Edit tour

Windows Analysis Report
https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s

Overview

General Information

Sample URL:	https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-
Analysis ID:	1431957
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4176 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2724 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4924 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5556 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1068 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=2113894612&timestamp=1714097877496
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=2113894612&timestamp=1714097877496
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: Iframe src: /_/bscframe

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

HTTP Parser: <input type="password" .../> found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/chrome/answer/6130773?hl=en	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA#topic=3382296	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&followup=https%3A%2F%2Fdocs.google.com%2Fspreadsheets%2Fd%2F1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI%2Fedit%3Fusp%3Dsharing&ifkv=AaSxoQwwHrLON7wfE25xW8ddFoz0LCVkFHD0qZEvZgxwYZdDCBSq0bGN5gjm8g4xk0bY-lBCZZ8sZA&ltmpl=sheets&osid=1&passive=1209600&service=wise&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1643995330%3A1714097871804562&theme=mn&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 23.46.188.128
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	TCP traffic detected without corresponding DNS query: 72.21.81.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts/roboto.css HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts/font-awesome.min.css HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/style.css HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/vendor/jquery-ui.min.css HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/vendor/jquery-ui.theme.min.css HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/vendor/jquery-ui.structure.min.css HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us01.z.antigena.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts/Roboto-Regular.ttf HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us01.z.antigena.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/logo.png HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/vendor/jquery-1.11.3.min.js HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/vendor/jquery-ui.min.js HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/vendor/jquery_form.min.js HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/vendor/underscore-min.js HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/link-unlock.js HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/logo.png HTTP/1.1Host: us01.z.antigena.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&c=&u=&f= HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Pragma: no-cacheX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/favicon.ico HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/favicon.ico HTTP/1.1Host: us01.z.antigena.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts/Roboto-Light.ttf HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://us01.z.antigena.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /landing?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&c=&u=&f= HTTP/1.1Host: us01.z.antigena.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /request_access?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&chainID=3c31f3ca-59d9-46f6-9b07-755787e0a198&c=&u=&f= HTTP/1.1Host: us01.z.antigena.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01Pragma: no-cacheX-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /request_access?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&chainID=3c31f3ca-59d9-46f6-9b07-755787e0a198&c=&u=&f= HTTP/1.1Host: us01.z.antigena.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /spreadsheets/d/1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI/edit?usp=sharing HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=2113894612&timestamp=1714097877496 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en-US HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=JBJmpzcU_PcPKTikrfdU3xgwuQVd4h_EJyravoAKTYuMLv5N9xCH7m3AkJMF2h-DyeGU93i7E3fn8wsr34iEY0gaxKV774Nr6pA6FIEsv8nfHhliNhX6BGMrdrj57s6-em8liDRTwsRp1l8LOuFBJKHCW7HzVwgan_KON6-2ylg
Source: global traffic	HTTP traffic detected: GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802540,10802571,10802616,10802624,10802781,10803188,10803213,10803447,10803680 HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.1.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/chrome/answer/6130773?hl=enAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802624%2C10802781%2C10803188%2C10803213%2C10803447%2C10803680&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en-US&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /accounts/?hl=en&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638496946828842109-1905716545&p=account_iph&rd=1 HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097894.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1Host: lh4.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts/?hl=en&sjid=8919216180560458382-NA HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iphAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097894.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en-US HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /chrome/answer/6130773?hl=en HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802540,10802571,10802616,10802624,10802781,10803188,10803213,10803447,10803680 HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802624%2C10802781%2C10803188%2C10803213%2C10803447%2C10803680&authuser=0&v=1&helpcenter=chrome HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en-US&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /accounts/?hl=en&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638496946828842109-1905716545&p=account_iph&rd=1 HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph HTTP/1.1Host: support.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /accounts/?hl=en&sjid=8919216180560458382-NA HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iphAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097927.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1Host: support.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097927.0.0.0; _ga=GA1.3.1817944854.1714097885
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6

Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: ;function Cs(){this.part="snippet,id,contentDetails,localizations,statistics";this.zk=new qs({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: ;var bra=wa(["//www.youtube.com/player_api"]),JB=4/3,cra=16/9,KB={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function LB(a){var b=a.Db,c=void 0===a.Dl?!1:a.Dl;a=void 0===a.playerVars?KB:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Db=b;this.Dl=c;this.id=this.Db.getId();this.playerVars=a;b=this.Db.mediumThumbnail.width;c=this.Db.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===JB?JB:cra:JB;this.watch(this.Db)} equals www.youtube.com (Youtube)
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: ;var qea=wa(["//www.youtube.com/player_api"]),rea=Bo(qea),Ds=[],sea=!1;function Es(){if(!sea){window.onYouTubeIframeAPIReady=tea;var a=aq("SCRIPT");co(a,rea);document.head.appendChild(a);sea=!0}} equals www.youtube.com (Youtube)
Source: chromecache_122.2.dr	String found in binary or memory: _.Fw(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.Fw(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.Fw(_.Ow(c))+"&hl="+_.Fw(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.Fw(m)+"/chromebook/termsofservice.html?languageCode="+_.Fw(d)+"&regionCode="+_.Fw(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded":"")+"?hl="+_.Fw(d)+"&gl="+_.Fw(c)+(h?"&color_scheme="+ equals www.youtube.com (Youtube)
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: bb=bb.split("-")[0].toLowerCase();if(Ta===bb\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Ea(0);yp("youtube_video_model/load/success");return Pa(c,0)}Qa(c);a.state=3;a.Ea(0);yp("youtube_video_model/load/failure");Na(c)})} equals www.youtube.com (Youtube)
Source: chromecache_150.2.dr	String found in binary or memory: ff=u(["https://sandbox.google.com/tools/feedback/"]),gf=u(["https://www.google.cn/tools/feedback/"]),hf=u(["https://help.youtube.com/tools/feedback/"]),jf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),kf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),lf=u(["https://localhost.corp.google.com/inapp/"]),mf=u(["https://localhost.proxy.googlers.com/inapp/"]),nf=S(Pe),of=[S(Qe),S(Re)],pf=[S(Se),S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af)],qf=[S(bf),S(cf)],rf= equals www.youtube.com (Youtube)
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: function PB(a){if(ep())2==z().rs?window.YT&&window.YT.Player?RB(a,a.o):(Ds.push(function(f){RB(this,f)}.bind(a,a.o)),Es()):lp("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_125.2.dr, chromecache_169.2.dr	String found in binary or memory: return b}yC.J="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: us01.z.antigena.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: lh4.ggpht.com

Source: unknown

HTTP traffic detected: POST /log?hasfast=true&authuser=0&format=json HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 934sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://accounts.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q

Source: chromecache_161.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_161.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_109.2.dr, chromecache_165.2.dr, chromecache_135.2.dr, chromecache_113.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_109.2.dr	String found in binary or memory: http://jqueryui.com/themeroller/?ffDefault=Trebuchet%20MS%2CTahoma%2CVerdana%2CArial%2Csans-serif&fw
Source: chromecache_150.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_171.2.dr	String found in binary or memory: http://malsup.com/jquery/form/
Source: chromecache_130.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_152.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_121.2.dr, chromecache_152.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0Copyright
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_122.2.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_122.2.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_185.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_185.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_169.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_169.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_176.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_185.2.dr, chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_154.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_150.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_122.2.dr	String found in binary or memory: https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_125.2.dr, chromecache_169.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_185.2.dr, chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_185.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_185.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_185.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_122.2.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmZjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmdjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmtjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmxjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qER2i1dC.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2)
Source: chromecache_187.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2)
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_122.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.10.w
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.3.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.4.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.5.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.6.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.7.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.8.wo
Source: chromecache_106.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.9.wo
Source: chromecache_122.2.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/malsup/form
Source: chromecache_171.2.dr	String found in binary or memory: https://github.com/malsup/form#copyright-and-license
Source: chromecache_150.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_188.2.dr	String found in binary or memory: https://guidebooks.google.com
Source: chromecache_150.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug
Source: chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Source: chromecache_150.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_188.2.dr, chromecache_110.2.dr	String found in binary or memory: https://moltron-pa.clients6.google.com
Source: chromecache_188.2.dr	String found in binary or memory: https://myaccount.google.com/privacypolicy?hl=
Source: chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_125.2.dr, chromecache_169.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_110.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_122.2.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_122.2.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_185.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_185.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/privacy/additional/embedded?gl=kr
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_110.2.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/terms/location/embedded
Source: chromecache_122.2.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_188.2.dr	String found in binary or memory: https://policies.google.com/terms?hl=
Source: chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://safety.google/security-privacy/
Source: chromecache_150.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_150.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_150.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_v1.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/get_family_link_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_0.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_0.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/alreadyinstalledfamilylink.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/installfamilylink.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_122.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_150.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_169.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_169.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_176.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_110.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_150.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_110.2.dr	String found in binary or memory: https://support.google.com/accounts/
Source: chromecache_110.2.dr	String found in binary or memory: https://support.google.com/accounts?hl
Source: chromecache_122.2.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://support.google.com/accounts?p=learningcenter_7
Source: chromecache_122.2.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_188.2.dr	String found in binary or memory: https://support.google.com/chrome/?p=beta_forum_hc
Source: chromecache_188.2.dr	String found in binary or memory: https://support.google.com/chrome/?p=betadesktop
Source: chromecache_188.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773
Source: chromecache_188.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DAndroid
Source: chromecache_188.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DDesktop
Source: chromecache_188.2.dr	String found in binary or memory: https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DiOS
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://support.google.com/communities/answer/7424249
Source: chromecache_110.2.dr	String found in binary or memory: https://support.google.com/communities/answer/7425194
Source: chromecache_150.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_150.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_122.2.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_176.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_125.2.dr, chromecache_169.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_150.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_154.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_185.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_188.2.dr, chromecache_125.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_176.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_176.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_176.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_169.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.google.com/accounts/TOS
Source: chromecache_176.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_122.2.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true&render=explicit&onload=
Source: chromecache_150.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_150.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_125.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_185.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_185.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.googleapis.com/youtube/v3/videos?part=snippet%2C
Source: chromecache_125.2.dr, chromecache_169.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_176.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Source: chromecache_122.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_122.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_122.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_122.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_122.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_122.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_122.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_133.2.dr, chromecache_116.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_110.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_110.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_150.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_169.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_122.2.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_122.2.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49982
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49975
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49966
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49960
Source: unknown	Network traffic detected: HTTP traffic on port 50015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49966 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49944 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50051 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49944
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50026 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49999
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 50016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49992
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987
Source: unknown	Network traffic detected: HTTP traffic on port 50013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49975 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50007
Source: unknown	Network traffic detected: HTTP traffic on port 50037 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 50012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50009
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50008
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50002
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50018
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50017
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50019
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50012
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50011
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50014
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50013
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50016
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50015
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50029
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50021
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50023
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50022
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50025
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50026
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50033
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50036
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50037
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50051
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 50052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49960 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 50029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49982 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.46.188.128:443 -> 192.168.2.4:49757 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@27/159@30/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5556 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5556 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
http://www.broofa.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://play.google/intl/	0%	URL Reputation	safe
https://us01.z.antigena.com/css/fonts/Roboto-Regular.ttf	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/request_access?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&chainID=3c31f3ca-59d9-46f6-9b07-755787e0a198&c=&u=&f=	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/js/vendor/jquery-1.11.3.min.js	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/css/vendor/jquery-ui.structure.min.css	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/style.css	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/favicon.ico	0%	Avira URL Cloud	safe
https://safety.google/security-privacy/	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/js/link-unlock.js	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/css/fonts/roboto.css	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/landing?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&c=&u=&f=	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/css/fonts/font-awesome.min.css	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/js/vendor/jquery_form.min.js	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/css/vendor/jquery-ui.theme.min.css	0%	Avira URL Cloud	safe
https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/logo.png	0%	Avira URL Cloud	safe
https://safety.google/security-privacy/	1%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
docs.google.com	142.250.189.142	true	false	high
www3.l.google.com	172.217.2.206	true	false	high
play.google.com	172.217.165.206	true	false	high
plus.l.google.com	142.250.217.206	true	false	high
photos-ugc.l.googleusercontent.com	142.250.217.193	true	false	high
www.google.com	142.250.217.228	true	false	high
support.google.com	172.217.165.206	true	false	high
us01.z.antigena.com	40.76.134.238	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.217.193	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
accounts.youtube.com	unknown	unknown	false	high
lh3.googleusercontent.com	unknown	unknown	false	high
lh4.ggpht.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/generate_204	false		high
https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/style.css	false	Avira URL Cloud: safe	unknown
https://us01.z.antigena.com/css/vendor/jquery-ui.structure.min.css	false	Avira URL Cloud: safe	unknown
https://us01.z.antigena.com/js/vendor/jquery-1.11.3.min.js	false	Avira URL Cloud: safe	unknown
https://us01.z.antigena.com/css/fonts/Roboto-Regular.ttf	false	Avira URL Cloud: safe	unknown
https://support.google.com/chrome/answer/6130773?hl=en	false		high
https://support.google.com/accounts?hl=en-US&p=account_iph	false		high
https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA	false		high
https://us01.z.antigena.com/request_access?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&chainID=3c31f3ca-59d9-46f6-9b07-755787e0a198&c=&u=&f=	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false		high
https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/favicon.ico	false	Avira URL Cloud: safe	unknown
https://us01.z.antigena.com/js/link-unlock.js	false	Avira URL Cloud: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0	false		high
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts	false		high
https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64	false		high
https://us01.z.antigena.com/css/fonts/roboto.css	false	Avira URL Cloud: safe	unknown
https://us01.z.antigena.com/css/fonts/font-awesome.min.css	false	Avira URL Cloud: safe	unknown
https://us01.z.antigena.com/landing?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&c=&u=&f=	false	Avira URL Cloud: safe	unknown
https://support.google.com/apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts	false		high
https://us01.z.antigena.com/js/vendor/jquery_form.min.js	false	Avira URL Cloud: safe	unknown
https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph#topic=3382296	false		high
https://us01.z.antigena.com/css/vendor/jquery-ui.theme.min.css	false	Avira URL Cloud: safe	unknown
https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/logo.png	false	Avira URL Cloud: safe	unknown
https://support.google.com/chrome/answer/6130773?hl=en-US	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_161.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_169.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_150.2.dr	false		high
http://www.broofa.com	chromecache_133.2.dr, chromecache_116.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_150.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DiOS	chromecache_188.2.dr	false		high
https://support.google.com	chromecache_110.2.dr	false		high
https://www.youtube.com/embed/	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
http://underscorejs.org	chromecache_130.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_150.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/accounts/TOS	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://policies.google.com/terms?hl=	chromecache_188.2.dr	false		high
http://jqueryui.com	chromecache_109.2.dr, chromecache_165.2.dr, chromecache_135.2.dr, chromecache_113.2.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_150.2.dr	false		high
https://play.google.com/work/enroll?identifier=	chromecache_122.2.dr	false		high
https://policies.google.com/terms/service-specific	chromecache_122.2.dr	false		high
https://g.co/recover	chromecache_122.2.dr	false		high
https://moltron-pa.clients6.google.com	chromecache_188.2.dr, chromecache_110.2.dr	false		high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_122.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_176.2.dr	false		high
https://help.youtube.com/tools/feedback/	chromecache_150.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_185.2.dr	false		high
https://policies.google.com/technologies/cookies	chromecache_122.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0Copyright	chromecache_121.2.dr, chromecache_152.2.dr	false		high
https://policies.google.com/terms	chromecache_122.2.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_150.2.dr	false		high
https://www.google.com	chromecache_169.2.dr	false		high
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_122.2.dr	false		high
https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DAndroid	chromecache_188.2.dr	false		high
https://content-googleapis-test.sandbox.google.com	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_150.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_176.2.dr	false		high
https://myaccount.google.com/privacypolicy?hl=	chromecache_188.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_150.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://youtube.com/t/terms?gl=	chromecache_122.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_150.2.dr	false		high
https://www.google.com/intl/	chromecache_122.2.dr	false		high
https://support.google.com/chrome/?p=betadesktop	chromecache_188.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_154.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_150.2.dr	false		high
https://safety.google/security-privacy/	chromecache_111.2.dr, chromecache_110.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://support.google.com/communities/answer/7424249	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://adservice.google.com/pagead/regclk	chromecache_169.2.dr	false		high
https://schema.org	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://cct.google/taggy/agent.js	chromecache_125.2.dr, chromecache_169.2.dr	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_185.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_150.2.dr	false		high
https://support.google.com/communities/answer/7425194	chromecache_110.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_150.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_110.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_150.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_150.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_150.2.dr	false		high
https://www.google.%/ads/ga-audiences	chromecache_176.2.dr	false	URL Reputation: safe	low
https://content-googleapis-staging.sandbox.google.com	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://localhost.corp.google.com/inapp/	chromecache_150.2.dr	false		high
https://github.com/malsup/form#copyright-and-license	chromecache_171.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_169.2.dr	false		high
https://github.com/malsup/form	chromecache_171.2.dr	false		high
https://support.google.com/chrome/?p=beta_forum_hc	chromecache_188.2.dr	false		high
https://policies.google.com/privacy	chromecache_122.2.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_150.2.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_187.2.dr	false		high
https://clients6.google.com	chromecache_185.2.dr, chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://play.google/intl/	chromecache_122.2.dr	false	URL Reputation: safe	unknown
http://localhost.corp.google.com/inapp/	chromecache_150.2.dr	false		high
https://families.google.com/intl/	chromecache_122.2.dr	false		high
https://policies.google.com/technologies/location-data	chromecache_122.2.dr	false		high
https://play.google.com	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
http://jqueryui.com/themeroller/?ffDefault=Trebuchet%20MS%2CTahoma%2CVerdana%2CArial%2Csans-serif&fw	chromecache_109.2.dr	false		high
https://support.google.com/inapp/%	chromecache_150.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_150.2.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=	chromecache_188.2.dr, chromecache_111.2.dr, chromecache_110.2.dr	false		high
https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug	chromecache_111.2.dr, chromecache_110.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.189.142	docs.google.com	United States	15169	GOOGLEUS	false
192.178.50.36	unknown	United States	15169	GOOGLEUS	false
172.217.165.206	play.google.com	United States	15169	GOOGLEUS	false
142.250.217.238	unknown	United States	15169	GOOGLEUS	false
172.217.2.206	www3.l.google.com	United States	15169	GOOGLEUS	false
40.76.134.238	us01.z.antigena.com	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
192.178.50.65	unknown	United States	15169	GOOGLEUS	false
142.250.64.129	unknown	United States	15169	GOOGLEUS	false
142.250.217.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.217.206	plus.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.217.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431957
Start date and time:	2024-04-26 04:16:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/159@30/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://support.google.com/chrome/answer/6130773?hl=en-US Browse: https://support.google.com/accounts?hl=en-US&p=account_iph Browse: https://support.google.com/chrome/answer/6130773?hl=en-US Browse: https://support.google.com/accounts?hl=en-US&p=account_iph

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 192.178.50.35, 192.178.50.46, 74.125.26.84, 34.104.35.123, 40.127.169.103, 199.232.214.172, 192.229.211.108, 20.166.126.56, 142.250.217.234, 192.178.50.42, 142.250.64.170, 142.250.217.170, 142.250.64.138, 172.217.15.202, 142.250.64.234, 192.178.50.74, 142.250.189.138, 172.217.165.202, 172.217.3.74, 172.217.2.202, 142.250.217.202, 173.194.213.84, 192.178.50.78, 142.250.217.168, 142.250.64.219, 142.250.189.155, 192.178.50.91, 142.251.35.251, 142.250.217.251, 192.178.50.59, 172.217.165.219, 142.250.64.155, 142.250.217.219, 142.250.217.187, 172.217.2.219, 142.250.64.187, 142.250.64.251, 172.217.3.91, 172.217.15.219, 142.250.189.131, 142.250.217.163, 142.250.217.195
Excluded domains from analysis (whitelisted): ssl.gstatic.com, storage.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (467)
Category:	downloaded
Size (bytes):	1884
Entropy (8bit):	5.250961571290243
Encrypted:	false
SSDEEP:	48:o7YQf9uYdtL3AhFLhU72O9Bf83yrgg4Y91rw:ohxtL6FIH9pgnY9pw
MD5:	D000E11AFBC39B08B0AFE6B5BB38135C
SHA1:	CC605351F51F9AFD54AC77A27ABEE5F74B2BF4D2
SHA-256:	2D02B36B6E4BEAB7BC7D56D59FB0765DB7A19FD5D2FC3791207D0D2C14EAFA4D
SHA-512:	3EA67D9E9C68B2273FE426EE368A531E201EFE638369AF1C8067A9D82EE4F1EC9CE64D88119227B5E8668FF78AABEBB5038DB5C1BE3A40A8C5E03BFAD354532B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=iAskyc,ziXSP"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("iAskyc");._.eY=function(a){_.I.call(this,a.Ha);this.window=a.Fa.window.get();this.Bc=a.Fa.Bc};_.B(_.eY,_.I);_.eY.Na=_.I.Na;_.eY.Ba=function(){return{Fa:{window:_.Eq,Bc:_.NB}}};_.eY.prototype.oo=function(){};_.eY.prototype.addEncryptionRecoveryMethod=function(){};_.fY=function(a){return(null==a?void 0:a.sq)\|\|function(){}};_.gY=function(a){return(null==a?void 0:a.zca)\|\|function(){}};_.hY=function(a){return(null==a?void 0:a.Xn)\|\|function(){}};._.PBb=function(a){return new Map(Array.from(a,function(b){var c=_.n(b);b=c.next().value;c=c.next().value;return[b,c.map(function(d){return{epoch:d.epoch,key:new Uint8Array(d.key)}})]}))};_.QBb=function(a){setTimeout(function(){throw a;},0)};_.eY.prototype.CJ=function(){return!0};_.Bq(_.Al,_.eY);._.l();._.k("ziXSP");.var GY=function(a){_.eY.call(this,a.Ha)};_.B(GY,_.eY);GY.Na=_.eY.Na;GY.Ba=_.eY.Ba;GY.prototype.oo=function(a,b,c){var d;

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7764, version 1.0
Category:	downloaded
Size (bytes):	7764
Entropy (8bit):	7.969910156375325
Encrypted:	false
SSDEEP:	192:Rogh0XwQxY5egCC3qiDcvgs8b4/gO59lcva3f:RokWAEgoiSs5OHlcO
MD5:	840275CCD07904AE4081556FD92B784F
SHA1:	3599B52C76D614FF957CEE2606AC67D61E8F50A8
SHA-256:	4053825BF798F2D0CAF91D40483D4447ECEADEE819DB6AC1C7DC498B9AD41F49
SHA-512:	35F1C373B70483860B7B6137C645974B5AC3FAB9C9A824CCF0B98687873BA80C8ADDF45FA35E06D8D1AB9BCFBBE7CF0E9EB26BC0C1ED4B22AB7A1BA2AD03288B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmxjtiu7.woff2
Preview:	wOF2.......T......J...............................0..x..n.`.......8....P..6.$.... .....)...b@e........3#.V..E.eg.......c;.Y....<..m..0k.L.....%aE...S8.T.....Swrt.".h....e.X.....2...]......>.....tF<..MN.............bV......W..@B..i..m.;1n!.....J.d.."`.Fb31..\..,.[...d.....".x...3..1..@"...'8.'.9.v..r9.WB....Z..[.S.7 R.h....B.......j.\|YM..-..."..._.p...=.,>.i.9.l...\_>?t..I.d.9Q..3k/.\|X;1...S......J,...R......@....6.vFc.Y..N!..TQQ1..5.h.vF.........HG...>..D.p'..p..U..U..\..RT).".=....^...q....@.....l...j....t!..O..k.{y....5..3....l....56.YH..`...%q...#....BC..S.BW."".QQ.hiA...3........Q.....4..4.......A-.DD@.,.l....n.C..@0..6.....C.....}(.b..F..$.`.9....a .L.u.q.K.q...(T\|.....4."....0hrq..v.8J.R.v..lW.[P<.>..e...C......Mqyr...N..]..p.Q=.p!xe........V.-.Q^..<W,.....f-r...%j..J..lX^.^PQ.w.A.H5<.fV.&.$OL)1A6. .....Ss...\|2.FU.O.CUq.*(.......^...B..&5..2..T.F7".BN..pBSQ.8~p.q..x{a.Q.M......;8$..d..%..).".3.s...`........TKgrd.]..._..g...^dB.......Z.6..?..Q>

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4456), with no line terminators
Category:	downloaded
Size (bytes):	4456
Entropy (8bit):	5.204080149232771
Encrypted:	false
SSDEEP:	96:RJYrcoiktfqqMghOKTEzNx8BSIMw591g8IOl8u8i8DF+KQYfHCEOYsB:wkktfqqMghxlg8Ig8u78DSYvCEOYsB
MD5:	4610F5F2D275DBCCE73241CAC5E9E48B
SHA1:	47A481FBA95D9EB7494977AFBFB67D39FF2E54D7
SHA-256:	13ADEBF6ACE2EECE1D48E36988E4DB4B080FC454BBA66226A335F59CE6EDB96C
SHA-512:	B0273B51DC7B0996811BA60845CCD1577FE392E0E9F0B6DA73733DEB57709929524C18B24E9672780155309112195166EF79E630BDEF78AFC66D75DD892196F1
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.T5bVtXo12IQ.L.W.O/m=q_sf,qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTssrVR1lBtzoy_MObv1DSp-vWG36A"
Preview:	.gb_3e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Hc{text-align:left}.gb_Hc>*{color:#bdc1c6;line-height:16px}.gb_Hc div:first-child{color:white}.gb_qa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_qa:hover{background-color:rgba(68,71,70,.08)}.gb_qa:focus,.gb_qa:active{background-color:rgba(68,71,70,.12)}.gb_qa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_qa:hover,.gb_i .gb_qa:focus,.gb_i .gb_qa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_qa:focus-visible{border-color:#a8c7fa}.gb_ra{-webkit-box

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1203)
Category:	downloaded
Size (bytes):	8529
Entropy (8bit):	5.104088396586703
Encrypted:	false
SSDEEP:	192:5HCHaHEr9uIHjOschHCqPHsHbuHU/HL+8H8bKuHm3:MrP+if
MD5:	073DACAAD1F71A1B60CB6C73BE21A940
SHA1:	5D58B96FBF447E3EDAA6BE0E06AD7386EC66C2E6
SHA-256:	D83F983E6D22A2A2D37E3EE9D2E119BFFF7EF1C8E7B8671DF73BEA8BC93F9FC2
SHA-512:	F24B5E616DDDFA39F1CCFB430C8B9C206FBF5DCDE4CC5234D4996E716D055A67A1DB04ADAA50A047DA0581718E200F58ABCC4078A5ED2D5D33CEEED42293BDCA
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap
Preview:	/* [0] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.0.woff2) format('woff2');. unicode-range: U+1f1e6-1f1ff;.}./ [1] /.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.1.woff2) format('woff2');. unicode-range: U+200d, U+2620, U+26a7, U+fe0f, U+1f308, U+1f38c, U+1f3c1, U+1f3f3-1f3f4, U+1f6a9, U+e0062-e0063, U+e0065, U+e0067, U+e006c, U+e006e, U+e0073-e0074, U+e0077, U+e007f;.}./ [2] */.@font-face {. font-family: 'Noto Color Emoji';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/notocoloremoji/v30/Yq6P-KqIXTD0t4D9z1ESnKM3-HpFabsE4tq3luCC7p-aXxcn.2.woff2) format('woff2');. unicode-range

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (574)
Category:	downloaded
Size (bytes):	3449
Entropy (8bit):	5.468701595206576
Encrypted:	false
SSDEEP:	96:oWRKnOqOr3FeC1YRyWtwelaJjBO3p7cqJadFqUew:LGOqjSXsSqJcsk
MD5:	C01EBFA30EE92C937CDE31D231D51D57
SHA1:	D516C9CDBD744E007D7ABC4903139622777E157D
SHA-256:	DEFAB9A493CF834CD1D7130C670A8FDCD19D1B7BB07F3C2216E00CCD6F98318A
SHA-512:	8A68C299285FDE86DB49BC4D3A76F35133F832C82FBE4C021343D7797553C4C9E93691698A7862F78D94233A4EF44B5E5D7AC4D34709AFA0BBEE8042BA7089CA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,wg1P6b,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=Wt6vjf,hhhU8,FCpbqb,WhJNk"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("Wt6vjf");.var ota=function(){var a=_.be();return _.wi(a,1)};var iq=function(a){this.Ga=_.t(a,0,iq.messageId)};_.B(iq,_.v);iq.prototype.Ja=function(){return _.Yh(this,1)};iq.prototype.Va=function(a){return _.Gi(this,1,a)};iq.messageId="f.bo";var jq=function(){_.Bk.call(this)};_.B(jq,_.Bk);jq.prototype.Xc=function(){this.aP=!1;pta(this);_.Bk.prototype.Xc.call(this)};jq.prototype.aa=function(){qta(this);if(this.Zz)return rta(this),!1;if(!this.UQ)return kq(this),!0;this.dispatchEvent("p");if(!this.vK)return kq(this),!0;this.sI?(this.dispatchEvent("r"),kq(this)):rta(this);return!1};.var sta=function(a){var b=new _.xn(a.e0);null!=a.xL&&b.aa("authuser",a.xL);return b},rta=function(a){a.Zz=!0;var b=sta(a),c="rt=r&f_uid="+_.Og(a.vK);_.el(b,(0,_.of)(a.fa,a),"POST",c)};.jq.prototype.fa=function(a){a=a.target;qta(this);if(_.hl(a)){this.qG=0;if(this.sI)this.Zz=!1,this.dispatchEvent("

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11772, version 1.0
Category:	downloaded
Size (bytes):	11772
Entropy (8bit):	7.980951134807218
Encrypted:	false
SSDEEP:	192:ChWJPw3k6T0R3d4jwADqVhrh2x6eE/dSQp4/PQ0JJIOHU5/QyfjY:1JER0aZAda6kQIF44ec
MD5:	6F4D4A8899EE0298DB1717070AE4761E
SHA1:	44F0F6B77E5AB005E6F74C4EC65DC7600503B4E2
SHA-256:	CC3DCEB979B73443783E4E0837A1609009CBB7F6C31683B5171BC9A930F7D7AD
SHA-512:	9A53E083804C3D53A95337F07832E9C59B14F2A4974FA11074CF04EC427BD19BE7EAC368D27AD30EF1BC7AAA4E2DD5A19E3F27E45FA4DBB10A368356A60D0AC5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2
Preview:	wOF2......-.......q<..-..........................@..f..0.`....H..<........ ..t.....6.$..d. ..~. ..)..e.l\eF...!...E.ZM...q...K....4.1.:.......g.V....j.VuD.T....@uO.iD'.:i..:\.....@\|f....i...........S.....~..>.%...Su...$cv....@. ..V...........9L.S.T.g.'...K7'.D].D].9...&.............Y\|....F....r.2..BV./l-\...9........V..y..w.yo....K...".('..A.rv..24P..7.....R..do.dw..7b..c.;"...?..e.xl.$......T...B....\|....I.K..kYw.p.....Mr..N.....=.c.e....P...m..m`........A.fBW..8......l....#.....Z .!...O.{.........e...[....C...\|X..d.=A....9.\...(.T..=.vS.eZ.C/-...@...Y;Il[. ......}-.\..U%..O...0....36..-.z.....#....!(....(.c..b...3..(....?A..4.."..Yr8..u.o.P.(bf...&#.(7...2....>.O3...\..Z.%K.h.f...:...VI.&.....$.~.....-..X8,.\.}.}.:......Z....3.....{...._..Uo.x_...*@..s..x.6....../...Wy..+^....h.a..........J..p..;.V. t..rD.. .^.Z...,..-.....(.J...\|.......Y.A<..~..d.l.kZ'.....br%.X....Y...5...T(B./.C.....)K....bba.S.P.m..a.]v+V..>.j.kt.!G.s.W.6.:t...).

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (28460)
Category:	downloaded
Size (bytes):	30256
Entropy (8bit):	5.243848752740804
Encrypted:	false
SSDEEP:	384:aZxHLzBv1J1eovx2V+4XIHL/72fZBhVn8:MLzBvrv6XI4BhN8
MD5:	0EB1F2A92FD42E458BCF6AC477FCBC35
SHA1:	5085B834F1AF2D59FB82D54E867857339CBCF079
SHA-256:	98745AA8F186BC28923ABC12218C41C5FC1C936E587D6DBD2EB3531850CF08B2
SHA-512:	C15FB0876567179E9ED6E9DD22E46133C6C5D99335AB00ECA3C3E356171092C1CD46C4C3A0DCDFF5EA9DFA7E3B2F39C125E72641D699863D58BE1E8A9383247E
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/vendor/jquery-ui.min.css
Preview:	/! jQuery UI - v1.11.4 - 2015-03-11. http://jqueryui.com.* Includes: core.css, accordion.css, autocomplete.css, button.css, datepicker.css, dialog.css, draggable.css, menu.css, progressbar.css, resizable.css, selectable.css, selectmenu.css, slider.css, sortable.css, spinner.css, tabs.css, tooltip.css, theme.css.* To view and modify this theme, visit http://jqueryui.com/themeroller/?ffDefault=Trebuchet%20MS%2CTahoma%2CVerdana%2CArial%2Csans-serif&fwDefault=bold&fsDefault=1.1em&cornerRadius=4px&bgColorHeader=f6a828&bgTextureHeader=gloss_wave&bgImgOpacityHeader=35&borderColorHeader=e78f08&fcHeader=ffffff&iconColorHeader=ffffff&bgColorContent=eeeeee&bgTextureContent=highlight_soft&bgImgOpacityContent=100&borderColorContent=dddddd&fcContent=333333&iconColorContent=222222&bgColorDefault=f6f6f6&bgTextureDefault=glass&bgImgOpacityDefault=100&borderColorDefault=cccccc&fcDefault=1c94c4&iconColorDefault=ef8c08&bgColorHover=fdf5ce&bgTextureHover=glass&bgImgOpacityHover=100&borderColorHover=fbcb0

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54883)
Category:	downloaded
Size (bytes):	1026179
Entropy (8bit):	5.72053123700483
Encrypted:	false
SSDEEP:	24576:Z9KtSIlxCu3bJqxVedXry0M+sX2Hu3Nby0ocL3aNc8Xym5Eo:Z9KtSIlxD3OedXry0M+DVXym5Eo
MD5:	3EE93F29899A6ADEFCCD08A1923E5DC4
SHA1:	68FEF43B3F046231D347A52DC97642A15627B536
SHA-256:	9F3D8BD243EDA24D653F60E106AAA4507DA719AC2B5E25D908DFD02BAB796088
SHA-512:	D87667041B879605A8230D650D304EC8667B0A5A9FB14AD39DAB0366EF502326D746956331538FF0C9668358314E6EC22F81018181F26F662823FC1C6143D722
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-rang

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (54883)
Category:	downloaded
Size (bytes):	1026199
Entropy (8bit):	5.720691747297995
Encrypted:	false
SSDEEP:	24576:7qK/SIlzeu3bJqxVedXry0M+SX2H33wty0ocL3aNc8XlAc5E0:7qK/SIlzv3OedXry0M+rVXGc5E0
MD5:	E3E92258DC62E1CB99EEA67AB1C5A7BE
SHA1:	E465D57A74FEC2D715D773FF8485C5DD689DA98D
SHA-256:	3E15CD0383E2DAA6C9D41B424BED1B4BFF30D8871812C758F953BBDCDD8766FC
SHA-512:	27DF992DB7E14402EE0A4CE5364CB23CA79E73C18900E422BA84F8DB61D79315C20ACC9B33AF25E594FE44D80B2D581DAB863498AB9F28979B1632ED991028DF
Malicious:	false
Reputation:	low
URL:	https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph
Preview:	<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-rang

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14647)
Category:	downloaded
Size (bytes):	14782
Entropy (8bit):	5.310376799456437
Encrypted:	false
SSDEEP:	192:ZW4B7PrJLzB3R1NPHzJ572hk/2uxrj0R52MZuQEjQDMsrsUR9P:ZxHLzBv1J1eovI
MD5:	B3ED85B47AF0459DE6DF17799E27C7CD
SHA1:	1CDDB87EBDBEF8F91C38A14B45DDED5E4DDEE6C1
SHA-256:	6DBD1B8A04C9EB0E9D3A403C0925CC4481517CF5683DFF9E90778837CC06FB3B
SHA-512:	1CFC19758129CD4D529FC19A445D9CF03E104BA4E9E5843292D4B09614515B3C67A1B7C76C6549F621A6E7FBB300D13BA6ED986C27AE264F849739DC78BA068A
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/vendor/jquery-ui.structure.min.css
Preview:	/! jQuery UI - v1.11.4 - 2015-03-11. http://jqueryui.com.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */...ui-helper-hidden{display:none}.ui-helper-hidden-accessible{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px}.ui-helper-reset{margin:0;padding:0;border:0;outline:0;line-height:1.3;text-decoration:none;font-size:100%;list-style:none}.ui-helper-clearfix:before,.ui-helper-clearfix:after{content:"";display:table;border-collapse:collapse}.ui-helper-clearfix:after{clear:both}.ui-helper-clearfix{min-height:0}.ui-helper-zfix{width:100%;height:100%;top:0;left:0;position:absolute;opacity:0;filter:Alpha(Opacity=0)}.ui-front{z-index:100}.ui-state-disabled{cursor:default!important}.ui-icon{display:block;text-indent:-99999px;overflow:hidden;background-repeat:no-repeat}.ui-widget-overlay{position:fixed;top:0;left:0;width:100%;height:100%}.ui-accordion .ui-accordion-header{display:block;cursor:pointer;position:rel

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://www.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746)
Category:	downloaded
Size (bytes):	162534
Entropy (8bit):	5.551266608947714
Encrypted:	false
SSDEEP:	3072:S0eiNiuzs8vaHHKWY8s1BgP4IDQ9GURWu8zylA/u8PemUPhDlaY/ADiZ65tpK629:S0eMhzvyHHKWY8s1BgP4IDQ9GURWu8UZ
MD5:	702F6C0C58B88FFF5706AF50FE753619
SHA1:	EDA888BE6785315C8E7ADC768C545D86509D516F
SHA-256:	512580A3F688D2450B34C9CE9AC66D59BFD18440A2857423B4FF412D502BCBBB
SHA-512:	517C5D6BACAC4E41C142A3B9CACCA802B712606A0B6EBB4772B3A5D67CD27168C78CB932C437E30E8EBC7A5F841F0AD48356DDFEFBA577F7F757DFA7DF1AB21A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.oT1FwJRCVC4.2019.O/rt=j/m=q_dnp,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvBynad-nWEy1xIb9j1w6LpLOF6IQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.nj=function(a,b,c){return c?a\|b:a&~b};_.oj=function(a,b,c,d){a=_.hb(a,b,c,d);return Array.isArray(a)?a:_.lc};_.pj=function(a,b){a=_.nj(a,2,!!(2&b));a=_.nj(a,32,!0);return a=_.nj(a,2048,!1)};_.qj=function(a,b){0===a&&(a=_.pj(a,b));return a=_.nj(a,1,!0)};_.rj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.sj=function(a,b,c){32&b&&c\|\|(a=_.nj(a,32,!1));return a};._.tj=function(a,b,c,d,e,f){var g=!!(2&b),h=g?1:2;const k=1===h;h=2===h;e=!!e;f&&(f=!g);g=_.oj(a,b,d);var l=g[_.v]\|0;const n=!!(4&l);if(!n){l=_.qj(l,b);var p=g,r=b,t;(t=!!(2&l))&&(r=_.nj(r,2,!0));let C=!t,X=!0,P=0,H=0;for(;P<p.length;P++){const O=_.Sa(p[P],c,r);if(O instanceof c){if(!t){const Fa=!!((O.ma[_.v]\|0)&2);C&&(C=!Fa);X&&(X=Fa)}p[H++]=O}}H<P&&(p.length=H);l=_.nj(l,4,!0);l=_.nj(l,16,X);l=_.nj(l,8,C);_.wa(p,l);t&&Object.freeze(p)}c=!!(8&l)\|\|k&&!g.length;if(f&&!c){_.rj(l)&&(g=_.va(g),l=_.pj(l,.b),b=_.gb(a,b,d,g));f=g;c=l;for(p=0;p<f.length;p++)l=f[p],r=_.eb(l),l

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5164, version 1.0
Category:	downloaded
Size (bytes):	5164
Entropy (8bit):	7.955022654419014
Encrypted:	false
SSDEEP:	96:0d/IkMLdBZmPHsHmJQE/h2ygZ5mPy6ldKPCH/S+fuG/mlVSOmxXvR:kQPLgUGhoygzqRlgPCHzfuOmNK/R
MD5:	E1D4C2969A3DD92F91FEA51F652831EF
SHA1:	FF3BE3617B93FCA22D758F43920ABFA313337BC2
SHA-256:	570D2DC2CE988D8AE09147EE2ECA5EC53F8D5F036E84E3212BF03503374054E5
SHA-512:	4F426BCCF3B2838DAF1356D90476E1D761B61431606E673718A4E6BB86946C759C3D9E68D1A4218EA24E9550DEF9C0B3D953066C2B0B2176C5003EDAA6F93AD0
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2
Preview:	wOF2.......,......2(.............................(..L.6.`..(.H..<....D.3........6.$.... ..~. ..)..,..xp..D.{..>..l..Q$..(.#.....'.....Mc...z.P.N.Nx.Ey..\|..8...6..z..r........\|{#.Hk....B..1..q.-QGE.T]VC.6....Q...m.......,0.m..a/...U.n...r..fS7... ?....g....H......57.B...b..v#@c.K(I.P0l-...'.,.yh....P.E..yV..f..%.V.....#.....V.w:B............]i....~.......5.....2.U...Z......MRJ-(.AvO+......g..H(..0.....i...c.G=.."..u........l$......@Ud...23...f]j. ..\....k%@>.DS....^$W:...J`.J...Vd8~.1 A>.2....J.Y...}.MQ....s^.29-}...\=....$M...$...4.9.:l.y.w).5n9ef...xr..}}.D9,.v.Uv$5.F..h..X...D..2y.P..7.C......D,.w....:qq@8...S.b.2..o..E w..)..;../..........W....@K........o.H..`Z..P.N...h.<..]d...,.....r.a.X..d8T.V.G.g.Ot.^.2...~.~Q.._CO...<...[.UMo..,..$.o5..G.d...>.&Z./.SpyGk....r..x.j...X...In.....QX.E......Z.@2.u..F.b..`.~.......3{#.r.....^c..=...(...W. "...3......V<....0..`kp.q.h</).8.w..$...($..@!.=.\q.2..x.0.....S/...o.J...wjn.....d.`...W..Rh4...d.....

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 8700, version 1.0
Category:	downloaded
Size (bytes):	8700
Entropy (8bit):	7.969818213587576
Encrypted:	false
SSDEEP:	192:yCw8YHa1G/nGeTkiYHassSJb5+ArIk4gc7a/uM3Jz:dR1G/fTkkshJYHknMajz
MD5:	2FE42D3535DA679F04F3D17C6365A3B3
SHA1:	64DA6FE900FDBB59AB97F956ECDE4E57F9848403
SHA-256:	1B36C0B0A947C1A484C4384FDE4735E3FBE8F0EAAA04B058B74C83425B08D4B0
SHA-512:	4F85931EE163001B089685C1CCA7B35976194EA836AF1C9EB9154FD7DB1717FC2000BBB4A112C02683B19F41A159941A797C31814E085B3D2AD51B66705B9E80
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmZjtiu7.woff2
Preview:	wOF2......!.......U...!..........................."..T....`..&....(.......6.$..l. .....)...HJ%.....P ~>.J.uR."d...1..f.cG.8..+-.c....nuG...(....X.v...mO ;..Dg,t..l..u....+..+{>d...'w..ovR..._q....Z.....^.......a).........)uQD.S......'.......o.....!...C.....C.V.....f..Ba.%..(..L=.te....ab..D..)...mx..Kf1......T..F.1.....H..._f..6..z5.....B..BY..P.......o._...%)I6>e.z.....GR5p.c.qb{.X..........>.6.ogt...&E.uV...n.Tx..iF..Ko.....LZ..(...f......k^....Q.D-..m.TE...\|..W;78?.*<.Tt<...bq.$/...a.[..%[v.2....Z..[.a.wQ.....K.........1..#"A.1..... 0... ....R......%. .A.rBpQ............./.!T.B.X...B#M..i..F"B....uC./B......0....t.LY.9..F..0.D..f .2.a....,EXn%.j...Z...V..v!.q....'.E8.. .8..E.....Q4..{R'h?......r...@.\k.WV..%xXE...PfM/....3........ZWh.0...l.pxH..j...5%g.......&.8...&...U...A.%T..#....r...K.]0.`..b..b...Y.#..(..(..VG.\.A..U1."...&XP.;.g.m..m..\....]....F.&.t2.".\...B3.....2.2]f.Y.f9E.`%...Mlf.[........5...4..$..r.#.....e.."b.+Y-$.k.kg.f..?....L.C..

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21552, version 1.0
Category:	downloaded
Size (bytes):	21552
Entropy (8bit):	7.991124519925249
Encrypted:	true
SSDEEP:	384:sPsBjS050+6ZPTO5MZcvt18lQYjxHe+YeXIY3r9mgNRb4PBvCrdYq+sMM:sPMjX0Gj8lQYFFEY3JmgTbcqYo
MD5:	EA2C3CF1BE388BD3FBE9D0CD8AFEE11C
SHA1:	6647CBAF7BFEDD842F806549F5C3433A19EAB1AB
SHA-256:	1CF04407E728EA1EBF82DC1C6B45D12632CB3202FF8F4556F380B16E57484F27
SHA-512:	2B260F63CD6BD0C75A3E6EE9EB5FA5B477F1AB2E107F682165C8A4BDCB9A6CFBFD21AB172CE165A3C2EBF451AB91D27070EF5E4D985EF3105EBCAE964C6D8870
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2
Preview:	wOF2......T0.......d..S..............................,..@.`..~..<..u.....X........6.$.... ..r..X....\|.5......0...av .....p.........R...srCd..._o.,...A.4...w...{0.. ..A[.z...L."..j..&s..a.-O]........m......~l..yy..m.&.X.U0........G.\|..t....l\.HVN......o....4M.{.j..I.Kb.D.....7.....<0Ln._k.........d[&y.C...8..7w.,.L.....u.n.!..q..H..i.{.P.fq......D8....G).....m.;e.K,0...Z...<.......=#.}...]o._..t....<..Em.}..,P..........I...3..Q.G..g"..~nZ..P..Jb./..?q..}.=..v......N...f...,.!.3.V......s.?..g..X..5W...B.:.....H.Rq.Iw*A...rq,..;v.\"(.n.~K.Z.Q0>..P.....a%).y.LE.{.8..&...V..h.jJc....u.\.9K.MI...g\..M..~.....n.a(......j..J{ .E....Vv..^....8.2U.....{.%..A....48.oiIG...r9....hg@...QU.z[..8'd(.s...BB....a9a.t...fh...=.y...P....l._...?;......b.d.X..bf.p..m..$.... E.{...W..:.....8V.R."./."]3.M...G.....RB.!......>..Y.'..M.n.+.rC.2../u...U..#.........D..8...4..G.!Ad..".#.w..P.:-`.."DC..BBI)....]..$.}..q.<p..As...^.y.c...(:.......Q.D#1./..W......R...=.

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 19 tables, 1st "GDEF", 27 names, Macintosh, Copyright 2015 Google Inc. All Rights Reserved.RobotoRegularGoogle:Roboto Regular:2015Roboto Reg
Category:	downloaded
Size (bytes):	515100
Entropy (8bit):	6.676274734371312
Encrypted:	false
SSDEEP:	6144:2mZHWETwpRmp+YhSb0E+d1IFj6xoNSkhmCpSHmTPKUA8q2wzUKu+cf:LpR2RmwnPNFmCpRKUAn2Icf
MD5:	8F793587DCF03F31C551C5B60D175FC2
SHA1:	06691E103D4D3CE1F1108D9B7D21254B714A41F8
SHA-256:	56A45233D29F11B4DFB86D248E921939D115778F87325E7AE8CC108383D6664D
SHA-512:	F99FFBEB8C1156FF09F86006113B5F4C4B04A1F302AD7267208F14FFE175B6ECB0435A5F309B307C16E880EBE3B7479210697A7930833980D33C49C73C2A34C1
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/fonts/Roboto-Regular.ttf
Preview:	...........0GDEFEbF.........GPOS3...........GSUB(......x..1.LTSH>'7...7....?OS/2..E.......`cmap..f$..Q...$zcvt +.....y....Tfpgmw.`...v.....gasp............glyf..3....T....hdmx&R.o..DD...Hhead.Q/....<...6hhea.......t...$hmtxR.qA......4.loca......yd..4.maxp.m.O....... name...h...L....postC.U:........prep.f....w....I........R..._.<....................N.....\.s.................b.............................:.....;.....T...............$.................3.......3.....f..................P.!....!....GOOG.@.....b.....b.+ ........:... . .....d...............................w.~.n...i...e.e.g.......&.r.....N.....5.%.....L...~.s.~...~.].~.^.~.5.~...~...~.M.~.p.~.d.......)...H.d.........K./.j.8.......5.w.?.......l...s.z.....-...j.5.....N.............v.......m.......P...1.0.........=...9.......V.....H.(.....X.@.....y.9.Z.m.}...0.\..._.=.]...<.}.`.h.......................j.....[.}....._..... ._.....i.....!...+...).......X...@.........q.......`.i...[...i.3.........Z.X.e.I.[.......f.n...J.Z.........F.a

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17337)
Category:	downloaded
Size (bytes):	782939
Entropy (8bit):	5.731414773847736
Encrypted:	false
SSDEEP:	6144:jfNDZ+BawStVk6JwB9ebkY+jjNaOLTzPCcN+mItp9:jfVZ+roAtaOLP7A9
MD5:	EB6BC58C4D0828534A3B05933E2E5ECC
SHA1:	F754BF05A303F987F85BAD6C9AD6388482B528EE
SHA-256:	0EFF3AC6F013228A1AF7AAEECCBA7DE8E921DC9679024487D287934D14701DD0
SHA-512:	AB5D99E2575DB250DB7EBF88899A0E0A93A3476AC8AD69C21FE2189400F3A2EC659F58D49F57EDB56D2598A797038A95B00948B130357A1B856B599F91218AF2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=LEikZe,_b,_tp,byfTOb,lsjVmc/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=n73qwf,SCuOPb,IZT63,vfuNJf,UUJqVe,ws9Tlc,siKnQd,STuCOe,njlZCf,K1ZKnb,ziZ8Mc,b3kMqb,mvkUhe,CMcBD,Fndnac,t2srLd,EN3i8d,zu7j8,xiZRqc,NOeYWe,O6y8ed,L9OGUe,PrPYRd,MpJwZc,hc6Ubd,Rkm0ef,KUM7Z,oLggrd,inNHtf,L1AAkb,lwddkf,SpsfSb,aC1iue,tUnxGc,aW3pY,EFQ78c,xQtZb,I6YDgd,zbML3c,zr1jrb,vHEMJe,YHI3We,YTxL4,bSspM,Uas9Hd,zy0vNb,K0PMbc,AvtSve,qmdT9,xBaz7b,eVCnO,LDQI"
Preview:	"use strict";_F_installCss(".O0WRkf{-webkit-user-select:none;transition:background .2s .1s;border:0;border-radius:3px;cursor:pointer;display:inline-block;font-size:14px;font-weight:500;min-width:4em;outline:none;overflow:hidden;position:relative;text-align:center;text-transform:uppercase;-webkit-tap-highlight-color:transparent;z-index:0}.A9jyad{font-size:13px;line-height:16px}.zZhnYe{transition:box-shadow .28s cubic-bezier(0.4,0,0.2,1);background:#dfdfdf;box-shadow:0px 2px 2px 0px rgba(0,0,0,.14),0px 3px 1px -2px rgba(0,0,0,.12),0px 1px 5px 0px rgba(0,0,0,.2)}.zZhnYe.qs41qe{transition:box-shadow .28s cubic-bezier(0.4,0,0.2,1);transition:background .8s;box-shadow:0px 8px 10px 1px rgba(0,0,0,.14),0px 3px 14px 2px rgba(0,0,0,.12),0px 5px 5px -3px rgba(0,0,0,.2)}.e3Duub,.e3Duub a,.e3Duub a:hover,.e3Duub a:link,.e3Duub a:visited{background:#4285f4;color:#fff}.HQ8yf,.HQ8yf a{color:#4285f4}.UxubU,.UxubU a{color:#fff}.ZFr60d{position:absolute;top:0;right:0;bottom:0;left:0;background-color:tran

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 208 x 120, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5155
Entropy (8bit):	7.919446869091427
Encrypted:	false
SSDEEP:	96:CSmRxnLQ2y7xIRYc7DFfAAoliBEp3v53ATHy6BoiklD5x/npnErL:CSmXs2Qe17ZoxkBUKTJ7k1DnpnA
MD5:	B1263340F00B531E1097B4706A6A4FDF
SHA1:	C1DEBDAFDE22E444211DC42801FA7918D3CD6C2A
SHA-256:	96226AF544867BC648F8E2EF4449DBF5278DF15A2CA75075A7B71570762F3EE6
SHA-512:	916246B7D2D2445C542EFFCD66586C4EFC250AE5B3ABC8EFA197C792D762ED26D1E5C2B5F6F4E9CD284EED70C2432D8553C75517661EFFF572DE21F78C9A24C0
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......x.......\|.....bKGD..............pHYs.................tIME.....94.}.a....IDATx..{.%.U..{...B.......dx%.....y(......,$.KERZ..G.b.....%.V.`..!.1.c%. ..2..B...5.....0..........{.>.8}..Uu..{{...^k?..{-C.FH...k.Xb.\|.p.p...X.....L.S.6.U.9.I.q...n.){..@...D.FQ.-..5...0~..U.D`.....p.p#.-.e.5c....RC...{Y............)Ik%./.JI/.9.".$....%M.1...S!../.....#.....t..od.}A..7%.'..u..B.....,.....B.U..:.)...Y.E..oH:G....,.]EL._..o..{@...>..2.s..F-.[t....G.i....B.m..F.)%.....u...t...Rf.....'.f:\.1Hz3.......[d./.~.x...Y.....^..g].K..r.<p=.........Gm<G....1...n.....l%.....Ye.5.e....5.......x.....cn..#Ej.x..'I.n.i..k$.l.t{...%p.I{H.O./.u.LI,.I:...6R.....IO.P...>#.p.^2e....VJz..+J...I'G#..!.!....x.%....3...%.\...A..G#..w.. u).5.L.J.70 .Y.%E...`4J.~a.......w.....OQ..\|...c.I.jIW.(.U...x.r2Ye.t...%....W%.5.0uH....:.H5..L.A..1../.tq.. .6I{.....).........}P....k....-`J}.W"...)9e.e....H.wVm...H...p...4...S....2I....x*5....ix....<.x.$..u

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1763)
Category:	downloaded
Size (bytes):	189741
Entropy (8bit):	5.528155913240044
Encrypted:	false
SSDEEP:	3072:LUQaf5qZ3fhO+KW48bG1LceF2/eazQthTnXDL9btIMP13uT:IQX5NTYLceF+CTnXP9RIMFW
MD5:	AA7F72BD919CA15E3DBD29DADBE15DBE
SHA1:	04E8929D57B06AD2FDD66808B425842373EAB688
SHA-256:	DC0A6D0F32F50C9DA249D1DECB6B57B14D5BF4D7752F855C2DF939A4E7C7CF31
SHA-512:	B8705CDEB49CE948A90C3BC3C1425648AB303B8905F912CFEAB28C08D6C2AA941014E95039ED75D127B525C5585D676529F6F6D3CA7D6B135DD659434D275F62
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=UA-175894890-5&l=dataLayer&cx=c
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"1",. . "macros":[{"function":"__e"},{"function":"__cid"}],. "tags":[{"function":"__rep","once_per_event":true,"vtp_containerId":["macro",1],"tag_id":1}],. "predicates":[{"function":"_eq","arg0":["macro",0],"arg1":"gtm.js"}],. "rules":[[["if",0],["add",0]]].},."runtime":[ [50,"__cid",[46,"a"],[36,[17,[13,[41,"$0"],[3,"$0",["require","getContainerVersion"]],["$0"]],"containerId"]]]. .].,"entities":{."__cid":{"2":true,"4":true,"3":true}...}.,"blob":{"1":"1"}.,"permissions":{."__cid":{"read_container_data":{}}...}....,"security_groups":{."google":[."__cid"..]...}....};...var aa,ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},fa=function(a){for(var b=["object"==typeof globalThis

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 21716, version 1.0
Category:	downloaded
Size (bytes):	21716
Entropy (8bit):	7.988919175869214
Encrypted:	false
SSDEEP:	384:DfspV407P6+jGlbMAA2cdv92Dg3AuGZ0KGKBb2ZXdWgb98JmSKMrN:D64Ei+n2c19NuqKuZXdWv79N
MD5:	D4FF90DB5DA894C833F356F47A16E408
SHA1:	30606044507D81B996C992895AB16B8A8D68BE97
SHA-256:	F2C761EE3CE27469F940A05B64E38A829A400427727CD0BDBB4E36F1D572AFD7
SHA-512:	85C6305EE6973EBF449EFCFC95BB10A66E5CBA92D026A2EC4F1072DC8CCBC5B4A4A384FE425E53E2DADE2180F37CCA56243ED354033CFCA5821CBB77FB8B0FA1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtzCwY.woff2
Preview:	wOF2......T........P..Tp..........................4..,..@.`..~..d..u.....<..4.....6.$.... ..V..X..^...'..:...m......?..ts..6(#k.y........ON....Mn..X..~X%A...T...q.r.L..9..B}#e....}......{..l.I>.n.....u.>v(..}lo.2.f..D.TG...:mc.3.M..A...../aJl..ZT.b.S.E}..wq.B...&...Y..s.o....Qs....>.]u^O....d..Y....oEfh.........u..X.....E.3c....r...Eb.....N2+%\...J.6]N:.g[~..,..>@.`IXs........LP...c.!K.X[......A7Z....O..g....5..1...=..X....e!._.A..u.raef..y.....>li,/+..-.P-)...w.I..3\..s^.....T.\.1.;.x.:.r.7g...dK.$;....L2.t.i..hz.....>............5...,~}...W#..X.2...E,.Y.3..f.#........[..X......fDW.d...Y..8..T....^.{BC...+.W..9...`...\ ...c`.nc........_...}6A5eM.0r.IG...Km...l.'.o..py.~7.........P....9...hI.A'...D9.....4Q...9sc..9..........9lw.P...dI..z...S.>U.5.@Z...{.....=`R(...l.T.5...4{K.....L..A.]...Rg.3......l..a......I.>...p.q.H.E=.$...Ps..LU..=.$......YU....#Fn..Q..c...B...4...B..3....?....ywJ.$.I..L....yK...m.!..b_g.eH.3,.5 .@.D.........)N.?.<yR......Ro

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 52280, version 1.0
Category:	downloaded
Size (bytes):	52280
Entropy (8bit):	7.995413196679271
Encrypted:	true
SSDEEP:	1536:1rvqtK8DZilXxwJ8mMwAZy7phqsFLdG3B4d:xytBZits8bw4wzbFxG3B4d
MD5:	F61F0D4D0F968D5BBA39A84C76277E1A
SHA1:	AA3693EA140ECA418B4B2A30F6A68F6F43B4BEB2
SHA-256:	57147F08949ABABE7DEEF611435AE418475A693E3823769A25C2A39B6EAD9CCC
SHA-512:	6C3BD90F709BCF9151C9ED9FFEA55C4F6883E7FDA2A4E26BF018C83FE1CFBE4F4AA0DB080D6D024070D53B2257472C399C8AC44EEFD38B9445640EFA85D5C487
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v58/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2.......8.....................................^...$..4?HVAR..?MVAR9.`?STAT.',..J/.......`..(..Z.0..R.6.$.... .....K..[..q..c..T.....>.P.j.`.w..#...%......N.".....$..3.0.6......... .L.rX/r[j.y.\|(.4.%#.....2.v.m..-..%.....;-.Y.{..&..O=#l@...k..7g..ZI...#.Z./+T..r7...M..3).Z%.x....s..sL..[A!.51w'/.8V..2Z..%.X.h.o.).]..9..Q`.$.....7..kZ.~O........d..g.n.d.Rw+&....Cz..uy#..fz,(.J....v.%..`..9.....h...?O..:...c%.....6s....xl..#...5..._......1.>.)"U.4 W....?%......6//!$...!.n9C@n...........!""^.....W..Z<.7.x.."UT.T....E.."R>.R..t.....H d..e_.K../.+8.Q.P.ZQ....;...U....]......._.e......71.?.7.ORv.?...l...G\|.P...\|:...I.X..2.,.L........d.g.]}W#uW]QnuP-s.;.-Y.....].......C..j_.M0...y.......J..........NY..@A...,....-.F......'..w./j5g.vUS...U..0.&...y7.LP.....%.....Y......Y..D. e.A..G.?.$.......6...eaK.n5.m...N...,...+BCl..L> .E9~.b[.w.x....6<...}.e...%V....O.......*.?...a..#[eE.4..p..$...].....%......o._......N.._~..El....b..A.0.r8.....\|..D.d..

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (405)
Category:	downloaded
Size (bytes):	1600
Entropy (8bit):	5.227677527050766
Encrypted:	false
SSDEEP:	24:kMYD7FGZNPxVziHvMetWtu+yNPxbMGZTROuPlyHFo6kumHtukNPxEAJOZgCN6yY9:o7UzIIg+sHdROClyHtEgK2RshvnSrw
MD5:	C918FE9E9E78BD43495AC79B4AA80A58
SHA1:	58EF2AA312478B938791139C6D304DA7E5DEBA2A
SHA-256:	A6A7E398DE9995CD09762F8D1717604EB7E0FF45664093534006265074B1D25B
SHA-512:	3C910E72074867E7025F2E2A46026ABDBE1918C9869A1A8BE3A91136C0BCC1870C5442D805681308B1FED406F8093272BFD4F8F3FF2CE83B1A47BC3A8DF7FD4A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("w9hDv");._.qf(_.dja);_.Jv=function(a){_.I.call(this,a.Ha);this.aa=a.Wa.cache};_.B(_.Jv,_.I);_.Jv.Na=_.I.Na;_.Jv.Ba=function(){return{Wa:{cache:_.Yo}}};_.Jv.prototype.execute=function(a){_.pb(a,function(b){var c;_.je(b)&&(c=b.ab.Wb(b.fb));c&&this.aa.tD(c)},this);return{}};_.Bq(_.yja,_.Jv);._.l();._.k("VwDzFe");.var hE=function(a){_.I.call(this,a.Ha);this.aa=a.Fa.Yq;this.fa=a.Fa.metadata;this.da=a.Fa.Pq};_.B(hE,_.I);hE.Na=_.I.Na;hE.Ba=function(){return{Fa:{Yq:_.ID,metadata:_.qVa,Pq:_.FD}}};hE.prototype.execute=function(a){var b=this;a=this.da.create(a);return _.pb(a,function(c){var d=2===b.fa.getType(c.Ed())?b.aa.Xb(c):b.aa.aa(c);return _.Ij(c,_.JD)?d.then(function(e){return _.jd(e)}):d},this)};_.Bq(_.Dja,hE);._.l();._.k("sP4Vbe");._.pVa=new _.xe(_.zja);._.l();._.k("A7fCU");.var ND=function(a){_.I.call(this,a.Ha);this.aa=a.Fa.DL};_.B(ND,_.I);ND.Na=_.I.Na;ND.Ba=function(){r

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15436, version 1.0
Category:	downloaded
Size (bytes):	15436
Entropy (8bit):	7.986311903040136
Encrypted:	false
SSDEEP:	384:uJ/qNyGt74AcZEG+69hFFHDJ1CggakKt0y:+q/kAc+ohFx9YgB2y
MD5:	037D830416495DEF72B7881024C14B7B
SHA1:	619389190B3CAFAFB5DB94113990350ACC8A0278
SHA-256:	1D5B7C64458F4AF91DCFEE0354BE47ADDE1F739B5ADED03A7AB6068A1BB6CA97
SHA-512:	C8D2808945A9BF2E6AD36C7749313467FF390F195448C326C4D4D7A4A635A11E2DDF4D0779BE2DB274F1D1D9D022B1F837294F1E12C9F87E3EAC8A95CFD8872F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......<L.......\|..;..........................d..z..J.`..L.H..<........e..^...x.6.$..6. ..~. ..).7{...K.. .k~....".v(...[...RE.$..K..C,.'..{BK.C&.....'L!...DZ........+6.r...K..._...<..0..].V..........e.r(RN.43k;g`...?<?.......b..c.`.. .6..p...5.$zd.R%.........h....";.^WU.....H........S.j..M:..=K..\B.6"f......z.........$...%w.?$-....9.:u....u.I..Tt..s........lY...J.6oN..y...1,I.Yx..lu..}.e...Og..d...Xv.. ...iF.]..x.N..#%,y.&..,$.^.n...\.K.P.J.x...H$..-.....p.....t.v...gD^....?..6o......e....,f.)..h...P...<.:.E...X..p....U.?.[m....l.Y.S..p..%..K.,U..3U.qFZo....U...3..3.]\.C.#..9T.8P`8......P...R;..r..J.*...u.j..^vnf.v.... .pw...Z.(.6%$U.[.\|....!mU\}./..i,..7D........:t'.a;.W(.."G....q.-.Z......;J..0.&/.5. .T......w..;...t...H.t.<y ..@xx .JA.U.t..;g....@..... .t......<.5(^.\|s..Ko.O.x.....!...........lHF............So{.%..V...7..aA$....C;,"(.J..EE..@.....vOB.,V..../....B#.r+./-t.(.N.S...R.Z$4...4i.c.}t...#3`.......s..;.O,.\|..W.A.f.w.

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (16194)
Category:	downloaded
Size (bytes):	16410
Entropy (8bit):	5.149743639304422
Encrypted:	false
SSDEEP:	384:8ZAA6pB56II70uUl+V3TELHNqR+F0mbmwOwOy:kApB5IHtTY5FrX
MD5:	6A3A434A1360CC744341E97DE9177BC6
SHA1:	D110825C3252A677CE8B6FD81CD2EDA0201E4E1B
SHA-256:	4F5B2528815D8B1CD9B68B1A4BB1FE689696F8DCBC2C4A5104343B886EE68828
SHA-512:	A86A62D78D101AA6E8045AE4966604415A808A34D686BA2E0DCD169FA93EA638652B2926FF336186564136973CB3E0870E725CEEDDD23FD8FA40ABD8AA6FFFD0
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/js/vendor/underscore-min.js
Preview:	// Underscore.js 1.8.3.// http://underscorejs.org.// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors.// Underscore may be freely distributed under the MIT license..(function(){function n(n){function t(t,r,e,u,i,o){for(;i>=0&&o>i;i+=n){var a=u?u[i]:i;e=r(e,t[a],a,t)}return e}return function(r,e,u,i){e=b(e,i,4);var o=!k(r)&&m.keys(r),a=(o\|\|r).length,c=n>0?0:a-1;return arguments.length<3&&(u=r[o?o[c]:c],c+=n),t(r,e,u,o,c,a)}}function t(n){return function(t,r,e){r=x(r,e);for(var u=O(t),i=n>0?0:u-1;i>=0&&u>i;i+=n)if(r(t[i],i,t))return i;return-1}}function r(n,t,r){return function(e,u,i){var o=0,a=O(e);if("number"==typeof i)n>0?o=i>=0?i:Math.max(i+a,o):a=i>=0?Math.min(i+1,a):i+a+1;else if(r&&i&&a)return i=r(e,u),e[i]===u?i:-1;if(u!==u)return i=t(l.call(e,o,a),m.isNaN),i>=0?i+o:-1;for(i=n>0?o:a-1;i>=0&&a>i;i+=n)if(e[i]===u)return i;return-1}}function e(n,t){var r=I.length,e=n.constructor,u=m.isFunction(e)&&e.prototype\|\|a,i="constructor";for(m

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	848
Entropy (8bit):	7.71422030900664
Encrypted:	false
SSDEEP:	12:6v/7OO5uB+xq96OOQnRcjB0LvDBVRbRVjr96hWqJIaCdKseyOah0Y1pWXpPAdBF+:LB+YEQnRc90xTR5AWq0OaySFMN
MD5:	E60493446D2E9194009973E543455415
SHA1:	B879839F169670DAFA244089F08B180046E02709
SHA-256:	51050B0E3A2C758769C5873F92B10642E7E17FE1D6D44744366F4DE53694B4F3
SHA-512:	F414983B6E0C15C09EC4B56D68B42945DE932F5AA99BF7CC024DFC78B42E9867B6C576B95DC0FE428675B13F59A1C07FBF51033EC03A257AE6743FC5EAA9815B
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH...Oo.W......KC[.Xu[.XJ.?.zk. 5g..\.~.~.~."8.......=T9.Rn.H......N....n............fvf...z.+\.].[Z..z......3...8.Y]cew..z... @L4X...Lt<....J..b_....-.........Q4.YX....A.../..,b.#.0(.f....'`.}_n...@u.....9&.....vGV..f ......`D..\|.i.fn]......G.....I.Ha....N...<..X..T....B..%......]...1.+.\,..CG.)O..k0..H...$.^.K.\|V....]r.{....p..xI....YW`...7......x....W.ci..O.[.....m'.I...}B.F.w_...m.V..X>&....T.E-..jP..^.k.H.U.FH.I.3.<....ge.....C..7.B..S.G......K&@.......q..&..gx.I..gZ[.N.....c.!.O..rv...TG.0.p.a.1h.a......J.....x..#..6.J.).M....g...o....<.gh..5....`.....M_....3...w.~....VP.sH.uY.o.)>.;...._.x.K...Xfx.x$ b..\|.S.Q.....G...7d.Q....r.4.....'.~..L.3.P.....'...uY.c.c...........kR...W...Fy...7.w.A+._.q..E-.....n...G...YN"..9.....IEND.B`.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1746)
Category:	downloaded
Size (bytes):	166424
Entropy (8bit):	5.548315963146005
Encrypted:	false
SSDEEP:	3072:S0eiNiuzs8v7NHHKWY8s1BgP4IDQ9GURWu8zylA/u8PemUPhDlaY/ADiZ65tpK6e:S0eMhzvDNHHKWY8s1BgP4IDQ9GURWu8Y
MD5:	2670EDE2722783E236F152349898D6B7
SHA1:	3B8468D4AD36C136F52D1583B9EEA3360362105D
SHA-256:	5B0AB2468A21C9C3BB32FAE474CD41A04773FA0E36650AC59252699C2B26D0C1
SHA-512:	876ED37B49F542519BBAF0C426BFD350C6B4163DF08B3F9A56FF893E5F48BAAF91BB06073D70F88B15756B656BB03CB02D07A6A06C7B557B05A3629360643A94
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.oT1FwJRCVC4.2019.O/rt=j/m=q_dnp,q_sf,q_pc,qmd,qcwid,qapid,q_dg/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/rs=AA2YrTvBynad-nWEy1xIb9j1w6LpLOF6IQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.nj=function(a,b,c){return c?a\|b:a&~b};_.oj=function(a,b,c,d){a=_.hb(a,b,c,d);return Array.isArray(a)?a:_.lc};_.pj=function(a,b){a=_.nj(a,2,!!(2&b));a=_.nj(a,32,!0);return a=_.nj(a,2048,!1)};_.qj=function(a,b){0===a&&(a=_.pj(a,b));return a=_.nj(a,1,!0)};_.rj=function(a){return!!(2&a)&&!!(4&a)\|\|!!(2048&a)};_.sj=function(a,b,c){32&b&&c\|\|(a=_.nj(a,32,!1));return a};._.tj=function(a,b,c,d,e,f){var g=!!(2&b),h=g?1:2;const k=1===h;h=2===h;e=!!e;f&&(f=!g);g=_.oj(a,b,d);var l=g[_.v]\|0;const n=!!(4&l);if(!n){l=_.qj(l,b);var p=g,r=b,t;(t=!!(2&l))&&(r=_.nj(r,2,!0));let C=!t,X=!0,P=0,H=0;for(;P<p.length;P++){const O=_.Sa(p[P],c,r);if(O instanceof c){if(!t){const Fa=!!((O.ma[_.v]\|0)&2);C&&(C=!Fa);X&&(X=Fa)}p[H++]=O}}H<P&&(p.length=H);l=_.nj(l,4,!0);l=_.nj(l,16,X);l=_.nj(l,8,C);_.wa(p,l);t&&Object.freeze(p)}c=!!(8&l)\|\|k&&!g.length;if(f&&!c){_.rj(l)&&(g=_.va(g),l=_.pj(l,.b),b=_.gb(a,b,d,g));f=g;c=l;for(p=0;p<f.length;p++)l=f[p],r=_.eb(l),l

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 80 x 80, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2577
Entropy (8bit):	7.781446647389294
Encrypted:	false
SSDEEP:	48:hIClmS5juJIIPoy8mJgii5Je64GRWEcaGuFAHvUu3olwHCMtToF3PNxXPqoE:hIQj5jLIwXmJIasRXGhPywHo19P5E
MD5:	DBB859BB594B6AB827C4A148D9343720
SHA1:	BD7E94CCCAEB4B244E0D6A333450013F35FCC817
SHA-256:	679EC39C5CCB27D18357D6E23DE0DFA22D07ED435B09E85F7003FFC3870150D4
SHA-512:	9EA39C37EA3A6395B7E9CD63DA3BAAD1F2585B9BAB598D73B5FEBC7399B8532AC8FE57ED2E77537F9D7E689CE8CC289E20D29060023CD2AAD7ADFF4E03944C71
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/related_item_external_avatar.png
Preview:	.PNG........IHDR...P...P.............PLTE................F........?.......@..-..2..:..'.............4..............1..5..A................k..i..[.....I.........(..................T..3..9....!.....}......................%........t.......8..v..'..+.........................k.....x........S........S.........E...................................>..5............A..........G..Y.......&...............".....................@..%....................................................>.....(..`..:............C..O..1..9..........s..M........m...........?..V..2..a..e..j..&..$..:.......R..&....................4........(..... ..............B..9.....-.."..-../.....E..\..2....7.....0........<..I..<..!........$..*...........D..5........B...................................;.f.....tRNS.@..f....IDATx..eTTi......a...k.....6....( ..H.2 .5...42.H.!.....H.....;.;qa..........y.J<..=..+....)cL@..a-..N..u.w....2..H}..q......WD...<i.W.W_.}&5=...p..Q.....1.....\|..T....4.

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13813)
Category:	downloaded
Size (bytes):	13948
Entropy (8bit):	4.9315754216621945
Encrypted:	false
SSDEEP:	192:ZT2hn+4XIQyB8gB6mBpNPzFhCNBjVs5y6sybYw9QoFYx59BbA5GJ4IefNCdeddJT:ZT2V+4XIHL/72fZBhVn8
MD5:	3AB79CCEC761BC5529674DD1718CE1D3
SHA1:	B1E187D5F54D24A2FECC61F786775C05685EA097
SHA-256:	3547A6395F3AC5DEA0EAD4C67FB071FD275B0725EA2BE28C3984F7292C41CD00
SHA-512:	8E3A9CF48193B10D3BAA60C95D832651CB76B547E8308588A7D51A57D63AF45B2B74CED0E4859801ECF40053E3C51969D7645E1271947B0A8A105EB074DA70E7
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/vendor/jquery-ui.theme.min.css
Preview:	/! jQuery UI - v1.11.4 - 2015-03-11. http://jqueryui.com.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */...ui-widget{font-family:Trebuchet MS,Tahoma,Verdana,Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}.ui-widget input,.ui-widget select,.ui-widget textarea,.ui-widget button{font-family:Trebuchet MS,Tahoma,Verdana,Arial,sans-serif;font-size:1em}.ui-widget-content{border:1px solid #ddd;background:#eee url("/img/vendor/ui-bg_highlight-soft_100_eeeeee_1x100.png") 50% top repeat-x;color:#333}.ui-widget-content a{color:#333}.ui-widget-header{border:1px solid #e78f08;background:#f6a828 url("/img/vendor/ui-bg_gloss-wave_35_f6a828_500x100.png") 50% 50% repeat-x;color:#fff;font-weight:bold}.ui-widget-header a{color:#fff}.ui-state-default,.ui-widget-content .ui-state-default,.ui-widget-header .ui-state-default{border:1px solid #ccc;background:#f6f6f6 url("/img/vendor/ui-bg_glass_100_f6f6f6_1x400.png") 50% 50% repeat-x;font-weight:bold;color:#1c

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1299)
Category:	downloaded
Size (bytes):	114270
Entropy (8bit):	5.555347580992265
Encrypted:	false
SSDEEP:	1536:dR7wNudrMS1NYUJHrzObNY5S6GwnKAWAhhvJL/9r1Zynicfw+yYUHeMM:j0NuSS11RMt0hvJL/d1ZKfLyYV
MD5:	60D32CCF5DD02A2D74C64BDF8A086261
SHA1:	251E6D31BE41B26ECE35D353472994D52BA65B29
SHA-256:	47232E6DE68948A242B24FE77AD7E4D218C3EDAEDB2E0FCBE6498DB785CB581D
SHA-512:	E47750B9E00B55192CAA18FE788E921571A8949C6588C01EBF2C5FADAED9E1E1B455773A87F9A300C7B3DD393EB7CD569F7E25205F4183022AC2692CED149DCC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=AvtSve,CMcBD,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PrPYRd,Rkm0ef,SCuOPb,STuCOe,SpsfSb,UUJqVe,Uas9Hd,YHI3We,YTxL4,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,byfTOb,eVCnO,hc6Ubd,inNHtf,lsjVmc,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,qmdT9,siKnQd,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ltDFwf,SD8Jgb,rmumx,E87wgc,qPYxq,Tbb4sb,pxq3x,f8Gu1e,soHxf,YgOFye,qPfo0c,yRXbo,bTi8wc,ywOR5c,PHUIyb"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ltDFwf");.var Bvb=_.y("ltDFwf");var gU=function(a){_.J.call(this,a.Ha);var b=this.oa();this.qb=this.Ra("P1ekSe");this.jb=this.Ra("cQwEuf");this.da=b.getData("progressvalue").number(0);this.ja=b.getData("buffervalue").number(1);this.Ca=b.zb("B6Vhqe");this.Ma=b.zb("juhVM");this.ta=b.zb("D6TUi");this.aa=b.zb("qdulke");this.La=0!==this.da;this.Ka=1!==this.ja;this.Ia=[];this.fa=_.Sr(this).Xb(function(){this.Ia.length&&(this.Ia.forEach(this.m9,this),this.Ia=[]);this.La&&(this.La=!1,this.qb.ob("transform","scaleX("+this.da+")"));this.Ka&&.(this.Ka=!1,this.jb.ob("transform","scaleX("+this.ja+")"));_.Qq(b,"B6Vhqe",this.Ca);_.Qq(b,"D6TUi",this.ta);_.Qq(b,"juhVM",this.Ma);_.Qq(b,"qdulke",this.aa)}).build();this.fa();_.zg&&_.Sr(this).Xb(function(){b.pb("ieri7c")}).Ee().build()();_.Gz(this.oa().el(),this.Sa.bind(this))};_.B(gU,_.J);gU.Ba=_.J.Ba;.gU.prototype.Sa=function(a,b){Cvb(this

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	4.776520264754904
Encrypted:	false
SSDEEP:	12:7auY7wkV/YNAauYNV0JwkKQ+QYHNAauYPwkagkNAauLpHNV0JwkV7QLNAauLpHP1:7DkwkV/NDHwknL3DYwkjDLpAwkV7QiDL
MD5:	171A27B20F5D0B16722F2DD0E2184DBE
SHA1:	718E11940546CBA0ECC2B2E714ED7CF5B9443721
SHA-256:	3AC3BFB623882F81C6EE767598D0439C1AF6C39473EE5FB764D83D16C87BB5E2
SHA-512:	EE5D81AD5DA974E6DD5114B0ACA8CD5CF8568C7DA5C6B39930B7C4631E34348B7662BB8729B0D597D9179EEAC92F84F98C2EEB6AA3782852CD18ECF9C7F64F39
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/fonts/roboto.css
Preview:	@font-face{. font-family:'Roboto';font-style: normal;font-weight:300;src: local('Roboto'), local('Roboto-Light'),url(./Roboto-Light.ttf);.}..@font-face{. font-family:'Roboto';font-style: normal;font-weight:400;src: local('Roboto'), local('Roboto-Regular'),url(./Roboto-Regular.ttf);.}..@font-face{. font-family:'Roboto';font-style: normal;font-weight:700;src: local('Roboto'), local('Roboto-Bold'),url(./Roboto-Bold.ttf);.}..@font-face{. font-family:'Roboto';font-style: italic;font-weight:400;src: local('Roboto'), local('Roboto-LightItalic'),url(./Roboto-LightItalic.ttf);.}..@font-face{. font-family:'Roboto';font-style: italic;font-weight:700;src: local('Roboto'), local('Roboto-BoldItalic'),url(./Roboto-BoldItalic.ttf);.}

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 30x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4030
Entropy (8bit):	2.289202412840356
Encrypted:	false
SSDEEP:	24:W8Ppll0iV4aUYGBYTxIX7+44RfwsLaGXPj+ug6RFvqsdQa9q7UhdUUXZ:zlVV4aUln27+j6zd7J
MD5:	9D8A345774EB2C042F7781C79C87C3C0
SHA1:	2700FAFEE21752643C27AB590E0AA608E7B08F2F
SHA-256:	8BC8ED3C65851B1DBD2F388F503544DC48D26003B378628921CB927E5002E4C6
SHA-512:	BD99E6AF6B2005693882E8A2E38E53F4F80D287C69D66DBEB28655AA95108B551F78D4FEBC7E759268D7F6CD67A0619847A9EC95D7D989168A4DEDDB58ED70F9
Malicious:	false
Reputation:	low
Preview:	....... .... .........(.......@..... .............................DDD.........DDD.DDDHDDDqDDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDDqDDDFDDD.....DDD.DDD.....DDD.........DDD#DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.....DDD.........DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD~DDD~DDD.DDD~DDD.DDD~DDD~DDD.DDD~DDD.DDD~DDD~DDD.DDD~DDD.DDD.DDD.DDD.DDD.DDD(....DDD.........DDD.DDD.DDD.DDDIDDD.................................................................DDD.DDDNDDD.DDD.DDD.........DDD.DDD.DDD.DDD.DDDD................................................................................DDDJDDD.DDD.DDD5....DDD.DDDGDDD.DDD.........DDD.........................DDD.DDDXDDD.DDD.........................DDD.....DDD.DDD.DDD.DDDj....DDD.DDD`DDD.DDD.....DDD.............................DDD.DDD.DDD.DDD=................................DDD.DDD.DDD.DDD{....DDD.DDDcDDD.DDD.....................................DDD.DDD.DDD.DDDK..............................

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (775)
Category:	downloaded
Size (bytes):	1479
Entropy (8bit):	5.323616229985237
Encrypted:	false
SSDEEP:	24:kMYD7xuTu0bbgQNIKJY9KK/HTwfUuH0NPJrIgig29LaCkD+fiGb1fF8GbYgfpmOT:o7xua0b8DAmHuH6iNZGZ+qGb198GbBRZ
MD5:	9C5A6D6B0E7694085EB1438ADFE768D2
SHA1:	F8E3927E41A5A8246ED620E0CF1CDCE4D5BF96A8
SHA-256:	96158F01E2032C3953EAE735521BB8AA25F629AE43D53C8E9721080859DDAE59
SHA-512:	89544A493D458156CF4DB52A1DC87B74789EDDC88E80551AB921A63FBB3BF7F984EB6727534FE77D621EB66939D8B4501DB568FA6107420FAD886DB1737251DE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=bm51tf"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("kMFpHd");._.qVa=new _.xe(_.Gk);._.l();._.k("bm51tf");.var tVa=!!(_.Qf[0]>>20&1);var vVa=function(a,b,c,d,e){this.fa=a;this.ta=b;this.ja=c;this.Ca=d;this.Ia=e;this.aa=0;this.da=uVa(this)},wVa=function(a){var b={};_.Ka(a.RN(),function(e){b[e]=!0});var c=a.wN(),d=a.EN();return new vVa(a.rK(),1E3c.aa(),a.fN(),1E3d.aa(),b)},uVa=function(a){return Math.random()Math.min(a.taMath.pow(a.ja,a.aa),a.Ca)},OD=function(a,b){return a.aa>=a.fa?!1:null!=b?!!a.Ia[b]:!0};var PD=function(a){_.I.call(this,a.Ha);this.Gc=null;this.fa=a.Fa.OQ;this.ja=a.Fa.metadata;a=a.Fa.K$;this.da=a.fa.bind(a)};_.B(PD,_.I);PD.Na=_.I.Na;PD.Ba=function(){return{Fa:{OQ:_.rVa,metadata:_.qVa,K$:_.kVa}}};PD.prototype.aa=function(a,b){if(1!=this.ja.getType(a.Ed()))return _.Vk(a);var c=this.fa.aa;return(c=c?wVa(c):null)&&OD(c)?_.Fta(a,xVa(this,a,b,c)):_.Vk(a)};.var xVa=function(a,b,c,d){return c.then(function(e){r

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1631)
Category:	downloaded
Size (bytes):	38537
Entropy (8bit):	5.387806062569989
Encrypted:	false
SSDEEP:	768:2qezdK8VV39NTbhmXNIVM3T00XTasBdJDL6XBsdeDJw1SeP6kSquFt:k9pVg00JdJDL6XadQ+1SESD
MD5:	4F0292472B0F331CF0FE0B66517D2486
SHA1:	2561B9BBF8E0A8BFB34ADEF4A8821C742A532BF5
SHA-256:	C244C7308FBB61ABCDE202674431751C0DBDF4330F6D88B23B8DA2B14643DF33
SHA-512:	45617C33C3D283FECAF20702B5D08DABBAC833A69189936905E990B9A9F1109CB5844B5CDC795BD289AF20EE7902A6666882E5C991DF00013FC1D14C272CA8CE
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=_b,_tp/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=byfTOb,lsjVmc,LEikZe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.npa=function(a){var b=0,c;for(c in a)b++;return b};_.opa=function(a){return a.lh&&"function"==typeof a.lh?a.lh():_.ja(a)\|\|"string"===typeof a?a.length:_.npa(a)};_.on=function(a){if(a.ah&&"function"==typeof a.ah)return a.ah();if("undefined"!==typeof Map&&a instanceof Map\|\|"undefined"!==typeof Set&&a instanceof Set)return Array.from(a.values());if("string"===typeof a)return a.split("");if(_.ja(a)){for(var b=[],c=a.length,d=0;d<c;d++)b.push(a[d]);return b}return _.qb(a)};._.ppa=function(a){if(a.Yg&&"function"==typeof a.Yg)return a.Yg();if(!a.ah\|\|"function"!=typeof a.ah){if("undefined"!==typeof Map&&a instanceof Map)return Array.from(a.keys());if(!("undefined"!==typeof Set&&a instanceof Set)){if(_.ja(a)\|\|"string"===typeof a){var b=[];a=a.length;for(var c=0;c<a;c++)b.push(c);return b}return _.rb(a)}}};.var qpa,tpa,spa,rpa,En,Gn,Fpa,wpa,ypa,xpa,Bpa,zpa;qpa=function(a,b,c){if(b)re

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4199)
Category:	downloaded
Size (bytes):	19278
Entropy (8bit):	5.359422018902732
Encrypted:	false
SSDEEP:	384:A2dlP0PCFrqUBY+231w+bxceSNPxNRd4K6wxhK/dEQR715:tlP0PwY+231wEx83c+xhK/7R715
MD5:	B687150619406DFC18DB752F8649DE25
SHA1:	B6AEF0711DAD25D6F19ADAF175A5FBFCAB6C521D
SHA-256:	6C98E338A135DA325176733D7F59666BD9FD5D88D10C039AA70E2AEDBEA617C8
SHA-512:	13123C958C30AD69A818234948E1C67C51051FB1CE065678551F0841BB781131EE9A3DBF9B93BB7AEABCFAA546B2FB7FD5B9548EF786A218024745CDC42745A0
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=RqjULd"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.Mu=function(a){this.Ga=_.t(a)};_.B(_.Mu,_.v);_.Nu=function(a,b){return _.wd(a,3,b,_.Dc)};_.Mu.Mb=[1,2,3,4];.var yCa=_.da.URL,zCa,ACa,CCa,BCa;try{new yCa("http://example.com"),zCa=!0}catch(a){zCa=!1}ACa=zCa;.CCa=function(a){var b=_.eh("A");try{_.Jb(b,new _.xb(a));var c=b.protocol}catch(e){throw Error("ic`"+a);}if(""===c\|\|":"===c\|\|":"!=c[c.length-1])throw Error("ic`"+a);if(!BCa.has(c))throw Error("ic`"+a);if(!b.hostname)throw Error("ic`"+a);var d=b.href;a={href:d,protocol:b.protocol,username:"",password:"",hostname:b.hostname,pathname:"/"+b.pathname,search:b.search,hash:b.hash,toString:function(){return d}};BCa.get(b.protocol)===b.port?(a.host=a.hostname,a.port="",a.origin=a.protocol+"//"+a.hostname):.(a.host=b.host,a.port=b.port,a.origin=a.protocol+"//"+a.hostname+":"+a.port);return a};._.DCa=function(a){if(ACa){try{var b=new yCa(a)}catch(d){throw Error("ic`"+a);}var c=BCa.g

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2929), with no line terminators
Category:	downloaded
Size (bytes):	2929
Entropy (8bit):	5.7958035009306315
Encrypted:	false
SSDEEP:	48:g3VeZzi+gzhZzi13oybloipo3faJoWjLOupugFDziNnZzijD+:glehi+AhhiVRvpQC7Oup99ixhijK
MD5:	ED7E31430404C9C5F786A705704435A0
SHA1:	4F45973C9DDB7C838F3499B6586A298F52709323
SHA-256:	ECDF2DF863BA2AA20678BB2D21B359EA8400F8C8C8FD86311536A85F1A0624C3
SHA-512:	AADDDCCE77A2CD2BD648A3332AE7B12924E6A62CD53661CC083A8F2B4171EB36840B1797C2F7215C4B5D4176E40CC6013C113C6662AC510B22F224838FEFE241
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s
Preview:	<!DOCTYPE html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><title>Email Link Protection</title><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><meta name="google" value="notranslate"><link rel="stylesheet" href="/css/fonts/roboto.css"><link rel="stylesheet" href="/css/fonts/font-awesome.min.css"><link rel="stylesheet" href="/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/style.css" onload="try { cssLoaded(); } catch(err) {}"><link rel="icon" href="/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborv

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 208 x 120, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5155
Entropy (8bit):	7.919446869091427
Encrypted:	false
SSDEEP:	96:CSmRxnLQ2y7xIRYc7DFfAAoliBEp3v53ATHy6BoiklD5x/npnErL:CSmXs2Qe17ZoxkBUKTJ7k1DnpnA
MD5:	B1263340F00B531E1097B4706A6A4FDF
SHA1:	C1DEBDAFDE22E444211DC42801FA7918D3CD6C2A
SHA-256:	96226AF544867BC648F8E2EF4449DBF5278DF15A2CA75075A7B71570762F3EE6
SHA-512:	916246B7D2D2445C542EFFCD66586C4EFC250AE5B3ABC8EFA197C792D762ED26D1E5C2B5F6F4E9CD284EED70C2432D8553C75517661EFFF572DE21F78C9A24C0
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/logo.png
Preview:	.PNG........IHDR.......x.......\|.....bKGD..............pHYs.................tIME.....94.}.a....IDATx..{.%.U..{...B.......dx%.....y(......,$.KERZ..G.b.....%.V.`..!.1.c%. ..2..B...5.....0..........{.>.8}..Uu..{{...^k?..{-C.FH...k.Xb.\|.p.p...X.....L.S.6.U.9.I.q...n.){..@...D.FQ.-..5...0~..U.D`.....p.p#.-.e.5c....RC...{Y............)Ik%./.JI/.9.".$....%M.1...S!../.....#.....t..od.}A..7%.'..u..B.....,.....B.U..:.)...Y.E..oH:G....,.]EL._..o..{@...>..2.s..F-.[t....G.i....B.m..F.)%.....u...t...Rf.....'.f:\.1Hz3.......[d./.~.x...Y.....^..g].K..r.<p=.........Gm<G....1...n.....l%.....Ye.5.e....5.......x.....cn..#Ej.x..'I.n.i..k$.l.t{...%p.I{H.O./.u.LI,.I:...6R.....IO.P...>#.p.^2e....VJz..+J...I'G#..!.!....x.%....3...%.\...A..G#..w.. u).5.L.J.70 .Y.%E...`4J.~a.......w.....OQ..\|...c.I.jIW.(.U...x.r2Ye.t...%....W%.5.0uH....:.H5..L.A..1../.tq.. .6I{.....).........}P....k....-`J}.W"...)9e.e....H.wVm...H...p...4...S....2I....x*5....ix....<.x.$..u

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 4924, version 1.0
Category:	downloaded
Size (bytes):	4924
Entropy (8bit):	7.951833409122959
Encrypted:	false
SSDEEP:	96:ObTGgewjz5RrXFpuoDKNUEKCM3RiM826IP7K:ObpxUAhj3Ug7K
MD5:	3A941FC72BF9E9786320389B5E7FED6F
SHA1:	A27BCE58BA261EAA37D538FBD7A0984414E8E4AE
SHA-256:	F3A5EA76A1AF88E638AEBB15539E7DB15484C87D405309492D5A92A2FEC85849
SHA-512:	C118B841435A69C0D5594FACDC441E98A392D63EA0D746AFEBFE3AD7C424C8166D021AFE7D86C6DAAA10B8829B9F5DCC22E01276735402C541488D8D165FD2A7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmtjtiu7.woff2
Preview:	wOF2.......<......+..................................d..`.`..:......B..^..6.$..8. .....:....%EFm7iU<..O...q.q-M..Q.6%.E...DeC7jl..S.....0'..L?4.....wYt...K...}.?q.$.<\|?...0.......K&I=...t....>\?r..U.HUs.J.....IxL\|..K......o..#...YAX..B@..v3.l.b.......H~E l..`..O.....$.......vp^...2....r.O7..?6S.$%.!. Q..C..El7...M.&v.,.....o:@..~T,.Y...%..1i..........@6{a.1..uO......p...f7......]E...d.~"T..#..v.!.a...g...G..q..b.1..._.B.........(.b.x... .A...(.b...i..3.A,V....b%..j...$... 6.Cl.....h0.4..G..4..K..........:.E .o...?....t.<Wa.P1...1.....!.!4-..ISc1X,..&.K..)..>...e3PA,.G...Y!.T.\.v..s.Y#U" e}...G..s;5..Z....C=Osp..48`.....]......P)~G.....@.....f...H.C. .~.#..]j..P.....Xq..qA....N.g\...t2...%..@...6cf.... .d..s....}P..f..C.S1.dA.S.3W...b..{...j.q=...E.`.4........4...;.O...b.<Q.4vZ...6k_.b.(..B..l+Q....l2.Ue..<....B*.3..sE.b...d..H_:....L..D.+..%^u.....f..W%.A$Y.ti../_....l......1..?.wh......de!.KEH..ZpN.........+QP\|o..[.<.!...o.s..."\|4..7.....m

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.664959056860514
Encrypted:	false
SSDEEP:	3:HniCnmzth+2K2mCGUpYk1G94kn:BmB3tYP
MD5:	A83BBFA2EE366E0DDD852BF6285A337E
SHA1:	98039160B0267199D10E4FE77546283DD2417187
SHA-256:	FF80EB8EC06E1ED5A6D0A0592CF148409DEC1594F9C6AAF0C4B8AEAEB0C86147
SHA-512:	79666D1140B8C1F0C46B834BE3BD937CAEFAC82E14FE380068F6769770414EC576AA2106A4B32CF329698C30164DCAA9D5378A1DF1300D3E5C9CEA7F7D3115F1
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmQMlRNxQnEhBIFDUbbxIkSEAnal8bI1t_HMRIFDQbtu_8SFwnKf47UcyJWzhIFDZSQkvoSBQ1pSEdH?alt=proto
Preview:	CgkKBw1G28SJGgAKCQoHDQbtu/8aAAoSCgcNlJCS+hoACgcNaUhHRxoA

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15208, version 1.0
Category:	downloaded
Size (bytes):	15208
Entropy (8bit):	7.982663162282351
Encrypted:	false
SSDEEP:	384:W83RLtRZmZ5GJ5Ugs0fRdyXIgRTXy/W8sJn1vS+umw/C5s9PZ9/:W83RLtRcGMgfCXhzWWFJnd3xwZ9Pr
MD5:	CD05F978145C3B6F58B800C1FB5EF436
SHA1:	916E50A357512D525C2850C8429E1E091574C9C9
SHA-256:	F36242B1AB1AC1316640455B84D157E26487BFBB2B847C6DD4107D6CA071617F
SHA-512:	6B7A8ABDE8611B63B3C26312B9C8ED688E7BBD2A29131F5DC0FDAD53770DEA2ECADF9CD14D432AC56EDB340CC86BB075F6EB176E10285F29CE57A4C8F47F3A48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oLlVnmhjtg.woff2
Preview:	wOF2......;h.......L..;..........................."..`..(.`........\..w.....6.$.... ..x..%...........n..d......4.HM:V....:dX@S......V...n.h4.f...d.3ki.zpo..._\|......_.6...!H!....Y.=T<....h.S}...Nk.F.%gN].N.WLz....IN.......%{..1.6.0j#....H........3.[.......L....~.o....".4..].I..wm..F.D%5:!.....-,...UP.z..`.A`...V..Q...b......y..u.Uo\$=..6.{.....Q.....p.)p......SO.=.y..V..%D....n24...<.G)-...r{.m.1E4..\P...%....tF.....A....&. HW..$Vw..Soeu...<..M.U.....7.}.kE.]}..F4...7.....6i..0."A....._..}.w...[ .....;..E.r\|..].....P..OM.wB.f&...F.E..+..2j..N...9-.mJ).....1.....e}.....%......C.Z......4.}..Nd...T...*...Tw.....YqDv.9d..N...H.f...Y...T...!.I.\.w..t%R.v.\|..4Nk....)..f.^.7.........3.V\|.....,dK._..[.&....:{u/... "..."....c{...\....$.W1...i..:..5..v!T.ks>"......X.X.# ^._..I.`..F.Mm...].......S".6A.P. \...%...`....'.@.n..;.R.@..e....3.L..rt<{/...^.{.'..l....I0.}.d.=.Y.....^.z.-.......zg......<K.....m..9.;}..5.'...'...^pVAo..K....\|.V^n.O..S.C5...n..x.\|.

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14796, version 1.0
Category:	downloaded
Size (bytes):	14796
Entropy (8bit):	7.984459440886347
Encrypted:	false
SSDEEP:	384:xTigBuOeGaqjToV9edkOIjd2y4oeYAac15+lBa21ob6bdP:xWgBdCVWXymYy+Rowp
MD5:	BB9D1306FBA272771A89683EA3B0A4FC
SHA1:	7CAD32EAF7748F5AC06CDA557739FC9D5AEC6D9C
SHA-256:	483F202789ED694C70F16E9CA008533BE41FC8F9DDC44D832F5818CEF0AC85F2
SHA-512:	258CF5310ECE555A8B49A19F4B0AAB2D2B35CA8569CCA715BD8538C49E584B3325ED1C9956A76C600DE2482D947138D74CB0F6C2E446BE70E362D050D245EB17
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmhjtg.woff2
Preview:	wOF2......9...........9n.........................."..`..(.`........... .....6.$.... .....%............\|^m6.v; .T[9.a.....-....@....)0.}.,..%..%.....X........zci...z".r...O....nmNdaX........0..d..".....&.guTY{...]....6.'IN.#...K..h......D.Ipm..@.uj..)53bT...x..x.s.....WaG....J..#P<....N.Wwz...[._j#:1A"..U..D...:....v..]tz.vAO...ofs.['.<Na<.#..$..@....mF..{3.).. k.b.Au.V+.A...J...a.n/.Y..s...m5{..^pA...b..M.%......5....RqZ\|!}(..<(....~.A.f..X.L.5..bz.g...u.:.._#z..b.."...b.. ......g.....G...9...2.[..9........0....DYP..Z\B. ...I....I9%...D^.t..EVN9.)t)....e.b.l3...9.S(.B.pX.kv9...&.=.j..)d..p..T.......K.....dY.I..m.......l.DB...s..B...._;';Y.....i.G..X......k.....4..u........>k..?...$..+{<...FDD.iB..I..9.W.-..5..>..s.....p..bW.>......0.F@.!..!...H.4..0..D.89......T.P.@H(a.>...%..ao ...}...s=./.......4.>..*....t. E.......V....EH<...<.@".......e..8........]..$....Vl.NP..9.>.....>.......v...g.iU....s.QM=..1.0....GC...,....,F=...-..@..o.8......cy..Z.

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108506
Entropy (8bit):	5.48567792175291
Encrypted:	false
SSDEEP:	1536:dQed4sDzUV8xLgvIDTxF9/a4+ECrOd/FeSZiSyz2NUAMSceu4GseEP2q:pV88pTxv9erMJi72NUAMIGs3
MD5:	B1603D0E9433907B5F5AC30B5018DD45
SHA1:	E9F09D93B13340342F82D3346AAC0F844FC0A1FE
SHA-256:	1FB71328DF3633BEACAD3165E7A28463FFD4A5B3BEE5C2969041DA8591E760BF
SHA-512:	167591CEE0413EA23BB9086E3400D2CC28AA91B83F2838C1CAB38D9E74B39CB092888E5F7F440E2650D69C205CD8F9818327B15DCCCB9C87F71BFCC9DC9BF76B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(g,f){this.uc=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.uc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 3744, version 1.0
Category:	downloaded
Size (bytes):	3744
Entropy (8bit):	7.927907634157325
Encrypted:	false
SSDEEP:	96:vG9TwdO2m7hNR+whoZ49A+RSL3iIlIRg4n:vK5V2ZMA+cL3ilg4
MD5:	76401C24E5DADD117E47C8A3AED24721
SHA1:	2D08A624B4CAA7EEAAEC148D879554DE049C1623
SHA-256:	7DDA16A4834B7CD8B77EBEE5723D5AB9090E0F7AE0C6A8280588A92468618933
SHA-512:	6801146305214C6E588A08622D6FA5F49D92E94B1EE6FC01414EF9A0E8BED10C06D6BA0EA5D4FDEF3BFDA6E95B7E7ABBCEE15F7A9C06F87EC0CDB9CC0D5CF1BA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUp9-KzpRiLCAt4Unrc-xIKmCU5oPFTnmdjtiu7.woff2
Preview:	wOF2..............)l...F.........................n..D....`..8....D.p..,..6.$... .....m....#3......~ ..o.1.....B...DA.]=...2..T..n.D.dsm........^..~2.e.............Iv.s..9..3UU8"U..............].L.>....Ji.........[..\|.."x..cu....9..U.VAU.@....E....<?Iqw.qo.c.a.f>].4.....F.._.D..1x3n.%.Xb;.u..p^..E.0q.0.vPa..9w.....I6..Z..o.J[.Uw.a./..E..w..09..r....R]..=..?.=Dj...X. pa..K.bQ.X..#...R...U.0Y.1.......a\....8.....D."~)H.<.@1R..i...@..!.6.-....m..\|x.C!.."UC.......AO.......nrv.....q..%y.. .x..........~.e~..Fc....#..9..C.>.K.=.Z1..m..F..,.O.L.J.v.. [..%&%.6.G....P.......t.8..."[.z.j~..(S9......(..M....I.!O..)2E.....6...c.`..h..x-..//..)..n5...7..n;.H...X...~v...ZN..HZ..i..y.\.N.u...WJX.,.B....^/.8.U...zcy6.?..m..k....:a..J..!...\r.S..V.......V...].h./K{z#....\ab.....'4.*r.~....?......+..>{.@..`..... ..8.@.......1v..R.f.%i.VC...F..h?.0..........R.&^..lH0)....n.....r..T..PFU...TEQ.L.p]"t.."X...Bu..._.>q...7$...b...K4%....s.LK. .L...&.,+.m+...b........h...

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	TrueType Font data, 19 tables, 1st "GDEF", 29 names, Macintosh, Copyright 2015 Google Inc. All Rights Reserved.RobotoLightGoogle:Roboto Light:2015Roboto LightVe
Category:	downloaded
Size (bytes):	518580
Entropy (8bit):	6.689983028344184
Encrypted:	false
SSDEEP:	6144:tXxSSXa4oVPYhUyvTV11YpxE4IDguoQkcaUI3zF5jhkgeAzYWvBYY10lJf:t43H+LpYpqDRoFZz7lebWilJf
MD5:	8D252992868E895B059335848DEC3402
SHA1:	B9EA2EAF26FF8FDCB5AEE3E0C2C7A6084EBB6AAC
SHA-256:	028F843B1990BA46E2A1C4EF1B82729C4DA9A946B0D9D8DBF59E623D1095E454
SHA-512:	55724ED3E5EC7879A19EC33F310D5BE1821FF9E5CF331848E93B64687623EE0930AB5A5010D1C39CD8E67602ACE6040A5647814C290B9DAD84C9E80691CE44DF
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/fonts/Roboto-Light.ttf
Preview:	...........0GDEFEbF...$.....GPOSfo....(....xGSUB(.........1.LTSHg.!...7....?OS/2.j.........`cmap..f$..Q...$zcvt /.....y....Xfpgm.."...v.....gasp......$.....glyf.......H...hdmx.$L?..DD...Hhead../z...<...6hhea.......t...$hmtxD.........4.loca/.Hd..yX..4.maxp.m......... name..f.........postC.U:........prepz/.W..w....:........f.._.<......................<...Z.s.................b.....A.<.2...................:.....;.....Y...............r.......o.,.......3.......3.....f..................P.!....!....GOOG.@.....b.....b.+ ........:... . .....d.........................L.....U.o.s...m...l.\.w.......!.e.....K...<.J.1.....-...o.x.o...o.i.o.b.o.C.o...o...o.M.o.j.o.e.......<...M.m...%.\|...T.N.q.........2...=...........x.......!...g.G.....7...........j.}.....j.y.......X...4.B.......,.=...7.......Z.....'.0.....T.M.t...I.g.I.d.o.....^.r.l.".Z...?.p.l.d.......................e...{.Z.o...v.l.......e.....e.....&...?...0... ...W...D.........z.......[.w...]...m. .........f.q...e.k.......{.].\|.j.f.j.......=.T

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5714
Entropy (8bit):	4.8178237072798495
Encrypted:	false
SSDEEP:	48:FFoRQeffCeRCa9LEZFzBXgLi4g3z04MnWQwV0rWYwI5KWpwdm5WMpwta5WGw+fld:FZZBQmggBZqWl+RoyuujNJycD
MD5:	B2A1E0C63C3B6C68102C113276C4FD68
SHA1:	F45921650989FBD785CC3E0F863758C0C2505012
SHA-256:	D4E09D834D41021C7D14BA5F355C6B8DEDA7341844E6BE948A089B18D94140F2
SHA-512:	A265D6EAEADE36FE7CBE25F0B24406236A6A5652CEAFE5F063AE468D1E45582CC2F2CF20710761EB23E9CF3A22A4DA79ACF870F2B39A618B5F3D6320C5A12D5D
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/style.css
Preview:	:root {. --request-background-colour: #ffffff;. --request-background-hover-colour: #7089c5;. --request-text-hover-colour: #ffffff;. --request-text-colour: #7089c5;. --request-border-colour: #7089c5;. --continue-background-colour: #ffffff;. --continue-background-hover-colour: #7089c5;. --continue-text-colour: #7089c5;. --continue-text-hover-colour: #ffffff;. --continue-border-colour: #7089c5;. --cancel-background-colour: #ffffff;. --cancel-background-hover-colour: #7089c5;. --cancel-text-colour: #7089c5;. --cancel-text-hover-colour: #ffffff;. --cancel-border-colour: #7089c5;. --satgoto-background-colour: #6b5be2;. --satgoto-background-hover-colour: #FFF;. --satgoto-text-colour: #FFF;. --satgoto-text-hover-colour: #6b5be2;. --satgoto-border-colour: #6b5be2;. --satskip-background-colour: #6b5be2;. --satskip-background-hover-colour: #FFF;. --satskip-text-colour: #FFF;. --satskip-text-hover-colour: #6b5be2;. --satski

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2362)
Category:	downloaded
Size (bytes):	220035
Entropy (8bit):	5.447416247400644
Encrypted:	false
SSDEEP:	3072:NUlUx6fcoBoAQgziZ+PziuI8x7W/NaH1takfXtMafoUZK:NwoAV/LRIy1YkfdMaQUZK
MD5:	B703C465468C8607B1393719BE55D7A6
SHA1:	A38DADF1B91804D17B76D86AAB81A0A92F412BF5
SHA-256:	72F6D21F6D21562CF26441730681A43DA6EE8B64C78E775C22D5CF6E929A64E3
SHA-512:	2914D855CD30862CFFA13FBABEA6A87B0DE6B3C0DD3B103E50E1EA18BCCD8F31A7215005C96AD43CB96F1345D274E3197CDCFB9E5590047F866B445A5DCD624B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/excm=_b,_tp,identifierview/ed=1/dg=0/wt=2/ujg=1/rs=AOaEmlHjgpzUn_9XbSMCf8yabW04a52iIA/m=_b,_tp"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x3a22c03e, 0x800b1c4, 0x3e079c46, 0x10814500, 0x6, 0x0, 0x201ac400, 0x199, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT./.var baa,eaa,haa,laa,Ua,Wa,Xa,Ya,Za,maa,$a,naa,oaa,paa,gb,uaa,waa,vb,wb,zb,Sb,Iaa,Kaa,Paa,$b,Raa,Saa,Xaa,eba,fba,cba,gba,lba,mba,oba,pba,qba,rba,Wc,uba,tba,wba,cd,bd,yba,xba,Bba,Aba,id,Eba,Fba,Hba,Iba,qd,pd,ud,ed,Vba,Sba,Wba,Xba,$ba,bca,cca,Qba,oca,ce,qca,de,rca,tca,vca,zca,Aca,Bca,Cca,Fca,Hca,Oca,Pca,Qca,Uca,cda,Zca,gda,Te,ida,jda,kda,nda,pda,sda,tda,uda,vda,wda,zda,Ada,Eda,Kda,Lda,Mda,Oda,Sda,Tda,aaa,Uda,wf,Vda,yf,Wda,Xda,Af,Zda,Df,fea,jea,iea,Kf

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (740)
Category:	downloaded
Size (bytes):	7589
Entropy (8bit):	5.358332354203772
Encrypted:	false
SSDEEP:	192:6mCnIj/anTqw2frjZ/ZofBD82k9iTrw4fRYaRQR21RBRcRDR9RfRhRERzRS:NCIj/s2w2jjBZA7dw
MD5:	ED43CF1DB87946D0A05C2D59D692D0AA
SHA1:	4BDE84CEAAEE6BD966D9D7814B699EB6539572EC
SHA-256:	7821E79BA158859846706E4C57BACC2A212089AB7AC939C489B2B8EC58338106
SHA-512:	2B61DB74F62E2FE592EBDCBBF3728650AABB86BABD68EE23C00EAF818AFFBC1647BD9F7A9EE510A6760A3F446D27CB4079E5794AE3F99713D88DAF91E8D9957D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,NTMZac,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZZ4WUe,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,iAskyc,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,q0xTif,qPYxq,qPfo0c,qmdT9,rmumx,sOXFj,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziXSP,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=wg1P6b"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.tMa=_.y("wg1P6b",[_.px,_.Cl,_.Il]);._.k("wg1P6b");.var o1a=function(a,b){b=b\|\|_.Ia;for(var c=0,d=a.length,e;c<d;){var f=c+(d-c>>>1);var h=b(0,a[f]);0<h?c=f+1:(d=f,e=!h)}return e?c:-c-1},p1a=function(a,b){for(;b=b.previousSibling;)if(b==a)return-1;return 1},q1a=function(a,b){var c=a.parentNode;if(c==b)return-1;for(;b.parentNode!=c;)b=b.parentNode;return p1a(b,a)},r1a=function(a,b){if(a==b)return 0;if(a.compareDocumentPosition)return a.compareDocumentPosition(b)&2?1:-1;if("sourceIndex"in a\|\|a.parentNode&&"sourceIndex"in a.parentNode){var c=1==a.nodeType,.d=1==b.nodeType;if(c&&d)return a.sourceIndex-b.sourceIndex;var e=a.parentNode,f=b.parentNode;return e==f?p1a(a,b):!c&&_.ih(e,b)?-1*q1a(a,b):!d&&_.ih(f,a)?q1a(b,a):(c?a.sourceIndex:e.sourceIndex)-(d?b.sourceIndex:f.sourceIndex)}d=_.Wg(a);c=d.createRange();c.selectNode(a);c.collapse(!0);a=d.createRange();a.selectNode(b);a.colla

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hnhn:Bn
MD5:	BEEDCB4EB0A559E6CE2D1E20D38CB330
SHA1:	A04EE9801770C0E81B170D7992EC3735E878AA58
SHA-256:	6E9D99B87595B07B10676B68EBE9AA8B63DF7D9A74F59CC91EED60EA1FBDC6EF
SHA-512:	BD101CDF7FDF1210127D83CE76E3F6F6F1378259F0A55C112E39C49A9131B8636FB020E07E985B8427A35B62A544F2F7C5F75B11AD69EF2C4AE67A41BD5898B2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAkaIlEjlsLtKRIFDWlIR0c=?alt=proto
Preview:	CgkKBw1pSEdHGgA=

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1393
Entropy (8bit):	7.741695342683955
Encrypted:	false
SSDEEP:	24:D/6Bm17qS9DbPDQ45Gkds4VbbBYdVATpFxb+hs3xl0Sau164l2kFSWZR2vtUx2lH:D/6BmIG7hdbYdVules3xla+64l9wxVUo
MD5:	0EAA75E84E3B5D76E26B5BDEF873465E
SHA1:	79DAEA62FA0952E79644B23305210D61B6CBB631
SHA-256:	D375701BEED766135440CC65BD4CEDE9CC455C0116A362E124C3C2158EDCEFF4
SHA-512:	EE117EEF8002ABEF55C7521FDF265C597226994BDD4EDDF9965E22E1FBA4D8526544A6427F847C2BEA3B586B3E4C06BEB6584D1CCEF5A06AD4739CAF837DB7EB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@......iq.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..[;l.A..;1!@.@......@" ....44\|KD.......E..(A"....ih ...@.H..B..)............>{w{...H..n.;;og.vfw..T.YM....^.m`...b.0.....V..^\....`Jo..B.-..}....F...)..wq..<6........5.L.a.a.q.}.."...J...g....FZ.....4m.4..n..i.g.8............3...w./:..Be....r.T%.0......g5..v.:..X.r.V..?...c_3.J...u ........da....).c.3p(...T.l.E..3....Q.9.R7{...'...MTQ. ..@...R.....j:up....j...w#?...\|.n.}E.........Q:.Q.._..n....W.Q...x.:.X...aU.....o;../4MS..P...Z....%...a.V...S...x...B..FfL{g....%'^......kd.C.U..7.;.....@{.\|.+K.o.0+;.........\%..,qA...(...@......."Gdd..^..C..c.w..S[.P....`......B^....~.c.'t...4 ...P..I$.....,.-.....Z.^..\M.....d.`...TV.LC.....`..H.....KYYB..,......o.../.\|v...d.Y......H.....q..Bq/. 09...7.@....."."n.".d..:'..r...x..F.O......m.i....}.....SS.'g7...\|1..d.dA........:T._..>.t....M...A..$....vN[.#..\|..7...,.J.."w...D.v4..F2..?}..@.mclf>w+...h.m..

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	12
Entropy (8bit):	3.418295834054489
Encrypted:	false
SSDEEP:	3:rOWRL:rOWRL
MD5:	7C75EAA17B37BC1FB911C80DBC99E4EB
SHA1:	447C43B1F1801D3923E154C8745100ED0B915012
SHA-256:	0105D84E88CE0378E75A047F73F4B7845054BE0440FC588428B0A15F4ADE3C05
SHA-512:	856E854722A37EC5EACBDEDC0038EA2C2F0EE63A1BF813E1C7B863AFC6DBC7F95B21F179CA034829147B670AA3D3AC0F63AB9E9BAF91F6E449E0AF75CF177D28
Malicious:	false
Reputation:	low
Preview:	Bad request.

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3572), with no line terminators
Category:	downloaded
Size (bytes):	3572
Entropy (8bit):	5.150542995862274
Encrypted:	false
SSDEEP:	96:RJYrcoiktfqqMghOKTEzNx8BSIMw591g8IOl8u8i8DF+Ks:wkktfqqMghxlg8Ig8u78D2
MD5:	88BC8C86A83B9BD8EDA6FDF225CDC8DD
SHA1:	473D84930F027A365278C15282725A69721F4B18
SHA-256:	47D960E93D9E7AB4C760A09DA0AA5E6549A8355AD5C0BA8476D4269F4FBDB354
SHA-512:	3BC486D908160D297AD3028C27177A9C41A1D87EF29A456058265FAF74A1DA069D3B0578F05A79F866C2DB752D5E0E42D179158BD62251D4FDA601A7CBA7CC4D
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/ss/k=og.qtm.T5bVtXo12IQ.L.W.O/m=qmd,qcwid/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhawgm3,qhba,qhbr,qhbrgm3,qhch,qhchgm3,qhga,qhid,qhidgm3,qhin,qhlo,qhlogm3,qhmn,qhpc,qhsf,qhsfgm3,qhtt/d=1/ed=1/ct=zgms/rs=AA2YrTssrVR1lBtzoy_MObv1DSp-vWG36A"
Preview:	.gb_3e{background:rgba(60,64,67,.9);-webkit-border-radius:4px;border-radius:4px;color:#fff;font:500 12px "Roboto",arial,sans-serif;letter-spacing:.8px;line-height:16px;margin-top:4px;min-height:14px;padding:4px 8px;position:absolute;z-index:1000;-webkit-font-smoothing:antialiased}.gb_Hc{text-align:left}.gb_Hc>*{color:#bdc1c6;line-height:16px}.gb_Hc div:first-child{color:white}.gb_qa{background:none;border:1px solid transparent;-webkit-border-radius:50%;border-radius:50%;-webkit-box-sizing:border-box;box-sizing:border-box;cursor:pointer;height:40px;margin:8px;outline:none;padding:1px;position:absolute;right:0;top:0;width:40px}.gb_qa:hover{background-color:rgba(68,71,70,.08)}.gb_qa:focus,.gb_qa:active{background-color:rgba(68,71,70,.12)}.gb_qa:focus-visible{border-color:#0b57d0;outline:1px solid transparent;outline-offset:-1px}.gb_i .gb_qa:hover,.gb_i .gb_qa:focus,.gb_i .gb_qa:active{background-color:rgba(227,227,227,.08)}.gb_i .gb_qa:focus-visible{border-color:#a8c7fa}.gb_ra{-webkit-box

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
URL:	https://support.google.com/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (30837)
Category:	downloaded
Size (bytes):	31000
Entropy (8bit):	4.746143404849733
Encrypted:	false
SSDEEP:	384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf
MD5:	269550530CC127B6AA5A35925A7DE6CE
SHA1:	512C7D79033E3028A9BE61B540CF1A6870C896F8
SHA-256:	799AEB25CC0373FDEE0E1B1DB7AD6C2F6A0E058DFADAA3379689F583213190BD
SHA-512:	49F4E24E55FA924FAA8AD7DEBE5FFB2E26D439E25696DF6B6F20E7F766B50EA58EC3DBD61B6305A1ACACD2C80E6E659ACCEE4140F885B9C9E71008E9001FBF4B
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/fonts/font-awesome.min.css
Preview:	/!. Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome. * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License). */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');src:url('../fonts/fontawesome-webfont.eot?#iefix&v=4.7.0') format('embedded-opentype'),url('../fonts/fontawesome-webfont.woff2?v=4.7.0') format('woff2'),url('../fonts/fontawesome-webfont.woff?v=4.7.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.7.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.7.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{display:inline-block;font:normal normal normal 14px/1 FontAwesome;font-size:inherit;text-rendering:auto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 14796, version 1.0
Category:	downloaded
Size (bytes):	14796
Entropy (8bit):	7.982540816037374
Encrypted:	false
SSDEEP:	192:500PiJaGs6M7Ury7W2TYPIJ0BXMx0XKH6k8cfVHULW3Xcc4c9iSUqIcW/40k+H5g:2aeMQxxBX00L2VC+X4chU3cUjHkeW
MD5:	675DF44DB2BAFC60DF7052DA41F6C94B
SHA1:	8B766EB9F1DC9F4F6B6C81028570FD03A5F59509
SHA-256:	8300BA70904617A47A80E9098FE00B3F7AEFD328519318C420289B0BBDFB5E2C
SHA-512:	201864ED71D01588CDADC0BB0E074BD67BF37F8ECF5E570EE87EBC7510CCE70D70DD8979EB170D7560B223B625A0A2BBFA8985E637AE0389EDA25C3134CA8F93
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEp2iw.woff2
Preview:	wOF2......9........$..9p..........................".....(.`........P........6.$.... .....%..........}.i6.....T..F!.'....sr2..{`..:.K..".....BZ.[p.B..l..<...iX...t..bo.+X..s.K...k/6..!/...A.K.....uT.;q. ZE.J.z.:.p.3.m.Or....~..3.\|..x..3.H.Yt.Lhf...w...{...S.eP............'L.F.....,...aT..A./V~D......~.Y.....}.}.f....K.........m.s.l..`.O@#..0..#>w.H.5pW..9....u.cZ.p.................X...$t..=7...J:UQ...j.\|}..=.,]..\|...`0H...g...miX.g.v.7...!.....8..",...El..*.Al..N.F......H.....s.L...R..z..G..>Ij..i..s.k[.....KK..x....2./z....._2H..d.O..`.e/..:.=.Ry.l...L..a.t@...Pv......1q.^.a~<..R..1..4.p.3..h.....M.s..`X.0........@-.KH6=..E...6...<.( ...VV.^.`.'.<.......?.=L#4"%^\|-"....IR.uM,..n....Z1.l..\|r..n.%r..Z.........!.........&7....L..z....m~/C7L"..L...B...n"((.....z..FM..\..Q.W.p}G.[8..+X..x.a..""X"..^........z.5"......o.....l...Mi[....:....F@..}h.?!.....y[<j5..p./...#..d......M..^....S7.0i..C..[.z.>..=Q....V.N9]...4.9....g]Q.'.'..,.X.....W

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7060, version 1.0
Category:	downloaded
Size (bytes):	7060
Entropy (8bit):	7.965390774927561
Encrypted:	false
SSDEEP:	96:JVhAH9n3i/HLXAfmYBaNZVqjXzsJmHUguBA9ikWnkwz6sTr9+QGDkJUEluFanxxk:zKH9n3fmYBaNqjUuUzS9fc6WcWRx6z
MD5:	7A6C0568007C5692727D88A3F35D427C
SHA1:	41B70C6167AF04E3EDD81E3932C7283F391FBFC7
SHA-256:	403679CC3CA882653C21AEF04BC7566E5155D1B93A9FDB196D1F07D9AAAB20F9
SHA-512:	EEAE2F5631AC4D9D0D895B23EB1B3C5700BEB8E82C5E05B0707366B69173090A6BD55C9C0AA8D83C758C67E0141E3AEAD7C65D5A06987A533BE3345CEDC6E5EB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2
Preview:	wOF2..............9....2.........................d..v.6.`....H..<....(.r..H..p.6.$.... ..~. ..).B3..%.q.fH...(W..(J......'2,....'..^I..9.2%.I\R.W..f...a3....t+I.!._#...`xj?...;..`.......j.....X<....Or...?..dA-e...]P.......N...B..?I\|8z7...Sa.......N.Qh<m..<..7...q@.QZ.Gk..p.m.\|......-xy....m...-.._....z.=]^.........Vq4>.t.g.=/..S........c...K.D.H.w.....[.L2.L..o-..t.B.C.+.,.....J...V.G.T..,........_.)Yv...;.J.v\...H./.i9..;...#N.KG..V...f.]}....kj.w{....V..[..i.'+}..8..XN..).NkV.f9ukC..Pk...Q.Z......._...N.......'.)Tj...`...d...V....b[.;..C..RA....i;.gD8E.6.a\f?.<.J...F.4 M.......4..CZ. }V.56!........&..P\|7.G........Q.k.}.$..#.K..}P@...R.-...%l...xY...^......Y.VO.....h...Z.<.&e...eR...."..j.........,.)%.]......0i..sV.......1.-.c. ..".>....EP...S..'@..\./=.`......7..}O.dH?.S3.4'E...........1...gJ4....)/..dd]s....Ixa.,JgZ&....../....._...[.c..W...'.xb=[Ln.lHdO..8.^...dU..K.\...w#....U.... _IR4v.qMtO...3.X3.Oq..W.a....L4...[...,..&.T.c..$...\|c

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	52
Entropy (8bit):	4.542000661265563
Encrypted:	false
SSDEEP:	3:yVkxzNDrMKcwVbF7KnZ:yVkxtkwVbF7KZ
MD5:	B3B89B9C275343BC6798E3A83564FDDB
SHA1:	32367475C527C3F5E5DB0BF42C348816FF4D157B
SHA-256:	900FB968F7FD9EA55F600AC9002A89E56AB56597DA7BDE04DEAAE6CC77AEB276
SHA-512:	ADB6938104E802B0936630B216CDE732F21ECA6E60E7A31D1B9C8FF52B5A66A712A7ECDE3F8ED4915D15C0A71C33A9788060E1E22999094C39020A1F8C636874
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISHgmA6QC9dWevzxIFDRkBE_oSBQ3oIX6GEgUN05ioBw==?alt=proto
Preview:	CiUKDQ0ZARP6GgQIVhgCIAEKCw3oIX6GGgQISxgCCgcN05ioBxoA

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32035)
Category:	downloaded
Size (bytes):	240453
Entropy (8bit):	5.145880410691547
Encrypted:	false
SSDEEP:	3072:AUDKlUlSPVqCqoGXcYI70SDzOyAskRsIMQQ3+SuwC:iUGVEmYIHjQQ3Xu/
MD5:	BB5D1CE2E0F7FF43A4D6643192699100
SHA1:	B8DCC70244712A09D407F66C5FAE63E1FCB4FF97
SHA-256:	4B14EA0979F55692825C2AF622B357AAA8A7174E892AD345687B8B3D3F7D2ED5
SHA-512:	5A7BE627B7FD41E77FBED0D57ECB292FD4604B3F3BF29F7EEBE208548A4EC070984C4FC967253D8222036D290F69BE1753682554E6B8DBDB71D86FB82CD8C166
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/js/vendor/jquery-ui.min.js
Preview:	/! jQuery UI - v1.11.4 - 2015-03-11. http://jqueryui.com.* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js, effect-clip.js, effect-drop.js, effect-explode.js, effect-fade.js, effect-fold.js, effect-highlight.js, effect-puff.js, effect-pulsate.js, effect-scale.js, effect-shake.js, effect-size.js, effect-slide.js, effect-transfer.js, menu.js, progressbar.js, resizable.js, selectable.js, selectmenu.js, slider.js, sortable.js, spinner.js, tabs.js, tooltip.js.* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */..(function(e){"function"==typeof define&&define.amd?define(["jquery"],e):e(jQuery)})(function(e){function t(t,s){var n,a,o,r=t.nodeName.toLowerCase();return"area"===r?(n=t.parentNode,a=n.name,t.href&&a&&"map"===n.nodeName.toLowerCase()?(o=e("img[usemap='#"+a+"']")[0],!!o&&i(o)):!1):(/^(input\|select\|textarea\|button\|ob

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 200 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	10420
Entropy (8bit):	7.955302711238991
Encrypted:	false
SSDEEP:	192:hp3vrzxTFre6u74Q6Pq6yD4UDPC8+V4Ezm2Mi3QRCKSp7z1KdNMk63c7w90tpq:hJvHxpS6u6PrgZTC8+JbMi4SHK6mtA
MD5:	E1AC9AC0DEDA516881E21B9897EEDAE4
SHA1:	DE656ADDAE2C331062F713B8706EB59A2AB4F190
SHA-256:	E9B5953D6179F9ED49EE9B4F81970E56FAA8D65AFB4F19AD3D84C0110C2F32C1
SHA-512:	882EAA7C1DBBD24C2FF94526C892230940F32D021A2284C0274F84F104BBEEFCCFDD85F802C23D50F1F884199864776A65FAE4D41D35CDEFCD7840078EB89836
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............X......pHYs...........~... .IDATx..{XSW...$\..............Z:U...BA.Q.F.7+.3..j...V..N...._/V.mu...B......=..@ . ...?B,H8..9'A..y\|$.9{...=k...^.......:"W.@ .3D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D ...D .....6.N... ....Je...@...M..XE...RY..(.J.........c[ZZ.5.M ....6...JE"..B.@DD..6N.>..V...h...F]].......F..zpp....J.........8....(....FDDd............NQ.wLL....!..T..K.......a.......v.Z.-......2...@)M.MNwH.....P...P(.i4..:..811.IIIP.....0....J.T.;v.t..Y.\.?g0.>hll...iZp..@.@X.(5,,lYSSSZpp.x...J..iii.6..Z..%%%8p....;f..DZ.T.aMM.."..!.....(.\.....ttt.fff........j...E,......jjjV.4...v.4..@....../vs..EQ.....WWWO.:u222..S...g.u.....7.......3`..\|hV.....".v(.J....i..1.....(..n.t3T*.v....bDDD....~.....,.Wa.H..k..M....-....@&.qk...0.._O.b..Y 4...F.......(...2d.......&................T.........CQTPJJ.G.N,X....2Q^^....(...[..G.........s}...v.]... .f..x......./.\|.%

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Category:	downloaded
Size (bytes):	77160
Entropy (8bit):	7.996509451516447
Encrypted:	true
SSDEEP:	1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2
MD5:	AF7AE505A9EED503F8B8E6982036873E
SHA1:	D6F48CBA7D076FB6F2FD6BA993A75B9DC1ECBF0C
SHA-256:	2ADEFCBC041E7D18FCF2D417879DC5A09997AA64D675B7A3C4B6CE33DA13F3FE
SHA-512:	838FEFDBC14901F41EDF995A78FDAC55764CD4912CCB734B8BEA4909194582904D8F2AFDF2B6C428667912CE4D65681A1044D045D1BC6DE2B14113F0315FC892
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/css/fonts/fontawesome-webfont.woff2?v=4.7.0
Preview:	wOF2......-h..........-.........................?FFTM.. .`..r.....(..X.6.$..p..... .....u[R.rGa......'.=.:..&..=r........].t..E.n.......1F...@....\|....f.m.`.$..@d[BQ.$([U<+(..@P.5..`....>.P..;.(..1..l..h...)..Yy..Ji......\|%..^..G..3..n........D..p\Yr .L.P.....t.)......6R.^"S.L~.YR.CXR...4...F.y\[..7n..\|.s.q..M..%K......,.....L.t.'....M.,..c..+b....O.s.^.$...z...m...h&gb...v.....'..6.:....s.m.b.1.m0"....*V.....c.$,0ATPT.1.....<..;...`..'.H.?.s.:..ND.....I..$..T..[..b4........,....bl6...IL.i}.&.4.m,'....#....Rw..bu..,K......v....m_-...\H....HH.......?...m..9P...)9.J..$.....8......~.;.r..n.=$.....Nddn.!'....;...8..'.N...!.-..J.........X.=.,......"`:....... {......K!'...-FH....#$~.Z_.......N5VU8F....%.P..........Cp..$.Q.......r.....k.k...3...:R.%....2{.....h%.)8..........ILK.6v.#......,;.6..N.2.hv...........OO..t#....xT..Bf....q^.#....?{.5b.I..%-WZ..b.A...^.1..n5.....NQ.Y'.........S.....!t" .`b3..%....35....fv;....l..9.:jgf?gr..p.x. ..\|.. $. e.

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 36 x 36, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	848
Entropy (8bit):	7.71422030900664
Encrypted:	false
SSDEEP:	12:6v/7OO5uB+xq96OOQnRcjB0LvDBVRbRVjr96hWqJIaCdKseyOah0Y1pWXpPAdBF+:LB+YEQnRc90xTR5AWq0OaySFMN
MD5:	E60493446D2E9194009973E543455415
SHA1:	B879839F169670DAFA244089F08B180046E02709
SHA-256:	51050B0E3A2C758769C5873F92B10642E7E17FE1D6D44744366F4DE53694B4F3
SHA-512:	F414983B6E0C15C09EC4B56D68B42945DE932F5AA99BF7CC024DFC78B42E9867B6C576B95DC0FE428675B13F59A1C07FBF51033EC03A257AE6743FC5EAA9815B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...$...$.....K.P.....sBIT..U.F.....IDATH...Oo.W......KC[.Xu[.XJ.?.zk. 5g..\.~.~.~."8.......=T9.Rn.H......N....n............fvf...z.+\.].[Z..z......3...8.Y]cew..z... @L4X...Lt<....J..b_....-.........Q4.YX....A.../..,b.#.0(.f....'`.}_n...@u.....9&.....vGV..f ......`D..\|.i.fn]......G.....I.Ha....N...<..X..T....B..%......]...1.+.\,..CG.)O..k0..H...$.^.K.\|V....]r.{....p..xI....YW`...7......x....W.ci..O.[.....m'.I...}B.F.w_...m.V..X>&....T.E-..jP..^.k.H.U.FH.I.3.<....ge.....C..7.B..S.G......K&@.......q..&..gx.I..gZ[.N.....c.!.O..rv...TG.0.p.a.1h.a......J.....x..#..6.J.).M....g...o....<.gh..5....`.....M_....3...w.~....VP.sH.uY.o.)>.;...._.x.K...Xfx.x$ b..\|.S.Q.....G...7d.Q....r.4.....'.~..L.3.P.....'...uY.c.c...........kR...W...Fy...7.w.A+._.q..E-.....n...G...YN"..9.....IEND.B`.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	248413
Entropy (8bit):	5.570896072120171
Encrypted:	false
SSDEEP:	3072:YmSwQaf5qZ3fhO+zJqcK80G1LceF2/ea8LR9Wk9ARFaQjSTnXDL9btIM4NZjQ5c+:4wQX5NzJkYLceF+hYTnXP9RIMAK5YHKj
MD5:	A2454B861DE583237A3F158CE8466ADA
SHA1:	11AAFD90E1980AADF0FEEF8C7D619E7FCACE7FF2
SHA-256:	DAB3EA903BE1978262B4DA52C89C31AB1216699CD617ED8D37F0CFA766BC6BEF
SHA-512:	784D695211935A949AFE79E43D157AA03841704F558BD62913548CC9D2A93779BD93993C0DA7BC4D5518B2B93D0D2A6F776BE20BD59DCE7982C5B440222E5638
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-H30R9PNQFN
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"function":"__c","vtp_value":"undefined"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_dma","priority":7,"vtp_delegationMode":"ON","vtp_dmaDefault":"DENIED","tag_id":117},{"function":"__ogt_1p_data_v2","priority":7,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_cityType":"CSS_SELECTOR","vtp_manualEmailEnabled":false,"vtp_firstNameType":"CSS_SELECTOR","vtp_countryType":"CSS_SELECTOR","vtp_cityValue":"","vtp_emailType":"CSS_SELECTOR","vtp_regionType":"CSS_SELECTOR","vtp_autoEmailEnabled":true,"vtp_postalCodeValue":"","vtp_lastNameValue":"","vtp_phoneTyp

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 9832, version 1.0
Category:	downloaded
Size (bytes):	9832
Entropy (8bit):	7.975495830331784
Encrypted:	false
SSDEEP:	192:79QDvz0lcHvOOR57orEbKO0hYcDwFMwo8ch8+BZFuRIII4iT6GZ:79uvzScHvOO04GdhYcEMwoThnE1al
MD5:	4904E4512C44FF90A67249421A174F8D
SHA1:	6FF8BFAB9C2AD320BF52A628F35861790C75A23E
SHA-256:	8589F8DE6CFF2670DEBC131476EFDD070303664BCE3A0B7E231EF16A0BFB6BB9
SHA-512:	852FE99E3571340018FDE517AA6A3C301DC308EDE430EAD54ABBDC85112FFA5D60E50FE21D0C317C05904EC1A15E3CECAF557C86BFDCC540065BD5FE51778851
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2
Preview:	wOF2......&h......[...&..........................j..z.6.`....H..<......1........6.$.... ..~. ..)..Q%l...;@...U:......6....V....4..$v...(F..Q.u..oe@.RO~...u.3.hP.b9...;[.6SN...P#.K.4..N.......W........r%<5o=...mh.z..r...A.6..gY@G.a................ .D6`...6...Q#.aq.u`......S.e0..0.:.....4...\....E....wP!.+..;....a.7.....K'M.:.U...].NEx...KU.....{3...'.W"T....TV19v..r....IV.4.....o.:..ip....S...).u...~............... %..Q.V.....}.%Y...[.R@BV.c.:N2&...gdm].,.O..U._.....Jm...a...WcE.7.{..}k.6...3...n..$.}<.j]7..x..iJ..x}..\&.+]J..Y..........f{.H[..{.{G).......Fs..tXp.@..(.....f...........X:.@. ....W.9.....ta.R,....:w.........N....e....g....[.JjC.......b........0B.....c...G.............o.T8H.H.(".11H.d.Ty .......(. .....#c...K....2....W..:.......h...sC....r...4.....+.........y~J.......6.1;DQ......A>1.jb...jb.(."-;..R).~..........5.V.X5Ue..\|5....Y.f..{..9A.8s..;..8.x.."...)t.f.CGN..r......x...7../ $,.!....f0.7.x......3...=..a\|y..b.rT..

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14900)
Category:	downloaded
Size (bytes):	15248
Entropy (8bit):	5.263032948896212
Encrypted:	false
SSDEEP:	384:spbuKdl8246ZBPw0+vN9FpziTpqd+KeMnQ3bYoZR94kozOE0mZ7oebm6iEII:3UzvPw0+vPziVqdPuj4kcOE0mB9
MD5:	F448C593C242D134E9733A84C7A4D26C
SHA1:	374AA1F8DB17575B0E35EABC46AD82062E09106C
SHA-256:	C90F0E501D2948FBC2B61BFFD654FA4AB64741FD48923782419EEB14D3816FB8
SHA-512:	DE133F9FF911DB26DD8DF4ADBE2528FE80722397082B5880CB9D4D930872D71168C4E0A5E95F04B1B5B88DA558FE5F04D2F83A649A791ECFAF87D751C6335E2B
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/js/vendor/jquery_form.min.js
Preview:	/!. jQuery Form Plugin. * version: 3.51.0-2014.06.20. * Requires jQuery v1.5 or later. * Copyright (c) 2014 M. Alsup. * Examples and documentation at: http://malsup.com/jquery/form/. * Project repository: https://github.com/malsup/form. * Dual licensed under the MIT and GPL licenses.. * https://github.com/malsup/form#copyright-and-license. */.!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery"],e):e("undefined"!=typeof jQuery?jQuery:window.Zepto)}(function(e){"use strict";function t(t){var r=t.data;t.isDefaultPrevented()\|\|(t.preventDefault(),e(t.target).ajaxSubmit(r))}function r(t){var r=t.target,a=e(r);if(!a.is("[type=submit],[type=image]")){var n=a.closest("[type=submit]");if(0===n.length)return;r=n[0]}var i=this;if(i.clk=r,"image"==r.type)if(void 0!==t.offsetX)i.clk_x=t.offsetX,i.clk_y=t.offsetY;else if("function"==typeof e.fn.offset){var o=a.offset();i.clk_x=t.pageX-o.left,i.clk_y=t.pageY-o.top}else i.clk_x=t.pageX-r.offsetLeft,i.clk_y=t.pageY-r.offs

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32038)
Category:	downloaded
Size (bytes):	95965
Entropy (8bit):	5.391055290428873
Encrypted:	false
SSDEEP:	1536:OP10iSi65U/dXXeyhzeBuG+HYE0WEeLjFoNqLTW8+S5VRZIVI6xSb8Bh2ZbQnRmc:R+41JqLTW8xRrqSb8aGH77da98Hrf
MD5:	27275FCF3EA465B159C76D98FB2BC825
SHA1:	DF2F48BC336D868E07715B102F1E06C45FBA539D
SHA-256:	446AB1879F7CCFFC46EB699AB327840B39CDC54027EA8026F0F4CF034B8EB40B
SHA-512:	11ED7B957A9991032428B01EA9FA885B17B09C28196F9BBE71089712B6DFD85A96E978936F0BB999C66519456BBA601D2B626C80B636D52B42377A0F88B227A0
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/js/vendor/jquery-1.11.3.min.js
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	3.6534652184263736
Encrypted:	false
SSDEEP:	48:wIJct3xIAxG/7nvWDtZcdYLtX7B6QXL3aqG8Q:wIJct+A47v+rcqlBPG9B
MD5:	F3418A443E7D841097C714D69EC4BCB8
SHA1:	49263695F6B0CDD72F45CF1B775E660FDC36C606
SHA-256:	6DA5620880159634213E197FAFCA1DDE0272153BE3E4590818533FAB8D040770
SHA-512:	82D017C4B7EC8E0C46E8B75DA0CA6A52FD8BCE7FCF4E556CBDF16B49FC81BE9953FE7E25A05F63ECD41C7272E8BB0A9FD9AEDF0AC06CB6032330B096B3702563
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ............................................0...................................................................................................................................v.].X.:.X.:.r.Y........................................q.X.S.4.S.4.S.4.S.4.S.4.S.4...X....................0........q.W.S.4.X.:.................J...A...g.........................K.H.V.8..........................F..B.....................,.......................................B..............................................B..B..B..B..B...u..........................................B..B..B..B..B...{.................5.......k...........................................................7R..8F.................................................2........Vb..5C..;I..................R^.....................0................Xc..5C..5C..5C..5C..5C..5C..lv..........................................]i..<J..:G..Zf....................................................

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4317
Entropy (8bit):	7.918407416681801
Encrypted:	false
SSDEEP:	96:hGQflzV41CthwXaLrm607M8PzhwLjOfqVobDthrBJolJ3XB9K4IUJCaO:ttzYCNXF07M87isDrBql5TJk
MD5:	212D9BDF0A7E1B14C0102A8CCC7DB399
SHA1:	047FB235CDE0001D4D40D81CAD3D54510F17C684
SHA-256:	F94BB49C2BF9AE66F5D44B58F24D8BDFF9BE459310214F95EF49EB8769130265
SHA-512:	87159B054778C50B4B0E392EB1D7895AFBFA3B35808162FB01C164793F6EBA448229D5BAE502F3E375AF5E3F7773BC0925127F018E3DAF6243DA03DAFA56A104
Malicious:	false
Reputation:	low
URL:	https://storage.googleapis.com/support-kms-prod/5IedHXKVmgXlBYdRn7TlVJmLJbdas2tNrD44
Preview:	.PNG........IHDR...`...`......w8....IDATx...TSW..im....t..9.9..d.I ....... k..V....K].(.:-.... ..(J.Nmk.......,.PE..B........B^..{.9..O^..>.{.....vv.fk.fk.fk}....S.\|a.h...>.U7\|.;o.....V...jj}D.....u j..W....u..0N..a.{..O..e3.].q..x....~U3Z...c0B....!...hq..q.PO....{.6....n....D6.v..MP=.m-.z.(7 @.I...a<._1..M_...q..A).....R.k....$.Hz0..I..Qq._....4....x.K....u....v.D....'....P#........\.#..x.>..I]..x:~....K.$....K].... .@%..y.T.o._...^.tIF........h..T ./.......(WgTr.".......i..p.'%.%.K.!... #hk.I...\|/..H....0..-.R7.V..UN.....9....p.........g6UH....A.....P..7..$..t..Q..F..^....c..).J...5.L.\..W.............=...)..W.....VG.1=..]..6R.-.)I..r.K._^.I.t...........Ub..+.'..`2.h..............h...s~=..?..[.f...@........w.N-..q.......*........C.jP.k.]........C..M.......8..-...N....0..Q...Q...1..h._......tO....=.......aP.?....1.....\lo.q..Q ..7...^...s..G.hZ...W..WM.v..._. ..A0.A..W.......^.1...P..v...cB....]M.r.......G....&..#.\|4k\...\|!..

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (682)
Category:	downloaded
Size (bytes):	4126
Entropy (8bit):	5.362094375376415
Encrypted:	false
SSDEEP:	96:GkH4HDyGVeMrEv77U/D+Ly8eIe+iw0YJw:NH4HDyH7U/qLy8eIe+iDJ
MD5:	DBC5F068DD4CD34743F5CC003419E046
SHA1:	1DCF40A3B025D451EE1DF4A3E48E3C114D7266A2
SHA-256:	C897C6FAE8F637EAC669617B77461E556BB50D94D9717C3EC69D7B60320C8B29
SHA-512:	3F9133FAFB45632C04E050B210743BB77CC4CC5607127CFEB5B4105B1021D5978BAD925EB3D2AED14269D752E2C18A061BF25EFCB68B8D75E6BD4B06ED3092A5
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=A7fCU,AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,RMhBfe,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,VwDzFe,YHI3We,YTxL4,YgOFye,ZwDk9d,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,bm51tf,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,w9hDv,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=NTMZac,sOXFj,q0xTif,ZZ4WUe"
Preview:	"use strict";_F_installCss(".N7rBcd{overflow-x:auto}sentinel{}");.this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.qf(_.Yna);._.k("sOXFj");.var Hq=function(a){_.I.call(this,a.Ha)};_.B(Hq,_.I);Hq.Na=_.I.Na;Hq.Ba=_.I.Ba;Hq.prototype.aa=function(a){return a()};_.Bq(_.Xna,Hq);._.l();._.k("oGtAuc");._.Jta=new _.xe(_.Yna);._.l();._.k("q0xTif");.var Hua=function(a){var b=function(d){_.Pl(d)&&(_.Pl(d).yc=null,_.Uq(d,null));d.XyHi9&&(d.XyHi9=null)};b(a);a=a.querySelectorAll("[c-wiz]");for(var c=0;c<a.length;c++)b(a[c])},fr=function(a){_.ep.call(this,a.Ha);this.Qa=this.dom=null;if(this.zi()){var b=_.mk(this.Mf(),[_.Kk,_.Jk]);b=_.th([b[_.Kk],b[_.Jk]]).then(function(c){this.Qa=c[0];this.dom=c[1]},null,this);_.uq(this,b)}this.Ma=a.Ah.d8};_.B(fr,_.ep);fr.Ba=function(){return{Ah:{d8:function(){return _.ff(this)}}}};fr.prototype.getContext=function(a){return this.Ma.getContext(a)};.fr.prototype.getData=function(a){return this.Ma.getData(a)};fr.protot

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	60408
Entropy (8bit):	4.746090328799968
Encrypted:	false
SSDEEP:	768:fctDxhgZqb0HZb0HEuZ5V2KKCICtvlc54WA+Vw4G4Fw0RToTQTQDbx4r/MT4gohL:fesZvo2KKVmp29bFhTOG2T4go+9nK8Hm
MD5:	A371D1ADD8D95D9A5AC0222DBFC707DA
SHA1:	B273236FC088B58AEC5BE2E7CD642E290C31CBF3
SHA-256:	0A11003900B5593A71CFAB463C2A5E7D2588B251F697EAE8B64946F4D178FE54
SHA-512:	1C4FC0A64E927A073713435830F9D3044894FFDAF30E6966B28D1F3757D564D6E9124F632EB0B61EA41947973FCB28C82F98696E021A8A827FB96E2FF0D27ACD
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/support/content/images/static/homepage_header_background_v2.svg
Preview:	<svg width="1280" height="307" viewBox="0 0 1280 307" fill="none" xmlns="http://www.w3.org/2000/svg">.<circle cx="1121.01" cy="217.239" r="27.6618" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 204.281V292.049" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.58 223.588L1130.88 213.286" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 233.491L1113.06 226.163" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1120.39 217.429L1113.06 210.102" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1132.29" cy="223.588" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<circle cx="1104.71" cy="210.101" r="1.69704" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1101.26 297.3C1104.15 291.738 1110.46 288.868 1116.55 290.35C1122.63 291.832 1126.92 297.283 1126.93 303.549" stroke="#D4E1F3" stroke-linecap="round"/>.<path d="M1087.8 303.549C1087.7 300.666 1089.18 297.957 1091.66 296.486C1094.14 295.014 1097.23 295.014 1099.71 296.486C1102.19 297.957 1103

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4317
Entropy (8bit):	7.918407416681801
Encrypted:	false
SSDEEP:	96:hGQflzV41CthwXaLrm607M8PzhwLjOfqVobDthrBJolJ3XB9K4IUJCaO:ttzYCNXF07M87isDrBql5TJk
MD5:	212D9BDF0A7E1B14C0102A8CCC7DB399
SHA1:	047FB235CDE0001D4D40D81CAD3D54510F17C684
SHA-256:	F94BB49C2BF9AE66F5D44B58F24D8BDFF9BE459310214F95EF49EB8769130265
SHA-512:	87159B054778C50B4B0E392EB1D7895AFBFA3B35808162FB01C164793F6EBA448229D5BAE502F3E375AF5E3F7773BC0925127F018E3DAF6243DA03DAFA56A104
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......w8....IDATx...TSW..im....t..9.9..d.I ....... k..V....K].(.:-.... ..(J.Nmk.......,.PE..B........B^..{.9..O^..>.{.....vv.fk.fk.fk}....S.\|a.h...>.U7\|.;o.....V...jj}D.....u j..W....u..0N..a.{..O..e3.].q..x....~U3Z...c0B....!...hq..q.PO....{.6....n....D6.v..MP=.m-.z.(7 @.I...a<._1..M_...q..A).....R.k....$.Hz0..I..Qq._....4....x.K....u....v.D....'....P#........\.#..x.>..I]..x:~....K.$....K].... .@%..y.T.o._...^.tIF........h..T ./.......(WgTr.".......i..p.'%.%.K.!... #hk.I...\|/..H....0..-.R7.V..UN.....9....p.........g6UH....A.....P..7..$..t..Q..F..^....c..).J...5.L.\..W.............=...)..W.....VG.1=..]..6R.-.)I..r.K._^.I.t...........Ub..+.'..`2.h..............h...s~=..?..[.f...@........w.N-..q.......*........C.jP.k.]........C..M.......8..-...N....0..Q...Q...1..h._......tO....=.......aP.?....1.....\lo.q..Q ..7...^...s..G.hZ...W..WM.v..._. ..A0.A..W.......^.1...P..v...cB....]M.r.......G....&..#.\|4k\...\|!..

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3279
Entropy (8bit):	7.715641786855708
Encrypted:	false
SSDEEP:	48:yqQvnLtkzdjmJJ3hAk+dJa9XrVmdGeNXCZ4o6w+Zv4lUWVV4c/952ql7mHiGJ4JU:7Q89mek+dJjnXno/++WSx1Vc/KWoxO/
MD5:	039E5B669C976EAA7569F9FA8ED813BE
SHA1:	1B5E33D16FC2A26B9318DFEAD0FEC938C5A0C98F
SHA-256:	265FE691B1687E0D18A34D33B5958C1A72E4CCB7D90BF3C70311B6DD4BAE13B6
SHA-512:	D9E8934419FC9E0A34CCDE0EEE3D8BC5435A95C4A72D50F9F8F1B3063C54AC6DB97E30B68ED8CD8CB37B5B73AD7400DC6585864E349B0893210B6152F08485D3
Malicious:	false
Reputation:	low
URL:	https://lh4.ggpht.com/WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72
Preview:	.PNG........IHDR...H...H.....U.G....tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:0180117407206811822ABF5C578297F4" xmpMM:DocumentID="xmp.did:FAD30A79931D11E290ACA48D7B31C326" xmpMM:InstanceID="xmp.iid:FAD30A78931D11E290ACA48D7B31C326" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*.P=....IDATx..[l....?J.....4.l'..Rb..f]..-.(Z

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	23186
Entropy (8bit):	4.263132272225134
Encrypted:	false
SSDEEP:	192:K/QURZcNaiqBjdCCGU2UsUnET+4lLecVvRvuxPbv7SHSlSuOPD3SMohkxTPC6FrC:Ao8FPWFwj
MD5:	0F2D11B1E7E541C85E57DC101755A959
SHA1:	4D22C2697CECEF986DE8374F76818AD64A42C7BF
SHA-256:	2E9515DE116D3A182822D1AAB5E668C17268A58AA4F7841D3616D17711F264BE
SHA-512:	0E485022A890F32236ACAE63B648801653460778A44EA8114AF008465600A424088960091F013D6719C9C051C916D0C51EE1F8139D0F2AB18463B8A910B56B28
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/js/link-unlock.js
Preview:	'use strict'..function convertSpecialCharacters(line) {. if (!line) {. return . }. var specialCodes = {. '&': '&',. '"': '"', . ''': '\'',. '<': '<',. '>': '>'. }.. for (var code in specialCodes) {. var replace_all_codes_re = new RegExp(code, 'g'). line = line.replace(replace_all_codes_re, specialCodes[code]). }. return line.}..function cssLoaded() {. var token = $('#token').data('token') \|\| '';. linkUnlock.setCustomBackgrounds(token); // Handles the css loading after the javascript..}..document.addEventListener('DOMContentLoaded', function() {. var linkUnlock = {. rootURL: null,. $body: $('#link-unlock .loader'),.. ajax: function(options) {. var errorFn = options.error;.. var wrappedError = function(xhr, status, error) {. if(errorFn) {. errorFn(xhr, status, error);. } else {.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 30x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4030
Entropy (8bit):	2.289202412840356
Encrypted:	false
SSDEEP:	24:W8Ppll0iV4aUYGBYTxIX7+44RfwsLaGXPj+ug6RFvqsdQa9q7UhdUUXZ:zlVV4aUln27+j6zd7J
MD5:	9D8A345774EB2C042F7781C79C87C3C0
SHA1:	2700FAFEE21752643C27AB590E0AA608E7B08F2F
SHA-256:	8BC8ED3C65851B1DBD2F388F503544DC48D26003B378628921CB927E5002E4C6
SHA-512:	BD99E6AF6B2005693882E8A2E38E53F4F80D287C69D66DBEB28655AA95108B551F78D4FEBC7E759268D7F6CD67A0619847A9EC95D7D989168A4DEDDB58ED70F9
Malicious:	false
Reputation:	low
URL:	https://us01.z.antigena.com/data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/favicon.ico
Preview:	....... .... .........(.......@..... .............................DDD.........DDD.DDDHDDDqDDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDDqDDDFDDD.....DDD.DDD.....DDD.........DDD#DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD.....DDD.........DDD.DDD.DDD.DDD.DDD.DDD.DDD.DDD~DDD~DDD.DDD~DDD.DDD~DDD~DDD.DDD~DDD.DDD~DDD~DDD.DDD~DDD.DDD.DDD.DDD.DDD.DDD(....DDD.........DDD.DDD.DDD.DDDIDDD.................................................................DDD.DDDNDDD.DDD.DDD.........DDD.DDD.DDD.DDD.DDDD................................................................................DDDJDDD.DDD.DDD5....DDD.DDDGDDD.DDD.........DDD.........................DDD.DDDXDDD.DDD.........................DDD.....DDD.DDD.DDD.DDDj....DDD.DDD`DDD.DDD.....DDD.............................DDD.DDD.DDD.DDD=................................DDD.DDD.DDD.DDD{....DDD.DDDcDDD.DDD.....................................DDD.DDD.DDD.DDDK..............................

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	121628
Entropy (8bit):	5.506662476672723
Encrypted:	false
SSDEEP:	3072:QI9yvwslCsrCF9f/U2Dj3Fkk7rEehA5L1kx:l9ygsrieDkVaL1kx
MD5:	F46ACD807A10216E6EEE8EA51E0F14D6
SHA1:	4702F47070F7046689432DCF605F11364BC0FBED
SHA-256:	D6B84873D27E7E83CF5184AAEF778F1CCB896467576CD8AF2CAD09B31B3C6086
SHA-512:	811263DC85C8DAA3A6E5D8A002CCCB953CD01E6A77797109835FE8B07CABE0DEE7EB126274E84266229880A90782B3B016BA034E31F0E3B259BF9E66CA797028
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (693)
Category:	downloaded
Size (bytes):	3141
Entropy (8bit):	5.379140522607301
Encrypted:	false
SSDEEP:	48:o7JHDKiBBXcsmkQzrAnLMlUdNQ8jsqVeoG+2tWb934TAbc1dmeQNNK9i4rw:opDKvzrAL1dO738b934TAbcWReRw
MD5:	0A827854DCA8F867AC43B3BEC7CACF8B
SHA1:	5474E189D798CA8448AFC713FD50CD7D4A18D0E6
SHA-256:	8EC37BF896FD66EC37A243F239E33C3124985E2C6031B3CD538C41A4266B3C45
SHA-512:	93AC2000A7B35D145C75CD12BEEFB1587B49CC3BE04720BCDA24E3C32CEFA3E7FC8569F6EE4EB96129A58554CE75B7D94F9CB109256384ED73BB1E6B755DF2FC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en_US.N1TW7Rq7LMg.es5.O/ck=boq-identity.AccountsSignInUi.m1DrgwFnqyc.L.B1.O/am=PsAiOnEsAGLEeeADFAVCBgAAAAAAAABArAFmBg/d=1/exm=AvtSve,CMcBD,E87wgc,EFQ78c,EN3i8d,Fndnac,I6YDgd,IZT63,K0PMbc,K1ZKnb,KUM7Z,L1AAkb,L9OGUe,LDQI,LEikZe,MpJwZc,NOeYWe,O6y8ed,PHUIyb,PrPYRd,Rkm0ef,RqjULd,SCuOPb,SD8Jgb,STuCOe,SpsfSb,Tbb4sb,UUJqVe,Uas9Hd,YHI3We,YTxL4,YgOFye,_b,_tp,aC1iue,aW3pY,b3kMqb,bSspM,bTi8wc,byfTOb,eVCnO,f8Gu1e,hc6Ubd,inNHtf,lsjVmc,ltDFwf,lwddkf,mvkUhe,n73qwf,njlZCf,oLggrd,pxq3x,qPYxq,qPfo0c,qmdT9,rmumx,siKnQd,soHxf,t2srLd,tUnxGc,vHEMJe,vfuNJf,ws9Tlc,xBaz7b,xQtZb,xiZRqc,yRXbo,ywOR5c,zbML3c,ziZ8Mc,zr1jrb,zu7j8,zy0vNb/excm=_b,_tp,identifierview/ed=1/wt=2/ujg=1/rs=AOaEmlHBv2Ual27JvVy5RXx2L_fEvti1hA/ee=ASJRFf:DAnQ7e;Al0B8:kibjWe;DaIJ8c:iAskyc;EVNhjf:pw70Gc;EkYFhd:NoODMc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;JsbNhc:Xd8iUd;LBgRLc:XVMNvd;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Oj465e:KG2eXe;Pjplud:EEDORb;QGR0gd:Mlhmy;SMDL4c:K0PMbc;SNUn3:ZwDk9d;UpnZUd:nnwwYc;XdiAjb:NLiXbe;a56pNe:JEfCwb;cEt90b:ws9Tlc;dIoSBb:SpsfSb;eBAeSb:zbML3c;iFQyKf:vfuNJf;io8t5d:yDVVkb;kMFpHd:OTA3Ae;nAFL3:NTMZac;nTuGK:JKNPM;oGtAuc:sOXFj;oSUNyd:K0PMbc;oXZmbc:tUnxGc;pXdRYb:L9OGUe;qddgKe:xQtZb;sP4Vbe:VwDzFe;uY49fb:COQbmf;ul9GGd:VDovNc;vNjB7d:YTxL4;wR5FRb:siKnQd;yxTchf:KUM7Z/m=ZwDk9d,RMhBfe"
Preview:	"use strict";this.default_AccountsSignInUi=this.default_AccountsSignInUi\|\|{};(function(_){var window=this;.try{._.k("ZwDk9d");.var Lv=function(a){_.I.call(this,a.Ha)};_.B(Lv,_.I);Lv.Na=_.I.Na;Lv.Ba=_.I.Ba;Lv.prototype.nN=function(a){return _.le(this,{Wa:{tO:_.wj}}).then(function(b){var c=window._wjdd,d=window._wjdc;return!c&&d?new _.rh(function(e){window._wjdc=function(f){d(f);e(yEa(f,b,a))}}):yEa(c,b,a)})};var yEa=function(a,b,c){return(a=a&&a[c])?a:b.Wa.tO.nN(c)};.Lv.prototype.aa=function(a,b){var c=_.$sa(b).Ai;if(c.startsWith("$")){var d=_.Sl.get(a);_.Lp[b]&&(d\|\|(d={},_.Sl.set(a,d)),d[c]=_.Lp[b],delete _.Lp[b],_.Mp--);if(d)if(a=d[c])b=_.ke(a);else throw Error("Pb`"+b);else b=null}else b=null;return b};_.Bq(_.Qda,Lv);._.l();._.k("SNUn3");._.xEa=new _.xe(_.rf);._.l();._.k("RMhBfe");.var zEa=function(a,b){a=_.rra(a,b);return 0==a.length?null:a[0].ub},AEa=function(){return Object.values(_.Jo).reduce(function(a,b){return a+Object.keys(b).length},0)},BEa=function(){return Object.entries(_

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5844
Entropy (8bit):	5.416357923588714
Encrypted:	false
SSDEEP:	96:GhOEaoFZMOEa73qOEaAOEaoVc+u+OEaYNJhOXasFZMOXac3qOXajOXa3Vc+u+OXU:Gu+73NPSkYtZc3O7PL0Lrw3Ehrtg
MD5:	C8FFC386DE3B2056FB79BE94F3D30F1F
SHA1:	E401F137EEADD957077148B0520EB7161E63BEE2
SHA-256:	7F750D218718DBC45D41A9908008A1BA5B0D32CBA9FA57E0691E30E9ABC7DF29
SHA-512:	55B8ADC63FB9355F8D9C61F53CE19B550D31A3F15AC3BDBD4EAF38976CD6CB5C9CBCA20E369C4D152916EF621BAE9D376AA51DDCEEAA6C368F07F5BF041EB990
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qE52i1dC.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEl2i1dC.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Google Sans Text';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesanstext/v21/5aUu9-KzpRiLCAt4Unrc-xIKmCU5qEV2i1dC.woff2) format('woff2');. unicode-range: U+0102-0103, U+

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (54603)
Category:	downloaded
Size (bytes):	1141919
Entropy (8bit):	5.6960580543951895
Encrypted:	false
SSDEEP:	24576:IecKWSIlTu3bJqxVedXry0M+aH4HPw7vi0ocL3aNn8Xt359XYQzaskRSu:IecKWSIl63OedXry0M+5sXV59XYQzasi
MD5:	4F6244E03509102826429B8B604D29FB
SHA1:	FE18F3204316A1A34D8CAF8989C694C764E90A6E
SHA-256:	4E2623EDF94BE4F373B10FC228E82841B9B3EDB3987B4A098A228339BBF5C2A0
SHA-512:	CA95845FC0CA58D6AA382C288E62E04B8ECB3B7345B0801462E71B695A23A1987953357278E0B89B99B4635881E31EFE3966AF44A1EDA4E0C845651A7B1EB371
Malicious:	false
Reputation:	low
URL:	https://support.google.com/chrome/answer/6130773?hl=en
Preview:	<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse Chrome as a guest - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-UA-Compatible"><meta content="Important: Only log into sensitive websites on devices of people that you trust. Owners may be able to gain access to your data. In Guest mode, you won't find or change any other Chrome profile's inf" name="description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKO

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 04:17:17.639731884 CEST	49678	443	192.168.2.4	104.46.162.224
Apr 26, 2024 04:17:19.030213118 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 04:17:26.313839912 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.313878059 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.313961983 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.314266920 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.314367056 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.314460039 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.314476013 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.314491987 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.314621925 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.314659119 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.786737919 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.786994934 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.787039995 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.788022041 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.788117886 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.789161921 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.789233923 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.789542913 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.789560080 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.795010090 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.795262098 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.795279026 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.798862934 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.798944950 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.799417973 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.799592972 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.846848011 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.846858025 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:26.892873049 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:26.907936096 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.014306068 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.014328003 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.014379025 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.014410973 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.014451027 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.015341997 CEST	49736	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.015393019 CEST	443	49736	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.036441088 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.036472082 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.036555052 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.036808014 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.036884069 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.036972046 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.037326097 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.037389040 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.037458897 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.037687063 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.037981033 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.038022041 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.038077116 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.038505077 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.038538933 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.038592100 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.038963079 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.038979053 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.039268970 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.039304018 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.039477110 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.039510012 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.039675951 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.039693117 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.039894104 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.039913893 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.084119081 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.195595980 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.195775986 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.195848942 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.197006941 CEST	49735	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.197024107 CEST	443	49735	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.501013041 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.501421928 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.501478910 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.501785040 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.502120972 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.502182961 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.502230883 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.503745079 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.503928900 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.503962994 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.504450083 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.504741907 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.504837990 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.504842997 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.506426096 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.506603956 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.506648064 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.507707119 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.507777929 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.508080006 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.508156061 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.508167028 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.508183956 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.512404919 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.512629986 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.512650967 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.513103962 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.513273001 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.513290882 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.516225100 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.516299963 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.516674995 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.516797066 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.516803026 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.516844988 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.516942978 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.517008066 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.517287970 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.517369032 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.517461061 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.543634892 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.543654919 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.548141003 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.559438944 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.559448004 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.559451103 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.559456110 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.559478045 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.559581041 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.559590101 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.605182886 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.605187893 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.605187893 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.713762045 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.713788986 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.713840008 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.713862896 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.713881016 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.713906050 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.713942051 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.713998079 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.718189001 CEST	49737	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.718214989 CEST	443	49737	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.719177008 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.719268084 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.719358921 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.720293045 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.720333099 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.720660925 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.720735073 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.720798016 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.720989943 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.721024990 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.814882994 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.814904928 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.814939976 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.814959049 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.814975023 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.814995050 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.815040112 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.815099955 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.815099955 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.815841913 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.815874100 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.815890074 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.815912008 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.815937042 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.816492081 CEST	49738	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.816519976 CEST	443	49738	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.820086002 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.820122004 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.820198059 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.820384979 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.820398092 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822113991 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822134972 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822141886 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822154999 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822160959 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822190046 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.822216034 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822263002 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.822292089 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.822293043 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.822334051 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.824204922 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.824256897 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.824278116 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.824281931 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.824314117 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.824337006 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.824626923 CEST	49739	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.824654102 CEST	443	49739	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.826720953 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.826793909 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.826883078 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.827033997 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.827049017 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830662012 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830684900 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830708981 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830738068 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830751896 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830773115 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830776930 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830786943 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830809116 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830828905 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830836058 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830842018 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830847025 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830863953 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830876112 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830883026 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830883980 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830899954 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830907106 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830918074 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830924988 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.830935001 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830939054 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830957890 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.830980062 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.831038952 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.831078053 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.831125021 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.832699060 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.832707882 CEST	443	49741	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.832729101 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.832751989 CEST	49741	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.833161116 CEST	49740	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.833170891 CEST	443	49740	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.835954905 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.835995913 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.836086988 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.836231947 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.836260080 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.837353945 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.837397099 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:27.837481022 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.838150978 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:27.838176966 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.185898066 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.186305046 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.186345100 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.186821938 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.190341949 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.190435886 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.190489054 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.192043066 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.192265987 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.192312956 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.193432093 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.193797112 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.193912029 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.193980932 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.233213902 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.233238935 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.249213934 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.282915115 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.283198118 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.283216953 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.284080029 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.284145117 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.285989046 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.286043882 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.286118031 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.286127090 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.293672085 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.293842077 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.293863058 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.294879913 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.294931889 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.295943975 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.296000957 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.296107054 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.296113014 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.308933973 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.309161901 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.309202909 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.309326887 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.309499025 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.309556961 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.312942982 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.313035965 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.313136101 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.313205957 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.313430071 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.313524008 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.313838005 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.313998938 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.314016104 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.314014912 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.314037085 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.326164961 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.343007088 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.356142998 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.358278990 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.358289957 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.358310938 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.403759003 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.491693974 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.491720915 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.491776943 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.491801977 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.491844893 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.494832039 CEST	49746	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.494848967 CEST	443	49746	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.495142937 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.495203972 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.495296001 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.503258944 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.503298044 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509298086 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509355068 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509376049 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509413004 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509438038 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509454012 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509457111 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509490967 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509491920 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509506941 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509514093 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509545088 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509572029 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509763002 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509828091 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509857893 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509880066 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.509907961 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.509927034 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.512038946 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512068033 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512134075 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512160063 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.512166023 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512204885 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512238026 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512264967 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.512264967 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.512296915 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.512461901 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512484074 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512522936 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.512542009 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.512576103 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.512595892 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.609047890 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609071970 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609118938 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609122038 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.609153986 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609181881 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609194040 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609206915 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.609220982 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.609241962 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.609879971 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609894991 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609944105 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.609949112 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.609986067 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.625943899 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626004934 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626041889 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626070023 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.626081944 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626095057 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.626101017 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626120090 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626147985 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.626148939 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626147985 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.626178026 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.626195908 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.626213074 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626290083 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.626334906 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.627177954 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.627229929 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.627268076 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.627295017 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.627300024 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.627315998 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.627346992 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.627348900 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.627371073 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.627393961 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.629703045 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.629748106 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.629772902 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.629795074 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.629825115 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.629846096 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.630320072 CEST	49749	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.630347967 CEST	443	49749	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.630939007 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.630980968 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.631043911 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.633059025 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.633080006 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.635394096 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.635412931 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.635462046 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.635875940 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.635888100 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.662796974 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.662848949 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.662885904 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.662942886 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.662987947 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.662987947 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.663122892 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.663171053 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.663180113 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.663201094 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.663232088 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.663256884 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.663703918 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.663748026 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.663780928 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.663793087 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.663822889 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.663841009 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.666110992 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.666134119 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.666223049 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.666224003 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.666287899 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.666361094 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.666587114 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.666608095 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.666647911 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.666663885 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.666693926 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.666712046 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.667723894 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.667782068 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.667804956 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.667817116 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.667860985 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.668812037 CEST	49744	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.668838978 CEST	443	49744	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763044119 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763062000 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763124943 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.763137102 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763174057 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.763535023 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763550043 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763592005 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.763597965 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763634920 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.763880014 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763894081 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763948917 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.763952971 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.763997078 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.779823065 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.779876947 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.779911041 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.779954910 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.779989004 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.780014038 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.780713081 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.780756950 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.780791044 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.780806065 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.780832052 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.780849934 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.782207966 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.782253981 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.782279015 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.782293081 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.782329082 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.782329082 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.816277027 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.816327095 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.816370010 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.816433907 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.816473007 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.816495895 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.817348957 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.817393064 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.817426920 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.817440033 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.817466021 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.817486048 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.818222046 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.818263054 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.818300962 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.818312883 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.818342924 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.818361998 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.819408894 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.819470882 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.819509029 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.819521904 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.819552898 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.819571972 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.821018934 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.821062088 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.821093082 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.821104050 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.821130037 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.821151972 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.822140932 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.822201014 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.822220087 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.822237968 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.822271109 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.822321892 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.885133028 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:28.885166883 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:28.885215998 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:28.885725975 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:28.885741949 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:28.916377068 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.916428089 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.916439056 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.916450977 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.916460037 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.916476965 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.916505098 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.917258978 CEST	49747	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.917267084 CEST	443	49747	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.931688070 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.931770086 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.931773901 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.931813002 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.931829929 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.931859016 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.932312965 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.932353020 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.932378054 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.932394028 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.932420969 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.932440996 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.932929039 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.932987928 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.933001041 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.933015108 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.933043957 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.933063984 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.933950901 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.934009075 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.934042931 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.934055090 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.934084892 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.934106112 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.934603930 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.934643984 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.934681892 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.934694052 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.934720039 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.934737921 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.949564934 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.967117071 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.967776060 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.967803955 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.968096018 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.968885899 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.968938112 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.968970060 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.968986988 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.968990088 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969016075 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969036102 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969052076 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969146967 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969189882 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969202995 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969222069 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969245911 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969264984 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969341040 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969728947 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969769955 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969790936 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969809055 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.969857931 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.969857931 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.970452070 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.970498085 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.970530033 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.970541954 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.970566034 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.970583916 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.970997095 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971039057 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971050978 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971065998 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971096039 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971113920 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971296072 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971337080 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971364975 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971375942 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971417904 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971417904 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971438885 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971741915 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971786022 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971807957 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971824884 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.971849918 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.971879959 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.972313881 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.972357035 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.972376108 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.972393990 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.972418070 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.972434044 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.972847939 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.972893000 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.972927094 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.972939014 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.972982883 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.972996950 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.973769903 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.973809958 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.973843098 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.973855019 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.973885059 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.973886013 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.974406958 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.974463940 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.974481106 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.974503040 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.974533081 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.974560022 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.974744081 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.974783897 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.974802971 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.974816084 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.974848986 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.974863052 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.975653887 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.975697994 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.975718975 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.975735903 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:28.975763083 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:28.975776911 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.012135983 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.059362888 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.059408903 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.059449911 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.059474945 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.059504032 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.059525013 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.083810091 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.083873987 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.083880901 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.083945036 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.083976984 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.084001064 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.084846020 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.084892035 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.084929943 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.084944010 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.084979057 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.084999084 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.085750103 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.085793018 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.085817099 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.085829973 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.085858107 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.085879087 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.086282969 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.086325884 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.086359024 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.086371899 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.086402893 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.086539030 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.086591005 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.089852095 CEST	49748	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.089879990 CEST	443	49748	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.104628086 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.105931044 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.119409084 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.119421959 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.119607925 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.119654894 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.120821953 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.121536016 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.121716976 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.121916056 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.122366905 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.122415066 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.122447968 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.122463942 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.122514009 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.122514963 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.123044014 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.123110056 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.123244047 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.123291969 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.123311996 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.123328924 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.123353958 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.123370886 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.124133110 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.124197006 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.124243021 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.124269009 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.124289989 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.124306917 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.124315977 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.124332905 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.125025034 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.125072002 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.125101089 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.125118017 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.125139952 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.125158072 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.125683069 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.125691891 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.125857115 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.125902891 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.125932932 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.125943899 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.125976086 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.126008034 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.127047062 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.127089977 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.127123117 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.127135038 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.127156973 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.127177954 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.127983093 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.128024101 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.128045082 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.128062010 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.128087997 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.128123045 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.128452063 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.128520966 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.128532887 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.128622055 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.128668070 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.164155960 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.164825916 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.167473078 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.169662952 CEST	49745	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.169673920 CEST	443	49745	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.278973103 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:29.281697035 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:29.281721115 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:29.283248901 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:29.283310890 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:29.284590006 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:29.284674883 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:29.285640001 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.285660982 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.285679102 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.285718918 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.285747051 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.285773039 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.285778999 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.285809040 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.285831928 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.288311958 CEST	49750	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.288336039 CEST	443	49750	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.326540947 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:29.326550961 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:29.328531027 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.328584909 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.328639984 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.328653097 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.328886986 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.328937054 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.331044912 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.331060886 CEST	443	49752	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.331069946 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.331106901 CEST	49752	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.368011951 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:29.435509920 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.435565948 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.435611010 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.435636997 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.435700893 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.435729027 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.435738087 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.435764074 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.435781956 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.435803890 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.435823917 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.435864925 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.435919046 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.552145958 CEST	49751	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:29.552195072 CEST	443	49751	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:29.817755938 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:29.817823887 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:29.818392992 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:29.820167065 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:29.820199013 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.001537085 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.001610041 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.001766920 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.002367973 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.002402067 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.004331112 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.004383087 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.004596949 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.005131960 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.005163908 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.250524998 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.250649929 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.254501104 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.254524946 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.254937887 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.297033072 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.340167046 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.384135008 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.462801933 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.463176966 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.463196039 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.463485003 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.464126110 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.464190960 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.464471102 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.467972994 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.468341112 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.468399048 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.468763113 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.470566988 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.470654011 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.470873117 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.508157015 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.512141943 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.656672001 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.656799078 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.656872034 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.660495996 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.660536051 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.660578966 CEST	49754	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.660594940 CEST	443	49754	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.679655075 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.679678917 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.679728031 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.679740906 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.679795027 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.726572037 CEST	49756	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.726603031 CEST	443	49756	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.788980007 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.789010048 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.789088011 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.790653944 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:30.790668964 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:30.798383951 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.798475981 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:30.798544884 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.799134016 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:30.799168110 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.176567078 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.176717997 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.176768064 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.177685976 CEST	49755	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.177702904 CEST	443	49755	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.216149092 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:31.216221094 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:31.217833042 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:31.217840910 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:31.218599081 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:31.219769001 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:31.259993076 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.260119915 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:31.260246038 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.260279894 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.260622025 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.260938883 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.261012077 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.261235952 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.304116964 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.380011082 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.380088091 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.380175114 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.381099939 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.381134033 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.399734974 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.399804115 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.399871111 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.400216103 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.400248051 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.460088015 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.460112095 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.460170031 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.460210085 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.460272074 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.460274935 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.460345030 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.461205006 CEST	49758	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.461224079 CEST	443	49758	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.846939087 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.847162008 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:31.847326040 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:31.847382069 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:31.872667074 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.875210047 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.875245094 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.875458956 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.875488997 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.875555992 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.876003981 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.876354933 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.876422882 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.888266087 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.888369083 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.888679028 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.888752937 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:31.891602993 CEST	49757	443	192.168.2.4	23.46.188.128
Apr 26, 2024 04:17:31.891629934 CEST	443	49757	23.46.188.128	192.168.2.4
Apr 26, 2024 04:17:31.932112932 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:31.932149887 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.202893972 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.202914953 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.202933073 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.202970982 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.203000069 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.203042984 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.203077078 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.203107119 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.206864119 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.206878901 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.206950903 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.206964970 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.207057953 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.296571970 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.296658039 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.296730995 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.297255039 CEST	49760	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.297278881 CEST	443	49760	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.358488083 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.358504057 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.358724117 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.358783007 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.358839035 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.359992981 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.360008001 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.360107899 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.360121012 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.360203981 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.361017942 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.361032963 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.361119032 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.361131907 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.361316919 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.512295961 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.512312889 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.512392044 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.512455940 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.512511969 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.512532949 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.513184071 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.513197899 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.513258934 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.513273954 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.513354063 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.514081955 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.514096022 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.514152050 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.514163971 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.514283895 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.515189886 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.515202999 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.515259981 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.515273094 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.515362978 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.516171932 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.516185999 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.516239882 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.516252041 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.516455889 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.517208099 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.517221928 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.517271042 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.517302990 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.517313957 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.517465115 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.669027090 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.669044018 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.669095993 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.669117928 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.669156075 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.669178009 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.671149969 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.671166897 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.671226025 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.671237946 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.671307087 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.672257900 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.672275066 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.672329903 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.672342062 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.672369003 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.672405005 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.675364017 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.675376892 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.675445080 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.675457001 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.675637960 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.676549911 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.676563978 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.676620960 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.676631927 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.676822901 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.677647114 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.677675962 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.677722931 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.677735090 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.677922010 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.679768085 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.679781914 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.679830074 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.679841995 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.679872036 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.679888964 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.682693958 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.682708979 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.682763100 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.682774067 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.682874918 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.684196949 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.684210062 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.684267044 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.684278011 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.684336901 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.685156107 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.685170889 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.685205936 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.685216904 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.685244083 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.685262918 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.686259031 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.686274052 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.686314106 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.686325073 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.686350107 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.686418056 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.688903093 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.688918114 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.688975096 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.688986063 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.689040899 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.689970970 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.689989090 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.690033913 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.690046072 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.690071106 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.690105915 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.823008060 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.823023081 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.823086023 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.823108912 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.823158979 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.827398062 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.827413082 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.827474117 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.827487946 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.827543974 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.828130960 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.828145981 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.828195095 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.828207970 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.828385115 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.828980923 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.828995943 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.829031944 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.829042912 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.829066992 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.829086065 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.829977989 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.829991102 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.830050945 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.830061913 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.830123901 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.830821991 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.830837965 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.830889940 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.830900908 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.831020117 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.831882954 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.831895113 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.831947088 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.831958055 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.832024097 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.832882881 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.832916975 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.832942963 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:32.832953930 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.832976103 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.832993984 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.833214998 CEST	49759	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:32.833242893 CEST	443	49759	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:39.279593945 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:39.279777050 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:39.279896975 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:39.414251089 CEST	49753	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:17:39.414285898 CEST	443	49753	142.250.217.228	192.168.2.4
Apr 26, 2024 04:17:48.674917936 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:48.674957991 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:48.675160885 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:48.675295115 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:48.675312996 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.141396046 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.141706944 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.141727924 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.142199993 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.142513990 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.142592907 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.142643929 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.187525034 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.187551975 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.439361095 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.439506054 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.439743042 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.440094948 CEST	49767	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.440119982 CEST	443	49767	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.447266102 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.447350025 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.447426081 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.447608948 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.447639942 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.652441978 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.652489901 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.652549028 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.653146982 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.653182983 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.653280973 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.653657913 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.653676987 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.655790091 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.655810118 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.915580034 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.915852070 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.915911913 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.916409969 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.916783094 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.916878939 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.916966915 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:49.960148096 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:49.979083061 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.979325056 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.979346037 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.979654074 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.979712009 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.980252981 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.980387926 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.984427929 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.984484911 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:49.984749079 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:49.984756947 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.027865887 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.050122023 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.050374031 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.050395012 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.051578045 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.051672935 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.054090023 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.054136038 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.054234982 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.054313898 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.106947899 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.106957912 CEST	443	49769	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.155080080 CEST	49769	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.160042048 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:50.160155058 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:50.160226107 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:50.161202908 CEST	49768	443	192.168.2.4	40.76.134.238
Apr 26, 2024 04:17:50.161236048 CEST	443	49768	40.76.134.238	192.168.2.4
Apr 26, 2024 04:17:50.485476971 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.485502005 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.485574007 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.485595942 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.486414909 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.486454964 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.486552000 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 04:17:50.486562967 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:50.486768961 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:17:58.372421026 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.372508049 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.372596025 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.373151064 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.373187065 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.708679914 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.719754934 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.719783068 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.721185923 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.721261978 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.723721981 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.723782063 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.725446939 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.725641012 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.725780964 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:58.725799084 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:58.779894114 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.048046112 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.048187017 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.048243046 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.048266888 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.055550098 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.055618048 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.055628061 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.066207886 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.066720009 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.066730022 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.077306032 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.077406883 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.077481985 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.077501059 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.077552080 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.087836027 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.087901115 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.098843098 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.098923922 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.109606981 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.109714031 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.109725952 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.109757900 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.109968901 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.202439070 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.202543020 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.207716942 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.207786083 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.218601942 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.218669891 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.218717098 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.218785048 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.229315042 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.229382992 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.240243912 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.240330935 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.240356922 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.240412951 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.250850916 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.261636019 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.261774063 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.261790037 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.272485018 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.272701025 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.272711039 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.272789001 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:17:59.272964954 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.329859972 CEST	49788	443	192.168.2.4	172.217.2.206
Apr 26, 2024 04:17:59.329873085 CEST	443	49788	172.217.2.206	192.168.2.4
Apr 26, 2024 04:18:00.809506893 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:00.809546947 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:00.809648037 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:00.809977055 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:00.809993029 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.138170004 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.141644955 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.141666889 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.142127991 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.144867897 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.144867897 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.144886971 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.144951105 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.191015005 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.483325958 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.483401060 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.483447075 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.483474016 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.483490944 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.483505011 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.483658075 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.483675003 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.483784914 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.485996008 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.486038923 CEST	443	49795	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:01.486160040 CEST	49795	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:01.646406889 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:01.646517038 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:01.647337914 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:01.650734901 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:01.650772095 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:01.677707911 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.677711964 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.677747011 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:01.677748919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:01.677819014 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.677822113 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.678354979 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.678359985 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.678374052 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:01.678375006 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:01.707088947 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.707165003 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:01.711704969 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.711997986 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:01.712034941 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:01.977914095 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:01.978447914 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:01.978477955 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:01.979322910 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:01.979383945 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:01.980205059 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:01.980257034 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:01.980458975 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:01.980470896 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.010905027 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.011671066 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.011691093 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.012952089 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.013025999 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.014101982 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.014154911 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.019134045 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.019200087 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.020066977 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.020076990 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.030531883 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:02.049798012 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.050278902 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.050353050 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.051595926 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.051668882 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.054044962 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.054104090 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.055670023 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.055754900 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.056268930 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.056293964 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.056334019 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.062900066 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.073014975 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.073589087 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.073648930 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.074172020 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.074237108 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.075162888 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.075217009 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.076235056 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.076320887 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.100151062 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.108453035 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.123203039 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.123236895 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.171317101 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.325201035 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.325246096 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.325299978 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:02.325311899 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.325347900 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.325408936 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:02.325427055 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.329842091 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.329899073 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:02.330060005 CEST	49797	443	192.168.2.4	192.178.50.36
Apr 26, 2024 04:18:02.330089092 CEST	443	49797	192.178.50.36	192.168.2.4
Apr 26, 2024 04:18:02.392045975 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.392365932 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.392426014 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.392945051 CEST	49800	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.392982960 CEST	443	49800	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.418827057 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.419030905 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.419085979 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.419634104 CEST	49798	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.419656038 CEST	443	49798	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:02.594332933 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:02.640117884 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.143250942 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.143359900 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.146281004 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.146320105 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.150553942 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.150913954 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.150930882 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.163417101 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.163511992 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.163538933 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.163556099 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.163705111 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.176325083 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.176412106 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.176457882 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.176476002 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.177496910 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.189290047 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.189439058 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.202208996 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.202291965 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.202331066 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.202346087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.202788115 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.215210915 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.215293884 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.215332031 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.215348005 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.215385914 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.328774929 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.328883886 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.334964991 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.335071087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.335108042 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.335139036 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.335320950 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.347979069 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.348138094 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.348172903 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.348244905 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.361001015 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.361119032 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.374069929 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.374155045 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.374188900 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.374208927 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.374404907 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.386953115 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.387079954 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.387171984 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.387296915 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.400129080 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.400345087 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.400360107 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.413045883 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.413124084 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.413141012 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.426191092 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.426357985 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.426373005 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.443918943 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.444082975 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.444092035 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.444133043 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.446944952 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.455192089 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.466537952 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.466619968 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.466679096 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.466696024 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.466849089 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.477785110 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.489054918 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.489140987 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.489181995 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.489212990 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.489773989 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.500415087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.514741898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.514826059 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.514869928 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.514924049 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.517256975 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.521570921 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.527879953 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.527976990 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.528140068 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.528156042 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.528213978 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.535322905 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.542917967 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.543123960 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.543138981 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.550363064 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.550447941 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.550483942 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.550498962 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.550606012 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.557806969 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.562035084 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.562999010 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.563030005 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.569039106 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.569188118 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.569220066 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.576448917 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.576981068 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.576999903 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.583981037 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.584193945 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.584208965 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.591536999 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.591763020 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.591777086 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.598985910 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.599250078 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.599263906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.606355906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.606857061 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.606870890 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.613852024 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.614075899 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.614089966 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.621371984 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.621582031 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.621594906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.628751993 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.628894091 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.628909111 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.636312962 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.636831999 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.636846066 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.643832922 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.644054890 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.644068956 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.657772064 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.657845974 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.657998085 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.658018112 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.658282042 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.662390947 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.669882059 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.669982910 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.670020103 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.670036077 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.670295954 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.677381992 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.684643984 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.684726000 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.684885025 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.684900045 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.685015917 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.691682100 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.698786974 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.698973894 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.698993921 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.705848932 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.705955982 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.705969095 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.712277889 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.712590933 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.712604046 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.718702078 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.718828917 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.718842983 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.723120928 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.723177910 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.723191977 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.727354050 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.727413893 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.727427959 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.733733892 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.733793974 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.733807087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.740509987 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.740566015 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.740578890 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.742222071 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.742278099 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.742291927 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.747036934 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.747095108 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.747107983 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.749649048 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.749702930 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.749716043 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.754676104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.754744053 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.754757881 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.757493973 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.757549047 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.757565022 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.761135101 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.761193991 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.761207104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.764843941 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.764900923 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.764914036 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.768443108 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.768507004 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.768521070 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.768604040 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.768655062 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.768667936 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.772289991 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.772347927 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.772361040 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.776153088 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.776211977 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.776226044 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.780973911 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.781055927 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.781059027 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.781084061 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.781131983 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.784456968 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.787923098 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.787982941 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.787997007 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.791384935 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.791441917 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.791456938 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.794754982 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.794812918 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.794828892 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.798191071 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.798254013 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.798269987 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.801496029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.801552057 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.801568985 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.804919004 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.804975033 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.804990053 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.808149099 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.808198929 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.808212996 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.811391115 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.811459064 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.811471939 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.814533949 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.814588070 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.814600945 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.817730904 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.817784071 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.817811966 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.820939064 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.820991993 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.821005106 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.822585106 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.822644949 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.822658062 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.825818062 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.825884104 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.825897932 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.828897953 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.828955889 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.828969955 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.831967115 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.832022905 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.832036018 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.835063934 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.835119963 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.835134029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.838092089 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.838148117 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.838161945 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.841141939 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.841202021 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.841216087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.844255924 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.844315052 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.844329119 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.847261906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.847317934 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.847332001 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.850286961 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.850347042 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.850359917 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.853279114 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.853352070 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.853364944 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.856323957 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.856390953 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.856405020 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.860555887 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.860619068 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.860632896 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.863444090 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.863502026 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.863514900 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.866359949 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.866414070 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.866429090 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.869177103 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.869235992 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.869249105 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.871982098 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.872041941 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.872055054 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.874804974 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.874864101 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.874876022 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.877701044 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.877758980 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.877772093 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.880464077 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.880522966 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.880537987 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.883239031 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.883302927 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.883316994 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.885957956 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.886017084 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.886030912 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.888689041 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.888753891 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.888767004 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.891458988 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.891529083 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.891541958 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.894130945 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.894184113 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.894198895 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.895658970 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.895718098 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.895730972 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.898343086 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.898412943 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.898433924 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.901264906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.901318073 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.901352882 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.903606892 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.903666973 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.903680086 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.906269073 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.906322956 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.906337023 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.909080029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.909140110 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.909152985 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.911509037 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.911564112 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.911577940 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.914056063 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.914114952 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.914129972 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.916613102 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.916677952 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.916692019 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.919229984 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.919281006 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.919294119 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.921580076 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.921639919 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.921653986 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.924348116 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.924407005 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.924421072 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.927680969 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.927745104 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.927757978 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.927839041 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.927896023 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.927908897 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.930162907 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.930221081 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.930233955 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.932590961 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.932651997 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.932667017 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.939593077 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.939645052 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.939659119 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.939743042 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.939800978 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.939815044 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.941243887 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.941297054 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.941309929 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.941728115 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.941777945 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.941791058 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.943998098 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.944057941 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.944072008 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.946237087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.946281910 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.946295977 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.948420048 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.948491096 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.948504925 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.950803041 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.950858116 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.950872898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.952852011 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.952913046 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.952925920 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.956012011 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.956060886 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.956073046 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.958148003 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.958193064 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.958208084 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.960314035 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.960372925 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.960386038 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.962426901 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.962483883 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.962498903 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.964659929 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.964714050 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.964728117 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.977004051 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.977061987 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.977077007 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.977165937 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.977227926 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.977241993 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.980282068 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.980333090 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.980345964 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.980436087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.980487108 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.980499029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.981060982 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.981123924 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.981137037 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.982208967 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.982259989 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.982273102 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.984532118 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.984582901 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.984596014 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.986105919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.986160994 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.986174107 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.987179995 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.987234116 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.987246990 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.989126921 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.989201069 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.989229918 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.991086960 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.991143942 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.991158009 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.992803097 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.992857933 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.992872953 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.994668961 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.994725943 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.994740009 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.996537924 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.996591091 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.996604919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.998260021 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:03.998327017 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:03.998339891 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.000171900 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.000224113 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.000251055 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.005835056 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.005887032 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.005901098 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.005991936 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.006050110 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.006077051 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.007920027 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.007977962 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.007991076 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.008069992 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.008130074 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.008142948 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.009664059 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.009711981 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.009726048 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.016743898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.016810894 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.016825914 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.016979933 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.017029047 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.017041922 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.019056082 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.019112110 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.019128084 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.019229889 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.019289017 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.019301891 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.020153999 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.020222902 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.020235062 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.021272898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.021445990 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.021460056 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.023005962 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.023065090 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.023078918 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.024415016 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.024470091 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.024483919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.026297092 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.026351929 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.026365042 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.027590036 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.027668953 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.027697086 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.029320955 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.029381037 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.029395103 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.030915022 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.030968904 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.030982018 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.032232046 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.032291889 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.032305956 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.033977032 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.034039021 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.034051895 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.036679983 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.036740065 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.036752939 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.036864996 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.036931038 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.036946058 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.038283110 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.038338900 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.038352966 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.039931059 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.039984941 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.039998055 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.041888952 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.041944981 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.041959047 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.042695045 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.042737961 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.042752028 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.044451952 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.044514894 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.044528008 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.045680046 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.045732975 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.045746088 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.047251940 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.047307014 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.047334909 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.048588991 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.048645973 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.048660040 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.050160885 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.050215006 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.050228119 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.051359892 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.051419020 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.051446915 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.052695990 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.052752972 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.052766085 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.054078102 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.054133892 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.054147959 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.055470943 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.055526018 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.055555105 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.056935072 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.056988001 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.057001114 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.058202028 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.058258057 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.058271885 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.059701920 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.059757948 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.059771061 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.060884953 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.060942888 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.060956001 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.068742037 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.068815947 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.068829060 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.068908930 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.068953037 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.068965912 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.071408033 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.071466923 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.071480036 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.071568012 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.071616888 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.071630001 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.071965933 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.072020054 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.072032928 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.072608948 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.072671890 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.072690010 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.074111938 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.074165106 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.074177980 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.075284004 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.075352907 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.075366974 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.076308966 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.076364994 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.076380968 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.077490091 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.077557087 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.077570915 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.078779936 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.078830957 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.078856945 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.080049038 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.080122948 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.080136061 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.081329107 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.081387997 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.081401110 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.082530022 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.082588911 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.082602024 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.083758116 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.083813906 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.083827019 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.084840059 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.084918976 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.084930897 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.086136103 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.086190939 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.086205006 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.087357044 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.087414980 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.087428093 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.088607073 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.088661909 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.088675976 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.089695930 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.089744091 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.089757919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.090945959 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.090992928 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.091006041 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.092051029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.092120886 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.092133999 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.093265057 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.093317032 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.093329906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.094351053 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.094407082 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.094420910 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.095514059 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.095570087 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.095583916 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.096631050 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.096695900 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.096709967 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.097840071 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.097893000 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.097907066 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.098941088 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.099009991 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.099023104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.100089073 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.100142956 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.100156069 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.101279020 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.101330996 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.101344109 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.102415085 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.102467060 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.102480888 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.103429079 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.103482962 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.103496075 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.104538918 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.104599953 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.104614019 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.105664015 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.105741978 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.105762959 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.106801033 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.106868982 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.106883049 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.107928991 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.107990026 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.108002901 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.108928919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.108984947 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.108998060 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.110752106 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.110811949 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.110826015 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.111332893 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.111385107 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.111398935 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.112812042 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.112863064 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.112875938 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.114690065 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.114742994 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.114756107 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.116255999 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.116313934 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.116328001 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.117232084 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.117301941 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.117315054 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.118191957 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.118252993 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.118267059 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.119119883 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.119168043 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.119182110 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.120434046 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.120496035 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.120510101 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.121464014 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.121515989 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.121531010 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.122255087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.122307062 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.122319937 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.123116970 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.123182058 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.123195887 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.124183893 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.124238014 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.124252081 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.125227928 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.125536919 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.125550985 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.126405954 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.126761913 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.126775026 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.127609015 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.127680063 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.127695084 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.128463030 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.128518105 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.128531933 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.129390001 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.129436016 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.129450083 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.130702019 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.130760908 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.130789042 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.131608963 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.131706953 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.131721973 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.132651091 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.132703066 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.132716894 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.133795977 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.133852005 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.133867025 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.134898901 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.134946108 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.134974003 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.136029005 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.136082888 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.136096954 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.137161970 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.137219906 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.137233973 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.137932062 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.137994051 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.138008118 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.138866901 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.138936043 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.138952017 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.139735937 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.139794111 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.139807940 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.140563965 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.140618086 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.140631914 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.141362906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.141412973 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.141427040 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.142350912 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.142405987 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.142421007 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.143090010 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.143147945 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.143162012 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.144954920 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.145020008 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.145034075 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.145957947 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.146014929 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.146028996 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.146991968 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.147044897 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.147058010 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.147973061 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.148031950 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.148046017 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.148874044 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.148931980 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.148946047 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.149940014 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.149990082 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.150003910 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.151180029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.151236057 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.151252031 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.151932001 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.151982069 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.151995897 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.152810097 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.152861118 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.152873993 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.153805971 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.153867960 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.153882027 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.154386044 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.154438019 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.154453039 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.155322075 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.155369997 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.155384064 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.157613993 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.157655001 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.157665968 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.157680988 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.157727957 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.157740116 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.158200979 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.158248901 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.158262014 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.159137964 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.159185886 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.159199953 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.160177946 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.160223007 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.160234928 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.161062002 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.161120892 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.161132097 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.162059069 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.162103891 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.162117004 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.163034916 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.163081884 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.163094044 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.164011955 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.164062977 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.164074898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.165091991 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.165138960 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.165150881 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.166033030 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.166075945 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.166088104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.166980982 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.167025089 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.167037010 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.168025970 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.168068886 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.168081045 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.169044018 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.169090033 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.169102907 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.170300007 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.170346975 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.170358896 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.171349049 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.171399117 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.171411037 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.172085047 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.172133923 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.172144890 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.172657013 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.172704935 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.172717094 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.173760891 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.173825979 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.173837900 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.174691916 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.174755096 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.174767017 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.175612926 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.175659895 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.175673008 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.176206112 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.176466942 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.176516056 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.176528931 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.177558899 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.177603006 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.177615881 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.178867102 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.178920031 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.178931952 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.179763079 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.179794073 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.179811001 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.179825068 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.179869890 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.180752993 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.181616068 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.181647062 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.181658030 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.181668997 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.181716919 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.182526112 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.183475971 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.183522940 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.183535099 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.184425116 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.184490919 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.184503078 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.185384035 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.185411930 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.185431957 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.185446024 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.185493946 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.186240911 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.187180042 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.187211037 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.187226057 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.187237024 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.187283039 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.187294960 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.188204050 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.188246965 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.188258886 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.189028025 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.189090014 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.189101934 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.189955950 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.190004110 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.190016031 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.190862894 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.190912008 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.190924883 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.191783905 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.191829920 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.191842079 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.192631960 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.192692995 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.192703962 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.193613052 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.193660975 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.193672895 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.194499016 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.194526911 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.194581032 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.194734097 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.195456982 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.195506096 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.195533991 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.196243048 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.196289062 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.196300983 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.197093010 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.197137117 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.197149038 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.198010921 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.198060989 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.198074102 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.198899031 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.198945999 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.198957920 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.199831963 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.199887991 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.199901104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.200942039 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.201006889 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.201019049 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.202266932 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.202292919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.202311993 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.202325106 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.202368975 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.202838898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.203731060 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.203754902 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.203775883 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.203792095 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.203840017 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.204626083 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.205483913 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.205506086 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.205538988 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.205552101 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.205596924 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.206231117 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.207075119 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.207118034 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.207122087 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.207134008 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.207178116 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.208051920 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.208854914 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.208880901 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.208898067 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.208909988 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.208956957 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.209657907 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.210541010 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.210587978 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.210598946 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.211404085 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.211453915 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.211466074 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.212313890 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.212358952 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.212369919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.213156939 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.213197947 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.213208914 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.213855982 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.213905096 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.213916063 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.214740992 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.214790106 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.214802027 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.215526104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.215548992 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.215572119 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.215584993 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.215626955 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.216362000 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.217420101 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.217472076 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.217484951 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.218061924 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.218087912 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.218106031 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.218118906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.218177080 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.218905926 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.219650984 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.219696999 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.219707966 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.220561028 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.220606089 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.220632076 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.221406937 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.221451998 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.221452951 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.221462965 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.221506119 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.222167015 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.223014116 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.223221064 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.223232985 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.223325014 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.223368883 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.223380089 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.224210978 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.224275112 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.224287033 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.224962950 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.225013971 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.225024939 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.225807905 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.225856066 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.225867033 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.226701021 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.226752043 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.226763964 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.227442026 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.227483988 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.227500916 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.228245974 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.228292942 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.228306055 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.228984118 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.229028940 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.229039907 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.229720116 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.229847908 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.229859114 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.230550051 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.230602026 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.230612993 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.231271029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.231318951 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.231329918 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.232378006 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.232419014 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.232433081 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.232867002 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.232913017 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.232923985 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.233800888 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.233843088 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.233855009 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.234625101 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.234677076 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.234704018 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.235486031 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.235534906 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.235547066 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.236114025 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.236160040 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.236171961 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.236676931 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.236717939 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.236730099 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.237513065 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.237555027 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.237566948 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.238306999 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.238363981 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.238375902 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.238935947 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.238981962 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.238993883 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.239720106 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.239768982 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.239780903 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.240483999 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.240525961 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.240539074 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.241235971 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.241281033 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.241292953 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.242619991 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.242747068 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.242758989 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.243318081 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.243364096 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.243388891 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.243756056 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.243802071 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.243813992 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.244738102 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.244797945 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.244812012 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.245230913 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.245275974 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.245289087 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.245973110 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.246010065 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.246021986 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.246718884 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.246767044 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.246778965 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.247531891 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.247591972 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.247603893 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.248246908 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.248292923 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.248306036 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.248910904 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.248959064 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.248970985 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.249655008 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.249707937 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.249721050 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.250351906 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.250391960 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.250405073 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.251126051 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.251167059 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.251178980 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.251826048 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.251872063 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.251885891 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.252636909 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.252686977 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.252697945 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.253372908 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.253421068 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.253432989 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.254290104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.254336119 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.254347086 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.254861116 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.254920006 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.254931927 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.255444050 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.255487919 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.255500078 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.256198883 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.256246090 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.256258011 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.256897926 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.256949902 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.256962061 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.257769108 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.257812977 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.257824898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.258229017 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.258542061 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.258553982 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.259017944 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.259057999 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.259069920 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.259768963 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.259821892 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.259835005 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.260483027 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.260526896 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.260540962 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.261358976 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.261389017 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.261399984 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.261415958 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.261460066 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.262162924 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.262783051 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.262830019 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.262841940 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.263453960 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.263503075 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.263530970 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.264301062 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.264324903 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.264345884 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.264362097 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.264406919 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.264869928 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.265578032 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.265621901 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.265634060 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.266315937 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.266360044 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.266379118 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.267287016 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.267311096 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.267338037 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.267352104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.267410994 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.267853975 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.268266916 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.268311024 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.268323898 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.268866062 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.268877029 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.268925905 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.269020081 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.269610882 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.269651890 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.269665003 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.270390034 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.270435095 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.270447969 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.271276951 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.271327019 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.271353006 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.272150040 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.272193909 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.272206068 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.272779942 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.272816896 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.272830009 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.272842884 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.272903919 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.273278952 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.273921967 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.273983002 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.274008036 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.275412083 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.275455952 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.275459051 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.275470972 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.275512934 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.275532961 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.275544882 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.275597095 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.276120901 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.276252985 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.276293039 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.276308060 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.277051926 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.277098894 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.277111053 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.277632952 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.277678013 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.277689934 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.278387070 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.278434992 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.278446913 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.282862902 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.282871008 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.282922983 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.282953978 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.283025026 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.286683083 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.286699057 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.286741018 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.286755085 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.286781073 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.286801100 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.290419102 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.290437937 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.290478945 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.290491104 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.290518999 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.290544033 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.294848919 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.294863939 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.294923067 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.294934988 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.294984102 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.298261881 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.298278093 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.298331976 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.298358917 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.298402071 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.300091982 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.300144911 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.300154924 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.300184965 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.300235033 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.400788069 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.511347055 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.511384964 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.511455059 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.518912077 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.518927097 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.522109032 CEST	49799	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.522149086 CEST	443	49799	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.696469069 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.696525097 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.696589947 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.697350979 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.697374105 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.707701921 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.707776070 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.707843065 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.708847046 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.708889008 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.761400938 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.761462927 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.764780045 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.765249968 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.765279055 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.777839899 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.777858019 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.778059959 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.780153990 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.780167103 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.796705008 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.796726942 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.798181057 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.798207998 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.798229933 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.798345089 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.798847914 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.798865080 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.800708055 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:04.800726891 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:04.860579014 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.862266064 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.862277031 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.862782001 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.862920046 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.863769054 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.863883018 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.863890886 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.866919041 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.867002010 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.867152929 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.908148050 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.919406891 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:04.919414997 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:04.972433090 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:05.029284000 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.031331062 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.031348944 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.032594919 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.032711983 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.034889936 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.035128117 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.035128117 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.035221100 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.036727905 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.041817904 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.042129993 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.042180061 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.043509007 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.043632030 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.044857025 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.044919968 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.045393944 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.045481920 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.046260118 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.080146074 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.088150978 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.089380980 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.089402914 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.089579105 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.089601994 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.124764919 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.139457941 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.140039921 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.140055895 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.140090942 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.140091896 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.140434980 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.140580893 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.141175985 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.141529083 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.142702103 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.142702103 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.142710924 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.142760992 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.143084049 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.143450975 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.143579960 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.144473076 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.144566059 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.145003080 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.145078897 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.148709059 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.148715973 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.154828072 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.164030075 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:05.166600943 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.171487093 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:05.171694994 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:05.184132099 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.195713043 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.195713997 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.195720911 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.195724964 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.212982893 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.215677977 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.215708971 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.216309071 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.217255116 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.217259884 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.217758894 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.218034983 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.218322992 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.218400002 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.218446970 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.218498945 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.218759060 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.218816996 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.219435930 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.219470978 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.219510078 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.219741106 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.219746113 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.228981018 CEST	49811	443	192.168.2.4	142.250.217.193
Apr 26, 2024 04:18:05.229003906 CEST	443	49811	142.250.217.193	192.168.2.4
Apr 26, 2024 04:18:05.242491007 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.264111996 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.269802094 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.354878902 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.355089903 CEST	443	49814	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.355238914 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.355238914 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.355477095 CEST	49814	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.356093884 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.356134892 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.356926918 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.356926918 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.356957912 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.368522882 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.368695021 CEST	443	49815	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.368899107 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.368899107 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.368957996 CEST	49815	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.369695902 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.369755983 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.369848013 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.370038986 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.370069981 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.453866959 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.454267979 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.454324007 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.454380989 CEST	443	49819	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.454400063 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.454785109 CEST	49819	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.455219030 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.455235004 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.455375910 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.455545902 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.455555916 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.467566967 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.467626095 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.467895985 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.467911959 CEST	443	49818	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.467941999 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.468451023 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.468503952 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.468521118 CEST	49818	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.468615055 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.468817949 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.468847036 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.555471897 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.555536985 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.556446075 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.556457996 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.556463003 CEST	443	49817	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.556489944 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.556514978 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.556550026 CEST	49817	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.556972980 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.556973934 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.557034969 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.588339090 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.588465929 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.589068890 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.589142084 CEST	49816	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.589178085 CEST	443	49816	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.743469954 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.743693113 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.743716002 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.744370937 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.746386051 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.746470928 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.746541023 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.746561050 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.746572971 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.759310007 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.763637066 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.763653040 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.764040947 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.764828920 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.764904022 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.765149117 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.765227079 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.765239954 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.788474083 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.789125919 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.789136887 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.790329933 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.790389061 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.792876959 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.792928934 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.793262959 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.793337107 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.793395042 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.793400049 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.793415070 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.793426991 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.846788883 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.861499071 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.867158890 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.867177010 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.867682934 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.867749929 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.868683100 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.868741035 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.868954897 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.869043112 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.869240999 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.869260073 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.869297028 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.911173105 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.911190033 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.951936960 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.968040943 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.968079090 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.968697071 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.968760014 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.969690084 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.969742060 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.971827030 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.971904039 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.980679989 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.980706930 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:05.980767965 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:05.980822086 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.029833078 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.116597891 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.116728067 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.116791964 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.132783890 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.132939100 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.132987022 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.148040056 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.148230076 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.148294926 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.207894087 CEST	49823	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.207952023 CEST	443	49823	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.208275080 CEST	49822	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.208301067 CEST	443	49822	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.208726883 CEST	49824	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.208731890 CEST	443	49824	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.214039087 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.214112043 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.214178085 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.214595079 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.214627028 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.249641895 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.249995947 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.250063896 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.250806093 CEST	49825	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.250829935 CEST	443	49825	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.255523920 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.255604029 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.255678892 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.256360054 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.256385088 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.341084957 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.341413021 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.341474056 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.363981962 CEST	49826	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.364025116 CEST	443	49826	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.489571095 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.489599943 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.489660025 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.490632057 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.490644932 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.606678009 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.613379002 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.613419056 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.614722013 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.614809990 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.617201090 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.617265940 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.617281914 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.630898952 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.631099939 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.631299973 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.631315947 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.647145033 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.647335052 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.647357941 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.651037931 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.651108980 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.651396990 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.651568890 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.651582956 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.651608944 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.681301117 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.697319031 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.697341919 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:06.751079082 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:06.780093908 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.780122042 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.780328035 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.780556917 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.780570030 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.784187078 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.784219980 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.784295082 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.784543991 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:06.784564972 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:06.784622908 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:06.786241055 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:06.786253929 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:06.786485910 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:06.786498070 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:06.823957920 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.824278116 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.824290991 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.824805975 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.824856997 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.825812101 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.825861931 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.826232910 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.826313972 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.836715937 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.836724997 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:06.888956070 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:06.981566906 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.988976002 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:06.989140034 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.989448071 CEST	49827	443	192.168.2.4	192.178.50.65
Apr 26, 2024 04:18:06.989480019 CEST	443	49827	192.178.50.65	192.168.2.4
Apr 26, 2024 04:18:07.027188063 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:07.027359962 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:07.027420998 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:07.027771950 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:07.027771950 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:07.027796984 CEST	443	49830	142.250.217.228	192.168.2.4
Apr 26, 2024 04:18:07.027858019 CEST	49830	443	192.168.2.4	142.250.217.228
Apr 26, 2024 04:18:07.112873077 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.115467072 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.115478992 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.116004944 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.116302967 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.116398096 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.116848946 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.117036104 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.117067099 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.149964094 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:07.150326014 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:07.150388956 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:07.150727034 CEST	49833	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:07.150741100 CEST	443	49833	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:07.173150063 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.173347950 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.173357010 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.173763990 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.173820019 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.174452066 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.174506903 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.174681902 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.174751043 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.174925089 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.174930096 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.177268028 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.177561998 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.177572966 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.178073883 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.178451061 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.178536892 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.178666115 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.178694010 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.178705931 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.219885111 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.442442894 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.442584991 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.442626953 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.443442106 CEST	49838	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.443459988 CEST	443	49838	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.562979937 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.563007116 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.563080072 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.563091040 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.563683987 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.563718081 CEST	443	49840	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.563786983 CEST	49840	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.564295053 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.564373970 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.564456940 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.564651012 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.564905882 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.564940929 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.564963102 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.565049887 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.565280914 CEST	49839	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:07.565294027 CEST	443	49839	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:07.574498892 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:07.574521065 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:07.574599981 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:07.574755907 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:07.574774027 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:07.897874117 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.898152113 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.898185968 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.899544954 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.899621964 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.902079105 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.902194977 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.902370930 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.902443886 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.902456045 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.902610064 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.949233055 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:07.949244976 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:07.977725983 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:07.977914095 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:07.977942944 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:07.979576111 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:07.979646921 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:07.980499983 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:07.980587006 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:07.980642080 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:07.997869015 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.024127960 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.083928108 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.083940983 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.190592051 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.227458000 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.227576971 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.227689981 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.227711916 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.228373051 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.228471994 CEST	443	49845	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.228543043 CEST	49845	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.228915930 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.228955030 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.229027033 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.229321957 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.229351997 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.313467026 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.313533068 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.313575029 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.313623905 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.313652992 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.313714027 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.313726902 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.326229095 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.326299906 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.326299906 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.326313972 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.326374054 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.339171886 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.353152990 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.353229046 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.353236914 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.365506887 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.365564108 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.365572929 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.419900894 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.468282938 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.474658966 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.474730968 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.474808931 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.474837065 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.474891901 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.487595081 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.500535011 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.500596046 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.500611067 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.513509035 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.513572931 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.513577938 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.513602018 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.513664007 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.526487112 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.538008928 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.538106918 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.538122892 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.548306942 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.548355103 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.548362017 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.558830023 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.558885098 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.558892012 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.569246054 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.569361925 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.569375038 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.579766989 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.579845905 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.579863071 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.579879999 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.579953909 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.590186119 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.600656033 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.600711107 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.600723028 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.611196995 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.611272097 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.611284018 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.622860909 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.622946024 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.623004913 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.623018980 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.623390913 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.623822927 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.627692938 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.627722025 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.628282070 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.628349066 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.629281998 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.629350901 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.629499912 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.629585981 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.629630089 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.629934072 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.637644053 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.637701035 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.637713909 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.645225048 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.645308018 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.645328045 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.645337105 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.645376921 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.652225018 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.659260988 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.659312963 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.659320116 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.666385889 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.666464090 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.666476011 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.672118902 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.673418045 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.673470974 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.673476934 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.674081087 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.674088955 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:08.680483103 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.680536032 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.680541992 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.687508106 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.687555075 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.687561989 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.694550037 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.694606066 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.694617987 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.698174000 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.698295116 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.698307037 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.705244064 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.705298901 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.705312014 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.712331057 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.712387085 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.712398052 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.719338894 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.719400883 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.719413042 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.720402002 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:08.726402044 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.726455927 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.726468086 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.733488083 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.733587027 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.733597994 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.741211891 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.741312981 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.741327047 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.747531891 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.747884035 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.747890949 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.761447906 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.761532068 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.761562109 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.761568069 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.761687040 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.768007994 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.774578094 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.774684906 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.774686098 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.774712086 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.775181055 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.780915976 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.784248114 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.784360886 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.784373045 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.790457964 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.790514946 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.790527105 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.796406984 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.796709061 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.796720982 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.800412893 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.800523043 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.800534964 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.804177046 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.804300070 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.804311991 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.807523966 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.807689905 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.807701111 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.807725906 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.807945967 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.808361053 CEST	49849	443	192.168.2.4	142.250.217.206
Apr 26, 2024 04:18:08.808386087 CEST	443	49849	142.250.217.206	192.168.2.4
Apr 26, 2024 04:18:08.820453882 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.820497036 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.820597887 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.820981026 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.821007967 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.822541952 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.822607994 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.822823048 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.824079037 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.824094057 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.824287891 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.824307919 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.825412035 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.825725079 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.825733900 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.827406883 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.827483892 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.831197023 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.832004070 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.832039118 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.832376003 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.832405090 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:08.832534075 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.834423065 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:08.834450006 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.018335104 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.018440008 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.024739981 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.024789095 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.031793118 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.031879902 CEST	443	49851	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.032005072 CEST	49851	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.032432079 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.032474995 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.032633066 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.032933950 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.032963991 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.151062012 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.151485920 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.151515961 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.151882887 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.152337074 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.152587891 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.152599096 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.152901888 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.153014898 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.153021097 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.153099060 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.153443098 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.153506994 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.153543949 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.153572083 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.153599024 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.154850006 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.154850006 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.154859066 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.154895067 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.154927015 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.155072927 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.155659914 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.155714035 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.157033920 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.161114931 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.161252022 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.161252975 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.161269903 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.161307096 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.163903952 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.165049076 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.165106058 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.165617943 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.169083118 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.169181108 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.169209957 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.169209957 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.169243097 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.169699907 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.172723055 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.172734976 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.173651934 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.174266100 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.174266100 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.174302101 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.174375057 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.203494072 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.203500986 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.225022078 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.250266075 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.317811012 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.317817926 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.365184069 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.384164095 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.384197950 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.385540962 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.385776997 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.388045073 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.388207912 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.391315937 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.391510010 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.391516924 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.432154894 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.444732904 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.444755077 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.478252888 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.478395939 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.478460073 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.480670929 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.480808020 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.480823040 CEST	49853	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.480854988 CEST	443	49853	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.480894089 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.481770039 CEST	49855	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.481790066 CEST	443	49855	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.483726978 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.483880043 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.483999968 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.484538078 CEST	49854	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.484568119 CEST	443	49854	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.504734039 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.557147980 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.557430029 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.560967922 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.561131001 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.561259031 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.561347008 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.561422110 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.561454058 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.561470985 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.562416077 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.564733982 CEST	49856	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.564764977 CEST	443	49856	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.571472883 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.571616888 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.575387001 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.575557947 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.575639009 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.582035065 CEST	49857	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.582062006 CEST	443	49857	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.699266911 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.699431896 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.701591015 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.701631069 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.748368025 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.791825056 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.792224884 CEST	443	49858	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.792305946 CEST	49858	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.793463945 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.793514967 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.793592930 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.793828964 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:09.793862104 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:09.799345016 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.799384117 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.799426079 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.800323963 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.800338030 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.802344084 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.802419901 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.802478075 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.803092957 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:09.803143024 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:09.813976049 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:09.814002991 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:09.814070940 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:09.814232111 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:09.814256907 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:09.816011906 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:09.816057920 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:09.816153049 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:09.816406012 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:09.816435099 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.126910925 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.127312899 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.127329111 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.127703905 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.128066063 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.128129005 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.128220081 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.128237009 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.128251076 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.136281013 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.136522055 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.136557102 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.137878895 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.138746023 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.138936043 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.138953924 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.138977051 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.138994932 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.143958092 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.144545078 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.144591093 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.145134926 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.145486116 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.145581961 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.145596027 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.180133104 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.185342073 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.185348988 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.185373068 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.185497046 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.185863018 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.185877085 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.187097073 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.187170029 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.189589024 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.189650059 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.189851999 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.189965963 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.189975977 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.190028906 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.205557108 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.205749035 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.205800056 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.206170082 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.206579924 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.206661940 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.206686974 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.232198000 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.232208014 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.247844934 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.247868061 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.279087067 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.463422060 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.463731050 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.463798046 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.469310999 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.469618082 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.469666958 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.471343994 CEST	49861	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.471379995 CEST	443	49861	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.475317955 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.475477934 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.475521088 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.476556063 CEST	49860	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:10.476576090 CEST	443	49860	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:10.495198011 CEST	49862	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.495239973 CEST	443	49862	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.566848040 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.566890955 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.566915035 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.566948891 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.566953897 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.567014933 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.567054987 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.575258970 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.575412035 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.575476885 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.575505018 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.576867104 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.576945066 CEST	443	49859	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.577003956 CEST	49859	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.579330921 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.579380035 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.579442024 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.580432892 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.580463886 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.584410906 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.584466934 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.585392952 CEST	49863	443	192.168.2.4	142.250.217.238
Apr 26, 2024 04:18:10.585413933 CEST	443	49863	142.250.217.238	192.168.2.4
Apr 26, 2024 04:18:10.974118948 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.974550962 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.974575996 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.975081921 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.975361109 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.976514101 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.976686954 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.977005005 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.977087021 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:10.977335930 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:10.977350950 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.029536963 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.361363888 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.361512899 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.361726046 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.361752987 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.363297939 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.363300085 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.363331079 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.363404036 CEST	443	49864	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.363491058 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.363492966 CEST	49864	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.365406990 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.365423918 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.751133919 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.767888069 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.767904043 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.768368006 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.768428087 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.769063950 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.769110918 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.771354914 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:11.771403074 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:11.771469116 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:11.772058964 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:11.772073984 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:11.772147894 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:11.776032925 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:11.776058912 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:11.776521921 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:11.776551008 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:11.777817011 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.777910948 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.778126955 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:11.778142929 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:11.825155020 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.114025116 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.114449024 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.114490032 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.115006924 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.115699053 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.115787029 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.116462946 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.139489889 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.139530897 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.139581919 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.139606953 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.144668102 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.144740105 CEST	443	49865	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.144795895 CEST	49865	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.146614075 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.146640062 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.146686077 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.147640944 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.147650003 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.160141945 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.173553944 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.174592972 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.174619913 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.175126076 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.175929070 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.176009893 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.217022896 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.503614902 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.503784895 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.503838062 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.504928112 CEST	49867	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.504936934 CEST	443	49867	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.508846045 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.534044981 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.534547091 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.534560919 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.534940004 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.534992933 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.535656929 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.535696030 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.536083937 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.536148071 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.536572933 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.536577940 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.552150965 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.577246904 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.746376991 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.746547937 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.746732950 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.747467995 CEST	49866	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.747503996 CEST	443	49866	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.749937057 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.750027895 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.752800941 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.753115892 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:12.753154993 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:12.923989058 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.924048901 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.924827099 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.924838066 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.926078081 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.926103115 CEST	443	49871	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.926183939 CEST	49871	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.927573919 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.927608013 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:12.927711964 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.927856922 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:12.927876949 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.145524979 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.145842075 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.145880938 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.147111893 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.147599936 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.147600889 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.147635937 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.147782087 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.194996119 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.315124989 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.315403938 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.315417051 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.315792084 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.315964937 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.316529036 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.316595078 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.316891909 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.316947937 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.316991091 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.360136986 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.364805937 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.364816904 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.407212973 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.568300962 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.568454027 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.568687916 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.569108009 CEST	49872	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.569152117 CEST	443	49872	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.572751045 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.572782993 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.574826956 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.580811024 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.580826998 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.709089041 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.709131956 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.709250927 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.709264994 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.726408958 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.726489067 CEST	443	49873	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.726682901 CEST	49873	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.728843927 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.728895903 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.729121923 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.732747078 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:13.732764006 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:13.973778009 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.974268913 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.974292994 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.974805117 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.975399971 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:13.975481987 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:13.975847006 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.016115904 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.119232893 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.119786024 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.119813919 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.120192051 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.120244980 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.120888948 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.120930910 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.121233940 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.121289968 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.121599913 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.121606112 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.170808077 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.511557102 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.511600018 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.511717081 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.511739016 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.512413025 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.512454987 CEST	443	49875	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.512509108 CEST	49875	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.513230085 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.513271093 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.513519049 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.513818026 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.513830900 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.620946884 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.621069908 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.621126890 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.621151924 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.621249914 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.621300936 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.621309042 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.633449078 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.633514881 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.633523941 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.646258116 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.646316051 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.646323919 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.659344912 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.659401894 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.659414053 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.672188997 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.672333956 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.672343969 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.685142040 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.685198069 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.685208082 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.738925934 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.738934994 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.787089109 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.805273056 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.811666012 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.811724901 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.811736107 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.824646950 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.824704885 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.824712992 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.837515116 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.837568998 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.837577105 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.850409985 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.850465059 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.850472927 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.857394934 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.857604980 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.857620955 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.857986927 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.858133078 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.858683109 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.858725071 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.858895063 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.858952999 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.859019995 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.863312006 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.863379955 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.863394976 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.876352072 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.876420021 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.876427889 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.889235973 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.889336109 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.889342070 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.889365911 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.889415979 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.900119066 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.900835037 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.900842905 CEST	443	49876	142.250.189.142	192.168.2.4
Apr 26, 2024 04:18:14.901976109 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.914467096 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.914513111 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.914525032 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.926018953 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.926100969 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.926115990 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.937397957 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.937449932 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.937458992 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.948910952 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.948960066 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.948967934 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.952429056 CEST	49876	443	192.168.2.4	142.250.189.142
Apr 26, 2024 04:18:14.960566998 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.960613012 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.960623026 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.971729994 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.971811056 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.971817970 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.971843958 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.971899986 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.983289957 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.994782925 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:14.994856119 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:14.994868994 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.002810955 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.002896070 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.002947092 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.002958059 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.002996922 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.010823965 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.018254995 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.018309116 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.018320084 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.026215076 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.026292086 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.026300907 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.033129930 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.033240080 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.033303976 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.033314943 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.033350945 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.040575027 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.044384003 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.044768095 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.044781923 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.051892042 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.051974058 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.051981926 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.059235096 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.059428930 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.059437990 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.066679955 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.066739082 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.066749096 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.074109077 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.076769114 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.076787949 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.081551075 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.084774971 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.084785938 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.088937044 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.088989019 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.088999987 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.096383095 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.096762896 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.096777916 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.103857994 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.104765892 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.104774952 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.111205101 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.112772942 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.112782001 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.118686914 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.120773077 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.120784044 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.126188040 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.126269102 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.126279116 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.136939049 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.136987925 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.137005091 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.144239902 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.144304991 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.144313097 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.151268959 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.151346922 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.151355982 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.157983065 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.158035040 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.158044100 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.164700031 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.164747953 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.164757013 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.171485901 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.171566010 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.171575069 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.177906990 CEST	443	49874	172.217.165.206	192.168.2.4
Apr 26, 2024 04:18:15.177978039 CEST	49874	443	192.168.2.4	172.217.165.206
Apr 26, 2024 04:18:15.177985907 CEST	443	49874	172.217.165.206	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 04:17:26.186656952 CEST	192.168.2.4	1.1.1.1	0x834e	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:26.186954975 CEST	192.168.2.4	1.1.1.1	0x8de7	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Apr 26, 2024 04:17:28.507730007 CEST	192.168.2.4	1.1.1.1	0xaec3	Standard query (0)	us01.z.antigena.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:28.508064985 CEST	192.168.2.4	1.1.1.1	0x28aa	Standard query (0)	us01.z.antigena.com	65	IN (0x0001)	false
Apr 26, 2024 04:17:28.758001089 CEST	192.168.2.4	1.1.1.1	0xa018	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:28.758464098 CEST	192.168.2.4	1.1.1.1	0xe705	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:17:49.525577068 CEST	192.168.2.4	1.1.1.1	0x66ea	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:49.525732040 CEST	192.168.2.4	1.1.1.1	0xd4f9	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:17:58.246078014 CEST	192.168.2.4	1.1.1.1	0x9c4a	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:58.246418953 CEST	192.168.2.4	1.1.1.1	0x91f1	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:01.519601107 CEST	192.168.2.4	1.1.1.1	0xf9f8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:01.519942045 CEST	192.168.2.4	1.1.1.1	0xa4a2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:01.546992064 CEST	192.168.2.4	1.1.1.1	0x423b	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:01.548969030 CEST	192.168.2.4	1.1.1.1	0x2cce	Standard query (0)	support.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:01.578262091 CEST	192.168.2.4	1.1.1.1	0x8367	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:01.578262091 CEST	192.168.2.4	1.1.1.1	0xa2ad	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:04.370389938 CEST	192.168.2.4	1.1.1.1	0x59fc	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:04.370989084 CEST	192.168.2.4	1.1.1.1	0xed07	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:06.052953005 CEST	192.168.2.4	1.1.1.1	0xad5a	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:06.053225994 CEST	192.168.2.4	1.1.1.1	0xd0f	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:06.270673990 CEST	192.168.2.4	1.1.1.1	0xcb73	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:06.271017075 CEST	192.168.2.4	1.1.1.1	0xaa0d	Standard query (0)	support.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:06.656599045 CEST	192.168.2.4	1.1.1.1	0xfd11	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:06.656869888 CEST	192.168.2.4	1.1.1.1	0xce70	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:07.447916985 CEST	192.168.2.4	1.1.1.1	0x15a3	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:07.448235035 CEST	192.168.2.4	1.1.1.1	0x3742	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:16.252542019 CEST	192.168.2.4	1.1.1.1	0xb444	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:16.252686024 CEST	192.168.2.4	1.1.1.1	0x1a1a	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
Apr 26, 2024 04:18:17.218250990 CEST	192.168.2.4	1.1.1.1	0xf175	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:17.218427896 CEST	192.168.2.4	1.1.1.1	0x63c6	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 04:17:26.312997103 CEST	1.1.1.1	192.168.2.4	0x834e	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:28.634620905 CEST	1.1.1.1	192.168.2.4	0xaec3	No error (0)	us01.z.antigena.com		40.76.134.238	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:28.883100986 CEST	1.1.1.1	192.168.2.4	0xe705	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 04:17:28.883747101 CEST	1.1.1.1	192.168.2.4	0xa018	No error (0)	www.google.com		142.250.217.228	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:42.471326113 CEST	1.1.1.1	192.168.2.4	0x56c3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:42.471326113 CEST	1.1.1.1	192.168.2.4	0x56c3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:42.885723114 CEST	1.1.1.1	192.168.2.4	0xfd72	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:17:42.885723114 CEST	1.1.1.1	192.168.2.4	0xfd72	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:49.651247025 CEST	1.1.1.1	192.168.2.4	0x66ea	No error (0)	docs.google.com		142.250.189.142	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:56.015392065 CEST	1.1.1.1	192.168.2.4	0x7871	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:17:56.015392065 CEST	1.1.1.1	192.168.2.4	0x7871	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:58.371529102 CEST	1.1.1.1	192.168.2.4	0x9c4a	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:17:58.371529102 CEST	1.1.1.1	192.168.2.4	0x9c4a	No error (0)	www3.l.google.com		172.217.2.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:17:58.371864080 CEST	1.1.1.1	192.168.2.4	0x91f1	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:01.645629883 CEST	1.1.1.1	192.168.2.4	0xa4a2	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 04:18:01.645689964 CEST	1.1.1.1	192.168.2.4	0xf9f8	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:01.672748089 CEST	1.1.1.1	192.168.2.4	0x423b	No error (0)	support.google.com		172.217.165.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:01.704312086 CEST	1.1.1.1	192.168.2.4	0xa2ad	No error (0)	play.google.com		172.217.165.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:04.495474100 CEST	1.1.1.1	192.168.2.4	0x59fc	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:04.495474100 CEST	1.1.1.1	192.168.2.4	0x59fc	No error (0)	googlehosted.l.googleusercontent.com		142.250.217.193	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:04.496306896 CEST	1.1.1.1	192.168.2.4	0xed07	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:06.178065062 CEST	1.1.1.1	192.168.2.4	0xd0f	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:06.179146051 CEST	1.1.1.1	192.168.2.4	0xad5a	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:06.179146051 CEST	1.1.1.1	192.168.2.4	0xad5a	No error (0)	googlehosted.l.googleusercontent.com		192.178.50.65	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:06.395637035 CEST	1.1.1.1	192.168.2.4	0xcb73	No error (0)	support.google.com		142.250.217.238	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:06.782432079 CEST	1.1.1.1	192.168.2.4	0xfd11	No error (0)	play.google.com		142.250.189.142	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:07.573565006 CEST	1.1.1.1	192.168.2.4	0x15a3	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:07.573565006 CEST	1.1.1.1	192.168.2.4	0x15a3	No error (0)	plus.l.google.com		142.250.217.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:07.574033022 CEST	1.1.1.1	192.168.2.4	0x3742	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:16.378460884 CEST	1.1.1.1	192.168.2.4	0xb444	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:16.378460884 CEST	1.1.1.1	192.168.2.4	0xb444	No error (0)	photos-ugc.l.googleusercontent.com		142.250.217.193	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:16.397788048 CEST	1.1.1.1	192.168.2.4	0x1a1a	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:17.344763041 CEST	1.1.1.1	192.168.2.4	0xf175	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:17.344763041 CEST	1.1.1.1	192.168.2.4	0xf175	No error (0)	photos-ugc.l.googleusercontent.com		142.250.64.129	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:17.382839918 CEST	1.1.1.1	192.168.2.4	0x63c6	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:17.924855947 CEST	1.1.1.1	192.168.2.4	0xfb76	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:17.924855947 CEST	1.1.1.1	192.168.2.4	0xfb76	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 04:18:37.093357086 CEST	1.1.1.1	192.168.2.4	0x199e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 04:18:37.093357086 CEST	1.1.1.1	192.168.2.4	0x199e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:26 UTC	928	OUT	GET /l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:27 UTC	893	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:26 GMT Content-Type: text/html; charset=utf-8 Content-Length: 2929 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 ETag: W/"b71-T0WXPJ3bfIOPNJm2WGopj1JwkyM" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:27 UTC	2929	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 45 6d 61 69 6c 20 4c 69 6e 6b 20 50 72 6f 74 65 63 74 69 6f 6e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 76 61 6c Data Ascii: <!DOCTYPE html><html><head><meta charset="utf-8"><meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"><title>Email Link Protection</title><meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1"><meta name="google" val

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49735	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:27 UTC	518	OUT	GET /css/fonts/roboto.css HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:27 UTC	977	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:27 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 742 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"2e6-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:27 UTC	742	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 20 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 27 29 2c 20 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 27 29 2c 75 72 6c 28 2e 2f 52 6f 62 6f 74 6f 2d 4c 69 67 68 74 2e 74 74 66 29 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 20 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 27 29 2c 20 6c 6f 63 61 6c 28 27 52 6f 62 6f 74 6f 2d 52 65 67 Data Ascii: @font-face{ font-family:'Roboto';font-style: normal;font-weight:300;src: local('Roboto'), local('Roboto-Light'),url(./Roboto-Light.ttf);}@font-face{ font-family:'Roboto';font-style: normal;font-weight:400;src: local('Roboto'), local('Roboto-Reg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:27 UTC	528	OUT	GET /css/fonts/font-awesome.min.css HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:27 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:27 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 31000 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"7918-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:27 UTC	15404	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2024-04-26 02:17:27 UTC	15596	IN	Data Raw: 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 69 6e 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 36 22 7d 2e 66 61 2d 63 6e 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 6d 62 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 79 65 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6a 70 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 37 22 7d 2e 66 61 2d 72 75 62 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 6f 75 62 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 38 22 7d 2e 66 61 2d 77 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 6b 72 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 39 22 7d 2e 66 61 2d 62 69 74 63 6f 69 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 74 63 3a Data Ascii: e:before,.fa-inr:before{content:"\f156"}.fa-cny:before,.fa-rmb:before,.fa-yen:before,.fa-jpy:before{content:"\f157"}.fa-ruble:before,.fa-rouble:before,.fa-rub:before{content:"\f158"}.fa-won:before,.fa-krw:before{content:"\f159"}.fa-bitcoin:before,.fa-btc:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49737	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:27 UTC	777	OUT	GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/style.css HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:27 UTC	979	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:27 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 5714 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"1652-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:27 UTC	5714	IN	Data Raw: 3a 72 6f 6f 74 20 7b 0a 20 20 20 20 2d 2d 72 65 71 75 65 73 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 75 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 2d 2d 72 65 71 75 65 73 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 68 6f 76 65 72 2d 63 6f 6c 6f 75 72 3a 20 23 37 30 38 39 63 35 3b 0a 20 20 20 20 2d 2d 72 65 71 75 65 73 74 2d 74 65 78 74 2d 68 6f 76 65 72 2d 63 6f 6c 6f 75 72 3a 20 23 66 66 66 66 66 66 3b 0a 20 20 20 20 2d 2d 72 65 71 75 65 73 74 2d 74 65 78 74 2d 63 6f 6c 6f 75 72 3a 20 23 37 30 38 39 63 35 3b 0a 20 20 20 20 2d 2d 72 65 71 75 65 73 74 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 75 72 3a 20 23 37 30 38 39 63 35 3b 0a 20 20 20 20 2d 2d 63 6f 6e 74 69 6e 75 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 75 72 3a 20 23 66 66 66 66 66 66 Data Ascii: :root { --request-background-colour: #ffffff; --request-background-hover-colour: #7089c5; --request-text-hover-colour: #ffffff; --request-text-colour: #7089c5; --request-border-colour: #7089c5; --continue-background-colour: #ffffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49739	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:27 UTC	526	OUT	GET /css/vendor/jquery-ui.min.css HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:27 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:27 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 30256 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"7630-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:27 UTC	15404	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 34 20 2d 20 32 30 31 35 2d 30 33 2d 31 31 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 63 73 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 63 73 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 63 73 73 2c 20 62 75 74 74 6f 6e 2e 63 73 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 63 73 73 2c 20 64 69 61 6c 6f 67 2e 63 73 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 63 73 73 2c 20 6d 65 6e 75 2e 63 73 73 2c 20 70 72 6f 67 72 65 73 73 62 61 72 2e 63 73 73 2c 20 72 65 73 69 7a 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 61 62 6c 65 2e 63 73 73 2c 20 73 65 6c 65 63 74 6d 65 6e 75 2e 63 73 73 2c 20 73 6c 69 64 65 72 2e 63 73 73 2c 20 Data Ascii: /! jQuery UI - v1.11.4 - 2015-03-11 http://jqueryui.com* Includes: core.css, accordion.css, autocomplete.css, button.css, datepicker.css, dialog.css, draggable.css, menu.css, progressbar.css, resizable.css, selectable.css, selectmenu.css, slider.css,
2024-04-26 02:17:27 UTC	14852	IN	Data Raw: 3b 6c 65 66 74 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 75 70 7b 74 6f 70 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 2d 64 6f 77 6e 7b 62 6f 74 74 6f 6d 3a 30 7d 2e 75 69 2d 73 70 69 6e 6e 65 72 20 2e 75 69 2d 69 63 6f 6e 2d 74 72 69 61 6e 67 6c 65 2d 31 2d 73 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 35 70 78 20 2d 31 36 70 78 7d 2e 75 69 2d 74 61 62 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 3a 2e 32 65 6d 7d 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 2e 32 65 6d 20 2e 32 65 6d 20 30 7d 2e 75 69 2d 74 61 62 73 20 2e 75 69 2d 74 61 62 73 2d 6e 61 76 20 6c 69 7b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 66 6c Data Ascii: ;left:0}.ui-spinner-up{top:0}.ui-spinner-down{bottom:0}.ui-spinner .ui-icon-triangle-1-s{background-position:-65px -16px}.ui-tabs{position:relative;padding:.2em}.ui-tabs .ui-tabs-nav{margin:0;padding:.2em .2em 0}.ui-tabs .ui-tabs-nav li{list-style:none;fl

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49741	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:27 UTC	532	OUT	GET /css/vendor/jquery-ui.theme.min.css HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:27 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:27 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 13948 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"367c-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:27 UTC	13948	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 34 20 2d 20 32 30 31 35 2d 30 33 2d 31 31 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 54 72 65 62 75 63 68 65 74 20 4d 53 2c 54 61 68 6f 6d 61 2c 56 65 72 64 61 6e 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 7d 2e 75 69 2d 77 69 64 67 65 74 20 2e 75 69 2d 77 69 64 67 65 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d Data Ascii: /! jQuery UI - v1.11.4 - 2015-03-11 http://jqueryui.com* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */.ui-widget{font-family:Trebuchet MS,Tahoma,Verdana,Arial,sans-serif;font-size:1.1em}.ui-widget .ui-widget{font-size:1em}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49740	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:27 UTC	536	OUT	GET /css/vendor/jquery-ui.structure.min.css HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:27 UTC	980	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:27 GMT Content-Type: text/css; charset=UTF-8 Content-Length: 14782 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"39be-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:27 UTC	14782	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 34 20 2d 20 32 30 31 35 2d 30 33 2d 31 31 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 0a 0a 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 30 20 30 20 30 20 30 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a Data Ascii: /! jQuery UI - v1.11.4 - 2015-03-11 http://jqueryui.com* Copyright 2015 jQuery Foundation and other contributors; Licensed MIT */.ui-helper-hidden{display:none}.ui-helper-hidden-accessible{border:0;clip:rect(0 0 0 0);height:1px;margin:-1px;overflow:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49744	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:28 UTC	559	OUT	GET /css/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us01.z.antigena.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:28 UTC	945	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:28 GMT Content-Type: font/woff2 Content-Length: 77160 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"12d68-18ee1256888" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:28 UTC	15439	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 2d 68 00 0d 00 00 00 02 86 98 00 01 2d 0e 00 04 01 cb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 46 46 54 4d 1c 1a 20 06 60 00 85 72 11 08 0a 89 99 28 87 b6 58 01 36 02 24 03 95 70 0b 96 10 00 04 20 05 89 06 07 b4 75 5b 52 09 72 47 61 f7 91 84 2a ba 0d 81 27 ed 3d eb 3a b5 1a 26 d3 cd 3d 72 b7 2a 0a 02 19 e5 1a f1 f6 5d 04 74 07 dc 45 aa 6e a3 b2 ff ff ff ff e4 a4 31 46 db 0e dc 40 e0 d5 f4 fb 7c ad 8a 14 08 66 93 6d 92 60 9b 24 d8 91 a1 40 64 5b 42 51 11 24 28 5b 55 3c 2b 28 ad b8 40 50 d0 35 1e e4 60 81 b0 0e da 3e f6 50 10 1a 3b e1 28 91 d1 31 b3 fd 6c db fe 68 d4 a8 a2 c2 29 9f dc 59 79 94 f2 4a 69 e9 eb 17 ad 85 ce 7c 25 db 81 b7 5e ac 14 47 82 a2 33 b8 12 6e 9e 95 e8 ba da 95 dc 0a c4 cd 90 44 8a 9e Data Ascii: wOF2-h-?FFTM `r(X6$p u[RrGa'=:&=r]tEn1F@\|fm`$@d[BQ$([U<+(@P5`>P;(1lh)YyJi\|%^G3nD
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: dc 6d 72 c7 d8 74 bd 85 b4 15 28 88 3a 1e b0 b7 83 47 88 1c 47 87 62 65 56 a6 77 a2 69 24 43 be 4f 31 f4 f8 10 20 90 d0 db 63 e7 5a dc 5a ec 3c 47 63 3c 7a ac fe 40 b1 3a 03 ab 4a 2d c0 d5 c4 df 5f 60 e8 a9 03 38 80 a1 99 7e 0e 80 da 86 88 0c e4 4d 16 8a 09 a7 a9 03 e8 29 0d 75 45 8d b4 b3 91 02 73 59 31 f2 8d 8c 42 b5 a3 37 16 d7 34 77 df 30 eb 47 97 d3 35 89 c1 7a 8d c2 05 41 30 1f ef 7c d0 a0 96 9f 5b a7 e4 40 9c c4 56 f7 cf dc 9f ec fd 9f 51 cd 16 71 5e 40 57 01 9c 72 2d 8e fd d2 55 8c 9e 4f ed b7 03 d9 fe c5 24 39 27 e7 c8 49 42 6a 66 60 35 0d 9b 22 14 d1 a6 0e 59 78 c8 f8 5a ef f4 20 81 55 ee 4f 2f 26 38 33 df dc 2c c8 38 ce 0e 6b ac 32 e2 fa 1e 26 a7 be 20 27 99 3f 9a 65 45 76 87 24 ce 19 d5 4c 60 8f 42 10 89 25 b6 3d b3 54 87 bd 66 74 46 35 e5 af Data Ascii: mrt(:GGbeVwi$CO1 cZZ<Gc<z@:J-_`8~M)uEsY1B74w0G5zA0\|[@VQq^@Wr-UO$9'IBjf`5"YxZ UO/&83,8k2& '?eEv$L`B%=TftF5
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 5f 8c a3 bd 9d 01 21 cb 4b 46 b3 ab d7 08 6f 74 76 57 d5 d8 77 2d e5 c4 73 b4 4c 00 d2 3e 89 cc 5d 39 62 f3 b0 09 88 4a 6e 12 99 29 73 6e 9c 74 5f f2 f2 19 eb 5f 0f 78 45 4b ad 94 44 94 06 20 a5 bc 42 09 99 24 67 59 98 41 bf 56 3e 1f 67 24 95 25 4c d0 30 4c 23 ee e3 7b 1b 26 ce 9d 98 96 46 74 0f 64 eb 5c c0 a5 50 94 13 3d 9c d2 1b 61 34 e2 ca 0d 8f 1f 0f 38 22 9c 3c dc 9d 8a 8b 73 fc 4c 5e 5e 4e df dc f2 45 63 9c c7 76 b9 ac ed 48 2d 5f 3e e9 97 f2 a7 f1 d6 8b d8 da f8 02 3b 7c 2b 87 63 a9 c8 21 8b a9 04 bf b6 bf de ea 0b 38 be 1f 4f 2f d2 2e e8 a7 84 c1 f7 4a 6e c6 38 bc 26 a8 2c ec 11 81 96 25 eb 73 f3 74 90 5d 36 28 0b 6b 07 96 48 36 f1 0c 89 46 71 23 28 db 89 5b 96 79 97 8c 8f a6 7b fb c1 30 28 93 5e e0 ca 0b d6 bf c1 62 d6 f8 eb d7 a3 ac c5 ac 0e 03 Data Ascii: _!KFotvWw-sL>]9bJn)snt__xEKD B$gYAV>g$%L0L#{&Ftd\P=a48"<sL^^NEcvH-_>;\|+c!8O/.Jn8&,%st]6(kH6Fq#([y{0(^b
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: ce 2f 9e 2f 2b 3a 58 7d b7 5a fc 58 d6 c2 2e 72 75 c8 90 51 96 80 97 81 57 26 ed 03 dc 65 55 73 3f 7f 81 7a f0 7f 4e 83 d2 7c 6a 6a 04 1a 5f c8 4d 77 33 31 87 e4 c7 11 1f 0f 23 71 16 4a 5b 75 ff 57 46 f0 78 f9 d4 8e b0 7d 08 07 da 79 7d 4d 85 72 bd 2e 29 72 e8 be 31 2b 89 1b b5 17 29 09 f3 a5 51 6e b5 22 7c 44 1f c2 55 17 29 5e 38 73 36 dc fe ed 0c fd 63 ab c4 23 fb 92 0f a8 41 ec 3b 7d 97 2f 0b df 0a a3 c2 09 cf 1b b9 d2 3f ef 1b d6 4b 7f e4 f0 80 ce b8 c4 bb ec 47 9f 9f fa 4d 67 dd 69 bd a0 0f 39 5e 23 30 f3 cf 3b d8 8e 97 12 4a 62 18 8b 8f ea 98 99 d8 da f6 23 b2 3c 9f e8 eb 4d eb 7a 7d 1e 74 75 6d fe b8 6b fb 8e 70 87 96 61 53 16 ac 98 ae 9e d3 16 20 32 f3 70 18 2e 41 5e 53 31 9e 5f 2e 77 47 1f 61 6f 25 37 ae 2c 53 55 57 a9 94 d5 95 0a 37 e7 6d 64 b4 Data Ascii: //+:X}ZX.ruQW&eUs?zN\|jj_Mw31#qJ[uWFx}y}Mr.)r1+)Qn"\|DU)^8s6c#A;}/?KGMgi9^#0;Jb#<Mz}tumkpaS 2p.A^S1_.wGao%7,SUW7md
2024-04-26 02:17:28 UTC	12569	IN	Data Raw: 93 99 1c 47 3e 84 23 cc 61 c8 00 e6 ea 9b 00 63 64 24 a0 5c 1e c7 d9 80 87 ee 9d f8 b5 ef dd bb fa 8a e1 67 e3 b5 79 b4 5a ba 67 8b eb 76 8c 62 9f bc f7 d4 b7 61 7a 02 38 16 a9 7b c8 9b 7d 0e 42 68 d2 41 b7 7b 6d 44 03 fe 86 ae 85 85 2e 83 1c f4 27 2a 4b b8 db 4f 1b 69 6b 3b a2 9d 44 20 96 23 99 13 81 80 9d 1c ae 2f 00 68 90 86 90 ba 3b 93 40 1a ff e0 c2 b1 0d 21 f4 db 2b ff da ab 0e cc 2d b2 16 63 9c 6b 6e 2e fa cb ef 76 19 96 24 3f 3a 8b ef 89 a6 81 ef dc 97 df c5 c0 fe 62 c7 7b df 13 cd 61 7a 03 c0 4b c0 c3 ea de a3 64 99 47 6b 79 56 d6 b6 bc c1 85 a7 5a f9 af cd a5 3a b7 cc 27 5a 8e 15 73 67 9b 2e 02 bb 01 4f 5c 17 2f 2b df 69 fb 2e 84 a5 35 6a ca 3e 28 a1 8e 0b 3d 82 ff 3e f2 08 cb 76 1e 0a db f4 77 3d 37 5c 83 34 be 1f d9 e0 df 88 79 f1 fa 7e 29 d8 Data Ascii: G>#acd$\gyZgvbaz8{}BhA{mD.'*KOik;D #/h;@!+-ckn.v$?:b{azKdGkyVZ:'Zsg.O\/+i.5j>(=>vw=7\4y~)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49745	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:28 UTC	544	OUT	GET /css/fonts/Roboto-Regular.ttf HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us01.z.antigena.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:28 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:28 GMT Content-Type: font/ttf Content-Length: 515100 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"7dc1c-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:28 UTC	15417	IN	Data Raw: 00 01 00 00 00 13 01 00 00 04 00 30 47 44 45 46 45 62 46 9f 00 07 18 18 00 00 03 d6 47 50 4f 53 33 c4 fc ac 00 07 1b f0 00 00 8e 88 47 53 55 42 28 e1 13 c7 00 07 aa 78 00 00 31 a4 4c 54 53 48 3e 27 37 07 00 00 37 04 00 00 0d 3f 4f 53 2f 32 a2 ce b2 45 00 00 01 b8 00 00 00 60 63 6d 61 70 c0 c3 66 24 00 00 51 8c 00 00 24 7a 63 76 74 20 2b a8 07 9d 00 00 79 10 00 00 00 54 66 70 67 6d 77 f8 60 ab 00 00 76 08 00 00 01 bc 67 61 73 70 00 08 00 13 00 07 18 0c 00 00 00 0c 67 6c 79 66 de 08 33 0c 00 00 ae 54 00 05 d4 f8 68 64 6d 78 26 52 89 6f 00 00 44 44 00 00 0d 48 68 65 61 64 ff 51 2f c3 00 00 01 3c 00 00 00 36 68 68 65 61 0b da 11 9d 00 00 01 74 00 00 00 24 68 6d 74 78 52 ca 71 41 00 00 02 18 00 00 34 ea 6c 6f 63 61 2e c8 00 14 00 00 79 64 00 00 34 f0 6d 61 78 Data Ascii: 0GDEFEbFGPOS3GSUB(x1LTSH>'77?OS/2E`cmapf$Q$zcvt +yTfpgmw`vgaspglyf3Thdmx&RoDDHheadQ/<6hheat$hmtxRqA4loca.yd4max
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 01 01 01 1a 01 01 01 09 09 01 13 01 01 01 01 01 01 01 01 01 01 01 11 01 19 19 01 01 01 01 01 01 1f 1f 01 01 13 13 01 01 01 0b 01 01 01 23 01 0f 0c 23 2f 01 01 01 05 0e 01 17 01 01 01 01 01 06 01 24 01 01 01 2b 11 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 2c 01 01 01 01 01 1f 1f 01 1b 01 01 01 01 1d 1d 01 01 01 27 01 01 01 01 01 01 01 01 0b 0b 0b 01 13 01 01 01 01 01 01 0f 01 01 24 01 1b 01 01 01 27 01 1f 01 24 01 02 01 02 11 01 28 01 01 01 22 01 01 24 01 01 08 18 01 01 01 01 01 01 01 07 01 15 01 01 01 01 01 01 2a 01 26 01 15 01 01 01 01 05 0a 0e 1c 01 01 01 01 0f 01 01 01 01 01 01 01 01 01 01 01 14 01 01 11 01 01 01 01 1f 01 01 03 2e 20 01 01 10 20 1b 01 01 Data Ascii: ##/$+,'$'$("$*&.
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 00 6a 08 00 00 6a cc 00 00 6b b0 00 00 6c 88 00 00 6d 48 00 00 6e 3c 00 00 6f 00 00 00 6f dc 00 00 70 c0 00 00 70 d0 00 00 71 9c 00 00 72 6c 00 00 72 ec 00 00 73 b8 00 00 74 3c 00 00 74 e4 00 00 75 98 00 00 76 6c 00 00 77 14 00 00 77 a8 00 00 78 58 00 00 79 24 00 00 79 fc 00 00 7a c8 00 00 7b 94 00 00 7c 50 00 00 7d 48 00 00 7e 20 00 00 7e e8 00 00 7f c0 00 00 80 9c 00 00 81 5c 00 00 81 98 00 00 81 b0 00 00 81 d0 00 00 81 e0 00 00 82 18 00 00 83 48 00 00 84 9c 00 00 85 b8 00 00 87 34 00 00 87 64 00 00 88 a8 00 00 89 6c 00 00 8a 30 00 00 8b 18 00 00 8b f0 00 00 8c 84 00 00 8d c4 00 00 8e dc 00 00 8f e8 00 00 90 84 00 00 91 20 00 00 91 d0 00 00 92 e4 00 00 93 e4 00 00 94 44 00 00 95 74 00 00 96 b0 00 00 97 70 00 00 98 70 00 00 99 84 00 00 99 9c 00 00 9a 38 Data Ascii: jjklmHn<ooppqrlrst<tuvlwwxXy$yz{\|P}H~ ~\H4dl0 Dtpp8
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: be 31 30 aa 6c b8 d8 d8 fc a1 7a 9a 98 f8 8e 8f 04 1a 87 74 6f 89 89 de 8c 00 00 00 02 00 64 ff ff 03 f8 05 c4 00 17 00 24 00 5b 00 b0 00 45 58 b0 0b 2f 1b b1 0b 1e 3e 59 b0 00 45 58 b0 13 2f 1b b1 13 12 3e 59 b2 03 13 0b 11 12 39 b0 03 2f b2 00 03 0b 11 12 39 b0 13 10 b1 14 01 b0 0a 2b 58 21 d8 1b f4 59 b0 03 10 b1 18 01 b0 0a 2b 58 21 d8 1b f4 59 b0 0b 10 b1 1f 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 06 06 23 22 26 26 35 34 36 36 33 32 12 11 15 10 00 05 23 35 33 36 36 25 32 36 37 35 34 26 23 22 06 15 14 16 03 3e 3a a1 60 7e bb 66 6f cc 88 d8 f9 fe b0 fe ad 24 27 e5 f6 fe ee 5d 9d 24 9e 79 7a 94 8f 02 80 45 54 7c e1 88 92 ea 7c fe bd fe e9 36 fe 57 fe 79 05 9c 04 e7 fa 72 54 4a b6 e4 bb 99 95 c1 ff ff 00 86 ff f5 01 6d 04 44 00 26 00 13 f6 00 01 07 00 13 Data Ascii: 10lztod$[EX/>YEX/>Y9/9+X!Y+X!Y+X!Y01#"&&546632#5366%26754&#">:`~fo$']$yzET\|\|6WyrTJmD&
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: d4 95 fd fb 94 d3 00 00 02 00 5f ff ec 04 ac 06 00 00 17 00 22 00 82 00 b0 14 2f b0 00 45 58 b0 0d 2f 1b b1 0d 1a 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 12 3e 59 b0 00 45 58 b0 06 2f 1b b1 06 12 3e 59 b2 0f 14 01 5d b2 2f 14 01 5d b2 13 03 14 11 12 39 b0 13 2f b1 10 01 b0 0a 2b 58 21 d8 1b f4 59 b0 01 d0 b2 04 06 0d 11 12 39 b2 0f 0d 06 11 12 39 b0 13 10 b0 16 d0 b0 06 10 b1 1b 01 b0 0a 2b 58 21 d8 1b f4 59 b0 0d 10 b1 20 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 23 11 23 27 06 23 22 02 35 35 34 12 33 32 17 11 21 35 21 35 33 15 33 01 14 16 33 32 37 11 26 23 22 06 04 ac bc aa 09 6f c6 bc ed ec bf be 6f fe f8 01 08 b9 bc fc 6c 98 86 b0 51 53 ac 88 98 04 d1 fb 2f 74 88 01 34 f8 0e f9 01 2f 82 01 05 97 98 98 fc a9 b8 d0 9e 01 f1 99 d2 00 00 00 02 00 1d 00 00 05 88 Data Ascii: _"/EX/>YEX/>YEX/>Y]/]9/+X!Y99+X!Y +X!Y01##'#"55432!5!533327&#"oolQS/t4/
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 58 b0 07 2f 1b b1 07 1e 3e 59 b0 00 45 58 b0 1e 2f 1b b1 1e 1e 3e 59 b0 00 45 58 b0 12 2f 1b b1 12 12 3e 59 b0 07 10 b1 06 01 b0 0a 2b 58 21 d8 1b f4 59 b2 25 07 12 11 12 39 b0 25 2f b1 26 01 b0 0a 2b 58 21 d8 1b f4 59 b2 0c 26 25 11 12 39 b2 19 26 25 11 12 39 b0 06 10 b0 1f d0 b0 12 10 b1 2c 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 32 36 35 34 26 27 35 16 16 15 14 07 16 16 15 14 04 21 23 20 24 35 34 36 37 26 35 34 36 37 15 06 06 15 14 16 17 17 22 06 15 14 16 17 33 32 36 35 34 26 23 02 c0 b5 ab 5d 6b b7 d0 d5 63 72 fe db fe f4 0f ff 00 fe d8 73 62 d5 cf b8 69 5f a9 b2 0e af ba b5 b0 1b ad bd bc b2 03 7c 71 70 59 61 18 95 09 bc a2 e0 5d 37 b7 81 d2 f3 f0 d3 82 b8 37 5d e0 a1 bd 09 95 17 60 5b 70 70 01 a4 9b 8e 8b 95 01 94 8f 8d 9a 00 00 02 00 68 ff ec 04 ca Data Ascii: X/>YEX/>YEX/>Y+X!Y%9%/&+X!Y&%9&%9,+X!Y012654&'5!# $5467&5467"32654&#]kcrsbi_\|qpYa]77]`[pph
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 1b b1 0e 1a 3e 59 b0 00 45 58 b0 12 2f 1b b1 12 1a 3e 59 b0 00 45 58 b0 06 2f 1b b1 06 12 3e 59 b0 00 45 58 b0 02 2f 1b b1 02 12 3e 59 b2 15 12 06 11 12 39 b0 15 2f b1 00 01 b0 0a 2b 58 21 d8 1b f4 59 b2 04 12 06 11 12 39 b0 0a d0 b0 15 10 b0 0c d0 b0 15 10 b0 10 d0 b0 06 10 b1 16 01 b0 0a 2b 58 21 d8 1b f4 59 b0 00 10 b0 19 d0 30 31 01 23 11 23 27 06 23 22 26 27 35 23 35 33 11 33 11 21 11 33 11 33 01 32 37 35 21 15 14 04 f9 c8 b1 04 6c d0 ac b5 02 c7 c7 b9 01 e1 ba c8 fd 64 d2 48 fe 1f 01 ed fe 13 6b 7f c7 c2 78 97 01 b6 fe 4a 01 b6 fe 4a fe 05 9c c8 70 f4 00 00 00 00 01 00 6a ff eb 04 76 04 4d 00 2c 00 6b b2 00 2d 2e 11 12 39 00 b0 00 45 58 b0 0b 2f 1b b1 0b 1a 3e 59 b0 00 45 58 b0 21 2f 1b b1 21 1a 3e 59 b0 00 45 58 b0 16 2f 1b b1 16 12 3e 59 b1 00 01 Data Ascii: >YEX/>YEX/>YEX/>Y9/+X!Y9+X!Y01##'#"&'5#533!33275!ldHkxJJpjvM,k-.9EX/>YEX!/!>YEX/>Y
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: b0 06 d0 b0 06 2f b0 09 10 b0 08 d0 b0 08 2f 30 31 05 35 33 15 33 15 23 15 23 35 23 35 fd 70 8d 86 86 8d 85 c3 86 86 85 85 85 85 00 01 fc d6 fe b9 fe 9c ff 3e 00 03 00 12 00 b0 03 2f b1 02 09 b0 0a 2b 58 21 d8 1b f4 59 30 31 05 15 21 35 fe 9c fe 3a c2 85 85 00 00 01 fd b4 fe 4b ff 3f 00 90 00 0c 00 2b 00 b0 0d 2f b0 00 45 58 b0 03 2f 1b b1 03 14 3e 59 b0 0d 10 b0 00 d0 b0 00 2f b0 03 10 b1 08 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 27 15 10 21 22 27 37 16 33 32 36 35 35 c1 fe e9 3e 36 01 18 2c 46 46 90 e6 fe a1 12 94 08 55 69 e9 00 00 00 01 fe d7 fe 4b 00 61 00 90 00 0c 00 2b 00 b0 0d 2f b0 00 45 58 b0 09 2f 1b b1 09 14 3e 59 b0 0d 10 b0 00 d0 b0 00 2f b0 09 10 b1 04 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 27 15 14 16 33 32 37 17 06 23 20 11 35 6f 46 45 2c 18 01 Data Ascii: //01533##5#5p>/+X!Y01!5:K?+/EX/>Y/+X!Y01'!"'732655>6,FFUiKa+/EX/>Y/+X!Y01'327# 5oFE,
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 0a 10 b1 02 01 b0 0a 2b 58 21 d8 1b f4 59 b2 05 12 0a 11 12 39 b0 12 10 b1 13 01 b0 0a 2b 58 21 d8 1b f4 59 b2 16 0a 12 11 12 39 b2 17 0a 12 11 12 39 b2 1b 0a 12 11 12 39 b2 1c 0a 12 11 12 39 30 31 01 26 21 22 06 07 23 36 12 24 33 20 00 11 15 10 02 04 23 35 32 00 13 01 27 01 26 27 01 27 04 5b 8e fe ec cd ed 25 c1 1a b8 01 1b b3 01 58 01 7f b1 fe b9 dc f4 01 1d 08 fd a5 4b 02 a7 02 37 fd 0f 4a 04 47 df e5 d3 b8 01 13 8b fe 26 fe 50 6e fe f1 fe 67 d9 b1 01 68 01 40 fe a4 83 01 88 cd 9f fe 4f 83 00 00 01 00 36 fe 4b 05 24 06 19 00 13 00 40 b2 11 14 15 11 12 39 00 b0 00 45 58 b0 00 2f 1b b1 00 20 3e 59 b0 00 45 58 b0 05 2f 1b b1 05 14 3e 59 b2 08 00 05 11 12 39 b2 09 00 05 11 12 39 b2 0d 00 05 11 12 39 b2 0e 00 05 11 12 39 30 31 13 04 00 12 11 07 34 02 27 01 Data Ascii: +X!Y9+X!Y999901&!"#6$3 #52'&''[%XK7JG&Pngh@O6K$@9EX/ >YEX/>Y9999014'
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: fe 83 bd 01 3c 64 64 02 1f f2 18 94 08 30 2d fc b4 04 3a 00 02 00 67 ff 73 04 fa 06 34 00 13 00 27 00 54 b2 05 28 29 11 12 39 b0 05 10 b0 19 d0 00 b0 00 45 58 b0 0d 2f 1b b1 0d 1e 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 12 3e 59 b0 06 d0 b0 0d 10 b0 10 d0 b1 17 01 b0 0a 2b 58 21 d8 1b f4 59 b0 1a d0 b0 03 10 b1 24 01 b0 0a 2b 58 21 d8 1b f4 59 b0 21 d0 30 31 01 10 00 07 15 23 35 26 00 03 35 10 00 37 35 33 15 16 00 11 27 34 02 27 15 23 35 06 02 15 15 14 12 17 35 33 15 36 12 35 04 fa fe fe e3 b9 e5 fe f1 01 01 0e e7 b9 e2 01 03 bf 99 8d b9 93 a3 a4 92 b9 8f 97 02 a9 fe dd fe 91 23 81 7f 1f 01 71 01 23 60 01 24 01 76 1f 76 78 25 fe 90 fe d9 07 e0 01 09 23 61 64 1f fe ee df 5d de fe ec 1f 66 64 22 01 0b e2 00 00 00 00 02 00 5b ff 89 04 34 04 b5 00 13 00 25 00 5a Data Ascii: <dd0-:gs4'T()9EX/>YEX/>Y+X!Y$+X!Y!01#5&5753'4'#55365#q#`$vvx%#ad]fd"[4%Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49746	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:28 UTC	822	OUT	GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/logo.png HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:28 UTC	942	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:28 GMT Content-Type: image/png Content-Length: 5155 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"1423-18ee1256888" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:28 UTC	5155	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d0 00 00 00 78 08 06 00 00 00 83 eb 7c f7 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e2 0c 0b 11 39 34 b7 7d ca 61 00 00 13 b0 49 44 41 54 78 da ed 9d 7b b0 25 d5 55 c6 7f 7b ee bc 18 e0 42 8d 13 1c 08 04 0a 9c 64 78 25 11 f0 01 1a 11 79 28 a8 11 91 e2 11 a0 2c 24 15 4b 45 52 5a 10 ca 47 a0 62 99 b2 a2 89 e6 25 09 56 99 60 19 09 21 02 31 01 63 25 10 20 12 84 32 10 10 42 02 08 e1 35 03 84 c0 0c cc 30 cc 9d fb f8 fc a3 f7 91 9e be dd 7b ef 3e fd 38 7d fa ec 55 75 eb dc 7b 7b 9d ee af d7 5e 6b 3f d6 da 7b 2d 43 a4 46 48 12 c6 98 a2 6b 06 58 62 ff 7c 13 70 14 70 08 b0 1e 58 07 ec 09 ec 06 4c 03 53 c0 36 Data Ascii: PNGIHDRx\|bKGDpHYstIME94}aIDATx{%U{Bdx%y(,$KERZGb%V`!1c% 2B50{>8}Uu{{^k?{-CFHkXb\|ppXLS6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49747	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:28 UTC	514	OUT	GET /js/vendor/jquery-1.11.3.min.js HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:28 UTC	995	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:28 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95965 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"176dd-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:28 UTC	15389	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 31 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 35 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e Data Ascii: /! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a win
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 70 28 29 29 69 66 28 31 3d 3d 3d 6c 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 6d 26 26 6c 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 6d 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 28 62 5b 75 5d 7c 7c 28 62 5b 75 5d 3d 7b 7d 29 29 5b 61 5d 29 26 26 6a 5b 30 5d 3d 3d 3d 77 29 6d 3d 6a 5b 31 5d 3b 65 6c 73 65 20 77 68 69 6c 65 28 6c 3d 2b 2b 6e 26 26 6c 26 26 6c 5b 70 5d 7c 7c 28 6d 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 28 68 3f 6c 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 72 3a 31 3d 3d 3d 6c 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 6d 26 26 28 73 26 26 28 28 6c 5b 75 5d 7c 7c 28 6c 5b 75 5d 3d 7b 7d 29 29 5b 61 5d 3d 5b 77 2c 6d 5d 29 2c 6c 3d 3d 3d 62 29 29 62 72 65 61 6b 3b Data Ascii: p())if(1===l.nodeType&&++m&&l===b){k[a]=[w,n,m];break}}else if(s&&(j=(b[u]\|\|(b[u]={}))[a])&&j[0]===w)m=j[1];else while(l=++n&&l&&l[p]\|\|(m=n=0)\|\|o.pop())if((h?l.nodeName.toLowerCase()===r:1===l.nodeType)&&++m&&(s&&((l[u]\|\|(l[u]={}))[a]=[w,m]),l===b))break;
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 6f 69 64 20 30 3d 3d 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 64 3d 22 64 61 74 61 2d 22 2b 62 2e 72 65 70 6c 61 63 65 28 4e 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 63 3d 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 64 29 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 63 29 7b 74 72 79 7b 63 3d 22 74 72 75 65 22 3d 3d 3d 63 3f 21 30 3a 22 66 61 6c 73 65 22 3d 3d 3d 63 3f 21 31 3a 22 6e 75 6c 6c 22 3d 3d 3d 63 3f 6e 75 6c 6c 3a 2b 63 2b 22 22 3d 3d 3d 63 3f 2b 63 3a 4d 2e 74 65 73 74 28 63 29 3f 6d 2e 70 61 72 73 65 4a 53 4f 4e 28 63 29 3a 63 7d 63 61 74 63 68 28 65 29 7b 7d 6d 2e 64 61 74 61 28 61 2c 62 2c 63 29 7d 65 6c 73 65 20 63 3d 76 6f 69 64 20 30 7d 72 65 74 75 72 6e 20 63 7d Data Ascii: oid 0===c&&1===a.nodeType){var d="data-"+b.replace(N,"-$1").toLowerCase();if(c=a.getAttribute(d),"string"==typeof c){try{c="true"===c?!0:"false"===c?!1:"null"===c?null:+c+""===c?+c:M.test(c)?m.parseJSON(c):c}catch(e){}m.data(a,b,c)}else c=void 0}return c}
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 68 72 7c 69 6d 67 7c 69 6e 70 75 74 7c 6c 69 6e 6b 7c 6d 65 74 61 7c 70 61 72 61 6d 29 28 28 5b 5c 77 3a 5d 2b 29 5b 5e 3e 5d 2a 29 5c 2f 3e 2f 67 69 2c 6a 61 3d 2f 3c 28 5b 5c 77 3a 5d 2b 29 2f 2c 6b 61 3d 2f 3c 74 62 6f 64 79 2f 69 2c 6c 61 3d 2f 3c 7c 26 23 3f 5c 77 2b 3b 2f 2c 6d 61 3d 2f 3c 28 3f 3a 73 63 72 69 70 74 7c 73 74 79 6c 65 7c 6c 69 6e 6b 29 2f 69 2c 6e 61 3d 2f 63 68 65 63 6b 65 64 5c 73 2a 28 3f 3a 5b 5e 3d 5d 7c 3d 5c 73 2a 2e 63 68 65 63 6b 65 64 2e 29 2f 69 2c 6f 61 3d 2f 5e 24 7c 5c 2f 28 3f 3a 6a 61 76 61 7c 65 63 6d 61 29 73 63 72 69 70 74 2f 69 2c 70 61 3d 2f 5e 74 72 75 65 5c 2f 28 2e 2a 29 2f 2c 71 61 3d 2f 5e 5c 73 2a 3c 21 28 3f 3a 5c 5b 43 44 41 54 41 5c 5b 7c 2d 2d 29 7c 28 3f 3a 5c 5d 5c 5d 7c 2d 2d 29 3e 5c 73 2a 24 2f 67 Data Ascii: hr\|img\|input\|link\|meta\|param)(([\w:]+)[^>])\/>/gi,ja=/<([\w:]+)/,ka=/<tbody/i,la=/<\|&#?\w+;/,ma=/<(?:script\|style\|link)/i,na=/checked\s(?:[^=]\|=\s.checked.)/i,oa=/^$\|\/(?:java\|ecma)script/i,pa=/^true\/(.)/,qa=/^\s<!(?:\[CDATA\[\|--)\|(?:\]\]\|--)>\s$/g
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 3f 74 68 69 73 2e 70 6f 73 3d 62 3d 6d 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 28 61 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 2a 61 2c 30 2c 31 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 29 3a 74 68 69 73 2e 70 6f 73 3d 62 3d 61 2c 74 68 69 73 2e 6e 6f 77 3d 28 74 68 69 73 2e 65 6e 64 2d 74 68 69 73 2e 73 74 61 72 74 29 2a 62 2b 74 68 69 73 2e 73 74 61 72 74 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 26 26 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 73 74 65 70 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 2c 74 68 69 73 2e 6e 6f 77 2c 74 68 69 73 29 2c 63 26 26 63 2e 73 65 74 3f 63 2e 73 Data Ascii: op];return this.options.duration?this.pos=b=m.easing[this.easing](a,this.options.durationa,0,1,this.options.duration):this.pos=b=a,this.now=(this.end-this.start)b+this.start,this.options.step&&this.options.step.call(this.elem,this.now,this),c&&c.set?c.s
2024-04-26 02:17:28 UTC	15040	IN	Data Raw: 3b 74 72 79 7b 7a 62 3d 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 7d 63 61 74 63 68 28 4b 62 29 7b 7a 62 3d 79 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 2c 7a 62 2e 68 72 65 66 3d 22 22 2c 7a 62 3d 7a 62 2e 68 72 65 66 7d 79 62 3d 47 62 2e 65 78 65 63 28 7a 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7c 7c 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 4c 62 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 62 2c 62 3d 22 2a 22 29 3b 76 61 72 20 64 2c 65 3d 30 2c 66 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 6d 61 74 63 68 28 45 29 7c 7c 5b 5d 3b 69 66 28 6d 2e 69 73 46 75 6e 63 74 69 6f 6e 28 63 29 29 77 68 69 6c 65 28 64 3d 66 5b 65 2b 2b 5d 29 22 Data Ascii: ;try{zb=location.href}catch(Kb){zb=y.createElement("a"),zb.href="",zb=zb.href}yb=Gb.exec(zb.toLowerCase())\|\|[];function Lb(a){return function(b,c){"string"!=typeof b&&(c=b,b="*");var d,e=0,f=b.toLowerCase().match(E)\|\|[];if(m.isFunction(c))while(d=f[e++])"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49748	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:28 UTC	510	OUT	GET /js/vendor/jquery-ui.min.js HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:28 UTC	996	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:28 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 240453 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"3ab45-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:28 UTC	15388	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 34 20 2d 20 32 30 31 35 2d 30 33 2d 31 31 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.4 - 2015-03-11 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 65 6c 61 79 4d 65 74 7c 7c 28 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 6c 61 79 54 69 6d 65 72 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 2e 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 3d 21 30 7d 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 61 79 29 29 2c 74 68 69 73 2e 5f 6d 6f 75 73 65 44 69 73 74 61 6e 63 65 4d 65 74 28 74 29 26 26 74 68 69 73 2e 5f 6d 6f 75 73 65 44 65 6c 61 79 4d 65 74 28 74 29 26 26 28 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 3d 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 28 74 29 21 3d 3d 21 31 2c 21 74 68 69 73 2e 5f 6d 6f 75 73 65 53 74 61 72 74 65 64 29 3f 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 21 30 29 3a 28 21 30 3d 3d 3d 65 2e 64 61 74 61 28 74 2e 74 61 72 67 Data Ascii: elayMet\|\|(this._mouseDelayTimer=setTimeout(function(){i.mouseDelayMet=!0},this.options.delay)),this._mouseDistanceMet(t)&&this._mouseDelayMet(t)&&(this._mouseStarted=this._mouseStart(t)!==!1,!this._mouseStarted)?(t.preventDefault(),!0):(!0===e.data(t.targ
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 3a 6e 75 6c 6c 2c 73 65 6c 65 63 74 3a 6e 75 6c 6c 7d 2c 5f 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 61 63 74 69 76 65 4d 65 6e 75 3d 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2e 6d 6f 75 73 65 48 61 6e 64 6c 65 64 3d 21 31 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 75 6e 69 71 75 65 49 64 28 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 6d 65 6e 75 20 75 69 2d 77 69 64 67 65 74 20 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 22 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 22 75 69 2d 6d 65 6e 75 2d 69 63 6f 6e 73 22 2c 21 21 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 2e 75 69 2d 69 63 6f 6e 22 29 2e 6c 65 6e 67 74 68 29 2e 61 74 74 72 28 7b 72 6f 6c 65 3a 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 6f 6c Data Ascii: :null,select:null},_create:function(){this.activeMenu=this.element,this.mouseHandled=!1,this.element.uniqueId().addClass("ui-menu ui-widget ui-widget-content").toggleClass("ui-menu-icons",!!this.element.find(".ui-icon").length).attr({role:this.options.rol
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 45 78 70 28 65 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 65 73 63 61 70 65 52 65 67 65 78 28 69 29 2c 22 69 22 29 3b 72 65 74 75 72 6e 20 65 2e 67 72 65 70 28 74 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 2e 74 65 73 74 28 65 2e 6c 61 62 65 6c 7c 7c 65 2e 76 61 6c 75 65 7c 7c 65 29 7d 29 7d 7d 29 2c 65 2e 77 69 64 67 65 74 28 22 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 22 2c 65 2e 75 69 2e 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2c 7b 6f 70 74 69 6f 6e 73 3a 7b 6d 65 73 73 61 67 65 73 3a 7b 6e 6f 52 65 73 75 6c 74 73 3a 22 4e 6f 20 73 65 61 72 63 68 20 72 65 73 75 6c 74 73 2e 22 2c 72 65 73 75 6c 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2b 28 65 3e 31 3f 22 20 72 65 73 75 6c 74 73 20 61 72 65 22 3a Data Ascii: Exp(e.ui.autocomplete.escapeRegex(i),"i");return e.grep(t,function(e){return s.test(e.label\|\|e.value\|\|e)})}}),e.widget("ui.autocomplete",e.ui.autocomplete,{options:{messages:{noResults:"No search results.",results:function(e){return e+(e>1?" results are":
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 4b 65 79 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 6f 3d 21 31 7d 65 6c 73 65 20 33 36 3d 3d 3d 74 2e 6b 65 79 43 6f 64 65 26 26 74 2e 63 74 72 6c 4b 65 79 3f 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 73 68 6f 77 44 61 74 65 70 69 63 6b 65 72 28 74 68 69 73 29 3a 6f 3d 21 31 3b 6f 26 26 28 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 7d 2c 5f 64 6f 4b 65 79 50 72 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 69 2c 73 2c 6e 3d 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 49 6e 73 74 28 74 2e 74 61 72 67 65 74 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 65 2e 64 61 74 65 70 69 63 6b 65 72 2e 5f 67 65 74 28 6e 2c 22 63 6f 6e 73 74 72 61 69 6e 49 6e 70 75 74 22 29 3f Data Ascii: Key;break;default:o=!1}else 36===t.keyCode&&t.ctrlKey?e.datepicker._showDatepicker(this):o=!1;o&&(t.preventDefault(),t.stopPropagation())},_doKeyPress:function(t){var i,s,n=e.datepicker._getInst(t.target); return e.datepicker._get(n,"constrainInput")?
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 65 72 3d 27 68 69 64 65 27 20 64 61 74 61 2d 65 76 65 6e 74 3d 27 63 6c 69 63 6b 27 3e 22 2b 74 68 69 73 2e 5f 67 65 74 28 65 2c 22 63 6c 6f 73 65 54 65 78 74 22 29 2b 22 3c 2f 62 75 74 74 6f 6e 3e 22 2c 6c 3d 42 3f 22 3c 64 69 76 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 62 75 74 74 6f 6e 70 61 6e 65 20 75 69 2d 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 27 3e 22 2b 28 59 3f 68 3a 22 22 29 2b 28 74 68 69 73 2e 5f 69 73 49 6e 52 61 6e 67 65 28 65 2c 72 29 3f 22 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 27 62 75 74 74 6f 6e 27 20 63 6c 61 73 73 3d 27 75 69 2d 64 61 74 65 70 69 63 6b 65 72 2d 63 75 72 72 65 6e 74 20 75 69 2d 73 74 61 74 65 2d 64 65 66 61 75 6c 74 20 75 69 2d 70 72 69 6f 72 69 74 79 2d 73 65 63 6f 6e 64 61 72 79 20 75 69 Data Ascii: er='hide' data-event='click'>"+this._get(e,"closeText")+"</button>",l=B?"<div class='ui-datepicker-buttonpane ui-widget-content'>"+(Y?h:"")+(this._isInRange(e,r)?"<button type='button' class='ui-datepicker-current ui-state-default ui-priority-secondary ui
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 29 2c 31 30 29 7c 7c 30 29 2d 74 68 69 73 2e 68 65 6c 70 65 72 50 72 6f 70 6f 72 74 69 6f 6e 73 2e 68 65 69 67 68 74 2d 74 68 69 73 2e 6d 61 72 67 69 6e 73 2e 74 6f 70 2d 74 68 69 73 2e 6d 61 72 67 69 6e 73 2e 62 6f 74 74 6f 6d 5d 2c 74 68 69 73 2e 72 65 6c 61 74 69 76 65 43 6f 6e 74 61 69 6e 65 72 3d 69 29 2c 76 6f 69 64 20 30 29 3a 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 6d 65 6e 74 3d 6e 75 6c 6c 2c 76 6f 69 64 20 30 29 0a 7d 2c 5f 63 6f 6e 76 65 72 74 50 6f 73 69 74 69 6f 6e 54 6f 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 7c 7c 28 74 3d 74 68 69 73 2e 70 6f 73 69 74 69 6f 6e 29 3b 76 61 72 20 69 3d 22 61 62 73 6f 6c 75 74 65 22 3d 3d 3d 65 3f 31 3a 2d 31 2c 73 3d 74 68 69 73 2e 5f 69 73 52 6f 6f 74 4e 6f 64 65 28 74 68 69 73 2e 73 63 72 6f 6c 6c Data Ascii: ),10)\|\|0)-this.helperProportions.height-this.margins.top-this.margins.bottom],this.relativeContainer=i),void 0):(this.containment=null,void 0)},_convertPositionTo:function(e,t){t\|\|(t=this.position);var i="absolute"===e?1:-1,s=this._isRootNode(this.scroll
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 61 6c 6c 79 52 65 73 69 7a 65 45 6c 65 6d 65 6e 74 73 2c 73 3d 69 2e 6c 65 6e 67 74 68 26 26 2f 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 69 5b 30 5d 2e 6e 6f 64 65 4e 61 6d 65 29 2c 6e 3d 73 26 26 74 68 69 73 2e 5f 68 61 73 53 63 72 6f 6c 6c 28 69 5b 30 5d 2c 22 6c 65 66 74 22 29 3f 30 3a 75 2e 73 69 7a 65 44 69 66 66 2e 68 65 69 67 68 74 2c 61 3d 73 3f 30 3a 75 2e 73 69 7a 65 44 69 66 66 2e 77 69 64 74 68 2c 6f 3d 7b 77 69 64 74 68 3a 75 2e 68 65 6c 70 65 72 2e 77 69 64 74 68 28 29 2d 61 2c 68 65 69 67 68 74 3a 75 2e 68 65 6c 70 65 72 2e 68 65 69 67 68 74 28 29 2d 6e 7d 2c 72 3d 70 61 72 73 65 49 6e 74 28 75 2e 65 6c 65 6d 65 6e 74 2e 63 73 73 28 22 6c 65 66 74 22 29 2c 31 30 29 2b 28 75 2e 70 6f 73 69 74 69 6f 6e 2e 6c 65 66 74 2d 75 2e 6f 72 69 Data Ascii: allyResizeElements,s=i.length&&/textarea/i.test(i[0].nodeName),n=s&&this._hasScroll(i[0],"left")?0:u.sizeDiff.height,a=s?0:u.sizeDiff.width,o={width:u.helper.width()-a,height:u.helper.height()-n},r=parseInt(u.element.css("left"),10)+(u.position.left-u.ori
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 73 2e 5f 6d 6f 76 65 54 6f 54 6f 70 28 65 29 26 26 74 68 69 73 2e 5f 66 6f 63 75 73 54 61 62 62 61 62 6c 65 28 29 7d 7d 29 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 22 5b 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 75 69 44 69 61 6c 6f 67 2e 61 74 74 72 28 7b 22 61 72 69 61 2d 64 65 73 63 72 69 62 65 64 62 79 22 3a 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 75 6e 69 71 75 65 49 64 28 29 2e 61 74 74 72 28 22 69 64 22 29 7d 29 7d 2c 5f 63 72 65 61 74 65 54 69 74 6c 65 62 61 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3b 74 68 69 73 2e 75 69 44 69 61 6c 6f 67 54 69 74 6c 65 62 61 72 3d 65 28 22 3c 64 69 76 3e 22 29 2e 61 64 64 43 6c 61 73 73 28 22 75 69 2d 64 69 61 6c 6f 67 2d 74 69 Data Ascii: s._moveToTop(e)&&this._focusTabbable()}}),this.element.find("[aria-describedby]").length\|\|this.uiDialog.attr({"aria-describedby":this.element.uniqueId().attr("id")})},_createTitlebar:function(){var t;this.uiDialogTitlebar=e("<div>").addClass("ui-dialog-ti
2024-04-26 02:17:28 UTC	16384	IN	Data Raw: 3d 3d 74 68 69 73 2e 5f 72 67 62 61 5b 33 5d 29 72 65 74 75 72 6e 20 74 68 69 73 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 72 67 62 61 2e 73 6c 69 63 65 28 29 2c 73 3d 69 2e 70 6f 70 28 29 2c 6e 3d 6c 28 74 29 2e 5f 72 67 62 61 3b 72 65 74 75 72 6e 20 6c 28 65 2e 6d 61 70 28 69 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 31 2d 73 29 2a 6e 5b 74 5d 2b 73 2a 65 7d 29 29 7d 2c 74 6f 52 67 62 61 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 22 72 67 62 61 28 22 2c 69 3d 65 2e 6d 61 70 28 74 68 69 73 2e 5f 72 67 62 61 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 74 3e 32 3f 31 3a 30 3a 65 7d 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 5b 33 5d 26 26 28 69 2e 70 6f 70 28 29 Data Ascii: ==this._rgba[3])return this;var i=this._rgba.slice(),s=i.pop(),n=l(t)._rgba;return l(e.map(i,function(e,t){return(1-s)n[t]+se}))},toRgbaString:function(){var t="rgba(",i=e.map(this._rgba,function(e,t){return null==e?t>2?1:0:e});return 1===i[3]&&(i.pop()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49749	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:28 UTC	512	OUT	GET /js/vendor/jquery_form.min.js HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:28 UTC	994	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:28 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 15248 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"3b90-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:28 UTC	15248	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 46 6f 72 6d 20 50 6c 75 67 69 6e 0a 20 2a 20 76 65 72 73 69 6f 6e 3a 20 33 2e 35 31 2e 30 2d 32 30 31 34 2e 30 36 2e 32 30 0a 20 2a 20 52 65 71 75 69 72 65 73 20 6a 51 75 65 72 79 20 76 31 2e 35 20 6f 72 20 6c 61 74 65 72 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 4d 2e 20 41 6c 73 75 70 0a 20 2a 20 45 78 61 6d 70 6c 65 73 20 61 6e 64 20 64 6f 63 75 6d 65 6e 74 61 74 69 6f 6e 20 61 74 3a 20 68 74 74 70 3a 2f 2f 6d 61 6c 73 75 70 2e 63 6f 6d 2f 6a 71 75 65 72 79 2f 66 6f 72 6d 2f 0a 20 2a 20 50 72 6f 6a 65 63 74 20 72 65 70 6f 73 69 74 6f 72 79 3a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 6c 73 75 70 2f 66 6f 72 6d 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 Data Ascii: /! jQuery Form Plugin * version: 3.51.0-2014.06.20 * Requires jQuery v1.5 or later * Copyright (c) 2014 M. Alsup * Examples and documentation at: http://malsup.com/jquery/form/ * Project repository: https://github.com/malsup/form * Dual licensed

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49750	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:28 UTC	511	OUT	GET /js/vendor/underscore-min.js HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:29 UTC	994	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 16410 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"401a-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:29 UTC	15390	IN	Data Raw: 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 2e 6a 73 20 31 2e 38 2e 33 0a 2f 2f 20 20 20 20 20 68 74 74 70 3a 2f 2f 75 6e 64 65 72 73 63 6f 72 65 6a 73 2e 6f 72 67 0a 2f 2f 20 20 20 20 20 28 63 29 20 32 30 30 39 2d 32 30 31 35 20 4a 65 72 65 6d 79 20 41 73 68 6b 65 6e 61 73 2c 20 44 6f 63 75 6d 65 6e 74 43 6c 6f 75 64 20 61 6e 64 20 49 6e 76 65 73 74 69 67 61 74 69 76 65 20 52 65 70 6f 72 74 65 72 73 20 26 20 45 64 69 74 6f 72 73 0a 2f 2f 20 20 20 20 20 55 6e 64 65 72 73 63 6f 72 65 20 6d 61 79 20 62 65 20 66 72 65 65 6c 79 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 72 Data Ascii: // Underscore.js 1.8.3// http://underscorejs.org// (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors// Underscore may be freely distributed under the MIT license.(function(){function n(n){function t(t,r
2024-04-26 02:17:29 UTC	1020	IN	Data Raw: 76 61 72 20 63 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6f 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 2c 6d 29 7d 2c 66 3d 74 2e 76 61 72 69 61 62 6c 65 7c 7c 22 6f 62 6a 22 3b 72 65 74 75 72 6e 20 63 2e 73 6f 75 72 63 65 3d 22 66 75 6e 63 74 69 6f 6e 28 22 2b 66 2b 22 29 7b 5c 6e 22 2b 69 2b 22 7d 22 2c 63 7d 2c 6d 2e 63 68 61 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 6d 28 6e 29 3b 72 65 74 75 72 6e 20 74 2e 5f 63 68 61 69 6e 3d 21 30 2c 74 7d 3b 76 61 72 20 50 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 6e 2e 5f 63 68 61 69 6e 3f 6d 28 74 29 2e 63 68 61 69 6e 28 29 3a 74 7d 3b 6d 2e 6d 69 78 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6d 2e 65 61 63 68 28 6d 2e 66 75 6e 63 74 69 6f 6e 73 28 6e 29 Data Ascii: var c=function(n){return o.call(this,n,m)},f=t.variable\|\|"obj";return c.source="function("+f+"){\n"+i+"}",c},m.chain=function(n){var t=m(n);return t._chain=!0,t};var P=function(n,t){return n._chain?m(t).chain():t};m.mixin=function(n){m.each(m.functions(n)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49751	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:29 UTC	501	OUT	GET /js/link-unlock.js HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:29 UTC	994	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 23186 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"5a92-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:29 UTC	15390	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 0a 0a 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 76 65 72 74 53 70 65 63 69 61 6c 43 68 61 72 61 63 74 65 72 73 28 6c 69 6e 65 29 20 7b 0a 20 20 20 20 69 66 20 28 21 6c 69 6e 65 29 20 7b 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 0a 20 20 20 20 7d 0a 20 20 20 20 76 61 72 20 73 70 65 63 69 61 6c 43 6f 64 65 73 20 3d 20 7b 0a 20 20 20 20 20 20 20 20 27 26 61 6d 70 3b 27 3a 20 27 26 27 2c 0a 20 20 20 20 20 20 20 20 27 26 71 75 6f 74 3b 27 3a 20 27 22 27 2c 20 0a 20 20 20 20 20 20 20 20 27 26 23 30 33 39 3b 27 3a 20 27 5c 27 27 2c 0a 20 20 20 20 20 20 20 20 27 26 6c 74 3b 27 3a 20 27 3c 27 2c 0a 20 20 20 20 20 20 20 20 27 26 67 74 3b 27 3a 20 27 3e 27 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 63 6f 64 65 Data Ascii: 'use strict'function convertSpecialCharacters(line) { if (!line) { return } var specialCodes = { '&': '&', '"': '"', ''': '\'', '<': '<', '>': '>' } for (var code
2024-04-26 02:17:29 UTC	7796	IN	Data Raw: 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 73 61 74 5f 6d 6f 64 75 6c 65 2e 75 72 6c 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 0a 20 20 20 20 20 20 20 20 73 68 6f 77 5f 73 61 74 5f 74 72 61 69 6e 69 6e 67 3a 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 61 74 5f 6d 6f 64 75 6c 65 20 3d 20 64 61 74 61 2e 73 61 74 5f 6d 6f 64 75 6c 65 73 5f 72 65 63 6f 6d 6d 65 6e 64 65 64 5b 30 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 6b 55 6e 6c 6f 63 6b 2e 24 62 6f 64 79 2e 65 6d 70 74 79 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 24 73 61 74 54 78 74 44 69 73 70 6c 61 79 20 3d 20 24 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 61 74 5f 74 72 61 69 6e Data Ascii: window.location.href = sat_module.url; }, show_sat_training: function(data) { var sat_module = data.sat_modules_recommended[0]; linkUnlock.$body.empty(); var $satTxtDisplay = $('<div class="sat_train

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49752	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:29 UTC	621	OUT	GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/logo.png HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:29 UTC	942	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:29 GMT Content-Type: image/png Content-Length: 5155 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"1423-18ee1256888" X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:29 UTC	5155	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 d0 00 00 00 78 08 06 00 00 00 83 eb 7c f7 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 07 74 49 4d 45 07 e2 0c 0b 11 39 34 b7 7d ca 61 00 00 13 b0 49 44 41 54 78 da ed 9d 7b b0 25 d5 55 c6 7f 7b ee bc 18 e0 42 8d 13 1c 08 04 0a 9c 64 78 25 11 f0 01 1a 11 79 28 a8 11 91 e2 11 a0 2c 24 15 4b 45 52 5a 10 ca 47 a0 62 99 b2 a2 89 e6 25 09 56 99 60 19 09 21 02 31 01 63 25 10 20 12 84 32 10 10 42 02 08 e1 35 03 84 c0 0c cc 30 cc 9d fb f8 fc a3 f7 91 9e be dd 7b ef 3e fd 38 7d fa ec 55 75 eb dc 7b 7b 9d ee af d7 5e 6b 3f d6 da 7b 2d 43 a4 46 48 12 c6 98 a2 6b 06 58 62 ff 7c 13 70 14 70 08 b0 1e 58 07 ec 09 ec 06 4c 03 53 c0 36 Data Ascii: PNGIHDRx\|bKGDpHYstIME94}aIDATx{%U{Bdx%y(,$KERZGb%V`!1c% 2B50{>8}Uu{{^k?{-CFHkXb\|ppXLS6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	23.46.188.128	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 02:17:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=103558 Date: Fri, 26 Apr 2024 02:17:30 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:30 UTC	862	OUT	GET /landing?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&c=&u=&f= HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Pragma: no-cache X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:31 UTC	924	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:31 GMT Content-Type: application/json; charset=utf-8 Content-Length: 801 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Cache-Control: no-store ETag: W/"321-ebqwb4Y8Il0546nfJOCSgAJpQtk" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:31 UTC	801	IN	Data Raw: 7b 22 72 65 70 6c 79 22 3a 7b 22 6f 75 74 63 6f 6d 65 22 3a 22 75 73 65 72 5f 6d 75 73 74 5f 72 65 71 75 65 73 74 22 2c 22 74 6f 6b 65 6e 22 3a 22 4e 4d 32 5f 48 33 6f 68 4e 61 52 73 62 78 59 30 51 64 76 34 74 63 75 2d 59 6b 68 76 48 63 6c 48 4a 62 6b 53 6f 63 32 6f 66 76 6e 4d 6f 49 48 75 41 71 67 55 67 72 41 69 53 67 36 51 74 37 69 5f 72 71 72 30 6d 48 37 6a 78 4e 44 43 2d 34 77 58 71 66 69 45 72 73 5f 79 50 57 48 59 6d 37 6a 46 48 55 73 63 48 57 73 39 6f 78 32 33 53 70 65 37 73 58 35 72 73 79 47 2d 74 6c 76 6e 66 66 56 6b 73 42 45 35 36 74 70 50 2d 46 6e 4a 39 35 44 4d 31 50 4d 34 66 7e 53 56 47 48 61 5f 37 2d 43 4d 6b 79 44 56 65 63 77 32 6b 2d 50 70 48 70 4e 61 36 41 66 2d 58 5f 70 4b 57 6d 50 55 31 32 4e 7a 43 77 4f 70 56 43 7a 47 6c 70 7a 74 55 75 Data Ascii: {"reply":{"outcome":"user_must_request","token":"NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:30 UTC	825	OUT	GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/favicon.ico HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:30 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:30 GMT Content-Type: image/x-icon Content-Length: 4030 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"fbe-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:30 UTC	4030	IN	Data Raw: 00 00 01 00 01 00 1e 20 00 00 01 00 20 00 a8 0f 00 00 16 00 00 00 28 00 00 00 1e 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 44 44 00 00 00 00 00 00 00 00 00 44 44 44 05 44 44 44 48 44 44 44 71 44 44 44 81 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 80 44 44 44 71 44 44 44 46 44 44 44 0c 00 00 00 00 44 44 44 01 44 44 44 00 00 00 00 00 44 44 44 00 00 00 00 00 00 00 00 00 44 44 44 23 44 44 44 95 44 44 44 de 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 Data Ascii: (@ DDDDDDDDDHDDDqDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDqDDDFDDDDDDDDDDDDDDD#DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49757	23.46.188.128	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 02:17:31 UTC	531	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0rcGnYgAAAAANOnx9vccHTr21ROgX9ESTU0pDRURHRTAzMDkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=103521 Date: Fri, 26 Apr 2024 02:17:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 02:17:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49758	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:31 UTC	624	OUT	GET /data/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s/favicon.ico HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:31 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:31 GMT Content-Type: image/x-icon Content-Length: 4030 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"fbe-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:31 UTC	4030	IN	Data Raw: 00 00 01 00 01 00 1e 20 00 00 01 00 20 00 a8 0f 00 00 16 00 00 00 28 00 00 00 1e 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 44 44 44 00 00 00 00 00 00 00 00 00 44 44 44 05 44 44 44 48 44 44 44 71 44 44 44 81 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 82 44 44 44 80 44 44 44 71 44 44 44 46 44 44 44 0c 00 00 00 00 44 44 44 01 44 44 44 00 00 00 00 00 44 44 44 00 00 00 00 00 00 00 00 00 44 44 44 23 44 44 44 95 44 44 44 de 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 44 44 ff 44 Data Ascii: (@ DDDDDDDDDHDDDqDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDqDDDFDDDDDDDDDDDDDDD#DDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49759	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:31 UTC	542	OUT	GET /css/fonts/Roboto-Light.ttf HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://us01.z.antigena.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:32 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:31 GMT Content-Type: font/ttf Content-Length: 518580 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=0 Last-Modified: Mon, 15 Apr 2024 09:45:09 GMT ETag: W/"7e9b4-18ee1256888" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:32 UTC	15417	IN	Data Raw: 00 01 00 00 00 13 01 00 00 04 00 30 47 44 45 46 45 62 46 9f 00 07 24 c0 00 00 03 d6 47 50 4f 53 66 6f 1f da 00 07 28 98 00 00 8f 78 47 53 55 42 28 e1 13 c7 00 07 b8 10 00 00 31 a4 4c 54 53 48 67 9b 21 b4 00 00 37 04 00 00 0d 3f 4f 53 2f 32 a2 6a b2 2e 00 00 01 b8 00 00 00 60 63 6d 61 70 c0 c3 66 24 00 00 51 8c 00 00 24 7a 63 76 74 20 2f bb 04 9e 00 00 79 00 00 00 00 58 66 70 67 6d 7f fa 22 ab 00 00 76 08 00 00 01 bc 67 61 73 70 00 08 00 13 00 07 24 b4 00 00 00 0c 67 6c 79 66 af d1 ed 1d 00 00 ae 48 00 05 e1 ac 68 64 6d 78 e6 24 4c 3f 00 00 44 44 00 00 0d 48 68 65 61 64 ff ac 2f 7a 00 00 01 3c 00 00 00 36 68 68 65 61 0b bd 11 83 00 00 01 74 00 00 00 24 68 6d 74 78 44 d0 f8 12 00 00 02 18 00 00 34 ea 6c 6f 63 61 2f 8a 48 64 00 00 79 58 00 00 34 f0 6d 61 78 Data Ascii: 0GDEFEbF$GPOSfo(xGSUB(1LTSHg!7?OS/2j.`cmapf$Q$zcvt /yXfpgm"vgasp$glyfHhdmx$L?DDHhead/z<6hheat$hmtxD4loca/HdyX4max
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 1c 01 1c 01 01 01 01 01 01 01 01 01 01 01 2d 01 01 01 2d 01 01 01 2c 2c 01 01 1d 1d 2a 2a 01 01 2a 2a 01 01 01 01 01 01 01 01 01 01 01 2b 01 01 22 1c 01 01 02 1a 1b 01 1a 01 01 01 01 16 01 01 01 01 01 01 01 09 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 14 01 01 01 01 25 01 01 01 01 1e 27 27 27 29 01 01 1e 01 1f 01 01 17 2a 01 01 2a 2a 2b 2b 31 01 31 01 01 01 1b 1b 22 22 22 22 01 13 20 01 01 01 01 08 01 1c 01 01 01 23 01 01 01 01 09 01 01 01 01 01 27 01 01 01 24 01 01 09 09 2e 13 01 01 01 04 01 0d 06 01 01 01 0d 01 01 01 01 01 10 01 11 01 01 0a 23 2e 01 01 01 01 01 01 27 14 01 01 01 01 01 0f 01 01 01 01 01 01 01 01 01 01 2c 01 27 01 01 01 01 01 01 30 01 01 07 01 25 01 01 01 25 01 01 01 Data Ascii: --,,**+"%''')*++11"""" #'$.#.','0%%
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 00 6e 54 00 00 6f 14 00 00 70 14 00 00 70 e4 00 00 71 bc 00 00 72 90 00 00 72 a0 00 00 73 6c 00 00 74 44 00 00 74 c0 00 00 75 90 00 00 76 18 00 00 76 c4 00 00 77 84 00 00 78 5c 00 00 79 04 00 00 79 98 00 00 7a 44 00 00 7b 0c 00 00 7b e4 00 00 7c b4 00 00 7d 84 00 00 7e 40 00 00 7f 38 00 00 80 14 00 00 80 ec 00 00 81 cc 00 00 82 a4 00 00 83 68 00 00 83 a4 00 00 83 bc 00 00 83 dc 00 00 83 ec 00 00 84 24 00 00 85 70 00 00 86 e8 00 00 88 04 00 00 89 64 00 00 89 88 00 00 8a 88 00 00 8b 50 00 00 8c 18 00 00 8c f4 00 00 8d d8 00 00 8e 74 00 00 8f bc 00 00 90 d8 00 00 92 0c 00 00 92 a4 00 00 93 3c 00 00 93 f4 00 00 95 14 00 00 96 1c 00 00 96 80 00 00 97 b8 00 00 99 08 00 00 99 e8 00 00 9a d8 00 00 9b e4 00 00 9c 10 00 00 9c c0 00 00 9d e0 00 00 9e 98 00 00 9f 3c Data Ascii: nToppqrrsltDtuvvwx\yyzD{{\|}~@8h$pdPt<<
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 16 16 15 14 06 23 22 26 35 34 36 37 26 26 35 34 36 20 16 03 34 26 20 06 10 16 33 32 36 03 34 26 23 22 06 15 14 16 33 32 36 03 e3 84 6c 7e 98 fe d1 d3 fd 92 7f 6c 80 e9 01 80 eb 52 c2 fe d2 c0 ba 9f 9b bc 26 ad 86 88 a9 a9 89 87 ab 04 39 71 b3 2a 2b c0 7e bb db da bc 7c c2 2b 2a b3 71 b5 d6 d8 fc 95 88 af ac fe ea a5 a4 03 45 7d a7 a1 83 80 9c 9d 00 00 00 00 02 00 65 ff f5 03 ec 05 c4 00 17 00 24 00 61 b2 1f 25 26 11 12 39 b0 1f 10 b0 0b d0 00 b0 00 45 58 b0 0b 2f 1b b1 0b 1e 3e 59 b0 00 45 58 b0 12 2f 1b b1 12 0e 3e 59 b2 03 12 0b 11 12 39 b0 03 2f b0 12 10 b1 14 01 b0 0a 2b 58 21 d8 1b f4 59 b0 03 10 b1 18 01 b0 0a 2b 58 21 d8 1b f4 59 b0 0b 10 b1 1f 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 06 06 23 22 26 26 35 34 36 36 33 32 12 11 15 10 00 21 23 37 33 24 Data Ascii: #"&5467&&546 4& 3264&#"326l~lR&9q+~\|+qE}e$a%&9EX/>YEX/>Y9/+X!Y+X!Y+X!Y01#"&&546632!#73$
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: cc 00 00 00 02 00 9f fe 60 04 07 06 00 00 0f 00 1c 00 66 b2 13 1d 1e 11 12 39 b0 13 10 b0 0c d0 00 b0 08 2f b0 00 45 58 b0 0c 2f 1b b1 0c 1a 3e 59 b0 00 45 58 b0 06 2f 1b b1 06 10 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 0e 3e 59 b2 05 0c 03 11 12 39 b2 0a 0c 03 11 12 39 b0 0c 10 b1 13 01 b0 0a 2b 58 21 d8 1b f4 59 b0 03 10 b1 1a 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 14 02 23 22 27 11 23 11 33 11 36 33 32 12 11 27 34 26 23 22 06 07 11 16 16 33 32 36 04 07 e0 bd dd 76 78 78 75 dc c0 df 78 aa 98 6e 9e 2a 2a 9e 70 97 a9 02 12 fd fe d7 9c fd d8 07 a0 fd a4 aa fe db fe fb 03 cf f0 6a 65 fd f7 5a 63 f1 00 00 00 00 02 00 6c ff ec 04 81 06 00 00 17 00 22 00 8f b2 20 23 24 11 12 39 b0 20 10 b0 11 d0 00 b0 14 2f b0 00 45 58 b0 0d 2f 1b b1 0d 1a 3e 59 b0 00 45 58 b0 02 Data Ascii: `f9/EX/>YEX/>YEX/>Y99+X!Y+X!Y01#"'#3632'4&#"326vxxuxn**pjeZcl" #$9 /EX/>YEX
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 58 b0 12 2f 1b b1 12 1e 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 1e 3e 59 b0 00 45 58 b0 07 2f 1b b1 07 10 3e 59 b0 00 45 58 b0 10 2f 1b b1 10 0e 3e 59 b2 00 10 03 11 12 39 b0 03 10 b1 0c 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 36 36 33 32 04 17 11 23 11 34 26 27 23 22 07 11 23 11 33 01 30 4e c4 63 da 01 0f 03 77 c3 a9 09 df 96 78 78 05 51 38 3b ef c6 fa 46 05 b0 9d b7 03 79 fb 1d 05 b0 00 00 00 00 03 00 6c fe 4b 05 84 06 00 00 1b 00 26 00 32 00 af b2 17 33 34 11 12 39 b0 17 10 b0 20 d0 b0 17 10 b0 29 d0 00 b0 06 2f b0 00 45 58 b0 03 2f 1b b1 03 1a 3e 59 b0 00 45 58 b0 10 2f 1b b1 10 10 3e 59 b0 00 45 58 b0 18 2f 1b b1 18 0e 3e 59 b2 05 03 18 11 12 39 b0 10 10 b0 0a d0 b0 0a 2f b4 0f 0a 1f 0a 02 5d b2 08 0a 10 11 12 39 b2 12 10 0a 11 12 39 b2 15 10 0a 11 12 39 Data Ascii: X/>YEX/>YEX/>YEX/>Y9+X!Y016632#4&'#"#30NcwxxQ8;FylK&2349 )/EX/>YEX/>YEX/>Y9/]999
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 01 00 1e fe 4b 03 24 06 15 00 17 00 3f b2 00 18 19 11 12 39 00 b0 00 45 58 b0 0f 2f 1b b1 0f 20 3e 59 b0 00 45 58 b0 03 2f 1b b1 03 10 3e 59 b1 08 01 b0 0a 2b 58 21 d8 1b f4 59 b0 0f 10 b1 14 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 05 14 06 23 22 27 37 16 33 32 36 35 11 34 36 33 32 17 07 26 23 22 06 15 01 dc a8 97 44 3b 08 32 3c 62 6f a7 98 44 3c 09 32 3c 62 6f 60 a2 b3 11 64 0c 7b 71 05 1d a5 b3 11 64 0c 7b 71 00 00 ff ff 00 1e fe 4b 03 24 06 15 02 26 01 37 00 00 01 07 07 a8 00 00 fd 51 00 10 00 b0 00 45 58 b0 19 2f 1b b1 19 0e 3e 59 30 31 00 00 00 01 00 1e fe 4b 03 24 04 4e 00 17 00 42 b2 0a 18 19 11 12 39 00 b0 00 45 58 b0 08 2f 1b b1 08 1a 3e 59 b0 00 45 58 b0 14 2f 1b b1 14 10 3e 59 b0 08 10 b1 03 01 b0 0a 2b 58 21 d8 1b f4 59 b0 14 10 b1 0f 01 b0 0a 2b Data Ascii: K$?9EX/ >YEX/>Y+X!Y+X!Y01#"'732654632&#"D;2<boD<2<bo`d{qd{qK$&7QEX/>Y01K$NB9EX/>YEX/>Y+X!Y+
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 2c 05 74 22 2f 2f 22 21 2e 2e 20 22 2f 2f 22 21 2e 2e 00 00 01 fd 6d 04 d2 fe 9a 06 59 00 0f 00 3f 00 b0 00 2f b0 08 d0 b0 08 2f 40 0b 0f 08 1f 08 2f 08 3f 08 4f 08 05 5d b2 0e 00 08 11 12 39 b0 0e 2f b1 01 06 b0 0a 2b 58 21 d8 1b f4 59 b0 08 10 b1 07 06 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 35 36 36 35 34 26 23 37 32 16 15 14 06 07 07 fd 8f 57 50 6d 5c 07 89 9d 5b 55 01 04 d2 7d 07 27 30 2d 32 4d 5e 4f 42 53 07 3e ff ff fc e5 04 b8 fe 67 06 31 01 07 01 8b fc 70 00 00 00 0d 00 b2 0f 09 01 5d b2 0f 0e 01 5d 30 31 00 00 00 ff ff fc 87 04 e8 fe f9 06 00 00 27 00 76 fc 0b 00 00 00 07 00 76 fd 2d 00 00 00 00 00 01 fc ad 04 ea fe d7 05 f6 00 08 00 22 00 b0 00 2f b0 06 d0 b0 06 2f b6 0f 06 1f 06 2f 06 03 5d b0 04 d0 b0 04 2f b2 05 00 06 11 12 39 30 31 01 23 27 35 Data Ascii: ,t"//"!.. "//"!..mY?//@/?O]9/+X!Y+X!Y0156654&#72WPm\[U}'0-2M^OBS>g1p]]01'vv-"///]/901#'5
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 32 16 15 11 36 37 01 14 16 17 11 02 23 22 06 07 04 75 47 5e 02 d5 ca c3 e7 78 01 a0 91 95 91 03 e9 fe f1 a9 84 98 ab 53 48 fd 6d ca b6 05 c6 52 62 01 02 a3 1d 06 dd d3 e4 ef d3 01 47 02 fe b1 a3 b1 a2 a6 e6 15 01 0b d5 0c 95 b8 d0 bf fe a8 06 17 01 68 a4 cc 12 01 65 01 16 76 69 00 00 00 01 ff d1 00 00 04 83 05 bb 00 1e 00 4a b2 1a 1f 20 11 12 39 00 b0 00 45 58 b0 00 2f 1b b1 00 1e 3e 59 b0 00 45 58 b0 15 2f 1b b1 15 1e 3e 59 b0 00 45 58 b0 0a 2f 1b b1 0a 0e 3e 59 b0 00 10 b1 05 01 b0 0a 2b 58 21 d8 1b f4 59 b0 10 d0 b2 1a 00 0a 11 12 39 30 31 01 32 17 07 26 23 22 06 07 01 11 23 11 01 26 26 23 22 07 27 36 33 32 16 17 13 17 37 13 36 36 04 12 3d 34 1d 18 2c 36 48 23 fe e7 7b fe e5 24 47 35 2c 18 1d 32 3e 59 70 2f db 16 18 da 32 6f 05 bb 1b 5f 0f 44 4d fd 93 Data Ascii: 267#"uG^xSHmRbGheviJ 9EX/>YEX/>YEX/>Y+X!Y9012&#"#&&#"'632766=4,6H#{$G5,2>Yp/2o_DM
2024-04-26 02:17:32 UTC	16384	IN	Data Raw: 10 fe 24 01 e2 0a 86 98 ce 02 52 01 81 00 00 00 02 00 d1 00 00 08 08 05 b0 00 24 00 28 00 92 b2 17 29 2a 11 12 39 b0 17 10 b0 28 d0 00 b0 00 45 58 b0 04 2f 1b b1 04 1e 3e 59 b0 00 45 58 b0 23 2f 1b b1 23 1e 3e 59 b0 00 45 58 b0 0b 2f 1b b1 0b 0e 3e 59 b0 00 45 58 b0 13 2f 1b b1 13 0e 3e 59 b0 00 45 58 b0 1b 2f 1b b1 1b 0e 3e 59 b0 00 45 58 b0 21 2f 1b b1 21 0e 3e 59 b2 01 04 0b 11 12 39 b0 01 2f b0 25 d0 b0 06 d0 b0 01 10 b1 1f 01 b0 0a 2b 58 21 d8 1b f4 59 b0 17 d0 b0 11 d0 b0 04 10 b1 27 01 b0 0a 2b 58 21 d8 1b f4 59 30 31 01 21 15 33 01 21 01 33 32 16 17 11 23 11 26 26 27 23 07 11 23 11 27 23 22 06 07 11 23 11 36 37 21 11 23 11 33 01 33 01 21 01 4c 03 61 30 fe 51 04 6e fe 51 5e e3 d7 03 7c 02 8e a6 ac 09 7b 06 a6 ac 92 04 7c 02 69 fe 25 7b 7b 04 10 11 Data Ascii: $R$()*9(EX/>YEX#/#>YEX/>YEX/>YEX/>YEX!/!>Y9/%+X!Y'+X!Y01!3!32#&&'##'#"#67!#33!La0QnQ^\|{\|i%{{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49760	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:31 UTC	630	OUT	GET /landing?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&c=&u=&f= HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:32 UTC	924	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:32 GMT Content-Type: application/json; charset=utf-8 Content-Length: 801 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Cache-Control: no-store ETag: W/"321-yp1sokK5Etd63Pduuzu8vmmtskI" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:32 UTC	801	IN	Data Raw: 7b 22 72 65 70 6c 79 22 3a 7b 22 6f 75 74 63 6f 6d 65 22 3a 22 75 73 65 72 5f 6d 75 73 74 5f 72 65 71 75 65 73 74 22 2c 22 74 6f 6b 65 6e 22 3a 22 4e 4d 32 5f 48 33 6f 68 4e 61 52 73 62 78 59 30 51 64 76 34 74 63 75 2d 59 6b 68 76 48 63 6c 48 4a 62 6b 53 6f 63 32 6f 66 76 6e 4d 6f 49 48 75 41 71 67 55 67 72 41 69 53 67 36 51 74 37 69 5f 72 71 72 30 6d 48 37 6a 78 4e 44 43 2d 34 77 58 71 66 69 45 72 73 5f 79 50 57 48 59 6d 37 6a 46 48 55 73 63 48 57 73 39 6f 78 32 33 53 70 65 37 73 58 35 72 73 79 47 2d 74 6c 76 6e 66 66 56 6b 73 42 45 35 36 74 70 50 2d 46 6e 4a 39 35 44 4d 31 50 4d 34 66 7e 53 56 47 48 61 5f 37 2d 43 4d 6b 79 44 56 65 63 77 32 6b 2d 50 70 48 70 4e 61 36 41 66 2d 58 5f 70 4b 57 6d 50 55 31 32 4e 7a 43 77 4f 70 56 43 7a 47 6c 70 7a 74 55 75 Data Ascii: {"reply":{"outcome":"user_must_request","token":"NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49767	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:49 UTC	914	OUT	GET /request_access?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&chainID=3c31f3ca-59d9-46f6-9b07-755787e0a198&c=&u=&f= HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Pragma: no-cache X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:49 UTC	925	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:49 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1242 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Cache-Control: no-store ETag: W/"4da-GLpXHXJIzp9Cjd6nzsOB4OmtXBY" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:49 UTC	1242	IN	Data Raw: 7b 22 72 65 70 6c 79 22 3a 7b 22 6f 75 74 63 6f 6d 65 22 3a 22 72 65 64 69 72 65 63 74 5f 74 6f 5f 6c 69 6e 6b 22 2c 22 74 6f 6b 65 6e 22 3a 22 4e 4d 32 5f 48 33 6f 68 4e 61 52 73 62 78 59 30 51 64 76 34 74 63 75 2d 59 6b 68 76 48 63 6c 48 4a 62 6b 53 6f 63 32 6f 66 76 6e 4d 6f 49 48 75 41 71 67 55 67 72 41 69 53 67 36 51 74 37 69 5f 72 71 72 30 6d 48 37 6a 78 4e 44 43 2d 34 77 58 71 66 69 45 72 73 5f 79 50 57 48 59 6d 37 6a 46 48 55 73 63 48 57 73 39 6f 78 32 33 53 70 65 37 73 58 35 72 73 79 47 2d 74 6c 76 6e 66 66 56 6b 73 42 45 35 36 74 70 50 2d 46 6e 4a 39 35 44 4d 31 50 4d 34 66 7e 53 56 47 48 61 5f 37 2d 43 4d 6b 79 44 56 65 63 77 32 6b 2d 50 70 48 70 4e 61 36 41 66 2d 58 5f 70 4b 57 6d 50 55 31 32 4e 7a 43 77 4f 70 56 43 7a 47 6c 70 7a 74 55 75 79 Data Ascii: {"reply":{"outcome":"redirect_to_link","token":"NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49768	40.76.134.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:49 UTC	682	OUT	GET /request_access?token=NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s&chainID=3c31f3ca-59d9-46f6-9b07-755787e0a198&c=&u=&f= HTTP/1.1 Host: us01.z.antigena.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:50 UTC	925	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 02:17:50 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1242 Connection: close Server: nginx Content-Security-Policy: default-src 'self';base-uri 'self';block-all-mixed-content;font-src 'self' https: data:;frame-ancestors 'self';img-src 'self' data:;object-src 'none';script-src 'self';script-src-attr 'none';style-src 'self' https: 'unsafe-inline';upgrade-insecure-requests X-DNS-Prefetch-Control: off Expect-CT: max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=15552000; includeSubDomains X-Download-Options: noopen X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: no-referrer X-XSS-Protection: 0 Cache-Control: no-store ETag: W/"4da-GLpXHXJIzp9Cjd6nzsOB4OmtXBY" Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-04-26 02:17:50 UTC	1242	IN	Data Raw: 7b 22 72 65 70 6c 79 22 3a 7b 22 6f 75 74 63 6f 6d 65 22 3a 22 72 65 64 69 72 65 63 74 5f 74 6f 5f 6c 69 6e 6b 22 2c 22 74 6f 6b 65 6e 22 3a 22 4e 4d 32 5f 48 33 6f 68 4e 61 52 73 62 78 59 30 51 64 76 34 74 63 75 2d 59 6b 68 76 48 63 6c 48 4a 62 6b 53 6f 63 32 6f 66 76 6e 4d 6f 49 48 75 41 71 67 55 67 72 41 69 53 67 36 51 74 37 69 5f 72 71 72 30 6d 48 37 6a 78 4e 44 43 2d 34 77 58 71 66 69 45 72 73 5f 79 50 57 48 59 6d 37 6a 46 48 55 73 63 48 57 73 39 6f 78 32 33 53 70 65 37 73 58 35 72 73 79 47 2d 74 6c 76 6e 66 66 56 6b 73 42 45 35 36 74 70 50 2d 46 6e 4a 39 35 44 4d 31 50 4d 34 66 7e 53 56 47 48 61 5f 37 2d 43 4d 6b 79 44 56 65 63 77 32 6b 2d 50 70 48 70 4e 61 36 41 66 2d 58 5f 70 4b 57 6d 50 55 31 32 4e 7a 43 77 4f 70 56 43 7a 47 6c 70 7a 74 55 75 79 Data Ascii: {"reply":{"outcome":"redirect_to_link","token":"NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:49 UTC	837	OUT	GET /spreadsheets/d/1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI/edit?usp=sharing HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:50 UTC	3125	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Location: https://accounts.google.com/ServiceLogin?service=wise&passive=1209600&osid=1&continue=https://docs.google.com/spreadsheets/d/1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI/edit?usp%3Dsharing&followup=https://docs.google.com/spreadsheets/d/1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI/edit?usp%3Dsharing&ltmpl=sheets P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubDomains Origin-Trial: Arlbm3aYP4F8jryBe5TXZ49CJDmGTgEpjkLwYKtvJpvg65pxTRq/0LtrY3S/FMwogUWu6GvOhoCX1WWtJ8wVXQkAAABpeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IlVzZXJBZ2VudFJlZHVjdGlvbiIsImV4cGlyeSI6MTY1MDQxMjc5OSwiaXNTdWJkb21haW4iOnRydWV9,Ap3AAAMPGQdpsdaCmhccZ9PVcAc8wgfls3lmUoeAbR5xAnl6eSaF0eLG/QkQVNw2ihrBAOn6QgkNr0PQZbyNswoAAABkeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IlJlZ2lvbkNhcHR1cmUiLCJleHBpcnkiOjE2NjY3NDIzOTksImlzU3ViZG9tYWluIjp0cnVlfQ== Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Reduced Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'self';report-uri https://docs.google.com/spreadsheets/cspreport;script-src 'report-sample' 'nonce-XFiIjLvDtrb1YmM3OP91ag' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob: Date: Fri, 26 Apr 2024 02:17:50 GMT Expires: Fri, 26 Apr 2024 02:17:50 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: COMPASS=apps-spreadsheets=CmUACWuJV2f6a4w3g1ESPGn1c2vVfwN55PTqN2O5C7rfrUcKXVTaTpEFAIIIoGAg8ZxC_PSVfarNKj-YlZW0d9tZqpZM_-v6H4w9OqVZgOx9hJZPtaEVcVbrT3nJJ-wbLEB1qp-iIBDeuayxBhp2AAlriVcSOpLPrEH40-8gysg8A5Y7p5mK3Ed-67hbGQ0m6vgHCPZhyJgEGrKK5OuEGxzaGoN1NPijCRsmUT2zQuaDQ767NB3WaylAr2yKgHfVHNf52lnS4RInqaHTOtfhPyeziVjx4JAxcNgTmNtrn-dY53CvRQ==; Domain=.docs.google.com; Expires=Fri, 26-Apr-2024 03:17:50 GMT; Path=/spreadsheets/d/1qiQHi_eW_ieX8FKKwfGKjkoErnhSxrQVYugKn-b7cEI; Secure; HttpOnly; Priority=LOW; SameSite=none Set-Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q; expires=Sat, 26-Oct-2024 02:17:50 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: GFE_RTT=190; Domain=.docs.google.com; Expires=Fri, 26-Apr-2024 02:22:50 GMT; Path=/; Secure; Priority=LOW; SameSite=strict Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding x-l2-request-path: l2-managed-6 Connection: close Transfer-Encoding: chunked
2024-04-26 02:17:50 UTC	549	IN	Data Raw: 32 31 65 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 53 65 72 76 69 63 65 4c 6f 67 69 6e 3f 73 65 72 76 69 63 65 3d 77 69 73 65 26 61 6d 70 3b 70 61 73 73 69 76 65 3d 31 32 30 Data Ascii: 21e<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://accounts.google.com/ServiceLogin?service=wise&passive=120
2024-04-26 02:17:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49788	172.217.2.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:17:58 UTC	1216	OUT	GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=2113894612&timestamp=1714097877496 HTTP/1.1 Host: accounts.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:17:59 UTC	1850	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: ALLOW-FROM https://accounts.google.com Content-Security-Policy: frame-ancestors https://accounts.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-pKUj6JXcXwYkwlT1wK7fhA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsDomainCookiesCheckConnectionHttp/cspreport/allowlist Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 02:17:58 GMT Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: cross-origin reporting-endpoints: default="/_/AccountsDomainCookiesCheckConnectionHttp/web-reports?context=eJzjUtDikmLw1JBikPj6kkkNiJ3SZ7AGAHHSv_OsBUAsxMNxbe6ajWwCG479Oc8MAHf2EmI" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 37 36 61 30 0d 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 70 4b 55 6a 36 4a 58 63 58 77 59 6b 77 6c 54 31 77 4b 37 66 68 41 22 3e 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 3d 74 68 69 73 2e 64 65 66 61 75 6c 74 5f 41 63 63 6f 75 6e 74 73 44 6f 6d 61 69 6e 63 6f 6f 6b 69 65 73 43 68 65 63 6b 63 6f 6e 6e 65 63 74 69 6f 6e 4a 73 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 Data Ascii: 76a0<html><head><script nonce="pKUj6JXcXwYkwlT1wK7fhA">"use strict";this.default_AccountsDomaincookiesCheckconnectionJs=this.default_AccountsDomaincookiesCheckconnectionJs\|\|{};(function(_){var window=this;try{_._F_toggles_initialize=function(a){("unde
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 3d 3d 3d 61 29 7b 69 66 28 69 61 28 29 29 69 66 28 28 61 3d 2f 72 76 3a 20 2a 28 5b 5c 64 5c 2e 5d 2a 29 2f 2e 65 78 65 63 28 62 29 29 26 26 61 5b 31 5d 29 62 3d 61 5b 31 5d 3b 65 6c 73 65 7b 61 3d 22 22 3b 76 61 72 20 63 3d 2f 4d 53 49 45 20 2b 28 5b 5c 64 5c 2e 5d 2b 29 2f 2e 65 78 65 63 28 62 29 3b 69 66 28 63 26 26 63 5b 31 5d 29 69 66 28 62 3d 2f 54 72 69 64 65 6e 74 5c 2f 28 5c 64 2e 5c 64 29 2f 2e 65 78 65 63 28 62 29 2c 0a 22 37 2e 30 22 3d 3d 63 5b 31 5d 29 69 66 28 62 26 26 62 5b 31 5d 29 73 77 69 74 63 68 28 62 5b 31 5d 29 7b 63 61 73 65 20 22 34 2e 30 22 3a 61 3d 22 38 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 35 2e 30 22 3a 61 3d 22 39 2e 30 22 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 36 2e 30 Data Ascii: ernet Explorer"===a){if(ia())if((a=/rv: ([\d\.])/.exec(b))&&a[1])b=a[1];else{a="";var c=/MSIE +([\d\.]+)/.exec(b);if(c&&c[1])if(b=/Trident\/(\d.\d)/.exec(b),"7.0"==c[1])if(b&&b[1])switch(b[1]){case "4.0":a="8.0";break;case "5.0":a="9.0";break;case "6.0
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 7c 7c 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 64 3d 41 28 61 29 3b 69 66 28 64 26 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 26 26 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 41 61 28 61 2c 64 7c 31 29 3b 72 65 74 75 72 6e 21 30 7d 2c 42 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 45 72 72 6f 72 28 22 69 6e 74 33 32 22 29 3b 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 72 6f 72 5f 5f 63 6f 6e 74 65 78 74 5f 5f 39 38 34 33 38 32 7c 7c 28 61 2e 5f 5f 63 6c 6f 73 75 72 65 5f 5f 65 72 Data Ascii: },B=function(a,b,c){if(!Array.isArray(a)\|\|a.length)return!1;var d=A(a);if(d&1)return!0;if(!(b&&(Array.isArray(b)?b.includes(c):b.has(c))))return!1;Aa(a,d\|1);return!0},Ba=function(){var a=Error("int32");a.__closure__error__context__984382\|\|(a.__closure__er
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 6e 75 6c 6c 21 3d 0a 61 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 61 3d 42 28 61 2c 76 6f 69 64 20 30 2c 30 29 3f 76 6f 69 64 20 30 3a 65 26 26 41 28 61 29 26 32 3f 61 3a 49 61 28 61 2c 62 2c 63 2c 76 6f 69 64 20 30 21 3d 3d 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 7a 61 28 61 29 29 7b 76 61 72 20 66 3d 7b 7d 2c 68 3b 66 6f 72 28 68 20 69 6e 20 61 29 66 5b 68 5d 3d 4a 61 28 61 5b 68 5d 2c 62 2c 63 2c 64 2c 65 29 3b 61 3d 66 7d 65 6c 73 65 20 61 3d 62 28 61 2c 64 29 3b 72 65 74 75 72 6e 20 61 7d 7d 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 64 7c 7c 63 3f 41 28 61 29 3a 30 3b 64 3d 64 3f 21 21 28 66 26 33 32 29 3a 76 6f 69 64 20 30 3b 61 3d 41 72 Data Ascii: a,b,c,d,e){if(null!=a){if(Array.isArray(a))a=B(a,void 0,0)?void 0:e&&A(a)&2?a:Ia(a,b,c,void 0!==d,e);else if(za(a)){var f={},h;for(h in a)f[h]=Ja(a[h],b,c,d,e);a=f}else a=b(a,d);return a}},Ia=function(a,b,c,d,e){var f=d\|\|c?A(a):0;d=d?!!(f&32):void 0;a=Ar
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 68 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 62 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 45 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 Data Ascii: e:!0,writable:!0,value:h})};b.prototype.toString=function(){return this.g};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("b");return new b(c+(f\|\|"")+"_"+d++,f)};return e});E("Symbol.iterator
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 64 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 6e 65 77 20 61 28 5b 5b 6b 2c 32 5d 2c 5b 6c 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6d 2e 67 65 74 28 6b 29 7c 7c 33 21 3d 6d 2e 67 65 74 28 6c 29 29 72 65 74 75 72 6e 21 31 3b 6d 2e 64 65 6c 65 74 65 28 6b 29 3b 6d 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6d 2e 68 61 73 28 6b 29 26 26 34 3d 3d 6d 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 72 29 7b 72 65 74 75 72 6e 21 31 Data Ascii: ct.isExtensible(m)&&d(m);return l(m)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Object.seal({}),m=new a([[k,2],[l,3]]);if(2!=m.get(k)\|\|3!=m.get(l))return!1;m.delete(k);m.set(l,4);return!m.has(k)&&4==m.get(l)}catch(r){return!1
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 65 61 64 3d 0a 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 75 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 67 29 2e 6c 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 28 67 3d 64 28 74 68 69 73 2c 67 29 2e 6c 29 26 26 67 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 Data Ascii: ead=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].u=f();this.size=0};c.prototype.has=function(g){return!!d(this,g).l};c.prototype.get=function(g){return(g=d(this,g).l)&&g.value};c.prototype.entries=function(){return e(t
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 30 21 3d 3d 62 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 45 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 30 3e 63 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 29 29 3b 63 3c 65 3b 63 2b 2b 29 7b 76 61 72 20 66 3d 64 5b 63 5d 3b 69 66 28 66 3d 3d 3d 62 7c 7c 4f 62 6a 65 63 74 2e 69 73 28 66 2c 62 Data Ascii: c){return b===c?0!==b\|\|1/b===1/c:b!==b&&c!==c}});E("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(0>c&&(c=Math.max(c+e,0));c<e;c++){var f=d[c];if(f===b\|\|Object.is(f,b
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 61 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 62 3f 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 41 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 64 Data Ascii: var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b},I=function(a,b){function c(){}c.prototype=b.prototype;a.A=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.ea=function(d
2024-04-26 02:17:59 UTC	1850	IN	Data Raw: 61 6d 65 3a 61 2e 66 69 6c 65 4e 61 6d 65 2c 73 74 61 63 6b 3a 62 7d 3a 28 63 3d 61 2e 6d 65 73 73 61 67 65 2c 6e 75 6c 6c 3d 3d 63 26 26 28 63 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 3f 27 55 6e 6b 6e 6f 77 6e 20 45 72 72 6f 72 20 6f 66 20 74 79 70 65 20 22 27 2b 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3f 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3a 74 62 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 29 2b 27 22 27 3a 22 55 6e 6b 6e 6f 77 6e 20 45 72 72 6f 72 20 6f 66 20 75 6e 6b 6e 6f 77 6e 20 74 79 70 65 22 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 74 6f 53 74 72 69 6e 67 26 26 4f 62 6a 65 63 Data Ascii: ame:a.fileName,stack:b}:(c=a.message,null==c&&(c=a.constructor&&a.constructor instanceof Function?'Unknown Error of type "'+(a.constructor.name?a.constructor.name:tb(a.constructor))+'"':"Unknown Error of unknown type","function"===typeof a.toString&&Objec

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49795	142.250.217.228	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:01 UTC	1206	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q
2024-04-26 02:18:01 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 21:33:19 GMT Expires: Fri, 03 May 2024 21:33:19 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 17082 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:01 UTC	549	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-26 02:18:01 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-26 02:18:01 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-26 02:18:01 UTC	1255	IN	Data Raw: ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-26 02:18:01 UTC	1116	IN	Data Raw: 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49797	192.178.50.36	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:01 UTC	635	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q
2024-04-26 02:18:02 UTC	706	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 21:33:19 GMT Expires: Fri, 03 May 2024 21:33:19 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 17083 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:02 UTC	549	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-04-26 02:18:02 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 a6 75 ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff 0b be fb ff 05 bc fb ff b6 ec fe ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f7 aa 7b ff ff ff ff ff fd fd fd f9 fd fd fd db ff ff ff ff 35 c9 fc ff 0a b2 f9 ff 6b a4 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 Data Ascii: BBBBBuBBBBB{5k7R8F2Vb5C;I
2024-04-26 02:18:02 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 fe fe fe 2f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 24 fd fd fd ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff eb f5 e7 ff 8f c6 7b ff 54 a9 36 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 7e be 67 ff dd ee d7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd e8 ff ff ff 22 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd d3 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff c4 e1 b9 ff 5c ac 3e ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 Data Ascii: /${T6S4S4S4S4S4S4S4S4S4~g"\>S4S4S4S4S4S4S4S4S4S4S4S
2024-04-26 02:18:02 UTC	1255	IN	Data Raw: ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c8 aa ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd fa ff ff ff ff ff ff ff ff ff ff ff ff 07 bd fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 7d dc fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBBBBBB}BBBBBBBBBBB}
2024-04-26 02:18:02 UTC	1116	IN	Data Raw: 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 81 8a f2 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 0b fd fd fd d5 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b5 ba f7 ff 3e 4b eb ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 3f 4c eb ff ba bf f8 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 26 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: 5C5C5C5C5C5C5C5C5C5C5C5C5C5C>K5C5C5C5C5C5C5C5C5C5C5C5C?L&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49798	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:02 UTC	997	OUT	GET /chrome/answer/6130773?hl=en-US HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q
2024-04-26 02:18:02 UTC	460	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/chrome/answer/6130773?hl=en Date: Fri, 26 Apr 2024 02:18:02 GMT Expires: Fri, 26 Apr 2024 02:18:02 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 251 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:02 UTC	251	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/chrome/answer/6130773?hl=en">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49800	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:02 UTC	1273	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 934 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=TuSgdWr5xicbZ-f0vi0_gf8PtUSTIN7IywtI4YN5aKS8WOT9vjnNfzjbL4syoy59EIf8Pap0JYM_LZWZmCH-FMyIDUmnraXKMvOrOyyQD5TfhdOc0znRNuduEUJDsZHM4R16g1HBlAsC-yK9IZJY27TbW1lT7iQLBlpjf3god0Q
2024-04-26 02:18:02 UTC	934	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 31 34 30 39 37 38 37 36 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],558,[["1714097876000",null,null,nu
2024-04-26 02:18:02 UTC	925	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=JBJmpzcU_PcPKTikrfdU3xgwuQVd4h_EJyravoAKTYuMLv5N9xCH7m3AkJMF2h-DyeGU93i7E3fn8wsr34iEY0gaxKV774Nr6pA6FIEsv8nfHhliNhX6BGMrdrj57s6-em8liDRTwsRp1l8LOuFBJKHCW7HzVwgan_KON6-2ylg; expires=Sat, 26-Oct-2024 02:18:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:02 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 26 Apr 2024 02:18:02 GMT Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:02 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49799	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:02 UTC	994	OUT	GET /chrome/answer/6130773?hl=en HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=JBJmpzcU_PcPKTikrfdU3xgwuQVd4h_EJyravoAKTYuMLv5N9xCH7m3AkJMF2h-DyeGU93i7E3fn8wsr34iEY0gaxKV774Nr6pA6FIEsv8nfHhliNhX6BGMrdrj57s6-em8liDRTwsRp1l8LOuFBJKHCW7HzVwgan_KON6-2ylg
2024-04-26 02:18:03 UTC	1487	IN	HTTP/1.1 200 OK P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:02 GMT Expires: Fri, 26 Apr 2024 02:18:02 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-BDNPwe63/pycCGYaNQOr' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; expires=Sat, 26-Oct-2024 02:18:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Set-Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; expires=Sat, 26-Oct-2024 02:18:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 41 4e 53 57 45 52 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 42 72 6f 77 73 65 20 43 68 72 6f 6d 65 20 61 73 20 61 20 67 75 65 73 74 20 2d 20 43 6f 6d 70 75 74 65 72 20 2d 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse Chrome as a guest - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta conten
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 Data Ascii: 'woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+0
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e Data Ascii: boto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;fon
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 Data Ascii: 2DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)format(
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c Data Ascii: 2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOl
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 Data Ascii: 2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/googlesans
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 2d 41 37 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d Data Ascii: )format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 63 43 47 59 61 4e 51 4f 72 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 42 44 4e 50 77 65 36 33 2f 70 79 63 43 47 59 61 4e 51 4f 72 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 61 34 5f 69 64 3d 27 47 2d 48 33 30 52 39 50 4e 51 46 4e 27 3b 76 61 72 20 68 63 5f 6e 61 6d 65 3d 27 63 68 72 6f 6d 65 27 3b 76 61 72 20 70 61 67 65 5f 74 79 70 65 3d 31 3b 76 61 72 20 69 73 5f 63 6f 6d 6d 75 6e 69 74 79 5f 70 61 67 65 3d 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 Data Ascii: cCGYaNQOr"></script><script nonce="BDNPwe63/pycCGYaNQOr">(function(){var ga4_id='G-H30R9PNQFN';var hc_name='chrome';var page_type=1;var is_community_page=false; window.dataLayer = window.dataLayer \|\| []; function gtag(){window.dataLayer.pu
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 6b 69 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 34 72 65 6d 3b 77 69 64 74 68 3a 61 75 74 6f 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 3a 30 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 30 20 30 2e 35 72 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 7d 2e 68 63 66 65 2d 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 68 63 66 65 2d 63 6f 6e 74 65 6e 74 20 6f 6c 2c 2e 68 63 66 65 2d 63 6f 6e 74 65 6e 74 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 62 61 73 Data Ascii: kip-link:focus{display:block;position:absolute;left:0;top:4rem;width:auto;height:auto;padding:0.5rem;margin:0 0.5rem;background-color:#ffffff}.hcfe-content{position:relative}.hcfe-content ol,.hcfe-content ul{margin:0;outline:0;padding:0;vertical-align:bas
2024-04-26 02:18:03 UTC	1487	IN	Data Raw: 75 6e 64 7b 68 65 69 67 68 74 3a 32 34 2e 38 37 35 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 33 2e 37 35 72 65 6d 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 70 72 69 6d 61 72 79 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6d 61 78 2d 77 69 64 74 68 3a 38 39 2e 31 32 35 72 65 6d 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 70 61 67 65 2d 77 69 64 74 68 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 2e 31 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 30 20 31 72 65 6d 3b 77 69 64 Data Ascii: und{height:24.875rem;position:absolute;top:3.75rem;width:100%}.primary-container{display:flex;justify-content:center;max-width:89.125rem;text-align:left;width:100%}.page-width-container{box-sizing:border-box;margin:0;max-width:75.125rem;padding:0 1rem;wid

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49811	142.250.217.193	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:04 UTC	799	OUT	GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:05 UTC	575	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 848 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Thu, 25 Apr 2024 22:25:51 GMT Expires: Fri, 26 Apr 2024 22:25:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 13934 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:05 UTC	680	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 04 00 00 00 4b 09 50 13 00 00 00 02 73 42 49 54 08 08 55 ec 46 04 00 00 03 09 49 44 41 54 48 89 a5 96 4f 6f 13 57 10 c0 7f f3 f6 d5 4b 43 5b 8b 58 75 5b 0c 58 4a c2 8d 3f e9 81 9e 7a 6b d4 20 35 67 d2 f4 5c d1 7e 82 7e 88 7e 03 22 38 f7 cf 15 0e b1 14 8e 3d 54 39 04 52 6e 0d 48 86 b8 16 ad e2 ca 4e 81 ec b2 bb d3 c3 6e f0 ae f7 ad 13 89 f1 c1 f6 be 99 df 9b f7 66 76 66 04 b7 f8 7a 9e 2b 5c ef 5d 8b 5b 5a 07 19 7a bd d6 16 1b ec c8 33 02 97 81 38 9e 59 5d 63 65 77 c9 ce 7a 80 a2 80 20 40 4c 34 58 d8 e4 ae fc 4c 74 3c e8 92 de e9 2e 4a 0d b4 62 5f 0d db db f2 2d 8f a6 81 ea fa e3 ee cd 9a 13 51 34 0a 59 58 97 1f 18 ba 41 b3 fa d3 93 2f ed b1 98 d4 2c 62 ae 23 df 30 28 83 66 f5 d7 ee Data Ascii: PNGIHDR$$KPsBITUFIDATHOoWKC[Xu[XJ?zk 5g\~~~"8=T9RnHNnfvfz+\][Zz38Y]cewz @L4XLt<.Jb_-Q4YXA/,b#0(f
2024-04-26 02:18:05 UTC	168	IN	Data Raw: 59 b2 6f cb 29 3e 2a f8 3b 2e b5 95 c5 5f 08 78 c5 4b a2 ac 8b 58 66 78 b7 78 24 20 62 fe 96 7c 0f 53 db 51 da ed 93 cc 1b 83 47 b9 8d b7 37 64 95 51 1e f4 d6 0d 72 9c 34 03 b9 d1 ee c4 27 08 7e ba 7f 4c bb 33 c6 50 c8 be 81 ac ce ad 87 27 ca a3 90 b9 75 59 1d 63 dc 63 cd ed ee a7 d3 c6 1a 82 0b 0f 8e 1b 6b 52 b1 ba c6 57 8f 97 bc 46 79 d0 8a f7 e7 37 b9 77 b2 41 2b 15 5f cf 71 95 e5 bf ae 45 2d ea c0 d0 f6 ce 6e d1 e1 a1 ec b9 47 bf ff 01 59 4e 22 d7 bd 86 39 16 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Yo)>*;._xKXfxx$ b\|SQG7dQr4'~L3P'uYcckRWFy7wA+_qE-nGYN"9IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49814	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:05 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:05 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49815	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:05 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:05 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49819	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:05 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:05 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49818	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:05 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:05 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49816	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	1586	OUT	POST /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802540,10802571,10802616,10802624,10802781,10803188,10803213,10803447,10803680 HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545
2024-04-26 02:18:05 UTC	552	OUT	Data Raw: 7b 22 63 6f 6d 6d 6f 6e 5f 70 61 72 61 6d 73 22 3a 7b 22 63 6f 6e 74 65 78 74 5f 70 61 72 61 6d 73 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 31 30 38 30 30 31 31 32 2c 31 37 30 36 35 33 38 2c 31 37 31 34 32 35 31 2c 31 30 38 30 30 35 36 31 2c 31 30 38 30 30 36 32 31 2c 31 30 38 30 30 36 37 32 2c 31 30 38 30 30 36 39 35 2c 31 30 38 30 30 37 30 30 2c 31 30 38 30 30 37 30 37 2c 31 30 38 30 30 37 33 38 2c 31 30 38 30 30 37 36 31 2c 31 30 38 30 30 37 36 33 2c 31 30 38 30 30 38 34 38 2c 31 30 38 30 30 38 38 30 2c 31 30 38 30 30 39 32 32 2c 31 30 38 30 30 39 35 30 2c 31 30 38 30 30 39 35 37 2c 31 30 38 30 31 30 33 32 2c 31 30 38 30 31 30 34 32 2c 31 30 38 30 31 31 35 30 2c 31 30 38 30 31 32 38 38 2c 31 30 38 30 31 33 34 35 2c 31 30 38 30 31 35 Data Ascii: {"common_params":{"context_params":{"experiment_id":[10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,108015
2024-04-26 02:18:05 UTC	857	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:05 GMT Expires: Fri, 26 Apr 2024 02:18:05 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:05 UTC	44	IN	Data Raw: 32 36 0d 0a 7b 22 68 65 6c 70 63 65 6e 74 65 72 22 3a 22 63 68 72 6f 6d 65 22 2c 22 75 73 65 72 5f 70 72 65 66 22 3a 5b 5d 7d 0d 0a Data Ascii: 26{"helpcenter":"chrome","user_pref":[]}
2024-04-26 02:18:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49817	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	547	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://support.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:05 UTC	519	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:05 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49822	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:05 UTC	1552	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 33 39 39 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097883990",null,null,null,
2024-04-26 02:18:06 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:06 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49823	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1091 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:05 UTC	1091	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 34 30 30 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097884005",null,null,null
2024-04-26 02:18:06 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:06 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49824	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1576 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:05 UTC	1576	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 34 30 37 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097884077",null,null,null,
2024-04-26 02:18:06 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:06 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49825	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:05 UTC	1158	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 34 30 38 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097884084",null,null,null
2024-04-26 02:18:06 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:06 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49826	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:05 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1554 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:05 UTC	1554	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 34 30 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097884097",null,null,null,
2024-04-26 02:18:06 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:06 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:06 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49827	192.178.50.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:06 UTC	521	OUT	GET /ctV0QX29Bg_C5H9X55WX5qRw0B6TtSqwM-aa0Ftx9kirVzMJU8NZmK0QUC724NV-2_E=w36-h36 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:06 UTC	573	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 848 X-XSS-Protection: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:11:53 GMT Expires: Sat, 27 Apr 2024 02:11:53 GMT Cache-Control: public, max-age=86400, no-transform Age: 373 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:06 UTC	682	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 24 00 00 00 24 08 04 00 00 00 4b 09 50 13 00 00 00 02 73 42 49 54 08 08 55 ec 46 04 00 00 03 09 49 44 41 54 48 89 a5 96 4f 6f 13 57 10 c0 7f f3 f6 d5 4b 43 5b 8b 58 75 5b 0c 58 4a c2 8d 3f e9 81 9e 7a 6b d4 20 35 67 d2 f4 5c d1 7e 82 7e 88 7e 03 22 38 f7 cf 15 0e b1 14 8e 3d 54 39 04 52 6e 0d 48 86 b8 16 ad e2 ca 4e 81 ec b2 bb d3 c3 6e f0 ae f7 ad 13 89 f1 c1 f6 be 99 df 9b f7 66 76 66 04 b7 f8 7a 9e 2b 5c ef 5d 8b 5b 5a 07 19 7a bd d6 16 1b ec c8 33 02 97 81 38 9e 59 5d 63 65 77 c9 ce 7a 80 a2 80 20 40 4c 34 58 d8 e4 ae fc 4c 74 3c e8 92 de e9 2e 4a 0d b4 62 5f 0d db db f2 2d 8f a6 81 ea fa e3 ee cd 9a 13 51 34 0a 59 58 97 1f 18 ba 41 b3 fa d3 93 2f ed b1 98 d4 2c 62 ae 23 df 30 28 83 66 f5 d7 ee Data Ascii: PNGIHDR$$KPsBITUFIDATHOoWKC[Xu[XJ?zk 5g\~~~"8=T9RnHNnfvfz+\][Zz38Y]cewz @L4XLt<.Jb_-Q4YXA/,b#0(f
2024-04-26 02:18:06 UTC	166	IN	Data Raw: 6f cb 29 3e 2a f8 3b 2e b5 95 c5 5f 08 78 c5 4b a2 ac 8b 58 66 78 b7 78 24 20 62 fe 96 7c 0f 53 db 51 da ed 93 cc 1b 83 47 b9 8d b7 37 64 95 51 1e f4 d6 0d 72 9c 34 03 b9 d1 ee c4 27 08 7e ba 7f 4c bb 33 c6 50 c8 be 81 ac ce ad 87 27 ca a3 90 b9 75 59 1d 63 dc 63 cd ed ee a7 d3 c6 1a 82 0b 0f 8e 1b 6b 52 b1 ba c6 57 8f 97 bc 46 79 d0 8a f7 e7 37 b9 77 b2 41 2b 15 5f cf 71 95 e5 bf ae 45 2d ea c0 d0 f6 ce 6e d1 e1 a1 ec b9 47 bf ff 01 59 4e 22 d7 bd 86 39 16 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: o)>*;._xKXfxx$ b\|SQG7dQr4'~L3P'uYcckRWFy7wA+_qE-nGYN"9IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49830	142.250.217.228	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:06 UTC	930	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:07 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:06 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49833	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:06 UTC	1260	OUT	GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802540,10802571,10802616,10802624,10802781,10803188,10803213,10803447,10803680 HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.1.1817944854.1714097885
2024-04-26 02:18:07 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:07 GMT Expires: Fri, 26 Apr 2024 02:18:07 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:07 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49838	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:07 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1583 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:07 UTC	1583	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 36 30 37 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097886078",null,null,null,
2024-04-26 02:18:07 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49840	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:07 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:07 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:07 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:07 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:07 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49839	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:07 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1126 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:07 UTC	1126	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 36 30 38 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097886081",null,null,null
2024-04-26 02:18:07 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:07 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:07 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49845	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:07 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:08 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:08 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:08 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49849	142.250.217.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:07 UTC	1024	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:08 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 121628 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 18:19:36 GMT Expires: Thu, 24 Apr 2025 18:19:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 115112 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:08 UTC	339	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 7d 7d 3b 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c Data Ascii: }};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 Data Ascii: on"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="und
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 2e 50 66 29 7b 74 68 69 73 2e 50 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d Data Ascii: .Pf){this.Pf=[];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 74 6f 74 79 70 65 2e 6e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 Data Ascii: totype.nea=function(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)ret
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 3b 74 68 69 73 2e 73 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 Data Ascii: ;this.sV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b Data Ascii: ct.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d Data Ascii: b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 Data Ascii: m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(f
2024-04-26 02:18:08 UTC	1255	IN	Data Raw: 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d Data Ascii: urn!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49851	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:08 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:09 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:08 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:09 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:09 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49853	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:09 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1567 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:09 UTC	1567	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 38 31 32 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097888120",null,null,null,
2024-04-26 02:18:09 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:09 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:09 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49855	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:09 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:09 UTC	1107	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 38 31 32 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097888122",null,null,null
2024-04-26 02:18:09 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:09 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:09 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49854	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:09 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:09 UTC	1107	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 38 31 32 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097888124",null,null,null
2024-04-26 02:18:09 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:09 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:09 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49856	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:09 UTC	1803	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802624%2C10802781%2C10803188%2C10803213%2C10803447%2C10803680&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 166 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:09 UTC	166	OUT	Data Raw: 5b 5b 22 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 22 2c 22 63 68 72 6f 6d 65 22 2c 31 2c 31 2c 22 65 6e 22 2c 22 38 38 31 32 30 35 35 37 34 22 5d 2c 5b 6e 75 6c 6c 2c 22 42 72 6f 77 73 65 20 43 68 72 6f 6d 65 20 61 73 20 61 20 67 75 65 73 74 22 2c 22 36 31 33 30 37 37 33 22 5d 2c 6e 75 6c 6c 2c 31 5d Data Ascii: [["8919216180560458382-NA","https://support.google.com/chrome/answer/6130773?hl=en","chrome",1,1,"en","881205574"],[null,"Browse Chrome as a guest","6130773"],null,1]
2024-04-26 02:18:09 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:09 GMT Expires: Fri, 26 Apr 2024 02:18:09 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:09 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49857	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:09 UTC	1157	OUT	GET /favicon.ico HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:09 UTC	464	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:09 GMT Expires: Fri, 26 Apr 2024 02:18:09 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:09 UTC	791	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d Data Ascii: 1536 h& ( 0.v]X:X:rY
2024-04-26 02:18:09 UTC	1255	IN	Data Raw: 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a eb ff 3a 47 ea ff 5a 66 ee ff a2 a9 f5 ff f9 f9 fe ff ff ff ff ff fd fd fd c1 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J:GZf
2024-04-26 02:18:09 UTC	1255	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 Data Ascii: 4S4S4S4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT
2024-04-26 02:18:09 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c5 a5 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd ed ff ff ff ff ff ff ff ff ff ff ff ff 1c c2 fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 59 d3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff Data Ascii: BBBBBBBBBBBYBBBBBBBBBBBF!
2024-04-26 02:18:09 UTC	882	IN	Data Raw: fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 e7 fc ff 78 81 f1 ff 36 44 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 36 44 ea ff 76 7f f1 ff e5 e7 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 32 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e4 e6 fc ff 9e a5 f5 ff 6a 74 f0 ff 48 55 ec ff 38 46 ea ff 37 45 ea ff 46 53 ec ff 68 72 ef ff 9a a1 f5 ff e2 e4 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: x6D5C5C5C5C5C5C5C5C6Dv$2jtHU8F7EFShr0
2024-04-26 02:18:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49858	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:09 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:09 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:09 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:09 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:09 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49860	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:10 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1583 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:10 UTC	1583	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 39 30 39 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097889098",null,null,null,
2024-04-26 02:18:10 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:10 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:10 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49861	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:10 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1126 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:10 UTC	1126	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 38 39 31 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097889100",null,null,null
2024-04-26 02:18:10 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:10 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:10 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49862	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:10 UTC	1389	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802624%2C10802781%2C10803188%2C10803213%2C10803447%2C10803680&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:10 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:10 GMT Expires: Fri, 26 Apr 2024 02:18:10 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:10 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49859	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:10 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:10 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:10 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:10 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:10 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49863	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:10 UTC	851	OUT	GET /favicon.ico HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:10 UTC	464	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:10 GMT Expires: Fri, 26 Apr 2024 02:18:10 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:10 UTC	791	IN	Data Raw: 31 35 33 36 0d 0a 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d Data Ascii: 1536 h& ( 0.v]X:X:rY
2024-04-26 02:18:10 UTC	1255	IN	Data Raw: 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a eb ff 3a 47 ea ff 5a 66 ee ff a2 a9 f5 ff f9 f9 fe ff ff ff ff ff fd fd fd c1 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 9d ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 99 fe fe fe 09 00 00 00 00 00 00 00 00 00 00 Data Ascii: 2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J:GZf
2024-04-26 02:18:10 UTC	1255	IN	Data Raw: 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 56 a9 37 ff b1 d2 9b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 Data Ascii: 4S4S4S4S4S4V7S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT
2024-04-26 02:18:10 UTC	1255	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fa c5 a5 ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f9 fd fd fd ed ff ff ff ff ff ff ff ff ff ff ff ff 1c c2 fb ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 59 d3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff Data Ascii: BBBBBBBBBBBYBBBBBBBBBBBF!
2024-04-26 02:18:10 UTC	882	IN	Data Raw: fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e5 e7 fc ff 78 81 f1 ff 36 44 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 36 44 ea ff 76 7f f1 ff e5 e7 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 32 fd fd fd eb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff e4 e6 fc ff 9e a5 f5 ff 6a 74 f0 ff 48 55 ec ff 38 46 ea ff 37 45 ea ff 46 53 ec ff 68 72 ef ff 9a a1 f5 ff e2 e4 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea ff ff ff 30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: x6D5C5C5C5C5C5C5C5C6Dv$2jtHU8F7EFShr0
2024-04-26 02:18:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49864	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:10 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:11 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:11 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:11 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:11 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49865	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:11 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:12 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:12 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:12 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:12 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49867	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:12 UTC	1210	OUT	GET /accounts?hl=en-US&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:12 UTC	462	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts/?hl=en&p=account_iph Date: Fri, 26 Apr 2024 02:18:12 GMT Expires: Fri, 26 Apr 2024 02:18:12 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 257 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:12 UTC	257	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 26 61 6d 70 3b 70 3d 61 63 63 6f 75 6e 74 5f 69 70 68 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts/?hl=en&p=account_iph">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49866	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:12 UTC	1208	OUT	GET /accounts/?hl=en&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:12 UTC	533	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&p=account_iph&rd=1 X-Robots-Tag: follow,index Date: Fri, 26 Apr 2024 02:18:12 GMT Expires: Fri, 26 Apr 2024 02:18:12 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 308 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:12 UTC	308	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 61 6d 70 3b 76 69 73 69 74 5f 69 64 3d 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49871	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:12 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:12 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:12 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:12 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:12 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49872	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:13 UTC	1251	OUT	GET /accounts?hl=en&visit_id=638496946828842109-1905716545&p=account_iph&rd=1 HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:13 UTC	533	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph X-Robots-Tag: follow,index Date: Fri, 26 Apr 2024 02:18:13 GMT Expires: Fri, 26 Apr 2024 02:18:13 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 308 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:13 UTC	308	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 61 6d 70 3b 76 69 73 69 74 5f 69 64 3d 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49873	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:13 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:13 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:13 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:13 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:13 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49874	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:13 UTC	1251	OUT	GET /accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _ga_H30R9PNQFN=GS1.1.1714097885.1.0.1714097885.0.0.0; _ga=GA1.3.1817944854.1714097885; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1
2024-04-26 02:18:14 UTC	729	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:14 GMT Expires: Fri, 26 Apr 2024 02:18:14 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-QY0xk8hAu1QZIjQkimxI' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:14 UTC	526	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 48 4f 4d 45 50 41 47 45 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 33 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b Data Ascii: m-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 Data Ascii: U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+202
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b Data Ascii: sA.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 Data Ascii: ace{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-f
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 Data Ascii: t-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 77 70 35 4d 4b 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 Data Ascii: wp5MKg.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:400
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 62 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 55 39 34 59 74 38 43 77 5a 2d 50 77 2e 77 6f 66 66 32 29 66 Data Ascii: 'woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94Yt8CwZ-Pw.woff2)f
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 68 41 75 31 51 5a 49 6a 51 6b 69 6d 78 49 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 43 6f 6c 6f 72 2b 45 6d 6f 6a 69 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 6e 63 65 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 51 59 30 78 6b 38 68 41 75 31 51 5a 49 6a 51 6b 69 6d 78 49 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 51 59 30 78 6b 38 68 41 75 31 51 5a 49 6a 51 6b 69 6d 78 49 22 3e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 66 6f 6e 74 2d 67 73 74 27 29 2e 61 64 64 45 76 65 6e 74 4c 69 Data Ascii: hAu1QZIjQkimxI"><link href="https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap" as="style" id="font-nce" rel="preload" nonce="QY0xk8hAu1QZIjQkimxI"><script nonce="QY0xk8hAu1QZIjQkimxI">document.getElementById('font-gst').addEventLi
2024-04-26 02:18:14 UTC	1255	IN	Data Raw: 74 79 70 65 2c 0a 20 20 20 20 20 20 20 20 20 20 27 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 27 3a 20 69 73 5f 63 6f 6d 6d 75 6e 69 74 79 5f 70 61 67 65 20 3f 20 27 54 61 69 6c 77 69 6e 64 27 20 3a 20 27 48 65 6c 70 20 43 65 6e 74 65 72 27 2c 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 68 74 6d 6c 2e 68 63 66 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 68 74 6d 6c 2e 68 63 66 65 2e 65 6d 62 65 64 64 65 64 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 7d 74 61 62 6c 65 2c 63 61 70 74 69 6f Data Ascii: type, 'content_group': is_community_page ? 'Tailwind' : 'Help Center', }); })();</script><style>html{-webkit-text-size-adjust:100%}html.hcfe{background-color:#ffffff;overflow-y:scroll}html.hcfe.embedded{overflow-y:auto}table,captio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49875	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:14 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:14 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:14 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:14 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:14 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49876	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:14 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:15 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:15 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:15 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:15 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49879	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:15 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:15 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:15 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:15 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:15 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49880	142.250.217.193	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:15 UTC	791	OUT	GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:16 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1393 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 01:33:10 GMT Expires: Sat, 27 Apr 2024 01:33:10 GMT Cache-Control: public, max-age=86400, no-transform Age: 2706 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:16 UTC	724	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 fe 49 44 41 54 78 da ec 5b 3b 6c 13 41 10 1d 3b 31 21 40 c0 40 04 11 bf 84 02 90 40 22 20 8a 14 80 f8 34 34 7c 4b 44 01 a6 80 12 02 12 0d 45 e2 82 86 06 28 41 22 9f 82 9a f0 69 68 20 11 a4 a0 40 c4 48 14 09 42 b2 f9 29 81 00 07 09 d8 c1 89 c3 be d3 06 2e e6 3e 7b 77 7b eb 0b f1 48 ab b3 6e c7 3b 3b 6f 67 f6 76 66 77 89 ca 54 a6 59 4d 11 d5 02 f7 5e 1a 6d 60 8f dd ac 1c 62 e5 30 7f dd c5 ca 1d 56 ba 1f 5e 5c 90 fe ef 00 60 4a 6f e1 ca 42 e9 2d 0e ec 7d 1c 8c 2e 06 46 df 8c 05 80 Data Ascii: PNGIHDR@@iqpHYstEXtSoftwareAdobe ImageReadyqe<IDATx[;lA;1!@@@" 44\|KDE(A"ih @HB).>{w{Hn;;ogvfwTYM^m`b0V^\`JoB-}.F
2024-04-26 02:18:16 UTC	669	IN	Data Raw: 16 8d 05 2c 9d 2d 1a 9b eb da 12 5a db 5e a8 18 5c 4d 89 05 84 98 fa 64 02 60 b9 f6 8c 54 56 95 4c 43 07 d9 19 99 2e 60 89 a6 48 c6 06 c1 cd b6 0d 4b 59 59 42 eb d7 2c b4 8c f8 e0 ff 03 6f be d3 b3 fe 2f ac 7c 76 9c 0c 1d 64 0b 59 80 f0 d6 98 dd e6 c8 48 e6 a9 e9 a2 e4 00 0b 71 11 e6 42 71 2f 04 20 30 39 de eb fd 37 ce 40 ce b0 a6 be c9 f2 bf 22 9b 22 6e 13 22 dd 64 b1 01 3a 27 be 92 72 c3 af a7 8d 78 cb c9 46 cf 8a 4f 11 fe 8f 02 10 93 6d a9 69 16 01 99 0e 7d 95 be 0e e8 b1 aa 98 53 53 f7 27 67 37 95 f4 f0 ab 7c 31 10 c6 64 09 64 41 a6 97 be fa 01 c0 f2 80 02 3a 54 15 5f a5 ff 3e 7f 74 a3 ab c8 cf 4d 84 88 b6 41 90 e5 90 24 ed 92 0e 00 df 76 4e 5b d5 23 85 8d 7c 9d cc 91 37 b3 04 c8 80 2c 1b 4a bb d9 22 77 bb 14 ee b4 ab 44 e6 76 34 17 dc 46 32 da 86 0c Data Ascii: ,-Z^\Md`TVLC.`HKYYB,o/\|vdYHqBq/ 097@""n"d:'rxFOmi}SS'g7\|1ddA:T_>tMA$vN[#\|7,J"wDv4F2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49882	142.250.217.193	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	795	OUT	GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:16 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10420 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 23:59:17 GMT Expires: Fri, 26 Apr 2024 23:59:17 GMT Cache-Control: public, max-age=86400, no-transform Age: 8339 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:16 UTC	723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ed 9d 7b 58 53 57 d6 ff bf 24 5c 02 84 00 16 84 d4 a0 c7 0b 2a b7 16 9d 97 12 0a 5a 3a 55 ac d6 b1 b6 42 41 9d 51 06 46 a7 37 2b a8 33 d3 e9 8d 6a db a9 be af 56 1d db 4e c7 0b b5 9d 5f 2f 56 18 6d 75 aa e2 8c a5 f5 42 a8 9d 8a b5 e2 15 3d ca b1 18 40 20 17 20 10 03 bf 3f 42 2c 48 38 09 c9 39 27 41 f6 e7 79 7c 24 c9 39 7b af 87 f0 3d 6b af bd d7 5e db a3 b3 b3 13 04 02 c1 3a 22 57 1b 40 20 b8 33 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 Data Ascii: PNGIHDRXpHYs~ IDATx{XSW$\*Z:UBAQF7+3jVN_/VmuB=@ ?B,H89'Ay\|$9{=k^:"W@ 3D D D D D D D D D D D D
2024-04-26 02:18:16 UTC	1255	IN	Data Raw: 11 11 cf 57 57 57 4f 9b 3a 75 2a 32 32 32 dc d2 53 f4 17 8b 67 d9 ba 75 ab e9 f2 e5 cb 37 87 0c 19 f2 1e f1 2a f6 33 60 05 d2 7c 68 56 2a 80 d9 fe bf fc 22 cf 99 76 28 8a 4a 95 cb e5 ef 69 b5 da 31 99 99 99 e2 9c 9c 1c 28 14 0a 6e 8c 74 33 54 2a 15 76 ee dc 89 e2 e2 62 44 44 44 1c a8 ae ae 7e 92 08 85 9d 81 2c 90 57 61 16 48 bc ad 6b ad d1 4d 18 91 8b 16 2d 12 e5 e4 e4 40 26 93 71 6b a4 9b c2 30 0c d6 af 5f 4f 84 62 07 03 59 20 34 80 11 00 46 fa ff f2 0b da de fb 28 8a 8a 1f 32 64 c8 f6 b6 b6 b6 b8 c1 26 8c db e9 2e 94 90 90 90 f7 eb eb eb 97 91 a9 e2 9e 0c c8 54 93 ae e1 d5 88 ae 97 d9 f6 dc 43 51 54 50 4a 4a ca 47 00 4e 2c 58 b0 e0 de b2 b2 32 51 5e 5e de a0 15 07 00 28 14 0a ac 5b b7 0e 47 8e 1c c1 e8 d1 a3 7f eb e3 e3 73 7d c2 84 09 7f 76 b5 5d ee c4 Data Ascii: WWWO:u222Sgu73`\|hV"v(Ji1(nt3TvbDDD~,WaHkM-@&qk0_ObY 4F(2d&.TCQTPJJGN,X2Q^^([Gs}v]
2024-04-26 02:18:16 UTC	1255	IN	Data Raw: 8c 4c dd b1 63 47 8f f7 db ce 6c c0 cd 9a 43 3d de 93 c4 bd 00 71 28 3f d5 0d dd 59 18 b7 73 bb 50 2c 25 7f fe f3 9f ff e0 ca 95 2b d0 6a b5 10 8b c5 f0 f7 f7 87 a5 00 1e 9f 55 21 19 86 c1 b4 69 d3 3a fc fc fc 96 0c d4 a0 dd 2d 05 32 61 c2 84 3f b7 b7 b7 bf 5e 56 56 26 ba 7d 2f 47 e7 cd 66 b4 1e cb 45 e7 cd 16 00 e6 a0 5c 32 f1 2f 9c db 70 b5 99 c1 c1 9f be 11 2c be e0 92 bb 0d 43 71 e0 af 5f e0 d8 e1 63 10 8b c5 30 99 4c 56 af 13 8b c5 f0 f4 f4 c4 fc f9 f3 c1 d7 fe fc 92 92 12 2c 5d ba d4 d8 da da 3a 76 20 c6 23 6e 27 10 8a a2 28 5f 5f df f3 1b 37 6e f4 ea ab 70 5b 77 2f 22 99 f0 06 a7 79 56 06 53 1b 8e d4 96 e3 78 fd c0 9c 80 39 b6 a5 14 a7 be f8 be df f7 c9 64 32 6c de bc 99 17 8f b2 6a d5 2a 14 17 17 d3 27 4f 9e 1c c9 79 e3 3c e3 76 e9 ee a1 a1 a1 7b Data Ascii: LcGlC=q(?YsP,%+jU!i:-2a?^VV&}/GfE\2/p,Cq_c0LV,]:v #n'(__7np[w/"yVSx9d2lj*'Oy<v{
2024-04-26 02:18:16 UTC	1255	IN	Data Raw: e7 3c ee b8 71 a9 0e 1f cc ff 1b 54 85 df c0 a0 6d e5 5d 1c b7 53 51 7c 1c 1f cc fb 1b 6e 5c aa c3 5d 23 f9 2f ea f0 d0 43 fc d6 0f 4b 4b 4b 83 af af af 3f 45 51 b3 79 ed c8 41 5c 22 90 d6 d6 d6 99 b9 b9 b9 bc f6 a1 69 d7 e2 f8 0d c7 32 5b fb a2 bd b9 0d 9f ff e9 53 18 b4 ad 9c b6 db 2f 3a 01 83 ae 15 45 4b ff 81 36 bd 81 f7 ee f8 dc 50 65 21 2b 2b cb 53 a1 50 b8 e5 f9 23 82 0b 84 a2 a8 ec 21 43 86 78 71 bd f8 74 3b 07 6b be e1 7c 68 b5 6f d5 2e 18 0d 46 4e db 74 06 cd 4f fc ae b1 c5 c7 c7 0b 72 c6 4a 7a 7a 3a 18 86 b9 cf 1d 83 75 c1 05 a2 50 28 9e 5a b4 68 11 af fd 5e 6d 66 78 49 40 6c ae b7 6f dd 21 20 20 00 4f 3e f9 24 5e 7a e9 25 88 c5 62 ce ed 10 02 0f 91 07 9e 7f fe 79 41 fa 52 28 14 48 4c 4c 44 68 68 e8 3c 41 3a ec 07 82 0a 84 a2 a8 20 86 61 ee 63 Data Ascii: <qTm]SQ\|n\]#/CKKK?EQyA\"i2[S/:EK6Pe!++SP#!Cxqt;k\|ho.FNtOrJzz:uP(Zh^mfxI@lo! O>$^z%byAR(HLLDhh<A: ac
2024-04-26 02:18:16 UTC	1255	IN	Data Raw: 2c e1 a7 53 d5 4e dd af 31 3a 27 30 7b 89 8e 8e 46 53 53 d3 78 41 3a b3 01 ef 11 a4 10 65 5d b8 d8 f7 d1 d2 d8 8c d1 7e 23 fa 8c 37 ac f1 f0 c3 0f 03 30 c7 1a 63 c6 8c e9 f3 ba d9 b3 67 43 2a 95 62 cd 9a 35 30 1a 5d b7 9f a4 ea 9b 73 18 f7 50 8c c3 f7 db 73 94 35 17 c8 64 32 88 44 a2 10 41 3a b3 81 10 8f 35 ea de 7b ef e5 ad 80 13 57 c3 ab 1b 97 eb ec 1a 56 75 47 2a 95 22 3d 3d 9d 55 1c 16 a6 4c 99 82 5d bb 76 21 3d 3d 1d 21 21 e6 ef 5e 2c 16 c3 d7 d7 d7 21 7b 3b 3a 3a 10 12 12 0a 5f 3f 3f 84 84 84 a2 a3 c3 76 b9 21 f5 39 f6 53 82 6d de cf 91 a7 b6 45 74 74 34 d4 6a 75 98 20 9d d9 40 90 39 48 89 44 d2 7b ec e1 66 e8 69 0d 60 df c8 ca 61 a4 52 29 9e 7d f6 59 3c fb ac 59 88 d7 af 5f c7 f5 eb d7 31 66 cc 18 cc 9c 39 b3 1f ed 04 60 d4 e8 d1 58 9a 97 8f d8 d8 Data Ascii: ,SN1:'0{FSSxA:e]~#70cgCb50]sPs5d2DA:5{WVuG"==UL]v!==!!^,!{;::_??v!9SmEtt4ju @9HD{fi`aR)}Y<Y_1f9`X
2024-04-26 02:18:16 UTC	1255	IN	Data Raw: fe 8e 62 96 88 7d 78 f9 02 d3 d2 d2 50 58 58 88 91 23 47 22 2b 2b 0b 59 59 59 98 31 63 06 66 cc 98 71 eb 73 77 60 cc 98 31 bd 0a 43 78 78 78 e0 d1 37 33 9d aa a8 d8 9d 11 52 e1 16 08 2b 2b 2b 11 14 14 e4 5c 9d 22 8e 10 24 06 f1 f6 f6 66 18 86 b1 9e a3 cd 11 23 a4 0a ce 6a 37 d5 d6 d6 62 e8 d0 a1 48 4b 4b 43 5a 5a 1a 18 86 e9 71 10 8e 10 07 5b f6 87 f0 f0 70 24 26 26 a2 ac ac 0c 00 20 f1 f7 c5 a4 25 53 10 16 dd 3b 99 d1 51 e2 82 a3 38 6b cb 16 a7 4f 9f c6 85 0b 17 8e 08 d6 21 0b 82 08 44 26 93 1d 61 18 c6 f1 6a 01 76 10 17 1c 85 e3 f5 ce d7 3b 1e 32 7c 08 8e 1e 3f 86 c7 1e f9 b9 72 bb 42 a1 10 e4 30 4b 67 f8 cb 5f fe 82 8a 8a 0a 1c 28 3d 80 9b e3 c5 18 79 bf 73 8b 82 dd 09 f4 0a 10 74 0d 84 a6 e9 76 b8 49 f1 6a 41 86 58 55 55 55 2a cb d3 8d 2f c2 24 a1 08 Data Ascii: b}xPXX#G"++YYY1cfqsw`1Cxxx73R+++\"$f#j7bHKKCZZq[p$&& %S;Q8kO!D&ajv;2\|?rB0Kg_(=ystvIjAXUUU*/$
2024-04-26 02:18:16 UTC	1255	IN	Data Raw: fc e7 40 d6 df df 1f 6f bf fd 36 22 23 23 39 b3 61 fb 27 1f a2 69 4c 2b c2 c6 cb 1d 6e c3 47 ec 8d f9 a3 e6 f4 b9 6a 5e 52 52 82 c5 8b 17 f7 ab cd b4 b4 34 14 14 14 60 d8 b0 fe 4f bb 5f bb 76 0d cb 97 2f 47 3f 27 75 36 d2 34 cd e9 5a 89 4b 04 12 1f 1f 5f f4 d0 43 0f cd 59 b7 6e 9d 60 7d ee 65 0e e2 54 a3 f0 33 2e 5f e4 ef 40 f5 d9 2b 00 cc fb 36 56 af 5e 6d f5 34 5c 67 d8 f5 af dd b8 18 70 15 8a 09 94 c3 6d 3c a2 98 da 67 60 de df a1 95 4c 26 43 41 41 01 e6 cc 99 e3 b0 3d 16 0a 0b 0b b1 6a d5 aa fe dc f2 20 4d d3 a5 4e 77 dc 85 4b ea 62 35 35 35 ad 28 2e 2e 16 74 ef f1 14 f9 64 41 77 c5 59 f0 f1 32 cf a4 a5 a4 a4 e0 ed b7 df e6 5c 1c 00 90 9c 70 3f 1a ae 3a 5e 05 32 21 24 9e 75 d6 aa b0 b0 b0 5f e2 d8 b1 63 07 27 e2 00 80 9c 9c 9c fe ee bf 79 95 93 8e bb Data Ascii: @o6"##9a'iL+nGj^RR4`O_v/G?'u64ZK_CYn`}eT3._@+6V^m4\gpm<g`L&CAA=j MNwKb555(..tdAwY2\p?:^2!$u_c'y
2024-04-26 02:18:16 UTC	1255	IN	Data Raw: e4 c4 4c d6 d8 00 00 08 5a 49 44 41 54 bc 52 a9 f4 72 97 ea e9 80 59 28 f7 04 47 61 94 7e 18 de fa 72 ad 4b 6d 29 2f 2f e7 72 bd a0 4f 86 0d 1b 66 33 07 8b cd 53 28 14 0a 5e 3c 49 3f da 74 7a 6f 88 db 09 84 a6 69 3a 21 21 21 2f 3f 3f 7f 53 59 59 99 88 2d 08 74 05 0f ff 4f 1a 1e 3f 32 1b af bd f6 1a d2 d3 d3 39 4d cc 63 e3 cc 99 33 28 29 29 41 51 51 11 67 7f 74 f1 f1 ec 4b 05 0a 85 c2 29 81 a4 a7 a7 83 6d 34 90 95 95 c5 da 76 41 41 81 d5 df af bd 67 5e 72 91 b0 e8 d2 54 13 36 26 4e 9c f8 55 64 64 64 ea 8e 1d 3b 5c 6d 4a 2f c6 8d 1b 87 f3 e7 cf 03 30 ff 11 29 95 ca 5b ff 1c d9 1c 64 8d 6b d7 ae dd 9a ce 54 a9 54 bc 3c 89 2f 5f be cc 9a 4a b2 7c f9 72 bb d6 4b fa 4a 33 d1 e9 74 48 4e 4e 76 28 58 57 28 14 38 72 c4 fa 09 08 8b 17 2f b6 67 7d e5 0a 4d d3 54 bf Data Ascii: LZIDATRrY(Ga~rKm)//rOf3S(^<I?tzoi:!!!/??SYY-tO?29Mc3())AQQgtK)m4vAAg^rT6&NUddd;\mJ/0)[dkTT</_J\|rKJ3tHNNv(XW(8r/g}MT
2024-04-26 02:18:16 UTC	912	IN	Data Raw: 8e 15 08 00 50 14 45 0d 19 32 64 77 5b 5b 5b dc fa f5 eb 45 ee b4 85 d7 5d d1 6a b5 28 2c 2c c4 86 0d 1b 20 97 cb 37 96 95 95 d9 5d 9b 87 a2 a8 57 01 e4 c1 7c 4c 33 d7 7c 00 20 8f af 60 bc 2f ee 68 81 58 48 48 48 78 5a ab d5 be 15 1f 1f ef b3 6e dd 3a b8 53 46 b0 3b a1 52 a9 90 9f 9f df d1 d6 d6 76 ad a1 a1 61 96 23 43 18 8a a2 82 00 64 c3 2c 14 67 3d 8a 06 66 cf b4 81 a6 69 da c9 b6 1c 62 50 08 04 30 7f 71 0a 85 e2 1d 86 61 e6 e5 e5 e5 21 27 27 87 0c bb ba 60 18 06 cb 97 2f 47 45 45 45 9b 9f 9f df ca 13 27 4e bc c9 45 bb 14 45 c5 03 98 0d 73 40 6f 6f 29 d0 93 30 ef e5 28 e5 7a 55 dc 11 06 8d 40 2c 50 14 15 3f 64 c8 90 ed 6d 6d 6d 71 8b 16 2d 12 0d 66 a1 30 0c 83 f5 eb d7 a3 b8 b8 18 21 21 21 ef d7 d7 d7 2f e3 73 08 43 99 f7 f8 52 5d 2f 53 bb fe af 80 b9 Data Ascii: PE2dw[[[E]j(,, 7]W\|L3\| `/hXHHHxZn:SF;Rva#Cd,g=fibP0qa!''`/GEEE'NEEs@oo)0(zU@,P?dmmmq-f0!!!/sCR]/S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49887	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1569 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:16 UTC	1569	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 36 37 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 61 63 63 6f 75 6e 74 73 5c 22 2c 5c 22 65 6e 5c 22 2c 5b 5b 35 35 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 6e 5c 22 2c 5b 5b 5c 22 43 6f 72 65 5f 4d 6f 64 75 6c 61 72 5f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],860,[["1714097895672",null,null,null,null,null,null,"[[\"accounts\",\"en\",[[55]],null,null,null,null,null,null,null,null,\"en\",[[\"Core_Modular_
2024-04-26 02:18:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:16 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49886	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1099 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:16 UTC	1099	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 36 37 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 32 2c 33 2c 36 32 37 37 37 32 33 32 34 5d 2c 5b 6e 75 6c 6c 2c 31 5d 2c 5b 5c 22 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 5c 22 2c 5c 22 32 30 31 30 38 31 39 30 35 32 5c 22 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5c 22 38 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],1323,[["1714097895678",null,null,null,null,null,null,"[[[2,3,627772324],[null,1],[\"638496946828842109-1905716545\",\"2010819052\",null,0,null,\"8
2024-04-26 02:18:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49890	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1671 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:16 UTC	1671	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 37 35 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097895753",null,null,null,
2024-04-26 02:18:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49888	142.250.217.193	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	790	OUT	GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1 Host: lh4.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:17 UTC	532	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3279 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 22:20:15 GMT Expires: Fri, 26 Apr 2024 22:20:15 GMT Cache-Control: public, max-age=86400, no-transform Age: 14282 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:17 UTC	723	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 06 00 00 00 55 ed b3 47 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRHHUGtEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: 6f 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 42 46 35 43 35 37 38 32 39 37 46 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 42 46 35 43 35 37 38 32 39 37 46 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 2a 9b 50 3d 00 00 08 fd 49 44 41 54 78 da ec 9c 5b 6c db d6 19 c7 3f 4a d6 cd b2 e4 Data Ascii: oshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*P=IDATx[l?J
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: 80 16 17 e6 37 3e 06 e5 85 72 f7 5d a4 ba 71 5b 70 2a 52 73 1e 3f 01 94 2f 66 51 ae e9 78 bd ce b9 d7 e4 f4 4f 1b 1f 83 f4 3d 13 9d df 10 55 d1 bd 55 55 38 b4 7a 24 38 a2 ac 9e 62 0e ae 5d bb 0e 3d 3d bd 8e c1 99 98 98 68 ce 60 75 af 5f 86 42 26 a2 28 a2 1a ba b7 b2 0c 47 a3 20 1e 3c 29 f9 4e 8f 8f ff e8 48 80 5e 5e 5e 81 1b 37 a6 9b d3 cd 1f 0b 15 0c a1 a4 38 19 cc 1a 5f 06 63 19 0e 06 43 81 7a 6c e5 b2 34 c7 83 57 5c 19 6c 24 50 63 38 97 7f b8 dc bc 6e fe c9 3d 1d f0 c1 dd 72 7c d1 bb 17 ab cc b3 0a 04 4b 70 c8 23 6c 11 83 e2 21 3c 3f ae b6 8b cb a6 e9 74 5a 2a 9c e1 02 58 bd 6e e5 94 72 2c 2b 68 b8 c7 cd 9c 08 97 95 42 bb 92 aa 18 45 35 eb bc 45 38 38 ee 28 70 86 16 c6 c0 57 58 97 36 07 02 01 69 8e ab 81 37 6f 4c d4 a5 24 bc 6f 3e cf 82 d3 66 a9 a2 f8 Data Ascii: 7>r]q[pRs?/fQxO=UUU8z$8b]==h`u_B&(G <)NH^^^78_cCzl4W\l$Pc8n=r\|Kp#l!<?tZXnr,+hBE5E88(pWX6i7oL$o>f
2024-04-26 02:18:17 UTC	46	IN	Data Raw: 12 40 8b 58 fb 3f 2f b4 01 b5 01 b5 01 b5 01 b5 01 b5 01 fd df da ff 04 18 00 5d b4 f5 de a2 20 13 53 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: @X?/] SIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49889	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1204 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:16 UTC	1204	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 37 35 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097895759",null,null,null
2024-04-26 02:18:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49891	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	1880	OUT	POST /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097894.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:16 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-04-26 02:18:17 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:17 GMT Expires: Fri, 26 Apr 2024 02:18:17 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49892	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1672 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:16 UTC	1672	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 38 34 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097895840",null,null,null,
2024-04-26 02:18:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49893	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:16 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1246 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:16 UTC	1246	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 38 34 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097895845",null,null,null
2024-04-26 02:18:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49897	192.178.50.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:17 UTC	513	OUT	GET /o9U8AvPuX9gkIYtYfNmH-_wBdTfOJ7jb0VwbLWWbERzml7oTPngODhKv2Br7A64=w64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:17 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 1393 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 00:33:43 GMT Expires: Sat, 27 Apr 2024 00:33:43 GMT Cache-Control: public, max-age=86400, no-transform Age: 6274 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:17 UTC	724	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 06 00 00 00 aa 69 71 de 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 fe 49 44 41 54 78 da ec 5b 3b 6c 13 41 10 1d 3b 31 21 40 c0 40 04 11 bf 84 02 90 40 22 20 8a 14 80 f8 34 34 7c 4b 44 01 a6 80 12 02 12 0d 45 e2 82 86 06 28 41 22 9f 82 9a f0 69 68 20 11 a4 a0 40 c4 48 14 09 42 b2 f9 29 81 00 07 09 d8 c1 89 c3 be d3 06 2e e6 3e 7b 77 7b eb 0b f1 48 ab b3 6e c7 3b 3b 6f 67 f6 76 66 77 89 ca 54 a6 59 4d 11 d5 02 f7 5e 1a 6d 60 8f dd ac 1c 62 e5 30 7f dd c5 ca 1d 56 ba 1f 5e 5c 90 fe ef 00 60 4a 6f e1 ca 42 e9 2d 0e ec 7d 1c 8c 2e 06 46 df 8c 05 80 Data Ascii: PNGIHDR@@iqpHYstEXtSoftwareAdobe ImageReadyqe<IDATx[;lA;1!@@@" 44\|KDE(A"ih @HB).>{w{Hn;;ogvfwTYM^m`b0V^\`JoB-}.F
2024-04-26 02:18:17 UTC	669	IN	Data Raw: 16 8d 05 2c 9d 2d 1a 9b eb da 12 5a db 5e a8 18 5c 4d 89 05 84 98 fa 64 02 60 b9 f6 8c 54 56 95 4c 43 07 d9 19 99 2e 60 89 a6 48 c6 06 c1 cd b6 0d 4b 59 59 42 eb d7 2c b4 8c f8 e0 ff 03 6f be d3 b3 fe 2f ac 7c 76 9c 0c 1d 64 0b 59 80 f0 d6 98 dd e6 c8 48 e6 a9 e9 a2 e4 00 0b 71 11 e6 42 71 2f 04 20 30 39 de eb fd 37 ce 40 ce b0 a6 be c9 f2 bf 22 9b 22 6e 13 22 dd 64 b1 01 3a 27 be 92 72 c3 af a7 8d 78 cb c9 46 cf 8a 4f 11 fe 8f 02 10 93 6d a9 69 16 01 99 0e 7d 95 be 0e e8 b1 aa 98 53 53 f7 27 67 37 95 f4 f0 ab 7c 31 10 c6 64 09 64 41 a6 97 be fa 01 c0 f2 80 02 3a 54 15 5f a5 ff 3e 7f 74 a3 ab c8 cf 4d 84 88 b6 41 90 e5 90 24 ed 92 0e 00 df 76 4e 5b d5 23 85 8d 7c 9d cc 91 37 b3 04 c8 80 2c 1b 4a bb d9 22 77 bb 14 ee b4 ab 44 e6 76 34 17 dc 46 32 da 86 0c Data Ascii: ,-Z^\Md`TVLC.`HKYYB,o/\|vdYHqBq/ 097@""n"d:'rxFOmi}SS'g7\|1ddA:T_>tMA$vN[#\|7,J"wDv4F2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49896	192.178.50.65	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:17 UTC	517	OUT	GET /RtWifWfOSoQTgHNJl1Fj1r-5s-bR5LbEfaGjqkscOPF12zzhXyiN5jin2geuWpBFug=w200 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:17 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 10420 X-XSS-Protection: 0 Date: Thu, 25 Apr 2024 23:21:07 GMT Expires: Fri, 26 Apr 2024 23:21:07 GMT Cache-Control: public, max-age=86400, no-transform Age: 10630 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:17 UTC	722	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c8 00 00 00 c8 08 06 00 00 00 ad 58 ae 9e 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 9c ed 9d 7b 58 53 57 d6 ff bf 24 5c 02 84 00 16 84 d4 a0 c7 0b 2a b7 16 9d 97 12 0a 5a 3a 55 ac d6 b1 b6 42 41 9d 51 06 46 a7 37 2b a8 33 d3 e9 8d 6a db a9 be af 56 1d db 4e c7 0b b5 9d 5f 2f 56 18 6d 75 aa e2 8c a5 f5 42 a8 9d 8a b5 e2 15 3d ca b1 18 40 20 17 20 10 03 bf 3f 42 2c 48 38 09 c9 39 27 41 f6 e7 79 7c 24 c9 39 7b af 87 f0 3d 6b af bd d7 5e db a3 b3 b3 13 04 02 c1 3a 22 57 1b 40 20 b8 33 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 02 0b 44 20 04 Data Ascii: PNGIHDRXpHYs~ IDATx{XSW$\*Z:UBAQF7+3jVN_/VmuB=@ ?B,H89'Ay\|$9{=k^:"W@ 3D D D D D D D D D D D D
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: 11 11 11 cf 57 57 57 4f 9b 3a 75 2a 32 32 32 dc d2 53 f4 17 8b 67 d9 ba 75 ab e9 f2 e5 cb 37 87 0c 19 f2 1e f1 2a f6 33 60 05 d2 7c 68 56 2a 80 d9 fe bf fc 22 cf 99 76 28 8a 4a 95 cb e5 ef 69 b5 da 31 99 99 99 e2 9c 9c 1c 28 14 0a 6e 8c 74 33 54 2a 15 76 ee dc 89 e2 e2 62 44 44 44 1c a8 ae ae 7e 92 08 85 9d 81 2c 90 57 61 16 48 bc ad 6b ad d1 4d 18 91 8b 16 2d 12 e5 e4 e4 40 26 93 71 6b a4 9b c2 30 0c d6 af 5f 4f 84 62 07 03 59 20 34 80 11 00 46 fa ff f2 0b da de fb 28 8a 8a 1f 32 64 c8 f6 b6 b6 b6 b8 c1 26 8c db e9 2e 94 90 90 90 f7 eb eb eb 97 91 a9 e2 9e 0c c8 54 93 ae e1 d5 88 ae 97 d9 f6 dc 43 51 54 50 4a 4a ca 47 00 4e 2c 58 b0 e0 de b2 b2 32 51 5e 5e de a0 15 07 00 28 14 0a ac 5b b7 0e 47 8e 1c c1 e8 d1 a3 7f eb e3 e3 73 7d c2 84 09 7f 76 b5 5d ee Data Ascii: WWWO:u222Sgu73`\|hV"v(Ji1(nt3TvbDDD~,WaHkM-@&qk0_ObY 4F(2d&.TCQTPJJGN,X2Q^^([Gs}v]
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: 8c 8c 4c dd b1 63 47 8f f7 db ce 6c c0 cd 9a 43 3d de 93 c4 bd 00 71 28 3f d5 0d dd 59 18 b7 73 bb 50 2c 25 7f fe f3 9f ff e0 ca 95 2b d0 6a b5 10 8b c5 f0 f7 f7 87 a5 00 1e 9f 55 21 19 86 c1 b4 69 d3 3a fc fc fc 96 0c d4 a0 dd 2d 05 32 61 c2 84 3f b7 b7 b7 bf 5e 56 56 26 ba 7d 2f 47 e7 cd 66 b4 1e cb 45 e7 cd 16 00 e6 a0 5c 32 f1 2f 9c db 70 b5 99 c1 c1 9f be 11 2c be e0 92 bb 0d 43 71 e0 af 5f e0 d8 e1 63 10 8b c5 30 99 4c 56 af 13 8b c5 f0 f4 f4 c4 fc f9 f3 c1 d7 fe fc 92 92 12 2c 5d ba d4 d8 da da 3a 76 20 c6 23 6e 27 10 8a a2 28 5f 5f df f3 1b 37 6e f4 ea ab 70 5b 77 2f 22 99 f0 06 a7 79 56 06 53 1b 8e d4 96 e3 78 fd c0 9c 80 39 b6 a5 14 a7 be f8 be df f7 c9 64 32 6c de bc 99 17 8f b2 6a d5 2a 14 17 17 d3 27 4f 9e 1c c9 79 e3 3c e3 76 e9 ee a1 a1 a1 Data Ascii: LcGlC=q(?YsP,%+jU!i:-2a?^VV&}/GfE\2/p,Cq_c0LV,]:v #n'(__7np[w/"yVSx9d2lj*'Oy<v
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: 2e e7 3c ee b8 71 a9 0e 1f cc ff 1b 54 85 df c0 a0 6d e5 5d 1c b7 53 51 7c 1c 1f cc fb 1b 6e 5c aa c3 5d 23 f9 2f ea f0 d0 43 fc d6 0f 4b 4b 4b 83 af af af 3f 45 51 b3 79 ed c8 41 5c 22 90 d6 d6 d6 99 b9 b9 b9 bc f6 a1 69 d7 e2 f8 0d c7 32 5b fb a2 bd b9 0d 9f ff e9 53 18 b4 ad 9c b6 db 2f 3a 01 83 ae 15 45 4b ff 81 36 bd 81 f7 ee f8 dc 50 65 21 2b 2b cb 53 a1 50 b8 e5 f9 23 82 0b 84 a2 a8 ec 21 43 86 78 71 bd f8 74 3b 07 6b be e1 7c 68 b5 6f d5 2e 18 0d 46 4e db 74 06 cd 4f fc ae b1 c5 c7 c7 0b 72 c6 4a 7a 7a 3a 18 86 b9 cf 1d 83 75 c1 05 a2 50 28 9e 5a b4 68 11 af fd 5e 6d 66 78 49 40 6c ae b7 6f dd 21 20 20 00 4f 3e f9 24 5e 7a e9 25 88 c5 62 ce ed 10 02 0f 91 07 9e 7f fe 79 41 fa 52 28 14 48 4c 4c 44 68 68 e8 3c 41 3a ec 07 82 0a 84 a2 a8 20 86 61 ee Data Ascii: .<qTm]SQ\|n\]#/CKKK?EQyA\"i2[S/:EK6Pe!++SP#!Cxqt;k\|ho.FNtOrJzz:uP(Zh^mfxI@lo! O>$^z%byAR(HLLDhh<A: a
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: 2b 2c e1 a7 53 d5 4e dd af 31 3a 27 30 7b 89 8e 8e 46 53 53 d3 78 41 3a b3 01 ef 11 a4 10 65 5d b8 d8 f7 d1 d2 d8 8c d1 7e 23 fa 8c 37 ac f1 f0 c3 0f 03 30 c7 1a 63 c6 8c e9 f3 ba d9 b3 67 43 2a 95 62 cd 9a 35 30 1a 5d b7 9f a4 ea 9b 73 18 f7 50 8c c3 f7 db 73 94 35 17 c8 64 32 88 44 a2 10 41 3a b3 81 10 8f 35 ea de 7b ef e5 ad 80 13 57 c3 ab 1b 97 eb ec 1a 56 75 47 2a 95 22 3d 3d 9d 55 1c 16 a6 4c 99 82 5d bb 76 21 3d 3d 1d 21 21 e6 ef 5e 2c 16 c3 d7 d7 d7 21 7b 3b 3a 3a 10 12 12 0a 5f 3f 3f 84 84 84 a2 a3 c3 76 b9 21 f5 39 f6 53 82 6d de cf 91 a7 b6 45 74 74 34 d4 6a 75 98 20 9d d9 40 90 39 48 89 44 d2 7b ec e1 66 e8 69 0d 60 df c8 ca 61 a4 52 29 9e 7d f6 59 3c fb ac 59 88 d7 af 5f c7 f5 eb d7 31 66 cc 18 cc 9c 39 b3 1f ed 04 60 d4 e8 d1 58 9a 97 8f d8 Data Ascii: +,SN1:'0{FSSxA:e]~#70cgCb50]sPs5d2DA:5{WVuG"==UL]v!==!!^,!{;::_??v!9SmEtt4ju @9HD{fi`aR)}Y<Y_1f9`X
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: 2a fe 8e 62 96 88 7d 78 f9 02 d3 d2 d2 50 58 58 88 91 23 47 22 2b 2b 0b 59 59 59 98 31 63 06 66 cc 98 71 eb 73 77 60 cc 98 31 bd 0a 43 78 78 78 e0 d1 37 33 9d aa a8 d8 9d 11 52 e1 16 08 2b 2b 2b 11 14 14 e4 5c 9d 22 8e 10 24 06 f1 f6 f6 66 18 86 b1 9e a3 cd 11 23 a4 0a ce 6a 37 d5 d6 d6 62 e8 d0 a1 48 4b 4b 43 5a 5a 1a 18 86 e9 71 10 8e 10 07 5b f6 87 f0 f0 70 24 26 26 a2 ac ac 0c 00 20 f1 f7 c5 a4 25 53 10 16 dd 3b 99 d1 51 e2 82 a3 38 6b cb 16 a7 4f 9f c6 85 0b 17 8e 08 d6 21 0b 82 08 44 26 93 1d 61 18 c6 f1 6a 01 76 10 17 1c 85 e3 f5 ce d7 3b 1e 32 7c 08 8e 1e 3f 86 c7 1e f9 b9 72 bb 42 a1 10 e4 30 4b 67 f8 cb 5f fe 82 8a 8a 0a 1c 28 3d 80 9b e3 c5 18 79 bf 73 8b 82 dd 09 f4 0a 10 74 0d 84 a6 e9 76 b8 49 f1 6a 41 86 58 55 55 55 2a cb d3 8d 2f c2 24 a1 Data Ascii: b}xPXX#G"++YYY1cfqsw`1Cxxx73R+++\"$f#j7bHKKCZZq[p$&& %S;Q8kO!D&ajv;2\|?rB0Kg_(=ystvIjAXUUU/$
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: be fc e7 40 d6 df df 1f 6f bf fd 36 22 23 23 39 b3 61 fb 27 1f a2 69 4c 2b c2 c6 cb 1d 6e c3 47 ec 8d f9 a3 e6 f4 b9 6a 5e 52 52 82 c5 8b 17 f7 ab cd b4 b4 34 14 14 14 60 d8 b0 fe 4f bb 5f bb 76 0d cb 97 2f 47 3f 27 75 36 d2 34 cd e9 5a 89 4b 04 12 1f 1f 5f f4 d0 43 0f cd 59 b7 6e 9d 60 7d ee 65 0e e2 54 a3 f0 33 2e 5f e4 ef 40 f5 d9 2b 00 cc fb 36 56 af 5e 6d f5 34 5c 67 d8 f5 af dd b8 18 70 15 8a 09 94 c3 6d 3c a2 98 da 67 60 de df a1 95 4c 26 43 41 41 01 e6 cc 99 e3 b0 3d 16 0a 0b 0b b1 6a d5 aa fe dc f2 20 4d d3 a5 4e 77 dc 85 4b ea 62 35 35 35 ad 28 2e 2e 16 74 ef f1 14 f9 64 41 77 c5 59 f0 f1 32 cf a4 a5 a4 a4 e0 ed b7 df e6 5c 1c 00 90 9c 70 3f 1a ae 3a 5e 05 32 21 24 9e 75 d6 aa b0 b0 b0 5f e2 d8 b1 63 07 27 e2 00 80 9c 9c 9c fe ee bf 79 95 93 8e Data Ascii: @o6"##9a'iL+nGj^RR4`O_v/G?'u64ZK_CYn`}eT3._@+6V^m4\gpm<g`L&CAA=j MNwKb555(..tdAwY2\p?:^2!$u_c'y
2024-04-26 02:18:17 UTC	1255	IN	Data Raw: f9 e4 c4 4c d6 d8 00 00 08 5a 49 44 41 54 bc 52 a9 f4 72 97 ea e9 80 59 28 f7 04 47 61 94 7e 18 de fa 72 ad 4b 6d 29 2f 2f e7 72 bd a0 4f 86 0d 1b 66 33 07 8b cd 53 28 14 0a 5e 3c 49 3f da 74 7a 6f 88 db 09 84 a6 69 3a 21 21 21 2f 3f 3f 7f 53 59 59 99 88 2d 08 74 05 0f ff 4f 1a 1e 3f 32 1b af bd f6 1a d2 d3 d3 39 4d cc 63 e3 cc 99 33 28 29 29 41 51 51 11 67 7f 74 f1 f1 ec 4b 05 0a 85 c2 29 81 a4 a7 a7 83 6d 34 90 95 95 c5 da 76 41 41 81 d5 df af bd 67 5e 72 91 b0 e8 d2 54 13 36 26 4e 9c f8 55 64 64 64 ea 8e 1d 3b 5c 6d 4a 2f c6 8d 1b 87 f3 e7 cf 03 30 ff 11 29 95 ca 5b ff 1c d9 1c 64 8d 6b d7 ae dd 9a ce 54 a9 54 bc 3c 89 2f 5f be cc 9a 4a b2 7c f9 72 bb d6 4b fa 4a 33 d1 e9 74 48 4e 4e 76 28 58 57 28 14 38 72 c4 fa 09 08 8b 17 2f b6 67 7d e5 0a 4d d3 54 Data Ascii: LZIDATRrY(Ga~rKm)//rOf3S(^<I?tzoi:!!!/??SYY-tO?29Mc3())AQQgtK)m4vAAg^rT6&NUddd;\mJ/0)[dkTT</_J\|rKJ3tHNNv(XW(8r/g}MT
2024-04-26 02:18:17 UTC	913	IN	Data Raw: e1 8e 15 08 00 50 14 45 0d 19 32 64 77 5b 5b 5b dc fa f5 eb 45 ee b4 85 d7 5d d1 6a b5 28 2c 2c c4 86 0d 1b 20 97 cb 37 96 95 95 d9 5d 9b 87 a2 a8 57 01 e4 c1 7c 4c 33 d7 7c 00 20 8f af 60 bc 2f ee 68 81 58 48 48 48 78 5a ab d5 be 15 1f 1f ef b3 6e dd 3a b8 53 46 b0 3b a1 52 a9 90 9f 9f df d1 d6 d6 76 ad a1 a1 61 96 23 43 18 8a a2 82 00 64 c3 2c 14 67 3d 8a 06 66 cf b4 81 a6 69 da c9 b6 1c 62 50 08 04 30 7f 71 0a 85 e2 1d 86 61 e6 e5 e5 e5 21 27 27 87 0c bb ba 60 18 06 cb 97 2f 47 45 45 45 9b 9f 9f df ca 13 27 4e bc c9 45 bb 14 45 c5 03 98 0d 73 40 6f 6f 29 d0 93 30 ef e5 28 e5 7a 55 dc 11 06 8d 40 2c 50 14 15 3f 64 c8 90 ed 6d 6d 6d 71 8b 16 2d 12 0d 66 a1 30 0c 83 f5 eb d7 a3 b8 b8 18 21 21 21 ef d7 d7 d7 2f e3 73 08 43 99 f7 f8 52 5d 2f 53 bb fe af 80 Data Ascii: PE2dw[[[E]j(,, 7]W\|L3\| `/hXHHHxZn:SF;Rva#Cd,g=fibP0qa!''`/GEEE'NEEs@oo)0(zU@,P?dmmmq-f0!!!/sCR]/S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49901	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:17 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:17 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:17 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:17 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:17 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49900	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:17 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1673 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:17 UTC	1673	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 38 34 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097895849",null,null,null,
2024-04-26 02:18:17 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:17 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:17 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49903	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:17 UTC	1423	OUT	GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097894.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:18 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:17 GMT Expires: Fri, 26 Apr 2024 02:18:17 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:18 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49902	142.250.217.228	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:17 UTC	930	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:18 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:17 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49904	142.250.64.129	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:17 UTC	512	OUT	GET /WnIr0x3yhEpMTqI4DCrI_ZOc9vdK_yV0WPig_suRjHQCv4B-2CmQoQu3nE-Eo7_MZ-yZQbq30w=w72 HTTP/1.1 Host: lh4.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:18 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 3279 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 01:19:59 GMT Expires: Sat, 27 Apr 2024 01:19:59 GMT Cache-Control: public, max-age=86400, no-transform Age: 3498 ETag: "v1" Content-Type: image/png Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:18 UTC	724	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 48 00 00 00 48 08 06 00 00 00 55 ed b3 47 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRHHUGtEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27
2024-04-26 02:18:18 UTC	1255	IN	Data Raw: 73 68 6f 70 20 43 53 36 20 28 4d 61 63 69 6e 74 6f 73 68 29 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 42 46 35 43 35 37 38 32 39 37 46 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 31 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 32 32 41 42 46 35 43 35 37 38 32 39 37 46 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 20 65 6e 64 3d 22 72 22 3f 3e 2a 9b 50 3d 00 00 08 fd 49 44 41 54 78 da ec 9c 5b 6c db d6 19 c7 3f 4a d6 cd b2 e4 c4 Data Ascii: shop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0180117407206811822ABF5C578297F4" stRef:documentID="xmp.did:0180117407206811822ABF5C578297F4"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>*P=IDATx[l?J
2024-04-26 02:18:18 UTC	1255	IN	Data Raw: 16 17 e6 37 3e 06 e5 85 72 f7 5d a4 ba 71 5b 70 2a 52 73 1e 3f 01 94 2f 66 51 ae e9 78 bd ce b9 d7 e4 f4 4f 1b 1f 83 f4 3d 13 9d df 10 55 d1 bd 55 55 38 b4 7a 24 38 a2 ac 9e 62 0e ae 5d bb 0e 3d 3d bd 8e c1 99 98 98 68 ce 60 75 af 5f 86 42 26 a2 28 a2 1a ba b7 b2 0c 47 a3 20 1e 3c 29 f9 4e 8f 8f ff e8 48 80 5e 5e 5e 81 1b 37 a6 9b d3 cd 1f 0b 15 0c a1 a4 38 19 cc 1a 5f 06 63 19 0e 06 43 81 7a 6c e5 b2 34 c7 83 57 5c 19 6c 24 50 63 38 97 7f b8 dc bc 6e fe c9 3d 1d f0 c1 dd 72 7c d1 bb 17 ab cc b3 0a 04 4b 70 c8 23 6c 11 83 e2 21 3c 3f ae b6 8b cb a6 e9 74 5a 2a 9c e1 02 58 bd 6e e5 94 72 2c 2b 68 b8 c7 cd 9c 08 97 95 42 bb 92 aa 18 45 35 eb bc 45 38 38 ee 28 70 86 16 c6 c0 57 58 97 36 07 02 01 69 8e ab 81 37 6f 4c d4 a5 24 bc 6f 3e cf 82 d3 66 a9 a2 f8 d6 Data Ascii: 7>r]q[pRs?/fQxO=UUU8z$8b]==h`u_B&(G <)NH^^^78_cCzl4W\l$Pc8n=r\|Kp#l!<?tZXnr,+hBE5E88(pWX6i7oL$o>f
2024-04-26 02:18:18 UTC	45	IN	Data Raw: 40 8b 58 fb 3f 2f b4 01 b5 01 b5 01 b5 01 b5 01 b5 01 fd df da ff 04 18 00 5d b4 f5 de a2 20 13 53 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: @X?/] SIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49905	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:18 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:18 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49906	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1686 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:18 UTC	1686	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 37 33 35 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097897359",null,null,null,
2024-04-26 02:18:18 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49908	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1220 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:18 UTC	1220	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 37 33 36 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097897361",null,null,null
2024-04-26 02:18:18 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49907	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1220 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:18 UTC	1220	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 37 33 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097897364",null,null,null
2024-04-26 02:18:18 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49909	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	1359	OUT	GET /accounts/?hl=en&sjid=8919216180560458382-NA HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097894.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:19 UTC	818	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:18 GMT Expires: Fri, 26 Apr 2024 02:18:18 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-vCAQcBhXdWsrnAEosXxb' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe Content-Security-Policy: frame-ancestors https://.google.com: https://.youtube.com: X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:19 UTC	437	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 48 4f 4d 45 50 41 47 45 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 33 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f Data Ascii: accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.co
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 Data Ascii: 29,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)for
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b Data Ascii: ;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/K
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 Data Ascii: +0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)format('woff2');unicode-ra
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 Data Ascii: 03-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+030
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 47 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 33 42 77 70 35 4d 4b 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 Data Ascii: nt-weight:400;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Bwp5MKg.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 62 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 55 39 34 59 74 77 43 77 5a 2d 50 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a Data Ascii: tps://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtwCwZ-Pw.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 74 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 67 73 74 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 76 43 41 51 63 42 68 58 64 57 73 72 6e 41 45 6f 73 58 78 62 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 43 6f 6c 6f 72 2b 45 6d 6f 6a 69 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 6e 63 65 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 76 43 41 51 63 42 68 58 64 57 73 72 6e 41 45 6f Data Ascii: t:wght@400;500;700&display=swap" as="style" id="font-gst" rel="preload" nonce="vCAQcBhXdWsrnAEosXxb"><link href="https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap" as="style" id="font-nce" rel="preload" nonce="vCAQcBhXdWsrnAEo
2024-04-26 02:18:19 UTC	1255	IN	Data Raw: 27 63 6f 6e 66 69 67 27 2c 20 67 61 34 5f 69 64 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 68 65 6c 70 63 65 6e 74 65 72 27 3a 20 68 63 5f 6e 61 6d 65 2c 0a 20 20 20 20 20 20 20 20 20 20 27 73 75 70 70 6f 72 74 5f 70 61 67 65 5f 74 79 70 65 27 3a 20 70 61 67 65 5f 74 79 70 65 2c 0a 20 20 20 20 20 20 20 20 20 20 27 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 27 3a 20 69 73 5f 63 6f 6d 6d 75 6e 69 74 79 5f 70 61 67 65 20 3f 20 27 54 61 69 6c 77 69 6e 64 27 20 3a 20 27 48 65 6c 70 20 43 65 6e 74 65 72 27 2c 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 68 74 6d 6c 2e 68 63 66 65 7b 62 Data Ascii: 'config', ga4_id, { 'helpcenter': hc_name, 'support_page_type': page_type, 'content_group': is_community_page ? 'Tailwind' : 'Help Center', }); })();</script><style>html{-webkit-text-size-adjust:100%}html.hcfe{b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49912	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:19 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:19 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49910	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1702 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:18 UTC	1702	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 37 36 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097897664",null,null,null,
2024-04-26 02:18:19 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49911	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1239 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:18 UTC	1239	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 37 36 36 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097897666",null,null,null
2024-04-26 02:18:19 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49913	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:18 UTC	1883	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 228 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097894.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:18 UTC	228	OUT	Data Raw: 5b 5b 22 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 76 69 73 69 74 5f 69 64 3d 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 26 72 64 3d 32 26 70 3d 61 63 63 6f 75 6e 74 5f 69 70 68 23 74 6f 70 69 63 3d 33 33 38 32 32 39 36 22 2c 22 61 63 63 6f 75 6e 74 73 22 2c 30 2c 31 2c 22 65 6e 22 2c 22 32 30 31 30 38 31 39 30 35 32 22 5d 2c 5b 6e 75 6c 6c 2c 22 48 65 6c 70 20 43 65 6e 74 65 72 20 28 52 6f 6f 74 20 74 6f 70 69 63 29 22 2c 22 33 33 38 32 32 39 35 22 5d 2c 6e 75 6c 6c 2c 31 5d Data Ascii: [["8919216180560458382-NA","https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph#topic=3382296","accounts",0,1,"en","2010819052"],[null,"Help Center (Root topic)","3382295"],null,1]
2024-04-26 02:18:19 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:19 GMT Expires: Fri, 26 Apr 2024 02:18:19 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:19 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49915	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:19 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:19 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:19 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:19 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49917	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:19 UTC	996	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:19 UTC	5297	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 39 34 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 35 37 32 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],1694,[["1714097895726",null,null,null
2024-04-26 02:18:19 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:19 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:19 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49919	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:19 UTC	1424	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:20 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:19 GMT Expires: Fri, 26 Apr 2024 02:18:19 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:20 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49920	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:20 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:20 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:20 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:20 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49923	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1636 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:20 UTC	1636	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 35 36 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 61 63 63 6f 75 6e 74 73 5c 22 2c 5c 22 65 6e 5c 22 2c 5b 5b 35 35 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 6e 5c 22 2c 5b 5b 5c 22 43 6f 72 65 5f 4d 6f 64 75 6c 61 72 5f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],860,[["1714097899560",null,null,null,null,null,null,"[[\"accounts\",\"en\",[[55]],null,null,null,null,null,null,null,null,\"en\",[[\"Core_Modular_
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49924	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1267 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:20 UTC	1267	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 35 36 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 32 2c 33 2c 36 32 37 37 37 32 33 32 34 5d 2c 5b 6e 75 6c 6c 2c 31 5d 2c 5b 5c 22 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 5c 22 2c 5c 22 32 30 31 30 38 31 39 30 35 32 5c 22 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5c 22 38 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],1323,[["1714097899563",null,null,null,null,null,null,"[[[2,3,627772324],[null,1],[\"638496946828842109-1905716545\",\"2010819052\",null,0,null,\"8
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49922	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:20 UTC	1782	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 35 37 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097899575",null,null,null,
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49927	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1307 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:20 UTC	1307	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 35 37 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097899577",null,null,null
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49928	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	1851	OUT	POST /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:20 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-04-26 02:18:21 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:21 GMT Expires: Fri, 26 Apr 2024 02:18:21 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49926	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1303 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:20 UTC	1303	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 36 31 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097899611",null,null,null
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49925	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:20 UTC	1775	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 36 30 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097899609",null,null,null,
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49929	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:20 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:21 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:21 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:21 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:21 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49932	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:21 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:21 UTC	1776	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 36 31 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097899618",null,null,null,
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49933	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:21 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:21 UTC	1345	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 36 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097899621",null,null,null
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49931	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:21 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1793 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:21 UTC	1793	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 36 32 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097899624",null,null,null,
2024-04-26 02:18:21 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:21 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49934	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:21 UTC	1423	OUT	GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:21 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:21 GMT Expires: Fri, 26 Apr 2024 02:18:21 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:21 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49935	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:21 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:21 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:21 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:21 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:21 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49936	142.250.217.228	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	930	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:22 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:22 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49937	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:22 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:22 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:22 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:22 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49938	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1806 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:22 UTC	1806	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 31 35 38 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097901589",null,null,null,
2024-04-26 02:18:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49939	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1338 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:22 UTC	1338	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 31 35 39 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097901591",null,null,null
2024-04-26 02:18:22 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49940	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1790 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:22 UTC	1790	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 31 36 35 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097901651",null,null,null,
2024-04-26 02:18:23 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49943	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	1854	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 212 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:22 UTC	212	OUT	Data Raw: 5b 5b 22 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 26 73 6a 69 64 3d 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 23 74 6f 70 69 63 3d 33 33 38 32 32 39 36 22 2c 22 61 63 63 6f 75 6e 74 73 22 2c 30 2c 31 2c 22 65 6e 22 2c 22 31 33 32 36 39 30 31 39 35 30 22 5d 2c 5b 6e 75 6c 6c 2c 22 48 65 6c 70 20 43 65 6e 74 65 72 20 28 52 6f 6f 74 20 74 6f 70 69 63 29 22 2c 22 33 33 38 32 32 39 35 22 2c 22 32 30 31 30 38 31 39 30 35 32 22 5d 2c 6e 75 6c 6c 2c 31 5d Data Ascii: [["8919216180560458382-NA","https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA#topic=3382296","accounts",0,1,"en","1326901950"],[null,"Help Center (Root topic)","3382295","2010819052"],null,1]
2024-04-26 02:18:23 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:23 GMT Expires: Fri, 26 Apr 2024 02:18:23 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:23 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49942	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1319 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:22 UTC	1319	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 31 36 35 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097901652",null,null,null
2024-04-26 02:18:23 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49941	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:22 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1319 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:22 UTC	1319	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 31 36 35 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097901655",null,null,null
2024-04-26 02:18:23 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49944	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:23 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:23 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:23 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:23 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:23 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49945	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:23 UTC	1424	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:23 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:23 GMT Expires: Fri, 26 Apr 2024 02:18:23 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:23 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49946	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:23 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:24 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:24 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49947	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:24 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:24 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:24 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49950	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:25 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:25 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:25 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49952	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:25 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1806 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:25 UTC	1806	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 34 36 31 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097904610",null,null,null,
2024-04-26 02:18:26 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49951	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:25 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1338 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:25 UTC	1338	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 34 36 31 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097904611",null,null,null
2024-04-26 02:18:26 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:25 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49953	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:25 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:26 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:26 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49954	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:26 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:27 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:27 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49955	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:27 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:27 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:27 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:27 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49957	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:27 UTC	1209	OUT	GET /chrome/answer/6130773?hl=en-US HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:28 UTC	460	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/chrome/answer/6130773?hl=en Date: Fri, 26 Apr 2024 02:18:28 GMT Expires: Fri, 26 Apr 2024 02:18:28 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 251 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:28 UTC	251	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/chrome/answer/6130773?hl=en">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49958	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:27 UTC	996	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:27 UTC	5297	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 39 34 2c 5b 5b 22 31 37 31 34 30 39 37 38 39 39 36 30 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],1694,[["1714097899606",null,null,null
2024-04-26 02:18:28 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49959	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:28 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:28 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:28 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:28 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:28 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49956	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:28 UTC	1206	OUT	GET /chrome/answer/6130773?hl=en HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097898.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:28 UTC	729	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:28 GMT Expires: Fri, 26 Apr 2024 02:18:28 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-J+1ANcaOJb2p9wsUO7Wb' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:28 UTC	526	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 41 4e 53 57 45 52 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 42 72 6f 77 73 65 20 43 68 72 6f 6d 65 20 61 73 20 61 20 67 75 65 73 74 20 2d 20 43 6f 6d 70 75 74 65 72 20 2d 20 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="ANSWER" lang="en"><head><title>Browse Chrome as a guest - Computer - Google Chrome Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta conten
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 58 44 61 66 30 39 6d 6f 73 79 39 69 54 6a 36 64 4f 6e 77 62 36 73 4b 54 72 4e 68 66 4b 77 4f 53 36 76 39 38 6c 50 56 30 64 45 45 22 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 26 61 6d 70 3b 63 6f 3d 47 45 4e 49 45 2e 50 6c 61 74 66 6f 72 6d 25 33 44 44 65 73 6b 74 6f 70 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 Data Ascii: "description"><meta content="XDaf09mosy9iTj6dOnwb6sKTrNhfKwOS6v98lPV0dEE" name="google-site-verification"><link href="https://support.google.com/chrome/answer/6130773?hl=en&co=GENIE.Platform%3DDesktop" rel="canonical"><meta content="width=device-width
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 57 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 Data Ascii: amily:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 Data Ascii: gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KF
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 Data Ascii: 0;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 Data Ascii: tps://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{f
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 47 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 33 4e 77 70 35 4d 4b 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 Data Ascii: GrENHsxJlGDuGo1OIlL3Nwp5MKg.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/googlesans/v16/4
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 75 47 6f 31 4f 49 6c 4c 55 39 34 59 74 33 43 77 5a 2d 50 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 62 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 55 39 34 Data Ascii: uGo1OIlLU94Yt3CwZ-Pw.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 47 6f 6f 67 6c 65 2b 53 61 6e 73 2b 54 65 78 74 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 67 73 74 22 20 72 65 6c 3d Data Ascii: 6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}</style><link href="https://fonts.googleapis.com/css2?family=Google+Sans+Text:wght@400;500;700&display=swap" as="style" id="font-gst" rel=
2024-04-26 02:18:28 UTC	1255	IN	Data Raw: 73 65 3b 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 3d 20 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 20 7c 7c 20 5b 5d 3b 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 74 61 67 28 29 7b 77 69 6e 64 6f 77 2e 64 61 74 61 4c 61 79 65 72 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 3b 7d 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 67 74 61 67 20 3d 20 67 74 61 67 3b 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 6a 73 27 2c 20 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 20 20 20 20 20 20 67 74 61 67 28 27 63 6f 6e 66 69 67 27 2c 20 67 61 34 5f 69 64 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 68 65 6c 70 63 65 6e 74 65 72 27 3a 20 68 63 5f 6e 61 6d 65 2c 0a 20 20 20 20 20 20 20 20 20 20 27 73 75 70 70 Data Ascii: se; window.dataLayer = window.dataLayer \|\| []; function gtag(){window.dataLayer.push(arguments);} window.gtag = gtag; gtag('js', new Date()); gtag('config', ga4_id, { 'helpcenter': hc_name, 'supp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49960	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:28 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:29 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:28 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:29 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:29 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49961	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:28 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:29 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:29 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49962	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:28 UTC	549	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://accounts.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 02:18:29 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:29 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49965	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:29 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:29 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:29 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:29 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:29 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49966	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:29 UTC	1330	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 524 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:29 UTC	524	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 37 38 36 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1714097907867",null,null,n
2024-04-26 02:18:29 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:29 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:29 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49964	142.250.217.228	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:29 UTC	930	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:29 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:29 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49968	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:29 UTC	1330	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 525 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:29 UTC	525	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 37 38 36 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1714097907869",null,null,n
2024-04-26 02:18:30 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49970	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:29 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:29 UTC	1552	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 38 38 38 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097908889",null,null,null,
2024-04-26 02:18:30 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49971	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:29 UTC	1734	OUT	POST /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802540,10802571,10802616,10802624,10802781,10803188,10803213,10803447,10803680 HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 552 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:29 UTC	552	OUT	Data Raw: 7b 22 63 6f 6d 6d 6f 6e 5f 70 61 72 61 6d 73 22 3a 7b 22 63 6f 6e 74 65 78 74 5f 70 61 72 61 6d 73 22 3a 7b 22 65 78 70 65 72 69 6d 65 6e 74 5f 69 64 22 3a 5b 31 30 38 30 30 31 31 32 2c 31 37 30 36 35 33 38 2c 31 37 31 34 32 35 31 2c 31 30 38 30 30 35 36 31 2c 31 30 38 30 30 36 32 31 2c 31 30 38 30 30 36 37 32 2c 31 30 38 30 30 36 39 35 2c 31 30 38 30 30 37 30 30 2c 31 30 38 30 30 37 30 37 2c 31 30 38 30 30 37 33 38 2c 31 30 38 30 30 37 36 31 2c 31 30 38 30 30 37 36 33 2c 31 30 38 30 30 38 34 38 2c 31 30 38 30 30 38 38 30 2c 31 30 38 30 30 39 32 32 2c 31 30 38 30 30 39 35 30 2c 31 30 38 30 30 39 35 37 2c 31 30 38 30 31 30 33 32 2c 31 30 38 30 31 30 34 32 2c 31 30 38 30 31 31 35 30 2c 31 30 38 30 31 32 38 38 2c 31 30 38 30 31 33 34 35 2c 31 30 38 30 31 35 Data Ascii: {"common_params":{"context_params":{"experiment_id":[10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,108015
2024-04-26 02:18:30 UTC	857	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:30 GMT Expires: Fri, 26 Apr 2024 02:18:30 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	44	IN	Data Raw: 32 36 0d 0a 7b 22 68 65 6c 70 63 65 6e 74 65 72 22 3a 22 63 68 72 6f 6d 65 22 2c 22 75 73 65 72 5f 70 72 65 66 22 3a 5b 5d 7d 0d 0a Data Ascii: 26{"helpcenter":"chrome","user_pref":[]}
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49969	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:29 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1091 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:29 UTC	1091	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 38 38 39 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097908893",null,null,null
2024-04-26 02:18:30 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
150	192.168.2.4	49974	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:30 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:30 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:30 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
151	192.168.2.4	49972	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1576 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	1576	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 38 39 33 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097908939",null,null,null,
2024-04-26 02:18:30 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
152	192.168.2.4	49973	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1158 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	1158	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 38 39 34 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097908941",null,null,null
2024-04-26 02:18:30 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
153	192.168.2.4	49975	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1803	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802624%2C10802781%2C10803188%2C10803213%2C10803447%2C10803680&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 179 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/chrome/answer/6130773?hl=en Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:30 UTC	179	OUT	Data Raw: 5b 5b 22 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 68 72 6f 6d 65 2f 61 6e 73 77 65 72 2f 36 31 33 30 37 37 33 3f 68 6c 3d 65 6e 22 2c 22 63 68 72 6f 6d 65 22 2c 31 2c 31 2c 22 65 6e 22 2c 22 33 30 32 37 37 37 36 34 37 22 5d 2c 5b 6e 75 6c 6c 2c 22 42 72 6f 77 73 65 20 43 68 72 6f 6d 65 20 61 73 20 61 20 67 75 65 73 74 22 2c 22 36 31 33 30 37 37 33 22 2c 22 32 30 31 30 38 31 39 30 35 32 22 5d 2c 6e 75 6c 6c 2c 31 5d Data Ascii: [["8919216180560458382-NA","https://support.google.com/chrome/answer/6130773?hl=en","chrome",1,1,"en","302777647"],[null,"Browse Chrome as a guest","6130773","2010819052"],null,1]
2024-04-26 02:18:30 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:30 GMT Expires: Fri, 26 Apr 2024 02:18:30 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
154	192.168.2.4	49976	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1570 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	1570	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 38 39 34 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097908947",null,null,null,
2024-04-26 02:18:30 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
155	192.168.2.4	49977	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1567 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	1567	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 39 30 36 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097909062",null,null,null,
2024-04-26 02:18:30 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:30 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:30 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
156	192.168.2.4	49980	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1321	OUT	GET /apis/prefinsert?v=0&helpcenter=chrome&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714251,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802540,10802571,10802616,10802624,10802781,10803188,10803213,10803447,10803680 HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:31 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:30 GMT Expires: Fri, 26 Apr 2024 02:18:30 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:31 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
157	192.168.2.4	49978	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:31 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:31 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
158	192.168.2.4	49981	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	1107	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 39 30 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097909064",null,null,null
2024-04-26 02:18:31 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:31 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
159	192.168.2.4	49979	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	1107	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 30 39 30 36 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097909067",null,null,null
2024-04-26 02:18:31 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:31 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
160	192.168.2.4	49982	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1389	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802624%2C10802781%2C10803188%2C10803213%2C10803447%2C10803680&authuser=0&v=1&helpcenter=chrome HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:31 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:31 GMT Expires: Fri, 26 Apr 2024 02:18:31 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:31 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
161	192.168.2.4	49983	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:30 UTC	1308	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1100 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://accounts.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:30 UTC	1100	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 69 64 65 6e 74 69 74 79 66 72 6f 6e 74 65 6e 64 61 75 74 68 75 69 73 65 72 76 65 72 5f 32 30 32 34 30 34 32 31 2e 30 38 5f 70 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_identityfrontendauthuiserver_20240421.08_p1",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,
2024-04-26 02:18:31 UTC	523	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://accounts.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:31 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
162	192.168.2.4	49984	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:31 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:31 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:31 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
163	192.168.2.4	49985	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:31 UTC	1210	OUT	GET /accounts?hl=en-US&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:32 UTC	462	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts/?hl=en&p=account_iph Date: Fri, 26 Apr 2024 02:18:32 GMT Expires: Fri, 26 Apr 2024 02:18:32 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 257 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:32 UTC	257	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 26 61 6d 70 3b 70 3d 61 63 63 6f 75 6e 74 5f 69 70 68 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts/?hl=en&p=account_iph">here</A>.</BODY></HTML>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
164	192.168.2.4	49986	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:32 UTC	1208	OUT	GET /accounts/?hl=en&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:32 UTC	533	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&p=account_iph&rd=1 X-Robots-Tag: follow,index Date: Fri, 26 Apr 2024 02:18:32 GMT Expires: Fri, 26 Apr 2024 02:18:32 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 308 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:32 UTC	308	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 61 6d 70 3b 76 69 73 69 74 5f 69 64 3d 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
165	192.168.2.4	49987	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:32 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:32 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:32 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:32 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
166	192.168.2.4	49989	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:32 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:33 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:33 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:33 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:33 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
167	192.168.2.4	49988	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:32 UTC	1251	OUT	GET /accounts?hl=en&visit_id=638496946828842109-1905716545&p=account_iph&rd=1 HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:33 UTC	533	IN	HTTP/1.1 301 Moved Permanently Location: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph X-Robots-Tag: follow,index Date: Fri, 26 Apr 2024 02:18:33 GMT Expires: Fri, 26 Apr 2024 02:18:33 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui Content-Length: 308 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:33 UTC	308	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 61 6d 70 3b 76 69 73 69 74 5f 69 64 3d 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 26 61 6d Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&am

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
168	192.168.2.4	49990	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:33 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:33 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:33 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:33 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:33 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
169	192.168.2.4	49991	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:33 UTC	1251	OUT	GET /accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph HTTP/1.1 Host: support.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097907.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:34 UTC	729	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:34 GMT Expires: Fri, 26 Apr 2024 02:18:34 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-Xc6oZb357+IBRfb3L/UZ' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:34 UTC	526	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 48 4f 4d 45 50 41 47 45 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 33 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b Data Ascii: m-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2)format('woff2');unicode-range:U+0460-052F,U+
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 Data Ascii: U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+202
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b Data Ascii: sA.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 Data Ascii: ace{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-f
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 45 39 46 2c 55 2b 31 45 46 32 2d 31 45 46 46 2c 55 2b 32 30 32 30 2c 55 2b 32 30 41 30 2d 32 30 41 42 2c 55 2b 32 30 41 44 2d 32 30 43 30 2c 55 2b 32 31 31 33 2c 55 2b 32 43 36 30 2d 32 43 37 46 2c 55 2b 41 37 32 30 Data Ascii: t-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 77 70 35 4d 4b 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 Data Ascii: wp5MKg.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:400
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 62 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 55 39 34 59 74 38 43 77 5a 2d 50 77 2e 77 6f 66 66 32 29 66 Data Ascii: 'woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94Yt8CwZ-Pw.woff2)f
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 33 35 37 2b 49 42 52 66 62 33 4c 2f 55 5a 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 43 6f 6c 6f 72 2b 45 6d 6f 6a 69 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 6e 63 65 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 58 63 36 6f 5a 62 33 35 37 2b 49 42 52 66 62 33 4c 2f 55 5a 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 58 63 36 6f 5a 62 33 35 37 2b 49 42 52 66 62 33 4c 2f 55 5a 22 3e 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 66 6f 6e 74 2d 67 73 74 27 29 2e 61 64 64 45 76 65 6e 74 4c 69 Data Ascii: 357+IBRfb3L/UZ"><link href="https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap" as="style" id="font-nce" rel="preload" nonce="Xc6oZb357+IBRfb3L/UZ"><script nonce="Xc6oZb357+IBRfb3L/UZ">document.getElementById('font-gst').addEventLi
2024-04-26 02:18:34 UTC	1255	IN	Data Raw: 74 79 70 65 2c 0a 20 20 20 20 20 20 20 20 20 20 27 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 27 3a 20 69 73 5f 63 6f 6d 6d 75 6e 69 74 79 5f 70 61 67 65 20 3f 20 27 54 61 69 6c 77 69 6e 64 27 20 3a 20 27 48 65 6c 70 20 43 65 6e 74 65 72 27 2c 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 68 74 6d 6c 2e 68 63 66 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 66 66 66 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 68 74 6d 6c 2e 68 63 66 65 2e 65 6d 62 65 64 64 65 64 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 7d 74 61 62 6c 65 2c 63 61 70 74 69 6f Data Ascii: type, 'content_group': is_community_page ? 'Tailwind' : 'Help Center', }); })();</script><style>html{-webkit-text-size-adjust:100%}html.hcfe{background-color:#ffffff;overflow-y:scroll}html.hcfe.embedded{overflow-y:auto}table,captio

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
170	192.168.2.4	49992	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:34 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:34 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:34 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:34 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:34 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
171	192.168.2.4	49994	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:34 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:35 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:35 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:35 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
172	192.168.2.4	49997	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:35 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:35 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:35 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
173	192.168.2.4	49999	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1565 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	1565	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 36 38 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 61 63 63 6f 75 6e 74 73 5c 22 2c 5c 22 65 6e 5c 22 2c 5b 5b 35 35 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 6e 5c 22 2c 5b 5b 5c 22 43 6f 72 65 5f 4d 6f 64 75 6c 61 72 5f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],860,[["1714097914683",null,null,null,null,null,null,"[[\"accounts\",\"en\",[[55]],null,null,null,null,null,null,null,null,\"en\",[[\"Core_Modular_
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:35 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
174	192.168.2.4	50001	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1097 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	1097	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 36 38 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 32 2c 33 2c 36 32 37 37 37 32 33 32 34 5d 2c 5b 6e 75 6c 6c 2c 31 5d 2c 5b 5c 22 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 5c 22 2c 5c 22 34 38 37 30 38 34 39 35 5c 22 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5c 22 38 39 31 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],1323,[["1714097914686",null,null,null,null,null,null,"[[[2,3,627772324],[null,1],[\"638496946828842109-1905716545\",\"48708495\",null,0,null,\"891
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
175	192.168.2.4	50003	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	1880	OUT	POST /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:35 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-04-26 02:18:36 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:36 GMT Expires: Fri, 26 Apr 2024 02:18:36 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
176	192.168.2.4	49998	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1667 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	1667	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 37 31 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097914719",null,null,null,
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
177	192.168.2.4	50002	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1202 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	1202	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 37 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097914721",null,null,null
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
178	192.168.2.4	50005	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1668 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	1668	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 37 32 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097914728",null,null,null,
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
179	192.168.2.4	50000	142.250.217.228	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	930	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:36 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:36 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
180	192.168.2.4	50004	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:35 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1244 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:35 UTC	1244	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 37 33 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097914730",null,null,null
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
181	192.168.2.4	50006	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:36 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:36 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:36 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:36 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:36 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
182	192.168.2.4	50008	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:36 UTC	1423	OUT	GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:36 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:36 GMT Expires: Fri, 26 Apr 2024 02:18:36 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
183	192.168.2.4	50007	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:36 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1685 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:36 UTC	1685	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 37 33 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097914731",null,null,null,
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
184	192.168.2.4	50009	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:36 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1682 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:36 UTC	1682	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 35 34 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097915494",null,null,null,
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
185	192.168.2.4	50010	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:36 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1218 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:36 UTC	1218	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 35 34 39 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097915495",null,null,null
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
186	192.168.2.4	50011	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:36 UTC	1883	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 239 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:36 UTC	239	OUT	Data Raw: 5b 5b 22 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 3f 68 6c 3d 65 6e 26 76 69 73 69 74 5f 69 64 3d 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 26 72 64 3d 32 26 70 3d 61 63 63 6f 75 6e 74 5f 69 70 68 23 74 6f 70 69 63 3d 33 33 38 32 32 39 36 22 2c 22 61 63 63 6f 75 6e 74 73 22 2c 30 2c 31 2c 22 65 6e 22 2c 22 34 38 37 30 38 34 39 35 22 5d 2c 5b 6e 75 6c 6c 2c 22 48 65 6c 70 20 43 65 6e 74 65 72 20 28 52 6f 6f 74 20 74 6f 70 69 63 29 22 2c 22 33 33 38 32 32 39 35 22 2c 22 32 30 31 30 38 31 39 30 35 32 22 5d 2c 6e 75 6c 6c 2c 31 5d Data Ascii: [["8919216180560458382-NA","https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph#topic=3382296","accounts",0,1,"en","48708495"],[null,"Help Center (Root topic)","3382295","2010819052"],null,1]
2024-04-26 02:18:36 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:36 GMT Expires: Fri, 26 Apr 2024 02:18:36 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
187	192.168.2.4	50012	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:36 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1218 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:36 UTC	1218	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 35 34 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097915497",null,null,null
2024-04-26 02:18:36 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:36 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:36 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
188	192.168.2.4	50013	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:37 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:37 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:37 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:37 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:37 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
189	192.168.2.4	50014	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:37 UTC	1424	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:37 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:37 GMT Expires: Fri, 26 Apr 2024 02:18:37 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:37 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
190	192.168.2.4	50016	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:37 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1698 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:37 UTC	1698	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 36 36 39 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097916691",null,null,null,
2024-04-26 02:18:38 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
191	192.168.2.4	50015	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:37 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1237 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:37 UTC	1237	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 36 36 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097916694",null,null,null
2024-04-26 02:18:38 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:38 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
192	192.168.2.4	50017	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:37 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:38 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:38 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:38 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
193	192.168.2.4	50018	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:38 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:38 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:38 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:38 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:38 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
194	192.168.2.4	50019	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:39 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:39 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:39 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:39 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:39 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
195	192.168.2.4	50021	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:39 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:40 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:40 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:40 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:40 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
196	192.168.2.4	50022	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:40 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:40 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:40 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:40 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:40 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
197	192.168.2.4	50023	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:41 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1698 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:41 UTC	1698	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 39 37 30 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097919707",null,null,null,
2024-04-26 02:18:41 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:41 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:41 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
198	192.168.2.4	50025	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:41 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:41 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:42 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:42 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
199	192.168.2.4	50024	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:41 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1237 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:41 UTC	1237	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 39 37 30 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097919708",null,null,null
2024-04-26 02:18:42 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:42 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:42 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
200	192.168.2.4	50026	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:42 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:42 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:42 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:42 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
201	192.168.2.4	50027	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:43 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:43 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:43 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:43 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
202	192.168.2.4	50028	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:43 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:44 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:44 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
203	192.168.2.4	50029	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:44 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:44 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:44 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:44 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:44 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
204	192.168.2.4	50030	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:45 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:45 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:45 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:45 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:45 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
205	192.168.2.4	50032	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:45 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 5297 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:45 UTC	5297	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 36 39 34 2c 5b 5b 22 31 37 31 34 30 39 37 39 31 34 37 30 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1694,[["1714097914702",null,null,null
2024-04-26 02:18:46 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:46 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:46 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
206	192.168.2.4	50031	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:45 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1699 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:45 UTC	1699	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 34 37 37 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097924774",null,null,null,
2024-04-26 02:18:46 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:46 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:46 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
207	192.168.2.4	50033	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:45 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1238 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:45 UTC	1238	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 34 37 37 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097924779",null,null,null
2024-04-26 02:18:46 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:46 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:46 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
208	192.168.2.4	50034	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:46 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:46 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:46 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:46 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:46 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
209	192.168.2.4	50035	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:46 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:47 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:47 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:47 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
210	192.168.2.4	50036	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:47 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:47 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:47 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:47 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:47 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
211	192.168.2.4	50037	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:47 UTC	1359	OUT	GET /accounts/?hl=en&sjid=8919216180560458382-NA HTTP/1.1 Host: support.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://support.google.com/accounts?hl=en&visit_id=638496946828842109-1905716545&rd=2&p=account_iph Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097913.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:48 UTC	818	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Content-Type: text/html; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:48 GMT Expires: Fri, 26 Apr 2024 02:18:48 GMT Cache-Control: private, max-age=0 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-D70WrkzMMPgwALxkiDe/' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http: 'report-sample';report-uri https://csp.withgoogle.com/csp/scfe Content-Security-Policy: frame-ancestors https://.google.com: https://.youtube.com: X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:48 UTC	437	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 68 63 66 65 22 20 64 61 74 61 2d 70 61 67 65 2d 74 79 70 65 3d 22 48 4f 4d 45 50 41 47 45 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 20 48 65 6c 70 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 65 6d 61 69 6c 3d 6e 6f 22 20 6e 61 6d 65 3d 22 66 6f 72 6d 61 74 2d 64 65 74 65 63 74 69 6f 6e 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 66 6f 6c 6c 6f 77 2c 69 6e 64 65 78 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d Data Ascii: 8000<!doctype html><html class="hcfe" data-page-type="HOMEPAGE" lang="en"><head><title>Google Account Help</title><meta content="email=no" name="format-detection"><meta content="follow,index" name="robots"><meta content="IE=edge,chrome=1" http-equiv="X-
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 22 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 33 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 79 65 73 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 3c 73 74 79 6c 65 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f Data Ascii: accounts/?hl=en" rel="canonical"><meta content="width=device-width,initial-scale=1,minimum-scale=1,maximum-scale=3,user-scalable=yes" name="viewport"><style>@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.co
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 Data Ascii: 29,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)for
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b Data Ascii: ;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(https://fonts.gstatic.com/s/roboto/v18/K
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 30 36 46 2c 55 2b 32 30 37 34 2c 55 2b 32 30 41 43 2c 55 2b 32 31 32 32 2c 55 2b 32 31 39 31 2c 55 2b 32 31 39 33 2c 55 2b 32 32 31 32 2c 55 2b 32 32 31 35 2c 55 2b 46 45 46 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 Data Ascii: +0329,U+2000-206F,U+2074,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)format('woff2');unicode-ra
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 Data Ascii: 03-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+030
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 47 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 33 42 77 70 35 4d 4b 67 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 Data Ascii: nt-weight:400;src:url(https://fonts.gstatic.com/s/googlesans/v16/4UaGrENHsxJlGDuGo1OIlL3Bwp5MKg.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 67 6f 6f 67 6c 65 73 61 6e 73 2f 76 31 36 2f 34 55 61 62 72 45 4e 48 73 78 4a 6c 47 44 75 47 6f 31 4f 49 6c 4c 55 39 34 59 74 77 43 77 5a 2d 50 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 47 6f 6f 67 6c 65 20 53 61 6e 73 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a Data Ascii: tps://fonts.gstatic.com/s/googlesans/v16/4UabrENHsxJlGDuGo1OIlLU94YtwCwZ-Pw.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'Google Sans';font-style:normal;font-weight:500;src:
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 74 3a 77 67 68 74 40 34 30 30 3b 35 30 30 3b 37 30 30 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 67 73 74 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 44 37 30 57 72 6b 7a 4d 4d 50 67 77 41 4c 78 6b 69 44 65 2f 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 6c 79 3d 4e 6f 74 6f 2b 43 6f 6c 6f 72 2b 45 6d 6f 6a 69 26 61 6d 70 3b 64 69 73 70 6c 61 79 3d 73 77 61 70 22 20 61 73 3d 22 73 74 79 6c 65 22 20 69 64 3d 22 66 6f 6e 74 2d 6e 63 65 22 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 6e 6f 6e 63 65 3d 22 44 37 30 57 72 6b 7a 4d 4d 50 67 77 41 4c 78 6b Data Ascii: t:wght@400;500;700&display=swap" as="style" id="font-gst" rel="preload" nonce="D70WrkzMMPgwALxkiDe/"><link href="https://fonts.googleapis.com/css2?family=Noto+Color+Emoji&display=swap" as="style" id="font-nce" rel="preload" nonce="D70WrkzMMPgwALxk
2024-04-26 02:18:48 UTC	1255	IN	Data Raw: 27 63 6f 6e 66 69 67 27 2c 20 67 61 34 5f 69 64 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 27 68 65 6c 70 63 65 6e 74 65 72 27 3a 20 68 63 5f 6e 61 6d 65 2c 0a 20 20 20 20 20 20 20 20 20 20 27 73 75 70 70 6f 72 74 5f 70 61 67 65 5f 74 79 70 65 27 3a 20 70 61 67 65 5f 74 79 70 65 2c 0a 20 20 20 20 20 20 20 20 20 20 27 63 6f 6e 74 65 6e 74 5f 67 72 6f 75 70 27 3a 20 69 73 5f 63 6f 6d 6d 75 6e 69 74 79 5f 70 61 67 65 20 3f 20 27 54 61 69 6c 77 69 6e 64 27 20 3a 20 27 48 65 6c 70 20 43 65 6e 74 65 72 27 2c 0a 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 7d 29 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 74 79 6c 65 3e 68 74 6d 6c 7b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 68 74 6d 6c 2e 68 63 66 65 7b 62 Data Ascii: 'config', ga4_id, { 'helpcenter': hc_name, 'support_page_type': page_type, 'content_group': is_community_page ? 'Tailwind' : 'Help Center', }); })();</script><style>html{-webkit-text-size-adjust:100%}html.hcfe{b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
212	192.168.2.4	50039	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:48 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:48 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:48 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:48 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
213	192.168.2.4	50042	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:48 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:49 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:49 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
214	192.168.2.4	50038	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1851	OUT	POST /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 2 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097927.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:49 UTC	2	OUT	Data Raw: 5b 5d Data Ascii: []
2024-04-26 02:18:49 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:49 GMT Expires: Fri, 26 Apr 2024 02:18:49 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:49 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
215	192.168.2.4	50044	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1632 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	1632	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 34 35 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5c 22 61 63 63 6f 75 6e 74 73 5c 22 2c 5c 22 65 6e 5c 22 2c 5b 5b 35 35 5d 5d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 65 6e 5c 22 2c 5b 5b 5c 22 43 6f 72 65 5f 4d 6f 64 75 6c 61 72 5f Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],860,[["1714097928458",null,null,null,null,null,null,"[[\"accounts\",\"en\",[[55]],null,null,null,null,null,null,null,null,\"en\",[[\"Core_Modular_
2024-04-26 02:18:49 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
216	192.168.2.4	50046	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:49 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:49 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:49 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
217	192.168.2.4	50045	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1265 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	1265	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 34 36 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 32 2c 33 2c 36 32 37 37 37 32 33 32 34 5d 2c 5b 6e 75 6c 6c 2c 31 5d 2c 5b 5c 22 36 33 38 34 39 36 39 34 36 38 32 38 38 34 32 31 30 39 2d 31 39 30 35 37 31 36 35 34 35 5c 22 2c 5c 22 34 38 37 30 38 34 39 35 5c 22 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 5c 22 38 39 31 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,null,[4,0,0,0,0]]],1323,[["1714097928461",null,null,null,null,null,null,"[[[2,3,627772324],[null,1],[\"638496946828842109-1905716545\",\"48708495\",null,0,null,\"891
2024-04-26 02:18:49 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
218	192.168.2.4	50050	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1782 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	1782	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 34 37 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097928474",null,null,null,
2024-04-26 02:18:49 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
219	192.168.2.4	50047	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1307 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	1307	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 34 37 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097928476",null,null,null
2024-04-26 02:18:49 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
220	192.168.2.4	50048	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	1775	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 35 30 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097928508",null,null,null,
2024-04-26 02:18:49 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
221	192.168.2.4	50049	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1303 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:49 UTC	1303	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 35 30 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097928509",null,null,null
2024-04-26 02:18:49 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:49 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:49 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
222	192.168.2.4	50051	142.250.217.238	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:49 UTC	1423	OUT	GET /apis/caseslist?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097927.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:50 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:50 GMT Expires: Fri, 26 Apr 2024 02:18:50 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:50 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
223	192.168.2.4	50052	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:50 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1776 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:50 UTC	1776	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 35 32 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097928521",null,null,null,
2024-04-26 02:18:50 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:50 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
224	192.168.2.4	50053	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:50 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:50 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:50 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:50 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:50 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
225	192.168.2.4	50054	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:50 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1345 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:50 UTC	1345	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 35 32 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097928522",null,null,null
2024-04-26 02:18:50 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:50 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
226	192.168.2.4	50055	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:50 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1791 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:50 UTC	1791	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 32 38 35 32 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097928524",null,null,null,
2024-04-26 02:18:50 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:50 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:50 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
227	192.168.2.4	50056	142.250.217.228	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:50 UTC	930	OUT	GET /generate_204 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:51 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Fri, 26 Apr 2024 02:18:51 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
228	192.168.2.4	50057	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:51 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:51 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:51 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:51 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
229	192.168.2.4	50060	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1790 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:51 UTC	1790	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 33 30 34 33 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097930432",null,null,null,
2024-04-26 02:18:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:51 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
230	192.168.2.4	50061	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	1854	OUT	POST /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive Content-Length: 210 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/json+protobuf X-SupportContent-AllowApiCookieAuth: true X-SupportContent-XsrfToken: sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097927.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:51 UTC	210	OUT	Data Raw: 5b 5b 22 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 22 2c 22 68 74 74 70 73 3a 2f 2f 73 75 70 70 6f 72 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 73 2f 3f 68 6c 3d 65 6e 26 73 6a 69 64 3d 38 39 31 39 32 31 36 31 38 30 35 36 30 34 35 38 33 38 32 2d 4e 41 23 74 6f 70 69 63 3d 33 33 38 32 32 39 36 22 2c 22 61 63 63 6f 75 6e 74 73 22 2c 30 2c 31 2c 22 65 6e 22 2c 22 32 30 34 37 32 33 33 36 30 32 22 5d 2c 5b 6e 75 6c 6c 2c 22 48 65 6c 70 20 43 65 6e 74 65 72 20 28 52 6f 6f 74 20 74 6f 70 69 63 29 22 2c 22 33 33 38 32 32 39 35 22 2c 22 34 38 37 30 38 34 39 35 22 5d 2c 6e 75 6c 6c 2c 31 5d Data Ascii: [["8919216180560458382-NA","https://support.google.com/accounts/?hl=en&sjid=8919216180560458382-NA#topic=3382296","accounts",0,1,"en","2047233602"],[null,"Help Center (Root topic)","3382295","48708495"],null,1]
2024-04-26 02:18:51 UTC	901	IN	HTTP/1.1 200 OK Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:51 GMT Expires: Fri, 26 Apr 2024 02:18:51 GMT Cache-Control: private, max-age=0 Content-Type: application/json; charset=UTF-8 Access-Control-Allow-Origin: https://support.google.com Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT Access-Control-Allow-Headers: X-SupportContent-XsrfToken, Authorization, Content-Type, If-None-Match, X-SupportContent-AllowApiCookieAuth, x-googapps-allowed-domains Access-Control-Max-Age: 3600 X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:51 UTC	7	IN	Data Raw: 32 0d 0a 5b 5d 0d 0a Data Ascii: 2[]
2024-04-26 02:18:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
231	192.168.2.4	50059	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1319 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:51 UTC	1319	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 33 30 34 33 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097930434",null,null,null
2024-04-26 02:18:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:51 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
232	192.168.2.4	50062	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1319 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:51 UTC	1319	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 33 30 34 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097930436",null,null,null
2024-04-26 02:18:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:51 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
233	192.168.2.4	50058	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1806 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:51 UTC	1806	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 36 30 2c 5b 5b 22 31 37 31 34 30 39 37 39 33 30 34 37 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],860,[["1714097930471",null,null,null,
2024-04-26 02:18:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:51 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
234	192.168.2.4	50063	172.217.165.206	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	1013	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1338 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://support.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://support.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:51 UTC	1338	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 33 32 33 2c 5b 5b 22 31 37 31 34 30 39 37 39 33 30 34 37 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1323,[["1714097930474",null,null,null
2024-04-26 02:18:51 UTC	522	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://support.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 02:18:51 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:51 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 02:18:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
235	192.168.2.4	50064	142.250.189.142	443	2724	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:51 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:52 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:52 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:52 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:52 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.4	50065	142.250.217.238	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:52 UTC	1424	OUT	GET /apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714251%2C10800303%2C10800561%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802540%2C10802571%2C10802616%2C10802781%2C10802794%2C10803018%2C10803152%2C10803188%2C10803213%2C10803233%2C10803447&authuser=0&v=1&helpcenter=accounts HTTP/1.1 Host: support.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6; SUPPORT_CONTENT=638496946828842109-1905716545; _gid=GA1.3.946745950.1714097887; _gat_gtag_UA_175894890_5=1; _ga_H30R9PNQFN=GS1.1.1714097885.1.1.1714097927.0.0.0; _ga=GA1.3.1817944854.1714097885
2024-04-26 02:18:52 UTC	503	IN	HTTP/1.1 400 Bad Request Strict-Transport-Security: max-age=31536000; includeSubdomains Date: Fri, 26 Apr 2024 02:18:52 GMT Expires: Fri, 26 Apr 2024 02:18:52 GMT Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: support-content-ui X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 02:18:52 UTC	17	IN	Data Raw: 63 0d 0a 42 61 64 20 72 65 71 75 65 73 74 2e 0d 0a Data Ascii: cBad request.
2024-04-26 02:18:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.4	50066	142.250.189.142	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:52 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:52 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:52 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:52 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:52 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.4	50067	142.250.189.142	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 02:18:53 UTC	681	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=mI0cKgqiTWyQv5ie8qg2zLQLdFeMTu0MtyK5pJjka3qYsT-QBVrb5GxlCQ9l64GgirDg3z8o8cDyXU2mCJOtK24SQcHIjpHJgIf20WnEAy-oQhdagCHe8vGINiJPtnGyKHz7ttmUlyBb7hiYWmxpKdABqxMsIufaAIujne1Ry8g_JkVkUzW71_g09bj6
2024-04-26 02:18:53 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 02:18:53 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 02:18:53 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 02:18:53 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Target ID:	0
Start time:	04:17:21
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	04:17:23
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	04:17:25
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://us01.z.antigena.com/l/NM2_H3ohNaRsbxY0Qdv4tcu-YkhvHclHJbkSoc2ofvnMoIHuAqgUgrAiSg6Qt7i_rqr0mH7jxNDC-4wXqfiErs_yPWHYm7jFHUscHWs9ox23Spe7sX5rsyG-tlvnffVksBE56tpP-FnJ95DM1PM4f~SVGHa_7-CMkyDVecw2k-PpHpNa6Af-X_pKWmPU12NzCwOpVCzGlpztUuyezOwCoREkOTvhFUxaVzborvShlz4dJNuPvPO3c6qgQFd2xCKN7yXxSb7s"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	04:17:58
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5556 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	04:17:58
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5612 --field-trial-handle=2012,i,14015357788493433624,1087888300619023373,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131