Edit tour

Windows Analysis Report
https://sites.google.com/view/bxwfjmwxrlfpbzx/home

Overview

General Information

Sample URL:	https://sites.google.com/view/bxwfjmwxrlfpbzx/home
Analysis ID:	1431674
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5280 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,394641249472652949,15814636106023307811,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2956 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/bxwfjmwxrlfpbzx/home" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: Chrome DOM: 0.0

ML Model on OCR Text: Matched 96.9% probability on "Financiering WELKOM KUK HIEROMVERDER TEGAAN The Content Of this email is confidential and intended for the recipient specified in message o lily. It is Strictly forbidden to share part Of this message With any third party, Without a written Consent Of the sender. "

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49751 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49751 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.220.189.216
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /view/bxwfjmwxrlfpbzx/home HTTP/1.1Host: sites.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/client.js?onload=gapiLoaded HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
Source: global traffic	HTTP traffic detected: GET /_/view/logImpressions?authuser=0 HTTP/1.1Host: sites.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rHxr7GxsBsioYoLI9vB1VW6OXvmkH7oYcEOmOMOj-gH8fNgzG4sT3q_y5chkbLD6hl24eu5F2QWHBGi9jPVIYGwN-oHbCshpGnWFd7N6GuO4hnxq HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rHxr7GxsBsioYoLI9vB1VW6OXvmkH7oYcEOmOMOj-gH8fNgzG4sT3q_y5chkbLD6hl24eu5F2QWHBGi9jPVIYGwN-oHbCshpGnWFd7N6GuO4hnxq HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/view/logImpressions?authuser=0 HTTP/1.1Host: sites.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=iAvvB9p9WCKBhbFsvdxhMLLqOYX7dKtPobiygk-TZXbg__v2fbCCgM705ohWd2Vg4bXzMc5ZTpxfMf2SDSCaW2JHE_UnjP4Bfkcm-tIQ76XQTIjjgOcjNlrmuOG5_yGBbx3lqDpVBUC7FzZO7MBWVNOTd5RC18FmfGccDXfgVqo

Source: chromecache_98.2.dr

String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: sites.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: lh5.googleusercontent.com

Source: unknown

HTTP traffic detected: POST /_/view/logImpressions?authuser=0 HTTP/1.1Host: sites.google.comConnection: keep-aliveContent-Length: 3047sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: https://sites.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sites.google.com/view/bxwfjmwxrlfpbzx/homeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg

Source: chromecache_78.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_78.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_78.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_78.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_98.2.dr, chromecache_78.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_89.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_98.2.dr, chromecache_78.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_98.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_98.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_98.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_78.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_78.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_78.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_78.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_78.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_98.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_78.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_78.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_78.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_78.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_78.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_98.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_98.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LIftL.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LJftLp_A.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LLPtLp_A.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LL_tLp_A.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LLvtLp_A.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LT_tLp_A.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LXftLp_A.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuM2T7I-NP.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuM3b7I-NP.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMw77I-NP.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwT7I-NP.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwX7I-NP.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwf7I-NP.woff2)
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlM-vWjMY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMOvWjMY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMevWjMY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMuvWjMY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlOevWjMY.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2)
Source: chromecache_93.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPuvWjMY.woff2)
Source: chromecache_98.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_89.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_98.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_78.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_98.2.dr, chromecache_78.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_89.2.dr	String found in binary or memory: https://rapid.corp.google.com/
Source: chromecache_89.2.dr	String found in binary or memory: https://scriptz.corp.google.com/
Source: chromecache_88.2.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/no_results_error.png
Source: chromecache_78.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_98.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_88.2.dr	String found in binary or memory: https://support.google.com/cloudsearch/answer/6172299
Source: chromecache_98.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_89.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_98.2.dr, chromecache_78.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_89.2.dr	String found in binary or memory: https://workspace.google.com/products/sites/
Source: chromecache_98.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_98.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_78.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_78.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_78.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_98.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_98.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.220.189.216:443 -> 192.168.2.5:49739 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@16/51@16/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,394641249472652949,15814636106023307811,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/bxwfjmwxrlfpbzx/home"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,394641249472652949,15814636106023307811,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sites.google.com/view/bxwfjmwxrlfpbzx/home	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
plus.l.google.com	142.250.105.101	true	false	high
play.google.com	172.253.124.100	true	false	high
sites.google.com	64.233.176.101	true	false	high
www.google.com	172.253.124.104	true	false	high
googlehosted.l.googleusercontent.com	172.253.124.132	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
lh5.googleusercontent.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://sites.google.com/_/view/logImpressions?authuser=0	false	high
https://lh5.googleusercontent.com/rHxr7GxsBsioYoLI9vB1VW6OXvmkH7oYcEOmOMOj-gH8fNgzG4sT3q_y5chkbLD6hl24eu5F2QWHBGi9jPVIYGwN-oHbCshpGnWFd7N6GuO4hnxq	false	high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	high
https://sites.google.com/view/bxwfjmwxrlfpbzx/home	false	high
https://apis.google.com/js/client.js?onload=gapiLoaded	false	high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_78.2.dr	false		high
https://scriptz.corp.google.com/	chromecache_89.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_98.2.dr	false		high
https://classroom.google.com/sharewidget?usegapi=1	chromecache_98.2.dr	false		high
https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html	chromecache_78.2.dr	false		high
https://workspace.google.com/products/sites/	chromecache_89.2.dr	false		high
https://console.developers.google.com/	chromecache_78.2.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_98.2.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_98.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_98.2.dr, chromecache_78.2.dr	false		high
https://plus.google.com	chromecache_78.2.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_89.2.dr	false		high
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1	chromecache_98.2.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_98.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_89.2.dr	false		high
https://csp.withgoogle.com/csp/lcreport/	chromecache_78.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://pay.google.com/gp/v/widget/save	chromecache_98.2.dr	false		high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_98.2.dr	false		high
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget	chromecache_98.2.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_98.2.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_98.2.dr	false		high
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_78.2.dr	false		high
https://rapid.corp.google.com/	chromecache_89.2.dr	false		high
https://angular.io/license	chromecache_89.2.dr	false		high
https://apis.google.com	chromecache_98.2.dr, chromecache_78.2.dr	false		high
https://developers.google.com/	chromecache_78.2.dr	false		high
https://families.google.com/webcreation?usegapi=1&usegapi=1	chromecache_98.2.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_93.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_78.2.dr	false		high
https://support.google.com/cloudsearch/answer/6172299	chromecache_88.2.dr	false		high
https://clients6.google.com	chromecache_78.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.124.100	play.google.com	United States	15169	GOOGLEUS	false
172.253.124.132	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.105.101	plus.l.google.com	United States	15169	GOOGLEUS	false
172.253.124.104	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
64.233.177.113	unknown	United States	15169	GOOGLEUS	false
64.233.176.101	sites.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431674
Start date and time:	2024-04-25 16:01:37 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sites.google.com/view/bxwfjmwxrlfpbzx/home
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@16/51@16/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.105.94, 173.194.219.84, 108.177.122.139, 108.177.122.113, 108.177.122.138, 108.177.122.100, 108.177.122.102, 108.177.122.101, 34.104.35.123, 64.233.176.95, 74.125.136.94, 173.194.219.94, 64.233.185.95, 173.194.219.95, 142.250.105.95, 64.233.177.95, 74.125.136.95, 142.250.9.95, 142.251.15.95, 74.125.138.95, 172.217.215.95, 108.177.122.95, 172.253.124.95, 40.127.169.103, 192.229.211.108, 199.232.214.172, 52.165.164.15, 23.40.205.73, 23.40.205.74, 23.40.205.83, 23.40.205.67, 23.40.205.59, 23.40.205.56, 23.40.205.26, 23.40.205.34, 23.40.205.35, 20.166.126.56, 23.40.205.16, 23.40.205.81, 23.40.205.75, 23.40.205.10, 13.85.23.86, 64.233.177.94, 20.12.23.50, 23.40.205.17
Excluded domains from analysis (whitelisted): fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, a767.dspw65.akamai.net, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, download.windowsupdate.com.edgesuite.net, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:02:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9730798039047026
Encrypted:	false
SSDEEP:	48:85d7TjzqH7idAKZdA19ehwiZUklqehHy+3:8vb+oy
MD5:	361C75716FA87389F819A3CE2075B588
SHA1:	417ADB0FC76D29E4F6A87D7BD4E5593BB69242F1
SHA-256:	6AF2536CF2D6F9A60E67A675DCDDCCF5C6D8A2DAF085257019ACE53B72B62114
SHA-512:	7D0678ACF073335B98469757781CED394900C174323DF583269A2CA6B80791FC149EFAD44220E746AB04C497EF37F5024646C7B8F376A1C2C7C71B070D4AD17F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....DbL7....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XMp....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XMp....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XMp....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XMp..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XPp...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Q+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:02:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9927766490409446
Encrypted:	false
SSDEEP:	48:8dcd7TjzqH7idAKZdA1weh/iZUkAQkqehYy+2:8d8bc9Qdy
MD5:	FEF09BAD39E1C8CE380635ACAA982768
SHA1:	26049AEE0FBE6391F77539D8536A823DA38602D4
SHA-256:	A227351D1E351B2406BF8187728E333C556109AA733F409BCEECF5577EAE8968
SHA-512:	38AF366277D13F4D88022F06CCD0FE994176ABA1B422E13582D2B2DDBB270A7219EC356945D5469BAC6CC88655E068C7A22A6C501DE2C11E9ED429F2B464B948
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......A7....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XMp....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XMp....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XMp....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XMp..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XPp...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Q+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.004485344301842
Encrypted:	false
SSDEEP:	48:8xcd7TjzsH7idAKZdA14tseh7sFiZUkmgqeh7s2y+BX:8x8b+nky
MD5:	1D5D192041D9015979AC1F44A727F27F
SHA1:	184E6C8C62123CAAB995012509FA10FE8A223AC6
SHA-256:	C0103CFF1A029633EC356CEAB50F0B8C2154B45B3D8B15DCFF1990BC3D66F1B1
SHA-512:	B477B657D8A77E4585C6283F79F7CA3EEC371FA2AC10FA31865123E81E510C5F7D0693AE8BB4CE4C7C4E5A2A75B445B6530E7638CDF903DA26C8E4F6FD7DB0F3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XMp....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XMp....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XMp....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XMp..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Q+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:02:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9907536803214514
Encrypted:	false
SSDEEP:	48:8/d7TjzqH7idAKZdA1vehDiZUkwqehcy+R:89bnuy
MD5:	00B1EE3D3829335587A581350F0FF878
SHA1:	C1F7529FB79F286336B670981A91B1856305379E
SHA-256:	F4B8F2C43BDC74E6ACEDD0138A309633AF1B53FBFAFCDB764299CC0BF2D10B86
SHA-512:	1EA430AA5265FC3667128DCB9946BC51953A9AD9B323E8E664DC46EDACBF4F5823130D345DF50851EB2E33C4F5ADABDACC972FBAFE8A9359189A47B9D0D001C0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....A<7....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XMp....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XMp....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XMp....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XMp..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XPp...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Q+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:02:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.979407934406809
Encrypted:	false
SSDEEP:	48:84d7TjzqH7idAKZdA1hehBiZUk1W1qehyy+C:8QbX9Sy
MD5:	BFD6417E560E848AEA4C35A7642771E5
SHA1:	498E218A5F93E7B54BA08E342E42DACA2D3F21E2
SHA-256:	1E061B47C84BD06C3E430ABDF403873B0747BA959EA1D6F2A39211F37C8729F5
SHA-512:	0462E8AAD51C316BDF69FE09F4D6725B3211BFCAED5794130BD16BA04F24AEFCDC4101E1CA6604CD7D92CB8535096DB6EEEADD454D3EE483F065017CE8A387D0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......G7....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XMp....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XMp....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XMp....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XMp..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XPp...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Q+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Apr 25 13:02:31 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9924256230169797
Encrypted:	false
SSDEEP:	48:8HKd7TjzqH7idAKZdA1duT+ehOuTbbiZUk5OjqehOuTbky+yT+:8H6bfT/TbxWOvTbky7T
MD5:	6CF09B2653A512E552A428DC5C823BD5
SHA1:	D1B3C940DFAF988D9DB80BD4EBEC2282D2EA18BE
SHA-256:	411D9A6E17CBCEFDC79164441E985EA042AD5BE1B09F3D3F8C02545761B9F17C
SHA-512:	DE8D69CFD911BB02855696AC88272883267A52A6A0F1F990476BF77D8F73C256DCAE5036A28B7757EC1137AA03C4B37FE7D579B9E624D5F03F8447E6735974E8
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...././7....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.XMp....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.XMp....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.XMp....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.XMp..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.XPp...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Q+.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1605)
Category:	downloaded
Size (bytes):	89056
Entropy (8bit):	5.616426817218295
Encrypted:	false
SSDEEP:	1536:Qgb2cJyTNwTo1G3Xvs6Ah9o+EK7+/acguD/L1bH8:QgKcJyayvFGRp8
MD5:	201509ACBC2CBB0C0DB123F6C8307B95
SHA1:	845E0211045D5F5415315E45FF68E907A98C883C
SHA-256:	B04592A389DFA471FF1143C5FF2964D4B95BFDA62DC544FF3D6D3F6E969238D9
SHA-512:	D7046B9E6E45A84AB9094612609B38582DBE5F6F5E280F67BDCA0425811FCB865BDD5D0A18C3C7CC842EAC890F5654A272E804D2CA97E763D6961AFCFA4C3D8A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=NTMZac,m9oV,rCcCxc,RAnnUd,sy2w,gJzDyc,sy35,sy36,uu7UOe,sy37,soHxf,sy38,uY3Nvd,syt,sys,sy1y,sy2q,HYv29e"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.v("NTMZac");.var I8=function(a){_.M.call(this,a.za)};_.C(I8,_.M);I8.Ja=_.M.Ja;I8.ma=_.M.ma;I8.prototype.Tk=function(){throw Error("mh");};I8.prototype.WD=function(){throw Error("mh");};I8.prototype.Rb=function(){throw Error("mh");};_.sp(_.sqa,I8);._.x();.}catch(e){_._DumpException(e)}.try{._.v("m9oV");._.i4=function(a){_.M.call(this,a.za);this.enabled=!1};_.C(_.i4,_.M);_.i4.Ja=_.M.Ja;_.i4.ma=_.M.ma;_.i4.prototype.Ya=function(a){this.enabled=a};_.i4.prototype.isEnabled=function(){return this.enabled};_.sp(_.sDa,_.i4);._.x();.}catch(e){_._DumpException(e)}.try{._.v("rCcCxc");._.s2=function(a){_.M.call(this,a.za);this.B=[]};_.C(_.s2,_.M);_.s2.Ja=_.M.Ja;_.s2.ma=_.M.ma;_.s2.prototype.UI=function(){for(var a=this.B.length-1;0<=a;a--){var c=this.B[a],d=new _.Oo(c.element);if(!c.DU\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-uGFO6d")\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-FNFY6c")\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-FnSee")\|\|d.jb("VfPpkd-Sx9Kw

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 267 x 267, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4858
Entropy (8bit):	7.898855217927869
Encrypted:	false
SSDEEP:	96:6JptYH4ZZzxP4Pz/1izM0b4mfcGiT1rk/HrR+PWhXynorbCNpQEAPqYYI:6bbFP471izbMrI1+jorONJwt
MD5:	E41A32E817293ACE82FF42FDA991AC2C
SHA1:	8A878D239DF39D1C03AE24719C1C5D2FB5D34B8E
SHA-256:	CD9621200B0B604400271AB019291F41FB08DEB67FD2332FEEC34DB81E4F2FE4
SHA-512:	66374231229E5AC1B7954E1323250B1D80543F6A0E9D09AFC6FD2E6A1DC42A1C8A7EDB5AF093E461372B12B75BF8FE027B08410DEEC6505B5CF76120E52FF2A8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............S`....sBIT.....O....ZPLTEGpL.$..8#./..9..y .@!.=$.>"...<GF@,....~.......=-Rma5UF.......0.@&f.uzY'WM".p0.e,....x0P(......tRNS.@..f...?IDATx..]...:..>,..[......M.B.pF.Pg.gw.Y....4IC.............................................G..!.\z ...B.y..J#)...84..{.&0:..^..<..........s..p.\8x..<..........s..p.\8.;....Y..-...\.@j)..$$.R.U.._Y.i./..#u.my...B)JJ+....k...Q. &8..!.mH.l...B.,.iP.<..;Wq....;........;.d\.-........+.j.3...<...~k.4.o.......]<..........d.3..J.....8........3. l..........:....L.1.cF..dcs..\.T.J2...tu.:.(.-....\......0y..^"........j.\|..>88.`4y...Z..k...}.....;.b..L.Yx...ke...E.y...,.h.87@C.V.r.si.1Gu...............DSQ.C0.0...m"K......./.B....j........2X.XT.C.l.R\..\d..w .-L...C8.#Gq.C..h.4.O..+u$....j..a..?!.TUE...Q;....C...".]@..ms........zZ.^..K).&>..&.9.4,..........?k.N ....g+.G..9.......+0.U...j...ipy.Ws..@.[.%f.v.\.S.....q..v`."c1R.x=.'v.E\..Z...b.J.RR.O.R_....%.qU...;.*...q..i.{..&...7]..b....E.....\.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	325611
Entropy (8bit):	5.5233999895423835
Encrypted:	false
SSDEEP:	6144:l9y0krrBj/k2V72JetI/sZnGq7p9+Of1kIpAzwCuPQBmgC:3yzrhn+etI/GB7TVFX
MD5:	5E1F51F81D8CCC6A9416F2343BB51285
SHA1:	263266F4B4808A8CF944854AFDE4A8B928336AC9
SHA-256:	D7C8CAD0D955B575B2210F6ACBE90B948313F78B49B1A6B3804615DE4E198AC3
SHA-512:	F152D02B1B2D1BB27476538094BAFE9AF0CB885FCD347B01CD1392ECB9576FABBB87459A2B16E81DDAA386C5A56046B7FD195718F5DD4B448C1708B90573EEB3
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 725 x 544, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	297036
Entropy (8bit):	7.987726875884152
Encrypted:	false
SSDEEP:	6144:keyrwMFEmLR8rTQKZFCToxVQxDMlaiQDExg/4bp90TpeXbUONVD98uG:keyrwSB8HQKmoIqai9gQn04DR8uG
MD5:	C31873413BD0BCE195CC12094DF2B90E
SHA1:	4F9EE65B79322315A518E83264FEAD6B86908208
SHA-256:	630CC964D03E283699D55D2C1E10AEB9738BAD380BDE7CA321822E2DB51C1317
SHA-512:	DFEFEA464E557BFABED80D46722AF1637A11E0224D117D488793847005A1F8F14A61062701B0BDA6B332BBA376847591969C07C09090738A8334A5FF638E8330
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....... .....J......IDATx...n47..G.....v..;..I.Q.{..~.....H[......HQ.......ax......k..g.wze.m[].-......x....1.......vn...R.F.].E...c...n..{..Z.q......h+.5.....3.k:o..e..YI?..U....)k>.1.7.......z0J..te....!.......-.y>.....>......YF..c.x2...Y...t.....B.o..G.._.>....D.x..Ag_..~..}....l...K..5M.:m..,E&..m5....f...6.9c..^..o.jwLZ't..K......u.8............s......8u.o..?\|.......W....;.....}.{A...}a....1.?....T.w..=~..........e..!.....)V.9.(..}h..G.`nl.~..\|......+.1G..+.l...'.9W=..1...#.A..5.w.....51..............)..y.5.$..}.i[.^2g...^8.8..d.....\|..Y....r..}g........O..U..O.v..F./....x......4......C.g...>.....y....8..6.wd......].......Z.9(.F.......w777_.9.w."....1./~.L.'=....ck.J<6%..B..H..&...n.....".Q.%. ..O<.............~...G./}.8..N....]...N.....E..M...........T.../...^....2.+s.o..V...I..~.g "...0'u~....c.-<,...v.c...(..>.Oq.....]E..M.....u...g..........*..V......1.....o0l...y..0..J..c.wc.-z.....<=......H.I..hv.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1907)
Category:	downloaded
Size (bytes):	38283
Entropy (8bit):	5.65856453297951
Encrypted:	false
SSDEEP:	384:GkT4F/iODtOoNdbKckP0dGFWfj7w603x6apQiK2mENBCwmfxtPJZfNCdlFYJJ7m/:GkT4FxfpdG93QiKWWRZAjFYJJC3IgRh
MD5:	68ABAD0DA034D7EC1D1C2E8397920EEE
SHA1:	8F351A707FA607CF1D555A1E21AC2290D620D205
SHA-256:	691E8099C39F29D0F3549500BD07FE7AEB0E6B9449093C44B0567D082D01008C
SHA-512:	69C38EF0794EFBB6EE18DE6324EF7ADE82D8CD1A9BFF39E57F6ACE5FAE30E3EB3401286CC03A998AAD66D60430737D7DEF8ED3225888D0D1CC5991BDE9892F47
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=sy1f,sy1g,sy1e,FoQBg"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.IJa=function(a){for(var c=[],d=0,e=0;e<a.length;e++){var f=a.charCodeAt(e);128>f?c[d++]=f:(2048>f?c[d++]=f>>6\|192:(55296==(f&64512)&&e+1<a.length&&56320==(a.charCodeAt(e+1)&64512)?(f=65536+((f&1023)<<10)+(a.charCodeAt(++e)&1023),c[d++]=f>>18\|240,c[d++]=f>>12&63\|128):c[d++]=f>>12\|224,c[d++]=f>>6&63\|128),c[d++]=f&63\|128)}return c};_.sC=function(a,c,d){return _.Xp(_.bq(a,c),c,d)};_.tC=function(){this.blockSize=-1};.}catch(e){_._DumpException(e)}.try{.var uC,vC,JJa,KJa,NJa,OJa,xC,VJa,WJa,XJa,YJa,BC,ZJa,aKa,bKa,DC;uC=function(a,c){this.F=a;this.H=c;this.B=!0};vC=function(a){var c={};a=a.replace(/\r/g,"").split("\n");for(var d=0;d<a.length;d++){var e=a[d],f=e.indexOf(":");0>f\|\|(c[e.substring(0,f)]=e.substring(f+2,e.length))}return c};JJa=function(a){var c="";_.ed(a,function(d,e){c+=e+": "+d+"\r\n"});return c};KJa=function(){};_.LJa=function(a,c){return void 0==a.B?_.Et(c,"gaia_session_id"):a.B};._.wC=functi

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1432451
Entropy (8bit):	5.663426911037141
Encrypted:	false
SSDEEP:	6144:R5Lq3j6/8+wq3j6/8+Kq3j6/8+tq3j6/8+Iq3j6/8+pVFzkkCuQISNt1/oC+yW8F:R5QVFDC4CtquQn8ljTDgA
MD5:	401523CE05D684C96CEED30C93632823
SHA1:	EC16E4022557C3C07A79E51A2ECE38C1EEF0A265
SHA-256:	DF63EE11D1D539E5A0A4ECD0D622EDCA49E6F4A3BB732F3D23D1700ED10953DF
SHA-512:	F0DDDB780B8854283D5E52AE6EC1BF273683CAFD921E37E685C53DF4CEB2D2532E3001769F41BA6B5EF58EA00353BF94B7D92F7553B8C9C851DBD1C97AC8FBD6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/ss/k=atari.vw.wl0cBI_Ougw.L.W.O/am=wA/d=1/rs=AGEqA5l1S1sCHb5BBBzCZ8gLCPpEOnA7Pw
Preview:	.VIpgJd-TzA9Ye-eEGnhe{position:relative;display:-moz-inline-box;display:inline-block}* html .VIpgJd-TzA9Ye-eEGnhe{display:inline}:first-child+html .VIpgJd-TzA9Ye-eEGnhe{display:inline}/! normalize.css v2.1.1 \| MIT License \| git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{box-sizing:content-box;height:0}mark{background:#ff0;color:#000}code,kbd,pre,samp{font-family:monospace,serif;font-size:1em}pre{white-space:pre-wrap}q{quotes:"\201C" "\201D" "\2018" "\2019"}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-ali

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	downloaded
Size (bytes):	855
Entropy (8bit):	5.416815613287372
Encrypted:	false
SSDEEP:	24:kbtgH9eWpe1xGhd7xLkQNnhx31c1yzOydSNItprx:wiHGYd7eAJiIHdSNItprx
MD5:	A19C2F6BE34784BFFEBEC0A96D82CE62
SHA1:	26D1B765F2E8B26BCF642F62AA8B51EC9915753D
SHA-256:	8056709642C4EEFCC995E4018093ACC9949861B128FB8BFD9101A4F2C705E4A5
SHA-512:	50D778D58185EA4354D4F98B7008DA2ED59594C91B8010ADEA35B900AC4A32E449E8B23031F4D7A7D9A4D12A540D37F9698C55556C7A564E04EDF197794CB1F4
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=sy31,TRvtze"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var TAb,SAb,VAb;TAb=function(a){return(a=SAb.exec(a))&&a[1]?a[1]:""};_.UAb=function(a){var c=TAb(a);return a.substring(c.length)};_.WAb=function(){void 0===VAb&&(VAb=TAb(location.pathname));return VAb};SAb=RegExp("^(/prod\|/corp\|/scary)?/");VAb=void 0;.}catch(e){_._DumpException(e)}.try{._.v("TRvtze");.var c4=function(a){_.M.call(this,a.za);this.B=a.Na.configuration;this.C=_.zt()};_.C(c4,_.M);c4.Ja=_.M.Ja;c4.ma=function(){return{Na:{configuration:_.Fp},service:{flags:_.Qu}}};c4.prototype.F=function(){return _.WAb()};c4.prototype.D=function(){return _.Bt(this.C,"atari-rhpp")?_.Et(this.C,"atari-rhpp"):_.uj(this.B.get(),213)?"/_":_.WAb()+"/u/"+this.B.xg().Nj()+"/_"};_.sp(_.oCa,c4);._.x();.}catch(e){_._DumpException(e)}.}).call(this,this.default_vw);.// Google Inc..

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 725 x 544, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	297036
Entropy (8bit):	7.987726875884152
Encrypted:	false
SSDEEP:	6144:keyrwMFEmLR8rTQKZFCToxVQxDMlaiQDExg/4bp90TpeXbUONVD98uG:keyrwSB8HQKmoIqai9gQn04DR8uG
MD5:	C31873413BD0BCE195CC12094DF2B90E
SHA1:	4F9EE65B79322315A518E83264FEAD6B86908208
SHA-256:	630CC964D03E283699D55D2C1E10AEB9738BAD380BDE7CA321822E2DB51C1317
SHA-512:	DFEFEA464E557BFABED80D46722AF1637A11E0224D117D488793847005A1F8F14A61062701B0BDA6B332BBA376847591969C07C09090738A8334A5FF638E8330
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/atari/images/simple-header-blended-small.png
Preview:	.PNG........IHDR....... .....J......IDATx...n47..G.....v..;..I.Q.{..~.....H[......HQ.......ax......k..g.wze.m[].-......x....1.......vn...R.F.].E...c...n..{..Z.q......h+.5.....3.k:o..e..YI?..U....)k>.1.7.......z0J..te....!.......-.y>.....>......YF..c.x2...Y...t.....B.o..G.._.>....D.x..Ag_..~..}....l...K..5M.:m..,E&..m5....f...6.9c..^..o.jwLZ't..K......u.8............s......8u.o..?\|.......W....;.....}.{A...}a....1.?....T.w..=~..........e..!.....)V.9.(..}h..G.`nl.~..\|......+.1G..+.l...'.9W=..1...#.A..5.w.....51..............)..y.5.$..}.i[.^2g...^8.8..d.....\|..Y....r..}g........O..U..O.v..F./....x......4......C.g...>.....y....8..6.wd......].......Z.9(.F.......w777_.9.w."....1./~.L.'=....ck.J<6%..B..H..&...n.....".Q.%. ..O<.............~...G./}.8..N....]...N.....E..M...........T.../...^....2.+s.o..V...I..~.g "...0'u~....c.-<,...v.c...(..>.Oq.....]E..M.....u...g..........*..V......1.....o0l...y..0..J..c.wc.-z.....<=......H.I..hv.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4613
Entropy (8bit):	5.346659866900068
Encrypted:	false
SSDEEP:	96:HYg1aiPVc+u7Yg1aijNHYgEabVc+u7YgEafNHYgpaiUVc+u7YgpaigNHO1awVc+c:4nin3niyOj3OOrie3rikaIiA1ziMh
MD5:	FBC5756CF2D585EEB18EBFD9CD6F9642
SHA1:	892FAF621ABD948E60190DB38FC2E5B2B6A01A65
SHA-256:	B182DB1057F945FFFA546BA81B50550DB742F6007C3298D9A2FFC5A8B9472F91
SHA-512:	EEAD2DE8C557441DB08B43EE3235AABEF209B3BFFC04A8A9332255244CF48AC35374827F9DC1E45D7734A21C945204115E84F3755BD7240D49ABFAAC5B558723
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2) format('woff2');. unicode-rang

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hn8ohkYn:H8ohkY
MD5:	900914BC560773CAF9E095A8F17F6E37
SHA1:	51E0C4C0C0902C50F0D7E7581E0EDB0DCC191D7D
SHA-256:	08E437A7674E58F221D4EE6D5742EF2643929FB566511709F988B5EBE4FE4C1E
SHA-512:	2B48B170CEEBD6DB978D4DC79710A746903473B7C378FA25D6564AD6F6D2141A080E83C66D79688C35D3146F6DBFE996D3232C7A643F7767B8124C18065DB1C2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlDJtSIgVjqBRIFDb2Fgw8=?alt=proto
Preview:	CgkKBw29hYMPGgA=

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	22285
Entropy (8bit):	5.181113371704973
Encrypted:	false
SSDEEP:	384:3DnTy6Qq92jYNSn2D6hq92+zRfOq9onXq9JL9q9V:y6PwqS
MD5:	34BB552855F396E5A2C5F41600F7EC75
SHA1:	D7A34DC4EA6A28F577267F4D52EC71DCB9D5C95B
SHA-256:	195285BFF2D4E6C77505A641E1504733FC8E02A0E6D9D8CFE14D727BE94898F9
SHA-512:	B7F73C0E9CA98170D9B3A6B0D0E63587F529028E80817C942DC514373CD90820FD149DC9A2825BC2AF9CE8F515D6E2CB9742CBA31381C6797FB11198E6B65D7D
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lora%3Ai%2Cbi%2C700%2C400%2C500&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Lora';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LLPtLp_A.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Lora';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LJftLp_A.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ math */.@font-face {. font-family: 'Lora';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lora/v35/0QIhMX1D_JOuMw_LXftLp_A.woff2) format('woff2');. unicode-range: U+0302-0303, U+0305, U+0307-0308, U+0330, U+0391-03A1, U+03A3-03A9, U+03B1-03C9, U+03D1, U+03D5-03D6, U+03F0-03F1, U+03F4-03F5, U+2034-2037, U+2057, U+20D0-20DC, U+20E1, U+20E5-20EF, U

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23236, version 1.0
Category:	downloaded
Size (bytes):	23236
Entropy (8bit):	7.986328239479246
Encrypted:	false
SSDEEP:	384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK
MD5:	716309AAB2BCA045F9627F63AD79D0BF
SHA1:	38804233A29AAF975D557FE14E762C627BEF76E0
SHA-256:	115F6A626CA115D4AD5581B59275327E0E860B30330A52B0F785561332DD2429
SHA-512:	ADB0BC6CB9B230EDA5DAC7396A94A9A4DBA9C8BA0B2EB73F5F21A20C3CA3D14651420BC6A17E67A71B5BBA624F5A4E92D55CBBB898985DCCA838184F6DFB2B15
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2
Preview:	wOF2......Z........\..Z^..........................z.p.`..`..D....s...........B.....6.$..v. .....E.r........}Q.J..0..m..%h...1/<...J......z..........N&2\.K{iZ.....F$.AZ.!.=..a(...mv..t.6d..lH2..E}..j2..oq..Q..B#..........i.....\..%...0.Os..f.^;}..J....i..>]..w-...rN&#Y.N.9n.......[.=d...y..;...54..`7(.......!......b...$$..{._...\|.;...7....0...Wlls..8.P.[.Ts.tu.T...c....F.g.;.....@.^/3......U0..Pu..;]......%.:...Z../..t..(..p..#..!!-...}.#..ET.Q5A._K.6...Q\.7,....8.E....R.ATPQ..(iI..60.Y....^....\.7}.z....c......Y}Y....1....(...y.!Z.,...h...{.n....j....8.&..!....0'....m....7..L...rA...C..K....I..0.l8...A...."......'...........,M`.`.}..2.."<.MW[.....?..5..;.`.".d..dU..........V1..W.O.,.....r....+./.....z.m\..2...l ..6....... .+J..k..T%..4Uy..U.#.=....]'...f...R.u.Z......s.g.P+\....(....$...W....s'.{.R'...>..5f.R..9......&.`.A....b.Jexn.$..g.4.../.#.VR.B%.f+3&.qb.?...:.~........:Dg.5,...j.B..B.^-.......?.ig......(..O..~ ..\...T%:......P..M."..+.++_4...

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1124)
Category:	downloaded
Size (bytes):	69413
Entropy (8bit):	5.65064355291127
Encrypted:	false
SSDEEP:	1536:PjaWZu3C4htaZeHpX0jzN4L/M7LEnJVvuti2OF/7:WWUaoH9c4LfvXZj
MD5:	B7DB33A035F2E891C2EB91B0BD63CB90
SHA1:	E06BF7370023D50538AFB6A0B8E1CA0F91EF1D4E
SHA-256:	86A826FAC805176DFC511FB1E273CC68E0A9F3383F372BE1EC01D0A5610EC5E9
SHA-512:	22FEE2B3DBC569D2BC8775469B7A21C5E6B4AE3AF4C0B073B81564A6B5B93CB0FD5A0EACDDF8E8920C130BCA21BFF5B4F63A0C607321F7A5A2D73475B0F98A96
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=MpJwZc,n73qwf,A4UTCb,mzzZzc,CHCSlb,qAKInc,sy32,abQiW,syx,PVlQOd,NPKaK,sy5,BVgquf,fmklff,TGYpv,KUM7Z,qEW1W,oNFsLb,sy3x,yxTchf,sy3y,sy3z,xQtZb,yf2Bs,sy2,sy9,yyxWAc,qddgKe,sy34,SM1lmd,sy7,sy6,syy,RRzQxe,sy8,syb,sy2b,syk,sya,fNFZH,sy33,syl,RrXLpc,cgRV2c,sy10,sy1u,o1L5Wb,X4BaPc,syf,sy19,Md9ENb"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.v("MpJwZc");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("n73qwf");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("A4UTCb");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("mzzZzc");.var PFa;_.NA=function(a){_.M.call(this,a.za)};_.C(_.NA,_.M);_.NA.Ja=_.M.Ja;_.NA.ma=_.M.ma;PFa=function(a){a=_.Zd(a,function(c){return _.Yd(c)&&"yDmH0d"===c.id});return _.Yd(a)?a:null};_.OA=function(a){var c=a?_.$d(a):document,d;return null!=(d=a?PFa(a):c.getElementById("yDmH0d"))?d:c.body};_.sp(_.kq,_.NA);._.x();.}catch(e){_._DumpException(e)}.try{._.v("CHCSlb");._.MA=function(a){_.M.call(this,a.za)};_.C(_.MA,_.M);_.MA.Ja=_.M.Ja;_.MA.ma=_.M.ma;_.sp(_.Kka,_.MA);._.x();.}catch(e){_._DumpException(e)}.try{._.v("qAKInc");.var z3=function(a){_.tp.call(this,a.za);this.B=this.getData("active").B(!1);this.C=this.S("vyyg5");this.F=_.Le(_.Me(this).Dc().eb(function(){var c=this.V();this.B?c.Va("qs41qe"):c.Va("sf4e6b");this.B&

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	626453
Entropy (8bit):	5.544484841935598
Encrypted:	false
SSDEEP:	6144:4YxFXyrEQycPzzGYQh/C8LwWsBQGc2bHn4tpke6lQu/MfspIXimXlrYyNiRelHzp:4YGr2ThoWspcbtpkeluCn
MD5:	8FAE81E87F8E5F02563F2AB337818797
SHA1:	9A62F721EBA02A56A3DCA5F1FA09DD968D6AFFE2
SHA-256:	8475EB827A5E54E1898B112C7061DF4B1E6036A3EE0C635DB54291DC2C90A451
SHA-512:	CC037C056EBC7FCE2435BFE2A61B7BFD49D77BF85B5C51509CBE2DCCE2A390075DDB57501F65D7B91CAFBA8F099E65D393D8A352239C3E225E5A48D8E3AFCEE8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=1/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=view
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0xc0, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././*.. Copyright 2019 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limita

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 267 x 267, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4858
Entropy (8bit):	7.898855217927869
Encrypted:	false
SSDEEP:	96:6JptYH4ZZzxP4Pz/1izM0b4mfcGiT1rk/HrR+PWhXynorbCNpQEAPqYYI:6bbFP471izbMrI1+jorONJwt
MD5:	E41A32E817293ACE82FF42FDA991AC2C
SHA1:	8A878D239DF39D1C03AE24719C1C5D2FB5D34B8E
SHA-256:	CD9621200B0B604400271AB019291F41FB08DEB67FD2332FEEC34DB81E4F2FE4
SHA-512:	66374231229E5AC1B7954E1323250B1D80543F6A0E9D09AFC6FD2E6A1DC42A1C8A7EDB5AF093E461372B12B75BF8FE027B08410DEEC6505B5CF76120E52FF2A8
Malicious:	false
Reputation:	low
URL:	https://lh5.googleusercontent.com/rHxr7GxsBsioYoLI9vB1VW6OXvmkH7oYcEOmOMOj-gH8fNgzG4sT3q_y5chkbLD6hl24eu5F2QWHBGi9jPVIYGwN-oHbCshpGnWFd7N6GuO4hnxq
Preview:	.PNG........IHDR...............S`....sBIT.....O....ZPLTEGpL.$..8#./..9..y .@!.=$.>"...<GF@,....~.......=-Rma5UF.......0.@&f.uzY'WM".p0.e,....x0P(......tRNS.@..f...?IDATx..]...:..>,..[......M.B.pF.Pg.gw.Y....4IC.............................................G..!.\z ...B.y..J#)...84..{.&0:..^..<..........s..p.\8x..<..........s..p.\8.;....Y..-...\.@j)..$$.R.U.._Y.i./..#u.my...B)JJ+....k...Q. &8..!.mH.l...B.,.iP.<..;Wq....;........;.d\.-........+.j.3...<...~k.4.o.......]<..........d.3..J.....8........3. l..........:....L.1.cF..dcs..\.T.J2...tu.:.(.-....\......0y..^"........j.\|..>88.`4y...Z..k...}.....;.b..L.Yx...ke...E.y...,.h.87@C.V.r.si.1Gu...............DSQ.C0.0...m"K......./.B....j........2X.XT.C.l.R\..\d..w .-L...C8.#Gq.C..h.4.O..+u$....j..a..?!.TUE...Q;....C...".]@..ms........zZ.^..K).&>..&.9.4,..........?k.N ....g+.G..9.......+0.U...j...ipy.Ws..@.[.%f.v.\.S.....q..v`."c1R.x=.'v.E\..Z...b.J.RR.O.R_....%.qU...;.*...q..i.{..&...7]..b....E.....\.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1852)
Category:	downloaded
Size (bytes):	48387
Entropy (8bit):	5.605540801654948
Encrypted:	false
SSDEEP:	768:Y5+1P36/d92K7gczZo+TcjZfCaZaD6ubVZm9wswG5fPSxGak4imcewi8/iJ3tL3O:TP0fZJTMZyfGFfPSRzimcnJ6NtL3p3Lc
MD5:	C06A505CDCE56688E42600E5B3B5B5A2
SHA1:	167E913E15312E3B3B7BD39D7D1A2B096D7BD334
SHA-256:	291D51F7996F12D9DC626C5E8918A55E13553873A2956C3D3D929969FAD54D82
SHA-512:	0FE67DF20D045569C4206FA7C28ED24020916B020892148E0DD0F2CF6C31E2CD2148FEEA1E0E4F799200396E6E2119B113305CDDBD9A2139F0EF5999D1D8E601
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=sy13,sy16,sy14,sy17,sy18,sy1a,fuVYe,vVEdxc,sy1b,sy1c,sy1d,CG0Qwb"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var PGa,QGa,RGa,SGa,lB,TGa,XGa,ZGa,$Ga,YGa,aHa,bHa,cHa,oB,dHa,pB,fHa,gHa,eHa,hHa,nB,mB,iHa,WGa,VGa;PGa=function(a,c){var d=a.length;if(d!==c.length)return!1;for(var e=0;e<d;e++)if(a[e]!==c[e])return!1;return!0};QGa=function(a,c){if("string"===typeof c)try{c=_.gb(c)}catch(d){return!1}return _.hb(c)&&PGa(a,c)};RGa=function(a,c,d,e,f){var g;return null!=(g=a<e?c[a+f]:void 0)?g:null==d?void 0:d[a]};.SGa=function(a,c){if(!Array.isArray(a)\|\|!Array.isArray(c))return 0;a=a[0];c=c[0];return a===c?0:a<c?-1:1};_.UGa=function(a,c){var d=_.Jb(),e;if(_.zb(a)){var f=a.da;null!=e\|\|(e=f[d]);var g=_.Gb(a)}else if(Array.isArray(a))f=a;else return!1;if(_.zb(c))a=c.da,null!=e\|\|(e=a[d]),g=g\|\|_.Gb(c);else if(Array.isArray(c))a=c;else return!1;var k;return TGa(f,a,null!=(k=g)?k:_.Gc,e,2)};lB=function(a,c,d){return TGa(a,c,void 0,d,0)};.TGa=function(a,c,d,e,f){null!=mB&&Array.isArray(a)&&Array.isArray(c)&&mB.push(e?"cc":"cn");i

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 23580, version 1.0
Category:	downloaded
Size (bytes):	23580
Entropy (8bit):	7.990537110832721
Encrypted:	true
SSDEEP:	384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK
MD5:	E1B3B5908C9CF23DFB2B9C52B9A023AB
SHA1:	FCD4136085F2A03481D9958CC6793A5ED98E714C
SHA-256:	918B7DC3E2E2D015C16CE08B57BCB64D2253BAFC1707658F361E72865498E537
SHA-512:	B2DA7EF768385707AFED62CA1F178EFC6AA14519762E3F270129B3AFEE4D3782CB991E6FA66B3B08A2F81FF7CABA0B4C34C726D952198B2AC4A784B36EB2A828
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2
Preview:	wOF2......\........,..[...........................z.p.`..D....e........]..B..6.$..v. .....E.K...5c[R..V.Vr!.....$....@n..P.....'%.1....."A...#H:.T.6.JL.7.g..7..x....N"..,h....R3..u.T..A.._O..f=Mu.e.....0.c.0.FV.q....m;8..J.t.-.%."......&..2...!\....n..]Lx..:......S/F.V.rf%..#.Uk}....X.1n..V.\|.O..aC ."...#..>..n.... $;.....y.5..\|>...;@..Q.D........FT...r=p.Llf...J.3..{Z.. t]Rp.N..Z..7"B..,D.0s..."o..V<...#.N.WZ...m.\......Pb....#:z...B......~w.....J.ABQ.u<.8j..m..r2.....Aq.fNY...P..c.L+......v.n..yV.w......l......H...,..2.."v.......R.V.[...s......@..L....CS..'....Z.2..o......).4.H{C.%..?.%^...#.A.]..[....._&.[~1..j.P..`.......=......[.D7h..5...s......d'.....,....?...6.;....f..(M.CV.....R..q.c.....4.6.k.V.h/..........H..?u..!mq5...9@..0YA9.M..:..reS.;._......K...\..S.^.2..Fv.l~'l..U.TN....OXv..]..`.X1w.4E.t%a...2!.c.R.............t.'Hc...2.8...K.w..p@..T..RZ.@..)}..'+.7s1..... . -.....E7<...C.J.D....Iw-...u...m.K.\e..>..*....7y\|{........G..d13g].t.%.y<..

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29875
Entropy (8bit):	5.565681731212922
Encrypted:	false
SSDEEP:	768:9O7+zGIr9iykWXc8VV4ucbxiyXdpGupDB:9O7+M
MD5:	0EBB7B6EA38FD3796236DDAFBFD00D04
SHA1:	63F706C63220B76FE8D8A0AB16C8F15E88D88318
SHA-256:	C886F70FD06EE5BF0B7087F389154F625C98D079D42DC4A1964F5BB1BA3330BD
SHA-512:	4763C00BD3549F504AF0DAACE3F15177A7A83CB0AE3C7463011D7A6C08DD462EC540ADAEC9C508D17790FD42FAC5996A6AF1EC7600BC1C6EE06B0CF5A6620026
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans:400,500\|Roboto:300,400,500,700\|Source+Code+Pro:400,700&display=swap"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 37764, version 1.0
Category:	downloaded
Size (bytes):	37764
Entropy (8bit):	7.99352022005166
Encrypted:	true
SSDEEP:	768:WY4o8jFlImmqLDCEErZUgPcy9wNq6Kv6v2LOwmRAPQKqc:utmiCfN7PcyYKv6v2LOjAP1
MD5:	84B1DE656372D69F73C8E9273489C8E2
SHA1:	9427A3E557F56A3955AB3F13D99C8A0DD72AB15F
SHA-256:	16A2619B4D831694734838F42D825EB871EE5160D241900B780AD523404B1C50
SHA-512:	730F797F3F8A8D1DE9C38A409B04545F76E055FC8A00E8E8AFCBCD297C83BD422110A59DF64336BB1FD0E3721D6D63244D76CE916A9B8F576DDCE22C7C6894AE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2
Preview:	wOF2.............................................p...D..d?HVAR...`?STATr.../D.....L..r..6.0..z.6.$..h. ..0..%..[..q@q.t...y..NPQ-P..q.sK...)n....<@............@m..n..r..#.TY.h...z.Q...).y.;[..:>/6W9..k....E!.O.6.#.Ah..0%l(...\"M.C..N!e.h..}b.....t.....w.$e.qG.8...7F.....n..8(....\.\|w'A.X..\|Z...m:n..Eam.N.._.Z...Xk.S...d?Am..\..q..HV:......}#...1V..$...P5"....5.....n_..=u..:...Kk'.......=IGh4....M,.kt.x..J...y....g.~b. 2.m..+a7D8..w....i.~(#.....r.F.d.dI.....~..o.n.y3.[t;;..[.\|..@gx~m......._ts.TH..` 6`N.K.7.q..(7g...............Y.Z..J.....K:.{\".^...{]b/..y!A.....k/.......V..........%".....s...b.%!$!f.\|..O...E<.z.......9.P...T..W.L...\|n..\..z..j./V.{z..$Wc....8..E..../..5............b'.?.Ov..Sj.L.g.Tt.9S(....._......%..j....PMU...U...........9..k.+..zC.mJ......N..D...C..7.I#.)......m.=.....:"^J6l[..3_.[..Y....!...........i{..0.......td.!.uu"..6...G..>.~....o.4.7.@.8..W...U...._...7K....T..GO9.:d3./X..."H.U.j.7..i....e.t.K.H...s..?.Jk...q..

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	30212
Entropy (8bit):	5.417827738532801
Encrypted:	false
SSDEEP:	768:7XSAJKzDILZOYbyb9qM0mHpXz33n95G5X+hO++RJ/iu4qVq+c2F13/XLb6qfZ1zu:gh5b6fVq+c2F13/XLbHnN5mFd
MD5:	C531A75101743D4DEA583A783E1EEB98
SHA1:	06BBBF66DA02ADE2CE1422E31169CAB361929442
SHA-256:	751AC3136FFD88254FAB14E9C56A444626390295A1F153828F179D1D13334B2F
SHA-512:	1DF16EE4CCB0DEE3CA8BEF54C33544F5C48D802493BC2F873B5EF255E56146F1E2DB9A6A6445F87AC263B5E73F138B0C86200A7AD8C3FE1056B9CD2A4185589E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.cwFXGE315mo.O/am=wA/d=0/rs=AGEqA5kaCO1sMZjPaqoVbwKNdewE2t4h4A/m=sy2x,IZT63,vfuNJf,sy3l,sy3p,sy3r,sy42,sy40,sy41,siKnQd,sy15,sy3j,sy3q,sy3s,sy2y,YNjGDd,sy3t,PrPYRd,iFQyKf,hc6Ubd,sy43,SpsfSb,sy3m,sy3o,wR5FRb,pXdRYb,dIoSBb,zbML3c"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.nyb=function(a,c){c=void 0===c?window:c;return(c=c.WIZ_global_data)&&a in c?c[a]:null};.}catch(e){_._DumpException(e)}.try{._.v("IZT63");.var nNb=function(){var a=_.nyb("nQyAE",window),c;if((c=_.nyb("TSDtV",window))&&"string"===typeof c){var d=_.Aj(_.Mn(c,kNb),lNb,1,_.vj())[0];if(d){c={};d=_.Aj(d,mNb,2,_.vj());d=_.q(d);for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=_.H(e,7);switch(_.yj(e,t8)){case 3:c[f]=_.G(e,_.xj(e,t8,3));break;case 2:c[f]=_.Jj(e,_.xj(e,t8,2));break;case 4:c[f]=_.Lj(e,_.xj(e,t8,4));break;case 5:c[f]=_.H(e,_.xj(e,t8,5))}}}else c={}}else c={};if(c&&0<Object.keys(c).length)for(d=_.q(Object.keys(c)),e=d.next();!e.done;e=.d.next())e=e.value,e in a\|\|(a[e]=c[e]);return a};var mNb=function(a){this.da=_.u(a)};_.C(mNb,_.J);mNb.prototype.setBooleanValue=function(a){return _.wj(this,3,t8,_.Pb(a))};var t8=[2,3,4,5,6];var lNb=function(a){this.da=_.u(a)};_.C(lNb,_.J);lNb.mb=[2];var oNb=fun

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34108, version 1.0
Category:	downloaded
Size (bytes):	34108
Entropy (8bit):	7.993096562158293
Encrypted:	true
SSDEEP:	768:xDa3S2Rdcc3/k1/3Sr8dgfqHwQGMIto3/fIpos4GbtJzxn:xu3SQ3e/3S43TUtoP4Ftn
MD5:	C15D33A9508923BE839D315A999AB9C7
SHA1:	D17F6E786A1464E13D4EC8E842F4EB121B103842
SHA-256:	65C99D3B9F1A1B905046E30D00A97F2D4D605E565C32917E7A89A35926E04B98
SHA-512:	959490E7AE26D4821170482D302E8772DD641FFBBE08CFEE47F3AA2D7B1126DCCD6DEC5F1448CA71A4A8602981966EF8790AE0077429857367A33718B5097D06
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2.......<..........................................\..4?HVAR.t.`?STAT..'...J/<.....`..(..Z.0..,.6.$.... ..B..K..[.h...c.....nC .../.V.v..6>nT.R...b.8.@.......ON.ch.......k..."..".9..\D...JBJ."T%5...Z2..Q.)wJ...sA.h..m....n..F.....t..ig.=..y.s@............t..j.....n.h(...........N..)9.....v`\|z....8.7..kTq....^.......[.K.O..1ZP.....;.HP.......>..+..j:.V.......A......[.f.l..v`x....F_..vo...e....n...H..X.2.v}...(.1J...x.....}.....5.3.....?..?..7...S..0.9..C.0.M..M9..e.b....bc..b4.0"e.G.....XT....z............E'c.(."...x`].]..e.rQ..ye.z........kFh;....Y.yPt.._Q.._-q..mi.Og.W.-qUI...m5..r.mvA~o....S.f........s..ql.aXD...H..wy.P..k...f$.V^.2...8U{...f.....]]..G..cf.......D.c&B'S.2~..N..........R;..).5...../... 6....b....]d6."C..T..........OI\+V'...E.[.g.u.E....,!F.....*U.q. :x.s..1..C....H..S%..)....h......K..........pw.f...f.......an3....9....@......%.2.c.+........cXD..F...B.....0'...O.z8.B....4...\..&c...H....;..p....@.l...:........L..`...5..xo&.

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15101
Entropy (8bit):	5.465936504550983
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFI+5SYOelHO91hIuW:IQumA+QDnR/OGJ
MD5:	DD0B0375CC2A3D403DA00E73AEC15547
SHA1:	5E96F522053EA3F00ECC0FF4EA7669635A07FD46
SHA-256:	F861338D79C2BC27AB5809805C8243B416AD1D38BB28B18BDDBCF7293AFC27F6
SHA-512:	38776B2EFEADADC21E2E66BDE7D602C81B7544906381E1DAFE6EB643E4B7F2C7D4D94A6187ECD8430216F8D48DC4EFE0AE8416FCDB39089A17CF41377696CF04
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/client.js?onload=gapiLoaded
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 16:02:25.519478083 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:25.519480944 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:25.660165071 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:31.694813967 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.694859982 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.694947958 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.695221901 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.695262909 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.695327997 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.695485115 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.695496082 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.695666075 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.695676088 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.920144081 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.920281887 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.920429945 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.920479059 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.920557976 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.920615911 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.920869112 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.920950890 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.920995951 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.921077013 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.921585083 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.921659946 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.921694994 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.921750069 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.922764063 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.922836065 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.922878027 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.922951937 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.923072100 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:31.923089027 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:31.977279902 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.042753935 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.042783976 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.089453936 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.295551062 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.295587063 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.295663118 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.295692921 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.295743942 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.302862883 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.302939892 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.310574055 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.310686111 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.318568945 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.318625927 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.325885057 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.325999022 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.333678961 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.333770037 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.341392040 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.341495991 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.405529976 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.405643940 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.409182072 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.409223080 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.409267902 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.409300089 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.409358025 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.416893959 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.416973114 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.424609900 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.424685955 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.432336092 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.432405949 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.440200090 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.440291882 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.447854042 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.447961092 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.447969913 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.455459118 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.455506086 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.455513954 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.463213921 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.463259935 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.463268042 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.473999977 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.474066019 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.474066019 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.474077940 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.474124908 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.480818987 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.487627029 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.487653971 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.487679958 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.487703085 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.487726927 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.487759113 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.494560957 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.494632959 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.494648933 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.501303911 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.501358032 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.501372099 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.501466990 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.501539946 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.501658916 CEST	49710	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:32.501687050 CEST	443	49710	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:32.575051069 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:32.575074911 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:32.575138092 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:32.575390100 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:32.575404882 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:32.808834076 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:32.809364080 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:32.809382915 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:32.810878038 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:32.810955048 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:32.812311888 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:32.812393904 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:32.812629938 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:32.812637091 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:32.861493111 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.029892921 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.030019045 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.030071974 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.030086040 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.030173063 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.030217886 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.030225992 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.030308008 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.030355930 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.030365944 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.036952972 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.037053108 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.037061930 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.044671059 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.044744968 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.044754028 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.052282095 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.052349091 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.052355051 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.060132027 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.060194016 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.063750029 CEST	49719	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.063756943 CEST	443	49719	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.788499117 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.788533926 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:33.788614988 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.815026999 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:33.815043926 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.040654898 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.092561007 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.193624973 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.193639040 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.194226980 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.195117950 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.195213079 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.195246935 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.236162901 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.245945930 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.422499895 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.422544003 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.422575951 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.422624111 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.422651052 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.422753096 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.422770977 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.423512936 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.430063009 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.437697887 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.437762976 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.437778950 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.445364952 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.445399046 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.445426941 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.445435047 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.445717096 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.453077078 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.507885933 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.532445908 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.536180973 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.536216021 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.536266088 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.536281109 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.536564112 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.543858051 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.551619053 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.551651001 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.551706076 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.551714897 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.552048922 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.559241056 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.566951990 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.567037106 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.567039967 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.567049980 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.567285061 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.574588060 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.581727028 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.581757069 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.581938982 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.581948996 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.582511902 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.588882923 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.596019983 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.596153021 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.596160889 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.603233099 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.603262901 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.603318930 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.603334904 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.603758097 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.610424042 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.617631912 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.617660046 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.617706060 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.617714882 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.618046999 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.625119925 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.642442942 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.642472029 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.642544031 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.642553091 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.643264055 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.645399094 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.650789022 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.650811911 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.650871038 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.650880098 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.651078939 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.656107903 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.661256075 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.661290884 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.662051916 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.662061930 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.662283897 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.666080952 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.670988083 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.671045065 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.671078920 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.671093941 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.671340942 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.676048994 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.681057930 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.681127071 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.681148052 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.681157112 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.681430101 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.686045885 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.691009998 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.691063881 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.691072941 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.693480015 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.693614960 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.693623066 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.698702097 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.698848009 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.698857069 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.703634024 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.703706026 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.703718901 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.708453894 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.708532095 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.708549023 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.713547945 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.713653088 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.713677883 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.718388081 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.718446970 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.718457937 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.723412991 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.723537922 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.723552942 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.727910995 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:34.727992058 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:34.728283882 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.728290081 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:34.728502035 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.728511095 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.728727102 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:34.728755951 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:34.732992887 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.733083010 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.733089924 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.737627983 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.737749100 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.737757921 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.742068052 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.742147923 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.742155075 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.746573925 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.746754885 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.746763945 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.753000021 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.753036022 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.753072977 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.753081083 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.753432989 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.757215023 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.761568069 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.761595964 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.761658907 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.761667013 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.761914968 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.764197111 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.766916037 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.766942024 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.766976118 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.766983986 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.767425060 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.769366980 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.771972895 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.772005081 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.772121906 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.772131920 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.772268057 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.774630070 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.777098894 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.777169943 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.777175903 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.779916048 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.779948950 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.779999018 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.780005932 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.780069113 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.782149076 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.784686089 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.784713030 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.784785986 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.784804106 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.784862041 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.787348986 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.788420916 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.788491011 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.788497925 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.790781021 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.791516066 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.791532040 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.793150902 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.793275118 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.793282986 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.795543909 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.795658112 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.795666933 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.797945976 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.798106909 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.798120975 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.800302982 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.800467014 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.800474882 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.802746058 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.802803993 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.802812099 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.804980993 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.805536985 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.805550098 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.807406902 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.807461023 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.807471037 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.809701920 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.809777975 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.809786081 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.811927080 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.812005997 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.812012911 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.814239025 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.814380884 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.814389944 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.815659046 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:34.815682888 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:34.816397905 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:34.817487955 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.817527056 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.817558050 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.817568064 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.817878008 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.819792032 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.821858883 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.821954012 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.821966887 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.821981907 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.822057962 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.824098110 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.826260090 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.826296091 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.826494932 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.826503992 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.827275038 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.828434944 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.830596924 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.830632925 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.830854893 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.830863953 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.830925941 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.832699060 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.832840919 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:34.832856894 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:34.834953070 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.834996939 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.835062981 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.835072041 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.835335970 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.836868048 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.838973045 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.839006901 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.839154005 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.839168072 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.841129065 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.841216087 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.841231108 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.841316938 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.843065023 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.844086885 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.846065044 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.846106052 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.846169949 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.846189976 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.846201897 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.848155975 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.848315001 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.848323107 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.850146055 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.850330114 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.850337982 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.852230072 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.852448940 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.852456093 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.854366064 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.854468107 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.854482889 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.856060982 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.856235027 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.856242895 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.858444929 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.858513117 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.858520031 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.859929085 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.861794949 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.861835003 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.861877918 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.861886978 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.861916065 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.863876104 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.863946915 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.863954067 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.865659952 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.865803957 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.865812063 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.868494987 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.868535995 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.868779898 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.868804932 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.869281054 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.870322943 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.872175932 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.872252941 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.872262001 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.874120951 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.874156952 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.874208927 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.874217987 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.874322891 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.875874996 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.877571106 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.877598047 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.877690077 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.877697945 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.878753901 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.879229069 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.880857944 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.880881071 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.880923986 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.880930901 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.881148100 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.882527113 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.884265900 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.884294033 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.885255098 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.885263920 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.885447979 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.885714054 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.886033058 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:34.886120081 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:34.886147976 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:34.887250900 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.887286901 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.887402058 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.887411118 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.887537956 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.888796091 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.890393972 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.890532017 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.890588999 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.890604019 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.890635967 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.890683889 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.892110109 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.892748117 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.894104004 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.894114971 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.894145012 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.894351006 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.894361973 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.895605087 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.895935059 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.895945072 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.897070885 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.897218943 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.897228956 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.898488998 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.898592949 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.898602962 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.899950981 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.901324034 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.901352882 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.901459932 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.901467085 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.902730942 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.902746916 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.903906107 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.903911114 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.904166937 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.905510902 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.905534983 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.905566931 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.905572891 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.905767918 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.907099009 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.907196999 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.907202005 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.908215046 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.908286095 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.908292055 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.909553051 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.910850048 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.910857916 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.910974026 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.911060095 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.911070108 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.912831068 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.912862062 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.913932085 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.913944006 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.914334059 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.914746046 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.914757967 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.915488958 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.915833950 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.915842056 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.915992975 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.916683912 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.917875051 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.917907953 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.918754101 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.918770075 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.919173002 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.920393944 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.920486927 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.920542955 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.920542955 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.920552969 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.920891047 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.921621084 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.921737909 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:34.921864033 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:34.959827900 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:34.995248079 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:34.995261908 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:34.995961905 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:34.995994091 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:34.996344090 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:34.996857882 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:34.996870041 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:34.996920109 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:34.996979952 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:35.008310080 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:35.008501053 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:35.061151028 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.061322927 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.063539028 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:35.063566923 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:35.070173979 CEST	49721	443	192.168.2.5	142.250.105.101
Apr 25, 2024 16:02:35.070199013 CEST	443	49721	142.250.105.101	192.168.2.5
Apr 25, 2024 16:02:35.103876114 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:35.119990110 CEST	49675	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:35.120031118 CEST	49674	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:35.134759903 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:35.136152983 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:35.136234999 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:35.147842884 CEST	49711	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:35.147861004 CEST	443	49711	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:35.170752048 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.170762062 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.171041012 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.214095116 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.221302986 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.222023010 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.222045898 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.222944021 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.223014116 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.223731041 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.223783970 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.231369019 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.231471062 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.232040882 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.232055902 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.264997005 CEST	49673	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:35.281759977 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.295543909 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.340120077 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.406152010 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.406291008 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.406336069 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.406459093 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.406476021 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.406745911 CEST	49733	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.406753063 CEST	443	49733	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.433077097 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.433123112 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.433207035 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.434993982 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.435008049 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.447360039 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.447474957 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.447566032 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.453381062 CEST	49735	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.453408003 CEST	443	49735	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.455461025 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.455482960 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.455585003 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.456919909 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.456933022 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.650449038 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.650487900 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.650553942 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.651149988 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.651161909 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.660145044 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.660480976 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.660510063 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.661070108 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.661139011 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.662097931 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.662152052 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.662554979 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.662673950 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.662962914 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.662971973 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.681696892 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.682940006 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.682957888 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.683332920 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.683433056 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.684017897 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.684079885 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.684504986 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.684561014 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.684848070 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.684865952 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.684925079 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.684942961 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.714201927 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.731822968 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.874762058 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.874849081 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.877798080 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.877814054 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.878108025 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.880673885 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:35.905999899 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.906160116 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.906219006 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.907267094 CEST	49737	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:35.907289028 CEST	443	49737	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:35.928113937 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:35.939312935 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.939425945 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.939527035 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.940700054 CEST	49738	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:35.940713882 CEST	443	49738	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:35.964122057 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:35.964155912 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:35.964451075 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:35.964451075 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:35.964484930 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.095608950 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:36.095774889 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:36.095823050 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:36.096690893 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:36.096714973 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:36.096729994 CEST	49739	443	192.168.2.5	23.220.189.216
Apr 25, 2024 16:02:36.096740007 CEST	443	49739	23.220.189.216	192.168.2.5
Apr 25, 2024 16:02:36.192902088 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.193150043 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.193175077 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.193594933 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.193720102 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.194262981 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.194391966 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.194399118 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.243486881 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.391268015 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.391434908 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.391638994 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.391652107 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.431658030 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.612555981 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.615195036 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.615247011 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.615273952 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.619257927 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.619328022 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.619342089 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.626786947 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.626857042 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.627607107 CEST	49741	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.627624035 CEST	443	49741	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.644846916 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:36.644953012 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:36.875010014 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.875089884 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:36.875191927 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.876981020 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:36.877008915 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.102891922 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.110924959 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.110954046 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.111319065 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.111388922 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.111994982 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.112055063 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.112061024 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.112838984 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.112895012 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.113013029 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.156145096 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.165694952 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.165704012 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.212584972 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.388688087 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.391148090 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.391216040 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.391235113 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.395109892 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.395159006 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.395164967 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.402786016 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:37.402951956 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.432843924 CEST	49744	443	192.168.2.5	172.253.124.132
Apr 25, 2024 16:02:37.432859898 CEST	443	49744	172.253.124.132	192.168.2.5
Apr 25, 2024 16:02:38.033895969 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.033942938 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.034012079 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.035715103 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.035773039 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.035976887 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.038460016 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.038481951 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.038778067 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.038794994 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.263159037 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.264544964 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.306349993 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.314795017 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.316153049 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.316164017 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.316323996 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.316344976 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.316922903 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.316994905 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.319185019 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.319267035 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.319648027 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.319768906 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.319870949 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.319919109 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:38.319957972 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.320003986 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.320266008 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.320301056 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.493976116 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.494173050 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:38.494262934 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:38.514245033 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.514377117 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:38.514452934 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:39.164726019 CEST	49746	443	192.168.2.5	64.233.176.101
Apr 25, 2024 16:02:39.164767981 CEST	443	49746	64.233.176.101	192.168.2.5
Apr 25, 2024 16:02:39.174262047 CEST	49745	443	192.168.2.5	172.253.124.100
Apr 25, 2024 16:02:39.174295902 CEST	443	49745	172.253.124.100	192.168.2.5
Apr 25, 2024 16:02:39.205544949 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.205585957 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.205646038 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.205852985 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.205868959 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.430532932 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.430811882 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.430828094 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.431236982 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.432015896 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.432094097 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.432317972 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.476135015 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.675456047 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.675601959 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:39.675651073 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.676146030 CEST	49747	443	192.168.2.5	64.233.177.113
Apr 25, 2024 16:02:39.676156044 CEST	443	49747	64.233.177.113	192.168.2.5
Apr 25, 2024 16:02:44.964675903 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:44.964744091 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:44.964818001 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:46.403831005 CEST	49728	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:02:46.403906107 CEST	443	49728	172.253.124.104	192.168.2.5
Apr 25, 2024 16:02:46.554749012 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:46.555506945 CEST	49703	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:46.556787968 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:46.556837082 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:46.557033062 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:46.574763060 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:46.574790955 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:46.714853048 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:46.715544939 CEST	443	49703	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:46.911005974 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:46.911169052 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.153187037 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.153222084 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:47.154361963 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:47.158752918 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.160223007 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.160223007 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.160279036 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:47.565876961 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:47.565933943 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.566427946 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:47.566468954 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.566489935 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:47.566528082 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.569113970 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.569130898 CEST	443	49751	23.1.237.91	192.168.2.5
Apr 25, 2024 16:02:47.569143057 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:02:47.569191933 CEST	49751	443	192.168.2.5	23.1.237.91
Apr 25, 2024 16:03:33.974816084 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:33.974905014 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:33.975123882 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:33.975724936 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:33.975759029 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:34.202410936 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:34.203113079 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:34.203166008 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:34.203552961 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:34.207370043 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:34.207492113 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:34.259588957 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:44.209481955 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:44.209657907 CEST	443	49757	172.253.124.104	192.168.2.5
Apr 25, 2024 16:03:44.209753990 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:44.402760983 CEST	49757	443	192.168.2.5	172.253.124.104
Apr 25, 2024 16:03:44.402807951 CEST	443	49757	172.253.124.104	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 25, 2024 16:02:30.241128922 CEST	53	64806	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:30.325858116 CEST	53	60324	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:30.951435089 CEST	53	59996	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:31.582542896 CEST	54149	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:31.582679033 CEST	53134	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:31.692852020 CEST	53	54149	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:31.694268942 CEST	53	53134	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:32.456314087 CEST	53	65333	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:32.457509995 CEST	53	57417	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:32.463819027 CEST	50111	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:32.464134932 CEST	52619	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:32.574409962 CEST	53	52619	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:32.574515104 CEST	53	50111	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:33.026195049 CEST	53	60956	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:33.923402071 CEST	50849	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:33.923676014 CEST	49654	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:34.033632994 CEST	53	50849	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:34.034121990 CEST	53	49654	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:34.305192947 CEST	53	63496	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:34.868386030 CEST	49391	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:34.873090029 CEST	49356	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:34.873343945 CEST	53	64726	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:34.978627920 CEST	53	49391	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:34.982996941 CEST	53	49356	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:35.320950031 CEST	54921	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:35.321489096 CEST	54468	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:35.430924892 CEST	53	54921	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:35.432257891 CEST	53	54468	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:35.728152990 CEST	53	57474	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:35.849800110 CEST	50402	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:35.850244999 CEST	55714	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:35.949616909 CEST	62537	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:35.950062990 CEST	50177	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:35.961122036 CEST	53	50402	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:35.963071108 CEST	53	55714	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:36.059710026 CEST	53	62537	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:36.060000896 CEST	53	50177	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:36.762593985 CEST	54295	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:36.763070107 CEST	61823	53	192.168.2.5	1.1.1.1
Apr 25, 2024 16:02:36.872675896 CEST	53	54295	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:36.873558998 CEST	53	61823	1.1.1.1	192.168.2.5
Apr 25, 2024 16:02:48.513144970 CEST	53	52786	1.1.1.1	192.168.2.5
Apr 25, 2024 16:03:07.260838985 CEST	53	57874	1.1.1.1	192.168.2.5
Apr 25, 2024 16:03:29.808073997 CEST	53	64861	1.1.1.1	192.168.2.5
Apr 25, 2024 16:03:29.857494116 CEST	53	51446	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 25, 2024 16:02:31.582542896 CEST	192.168.2.5	1.1.1.1	0xffd	Standard query (0)	sites.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:31.582679033 CEST	192.168.2.5	1.1.1.1	0x2813	Standard query (0)	sites.google.com	65	IN (0x0001)	false
Apr 25, 2024 16:02:32.463819027 CEST	192.168.2.5	1.1.1.1	0xc6a8	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:32.464134932 CEST	192.168.2.5	1.1.1.1	0x84a0	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 25, 2024 16:02:33.923402071 CEST	192.168.2.5	1.1.1.1	0xaaea	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:33.923676014 CEST	192.168.2.5	1.1.1.1	0xff04	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 25, 2024 16:02:34.868386030 CEST	192.168.2.5	1.1.1.1	0xe18b	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.873090029 CEST	192.168.2.5	1.1.1.1	0xab39	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 25, 2024 16:02:35.320950031 CEST	192.168.2.5	1.1.1.1	0xfd40	Standard query (0)	sites.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.321489096 CEST	192.168.2.5	1.1.1.1	0x3663	Standard query (0)	sites.google.com	65	IN (0x0001)	false
Apr 25, 2024 16:02:35.849800110 CEST	192.168.2.5	1.1.1.1	0xadee	Standard query (0)	lh5.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.850244999 CEST	192.168.2.5	1.1.1.1	0xaeaa	Standard query (0)	lh5.googleusercontent.com	65	IN (0x0001)	false
Apr 25, 2024 16:02:35.949616909 CEST	192.168.2.5	1.1.1.1	0xa598	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.950062990 CEST	192.168.2.5	1.1.1.1	0xebb8	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 25, 2024 16:02:36.762593985 CEST	192.168.2.5	1.1.1.1	0x3bcd	Standard query (0)	lh5.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.763070107 CEST	192.168.2.5	1.1.1.1	0xcc1b	Standard query (0)	lh5.googleusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 25, 2024 16:02:31.692852020 CEST	1.1.1.1	192.168.2.5	0xffd	No error (0)	sites.google.com		64.233.176.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:31.692852020 CEST	1.1.1.1	192.168.2.5	0xffd	No error (0)	sites.google.com		64.233.176.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:31.692852020 CEST	1.1.1.1	192.168.2.5	0xffd	No error (0)	sites.google.com		64.233.176.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:31.692852020 CEST	1.1.1.1	192.168.2.5	0xffd	No error (0)	sites.google.com		64.233.176.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:31.692852020 CEST	1.1.1.1	192.168.2.5	0xffd	No error (0)	sites.google.com		64.233.176.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:31.692852020 CEST	1.1.1.1	192.168.2.5	0xffd	No error (0)	sites.google.com		64.233.176.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574409962 CEST	1.1.1.1	192.168.2.5	0x84a0	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574515104 CEST	1.1.1.1	192.168.2.5	0xc6a8	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574515104 CEST	1.1.1.1	192.168.2.5	0xc6a8	No error (0)	plus.l.google.com		142.250.105.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574515104 CEST	1.1.1.1	192.168.2.5	0xc6a8	No error (0)	plus.l.google.com		142.250.105.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574515104 CEST	1.1.1.1	192.168.2.5	0xc6a8	No error (0)	plus.l.google.com		142.250.105.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574515104 CEST	1.1.1.1	192.168.2.5	0xc6a8	No error (0)	plus.l.google.com		142.250.105.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574515104 CEST	1.1.1.1	192.168.2.5	0xc6a8	No error (0)	plus.l.google.com		142.250.105.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:32.574515104 CEST	1.1.1.1	192.168.2.5	0xc6a8	No error (0)	plus.l.google.com		142.250.105.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.033632994 CEST	1.1.1.1	192.168.2.5	0xaaea	No error (0)	www.google.com		172.253.124.104	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.033632994 CEST	1.1.1.1	192.168.2.5	0xaaea	No error (0)	www.google.com		172.253.124.106	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.033632994 CEST	1.1.1.1	192.168.2.5	0xaaea	No error (0)	www.google.com		172.253.124.99	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.033632994 CEST	1.1.1.1	192.168.2.5	0xaaea	No error (0)	www.google.com		172.253.124.103	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.033632994 CEST	1.1.1.1	192.168.2.5	0xaaea	No error (0)	www.google.com		172.253.124.147	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.033632994 CEST	1.1.1.1	192.168.2.5	0xaaea	No error (0)	www.google.com		172.253.124.105	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.034121990 CEST	1.1.1.1	192.168.2.5	0xff04	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 25, 2024 16:02:34.978627920 CEST	1.1.1.1	192.168.2.5	0xe18b	No error (0)	play.google.com		172.253.124.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.978627920 CEST	1.1.1.1	192.168.2.5	0xe18b	No error (0)	play.google.com		172.253.124.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.978627920 CEST	1.1.1.1	192.168.2.5	0xe18b	No error (0)	play.google.com		172.253.124.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.978627920 CEST	1.1.1.1	192.168.2.5	0xe18b	No error (0)	play.google.com		172.253.124.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.978627920 CEST	1.1.1.1	192.168.2.5	0xe18b	No error (0)	play.google.com		172.253.124.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:34.978627920 CEST	1.1.1.1	192.168.2.5	0xe18b	No error (0)	play.google.com		172.253.124.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.430924892 CEST	1.1.1.1	192.168.2.5	0xfd40	No error (0)	sites.google.com		64.233.177.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.430924892 CEST	1.1.1.1	192.168.2.5	0xfd40	No error (0)	sites.google.com		64.233.177.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.430924892 CEST	1.1.1.1	192.168.2.5	0xfd40	No error (0)	sites.google.com		64.233.177.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.430924892 CEST	1.1.1.1	192.168.2.5	0xfd40	No error (0)	sites.google.com		64.233.177.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.430924892 CEST	1.1.1.1	192.168.2.5	0xfd40	No error (0)	sites.google.com		64.233.177.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.430924892 CEST	1.1.1.1	192.168.2.5	0xfd40	No error (0)	sites.google.com		64.233.177.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.961122036 CEST	1.1.1.1	192.168.2.5	0xadee	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 16:02:35.961122036 CEST	1.1.1.1	192.168.2.5	0xadee	No error (0)	googlehosted.l.googleusercontent.com		172.253.124.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:35.963071108 CEST	1.1.1.1	192.168.2.5	0xaeaa	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 16:02:36.059710026 CEST	1.1.1.1	192.168.2.5	0xa598	No error (0)	play.google.com		108.177.122.101	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.059710026 CEST	1.1.1.1	192.168.2.5	0xa598	No error (0)	play.google.com		108.177.122.139	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.059710026 CEST	1.1.1.1	192.168.2.5	0xa598	No error (0)	play.google.com		108.177.122.100	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.059710026 CEST	1.1.1.1	192.168.2.5	0xa598	No error (0)	play.google.com		108.177.122.113	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.059710026 CEST	1.1.1.1	192.168.2.5	0xa598	No error (0)	play.google.com		108.177.122.102	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.059710026 CEST	1.1.1.1	192.168.2.5	0xa598	No error (0)	play.google.com		108.177.122.138	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.872675896 CEST	1.1.1.1	192.168.2.5	0x3bcd	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 16:02:36.872675896 CEST	1.1.1.1	192.168.2.5	0x3bcd	No error (0)	googlehosted.l.googleusercontent.com		172.253.124.132	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:36.873558998 CEST	1.1.1.1	192.168.2.5	0xcc1b	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 16:02:46.866854906 CEST	1.1.1.1	192.168.2.5	0x34d0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 25, 2024 16:02:46.866854906 CEST	1.1.1.1	192.168.2.5	0x34d0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:46.947632074 CEST	1.1.1.1	192.168.2.5	0x936e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 25, 2024 16:02:46.947632074 CEST	1.1.1.1	192.168.2.5	0x936e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sites.google.com

https:

apis.google.com

play.google.com

lh5.googleusercontent.com

www.bing.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	64.233.176.101	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:31 UTC	829	OUT	GET /view/bxwfjmwxrlfpbzx/home HTTP/1.1 Host: sites.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 14:02:32 UTC	2227	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: DENY Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 14:02:32 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Resource-Policy: same-site Content-Security-Policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-yosO-DFZc9q-tJd7n14Y9g' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/ Cross-Origin-Opener-Policy: unsafe-none reporting-endpoints: default="/web-reports?jobset=prod&context=eJwVw3sslXEYB_Cn3_u8Mlq5rYZoWmVIav5gbodzSZ211az1e9eWLCliSrlMNbqQTSzVLK3soBrCUCk2K8UWNZtmxR9tEbVat7mcHFPn9O2zfVyqllucJbW5StrjJWkvPlsjKbtUUhFGVkrage5VkgLQXiNp5U1J3CDJCxMeSArtkhSLR15KysfJIUkzmDYsKQ8HRySNo_wg6Sj2f5c0irfnJbWiZVFSO2bYJRXiwxUa9WOyt0bZuOSrketajeb9NGJ_jfI2aFSKPoEaBePXeI0WMdWk0SkswDIMT9bIgKtTNNqEgTkaRWDGSY0K8VaeRi0YFTJGdnTaPEb-6HlgRvhiUvqM2I_rrs2KQPxxY1ZYUfdxViRiW_Gc6MLAMKsIw9KtVlGJv85bxQIWZi6I8zgUYxNvsDfWJgbwVoJN3MHfaTZhx8Zym2jHQ68WxTF8FP5H9GLj2b-iHWuS7KIOs8kh8tG21iHIzyGSTjvEfrzqRspN3HWclL1YOU1KNRYPC6UMFyeEsmxSKLsVRZFoXhXNSeh-Lpq98e7XaG7FMGs0R6CoiWEX7GmN4eeYpY_lXOzwjuNu9AiPYx-8cDiOy3G9quNgFAk6dsHHmo6fYtSQjvUYkBnPQejcEs9uWF2j51rsbtFzHxa90_MlrD5h4FpMzTdwJgacMXAQbrto4AQUHQZ2waa3Bu7A7AAj5-Og3sgjeK_HyG14sc_Il7Hhk5EfYNY3I-diuWria7gQYmIHbswxcSjqLSY2Y8lnE1dg5MHtHHYlkSNwymMnf8Pi0zu5DJtUM3fg--VmnsbxJxZ14v8XFvULZkxZ1BzU_7SoZlxqrlOV-3VqyWSdWoGvPevVUewcr1d7ULelQU1Ex9wdNaX7rpqOHq7OtoHmTie37vbruT68LyOt4B8DXksU" Referrer-Policy: strict-origin-when-cross-origin Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg; expires=Fri, 25-Oct-2024 14:02:32 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 6f 73 4f 2d 44 46 5a 63 39 71 2d 74 4a 64 37 6e 31 34 59 39 67 22 3e 76 61 72 20 44 4f 43 53 5f 74 69 6d 69 6e 67 3d 7b 7d 3b 20 44 4f 43 53 5f 74 69 6d 69 6e 67 5b 27 73 6c 27 5d 3d 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 6f 73 4f 2d 44 46 5a 63 39 71 2d 74 4a 64 37 6e 31 Data Ascii: 8000<!DOCTYPE html><html lang="en-US" itemscope itemtype="http://schema.org/WebPage"><head><meta charset="utf-8"><script nonce="yosO-DFZc9q-tJd7n14Y9g">var DOCS_timing={}; DOCS_timing['sl']=new Date().getTime();</script><script nonce="yosO-DFZc9q-tJd7n1
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 33 32 32 2c 34 39 34 35 31 35 35 39 2c 34 39 34 35 33 30 34 35 2c 34 39 34 37 32 30 37 31 2c 34 39 35 31 32 33 37 33 2c 34 39 36 32 32 38 33 31 2c 34 39 36 32 33 31 38 31 2c 34 39 36 34 34 30 32 33 2c 34 39 37 36 39 33 34 35 2c 34 39 38 32 32 39 32 39 2c 34 39 38 32 33 31 37 32 2c 34 39 38 32 34 31 36 33 2c 34 39 38 33 33 34 37 30 2c 34 39 38 34 32 38 36 33 2c 34 39 39 32 34 37 31 34 2c 35 30 30 38 32 37 34 38 2c 35 30 31 36 36 39 35 39 2c 35 30 32 32 31 37 32 38 2c 35 30 32 36 36 32 33 30 2c 35 30 32 37 33 35 33 36 2c 35 30 32 39 37 34 33 34 2c 35 30 33 33 35 38 39 37 2c 35 30 33 36 30 31 34 38 2c 35 30 33 39 30 31 36 35 2c 35 30 35 31 35 33 33 35 2c 35 30 35 32 30 33 32 31 2c 35 30 35 32 39 31 31 31 2c 37 30 39 37 39 34 31 30 2c 37 31 30 30 38 32 38 31 Data Ascii: 322,49451559,49453045,49472071,49512373,49622831,49623181,49644023,49769345,49822929,49823172,49824163,49833470,49842863,49924714,50082748,50166959,50221728,50266230,50273536,50297434,50335897,50360148,50390165,50515335,50520321,50529111,70979410,71008281
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 6f 20 73 68 61 72 65 20 61 6e 79 20 70 61 72 74 20 6f 66 20 74 68 69 73 20 6d 65 73 73 61 67 65 20 77 69 74 68 20 61 6e 79 20 74 68 69 72 64 20 70 61 72 74 79 2c 20 77 69 74 68 6f 75 74 20 61 20 77 72 69 74 74 65 6e 20 63 6f 6e 73 65 6e 74 20 6f 66 20 74 68 65 20 73 65 6e 64 65 72 2e 0a 0a 22 3e 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 73 69 74 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 76 69 65 77 2f 62 78 77 66 6a 6d 77 78 72 6c 66 70 62 7a 78 2f 68 6f 6d 65 22 3e 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6c 68 35 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 72 Data Ascii: o share any part of this message with any third party, without a written consent of the sender."><meta itemprop="url" content="https://sites.google.com/view/bxwfjmwxrlfpbzx/home"><meta itemprop="thumbnailUrl" content="https://lh5.googleusercontent.com/r
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 34 37 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 71 4c 72 61 70 64 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 34 2c 31 31 30 2c 31 34 37 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 4a 59 56 42 65 65 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 34 2c 31 31 30 2c 31 34 37 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 61 48 4d 37 65 64 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 34 2c 31 31 30 2c 31 34 37 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 4f 6d 51 47 35 65 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 4e 48 44 34 47 66 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 71 65 4c 5a 66 64 20 2e 61 77 35 4f 64 63 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 31 30 31 2c 31 32 38 Data Ascii: 47,1);}.qeLZfd .qLrapd{color: rgba(34,110,147,1);}.qeLZfd .JYVBee{color: rgba(34,110,147,1);}.qeLZfd .aHM7ed{color: rgba(34,110,147,1);}.qeLZfd .OmQG5e{color: rgba(33,33,33,1);}.qeLZfd .NHD4Gf{color: rgba(33,33,33,1);}.qeLZfd .aw5Odc{color: rgba(0,101,128
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 20 6f 70 61 63 69 74 79 3a 20 30 2e 34 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 4f 31 33 58 4a 66 20 2e 7a 66 72 33 51 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 4f 31 33 58 4a 66 20 2e 71 6e 56 53 6a 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 4f 31 33 58 4a 66 20 2e 47 6c 77 62 7a 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 4f 31 33 58 4a 66 20 2e 64 75 52 6a 70 62 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 4f 31 33 58 4a 66 20 2e 71 4c 72 61 70 64 7b 63 6f 6c 6f Data Ascii: ground-color: rgba(33,33,33,1); opacity: 0.4; display: block;}.O13XJf .zfr3Q{color: rgba(255,255,255,1);}.O13XJf .qnVSj{color: rgba(255,255,255,1);}.O13XJf .Glwbz{color: rgba(255,255,255,1);}.O13XJf .duRjpb{color: rgba(255,255,255,1);}.O13XJf .qLrapd{colo
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 31 38 38 2c 32 31 32 2c 31 29 3b 7d 2e 6a 31 30 79 52 62 2e 63 68 67 34 4a 64 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 33 36 30 30 30 30 30 31 34 33 29 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 74 43 48 58 44 63 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 69 57 73 33 67 66 2e 63 68 67 34 4a 64 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 31 39 39 39 39 39 39 37 33 29 3b 7d 2e 77 67 78 69 4d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 Data Ascii: r{color: rgba(0,188,212,1);}.j10yRb.chg4Jd:focus:before{border-color: rgba(255,255,255,0.3600000143); display: block;}.tCHXDc{color: rgba(255,255,255,1);}.iWs3gf.chg4Jd:focus{background-color: rgba(255,255,255,0.1199999973);}.wgxiMe{background-color: rgba
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 66 4f 55 34 36 62 20 2e 61 43 49 45 44 64 20 2e 5a 58 57 37 77 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 66 4f 55 34 36 62 20 2e 61 43 49 45 44 64 20 2e 6a 67 58 67 53 65 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 20 6f 70 61 63 69 74 79 3a 20 30 2e 38 32 3b 7d 2e 66 4f 55 34 36 62 20 2e 61 43 49 45 44 64 20 2e 4d 7a 38 67 76 62 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 66 4f 55 34 36 62 20 2e 61 43 49 45 44 64 20 2e 74 43 48 58 44 63 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 7d 2e 66 4f 55 34 36 62 20 2e 61 43 49 45 44 64 20 2e 69 57 73 Data Ascii: rgba(33,33,33,1);}.fOU46b .aCIEDd .ZXW7w{color: rgba(33,33,33,1);}.fOU46b .aCIEDd .jgXgSe:hover{color: rgba(33,33,33,1); opacity: 0.82;}.fOU46b .aCIEDd .Mz8gvb{color: rgba(33,33,33,1);}.fOU46b .aCIEDd .tCHXDc{color: rgba(33,33,33,1);}.fOU46b .aCIEDd .iWs
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 2d 66 61 6d 69 6c 79 3a 20 4c 61 74 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 30 70 78 3b 7d 2e 43 6f 62 6e 56 65 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 32 30 70 78 3b 7d 2e 61 48 4d 37 65 64 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 34 2c 31 31 30 2c 31 34 37 2c 31 29 3b 7d 2e 4f 6d 51 47 35 65 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4c 61 74 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 74 3b 20 66 6f 6e 74 2d 73 74 79 6c 65 3a Data Ascii: -family: Lato, sans-serif; font-size: 19pt; font-weight: 400; line-height: 1.4; margin-top: 20px;}.CobnVe{margin-bottom: -20px;}.aHM7ed{color: rgba(34,110,147,1);}.OmQG5e{color: rgba(33,33,33,1); font-family: Lato, sans-serif; font-size: 15pt; font-style:
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 67 6b 38 72 44 65 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 34 35 70 78 3b 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 39 70 78 29 7b 2e 67 6b 38 72 44 65 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 30 70 78 3b 7d 7d 2e 64 68 74 67 44 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 7d 2e 4a 7a 4f 30 56 63 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 33 2c 33 33 2c 33 33 2c 31 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 Data Ascii: d (min-width: 480px) and (max-width: 767px){.gk8rDe{padding-top: 45px;}}@media only screen and (max-width: 479px){.gk8rDe{padding-bottom: 0px; padding-top: 30px;}}.dhtgD{text-decoration: underline;}.JzO0Vc{background-color: rgba(33,33,33,1); font-family:
2024-04-25 14:02:32 UTC	2227	IN	Data Raw: 2e 63 4a 67 44 65 63 20 2e 4b 6a 77 4b 6d 63 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 34 32 2c 32 34 32 2c 32 34 32 2c 31 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4c 61 74 6f 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 7d 2e 63 4a 67 44 65 63 20 2e 4b 6a 77 4b 6d 63 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 30 30 30 30 30 30 30 31 35 29 3b 7d 2e 74 70 6d 6d 43 62 20 2e 51 6d 70 49 72 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 Data Ascii: .cJgDec .KjwKmc{color: rgba(242,242,242,1); font-family: Lato, sans-serif; font-size: 11pt; line-height: normal;}.cJgDec .KjwKmc:hover{background-color: rgba(255,255,255,0.1000000015);}.tpmmCb .QmpIrf{background-color: rgba(255,255,255,1); border-color: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49719	142.250.105.101	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:32 UTC	878	OUT	GET /js/client.js?onload=gapiLoaded HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
2024-04-25 14:02:33 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15101 Date: Thu, 25 Apr 2024 14:02:32 GMT Expires: Thu, 25 Apr 2024 14:02:32 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "3767fe962befa4de" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 14:02:33 UTC	418	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 63 61 3d 62 61 28 74 68 69 73 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 63 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 0a 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: d global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 6e 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 64 61 3d 30 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 55 72 6c 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 76 3d 61 7d 3b 79 Data Ascii: ght The Closure Library Authors. SPDX-License-Identifier: Apache-2.0/var m=this\|\|self,n="closure_uid_"+(1E9Math.random()>>>0),da=0,r=function(a){return a};var y=function(a){if(x!==x)throw Error("SafeUrl is not meant to be built directly");this.v=a};y
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 2c 6d 61 3d 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 63 7d 2c 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 6f 72 74 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 76 6f 69 64 20 30 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 65 21 3d 63 26 26 62 2e 70 75 73 68 28 65 29 3b 63 3d 65 7d 72 65 74 75 72 6e 20 62 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 69 66 28 28 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 29 26 26 6d 61 2e 74 65 73 74 28 61 29 29 61 3d 61 28 6e 75 6c 6c 29 3b 65 6c 73 65 7b 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 Data Ascii: ,ma=/\[native code\]/,H=function(a,b,c){return a[b]=a[b]\|\|c},na=function(a){a=a.sort();for(var b=[],c=void 0,d=0;d<a.length;d++){var e=a[d];e!=c&&b.push(e);c=e}return b},I=function(){var a;if((a=Object.create)&&ma.test(a))a=a(null);else{a={};for(var b in
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 3f 4b 5b 62 5d 3d 48 28 4b 2c 62 2c 5b 5d 29 2e 63 6f 6e 63 61 74 28 63 29 3a 48 28 4b 2c 62 2c 63 29 7d 69 66 28 62 3d 61 2e 75 29 61 3d 48 28 4b 2c 22 75 73 22 2c 5b 5d 29 2c 61 2e 70 75 73 68 28 62 29 2c 28 62 3d 2f 5e 68 74 74 70 73 3a 28 2e 2a 29 24 2f 2e 65 78 65 63 28 62 29 29 26 26 61 2e 70 75 73 68 28 22 68 74 74 70 3a 22 2b 62 5b 31 5d 29 7d 5d 29 3b 76 61 72 20 76 61 3d 2f 5e 28 5c 2f 5b 61 2d Data Ascii: ;};U.push(["jsl",function(a){for(var b in a)if(Object.prototype.hasOwnProperty.call(a,b)){var c=a[b];"object"==typeof c?K[b]=H(K,b,[]).concat(c):H(K,b,c)}if(b=a.u)a=H(K,"us",[]),a.push(b),(b=/^https:(.*)$/.exec(b))&&a.push("http:"+b[1])}]);var va=/^(\/[a-
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 29 7d 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 56 28 22 72 65 6c 61 74 69 76 65 20 70 61 74 68 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 61 2e 73 75 62 73 74 72 69 6e Data Ascii: ,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join("")},Ea=function(a){"/"!==a.charAt(0)&&V("relative path");for(var b=a.substrin
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 30 3e 66 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4b 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 48 61 29 3f 61 3a 4b 2e 6e Data Ascii: _0-9\/A-Za-z]+={0,2}$/,Ia=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=0>f}f&&c.push(e)}return c},Ja=function(){var a=K.nonce;return void 0!==a?a&&a===String(a)&&a.match(Ha)?a:K.n
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 3a 20 21 68 69 6e 74 22 29 3b 4f 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 21 21 4b 2e 67 6c 72 70 3b 61 3d 6e 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 66 3d 62 2e 63 6f 6e 66 69 67 2c 6b 3d 62 2e 74 69 6d 65 6f 75 74 2c 74 3d 62 2e 6f 6e 74 69 6d 65 6f 75 74 2c 6c 3d 62 2e 6f 6e 65 72 72 6f 72 2c 70 3d 76 6f 69 64 20 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 28 70 3d 6c 29 3b 76 61 72 20 7a 3d 6e 75 6c 6c 2c 52 3d 21 31 3b 69 66 28 6b 26 26 21 74 7c 7c 21 6b 26 26 74 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 Data Ascii: : !hint");Oa(b\|\|[],c,a)},Oa=function(a,b,c){var d=!!K.glrp;a=na(a)\|\|[];var e=b.callback,f=b.config,k=b.timeout,t=b.ontimeout,l=b.onerror,p=void 0;"function"==typeof l&&(p=l);var z=null,R=!1;if(k&&!t\|\|!k&&t)throw"Timeout requires both the timeout parameter
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 61 2e 6d 65 73 73 61 67 65 29 7d 51 61 3d 52 61 3b 76 61 72 20 59 3d 51 61 3b 76 61 72 20 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 4b 2e 68 65 65 26 26 30 3c 4b 2e 68 65 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 62 26 26 62 28 63 29 2c 4b 2e 68 65 6c 2d 2d 2c 50 61 28 22 64 65 62 75 67 5f 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 5f 5f 5f 6a 73 6c 2e 68 65 66 6e 28 63 29 7d 63 61 74 63 68 28 64 29 7b 74 68 72 6f 77 20 63 3b 7d 7d 29 7d 65 6c 73 65 20 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 62 26 26 62 28 63 29 2c 63 3b 7d 7d 3b 76 61 72 20 53 61 3d 4a 2e 6c 6f 61 64 3b 53 61 26 26 48 28 4b 2c 22 6f 6c 22 2c Data Ascii: a.message)}Qa=Ra;var Y=Qa;var Ma=function(a,b){if(K.hee&&0<K.hel)try{return a()}catch(c){b&&b(c),K.hel--,Pa("debug_error",function(){try{window.___jsl.hefn(c)}catch(d){throw c;}})}else try{return a()}catch(c){throw b&&b(c),c;}};var Sa=J.load;Sa&&H(K,"ol",
2024-04-25 14:02:33 UTC	1255	IN	Data Raw: 31 7d 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 3a 2e 30 31 7d 2c 63 6c 69 65 6e 74 3a 7b 63 6f 72 73 3a 21 31 7d 2c 73 69 67 6e 49 6e 44 65 70 72 65 63 61 74 69 6f 6e 3a 7b 72 61 74 65 3a 30 7d 2c 69 6e 63 6c 75 64 65 5f 67 72 61 6e 74 65 64 5f 73 63 6f 70 65 73 3a 21 30 2c 6c 6c 61 6e 67 3a 22 65 6e 22 2c 69 66 72 61 6d 65 73 3a 7b 79 6f 75 74 75 62 65 3a 7b 70 61 72 61 6d 73 3a 7b 6c 6f 63 61 74 69 6f 6e 3a 5b 22 73 65 61 72 63 68 22 2c 22 68 61 73 68 22 5d 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 Data Ascii: 1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widge

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49721	142.250.105.101	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:34 UTC	994	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
2024-04-25 14:02:34 UTC	903	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript; charset=UTF-8 Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 325611 Date: Thu, 25 Apr 2024 14:02:34 GMT Expires: Fri, 25 Apr 2025 14:02:34 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 14:02:34 UTC	352	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 Data Ascii: on"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typ
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 Data Ascii: d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="undefined"!=type
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d Data Ascii: [];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=null;try{l()}
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 75 72 6e 21 30 3b 22 66 75 6e 63 74 69 Data Ascii: nction(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)return!0;"functi
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 Data Ascii: e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c([]):new e(fu
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 Data Ascii: n!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExt
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d 2e 6e 66 3d 7b 6e 65 78 74 3a 74 68 69 Data Ascii: p,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m.nf={next:thi
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 Data Ascii: =""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(function(){if(
2024-04-25 14:02:34 UTC	1255	IN	Data Raw: 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 0a 5f 2e 75 61 28 63 29 3b 66 6f 72 28 Data Ascii: .entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=_.ua(c);for(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49711	64.233.176.101	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:34 UTC	1024	OUT	POST /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive Content-Length: 3047 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/view/bxwfjmwxrlfpbzx/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
2024-04-25 14:02:34 UTC	3047	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 37 31 34 30 35 33 37 35 34 32 34 33 30 30 30 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 31 37 31 34 30 35 33 37 35 34 32 34 33 30 30 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 37 31 36 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 25 35 44 25 35 44 25 32 43 25 35 42 25 32 32 43 4d 32 39 6e 4f 6a 44 33 59 55 44 46 54 2d 72 54 77 6b 64 57 43 6b 4f 37 77 25 32 32 25 32 43 31 37 31 34 30 35 33 37 35 34 32 34 32 30 30 30 25 32 43 31 37 31 34 30 35 33 37 35 32 32 33 33 36 37 35 25 32 43 25 32 32 41 48 4b 58 6d 4c 33 70 4f 4f 72 33 34 37 5a 59 31 Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C1%2C1714053754243000%2Cnull%2Cnull%2Cnull%2C%5B%5B1714053754243000%5D%2Cnull%2C1%5D%2Cnull%2C716%2Cnull%2C1%2C1%5D%5D%2C%5B%22CM29nOjD3YUDFT-rTwkdWCkO7w%22%2C1714053754242000%2C1714053752233675%2C%22AHKXmL3pOOr347ZY1
2024-04-25 14:02:35 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 14:02:35 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 14:02:35 UTC	22	IN	Data Raw: 31 30 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 66 2e 6d 74 22 5d 5d 0d 0a Data Ascii: 10)]}'[["f.mt"]]
2024-04-25 14:02:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49735	172.253.124.100	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:35 UTC	543	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://sites.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 14:02:35 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 25 Apr 2024 14:02:35 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49733	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:35 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 14:02:35 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=147623 Date: Thu, 25 Apr 2024 14:02:35 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49737	64.233.177.113	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:35 UTC	658	OUT	GET /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
2024-04-25 14:02:35 UTC	578	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 14:02:35 GMT X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 14:02:35 UTC	61	IN	Data Raw: 33 37 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 5d 0d 0a Data Ascii: 37)]}'[["er",null,null,null,null,400,null,null,null,3]]
2024-04-25 14:02:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49738	172.253.124.100	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:35 UTC	1000	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2559 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=lU1FeOlD4rGfIQuL-m4n3IeoLOQDTQNpkWwXNsU6izVFUgheHqbYA949tLgjOiZh74KRpnciAaWRWfZNNDjHiQqxoAjZ4UBAqX4lsLb2KfSRNnGaW-jcMwCMAfvbrg0dkprun9gDRZf0Ik2WXiVq_jAOr1crmG0IH7xfhUHWZDg
2024-04-25 14:02:35 UTC	2559	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 31 34 30 35 33 37 35 34 32 34 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 31 34 30 35 33 37 35 34 32 34 33 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 31 34 30 35 33 37 35 34 32 34 33 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,null,[4,0,0,0,0]]],2033,[["1714053754249",null,null,null,null,null,null,"[[[null,null,1,1714053754243000,null,null,null,[[1714053754243000],null,1],null,716,null,
2024-04-25 14:02:35 UTC	922	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=iAvvB9p9WCKBhbFsvdxhMLLqOYX7dKtPobiygk-TZXbg__v2fbCCgM705ohWd2Vg4bXzMc5ZTpxfMf2SDSCaW2JHE_UnjP4Bfkcm-tIQ76XQTIjjgOcjNlrmuOG5_yGBbx3lqDpVBUC7FzZO7MBWVNOTd5RC18FmfGccDXfgVqo; expires=Fri, 25-Oct-2024 14:02:35 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 25 Apr 2024 14:02:35 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 25 Apr 2024 14:02:35 GMT Connection: close Transfer-Encoding: chunked
2024-04-25 14:02:35 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-25 14:02:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49739	23.220.189.216	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:35 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-25 14:02:36 UTC	521	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/074E) X-CID: 11 Cache-Control: public, max-age=147621 Date: Thu, 25 Apr 2024 14:02:36 GMT Content-Range: bytes 0-54/55 Content-Length: 55 Connection: close X-CID: 2
2024-04-25 14:02:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49741	172.253.124.132	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:36 UTC	842	OUT	GET /rHxr7GxsBsioYoLI9vB1VW6OXvmkH7oYcEOmOMOj-gH8fNgzG4sT3q_y5chkbLD6hl24eu5F2QWHBGi9jPVIYGwN-oHbCshpGnWFd7N6GuO4hnxq HTTP/1.1 Host: lh5.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 14:02:36 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 26 Apr 2024 14:02:36 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="frans.png" X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 14:02:36 GMT Server: fife Content-Length: 4858 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 14:02:36 UTC	737	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0b 00 00 01 0b 08 03 00 00 00 f9 8b 53 60 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5a 50 4c 54 45 47 70 4c 00 24 00 06 38 23 00 2f 11 00 39 1d f7 79 20 00 40 21 00 3d 24 01 3e 22 ff ff ff 3c 47 46 2a 40 2c e3 eb e9 f2 7e 2a c8 d6 cf f9 ff fe 01 3d 2d 52 6d 61 35 55 46 ad c0 b7 83 96 8e df 80 30 16 40 26 66 81 75 7a 59 27 57 4d 22 b3 70 30 94 65 2c 9e b2 a6 c3 78 30 50 28 f6 fb 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 12 3f 49 44 41 54 78 9c ed 5d 8b 82 a2 3a 0c dd 3e 2c 9d cb 5b 1e 82 e8 ff ff e6 4d d2 42 11 70 46 1d 50 67 a6 67 77 dc 59 85 d2 1e 92 34 49 43 fd f7 cf c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 Data Ascii: PNGIHDRS`sBITOZPLTEGpL$8#/9y @!=$>"<GF@,~=-Rma5UF0@&fuzY'WM"p0e,x0P(tRNS@f?IDATx]:>,[MBpFPggwY4IC
2024-04-25 14:02:36 UTC	1255	IN	Data Raw: 9e 6c ea 52 5c e0 85 5c 64 10 98 77 20 14 2d 4c 97 10 a4 43 38 0e 23 47 71 a8 43 9b b2 68 1a 34 a6 4f eb d0 2b 75 24 e3 dd 2e ee 6a cc e3 61 b0 0e 3f 21 f8 54 55 45 2e b7 0d 51 3b fe eb b9 c0 19 43 8a 0e 84 22 03 5d 40 9d 10 6d 73 ae aa 0b 0f 1c 7f ab 84 7a 5a a7 5e c3 85 06 4b 29 83 26 3e 87 92 26 d2 ba 39 a2 34 2c 84 a6 95 cc 9e d6 c1 17 c9 05 0c 3f 6b e3 4e 20 13 82 88 98 67 2b 08 47 a9 7f 39 17 98 d3 0e ab 06 1c 2b 30 11 55 1c f7 01 6a ff e3 08 69 70 79 e4 57 73 11 a8 40 1c 5b c1 25 66 b1 76 f3 5c 9e 53 91 96 cb df cc 85 71 a5 9a 76 60 e2 22 63 31 52 11 78 3d f3 27 76 ee 45 5c a8 ff 5a f6 df f1 62 ca 98 4a 05 52 52 85 4f 9c 52 5f c6 85 ac 8f f1 25 13 71 55 9d cf c7 ae 3b 12 2a c0 b9 09 71 b5 ec 69 1d 7b 11 17 26 8d e5 d2 37 5d 83 ab 62 92 db 87 9c e0 Data Ascii: lR\\dw -LC8#GqCh4O+u$.ja?!TUE.Q;C"]@mszZ^K)&>&94,?kN g+G9+0UjipyWs@[%fv\Sqv`"c1Rx='vE\ZbJRROR_%qU;*qi{&7]b
2024-04-25 14:02:36 UTC	1255	IN	Data Raw: e1 7d b8 70 72 f1 b0 ed 84 71 50 ba 5b 69 85 af 34 83 dc e1 6b bd 0f 17 72 1d 2e be d3 83 b7 e1 62 25 b9 78 fc fa 6f 24 17 fa d5 5c bc 48 2e fa a2 ed be 72 1b 7f e5 73 2e a4 d1 76 6d 4f f9 ac fd 1b b8 e8 cb 83 03 4e a5 c2 b3 c6 66 72 31 2e 1d bd 71 60 06 f7 71 61 20 05 59 7a f0 93 b1 27 0b 5c d0 57 dd 08 33 1f a0 59 bc 7e cb be e0 62 88 d4 90 5e f0 d6 99 89 48 2f 8f 5e e4 82 ce bc 73 71 ea 3e 1d 41 22 98 38 9c 92 24 4a 92 d3 41 0a 7c ec 61 c6 05 1e c4 ed 41 c5 41 2e 04 f4 b3 71 5c 3d 82 62 13 73 d9 9c 5a 2c ca 9a c9 71 97 97 ec 05 9c 04 a4 f1 db 03 3c c2 9d 5c 48 b6 4f 46 a1 43 b2 67 4b 72 c1 f2 c2 1d 94 16 7b 71 b5 c1 af b8 90 d0 4e 9a cb 40 64 a3 16 93 9c 2d b5 e1 de 61 27 3a ae bc 33 a9 71 9f 8e 48 5e 5c 46 51 1f 27 36 e1 42 07 82 27 ee f3 14 0f 2f d9 Data Ascii: }prqP[i4kr.b%xo$\H.rs.vmONfr1.q`qa Yz'\W3Y~b^H/^sq>A"8$JA\|aAA.q\=bsZ,q<\HOFCgKr{qN@d-a':3qH^\FQ'6B'/
2024-04-25 14:02:36 UTC	1255	IN	Data Raw: bc 3d 5f 19 34 ff 50 84 73 8f 5c c0 67 26 05 f8 c0 1a ed 1d 5c e4 b4 44 71 62 b2 cf dc 2b b6 8f d2 4b 2e 24 25 37 3f 92 10 93 08 fd 7e 51 52 b0 fc ca 93 a5 83 8e 4c 8b 1a 9d 5c 7c c5 c5 44 2e cc 9a 40 0a 6e c6 dd ce f8 ed 5c 04 40 38 dd f4 9c 09 cc a7 09 26 4f 18 77 45 b4 84 21 6c 56 5f e4 a6 2c ef 94 e1 82 ab a0 65 55 51 26 9f e6 c1 d3 6c 21 cc 37 e3 bf 53 2e 0c a5 20 9c a4 a9 1b 72 d1 2f cd 7d 44 a7 43 be cf 4b b3 98 98 e6 09 39 de fd fa 88 f1 84 f1 a8 a2 3c 1c 0e 65 99 d8 c4 db 75 2e 16 c3 39 73 c2 bd 72 61 64 8a d4 39 bd 9b 8c bb d6 cd ec 5a c7 18 51 4e 9e c7 30 d9 6a 35 5b 5c a3 70 6d 31 7b d1 e7 7e e9 a8 11 06 2e 74 cf c5 24 c9 37 8d d9 d3 8b 28 58 5b 33 56 2c a4 9e 56 e3 42 8a fd 64 35 af 08 05 71 81 79 15 6a 05 b4 47 c8 62 7e a3 93 65 0f ec 6a 4d Data Ascii: =_4Ps\g&\Dqb+K.$%7?~QRL\\|D.@n\@8&OwE!lV_,eUQ&l!7S. r/}DCK9<eu.9srad9ZQN0j5[\pm1{~.t$7(X[3V,VBd5qyjGb~ejM
2024-04-25 14:02:36 UTC	356	IN	Data Raw: cd 5c a0 70 50 5e 93 11 17 b4 14 0d 72 81 9b ca 9f 77 d5 11 f7 c8 06 f1 c0 a6 64 df 54 aa 15 3a 28 11 26 d3 72 89 5c e0 f9 09 7b 77 2e 94 08 ca 24 4a 23 98 27 64 19 91 2b 15 c1 1c 22 f0 e9 1b 7c a0 06 55 c3 e4 ef 98 40 2f 8a eb 2c 8a 68 61 45 65 b2 89 ab aa 0b 8f 55 67 8a be 25 2f 23 6a 0a 2b 48 31 ad 18 15 e8 58 30 73 7e c2 e0 cc fa 9d b9 00 88 be b0 5d 52 8e 4e 50 8d bb 1c 2d 77 f4 e9 3b 41 f9 4f c9 86 34 28 6e fd 20 a5 33 01 72 68 ca 36 60 04 a6 6f 60 74 e6 7a d8 78 ff ce 3b 3e d1 f4 9d 23 af dc ca f1 ad 72 39 fa b5 7d 59 9b 8b cf 5b fb 64 b0 0b 2b ed 4b c7 6e c9 d6 5b c9 c5 8b e1 b9 70 f0 5c 38 78 2e 1c 3c 17 0e 9e 0b 07 cf 85 83 e7 c2 c1 73 e1 e0 b9 70 f0 5c 38 78 2e 1c 3c 17 0e 9e 0b 07 cf 85 83 e7 c2 c1 73 e1 e0 b9 70 f0 5c 38 78 2e 1c 3c 17 0e 9e Data Ascii: \pP^rwdT:(&r\{w.$J#'d+"\|U@/,haEeUg%/#j+H1X0s~]RNP-w;AO4(n 3rh6`o`tzx;>#r9}Y[d+Kn[p\8x.<sp\8x.<sp\8x.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49744	172.253.124.132	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:37 UTC	558	OUT	GET /rHxr7GxsBsioYoLI9vB1VW6OXvmkH7oYcEOmOMOj-gH8fNgzG4sT3q_y5chkbLD6hl24eu5F2QWHBGi9jPVIYGwN-oHbCshpGnWFd7N6GuO4hnxq HTTP/1.1 Host: lh5.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-25 14:02:37 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 26 Apr 2024 14:02:37 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="frans.png" X-Content-Type-Options: nosniff Date: Thu, 25 Apr 2024 14:02:37 GMT Server: fife Content-Length: 4858 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-25 14:02:37 UTC	737	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 0b 00 00 01 0b 08 03 00 00 00 f9 8b 53 60 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 00 5a 50 4c 54 45 47 70 4c 00 24 00 06 38 23 00 2f 11 00 39 1d f7 79 20 00 40 21 00 3d 24 01 3e 22 ff ff ff 3c 47 46 2a 40 2c e3 eb e9 f2 7e 2a c8 d6 cf f9 ff fe 01 3d 2d 52 6d 61 35 55 46 ad c0 b7 83 96 8e df 80 30 16 40 26 66 81 75 7a 59 27 57 4d 22 b3 70 30 94 65 2c 9e b2 a6 c3 78 30 50 28 f6 fb 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 12 3f 49 44 41 54 78 9c ed 5d 8b 82 a2 3a 0c dd 3e 2c 9d cb 5b 1e 82 e8 ff ff e6 4d d2 42 11 70 46 1d 50 67 a6 67 77 dc 59 85 d2 1e 92 34 49 43 fd f7 cf c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 c3 Data Ascii: PNGIHDRS`sBITOZPLTEGpL$8#/9y @!=$>"<GF@,~=-Rma5UF0@&fuzY'WM"p0e,x0P(tRNS@f?IDATx]:>,[MBpFPggwY4IC
2024-04-25 14:02:37 UTC	1255	IN	Data Raw: 9e 6c ea 52 5c e0 85 5c 64 10 98 77 20 14 2d 4c 97 10 a4 43 38 0e 23 47 71 a8 43 9b b2 68 1a 34 a6 4f eb d0 2b 75 24 e3 dd 2e ee 6a cc e3 61 b0 0e 3f 21 f8 54 55 45 2e b7 0d 51 3b fe eb b9 c0 19 43 8a 0e 84 22 03 5d 40 9d 10 6d 73 ae aa 0b 0f 1c 7f ab 84 7a 5a a7 5e c3 85 06 4b 29 83 26 3e 87 92 26 d2 ba 39 a2 34 2c 84 a6 95 cc 9e d6 c1 17 c9 05 0c 3f 6b e3 4e 20 13 82 88 98 67 2b 08 47 a9 7f 39 17 98 d3 0e ab 06 1c 2b 30 11 55 1c f7 01 6a ff e3 08 69 70 79 e4 57 73 11 a8 40 1c 5b c1 25 66 b1 76 f3 5c 9e 53 91 96 cb df cc 85 71 a5 9a 76 60 e2 22 63 31 52 11 78 3d f3 27 76 ee 45 5c a8 ff 5a f6 df f1 62 ca 98 4a 05 52 52 85 4f 9c 52 5f c6 85 ac 8f f1 25 13 71 55 9d cf c7 ae 3b 12 2a c0 b9 09 71 b5 ec 69 1d 7b 11 17 26 8d e5 d2 37 5d 83 ab 62 92 db 87 9c e0 Data Ascii: lR\\dw -LC8#GqCh4O+u$.ja?!TUE.Q;C"]@mszZ^K)&>&94,?kN g+G9+0UjipyWs@[%fv\Sqv`"c1Rx='vE\ZbJRROR_%qU;*qi{&7]b
2024-04-25 14:02:37 UTC	1255	IN	Data Raw: e1 7d b8 70 72 f1 b0 ed 84 71 50 ba 5b 69 85 af 34 83 dc e1 6b bd 0f 17 72 1d 2e be d3 83 b7 e1 62 25 b9 78 fc fa 6f 24 17 fa d5 5c bc 48 2e fa a2 ed be 72 1b 7f e5 73 2e a4 d1 76 6d 4f f9 ac fd 1b b8 e8 cb 83 03 4e a5 c2 b3 c6 66 72 31 2e 1d bd 71 60 06 f7 71 61 20 05 59 7a f0 93 b1 27 0b 5c d0 57 dd 08 33 1f a0 59 bc 7e cb be e0 62 88 d4 90 5e f0 d6 99 89 48 2f 8f 5e e4 82 ce bc 73 71 ea 3e 1d 41 22 98 38 9c 92 24 4a 92 d3 41 0a 7c ec 61 c6 05 1e c4 ed 41 c5 41 2e 04 f4 b3 71 5c 3d 82 62 13 73 d9 9c 5a 2c ca 9a c9 71 97 97 ec 05 9c 04 a4 f1 db 03 3c c2 9d 5c 48 b6 4f 46 a1 43 b2 67 4b 72 c1 f2 c2 1d 94 16 7b 71 b5 c1 af b8 90 d0 4e 9a cb 40 64 a3 16 93 9c 2d b5 e1 de 61 27 3a ae bc 33 a9 71 9f 8e 48 5e 5c 46 51 1f 27 36 e1 42 07 82 27 ee f3 14 0f 2f d9 Data Ascii: }prqP[i4kr.b%xo$\H.rs.vmONfr1.q`qa Yz'\W3Y~b^H/^sq>A"8$JA\|aAA.q\=bsZ,q<\HOFCgKr{qN@d-a':3qH^\FQ'6B'/
2024-04-25 14:02:37 UTC	1255	IN	Data Raw: bc 3d 5f 19 34 ff 50 84 73 8f 5c c0 67 26 05 f8 c0 1a ed 1d 5c e4 b4 44 71 62 b2 cf dc 2b b6 8f d2 4b 2e 24 25 37 3f 92 10 93 08 fd 7e 51 52 b0 fc ca 93 a5 83 8e 4c 8b 1a 9d 5c 7c c5 c5 44 2e cc 9a 40 0a 6e c6 dd ce f8 ed 5c 04 40 38 dd f4 9c 09 cc a7 09 26 4f 18 77 45 b4 84 21 6c 56 5f e4 a6 2c ef 94 e1 82 ab a0 65 55 51 26 9f e6 c1 d3 6c 21 cc 37 e3 bf 53 2e 0c a5 20 9c a4 a9 1b 72 d1 2f cd 7d 44 a7 43 be cf 4b b3 98 98 e6 09 39 de fd fa 88 f1 84 f1 a8 a2 3c 1c 0e 65 99 d8 c4 db 75 2e 16 c3 39 73 c2 bd 72 61 64 8a d4 39 bd 9b 8c bb d6 cd ec 5a c7 18 51 4e 9e c7 30 d9 6a 35 5b 5c a3 70 6d 31 7b d1 e7 7e e9 a8 11 06 2e 74 cf c5 24 c9 37 8d d9 d3 8b 28 58 5b 33 56 2c a4 9e 56 e3 42 8a fd 64 35 af 08 05 71 81 79 15 6a 05 b4 47 c8 62 7e a3 93 65 0f ec 6a 4d Data Ascii: =_4Ps\g&\Dqb+K.$%7?~QRL\\|D.@n\@8&OwE!lV_,eUQ&l!7S. r/}DCK9<eu.9srad9ZQN0j5[\pm1{~.t$7(X[3V,VBd5qyjGb~ejM
2024-04-25 14:02:37 UTC	356	IN	Data Raw: cd 5c a0 70 50 5e 93 11 17 b4 14 0d 72 81 9b ca 9f 77 d5 11 f7 c8 06 f1 c0 a6 64 df 54 aa 15 3a 28 11 26 d3 72 89 5c e0 f9 09 7b 77 2e 94 08 ca 24 4a 23 98 27 64 19 91 2b 15 c1 1c 22 f0 e9 1b 7c a0 06 55 c3 e4 ef 98 40 2f 8a eb 2c 8a 68 61 45 65 b2 89 ab aa 0b 8f 55 67 8a be 25 2f 23 6a 0a 2b 48 31 ad 18 15 e8 58 30 73 7e c2 e0 cc fa 9d b9 00 88 be b0 5d 52 8e 4e 50 8d bb 1c 2d 77 f4 e9 3b 41 f9 4f c9 86 34 28 6e fd 20 a5 33 01 72 68 ca 36 60 04 a6 6f 60 74 e6 7a d8 78 ff ce 3b 3e d1 f4 9d 23 af dc ca f1 ad 72 39 fa b5 7d 59 9b 8b cf 5b fb 64 b0 0b 2b ed 4b c7 6e c9 d6 5b c9 c5 8b e1 b9 70 f0 5c 38 78 2e 1c 3c 17 0e 9e 0b 07 cf 85 83 e7 c2 c1 73 e1 e0 b9 70 f0 5c 38 78 2e 1c 3c 17 0e 9e 0b 07 cf 85 83 e7 c2 c1 73 e1 e0 b9 70 f0 5c 38 78 2e 1c 3c 17 0e 9e Data Ascii: \pP^rwdT:(&r\{w.$J#'d+"\|U@/,haEeUg%/#j+H1X0s~]RNP-w;AO4(n 3rh6`o`tzx;>#r9}Y[d+Kn[p\8x.<sp\8x.<sp\8x.<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49746	64.233.176.101	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:38 UTC	1024	OUT	POST /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive Content-Length: 4499 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/view/bxwfjmwxrlfpbzx/home Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=iAvvB9p9WCKBhbFsvdxhMLLqOYX7dKtPobiygk-TZXbg__v2fbCCgM705ohWd2Vg4bXzMc5ZTpxfMf2SDSCaW2JHE_UnjP4Bfkcm-tIQ76XQTIjjgOcjNlrmuOG5_yGBbx3lqDpVBUC7FzZO7MBWVNOTd5RC18FmfGccDXfgVqo
2024-04-25 14:02:38 UTC	4499	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 32 25 32 43 31 37 31 34 30 35 33 37 35 34 32 37 31 30 30 30 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 25 35 42 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 39 38 34 25 32 43 31 32 38 30 25 35 44 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 30 25 32 43 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C2%2C1714053754271000%2C%5Bnull%2Cnull%2Cnull%2C%5B%5B%5B907%2C1280%5D%2C%5B984%2C1280%5D%5D%5D%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B0%2C0%5D%2Cnull%2Cnull
2024-04-25 14:02:38 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 14:02:38 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 14:02:38 UTC	22	IN	Data Raw: 31 30 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 66 2e 6d 74 22 5d 5d 0d 0a Data Ascii: 10)]}'[["f.mt"]]
2024-04-25 14:02:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49745	172.253.124.100	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:38 UTC	1000	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3638 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=iAvvB9p9WCKBhbFsvdxhMLLqOYX7dKtPobiygk-TZXbg__v2fbCCgM705ohWd2Vg4bXzMc5ZTpxfMf2SDSCaW2JHE_UnjP4Bfkcm-tIQ76XQTIjjgOcjNlrmuOG5_yGBbx3lqDpVBUC7FzZO7MBWVNOTd5RC18FmfGccDXfgVqo
2024-04-25 14:02:38 UTC	3638	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 31 34 30 35 33 37 35 37 32 34 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2033,[["1714053757246",null,null,n
2024-04-25 14:02:38 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 25 Apr 2024 14:02:38 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 14:02:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-25 14:02:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49747	64.233.177.113	443	408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:39 UTC	658	OUT	GET /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=iAvvB9p9WCKBhbFsvdxhMLLqOYX7dKtPobiygk-TZXbg__v2fbCCgM705ohWd2Vg4bXzMc5ZTpxfMf2SDSCaW2JHE_UnjP4Bfkcm-tIQ76XQTIjjgOcjNlrmuOG5_yGBbx3lqDpVBUC7FzZO7MBWVNOTd5RC18FmfGccDXfgVqo
2024-04-25 14:02:39 UTC	578	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 25 Apr 2024 14:02:39 GMT X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-25 14:02:39 UTC	61	IN	Data Raw: 33 37 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 5d 0d 0a Data Ascii: 37)]}'[["er",null,null,null,null,400,null,null,null,3]]
2024-04-25 14:02:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.5	49751	23.1.237.91	443

Timestamp	Bytes transferred	Direction	Data
2024-04-25 14:02:47 UTC	2148	OUT	POST /threshold/xls.aspx HTTP/1.1 Origin: https://www.bing.com Referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init Accept: / Accept-Language: en-CH Content-type: text/xml X-Agent-DeviceId: 01000A410900D492 X-BM-CBT: 1696428841 X-BM-DateFormat: dd/MM/yyyy X-BM-DeviceDimensions: 784x984 X-BM-DeviceDimensionsLogical: 784x984 X-BM-DeviceScale: 100 X-BM-DTZ: 120 X-BM-Market: CH X-BM-Theme: 000000;0078d7 X-BM-WindowsFlights: FX:117B9872,FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E X-Device-ClientSession: DB0AFB19004F47BC80E5208C7478FF22 X-Device-isOptin: false X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-Device-OSSKU: 48 X-Device-Touch: false X-DeviceID: 01000A410900D492 X-MSEdge-ExternalExp: d-thshld39,d-thshld42,d-thshld77,d-thshld78,staticsh X-MSEdge-ExternalExpType: JointCoord X-PositionerType: Desktop X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate X-Search-TimeZone: Bias=-60; DaylightBias=-60; TimeZoneKeyName=W. Europe Standard Time X-UserAgeClass: Unknown Accept-Encoding: gzip, deflate, br User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 Host: www.bing.com Content-Length: 2484 Connection: Keep-Alive Cache-Control: no-cache Cookie: MUID=2F4E96DB8B7049E59AD4484C3C00F7CF; _SS=SID=1A6DEABB468B65843EB5F91B47916435&CPID=1714053735598&AC=1&CPH=d1a4eb75; _EDGE_S=SID=1A6DEABB468B65843EB5F91B47916435; SRCHUID=V=2&GUID=3D32B8AC657C4AD781A584E283227995&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20231004; SRCHHPGUSR=SRCHLANG=en&IPMH=986d886c&IPMID=1696428841029&HV=1696428756; CortanaAppUID=5A290E2CC4B523E2D8B5E2E3E4CB7CB7; MUIDB=2F4E96DB8B7049E59AD4484C3C00F7CF
2024-04-25 14:02:47 UTC	1	OUT	Data Raw: 3c Data Ascii: <
2024-04-25 14:02:47 UTC	2483	OUT	Data Raw: 43 6c 69 65 6e 74 49 6e 73 74 52 65 71 75 65 73 74 3e 3c 43 49 44 3e 33 36 34 34 46 44 37 34 44 46 31 36 36 31 38 46 30 38 46 37 45 43 30 33 44 45 35 35 36 30 30 31 3c 2f 43 49 44 3e 3c 45 76 65 6e 74 73 3e 3c 45 3e 3c 54 3e 45 76 65 6e 74 2e 43 6c 69 65 6e 74 49 6e 73 74 3c 2f 54 3e 3c 49 47 3e 37 35 32 32 38 31 35 36 37 30 33 41 34 30 44 35 42 39 37 45 35 41 36 38 33 36 46 32 41 31 43 45 3c 2f 49 47 3e 3c 44 3e 3c 21 5b 43 44 41 54 41 5b 7b 22 43 75 72 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 2f 41 53 2f 41 50 49 2f 57 69 6e 64 6f 77 73 43 6f 72 74 61 6e 61 50 61 6e 65 2f 56 32 2f 49 6e 69 74 22 2c 22 50 69 76 6f 74 22 3a 22 51 46 22 2c 22 54 22 3a 22 43 49 2e 42 6f 78 4d 6f 64 65 6c 22 2c 22 46 49 44 22 3a 22 43 49 Data Ascii: ClientInstRequest><CID>3644FD74DF16618F08F7EC03DE556001</CID><Events><E><T>Event.ClientInst</T><IG>75228156703A40D5B97E5A6836F2A1CE</IG><D><![CDATA[{"CurUrl":"https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init","Pivot":"QF","T":"CI.BoxModel","FID":"CI
2024-04-25 14:02:47 UTC	479	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version X-MSEdge-Ref: Ref A: AB9EDDAE2DD9445A9F57454EEC95AA1A Ref B: LAX311000115007 Ref C: 2024-04-25T14:02:47Z Date: Thu, 25 Apr 2024 14:02:47 GMT Connection: close Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.57ed0117.1714053767.b3eaf4f

Target ID:	0
Start time:	16:02:25
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	16:02:28
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2416 --field-trial-handle=2376,i,394641249472652949,15814636106023307811,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	16:02:30
Start date:	25/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/bxwfjmwxrlfpbzx/home"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sites.google.com/view/bxwfjmwxrlfpbzx/home

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Chrome Cache Entry: 97

Windows Analysis Report
https://sites.google.com/view/bxwfjmwxrlfpbzx/home