make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.<br /><br />Microsoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.<br /><br />Privacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839<br />Terms of Use: http://go.microsoft.com/fwlink/?LinkID=530144<br />Contract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary</p> equals www.hotmail.com (Hotmail)
Source: chromecache_270.2.dr	String found in binary or memory: <p dir="false" data-test-bidi>Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.<br /><br />Here's what you'll love about Outlook for iOS:<br /><br />- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.<br /><br />- Swipe to quickly schedule, delete and archive messages.<br /><br />- Share your meeting availability with just a tap and easily find times to meet with others.<br /><br />- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.<br /><br />- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.<br /><br />- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.<br /><br />--<br /><br />Outlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.<br /><br />--<br /><br />To make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.<br /><br />Microsoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.<br /><br />Privacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839<br />Terms of Use: http://go.microsoft.com/fwlink/?LinkID=530144<br />Contract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary</p> equals www.yahoo.com (Yahoo)
Source: chromecache_270.2.dr	String found in binary or memory: 2024 Microsoft Corporation. All rights reserved.\",\"description\":{\"standard\":\"Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.\\n\\nHere's what you'll love about Outlook for iOS:\\n\\n- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.\\n\\n- Swipe to quickly schedule, delete and archive messages.\\n\\n- Share your meeting availability with just a tap and easily find times to meet with others.\\n\\n- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.\\n\\n- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.\\n\\n- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.\\n\\n--\\n\\nOutlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.\\n\\n--\\n\\nTo make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.\\n\\nMicrosoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.\\n\\nPrivacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839\\nTerms of Use: http://go.microsoft.com/fwlink/?LinkID=530144\\nContract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary\"},\"isStandaloneWithCompanionForWatchOS\":false,\"is32bitOnly\":false,\"isAppleWatchSupported\":true,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"versionHistory\":[{\"versionDisplay\":\"4.2415.0\",\"releaseNotes\":\"This update includes performance improvements and bug fixes to make Outlook better for you.\\n\\nFeel free to send us any comments or questions by going to Settings \u003e Help \u0026 Feedback equals www.hotmail.com (Hotmail)
Source: chromecache_270.2.dr	String found in binary or memory: 2024 Microsoft Corporation. All rights reserved.\",\"description\":{\"standard\":\"Outlook lets you bring all your email accounts and calendars in one convenient spot. Whether it's staying on top of your inbox or scheduling the next big thing, we make it easy to be your most productive, organized, and connected self.\\n\\nHere's what you'll love about Outlook for iOS:\\n\\n- Focus on the right things with our smart inbox - we help you sort between messages you need to act on straight away and everything else.\\n\\n- Swipe to quickly schedule, delete and archive messages.\\n\\n- Share your meeting availability with just a tap and easily find times to meet with others.\\n\\n- Find everything you're looking for with our new search experience, including files, contacts, and your upcoming trips.\\n\\n- View and attach any file from your email, OneDrive, Dropbox, and more, without having to download them to your phone.\\n\\n- Open Word, Excel, or other Office document attachments to edit them directly in the corresponding app and attach them back to an email.\\n\\n--\\n\\nOutlook for iOS works with Microsoft Exchange, Office 365, Outlook.com (including Hotmail and MSN), Gmail, Yahoo Mail, and iCloud.\\n\\n--\\n\\nTo make an in-app purchase of a Microsoft 365 Family or Personal subscription, open the app, go to Settings, and tap on Upgrade next to your Outlook.com or Hotmail.com account. Subscriptions begin at $6.99 a month in the US, and can vary by region. With a Microsoft 365 subscription, you get 1TB of storage for each user, access to all features in Word, Excel, and PowerPoint on iPad, iPhone, and iPod touch, and you can install Word, Excel, PowerPoint, Outlook and OneNote on PCs or Macs.\\n\\nMicrosoft 365 subscriptions purchased from the app will be charged to your iTunes account and will automatically renew within 24 hours prior to the end of the current subscription period, unless auto-renewal is disabled beforehand. To manage your subscriptions or to disable auto-renewal, after purchase, go to your iTunes account settings. A subscription cannot be cancelled during the active subscription period. Any unused portion of a free trial period, if offered will be forfeited when the user purchases a subscription to that publication, where applicable.\\n\\nPrivacy and Cookies: https://go.microsoft.com/fwlink/?LinkId=521839\\nTerms of Use: http://go.microsoft.com/fwlink/?LinkID=530144\\nContract Summary: https://www.microsoft.com/microsoft-365/outlook/contract-summary\"},\"isStandaloneWithCompanionForWatchOS\":false,\"is32bitOnly\":false,\"isAppleWatchSupported\":true,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"versionHistory\":[{\"versionDisplay\":\"4.2415.0\",\"releaseNotes\":\"This update includes performance improvements and bug fixes to make Outlook better for you.\\n\\nFeel free to send us any comments or questions by going to Settings \u003e Help \u0026 Feedback equals www.yahoo.com (Yahoo)
Source: chromecache_270.2.dr	String found in binary or memory: expertise, research, and best practices.\\n\\nSecurity is our top priority:\\nWhether you use myMail on a public or private Wi-Fi network, your data is always encrypted to protect all your email communications and information. myMail uses advanced security protocols and practices to ensure data integrity, security, and privacy.\\n\\nmyMail uses AdChoices. More information can be found here https://m.facebook.com/ads/ad_choices \\n\\nFollow us on social media:\\nFacebook: www.facebook.com/mymail.official\"},\"isStandaloneWithCompanionForWatchOS\":false,\"isAppleWatchSupported\":false,\"requiredCapabilitiesForRealityDevice\":\"arm64 \",\"websiteUrl\":\"http://mymail.my.com\",\"versionHistory\":[{\"versionDisplay\":\"14.79\",\"releaseNotes\":\"Some cosmetic changes before a major update.\",\"releaseDate\":\"2024-04-24\",\"releaseTimestamp\":\"2024-04-24T07:30:13Z\"},{\"versionDisplay\":\"14.78.1\",\"releaseNotes\":\"We fixed bugs. Now you'll encounter even fewer of them.\",\"releaseDate\":\"2024-04-18\",\"releaseTimestamp\":\"2024-04-18T16:56:33Z\"},{\"versionDisplay\":\"14.78\",\"releaseNotes\":\"Fewer bugs means better karma. That's why we fixed some bugs in the new version.\",\"releaseDate\":\"2024-04-16\",\"releaseTimestamp\":\"2024-04-16T11:14:10Z\"},{\"versionDisplay\":\"14.77\",\"releaseNotes\":\"Some cosmetic changes before a major update.\",\"releaseDate\":\"2024-04-09\",\"releaseTimestamp\":\"2024-04-09T07:33:56Z\"},{\"versionDisplay\":\"14.76\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-04-03\",\"releaseTimestamp\":\"2024-04-03T07:21:02Z\"},{\"versionDisplay\":\"14.75.0\",\"releaseNotes\":\"We always listen to your feedback and fix the problems you report. That's just what we've done in this version.\",\"releaseDate\":\"2024-03-27\",\"releaseTimestamp\":\"2024-03-27T07:09:57Z\"},{\"versionDisplay\":\"14.74\",\"releaseNotes\":\"Fewer bugs means better karma. That's why we fixed some bugs in the new version.\",\"releaseDate\":\"2024-03-20\",\"releaseTimestamp\":\"2024-03-20T10:42:22Z\"},{\"versionDisplay\":\"14.71.0\",\"releaseNotes\":\"We continue to work on bugs. We've released routine fixes.\",\"releaseDate\":\"2024-02-27\",\"releaseTimestamp\":\"2024-02-27T08:03:39Z\"},{\"versionDisplay\":\"14.70\",\"releaseNotes\":\"We want to make Mail even more convenient and we never stop improving things. We believe that the new version has been a success. Update to check it out!\",\"releaseDate\":\"2024-02-21\",\"releaseTimestamp\":\"2024-02-21T09:47:59Z\"},{\"versionDisplay\":\"14.69\",\"releaseNotes\":\"Some cosmetic changes before a major update.\",\"releaseDate\":\"2024-02-14\",\"releaseTimestamp\":\"2024-02-14T07:17:02Z\"},{\"versionDisplay\":\"14.68\",\"releaseNotes\":\"We fixed bugs. Now you'll encounter even fewer of them.\",\"releaseDate\":\"2024-02-07\",\"releaseTimestamp\":\"2024-02-07T08:05:04Z\"},{\"versionDisplay\":\"14.67.0\",\"releaseNotes\":\"We continue to work on bugs.
Source: chromecache_285.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Qj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_285.2.dr	String found in binary or memory: c(S[ea],E.ye)){qI("https://www.youtube.com/iframe_api");t=!0;break}})}}else I(u.vtp_gtmOnSuccess)}var p=["www.youtube.com","www.youtube-nocookie.com"],q={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},r,t=!1;(function(u){Z.__ytl=u;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1;Z.__ytl.runInSiloedMode=!1})(function(u){u.vtp_triggerStartOption?n(u):dw(function(){n(u)})})}(); equals www.youtube.com (Youtube)
Source: chromecache_276.2.dr	String found in binary or memory: gf=u(["https://sandbox.google.com/tools/feedback/"]),hf=u(["https://www.google.cn/tools/feedback/"]),jf=u(["https://help.youtube.com/tools/feedback/"]),kf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),lf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),mf=u(["https://localhost.corp.google.com/inapp/"]),nf=u(["https://localhost.proxy.googlers.com/inapp/"]),of=S(Qe),pf=[S(Re),S(Se)],qf=[S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf)],rf=[S(cf),S(df)],sf= equals www.youtube.com (Youtube)
Source: chromecache_156.2.dr	String found in binary or memory: return a=n===l.CARD_DISPLAY_STYLES.appOfTheDay?_:n===l.CARD_DISPLAY_STYLES.gameOfTheDay?P:n===l.CARD_DISPLAY_STYLES.inAppPurchase?O:this.getTitleKey(e),this.i18n.t(a,{appName:r,storyTitle:i,_disableSafeString:!0})}getOGType(){return i.default.meta.og.type.story}getTwitterSite(){return this.appViewState.isMacAppStoreView?this.i18n.t("WEA.EditorialItemProductPages.Twitter.site.macOs",{_disableSafeString:!0}):super.getTwitterSite(...arguments)}getTwitterTitle(){return this.getOGTitle(...arguments)}getSchemaTags(e){const{product:t}=e.viewModel,r=E(t),[i]=r,n=(0,l.hasShelfDisplay)(i,"collectionLockup"),{lastPublishedDate:a}=t,o={"@type":"Organization",name:"Apple Inc",url:"http://www.apple.com",logo:{"@type":"ImageObject",url:"https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png"}},s=this.getOGImageTags(e).find((e=>"og:image"===e.name))\|\|{},p={"@context":"http://schema.org",name:this.getSeoTitle(e)??this.getTitle(e),description:this.getSeoDescription(e)??this.getDescription(e),image:s.content,author:o,publisher:o,headline:this.getOGTitle(e),dateModified:a,datePublished:a} equals www.twitter.com (Twitter)
Source: chromecache_186.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ATT00002.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Windows Analysis Report
ATT00002.html