Edit tour

Windows Analysis Report
https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view

Overview

General Information

Sample URL:	https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view
Analysis ID:	1432106
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2000,i,14581527048622102592,2490894029752333022,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrivesharing%2Fclientmodel%3Fid%3D1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps%3A%2F%2Fdrive.google.com&followup=https%3A%2F%2Fdrive.google.com%2Fdrivesharing%2Fclientmodel%3Fid%3D1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps%3A%2F%2Fdrive.google.com&ifkv=AaSxoQwhuqJe4fTrwoAG_tLDsGAq7OABepLlV0bVbjYgQsi8jrYbsBwCJVoPUdqKI0AEClBJKaW1MA&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1174077171%3A1714130945264250&theme=mn&ddm=0

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.196.177.159:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.196.177.159:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	TCP traffic detected without corresponding DNS query: 23.196.177.159
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /auth_warmup HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
Source: global traffic	HTTP traffic detected: GET /drivesharing/clientmodel?id=1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/archive?ck=drive&ds=APznzaYUfl2TcJ5k351Mz-oX5D0kiuP7VzHKjZ8VEoILiA2hdfvaiUTaVkyZkL2oXmvQURSPYmy1Ko05ZlZTcL4BdmjpOJ0KpcFGdGN3Lr-yF2n9lKZDtjR92HHKNGxegMjoovZuStNsOmmlGFFXUFNqLwzzkH_l_i-ybx3ph0Py9NW7-CeFmRr7pFJI9wcxTmwNKl_vsHLV9uuyTYtXgsxvMRoEE6QTcyRYus3pdixWgfNFGbgXKxXWU56TDg03f6-acXmnBFA3LD2GChyGqmSW0Bh2gfvxpSoStUgvKDUc75Q5mRUpM6bKL5pG2e0G-fQyHPFcfUDJ5kN2tB8iY8dsbpbQlA54s5wfSna98QQ854jnnHfcAfcAZQGtGBo_iF7Hec9hxqMB-FzNo7Xq4SoyneNepy394uk-Kh3m54q3WHo8XPXetR8%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-02/archive?ck=drive&ds=APznzaYUfl2TcJ5k351Mz-oX5D0kiuP7VzHKjZ8VEoILiA2hdfvaiUTaVkyZkL2oXmvQURSPYmy1Ko05ZlZTcL4BdmjpOJ0KpcFGdGN3Lr-yF2n9lKZDtjR92HHKNGxegMjoovZuStNsOmmlGFFXUFNqLwzzkH_l_i-ybx3ph0Py9NW7-CeFmRr7pFJI9wcxTmwNKl_vsHLV9uuyTYtXgsxvMRoEE6QTcyRYus3pdixWgfNFGbgXKxXWU56TDg03f6-acXmnBFA3LD2GChyGqmSW0Bh2gfvxpSoStUgvKDUc75Q5mRUpM6bKL5pG2e0G-fQyHPFcfUDJ5kN2tB8iY8dsbpbQlA54s5wfSna98QQ854jnnHfcAfcAZQGtGBo_iF7Hec9hxqMB-FzNo7Xq4SoyneNepy394uk-Kh3m54q3WHo8XPXetR8%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/docos/p/sync?resourcekey&id=1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc&reqid=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjU2mXLWCJzi1jm2LT5yGThl-tAzKHxVR-sixA5EW9xURqjmIyc=s64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjU2mXLWCJzi1jm2LT5yGThl-tAzKHxVR-sixA5EW9xURqjmIyc=s64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI

Source: chromecache_71.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_85.2.dr	String found in binary or memory: ff=u(["https://sandbox.google.com/tools/feedback/"]),gf=u(["https://www.google.cn/tools/feedback/"]),hf=u(["https://help.youtube.com/tools/feedback/"]),jf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),kf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),lf=u(["https://localhost.corp.google.com/inapp/"]),mf=u(["https://localhost.proxy.googlers.com/inapp/"]),nf=S(Pe),of=[S(Qe),S(Re)],pf=[S(Se),S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af)],qf=[S(bf),S(cf)],rf= equals www.youtube.com (Youtube)
Source: chromecache_73.2.dr	String found in binary or memory: var izb=function(a){return nh(function(){return KC(a,hzb,U4a)},function(b,c){(void 0===c\|\|500>c)&&b.cancel()},function(b,c){(void 0===c\|\|500>c)&&b.cancel()}).then()},jzb=function(a,b){b.then(function(){a.state=2;for(var c=n(a.C),d=c.next();!d.done;d=c.next())d.value.Mc.resolve();a.C.splice(0,a.C.length)},function(){var c=a.C.shift();c?(jzb(a,c.promise),c.Mc.resolve()):a.state=0})};var kzb=function(a){I.call(this);this.context=a;a=this.context.fa();this.C=TC(a)\|\|new WF;this.Ge=new Rh(E(this.C,6,"AIzaSyDVQw45DwoYh632gvsP5vPDqEKvb-Ywnb8"),ki(a)\|\|"0",E(this.C,7,"https://workspacevideo-pa.googleapis.com"),void 0,!0,void 0,!0,void 0,void 0);this.Ge.init();this.sa(this.Ge)};N(kzb,I);var lzb=function(a){YF.call(this,a.la());this.context=a};N(lzb,YF);lzb.prototype.D=function(){return"onYouTubeIframeAPIReady"};lzb.prototype.H=function(){var a=TC(this.context.fa())\|\|new WF;return RAa(E(a,1,"https://www.youtube.com"),"iframe_api")};lzb.prototype.C=function(){return wj("YT.Player",this.la().getWindow())};var sJ=function(a){Hf.call(this);this.C=a;this.sa(this.C);var b=a.fa();a=a.la();this.L=null;this.ha=!1;this.R=0;this.O=null;DC(b)\|\|tf(b,83);var c=M(b,iD,112);c=null!=c?C(c,1):null;c="string"===typeof c?oe(c):"https://drive.google.com";this.Ia=FOa(c);this.J=new xh(this);this.sa(this.J);this.D=new Mgb;this.sa(this.D);mzb(this,b,a);c=this.C.fa();var d=M(c,iD,112);null!=d&&oi(d,7)&&(dF(this.D,new O6a(this.C)),dF(this.D,new nD(this.C)));(d=Qh(c))&&G(d,7,!1)&&(dF(this.D,new pD(this.C)),dF(this.D,new V6a(this.C))); equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: blobcomments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: peoplestackwebexperiments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 1966sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://drive.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA

Source: chromecache_73.2.dr, chromecache_74.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_85.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_73.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_93.2.dr, chromecache_69.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_93.2.dr, chromecache_69.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_73.2.dr, chromecache_77.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_74.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_74.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_74.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_71.2.dr, chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_71.2.dr, chromecache_98.2.dr, chromecache_97.2.dr, chromecache_77.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_73.2.dr, chromecache_81.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_73.2.dr, chromecache_85.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_71.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_67.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_73.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_71.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_71.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_73.2.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_81.2.dr, chromecache_74.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_74.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_81.2.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_71.2.dr, chromecache_98.2.dr, chromecache_97.2.dr, chromecache_74.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_73.2.dr, chromecache_74.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_71.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_74.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_74.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_74.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_74.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_73.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_73.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_73.2.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_71.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_73.2.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_73.2.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_71.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_85.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_85.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_85.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_85.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_85.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_85.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_85.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_81.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_77.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_73.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_85.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_85.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_81.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_85.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_73.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_73.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_73.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_73.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_73.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_71.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_73.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_77.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_71.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_97.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_71.2.dr, chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_73.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_73.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_73.2.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_73.2.dr	String found in binary or memory: https://preprod-dynamite-alpha-us-signaler-pa.clients6.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://preprod-dynamite-alpha-us-signaler-pa.googleapis.com
Source: chromecache_73.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_85.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_85.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_85.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_73.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_73.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_74.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_71.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_85.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_85.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129?hl=en
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/docs?p=comments_guide
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignatur
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_tos
Source: chromecache_85.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_85.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_73.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_71.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_85.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_73.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_71.2.dr, chromecache_98.2.dr, chromecache_97.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_73.2.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_85.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_73.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_73.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_71.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_71.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_85.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_85.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_85.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_85.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_74.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_97.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_73.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_73.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_73.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_77.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_71.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_email_address_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_name_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_copy_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_cut_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/email_copy_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/info_outline_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/phone_copy_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_grey300.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_off_grey200.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_email_address_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_name_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_copy_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_cut_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/email_copy_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/info_outline_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/phone_copy_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_off_grey700.svg
Source: chromecache_85.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_85.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_73.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_71.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.196.177.159:443 -> 192.168.2.4:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.196.177.159:443 -> 192.168.2.4:49746 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@18/62@26/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2000,i,14581527048622102592,2490894029752333022,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2000,i,14581527048622102592,2490894029752333022,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
blobcomments-pa.clients6.google.com	192.178.50.42	true	false	high
plus.l.google.com	172.217.165.206	true	false	high
play.google.com	142.250.189.142	true	false	high
drive.google.com	142.250.217.206	true	false	high
www.google.com	192.178.50.36	true	false	high
peoplestackwebexperiments-pa.clients6.google.com	192.178.50.74	true	false	high
googlehosted.l.googleusercontent.com	142.250.217.193	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
https://drive.google.com/drivesharing/clientmodel?id=1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com	false		high
https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view	false		high
about:blank	false	Avira URL Cloud: safe	low
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png	false		high
https://play.google.com/log?format=json&hasfast=true	false		high
https://drive.google.com/auth_warmup	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_73.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_85.2.dr	false		high
http://www.broofa.com	chromecache_73.2.dr, chromecache_77.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_73.2.dr, chromecache_85.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_85.2.dr	false		high
https://support.google.com	chromecache_73.2.dr	false		high
https://apis.google.com/js/googleapis.proxy.js	chromecache_71.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_85.2.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_71.2.dr	false		high
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_73.2.dr	false		high
https://help.youtube.com/tools/feedback/	chromecache_85.2.dr	false		high
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_73.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_71.2.dr, chromecache_98.2.dr, chromecache_97.2.dr	false		high
https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview	chromecache_73.2.dr	false		high
https://policies.google.com/terms	chromecache_73.2.dr	false		high
https://www.youtube.com	chromecache_73.2.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_85.2.dr	false		high
https://www.google.com	chromecache_73.2.dr	false		high
https://support.google.com/drive/answer/2407404?hl=en	chromecache_73.2.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_71.2.dr	false		high
https://workspace.google.com	chromecache_73.2.dr	false		high
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_73.2.dr	false		high
https://support.google.com/legal/answer/3110420	chromecache_73.2.dr	false		high
https://support.google.com/docs/answer/49114	chromecache_73.2.dr	false		high
https://support.google.com/drive/answer/2423694	chromecache_73.2.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_73.2.dr	false		high
https://drive-thirdparty.googleusercontent.com/	chromecache_73.2.dr	false		high
https://content-googleapis-test.sandbox.google.com	chromecache_81.2.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_71.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_73.2.dr	false		high
https://developers.google.com/	chromecache_74.2.dr	false		high
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_73.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_74.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_85.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_85.2.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_73.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_73.2.dr, chromecache_81.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_85.2.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_71.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_85.2.dr	false		high
https://punctual-dev.corp.google.com	chromecache_73.2.dr	false		high
https://plus.google.com	chromecache_97.2.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_tos	chromecache_73.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_85.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_85.2.dr	false		high
https://clients5.google.com/webstore/wall/widget	chromecache_73.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_85.2.dr	false		high
https://preprod-dynamite-alpha-us-signaler-pa.clients6.google.com	chromecache_73.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_85.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_85.2.dr	false		high
https://content-googleapis-staging.sandbox.google.com	chromecache_81.2.dr	false		high
https://localhost.corp.google.com/inapp/	chromecache_85.2.dr	false		high
https://support.google.com/drive/answer/7650301	chromecache_73.2.dr	false		high
https://drive.google.com	chromecache_73.2.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_71.2.dr	false		high
https://policies.google.com/privacy	chromecache_73.2.dr	false		high
https://drive.google.com/requestreview?id=	chromecache_73.2.dr	false		high
https://support.google.com/docs/answer/65129?hl=en	chromecache_81.2.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_85.2.dr	false		high
https://drive.google.com/drive/my-drive	chromecache_73.2.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_76.2.dr	false		high
https://clients6.google.com	chromecache_81.2.dr, chromecache_74.2.dr	false		high
http://localhost.corp.google.com/inapp/	chromecache_85.2.dr	false		high
https://play.google.com	chromecache_73.2.dr	false		high
https://clients5.google.com	chromecache_73.2.dr	false		high
https://console.developers.google.com/	chromecache_74.2.dr	false		high
https://signaler-pa.youtube.com	chromecache_73.2.dr	false		high
https://support.google.com/inapp/%	chromecache_85.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_85.2.dr	false		high
https://drivemetadata.clients6.google.com	chromecache_73.2.dr	false		high
https://support.google.com/docs/answer/148505	chromecache_73.2.dr	false		high
https://support.google.com/	chromecache_85.2.dr	false		high
https://support.google.com/docs/answer/37603	chromecache_73.2.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_71.2.dr	false		high
https://support.google.com/contacts/answer/7345608	chromecache_81.2.dr	false		high
https://csp.withgoogle.com/csp/lcreport/	chromecache_98.2.dr, chromecache_97.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_71.2.dr	false		high
https://scone-pa.clients6.google.com	chromecache_85.2.dr	false		high
https://lh3.googleusercontent.com/a/default-user	chromecache_81.2.dr	false		high
https://support.google.com/inapp/	chromecache_85.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_85.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_74.2.dr	false		high
https://apis.google.com	chromecache_71.2.dr, chromecache_98.2.dr, chromecache_97.2.dr, chromecache_77.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/tools/feedback/	chromecache_85.2.dr	false		high
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_85.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_98.2.dr, chromecache_97.2.dr	false		high
https://apps-drive-picker-dev.corp.google.com/picker/minpick/main	chromecache_73.2.dr	false		high
https://feedback2-test.corp.google.com/inapp/%	chromecache_85.2.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_73.2.dr	false		high
https://signaler-pa.clients6.google.com	chromecache_73.2.dr	false		high
https://classroom.google.com/sharewidget?usegapi=1	chromecache_71.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
192.178.50.36	www.google.com	United States	15169	GOOGLEUS	false
142.250.189.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.64.225	unknown	United States	15169	GOOGLEUS	false
142.250.217.206	drive.google.com	United States	15169	GOOGLEUS	false
142.250.64.196	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.217.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432106
Start date and time:	2024-04-26 13:28:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@18/62@26/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.174, 173.194.211.84, 142.250.64.195, 34.104.35.123, 142.251.35.234, 142.251.35.227, 142.250.217.227, 142.250.64.131, 142.250.64.234, 172.217.2.202, 192.178.50.74, 172.217.15.202, 142.250.189.138, 142.250.64.170, 172.217.3.74, 192.178.50.42, 142.250.217.170, 142.250.217.202, 172.217.165.202, 142.250.217.234, 142.250.64.202, 52.165.165.26, 72.21.81.240, 192.229.211.108, 20.3.187.198, 142.250.64.138, 52.165.164.15, 172.217.165.206
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, wu-bg-shim.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, content.googleapis.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1797
Entropy (8bit):	4.410537021638487
Encrypted:	false
SSDEEP:	24:Gv7F95GJOD3TY1jX1AMzoVDMx0qE/3aHe+XSxQ0c4aZALAh+YbarUW:GDF53TY1jlTshMxqaH6Q0c49Ahlbu
MD5:	C942F5797CEEC1536D48B1EF5A6BF12F
SHA1:	2C39D85556A9E2021B633BEF1BF1396BBB2E38E9
SHA-256:	E29DBC0C3B2124A61166C1A0DD3CC2A99D78A8F0381B35B5ABFC4CE205B172EF
SHA-512:	6494DC86BB6599958522126212F0CCF3B8CA331886A6AA738B2EF40A0EB3A421E9246E723022A7C61BAD5BC203772FD2762764C1021AA72293DD250A0B21C5CC
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/metadata?docId=1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc&revisionId=0B94k2E7ZMtPxWEhWTDErY243QTc0UWd4dVM1RENSdTNCZ3JRPQ&userLocale=en&timeZoneId=Etc%2FGMT-2&documentResourceKey.resourceKey&forceImportEnabled=true&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{. "serializedDocosKeyData": "[null,null,0,null,null,null,null,1,[\"Anonymous\",null,\"//ssl.gstatic.com/docs/common/blue_silhouette96-0.png\",\"ANONYMOUS_105250506097979753968\",1,null,1,null,1],1,\"AAHRpnXvk61LYB4REBJPJWJkT6h37_SchH40VLoIOmwHK7zn9Ef3oU66XkMGN6FLkMinr7HiDv94bLNbsmOHVm0P1diOA8KDVGw\",null,null,null,null,null,1,null,null,1,null,null,null,null,1,0,null,null,null,0,null,null,0,null,null,null,null,1,0,null,null,null,null,[\"tf\",60000,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,1,null,null,null,null,null,null,0,null,null,\"\",null,0,null,null,null,null,0],[[5703839,5704621,5704745,5707899,5711538,5712270,5712639,5712647,5713195,5714051,5737800,5748810,5779500,5792878,48966262,49372463,49375342,49451659,49453005,49472091,49622751,49623141,49643963,49769

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=8creyvbmaz5r
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.28511870655831
Encrypted:	false
SSDEEP:	6:hxuJLzLMb038GblaFbdFS37fVBeQDXY2F6YkAbvOm/esHeOblaFbd4Nhdx434QL:hYA0blaFxk79hLFBkAb2m/esH9laFp4M
MD5:	94A32C7EF48D5749D9D0AB47FF05CE40
SHA1:	DE7E3DB4D82E0A3C25667AFAD25D201B66FC1522
SHA-256:	EA169B5A58B8C8D52818AC8AE5A072FE5DF82530B157D30DB79A0F0ACA0C553E
SHA-512:	9B6B726CF51E69C6CA916C26A46611DD7815BF06516D65AC92058A2428099AB13D8E369C980DF04C70E9F0CFA8270375AED3BE253E461B3F43909C443B1A1418
Malicious:	false
Reputation:	low
URL:	https://content.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SCWmpDDGjPk.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script nonce="dpbHTyaxtjuZj5-OIevyKw">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async defer nonce="dpbHTyaxtjuZj5-OIevyKw"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	464
Entropy (8bit):	4.758217138015706
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dpXaGC8aLK:uZC4vgYZLPQ5C8a+
MD5:	BA6AB51487CFAEF8F7E56133C34AAE37
SHA1:	19DF244D1D07FF43020A7B001A5B27498507CB7D
SHA-256:	FB20FC7C1F7CFCF723EFCEE54434C316E05EE614F707502344330828FFC1CC98
SHA-512:	95EC94EE16487C430C45E98CF822425F2C7934F69CA257C5E20B1F9E659D6BBF6519E09AD65CE18DA8CA3786D477FC93286F3C6C6AAA1C08B319A4B9AAE854EA
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "consumer": "projects/298134251447". }. }. ]. }.}.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	118370
Entropy (8bit):	5.846748398907928
Encrypted:	false
SSDEEP:	3072:Dz9w9o3/vsq1xCLqrQcS8xriAX7E1fbaRrcjS57l+QDk/J0/JOBv3:Dz9McHCLqEcS8xOAX7E1f2BP0
MD5:	BA7AB7044D6C6C0240C3917858948CFF
SHA1:	3B840B104CB3D74D5A35FBD193ACA32D27815D3E
SHA-256:	0189F7C6ED35A7BE5E51A30366FBC54C9C9E27D2511DB44895D85A1458F83AB5
SHA-512:	660D3407052C6965E6451C8D2AA9DC302C0F97129864E320731B89174F2A87B776201A57AA30A8CCF1A455700A6D9E2C42A070CC0F964D14A6D9E73DA47C4697
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="3980px" viewBox="0 0 31 3980" preserveAspectRatio="none"><g transform="translate(0,960)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,432)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2152)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10.0

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (618)
Category:	downloaded
Size (bytes):	6796
Entropy (8bit):	5.413890068658508
Encrypted:	false
SSDEEP:	192:kLURn1ieBgUselzgLirQ8MN3/D0KdRuNRRJs:ks1cUseiLikn/gU2s
MD5:	F1E25DBA0C173122E39EA7D312B1BA9A
SHA1:	2960F4AC52B18B5BAE19C923F7B7B6869DF87768
SHA-256:	451BB3BE1C54F1C670523707516B53E68537E90AC19EBB0920BEE90FADEB75F3
SHA-512:	64F51508AF5D1BAE15EDDA0791AF3ECB807332D6B22E0A9A56C84A0EA461714A4093A9F18F9DF0260384D53A2FEAA2856AAA54061A9717124B63114B5B310072
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.9-tWEU_WTXw.O/am=AAw/d=0/rs=AO0039tMQJLD0qTIDmSwVt_r4CF-V_b3-A/m=MpJwZc,UUJqVe,sy5,s39S4,syn,pw70Gc"
Preview:	try{.z("MpJwZc");..A();.}catch(e){_DumpException(e)}.try{.z("UUJqVe");..A();.}catch(e){_DumpException(e)}.try{.Se(Ow);.}catch(e){_DumpException(e)}.try{.z("s39S4");.var HRb=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,"C-DATA"===a.tagName&&(b=a.parentElement),NGa(b,!1))},IRb=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return Jg(e,":.CLIENT")});Fa(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);jha(a)},MRb=function(){JRb\|\|(JRb=!0,KRb=ufa,ufa=function(a){KRb&&KRb(a);for(var b=0;b<a.length;b++){var c=a[b];He(c)&&.Ue(c).lAa(c)}},LRb=vfa,vfa=function(a){LRb&&LRb(a);for(var b=0;b<a.length;b++){var c=a[b];He(c)&&Ue(c).mAa(c)}})},NRb=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-css-collection]")));for(var c=a.n

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15118
Entropy (8bit):	5.4657756428542035
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFC+5SYOelHO91eIuW:IQumA+QDnRNOG6
MD5:	EAB0DC82067FB5758A121009C7040231
SHA1:	8D869354F7A947ECC087B23868999BC53F77BDF7
SHA-256:	9C77D6DB3131248F92AE41075F189B4ECC2E51BCFDCCA143719A83145F8AC070
SHA-512:	280694C2A85A67CFFB24DEED946E46D7BF8F2C52194EEE037F981CA25A58730974B5F0CDC74CE86E81C5D252362E6792EB0B38C8816B3BF6C096A58C6C84F1C4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (609)
Category:	downloaded
Size (bytes):	1751361
Entropy (8bit):	5.6280869637058855
Encrypted:	false
SSDEEP:	24576:qLglGbIXq7MxRJ2bZygqmYDB5tElwl0Iy6nlPjtgtfOCx:qLglGbgq7M52bZygqT5tEulux
MD5:	A324422B213E012C359002AAC8AAD0EA
SHA1:	FCF6305DBD8AA976186174B733506F02DD5CB18A
SHA-256:	FA0C61814E9BAA7B817CF4FE5F081D6FF4F2B58E458151744FADDCAEF536C864
SHA-512:	A9CC6FCE87FF8539BFA8AC5FE1BDE96DCB7B646A82B8F91922E3A12080EC5212EDC3BE1CCBC429CB736E1BB343CCED1B59E091BAA9C9B710A4B1B4839C7633FA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.9-tWEU_WTXw.O/am=AAw/d=1/rs=AO0039tMQJLD0qTIDmSwVt_r4CF-V_b3-A/m=v,wb"
Preview:	try{.var _F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0xc00, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*. Copyright The Closure L

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1293)
Category:	downloaded
Size (bytes):	208027
Entropy (8bit):	5.521227524487725
Encrypted:	false
SSDEEP:	3072:DZPnV7GetUe8q2fFZO3v2hLbs4unPb1Qq7p9+OyqnMrVsxpo0ahXSuPQBmgC:JV7setI/sZnGq7p9+OypAzwCuPQBmgC
MD5:	E2965C7B2C07132BA0770965EFE81CA4
SHA1:	B1AA82452465DD74BC80BDA33C62CE7ECB172064
SHA-256:	82B3F379A1BBB41DE5081E80DD9583AD5E77C011B501CDE5F9317463001F3CA2
SHA-512:	B88E3C8D16B64DB36D5A87808C04CA91A30525765ED7ECF117684C2A99F3BC6F12CA7B93C3BFCA99F7A3225A638A7ED0F1D25F47555EF3044A49575777F00DC3
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.yh=(window.gapi\|\|{}).load;._.Ko=_.lf(_.yf,"rw",_.mf());.var Lo=function(a,b){(a=_.Ko[a])&&a.state<b&&(a.state=b)};var Mo=function(a){a=(a=_.Ko[a])?a.oid:void 0;if(a){var b=_.hf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Ko[a];Mo(a)}};_.No=function(a){a=a.container;"string"===typeof a&&(a=document.getElementById(a));return a};_.Oo=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Po=function(a,b){var c={},d=a.Gc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Lo(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.yf.oa){var k=d.id;if(k){f=(f=_.Ko[k])?f.state:void 0;if(1===f\|\|4===f)break a;Mo(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27287
Entropy (8bit):	5.5846008987990015
Encrypted:	false
SSDEEP:	192:ocbwXTbdhGo+7y0zhY7UVbqGIwDqwK2qiHd4HwwsIw6h5oxQ1fohjQ/VbqGIw4NZ:a3eVqS2LWuqlF7isqfq
MD5:	A4D49184D5EE811D1F859C928D41BEE6
SHA1:	ACD6B3AD62D31E9E2CB37E2E931CC78CAAE5FCC0
SHA-256:	10FB805E679F1F472880CE7651D5B39F8EE4DA5483CA55F96C26898FB115DB9F
SHA-512:	FABC6066E832443B87FD3D95567F7144CB01A6A23F080D1CF625B6537FFDF39BB15E67F3A6A4938E8F49E84C88839C79E3FF50A2239809CE17DEB0C6800AE42B
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans:300,400,500,700"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2114)
Category:	downloaded
Size (bytes):	213814
Entropy (8bit):	5.522382982921398
Encrypted:	false
SSDEEP:	6144:UNu80eMhzvSHHKWY8s1BgP4IDQ9GURWu8UA/RRUPhDlaY/ADiZ6eCpKl:w0eQzvSHHKWXs1BgP4IDQ8URWu8UA/RE
MD5:	DFB1C20B409BCBEC4DAE300CC3651C6D
SHA1:	4BEA498C43ACE7B538852DC4BD713CECB370B93E
SHA-256:	F97BC1115687033194E62AE733FADCE1BF41297F835136C10D7FE4F870643909
SHA-512:	F65C4F91B7B5EF5156BF32DBDA163B8A68A02F8B475E5E02D3FF735F3726A62A11FA371F779C278FDCA6CF816C57D1885882346F191479011B8E8E353AC2F380
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.oT1FwJRCVC4.2019.O/rt=j/m=qabr,q_dnp,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTvBynad-nWEy1xIb9j1w6LpLOF6IQ"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.pe=function(a){return _.od(a)&&1==a.nodeType};_.qe=function(a,b){if("textContent"in a)a.textContent=b;else if(3==a.nodeType)a.data=String(b);else if(a.firstChild&&3==a.firstChild.nodeType){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.ne(a),a.appendChild(_.oe(a).createTextNode(String(b)))};var re;_.se=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;""===c\|\|void 0==c?(re\|\|(re={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=re,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var we;_.ve=function(a,b,c,d,e,f){if(_.Kb&&e)return _.te(a);if(e&&!d)return!1;if(!_.Ib){"number"===typeof b&&(b=_.ue(b));var g=17==b\|\|18==b\|\|_.Kb&&91==b;if((!c\|\|_.Kb)&&g\|\|_.Kb&&1

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=tu1d44t6bg8f
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1841)
Category:	downloaded
Size (bytes):	938505
Entropy (8bit):	5.551723717093037
Encrypted:	false
SSDEEP:	6144:Ii92UlcuZbLygafct8Ruh8css4Q2nYH/uK0VHCEL+8GFLMoHWnoD1grS/gkHxNrz:72UygW+32nYH/AxC385oxJg4N2BvrU2G
MD5:	7A6754A48DAFF503BE2A7DB0840487CD
SHA1:	0689679485F65633CBD40A1C591ED2D69948B4DF
SHA-256:	F9BBEAC688FB4D0490F4B3714D8AF04201CEBDFA5E10B000A68B3D13963B379A
SHA-512:	E66C5899AC84C606A8229DA7728B89C3687AFCF7AFED4CB20F0896062CE3B3EB88A78FC3E9AB9B01CFEEEB527010F5B708340740E0E90EB34F3C026851EAB52E
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.9-tWEU_WTXw.O/am=AAw/d=0/rs=AO0039tMQJLD0qTIDmSwVt_r4CF-V_b3-A/m=dSirkf,sy5o,sy1p,n90YA,ZGAB2e,sLGWFe,sy1k,sy2r,sy1r,sy3f,sy16,M79aPc,sys,syu,sy13,sy1m,sy1q,sy1x,sy2k,sy2s,sy2x,sy34,sy3h,sy3v,sy3s,sy56,nJ4XF,sy5p,sy5r,UKcSG,AtsVYc"
Preview:	try{.z("dSirkf");..A();.}catch(e){_DumpException(e)}.try{.z("n90YA");.var iSc=new Dr;iSc.altKey=!0;iSc.keyCode=39;(new Dr).keyCode=13;.A();.}catch(e){_DumpException(e)}.try{.z("ZGAB2e");..A();.}catch(e){_DumpException(e)}.try{.z("sLGWFe");..A();.}catch(e){_DumpException(e)}.try{.var ON=function(a){this.da=q(a)};N(ON,v);ON.prototype.Hk=function(){return Xh(this,7)};var PN=function(a){this.da=q(a)};N(PN,v);PN.prototype.getName=function(){return E(this,4)};PN.prototype.Fp=function(){return E(this,11)};var QN=function(a){this.da=q(a)};N(QN,v);QN.prototype.getInfo=function(){return M(this,PN,1)};QN.prototype.Bl=function(){return M(this,ON,3)};.}catch(e){_DumpException(e)}.try{.var j0b=function(a){this.da=q(a)};N(j0b,v);j0b.prototype.getSeconds=function(){return ue(this,1)};.}catch(e){_DumpException(e)}.try{.var f$b=function(a){return a instanceof tO},tO=function(a,b){En.call(this,a,b)};N(tO,En);tO.prototype.Wv=function(a){a=K(a,f$b,tO);if(!Sl(this.constructor,a.constructor))throw a=new Cn,Y

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=jwxub3bcgtoz
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	626
Entropy (8bit):	4.60225951443478
Encrypted:	false
SSDEEP:	12:uZC4eGZC4SfPQgsyw1CYZOgX8XP9GTBdA3YNdpXaD8aLK:uZC4e6C4STwgYZLPQSXa+
MD5:	83A8719F50F54A04835CF33B68E9DA68
SHA1:	9A5B826814B6AF5960092F0D995E5D9C6317FC49
SHA-256:	E4C44B356156B57A483B9B8468946997FDEFFBCD600482C0B362ED9768A071FA
SHA-512:	D1BAC50E7CD13A1654A9A20F245CA53C4E100155F3669DF6A431E75FF198C2D2798A5C58EF46F335A69FA632CA08E0763F7B08D07721E2F82490565EE92942C3
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "errors": [. {. "message": "Requests from referer \u003cempty\u003e are blocked.",. "domain": "global",. "reason": "forbidden". }. ],. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "drive.googleapis.com",. "consumer": "projects/847707997455". }. }. ]. }.}.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	downloaded
Size (bytes):	108096
Entropy (8bit):	7.329108556938803
Encrypted:	false
SSDEEP:	1536:DpGvkJ2QiqfLi8vbhAbaMppwKLFFT3lBnCZLJfVBuTp8q21of4BlKEU1fu1s9:kvkASe8KbdpwYFh1gxJNzm4BldU5As9
MD5:	9FA4B24A16A6FB1B887508B7C5C6A6D2
SHA1:	6F83E1FA9920D0FC1BBA25F7505ADA298B2AE4B3
SHA-256:	1DB6691B9B06A8DFD43F6D021D111A759F1B2F543BA7FCF05C350803544DD21A
SHA-512:	B7511CB3D487A868328B5CB0054AECB1EC56DBD9C06DCC684E881B0BB0A4CDA62300FAAD3E8BE55D194FE18F4A6A26A92EF6C8A0A7C7F0504981057FC73AF2EB
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/a-/ALV-UjU2mXLWCJzi1jm2LT5yGThl-tAzKHxVR-sixA5EW9xURqjmIyc=s64
Preview:	GIF89a@.@..........?@?.... ._`_....../0/RRRopo..........HGHhgh...878...**...ZYZzyz...........GHG'('ghg...787...NNNnnn...>=>.........BAB!!!bab......212XWXrqr............0/0...`_`.......................VUV..........IIIiii...999---...^^^~}~..............POPpop . @?@EEE&&&fef...666vvv............................................................................................................!..NETSCAPE2.0.....!.......,....@.@..............................................".(.....J....W.L??.AJJF.=.8D#=.....>?....P.......N.C..G...>.>A.M[[A[.....9.CC?F-.VJ.A?........L......&.24..`........... "V,..........0"...)D-....."....B..,0Rh1......8i`@....T0.`sH.^R.\Y.-.....0I .%..K......."... A..J..>r(.....K.\.. ...V.e..B...2.@.....6..a... K.$X.... ?.0......I6).1.J.].ViQP....7I.H.V.(@...."..Z....J.E. 0.!..@..#.@.Z.d...G@,..J.M/,..F..$.`.^....E.@....p..>.%..6a...$.`Es.pG@.R....V\|S..`..`Kd..........`A&..........[.h.x.\1..\ ...~..Av+.....>....+\..@.0.B..0...4g.*Vd...I$a..@dA....D.% ..h.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108506
Entropy (8bit):	5.48567792175291
Encrypted:	false
SSDEEP:	1536:dQed4sDzUV8xLgvIDTxF9/a4+ECrOd/FeSZiSyz2NUAMSceu4GseEP2q:pV88pTxv9erMJi72NUAMIGs3
MD5:	B1603D0E9433907B5F5AC30B5018DD45
SHA1:	E9F09D93B13340342F82D3346AAC0F844FC0A1FE
SHA-256:	1FB71328DF3633BEACAD3165E7A28463FFD4A5B3BEE5C2969041DA8591E760BF
SHA-512:	167591CEE0413EA23BB9086E3400D2CC28AA91B83F2838C1CAB38D9E74B39CB092888E5F7F440E2650D69C205CD8F9818327B15DCCCB9C87F71BFCC9DC9BF76B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(g,f){this.uc=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.uc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	6.668570364625647
Encrypted:	false
SSDEEP:	6:6v/lhP+Bw51z9YaD6kDNsPl2PLIUdyDXwn/jp:6v/7IwrnPDNe2PLIUdyDXwn/N
MD5:	E718A1B337A3197CBC7ED8C8F560FB5D
SHA1:	703765677CFEA246D06C2481E0BB495EC3D095F3
SHA-256:	933453961F18E84204C8A3A13FBF771DF892E18DFD0C820C4437D99CC0EDED60
SHA-512:	8328FCF407EA2510F910FE3C729615061CE44AA049FA7CA7278FEA81AF533607541CB15700C01DB2BD5070DB8816B6CF8A5E2AFAE2CACCF9E83B4AA3B2567145
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_2_archive_x16.png
Preview:	.PNG........IHDR................a....IDATx......1..].@#\.../R..@'.@....@.f......bY........W9g...>.......4..=.U...`...........z...w.....bY..P...n2=....%...L..\@%P....!...U.m....e..-.~9.....IEND.B`.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (962)
Category:	downloaded
Size (bytes):	14745
Entropy (8bit):	5.6245578813760755
Encrypted:	false
SSDEEP:	192:j8eGerGp/fQzFBvxxCH7meM9a6JZuetJfK4FZiR7aoavo:j8n/8xql6ht86Z+71
MD5:	2C7A6BA6BF3AEF36903F868989D6360F
SHA1:	932FB91C574B5914A3B1E3009AEAE6725606F416
SHA-256:	69609ADD4A6958EA2D590B87356481DBD0CFD7392AC98FC8E4DC0766FEC5B8F9
SHA-512:	49FEFEAF4BBF6F02C3D477B7582506543C9A380CA599F2B2658558621274A858C379F9650D4E97DF1ABB1525F6426C4E04EE7EE57231A096CBA041FC3A9B5AB7
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en.9-tWEU_WTXw.O/am=AAw/d=0/rs=AO0039tMQJLD0qTIDmSwVt_r4CF-V_b3-A/m=sy5q,sy5t,sy5s,G5ZZUb,sy5u,a9i3ec,J9ssyb"
Preview:	try{.var xSc=function(){IF.apply(this,arguments)};N(xSc,IF);xSc.prototype.enqueue=function(a,b){this.insert(a,b)};var ySc=function(a,b){a%=b;return 0>a*b?a+b:a},zSc=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var VHd=function(a,b){this.C=a instanceof Or?a:new Or(a,b)};Bj(VHd,RZa);VHd.prototype.Od=function(a,b,c,d){var e=Ur(a);var f=e.body;e=e.documentElement;e=new Or(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=SZa(a);f-=g.x;e-=g.y;DA(new Or(f,e),a,b,c,null,null,d)};var WHd=function(a,b){VHd.call(this,a,b)};Bj(WHd,VHd);WHd.prototype.F=0;WHd.prototype.D=function(a){this.F=a};.WHd.prototype.Od=function(a,b,c,d){var e=Ft(a);e=Ht(e);var f=as(Id(a).ld);f=new Or(this.C.x+f.scrollLeft,this.C.y+f.scrollTop);var g=b,k=DA(f,a,g,c,e,10,d);if(0!=(k&496)){if(k&16\|\|k&32)g^=4;if(k&64\|\|k&128)g^=1;k=DA(f,a,g,c,e,10,d);0!=(k&496)&&DA(f,a,b,c,e,this.F,d)}};var I5=function(a,b){hB.call(this,a,b);this.GF=!0;aB(this,!0);this.ua(!1,!0);

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 64 x 64
Category:	dropped
Size (bytes):	108096
Entropy (8bit):	7.329108556938803
Encrypted:	false
SSDEEP:	1536:DpGvkJ2QiqfLi8vbhAbaMppwKLFFT3lBnCZLJfVBuTp8q21of4BlKEU1fu1s9:kvkASe8KbdpwYFh1gxJNzm4BldU5As9
MD5:	9FA4B24A16A6FB1B887508B7C5C6A6D2
SHA1:	6F83E1FA9920D0FC1BBA25F7505ADA298B2AE4B3
SHA-256:	1DB6691B9B06A8DFD43F6D021D111A759F1B2F543BA7FCF05C350803544DD21A
SHA-512:	B7511CB3D487A868328B5CB0054AECB1EC56DBD9C06DCC684E881B0BB0A4CDA62300FAAD3E8BE55D194FE18F4A6A26A92EF6C8A0A7C7F0504981057FC73AF2EB
Malicious:	false
Reputation:	low
Preview:	GIF89a@.@..........?@?.... ._`_....../0/RRRopo..........HGHhgh...878...**...ZYZzyz...........GHG'('ghg...787...NNNnnn...>=>.........BAB!!!bab......212XWXrqr............0/0...`_`.......................VUV..........IIIiii...999---...^^^~}~..............POPpop . @?@EEE&&&fef...666vvv............................................................................................................!..NETSCAPE2.0.....!.......,....@.@..............................................".(.....J....W.L??.AJJF.=.8D#=.....>?....P.......N.C..G...>.>A.M[[A[.....9.CC?F-.VJ.A?........L......&.24..`........... "V,..........0"...)D-....."....B..,0Rh1......8i`@....T0.`sH.^R.\Y.-.....0I .%..K......."... A..J..>r(.....K.\.. ...V.e..B...2.@.....6..a... K.$X.... ?.0......I6).1.J.].ViQP....7I.H.V.(@...."..Z....J.E. 0.!..@..#.@.Z.d...G@,..J.M/,..F..$.`.^....E.@....p..>.%..6a...$.`Es.pG@.R....V\|S..`..`Kd..........`A&..........[.h.x.\1..\ ...~..Av+.....>....+\..@.0.B..0...4g.*Vd...I$a..@dA....D.% ..h.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	118370
Entropy (8bit):	5.846748398907928
Encrypted:	false
SSDEEP:	3072:Dz9w9o3/vsq1xCLqrQcS8xriAX7E1fbaRrcjS57l+QDk/J0/JOBv3:Dz9McHCLqEcS8xOAX7E1f2BP0
MD5:	BA7AB7044D6C6C0240C3917858948CFF
SHA1:	3B840B104CB3D74D5A35FBD193ACA32D27815D3E
SHA-256:	0189F7C6ED35A7BE5E51A30366FBC54C9C9E27D2511DB44895D85A1458F83AB5
SHA-512:	660D3407052C6965E6451C8D2AA9DC302C0F97129864E320731B89174F2A87B776201A57AA30A8CCF1A455700A6D9E2C42A070CC0F964D14A6D9E73DA47C4697
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/viewer/v3/v-sprite56.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="3980px" viewBox="0 0 31 3980" preserveAspectRatio="none"><g transform="translate(0,960)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,432)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2152)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10.0

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	209
Entropy (8bit):	6.668570364625647
Encrypted:	false
SSDEEP:	6:6v/lhP+Bw51z9YaD6kDNsPl2PLIUdyDXwn/jp:6v/7IwrnPDNe2PLIUdyDXwn/N
MD5:	E718A1B337A3197CBC7ED8C8F560FB5D
SHA1:	703765677CFEA246D06C2481E0BB495EC3D095F3
SHA-256:	933453961F18E84204C8A3A13FBF771DF892E18DFD0C820C4437D99CC0EDED60
SHA-512:	8328FCF407EA2510F910FE3C729615061CE44AA049FA7CA7278FEA81AF533607541CB15700C01DB2BD5070DB8816B6CF8A5E2AFAE2CACCF9E83B4AA3B2567145
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx......1..].@#\.../R..@'.@....@.f......bY........W9g...>.......4..=.U...`...........z...w.....bY..P...n2=....%...L..\@%P....!...U.m....e..-.~9.....IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2555126
Entropy (8bit):	5.689231326615333
Encrypted:	false
SSDEEP:	24576:UC6BZ7KPOoN3w5bIjTFRz7TbL02DiYAol/:IBZ7KPOoNA52z7TbL02DiYAs/
MD5:	B30684149D9314B57EA4EB7FB39067B0
SHA1:	0E66A4BCECED11B744E97F50BD9531EC5115A7D9
SHA-256:	51BEF573F90F9636D84E2C6CD5F0EF28357BC0373EF3E1091D4E657C0AB8E5E0
SHA-512:	EE6BCE25D8982614568D2CA7B625854E49201B9792FAD5985BFF1E0FBE3B0FB253678E07404EF04BED61AE2170AB90711E498D68A9FF88603AE206DD24F40D66
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/apps-fileview/_/ss/k=apps-fileview.v.oXWFn4yqGvc.L.W.O/am=AAw/d=0/rs=AO0039vgYAc5bT8aXfr2kk-MxvzYuWIq0A
Preview:	@-webkit-keyframes mdc-ripple-fg-radius-in{0%{-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-transform:translate(var(--mdc-ripple-fg-translate-start,0)) scale(1);-webkit-transform:translate(var(--mdc-ripple-fg-translate-start,0)) scale(1);transform:translate(var(--mdc-ripple-fg-translate-start,0)) scale(1)}to{-webkit-transform:translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1));-webkit-transform:translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1));transform:translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1))}}@keyframes mdc-ripple-fg-radius-in{0%{-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-transform:translate(var(--mdc-ripple-fg

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	121628
Entropy (8bit):	5.506662476672723
Encrypted:	false
SSDEEP:	3072:QI9yvwslCsrCF9f/U2Dj3Fkk7rEehA5L1kx:l9ygsrieDkVaL1kx
MD5:	F46ACD807A10216E6EEE8EA51E0F14D6
SHA1:	4702F47070F7046689432DCF605F11364BC0FBED
SHA-256:	D6B84873D27E7E83CF5184AAEF778F1CCB896467576CD8AF2CAD09B31B3C6086
SHA-512:	811263DC85C8DAA3A6E5D8A002CCCB953CD01E6A77797109835FE8B07CABE0DEE7EB126274E84266229880A90782B3B016BA034E31F0E3B259BF9E66CA797028
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	79644
Entropy (8bit):	5.598027612956531
Encrypted:	false
SSDEEP:	1536:TVp1T5UI9yvkVs5yC9waydVo/29oN7VC6parVqvAq:QI9yvwsl5NYlrV/q
MD5:	5845C4B4039A782892BA98EEFE3537FE
SHA1:	53094E84BE77E96AFE3B3F3CF337044A8AC3C4DB
SHA-256:	F730FB8496D16C5F117388BB3F5F2B117DB2D49AA9C35E7BFD5318C7253DBFD2
SHA-512:	57C823B9BD9F56F2081766D9F083FDC70BA6277B3B1A897BF75891329E83F95C967A647676C3573E33471D3A8F61F599D4A1949303D2033DC25CAD37CE76A602
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmlNHcUu78_khIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 13:28:46.611526966 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 13:28:56.236500025 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 13:28:56.650706053 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.650738955 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.650930882 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.651068926 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.651164055 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.651238918 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.651272058 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.651284933 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.651490927 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.651525974 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.978718996 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.979774952 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.979811907 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.980205059 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.980268002 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.980900049 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.980967999 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.983004093 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.983067989 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:56.983165979 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:56.983175993 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.039119959 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.039490938 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.039519072 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.040028095 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.040102959 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.041038990 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.041091919 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.041237116 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.041318893 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.088592052 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.222687006 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.222735882 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:28:57.222903967 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.223016977 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.223028898 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:28:57.244327068 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.244390011 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.299077034 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.561644077 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:28:57.562036991 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.562122107 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:28:57.563765049 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:28:57.563858986 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.565021038 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.565119028 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:28:57.577945948 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.583446980 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.583611012 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.583632946 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.594280958 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.594361067 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.594368935 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.605148077 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.605295897 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.605303049 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.611668110 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.611682892 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:28:57.616256952 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.616317987 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.616326094 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.626921892 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.626976013 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.626981974 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.637995958 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.638056993 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.638067007 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.652945042 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:28:57.683372974 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.735074043 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.740497112 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.740564108 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.740573883 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.751264095 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.751331091 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.751333952 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.751343966 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.751384974 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.762150049 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.773076057 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.773113012 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.773123026 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.773130894 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.773169041 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.773175001 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.783931017 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.783987999 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.783994913 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.794775963 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.794842958 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.794850111 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.805676937 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.805886030 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.805896044 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.815957069 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.816026926 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.816035986 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.829935074 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.829960108 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.829997063 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.830005884 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.830043077 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.839504957 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.848903894 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.848962069 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.848962069 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.848973036 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.849011898 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.858431101 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.867820978 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.867866039 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.867872953 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.877276897 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.877306938 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.877338886 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.877346039 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.877391100 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.890108109 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.893686056 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.893738031 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.893764019 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.900652885 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.900698900 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.900703907 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.900712013 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.900748014 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.906898022 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.913826942 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.913876057 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.913883924 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.919493914 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.919517994 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.919538975 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.919545889 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.919578075 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.925857067 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.929042101 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.929081917 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.929094076 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.935451031 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:28:57.935635090 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.935918093 CEST	49735	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:28:57.935936928 CEST	443	49735	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:00.281574011 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.281596899 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.281940937 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.283406019 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.283416033 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.548576117 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.548990011 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.557001114 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.557020903 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.557420969 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.610951900 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.649359941 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.696106911 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.795530081 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.795757055 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.795945883 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.796324968 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.796344995 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.796395063 CEST	49745	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.796401024 CEST	443	49745	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.841308117 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.841337919 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:00.843149900 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.844300032 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:00.844310999 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.107974052 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.108270884 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:01.110193968 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:01.110199928 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.110526085 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.112766027 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:01.160105944 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.370466948 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.370649099 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.370708942 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:01.448215961 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:01.448235989 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.448246956 CEST	49746	443	192.168.2.4	23.196.177.159
Apr 26, 2024 13:29:01.448251963 CEST	443	49746	23.196.177.159	192.168.2.4
Apr 26, 2024 13:29:01.865586042 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:01.870141983 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:01.870229959 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:01.870296955 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:01.870464087 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:01.870498896 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:01.908129930 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.007213116 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.007263899 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.007333994 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.007970095 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.007987976 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.202419043 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.240725994 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.240788937 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.241385937 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.272444963 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.272500992 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.272512913 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.272538900 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.272588015 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.280875921 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.281081915 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.310590029 CEST	49736	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.310609102 CEST	443	49736	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.327805996 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.335781097 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.372122049 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.389771938 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.547138929 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.547166109 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.547892094 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.547910929 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.547955990 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.548927069 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.548974991 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.555982113 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.556068897 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.556071997 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.556138992 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.588023901 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.588073015 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.588148117 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.621301889 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.621347904 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.621490002 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.625358105 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.625385046 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.632936954 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.632955074 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.636116028 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.636250019 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.636490107 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.636780977 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.636790991 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.660958052 CEST	49749	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:02.660993099 CEST	443	49749	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:02.688549995 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.990000963 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.990164042 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:02.990207911 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.990819931 CEST	49752	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:02.990834951 CEST	443	49752	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:03.021933079 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:03.022346973 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:03.022353888 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:03.022943974 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:03.023370981 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:03.023458958 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:03.023489952 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:03.064146996 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:03.071084976 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:03.976969957 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:04.024607897 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:04.935591936 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:04.935681105 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:04.936422110 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:04.936499119 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:04.937460899 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:04.937520981 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:04.941580057 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:04.941689014 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:04.942694902 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:04.942715883 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:04.942760944 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:04.942828894 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:05.000730038 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:05.376077890 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:05.379729986 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:05.379776001 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:07.539127111 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:07.539211988 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:07.539274931 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:08.615017891 CEST	49754	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:08.615055084 CEST	443	49754	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:08.637180090 CEST	49738	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:08.637249947 CEST	443	49738	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:08.961894989 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:08.961922884 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:08.961972952 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:08.962138891 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:08.962152004 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.290347099 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.290580034 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.290596008 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.290978909 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.291042089 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.291667938 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.291719913 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.292011976 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.292092085 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.292182922 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.292191029 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.423832893 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.474340916 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:09.474371910 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:09.474427938 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:09.474673986 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:09.474689007 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:09.603092909 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:09.603122950 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:09.603292942 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:09.603492975 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:09.603507996 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:09.619311094 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.619343042 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.619384050 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.619401932 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.620188951 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.620227098 CEST	443	49770	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.620357037 CEST	49770	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.621860981 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.621922970 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.622006893 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.622401953 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:09.622425079 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:09.864713907 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:09.864963055 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:09.864979029 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:09.865499973 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:09.866019011 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:09.866096973 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:09.866103888 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:09.866115093 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:09.934890032 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:09.935156107 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:09.935172081 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:09.936911106 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:09.936965942 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:09.937275887 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:09.937352896 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:09.937397003 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:09.980118990 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.016330957 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.016797066 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.016813993 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.017347097 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.017405987 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.018404007 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.018450975 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.018611908 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.018686056 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.018726110 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.033341885 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:10.033499956 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.033520937 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.064121962 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.064569950 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.064604998 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.141973972 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.192506075 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.266335011 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:10.266460896 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:10.266571045 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:10.266571999 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:10.266601086 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:10.266778946 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:10.266788960 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:10.266890049 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:10.266940117 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:10.267910957 CEST	49772	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:10.267924070 CEST	443	49772	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:10.269576073 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.269680977 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.269772053 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.269882917 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.269932985 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.269959927 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.269973993 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.275346994 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.275423050 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.275429010 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.287950039 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.288017035 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.288022995 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.303236961 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.303324938 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.303329945 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.316586971 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.316639900 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.316648006 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.316873074 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.316929102 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.317058086 CEST	49774	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.317070007 CEST	443	49774	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.322118998 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.322135925 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.322223902 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.322470903 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.322484016 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.338443041 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.338494062 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.338507891 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.338608980 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.338731050 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.339083910 CEST	49755	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.339092970 CEST	443	49755	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.350451946 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.350490093 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.350806952 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.351090908 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.351125002 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.398880959 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:10.398916006 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:10.398988962 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:10.399163961 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:10.399185896 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:10.406589985 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.406722069 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.406784058 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.406810045 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.407619953 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.407700062 CEST	443	49775	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.407844067 CEST	49775	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.467763901 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.467796087 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.467869043 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.468071938 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.468081951 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.655422926 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.655793905 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.655818939 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.656404018 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.656824112 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.656907082 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.657022953 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.700150967 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.746319056 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.795517921 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:10.808978081 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:10.841491938 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.841491938 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:10.856482983 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:10.968609095 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.968739033 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.968827009 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.968981028 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.969032049 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.969057083 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.969110966 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.969121933 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.969161034 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.979082108 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.990021944 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.990118027 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.990283966 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:10.990308046 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:10.990438938 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.000890970 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.011759996 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.013117075 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.013139963 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.127582073 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.128504992 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.128576040 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.128577948 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.128604889 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.128621101 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.138900995 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.140121937 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.140130043 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.149688959 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.153013945 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.153021097 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.162283897 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.165021896 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.165029049 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.173434973 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.177022934 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.177030087 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.184137106 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.185025930 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.185035944 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.194268942 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.197056055 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.197069883 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.204339027 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.205008030 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.205015898 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.214329004 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.217024088 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.217051029 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.224385023 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.225011110 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.225019932 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.233442068 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.237103939 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.237128019 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.242527008 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.245009899 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.245019913 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.252701998 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.253020048 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.253031969 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.281744957 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.285047054 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.285058022 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.286700964 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.289006948 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.289014101 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.296904087 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.297005892 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.297013044 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.306137085 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.309118986 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.309125900 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.314870119 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.317009926 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.317017078 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.323379993 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.325010061 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.325020075 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.331991911 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.332046986 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.332061052 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.344512939 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.344594002 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.344645023 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.344654083 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.344822884 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.352906942 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.361443996 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.361536026 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.361578941 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.361587048 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.361727953 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.369818926 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.377798080 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.378002882 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.378155947 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.590786934 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.590812922 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.592169046 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.592197895 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.592392921 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.592459917 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.594882965 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.594938040 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.596035957 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.596164942 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.603729010 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.603758097 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.604249001 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.605376005 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.606451988 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.606647968 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.607614040 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.607856035 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.608803034 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.608989000 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.609044075 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.609051943 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.609102011 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.609111071 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.609199047 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.609230995 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.609251976 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.651015997 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.741406918 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.808206081 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.808327913 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.808410883 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.808412075 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.808439016 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.808722973 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.808887005 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.861686945 CEST	49777	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:11.861715078 CEST	443	49777	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:11.866648912 CEST	49781	443	192.168.2.4	142.250.64.196
Apr 26, 2024 13:29:11.866677999 CEST	443	49781	142.250.64.196	192.168.2.4
Apr 26, 2024 13:29:11.967173100 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.967602015 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:11.967672110 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.972661972 CEST	49782	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:11.972676992 CEST	443	49782	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.065308094 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.065660954 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.065756083 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.078222036 CEST	49778	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.078249931 CEST	443	49778	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.129386902 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.129455090 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.129569054 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.130121946 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.130156040 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.531560898 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.547250032 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.547307014 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.548595905 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.548671961 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.551084995 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.551145077 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.574784040 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.574990988 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.575149059 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.575191975 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.641588926 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.922960043 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.923043966 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.923095942 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.923125982 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.930401087 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:12.930490017 CEST	443	49786	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:12.930552006 CEST	49786	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:13.466825962 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:13.466921091 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:13.467161894 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:13.467492104 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:13.467545986 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:13.802038908 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:13.803381920 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:13.803426981 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:13.804824114 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:13.814341068 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:13.814440966 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:13.815037966 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:13.856161118 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:14.191005945 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:14.195916891 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:14.195979118 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:14.754658937 CEST	49791	443	192.168.2.4	142.250.217.206
Apr 26, 2024 13:29:14.754724026 CEST	443	49791	142.250.217.206	192.168.2.4
Apr 26, 2024 13:29:14.867611885 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:14.867661953 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:14.867718935 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:14.868112087 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:14.868125916 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.259706020 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.260679960 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.260699987 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.261292934 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.262572050 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.262677908 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.262988091 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.263025999 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.263079882 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.393482924 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.393538952 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.393604040 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.393996954 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.394011021 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.783945084 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.784606934 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.784622908 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.785386086 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.785825014 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.785846949 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.785851955 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.785918951 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.846301079 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.862628937 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.862807035 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.862859964 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.864116907 CEST	49796	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.864135027 CEST	443	49796	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.872534990 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.872612953 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.872684956 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.873178005 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:15.873207092 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:15.938793898 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:15.938868046 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:15.938961983 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:15.939455032 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:15.939488888 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.271043062 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.271142006 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.271203995 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.272793055 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.272819042 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.272849083 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.272954941 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.277760029 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.278034925 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.278263092 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.320378065 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.320411921 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.320646048 CEST	49799	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.320677042 CEST	443	49799	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.321118116 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.321214914 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.322129011 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.322206974 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.327049971 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.327194929 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.333013058 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.333044052 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.339243889 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.351191998 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:16.351253033 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.351771116 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.351860046 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:16.352657080 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.352813959 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:16.352829933 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.360971928 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:16.361078024 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.361438990 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:16.408128977 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.518471956 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:16.518506050 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:16.535012007 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.678636074 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.678770065 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.679131031 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.679197073 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.679769039 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.679886103 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.680265903 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.680274963 CEST	443	49801	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:16.683379889 CEST	49801	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:16.723658085 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.234757900 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.238739967 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.238818884 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.238902092 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.245345116 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.245413065 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.245446920 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.258289099 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.258358955 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.258389950 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.271349907 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.271421909 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.271446943 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.284209967 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.284271955 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.284295082 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.297204018 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.297266960 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.297287941 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.310225010 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.310295105 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.310317993 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.323132992 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.323203087 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.323225975 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.371643066 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.371670961 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.419981003 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.420053959 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.420082092 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.426397085 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.426460028 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.426475048 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.439183950 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.439251900 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.439266920 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.452428102 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.452492952 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.452505112 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.465233088 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.465291977 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.465307951 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.478267908 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.478333950 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.478353977 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.491115093 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.491179943 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.491193056 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.504159927 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.504216909 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.504229069 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.518157005 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.518225908 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.518239021 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.530181885 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.530261040 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.530267954 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.543153048 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.543226004 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.543234110 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.555313110 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.555383921 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.555403948 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.566215038 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.566276073 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.566286087 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.577697039 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.577754021 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.577764034 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.588867903 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.588927984 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.588936090 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.599807978 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.599862099 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.599869967 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.611066103 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.611130953 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.611160040 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.622329950 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.622391939 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.622400999 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.633548975 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.633611917 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.633620024 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.640655041 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.640713930 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.640721083 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.647245884 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.647305012 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.647311926 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.657325029 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.657381058 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.657385111 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.657394886 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.657433033 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.663805962 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.670447111 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.670496941 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.670505047 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.677139997 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.677200079 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.677218914 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.683581114 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.683633089 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.683641911 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.690058947 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.690110922 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.690118074 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.696599007 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.696657896 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.696664095 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.705624104 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.705683947 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.705689907 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.709451914 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.709501982 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.709511995 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.718018055 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.718072891 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.718079090 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.722296000 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.722348928 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.722354889 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.728766918 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.728822947 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.728830099 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.738327980 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.738370895 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.738375902 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.738384962 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.738430977 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.738467932 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.738574982 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.738624096 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.739520073 CEST	49802	443	192.168.2.4	142.250.217.193
Apr 26, 2024 13:29:17.739537001 CEST	443	49802	142.250.217.193	192.168.2.4
Apr 26, 2024 13:29:17.953367949 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:17.953457117 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:17.953547955 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:17.954269886 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:17.954289913 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.344389915 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.345233917 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.345267057 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.345777035 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.345833063 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.346774101 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.346832037 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.346841097 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.347018003 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.347163916 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.347170115 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.347259045 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.422774076 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.422835112 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.610250950 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.720709085 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.727113008 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.727188110 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.727252960 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.733727932 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.733792067 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.733810902 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.746728897 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.746787071 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.746803045 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.759802103 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.759865999 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.759881973 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.772728920 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.772813082 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.772833109 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.785763979 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.785851955 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.785871029 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.798424959 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.798543930 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.798559904 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.811403990 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.811476946 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.811494112 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.906403065 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.906490088 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.906585932 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.906622887 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.906673908 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.912441969 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.925559044 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.925630093 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.925632000 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.925658941 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.925730944 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.940593958 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.951368093 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.951435089 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.951491117 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.963975906 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.964071035 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.964129925 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.964154959 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.964468002 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.976321936 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.989458084 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:18.989518881 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:18.989540100 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.002280951 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.002361059 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.002392054 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.002409935 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.002463102 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.015074968 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.028763056 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.028839111 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.028848886 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.028870106 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.028932095 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.040091038 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.051246881 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.051302910 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.051322937 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.062612057 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.062705994 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.062724113 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.062737942 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.062788010 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.073709965 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.085021973 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.085083008 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.085103035 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.085129976 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.085180998 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.096245050 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.107397079 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.107465982 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.107503891 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.107528925 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.107578993 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.107611895 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.118935108 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.118994951 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.119024038 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.126027107 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.126100063 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.126132011 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.135967970 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.136029959 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.136043072 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.142792940 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.142890930 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.142951012 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.142963886 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.143038034 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.149308920 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.155881882 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.155939102 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.155952930 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.162378073 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.162436962 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.162450075 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.168677092 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.168740988 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.168752909 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.175663948 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.175728083 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.175740957 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.185725927 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.185817957 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.185848951 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.185867071 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.186233997 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.190532923 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.193945885 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.194031000 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.194159985 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.194179058 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.195099115 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.203676939 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.206595898 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.206693888 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.206733942 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.206753969 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.206967115 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.212955952 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.216128111 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.216273069 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.216288090 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.222640038 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.222899914 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.222913027 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.222982883 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.224379063 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:19.224397898 CEST	443	49803	142.250.64.225	192.168.2.4
Apr 26, 2024 13:29:19.224430084 CEST	49803	443	192.168.2.4	142.250.64.225
Apr 26, 2024 13:29:23.119488001 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.119528055 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.119589090 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.120309114 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.120331049 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.125190020 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.125230074 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.125320911 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.126179934 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.126189947 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.512789011 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.513068914 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.513089895 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.514712095 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.515094995 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.515211105 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.515242100 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.515275955 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.515286922 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.522056103 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.522254944 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.522269964 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.523525953 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.523799896 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.523893118 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.523896933 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.523910046 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.523976088 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.578944921 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.899719000 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.900078058 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.900130987 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.903105021 CEST	49804	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.903124094 CEST	443	49804	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.912421942 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.912764072 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.912832022 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.913737059 CEST	49805	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.913753986 CEST	443	49805	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.920416117 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.920468092 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:23.920541048 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.921119928 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:23.921144962 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.311994076 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.312396049 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.312460899 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.313786030 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.313874006 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.316514015 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.316575050 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.316905022 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.317012072 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.317369938 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.317389011 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.360656023 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.701530933 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.701648951 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.701729059 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.701766968 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.702677965 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.702800989 CEST	443	49806	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.702873945 CEST	49806	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.703313112 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.703404903 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:24.703495026 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.703721046 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:24.703759909 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.037440062 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.038264036 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.038305998 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.038872957 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.038945913 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.039932966 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.039995909 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.040409088 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.040497065 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.040761948 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.040779114 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.095027924 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.366159916 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.366219997 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.366342068 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.366401911 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.367959976 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:25.368091106 CEST	443	49807	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:25.368200064 CEST	49807	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.531259060 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.531327963 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.531446934 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.532083988 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.532104969 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.863682032 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.863954067 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.863976002 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.865398884 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.865470886 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.866786003 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.866842031 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.867010117 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.867117882 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.867269039 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:31.867276907 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:31.907861948 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.192759037 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.192986012 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.193272114 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.211633921 CEST	49810	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.211663008 CEST	443	49810	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.213082075 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.213170052 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.213246107 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.213578939 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.213613033 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.546269894 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.555592060 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.555651903 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.557085037 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.557959080 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.558144093 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.558157921 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.558191061 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.558403969 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.600158930 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.877032042 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.877367020 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.877701044 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.885740042 CEST	49812	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.885762930 CEST	443	49812	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.890866995 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.890944958 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:32.891031027 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.891673088 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:32.891707897 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.240031004 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.241799116 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.241851091 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.243371964 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.243460894 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.246176958 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.246232986 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.246448040 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.246529102 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.246690035 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.246706963 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.298491955 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.567233086 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.567295074 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.567375898 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.567408085 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.571896076 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:33.571947098 CEST	443	49813	142.250.189.142	192.168.2.4
Apr 26, 2024 13:29:33.572060108 CEST	49813	443	192.168.2.4	142.250.189.142
Apr 26, 2024 13:29:57.168625116 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:57.168723106 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:57.168802977 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:57.174369097 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:57.174407959 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:57.506984949 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:57.507610083 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:57.507632971 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:57.508764029 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:57.511790037 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:29:57.511964083 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:29:57.564071894 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:30:03.173314095 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 26, 2024 13:30:03.305588007 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 26, 2024 13:30:03.305607080 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 26, 2024 13:30:03.305651903 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 26, 2024 13:30:07.495754004 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:30:07.495915890 CEST	443	49816	192.178.50.36	192.168.2.4
Apr 26, 2024 13:30:07.496027946 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:30:09.034961939 CEST	49816	443	192.168.2.4	192.178.50.36
Apr 26, 2024 13:30:09.034996033 CEST	443	49816	192.178.50.36	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 13:28:54.793395996 CEST	53	59986	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:54.794091940 CEST	53	65069	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:56.159378052 CEST	53	51451	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:56.524260998 CEST	55689	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:28:56.524616957 CEST	64964	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:28:56.648906946 CEST	53	55689	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:56.650110960 CEST	53	64964	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:57.095638990 CEST	60881	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:28:57.095947981 CEST	53154	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:28:57.221662045 CEST	53	60881	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:57.221700907 CEST	53	53154	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:57.767760038 CEST	53	65292	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:57.770030975 CEST	53	52998	1.1.1.1	192.168.2.4
Apr 26, 2024 13:28:59.676512003 CEST	53	54495	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:01.446934938 CEST	61566	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:01.447182894 CEST	54400	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:01.572115898 CEST	53	61566	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:01.572738886 CEST	53	54400	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:01.880237103 CEST	51371	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:01.880760908 CEST	57923	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:02.005712986 CEST	53	51371	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:02.006217957 CEST	53	57923	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:02.021111012 CEST	53	56551	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:02.751513004 CEST	53	61048	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:08.678056955 CEST	53516	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:08.678457022 CEST	55849	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:08.793354034 CEST	53	52173	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:08.803549051 CEST	53	53516	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:08.824131012 CEST	53	55849	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:08.836061001 CEST	64081	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:08.836391926 CEST	64285	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:08.958964109 CEST	53	61607	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:08.960880995 CEST	53	64081	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:08.961594105 CEST	53	64285	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:09.476182938 CEST	52701	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:09.476439953 CEST	55544	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:09.601604939 CEST	53	52701	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:09.602718115 CEST	53	55544	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:10.271593094 CEST	63933	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:10.271780014 CEST	49203	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:10.342184067 CEST	60363	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:10.342327118 CEST	62281	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:10.355489969 CEST	60839	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:10.355922937 CEST	51274	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:10.397476912 CEST	53	63933	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:10.398384094 CEST	53	49203	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:10.467219114 CEST	53	62281	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:10.467319012 CEST	53	60363	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:10.481081009 CEST	53	60839	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:10.501977921 CEST	53	51274	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:13.460180044 CEST	62909	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:13.460500956 CEST	53095	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:13.585180044 CEST	53	62909	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:13.586952925 CEST	53	53095	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:13.633357048 CEST	53	59379	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:14.886473894 CEST	53	60085	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:15.211105108 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 13:29:15.812722921 CEST	50754	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:15.812861919 CEST	56152	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:15.937545061 CEST	53	50754	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:15.938173056 CEST	53	56152	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:17.782144070 CEST	57417	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:17.782597065 CEST	50700	53	192.168.2.4	1.1.1.1
Apr 26, 2024 13:29:17.907207966 CEST	53	57417	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:17.907510042 CEST	53	50700	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:33.835445881 CEST	53	56251	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:54.239729881 CEST	53	64359	1.1.1.1	192.168.2.4
Apr 26, 2024 13:29:56.417829990 CEST	53	49626	1.1.1.1	192.168.2.4
Apr 26, 2024 13:30:22.049320936 CEST	53	62266	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 13:28:56.524260998 CEST	192.168.2.4	1.1.1.1	0xe0b0	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:28:56.524616957 CEST	192.168.2.4	1.1.1.1	0x1427	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:28:57.095638990 CEST	192.168.2.4	1.1.1.1	0x2759	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:28:57.095947981 CEST	192.168.2.4	1.1.1.1	0xa92c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:01.446934938 CEST	192.168.2.4	1.1.1.1	0xeaa5	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:01.447182894 CEST	192.168.2.4	1.1.1.1	0x647a	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:01.880237103 CEST	192.168.2.4	1.1.1.1	0x9fd5	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:01.880760908 CEST	192.168.2.4	1.1.1.1	0xabf1	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:08.678056955 CEST	192.168.2.4	1.1.1.1	0xdf97	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:08.678457022 CEST	192.168.2.4	1.1.1.1	0x3dfd	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:08.836061001 CEST	192.168.2.4	1.1.1.1	0xf8c3	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:08.836391926 CEST	192.168.2.4	1.1.1.1	0x67fb	Standard query (0)	play.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:09.476182938 CEST	192.168.2.4	1.1.1.1	0x342d	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:09.476439953 CEST	192.168.2.4	1.1.1.1	0xde00	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:10.271593094 CEST	192.168.2.4	1.1.1.1	0xdb38	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:10.271780014 CEST	192.168.2.4	1.1.1.1	0x48ba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:10.342184067 CEST	192.168.2.4	1.1.1.1	0x2bbe	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:10.342327118 CEST	192.168.2.4	1.1.1.1	0xab25	Standard query (0)	drive.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:10.355489969 CEST	192.168.2.4	1.1.1.1	0x81c8	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:10.355922937 CEST	192.168.2.4	1.1.1.1	0x1375	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:13.460180044 CEST	192.168.2.4	1.1.1.1	0x528f	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:13.460500956 CEST	192.168.2.4	1.1.1.1	0x904d	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:15.812722921 CEST	192.168.2.4	1.1.1.1	0xc7a7	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:15.812861919 CEST	192.168.2.4	1.1.1.1	0x360a	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Apr 26, 2024 13:29:17.782144070 CEST	192.168.2.4	1.1.1.1	0x5f3a	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:17.782597065 CEST	192.168.2.4	1.1.1.1	0x8d20	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 13:28:56.648906946 CEST	1.1.1.1	192.168.2.4	0xe0b0	No error (0)	drive.google.com		142.250.217.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:28:57.221662045 CEST	1.1.1.1	192.168.2.4	0x2759	No error (0)	www.google.com		192.178.50.36	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:28:57.221700907 CEST	1.1.1.1	192.168.2.4	0xa92c	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 13:29:01.572115898 CEST	1.1.1.1	192.168.2.4	0xeaa5	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:01.572115898 CEST	1.1.1.1	192.168.2.4	0xeaa5	No error (0)	plus.l.google.com		172.217.165.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:01.572738886 CEST	1.1.1.1	192.168.2.4	0x647a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:02.005712986 CEST	1.1.1.1	192.168.2.4	0x9fd5	No error (0)	play.google.com		142.250.189.142	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:08.803549051 CEST	1.1.1.1	192.168.2.4	0xdf97	No error (0)	blobcomments-pa.clients6.google.com		192.178.50.42	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:08.960880995 CEST	1.1.1.1	192.168.2.4	0xf8c3	No error (0)	play.google.com		142.250.189.142	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:09.601604939 CEST	1.1.1.1	192.168.2.4	0x342d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:09.601604939 CEST	1.1.1.1	192.168.2.4	0x342d	No error (0)	plus.l.google.com		142.250.217.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:09.602718115 CEST	1.1.1.1	192.168.2.4	0xde00	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:10.380829096 CEST	1.1.1.1	192.168.2.4	0x29ed	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:10.380829096 CEST	1.1.1.1	192.168.2.4	0x29ed	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:10.397476912 CEST	1.1.1.1	192.168.2.4	0xdb38	No error (0)	www.google.com		142.250.64.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:10.398384094 CEST	1.1.1.1	192.168.2.4	0x48ba	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 13:29:10.467319012 CEST	1.1.1.1	192.168.2.4	0x2bbe	No error (0)	drive.google.com		142.250.189.142	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:10.481081009 CEST	1.1.1.1	192.168.2.4	0x81c8	No error (0)	blobcomments-pa.clients6.google.com		142.250.189.138	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:13.585180044 CEST	1.1.1.1	192.168.2.4	0x528f	No error (0)	peoplestackwebexperiments-pa.clients6.google.com		192.178.50.74	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:15.937545061 CEST	1.1.1.1	192.168.2.4	0xc7a7	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:15.937545061 CEST	1.1.1.1	192.168.2.4	0xc7a7	No error (0)	googlehosted.l.googleusercontent.com		142.250.217.193	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:15.938173056 CEST	1.1.1.1	192.168.2.4	0x360a	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:17.907207966 CEST	1.1.1.1	192.168.2.4	0x5f3a	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:17.907207966 CEST	1.1.1.1	192.168.2.4	0x5f3a	No error (0)	googlehosted.l.googleusercontent.com		142.250.64.225	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:17.907510042 CEST	1.1.1.1	192.168.2.4	0x8d20	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:25.287234068 CEST	1.1.1.1	192.168.2.4	0xb500	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:25.287234068 CEST	1.1.1.1	192.168.2.4	0xb500	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:29:48.920994997 CEST	1.1.1.1	192.168.2.4	0x60de	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:29:48.920994997 CEST	1.1.1.1	192.168.2.4	0x60de	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 26, 2024 13:30:07.221256018 CEST	1.1.1.1	192.168.2.4	0xbfe7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 13:30:07.221256018 CEST	1.1.1.1	192.168.2.4	0xbfe7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

fs.microsoft.com

https:

play.google.com

www.google.com

apis.google.com

lh3.googleusercontent.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	142.250.217.206	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:28:56 UTC	841	OUT	GET /file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 11:28:57 UTC	1315	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 11:28:57 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: script-src 'report-sample' 'nonce-v0kh9urvVZMBc22bDOlM1g' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA; expires=Sat, 26-Oct-2024 11:28:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 34 37 33 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 3b 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4f 66 51 4a 4f 7a 35 4d 64 65 63 48 4e 79 75 4b 62 75 72 68 76 41 22 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 Data Ascii: 473f<!DOCTYPE html><html><head><meta name="google" content="notranslate"><meta http-equiv="X-UA-Compatible" content="IE=edge;"><style nonce="OfQJOz5MdecHNyuKburhvA">@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstati
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6b 43 6e 71 45 75 39 32 46 72 31 4d 75 35 31 78 47 49 7a 49 46 4b 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 Data Ascii: 0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 53 55 35 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 Data Ascii: ce{font-family:'Roboto';font-style:normal;font-weight:300;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 Data Ascii: );unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-range:U+03
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 Data Ascii: ont-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-2
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b Data Ascii: FOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: o';font-style:normal;font-weight:700;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(//fonts.gstatic.com/s/robo
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 45 46 46 2c 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 74 69 74 6c 65 3e 52 6f 73 73 20 43 61 73 65 2e 7a 69 70 20 2d 20 47 6f 6f 67 6c 65 20 44 72 69 76 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 76 30 6b 68 39 75 72 76 56 5a 4d 42 63 32 32 62 44 4f 6c 4d 31 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 52 49 56 45 5f 56 49 45 57 45 52 5f 49 56 49 53 27 5d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3b 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e Data Ascii: EFF,U+FFFD;}</style><meta name="referrer" content="origin"><title>Ross Case.zip - Google Drive</title><script nonce="v0kh9urvVZMBc22bDOlM1g"> window['_DRIVE_VIEWER_IVIS'] = document.visibilityState; </script><meta property="og:title" con
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 33 2c 22 64 6f 63 73 2d 6f 72 6c 22 3a 31 2c 22 64 6f 63 73 2d 73 68 64 6e 22 3a 30 2c 22 64 6f 63 73 2d 74 66 68 22 3a 22 22 2c 22 64 6f 63 73 2d 65 65 74 74 22 3a 74 72 75 65 2c 22 69 6e 66 6f 5f 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 64 6f 63 73 2d 65 63 64 68 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 61 72 77 64 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 62 75 77 64 77 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 63 73 64 77 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 64 63 65 69 64 77 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 65 63 64 77 6d 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 65 65 67 72 73 64 6d 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 65 63 70 64 6d 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 61 73 64 77 6d 22 3a 74 72 75 65 2c Data Ascii: 3,"docs-orl":1,"docs-shdn":0,"docs-tfh":"","docs-eett":true,"info_params":{},"docs-ecdh":false,"docs-earwdm":true,"docs-ebuwdwm":true,"docs-ecsdwm":true,"docs-edceidwm":true,"docs-eecdwm":false,"docs-eeegrsdm":false,"docs-eecpdm":false,"docs-easdwm":true,
2024-04-26 11:28:57 UTC	1315	IN	Data Raw: 2f 6e 65 74 63 68 65 63 6b 2e 67 69 66 22 2c 22 64 6f 63 73 2d 65 63 75 61 63 68 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 63 63 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 73 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 63 65 69 22 3a 7b 22 69 22 3a 5b 39 34 33 35 33 33 31 36 2c 37 31 36 37 31 36 36 36 2c 35 30 31 36 37 30 37 39 2c 37 31 37 39 38 36 36 33 2c 37 31 36 39 30 30 30 38 2c 35 37 31 32 36 34 37 2c 37 31 30 33 35 33 32 38 2c 37 31 34 37 38 31 34 38 2c 35 30 33 36 30 38 38 34 2c 37 31 35 35 34 33 32 30 2c 39 34 34 32 39 36 34 30 2c 35 30 32 36 36 30 37 30 2c 35 37 31 33 31 39 35 2c 37 31 36 31 34 35 36 33 2c 34 39 34 35 33 30 30 35 2c 35 30 33 39 30 30 30 35 2c 37 31 39 32 34 33 33 39 2c 37 31 33 38 37 32 36 30 2c 39 34 34 38 32 32 38 31 Data Ascii: /netcheck.gif","docs-ecuach":false,"docs-ecci":false,"docs-esi":false,"docs-cei":{"i":[94353316,71671666,50167079,71798663,71690008,5712647,71035328,71478148,50360884,71554320,94429640,50266070,5713195,71614563,49453005,50390005,71924339,71387260,94482281

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49745	23.196.177.159	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:00 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 11:29:00 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=70488 Date: Fri, 26 Apr 2024 11:29:00 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49746	23.196.177.159	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:01 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 11:29:01 UTC	530	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DMGnYgAAAACXaXykPZuVRq4aV6pCkeO8U0pDRURHRTAzMTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=70453 Date: Fri, 26 Apr 2024 11:29:01 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 11:29:01 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49736	142.250.217.206	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:01 UTC	1017	OUT	GET /auth_warmup HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
2024-04-26 11:29:02 UTC	1658	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 11:29:02 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveOsidBootstrap/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-EiAZeRC4FJi-pz4fV3qD0w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveOsidBootstrap/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveOsidBootstrap/cspreport/allowlist Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/DriveOsidBootstrap/web-reports?context=eJzjEtDikmJw0ZBicEqfwRoCxELcHP_mr9vIJnDjz7EAAGsFCa4" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	142.250.217.206	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:02 UTC	1138	OUT	GET /drivesharing/clientmodel?id=1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
2024-04-26 11:29:02 UTC	1993	IN	HTTP/1.1 302 Found Content-Type: application/binary X-Frame-Options: ALLOW-FROM https://drive.google.com Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Content-Security-Policy: frame-ancestors https://drive.google.com Content-Security-Policy: script-src 'report-sample' 'nonce-UVDLzoVMmjAh9qCFCX14xQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /drivesharing/_/DriveShareDialogUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /drivesharing/_/DriveShareDialogUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /drivesharing/_/DriveShareDialogUi/cspreport Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://drive.google.com/drivesharing/clientmodel?id%3D1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com&followup=https://drive.google.com/drivesharing/clientmodel?id%3D1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Date: Fri, 26 Apr 2024 11:29:02 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49752	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:02 UTC	961	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1966 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
2024-04-26 11:29:02 UTC	1966	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 34 31 33 30 39 34 30 31 38 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 31 34 31 33 30 39 34 30 31 38 34 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 31 34 31 33 30 39 34 30 31 38 34 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 5d Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[4,0,0,0,0]]],189,[["1714130940185",null,null,null,null,null,null,"[[[null,null,1,1714130940184000,null,null,null,[[1714130940184000],null,1],null,716,null,1,1]
2024-04-26 11:29:02 UTC	922	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=cFotX-VIavi7nCOEsQ5tPY2KWLH9HauAlVpRyJafki-RyXmJb1PLY9Y2ze8TyXVyIwFHT8ELyqBUmOvHKrdkr46az8VG7c1PnpxlJ4YuRgq6jXIdRHb8Ev1sG-C5KR0NStbYf24i63-rhlzgJjzS4CS6Exkfj6QEX_gxZeIt9qc; expires=Sat, 26-Oct-2024 11:29:02 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:02 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 26 Apr 2024 11:29:02 GMT Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:02 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 11:29:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49755	142.250.217.206	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:03 UTC	1335	OUT	GET /viewer2/prod-02/archive?ck=drive&ds=APznzaYUfl2TcJ5k351Mz-oX5D0kiuP7VzHKjZ8VEoILiA2hdfvaiUTaVkyZkL2oXmvQURSPYmy1Ko05ZlZTcL4BdmjpOJ0KpcFGdGN3Lr-yF2n9lKZDtjR92HHKNGxegMjoovZuStNsOmmlGFFXUFNqLwzzkH_l_i-ybx3ph0Py9NW7-CeFmRr7pFJI9wcxTmwNKl_vsHLV9uuyTYtXgsxvMRoEE6QTcyRYus3pdixWgfNFGbgXKxXWU56TDg03f6-acXmnBFA3LD2GChyGqmSW0Bh2gfvxpSoStUgvKDUc75Q5mRUpM6bKL5pG2e0G-fQyHPFcfUDJ5kN2tB8iY8dsbpbQlA54s5wfSna98QQ854jnnHfcAfcAZQGtGBo_iF7Hec9hxqMB-FzNo7Xq4SoyneNepy394uk-Kh3m54q3WHo8XPXetR8%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
2024-04-26 11:29:10 UTC	2074	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 11:29:10 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-bzV4_4cIeZqVjnyf_kof6g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzjMtDikmJw0ZBicNu9k8kbiCU5bzPJAbEaEGsD8QWpx0xXgdgpfQZrCBALcXO0LVi3kU3gx8GWAgAwqRRa" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:10 UTC	23	IN	Data Raw: 31 31 0d 0a 29 5d 7d 27 0a 7b 22 62 63 6f 64 65 22 3a 33 32 7d 0d 0a Data Ascii: 11)]}'{"bcode":32}
2024-04-26 11:29:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49754	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:04 UTC	961	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4791 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=Q3IjpsCLHOjamouMp0h7mN-0rE-TYfN6BdbUVAsjCcTRovm7TuUbJoUpo0-RyTwKN6Un4KwvoCEg_D2FiLh9tFSytutQF7qhsV4q_1MeSPcTMLebaKQn6gjr9_X9JkQPm-ST9_pxa6rX4KzKA8Sv0Lu92gocQXj0mbDnTOHhAEA
2024-04-26 11:29:04 UTC	4791	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 34 31 33 30 39 34 31 32 33 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1714130941237",null,null,null,
2024-04-26 11:29:05 UTC	922	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI; expires=Sat, 26-Oct-2024 11:29:05 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:05 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 26 Apr 2024 11:29:05 GMT Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:05 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 11:29:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49770	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:09 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:09 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 11:29:09 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:09 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 11:29:09 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49772	192.178.50.36	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:09 UTC	961	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:10 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Fri, 26 Apr 2024 11:29:10 GMT Expires: Fri, 26 Apr 2024 11:29:10 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:10 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 3a 9b 02 75 78 c5 f7 87 37 97 5d 86 eb c2 27 90 d0 28 71 ed aa aa 84 7e 07 e9 86 09 f2 0e 4b 51 c8 57 e2 ad 97 9c 2c 62 b5 d6 4c 3c b7 59 09 5d 9b 56 2b ee ca a8 a1 ba 74 34 bc 24 a3 56 dc ba 4f 09 8f f6 bd 8e 44 a2 35 0c b1 76 9e 6a 81 f6 ae 48 64 10 4d fc f6 b4 12 7a 9b 88 94 b3 1a b8 9e 56 83 f3 71 bf 70 89 ee 97 c4 e0 8e c6 d2 3b 3a 1b 4a de 25 32 e5 ac 47 c9 3b b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 Data Ascii: :ux7]'(q~KQW,bL<Y]V+t4$VOD5vjHdMzVqp;:J%2G;/E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHu
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: e2 16 73 bd 7d 41 a9 cd 5e 6b a1 2d fd 0d 7e be 97 dd e0 62 a6 99 70 2f 7e 4f 5e 26 93 61 26 ec e2 d8 18 32 cb d0 18 66 b7 a6 f2 2c 56 4b 21 29 0e 37 94 5d 2a 5c 00 ae 93 21 56 26 cf 8d 1d ec 69 99 b5 2f bb 23 96 f6 b8 57 62 ed 8b 4c b8 c8 19 99 82 6d 14 3b fd 1a 44 14 bd 09 98 6d 2b dd 84 32 9b 07 3d 15 a4 f9 5a 59 05 d7 53 0f b2 89 3c 90 99 fe 47 e1 e4 a9 70 fa 1d 77 c1 7b 68 1e 53 9a f8 7b 9e 5c b0 95 21 c5 5c 97 c1 fb 3c 46 ae 78 21 af 8c f3 72 cf 8c 5b 5b e1 e6 df 05 87 7d fd 04 ef 20 8d 75 55 22 f8 1e 65 e0 0b 5a 2b 2b cf 11 7d 05 a8 be f8 47 b7 22 97 5f cb 45 2e 20 c4 49 1b 90 1f 0a 4f fc 20 1d 66 74 a8 6d d0 57 44 31 98 0b aa 86 b7 73 e2 aa 79 0f 91 a0 b6 07 29 1a 4a 5e 77 fc 3b 20 94 36 95 6c 67 84 d2 a5 76 f1 11 ba 72 d1 32 23 1c 00 ad 4b 7d 21 Data Ascii: s}A^k-~bp/~O^&a&2f,VK!)7]*\!V&i/#WbLm;Dm+2=ZYS<Gpw{hS{\!\<Fx!r[[} uU"eZ++}G"_E. IO ftmWD1sy)J^w; 6lgvr2#K}!
2024-04-26 11:29:10 UTC	76	IN	Data Raw: 25 14 54 77 f9 54 45 09 c7 c0 b3 31 f0 04 69 9c 1e e7 ca 39 c7 1e dd 99 bd 0e 81 bc 90 90 f0 02 94 bd a8 07 eb 02 fc 57 7c f8 5a 48 48 48 48 48 48 48 48 48 48 10 fe 07 d8 95 18 53 b9 4a 7f b2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: %TwTE1i9W\|ZHHHHHHHHHHSJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49774	142.250.217.206	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:09 UTC	884	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:10 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15118 Date: Fri, 26 Apr 2024 11:29:10 GMT Expires: Fri, 26 Apr 2024 11:29:10 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "9bc2326c55ad9a5d" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:10 UTC	418	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 63 61 3d 62 61 28 74 68 69 73 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 63 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 0a 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: d global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 6e 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 64 61 3d 30 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 55 72 6c 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 76 3d 61 7d 3b 79 Data Ascii: ght The Closure Library Authors. SPDX-License-Identifier: Apache-2.0/var m=this\|\|self,n="closure_uid_"+(1E9Math.random()>>>0),da=0,r=function(a){return a};var y=function(a){if(x!==x)throw Error("SafeUrl is not meant to be built directly");this.v=a};y
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 2c 6d 61 3d 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 63 7d 2c 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 6f 72 74 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 76 6f 69 64 20 30 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 65 21 3d 63 26 26 62 2e 70 75 73 68 28 65 29 3b 63 3d 65 7d 72 65 74 75 72 6e 20 62 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 69 66 28 28 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 29 26 26 6d 61 2e 74 65 73 74 28 61 29 29 61 3d 61 28 6e 75 6c 6c 29 3b 65 6c 73 65 7b 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 Data Ascii: ,ma=/\[native code\]/,H=function(a,b,c){return a[b]=a[b]\|\|c},na=function(a){a=a.sort();for(var b=[],c=void 0,d=0;d<a.length;d++){var e=a[d];e!=c&&b.push(e);c=e}return b},I=function(){var a;if((a=Object.create)&&ma.test(a))a=a(null);else{a={};for(var b in
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 3f 4b 5b 62 5d 3d 48 28 4b 2c 62 2c 5b 5d 29 2e 63 6f 6e 63 61 74 28 63 29 3a 48 28 4b 2c 62 2c 63 29 7d 69 66 28 62 3d 61 2e 75 29 61 3d 48 28 4b 2c 22 75 73 22 2c 5b 5d 29 2c 61 2e 70 75 73 68 28 62 29 2c 28 62 3d 2f 5e 68 74 74 70 73 3a 28 2e 2a 29 24 2f 2e 65 78 65 63 28 62 29 29 26 26 61 2e 70 75 73 68 28 22 68 74 74 70 3a 22 2b 62 5b 31 5d 29 7d 5d 29 3b 76 61 72 20 76 61 3d 2f 5e 28 5c 2f 5b 61 2d Data Ascii: ;};U.push(["jsl",function(a){for(var b in a)if(Object.prototype.hasOwnProperty.call(a,b)){var c=a[b];"object"==typeof c?K[b]=H(K,b,[]).concat(c):H(K,b,c)}if(b=a.u)a=H(K,"us",[]),a.push(b),(b=/^https:(.*)$/.exec(b))&&a.push("http:"+b[1])}]);var va=/^(\/[a-
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 29 7d 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 56 28 22 72 65 6c 61 74 69 76 65 20 70 61 74 68 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 61 2e 73 75 62 73 74 72 69 6e Data Ascii: ,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join("")},Ea=function(a){"/"!==a.charAt(0)&&V("relative path");for(var b=a.substrin
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 30 3e 66 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4b 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 48 61 29 3f 61 3a 4b 2e 6e Data Ascii: _0-9\/A-Za-z]+={0,2}$/,Ia=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=0>f}f&&c.push(e)}return c},Ja=function(){var a=K.nonce;return void 0!==a?a&&a===String(a)&&a.match(Ha)?a:K.n
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 3a 20 21 68 69 6e 74 22 29 3b 4f 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 21 21 4b 2e 67 6c 72 70 3b 61 3d 6e 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 66 3d 62 2e 63 6f 6e 66 69 67 2c 6b 3d 62 2e 74 69 6d 65 6f 75 74 2c 74 3d 62 2e 6f 6e 74 69 6d 65 6f 75 74 2c 6c 3d 62 2e 6f 6e 65 72 72 6f 72 2c 70 3d 76 6f 69 64 20 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 28 70 3d 6c 29 3b 76 61 72 20 7a 3d 6e 75 6c 6c 2c 52 3d 21 31 3b 69 66 28 6b 26 26 21 74 7c 7c 21 6b 26 26 74 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 Data Ascii: : !hint");Oa(b\|\|[],c,a)},Oa=function(a,b,c){var d=!!K.glrp;a=na(a)\|\|[];var e=b.callback,f=b.config,k=b.timeout,t=b.ontimeout,l=b.onerror,p=void 0;"function"==typeof l&&(p=l);var z=null,R=!1;if(k&&!t\|\|!k&&t)throw"Timeout requires both the timeout parameter
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 61 2e 6d 65 73 73 61 67 65 29 7d 51 61 3d 52 61 3b 76 61 72 20 59 3d 51 61 3b 76 61 72 20 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 4b 2e 68 65 65 26 26 30 3c 4b 2e 68 65 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 62 26 26 62 28 63 29 2c 4b 2e 68 65 6c 2d 2d 2c 50 61 28 22 64 65 62 75 67 5f 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 5f 5f 5f 6a 73 6c 2e 68 65 66 6e 28 63 29 7d 63 61 74 63 68 28 64 29 7b 74 68 72 6f 77 20 63 3b 7d 7d 29 7d 65 6c 73 65 20 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 62 26 26 62 28 63 29 2c 63 3b 7d 7d 3b 76 61 72 20 53 61 3d 4a 2e 6c 6f 61 64 3b 53 61 26 26 48 28 4b 2c 22 6f 6c 22 2c Data Ascii: a.message)}Qa=Ra;var Y=Qa;var Ma=function(a,b){if(K.hee&&0<K.hel)try{return a()}catch(c){b&&b(c),K.hel--,Pa("debug_error",function(){try{window.___jsl.hefn(c)}catch(d){throw c;}})}else try{return a()}catch(c){throw b&&b(c),c;}};var Sa=J.load;Sa&&H(K,"ol",
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 65 3a 7b 63 73 73 3a 31 7d 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 3a 2e 30 31 7d 2c 63 6c 69 65 6e 74 3a 7b 63 6f 72 73 3a 21 31 7d 2c 73 69 67 6e 49 6e 44 65 70 72 65 63 61 74 69 6f 6e 3a 7b 72 61 74 65 3a 30 7d 2c 69 6e 63 6c 75 64 65 5f 67 72 61 6e 74 65 64 5f 73 63 6f 70 65 73 3a 21 30 2c 6c 6c 61 6e 67 3a 22 65 6e 22 2c 69 66 72 61 6d 65 73 3a 7b 79 6f 75 74 75 62 65 3a 7b 70 61 72 61 6d 73 3a 7b 6c 6f 63 61 74 69 6f 6e 3a 5b 22 73 65 61 72 63 68 22 2c 22 68 61 73 68 22 5d 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a Data Ascii: e:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49775	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:10 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:10 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 11:29:10 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:10 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 11:29:10 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49777	142.250.217.206	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:10 UTC	1005	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:10 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 79644 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 22 Apr 2024 16:52:52 GMT Expires: Tue, 22 Apr 2025 16:52:52 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 326178 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:10 UTC	340	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 7d 3b 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 Data Ascii: };ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 Data Ascii: n"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="unde
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 50 66 29 7b 74 68 69 73 2e 50 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e Data Ascii: Pf){this.Pf=[];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=n
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 6f 74 79 70 65 2e 6e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 75 Data Ascii: otype.nea=function(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)retu
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 74 68 69 73 2e 73 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 Data Ascii: this.sV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c(
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 Data Ascii: t.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d 2e Data Ascii: b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m.
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 75 Data Ascii: =b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(fu
2024-04-26 11:29:10 UTC	1255	IN	Data Raw: 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 0a Data Ascii: rn!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49781	142.250.64.196	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:11 UTC	683	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:11 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Fri, 26 Apr 2024 11:29:11 GMT Expires: Fri, 26 Apr 2024 11:29:11 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:11 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-04-26 11:29:11 UTC	1255	IN	Data Raw: 3a 9b 02 75 78 c5 f7 87 37 97 5d 86 eb c2 27 90 d0 28 71 ed aa aa 84 7e 07 e9 86 09 f2 0e 4b 51 c8 57 e2 ad 97 9c 2c 62 b5 d6 4c 3c b7 59 09 5d 9b 56 2b ee ca a8 a1 ba 74 34 bc 24 a3 56 dc ba 4f 09 8f f6 bd 8e 44 a2 35 0c b1 76 9e 6a 81 f6 ae 48 64 10 4d fc f6 b4 12 7a 9b 88 94 b3 1a b8 9e 56 83 f3 71 bf 70 89 ee 97 c4 e0 8e c6 d2 3b 3a 1b 4a de 25 32 e5 ac 47 c9 3b b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 Data Ascii: :ux7]'(q~KQW,bL<Y]V+t4$VOD5vjHdMzVqp;:J%2G;/E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHu
2024-04-26 11:29:11 UTC	1255	IN	Data Raw: e2 16 73 bd 7d 41 a9 cd 5e 6b a1 2d fd 0d 7e be 97 dd e0 62 a6 99 70 2f 7e 4f 5e 26 93 61 26 ec e2 d8 18 32 cb d0 18 66 b7 a6 f2 2c 56 4b 21 29 0e 37 94 5d 2a 5c 00 ae 93 21 56 26 cf 8d 1d ec 69 99 b5 2f bb 23 96 f6 b8 57 62 ed 8b 4c b8 c8 19 99 82 6d 14 3b fd 1a 44 14 bd 09 98 6d 2b dd 84 32 9b 07 3d 15 a4 f9 5a 59 05 d7 53 0f b2 89 3c 90 99 fe 47 e1 e4 a9 70 fa 1d 77 c1 7b 68 1e 53 9a f8 7b 9e 5c b0 95 21 c5 5c 97 c1 fb 3c 46 ae 78 21 af 8c f3 72 cf 8c 5b 5b e1 e6 df 05 87 7d fd 04 ef 20 8d 75 55 22 f8 1e 65 e0 0b 5a 2b 2b cf 11 7d 05 a8 be f8 47 b7 22 97 5f cb 45 2e 20 c4 49 1b 90 1f 0a 4f fc 20 1d 66 74 a8 6d d0 57 44 31 98 0b aa 86 b7 73 e2 aa 79 0f 91 a0 b6 07 29 1a 4a 5e 77 fc 3b 20 94 36 95 6c 67 84 d2 a5 76 f1 11 ba 72 d1 32 23 1c 00 ad 4b 7d 21 Data Ascii: s}A^k-~bp/~O^&a&2f,VK!)7]*\!V&i/#WbLm;Dm+2=ZYS<Gpw{hS{\!\<Fx!r[[} uU"eZ++}G"_E. IO ftmWD1sy)J^w; 6lgvr2#K}!
2024-04-26 11:29:11 UTC	76	IN	Data Raw: 25 14 54 77 f9 54 45 09 c7 c0 b3 31 f0 04 69 9c 1e e7 ca 39 c7 1e dd 99 bd 0e 81 bc 90 90 f0 02 94 bd a8 07 eb 02 fc 57 7c f8 5a 48 48 48 48 48 48 48 48 48 48 10 fe 07 d8 95 18 53 b9 4a 7f b2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: %TwTE1i9W\|ZHHHHHHHHHHSJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49782	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:11 UTC	1122	OUT	GET /viewer2/prod-02/archive?ck=drive&ds=APznzaYUfl2TcJ5k351Mz-oX5D0kiuP7VzHKjZ8VEoILiA2hdfvaiUTaVkyZkL2oXmvQURSPYmy1Ko05ZlZTcL4BdmjpOJ0KpcFGdGN3Lr-yF2n9lKZDtjR92HHKNGxegMjoovZuStNsOmmlGFFXUFNqLwzzkH_l_i-ybx3ph0Py9NW7-CeFmRr7pFJI9wcxTmwNKl_vsHLV9uuyTYtXgsxvMRoEE6QTcyRYus3pdixWgfNFGbgXKxXWU56TDg03f6-acXmnBFA3LD2GChyGqmSW0Bh2gfvxpSoStUgvKDUc75Q5mRUpM6bKL5pG2e0G-fQyHPFcfUDJ5kN2tB8iY8dsbpbQlA54s5wfSna98QQ854jnnHfcAfcAZQGtGBo_iF7Hec9hxqMB-FzNo7Xq4SoyneNepy394uk-Kh3m54q3WHo8XPXetR8%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:11 UTC	2076	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 11:29:11 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: script-src 'report-sample' 'nonce-MGrY09150Zo-eDRdqLvGuw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzjMtDikmJw0ZBicNu9k8kbiCU5bzPJAbEaEGsD8QWpx0xXgdgpfQZrCBAL8XC0L1i3kU3gwYuuVcwARcgUrg" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:11 UTC	23	IN	Data Raw: 31 31 0d 0a 29 5d 7d 27 0a 7b 22 62 63 6f 64 65 22 3a 33 32 7d 0d 0a Data Ascii: 11)]}'{"bcode":32}
2024-04-26 11:29:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49778	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:11 UTC	961	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3970 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:11 UTC	3970	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 34 31 33 30 39 34 39 30 34 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1714130949040",null,null,null,
2024-04-26 11:29:12 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:11 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:12 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 11:29:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49786	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:12 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:12 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 11:29:12 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:12 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 11:29:12 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49791	142.250.217.206	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:13 UTC	1131	OUT	POST /file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/docos/p/sync?resourcekey&id=1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive Content-Length: 75 X-Build: apps-fileview.texmex_20240418.00_p1 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:13 UTC	75	OUT	Data Raw: 70 3d 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 31 48 6d 4a 68 31 72 30 41 48 42 61 56 74 5f 58 78 71 45 74 32 69 36 57 55 7a 7a 67 65 50 4d 75 63 25 32 32 25 35 44 Data Ascii: p=%5Bnull%2Cnull%2Cnull%2Cnull%2C%221HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc%22%5D
2024-04-26 11:29:14 UTC	724	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 11:29:14 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:14 UTC	49	IN	Data Raw: 32 62 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 73 72 22 2c 6e 75 6c 6c 2c 31 37 31 34 31 33 30 33 35 34 31 31 35 5d 2c 5b 22 64 69 22 2c 32 39 5d 5d 0d 0a Data Ascii: 2b)]}'[["sr",null,1714130354115],["di",29]]
2024-04-26 11:29:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49796	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:15 UTC	961	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3942 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:15 UTC	3942	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 34 31 33 30 39 35 33 35 35 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1714130953552",null,null,null,
2024-04-26 11:29:15 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:15 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:15 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 11:29:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49799	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:15 UTC	736	OUT	GET /file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/docos/p/sync?resourcekey&id=1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:16 UTC	862	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 11:29:16 GMT Content-Type: text/html; charset=utf-8 Content-Security-Policy: script-src 'report-sample' 'nonce-wcFhglY-wNadfOQd10ag7g' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Referrer-Policy: strict-origin-when-cross-origin Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:16 UTC	393	IN	Data Raw: 62 64 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 20 61 6e 64 20 73 70 72 65 61 64 73 68 65 65 74 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c Data Ascii: bdb<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, presentations and spreadsheets"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><
2024-04-26 11:29:16 UTC	1255	IN	Data Raw: 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 72 6f 64 75 63 74 2b 53 61 6e 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 6a 64 69 37 6e 76 42 35 6f 56 34 4e 76 4c 79 2d 5a 75 69 34 73 51 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 6a 64 69 37 6e 76 42 35 6f 56 34 4e 76 4c 79 2d 5a 75 69 34 73 51 22 3e 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d Data Ascii: en-cross-origin"><link href="//fonts.googleapis.com/css?family=Product+Sans" rel="stylesheet" type="text/css" nonce="jdi7nvB5oV4NvLy-Zui4sQ"><style nonce="jdi7nvB5oV4NvLy-Zui4sQ">.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-
2024-04-26 11:29:16 UTC	1255	IN	Data Raw: 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 61 2c 20 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 31 31 32 41 42 42 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 6a 64 69 37 6e 76 42 35 6f 56 34 4e 76 4c 79 2d 5a 75 69 34 73 51 22 3e 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c Data Ascii: nt-family: Arial,sans-serif; font-size: 13px; margin: 0; padding: 0;}a, a:link, a:visited {color: #112ABB;}</style><style type="text/css" nonce="jdi7nvB5oV4NvLy-Zui4sQ">.errorMessage {font-size: 12pt; font-weight: bold; line-height: 150%;}</style></head><
2024-04-26 11:29:16 UTC	139	IN	Data Raw: 37 35 30 70 78 3b 7d 23 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: 750px;}#innerContainer {margin-bottom: 20px; margin-left: 40px; margin-right: 40px; margin-top: 80px; position: relative;}</style></html>
2024-04-26 11:29:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49801	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:16 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:16 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 11:29:16 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:16 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 11:29:16 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49802	142.250.217.193	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:16 UTC	784	OUT	GET /a-/ALV-UjU2mXLWCJzi1jm2LT5yGThl-tAzKHxVR-sixA5EW9xURqjmIyc=s64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 11:29:17 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/gif Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1b" Expires: Sat, 27 Apr 2024 11:29:17 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.gif" X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 11:29:17 GMT Server: fife Content-Length: 108096 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:17 UTC	732	IN	Data Raw: 47 49 46 38 39 61 40 00 40 00 f6 00 00 00 00 00 82 82 82 3f 40 3f c2 c2 c2 1f 20 1f 5f 60 5f a2 a2 a2 0f 10 0f 2f 30 2f 52 52 52 6f 70 6f 92 92 92 e2 e1 e2 b2 b2 b2 d2 d1 d2 48 47 48 68 67 68 18 17 18 38 37 38 07 09 07 2a 2a 2a 8a 89 8a 5a 59 5a 7a 79 7a 9a 9a 9a ba ba ba ca ca ca aa a9 aa 47 48 47 27 28 27 67 68 67 17 19 17 37 38 37 d8 d8 d8 4e 4e 4e 6e 6e 6e 1d 1e 1d 3e 3d 3e 10 0e 10 08 07 08 88 87 88 42 41 42 21 21 21 62 61 62 a8 a7 a8 12 12 12 32 31 32 58 57 58 72 71 72 98 97 98 fe fd fe b8 b7 b8 09 09 09 30 2f 30 90 8f 90 60 5f 60 80 7f 80 a0 9f a0 c0 bf c0 d0 cf d0 05 06 05 85 85 85 c6 c5 c6 a6 a6 a6 56 55 56 95 95 95 ee ee ee b6 b6 b6 d4 d4 d4 49 49 49 69 69 69 1a 1a 1a 39 39 39 2d 2d 2d 8e 8d 8e 5e 5e 5e 7e 7d 7e 9e 9d 9e bd bd bd cf cf cf ae ad Data Ascii: GIF89a@@?@? _`_/0/RRRopoHGHhgh878***ZYZzyzGHG'('ghg787NNNnnn>=>BAB!!!bab212XWXrqr0/0`_`VUVIIIiii999---^^^~}~
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: c5 82 08 11 01 36 f0 e0 61 05 99 0b 20 4b 00 24 58 a0 c5 02 12 20 3f 86 30 01 82 05 8b 12 03 49 36 29 81 31 b7 4a 95 5d 18 56 69 51 50 99 04 8d 02 37 49 c0 48 e0 a2 56 10 28 40 ac bc 10 a0 22 85 ca 5a 9a 2e 0c 84 4a cb 45 93 20 30 04 21 d9 00 40 85 15 23 00 40 af 5a 11 64 84 16 2e 47 40 2c f0 91 0e 4a 13 4d 2a 2f 2c d0 90 c1 46 f7 04 24 1a 60 a9 5e 02 08 00 2e 45 a4 40 1d 13 02 1e 70 c1 06 3e 04 25 17 07 36 61 02 c2 08 24 90 60 45 73 bc 70 47 40 16 52 18 c0 01 00 56 7c 53 04 10 60 d9 c4 83 60 4b 64 00 c4 07 00 10 00 c0 0a 01 d8 60 41 26 17 04 f1 0a 12 82 a8 10 04 13 5b a4 68 04 78 08 5c 31 02 16 5c 20 91 c0 12 7e 95 b0 41 76 2b b0 06 85 ff 03 3e 18 c0 c4 02 2b 5c 12 80 40 0d 30 c9 42 11 b8 30 91 01 08 2a 34 67 c0 2a 56 64 b7 c4 05 49 24 61 c4 12 40 64 41 Data Ascii: 6a K$X ?0I6)1J]ViQP7IHV(@"Z.JE 0!@#@Zd.G@,JM/,F$`^.E@p>%6a$`EspG@RV\|S``Kd`A&[hx\1\ ~Av+>+\@0B04g*VdI$a@dA
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 1f 20 1f 5f 60 5f 9e 9e 9e 0f 10 0f 4f 50 4f 2f 30 2f 8e 8d 8e 6f 71 6f e6 e5 e6 ae ad ae ca c9 ca 18 17 18 58 57 58 05 09 05 4a 4a 4a 2a 2a 2a 68 67 68 37 38 37 86 86 86 a6 a5 a6 96 95 96 c2 c2 c2 78 77 78 47 48 47 27 28 27 17 18 17 57 58 57 38 37 38 b6 b6 b6 d2 d1 d2 1d 1d 1d 5e 5e 5e 10 0e 10 6e 6e 6e 08 06 08 80 7f 80 41 41 41 c0 bf c0 22 22 22 62 61 62 a0 9f a0 11 12 11 52 52 52 32 32 32 90 8f 90 72 72 72 b0 af b0 0a 0a 0a 50 4f 50 30 2f 30 3a 3a 3a 8a 8a 8a a8 a7 a8 98 97 98 04 05 04 be bd be f4 f3 f4 ce cd ce 19 1a 19 5a 59 5a 4d 4e 4d 2d 2e 2d 6a 6a 6a 87 88 87 c5 c5 c5 7a 7a 7a d7 d6 d7 20 1f 20 60 5f 60 70 6f 70 82 82 82 45 45 45 25 26 25 65 65 65 a1 a1 a1 16 16 16 55 55 55 35 35 35 92 91 92 75 75 75 b2 b1 b2 0d 0e 0d 3d 3d 3d aa aa aa 9a 9a 9a Data Ascii: _`_OPO/0/oqoXWXJJJ***hgh787xwxGHG'('WXW878^^^nnnAAA"""babRRR222rrrPOP0/0:::ZYZMNM-.-jjjzzz `_`popEEE%&%eeeUUU555uuu===
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 5d 43 00 41 09 25 5c 36 5b de 39 61 b3 c2 0b 14 14 c0 20 be 38 1c 37 88 4f 4e 7c c0 80 2f 37 a0 b7 83 98 2e 54 83 40 c7 2c 48 b1 35 14 50 58 d1 04 0d 2b 2c 65 94 11 b5 01 e0 83 0f e1 ec 25 88 11 40 1c e0 42 d0 42 0c 90 d8 0f 2e ac 50 4d 13 42 ac 00 c3 d4 2e 34 71 42 a6 14 3c 06 c3 0e f5 b2 fd ea c3 00 f0 53 bc 4e 3b 08 51 c2 0a 89 01 26 44 d1 2b 08 71 45 d7 1e 54 5f 73 0a 27 c8 70 85 0e 46 20 63 48 12 46 18 21 c3 ff 08 49 ac c0 c1 0e 30 58 f1 7a 13 c7 45 11 84 97 3f 42 21 3b 00 1d a4 54 c0 f9 e5 a0 43 08 0b 17 28 20 43 13 29 48 01 04 5e d0 9d 1d f8 c7 05 be 08 89 af 16 45 01 ac fd 00 04 f3 f1 52 05 60 10 bc 57 09 c2 82 88 48 42 13 82 20 05 29 20 01 09 76 eb 40 14 48 40 c2 bd a4 80 79 91 b3 91 0b 80 00 05 5f 89 a3 65 86 10 09 22 98 f0 83 13 5a 41 0a 91 db Data Ascii: ]CA%\6[9a 87ON\|/7.T@,H5PX+,e%@BB.PMB.4qB<SN;Q&D+qET_s'pF cHF!I0XzE?B!;TC( C)H^ER`WHB ) v@H@y_e"ZA
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 9a 20 84 00 a2 34 d0 d7 45 89 94 2b 26 a0 60 c1 02 43 8a 85 22 eb 08 65 f0 f1 81 00 81 75 0a 22 20 25 a0 40 90 25 06 4a a6 32 a9 51 03 c0 90 0b 58 3c 48 d8 f2 61 89 0f 27 4e 12 fc 1e 64 23 0b 85 ef 2b 96 4c 40 a2 d6 40 83 0e 00 9e f4 d8 b2 02 80 8e 08 05 32 7a a0 12 c5 05 13 07 0e 50 20 f1 50 23 00 05 2a 53 09 12 c0 02 82 9c 60 a0 0b 04 70 60 56 15 31 3c e0 04 00 58 58 c2 84 0b 0e a1 00 02 00 90 24 70 81 04 8a 60 91 80 0a 88 41 30 88 13 28 3c 30 82 03 e8 01 c0 45 04 f6 00 a0 00 85 06 a4 57 14 17 0a 60 51 83 7a 05 3c a0 22 84 0e 24 51 04 0c 8c c1 90 1b 15 31 54 e1 82 03 34 4c 10 41 ff 00 b3 7d a0 04 51 06 78 41 c5 3e 36 74 10 01 22 57 14 a0 00 4a 57 78 e1 85 02 60 75 a1 80 13 85 01 d0 58 4e 01 70 71 44 11 45 00 d0 83 20 3e 28 a0 40 0f 31 04 60 43 15 36 18 Data Ascii: 4E+&`C"eu" %@%J2QX<Ha'Nd#+L@@2zP P#*S`p`V1<XX$p`A0(<0EW`Qz<"$Q1T4LA}QxA>6t"WJWx`uXNpqDE >(@1`C6
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 97 98 97 fa f9 fa da da da 2d 2d 2d 6d 6d 6d 3d 3d 3d 1d 1d 1d 5d 5d 5d 9e 9d 9e 09 09 09 4d 4e 4d ae ae ae 88 87 88 42 42 42 c8 c7 c8 22 22 22 62 62 62 a2 a1 a2 32 32 32 11 11 11 52 52 52 92 91 92 78 77 78 ef ee ef 90 8f 90 80 7f 80 c0 bf c0 05 05 05 85 85 85 c6 c5 c6 75 75 75 e6 e6 e6 b6 b6 b6 d6 d6 d6 29 29 29 6a 6a 6a 3a 3a 3a 19 19 19 5a 5a 5a 9a 99 9a 05 0c 05 4a 4a 4a aa a9 aa 8e 8d 8e 7d 7d 7d cd cd cd be bd be de de de 31 2f 31 70 6f 70 40 3f 40 20 1f 20 60 5f 60 a0 9f a0 0c 0d 0c 50 4f 50 b0 af b0 45 45 45 25 25 25 66 66 66 a6 a5 a6 35 36 35 15 15 15 56 56 56 95 95 95 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ---mmm===]]]MNMBBB"""bbb222RRRxwxuuu)))jjj:::ZZZJJJ}}}1/1pop@?@ `_`POPEEE%%%fff565VVV
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 5f 21 31 f8 e0 1e c0 09 7a ac cb 38 52 c4 8c 82 14 71 43 02 29 68 6e 43 0a 59 b0 9c 00 13 40 9a d0 36 0b 61 a4 a0 fd 09 05 18 31 5f 06 43 68 52 88 ff 00 e4 f3 05 43 11 f0 d5 82 c4 fa 48 80 61 82 17 ff ee 6d 83 96 00 c8 20 43 16 5c 78 70 83 09 06 e0 20 46 13 81 1a 04 45 b2 40 0a 9b 31 e1 06 95 c3 44 da 52 c0 2f 26 2c 6b 30 7f 63 c1 c8 6a 60 01 15 74 e1 69 7d 81 c4 d3 66 50 8b 16 d8 e0 08 09 00 5d 72 60 40 10 82 b4 a0 06 3e 80 1e 26 04 71 83 1a 2c e7 07 63 c8 45 23 8c a0 81 13 fe 2b 09 36 80 40 12 e4 27 21 12 aa a0 85 3e 90 81 04 7d 70 84 0f de c0 07 7f 42 1f 17 4e 56 08 19 98 60 6f 57 38 c2 05 c0 10 86 ef 68 2f 05 6e f2 81 ee 90 b0 a6 bd 15 c1 6c 33 e8 42 64 ca 03 09 8e 1c e1 08 0c 8c 91 0c 8e 70 c4 57 6d 29 0b 70 dc 9b 04 ff 75 98 22 c0 28 01 01 84 c4 0d Data Ascii: _!1z8RqC)hnCY@6a1_ChRCHam C\xp FE@1DR/&,k0cj`ti}fP]r`@>&q,cE#+6@'!>}pBNV`oW8h/nl3BdpWm)pu"(
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 92 16 36 46 a7 0b 59 01 2e 80 0a 2b 50 1c 85 51 85 c1 42 10 ee c1 b0 c4 42 87 d8 40 84 11 00 6c 91 c2 0a 0d 5c f5 c2 02 04 fc 65 c3 16 43 68 71 15 00 59 bc 90 43 4c 26 a0 40 50 07 3a 70 c1 01 05 14 20 21 88 0d 40 98 c4 85 17 5b 00 90 02 41 9d 28 b0 40 16 71 05 30 04 26 33 10 31 c3 0b 97 84 11 91 13 30 34 30 06 11 15 70 b6 42 23 18 56 90 02 ff 0d 20 60 c1 05 10 5b b4 40 82 03 a1 01 b0 00 03 36 20 66 1e 44 d3 35 61 02 69 56 3c f0 80 94 2f 04 d0 82 25 83 04 20 03 0c 13 08 42 82 17 62 9c f3 45 16 3b 64 51 c4 16 2d 02 f0 83 20 5f fc 70 42 16 3f cc 20 40 07 02 58 51 44 00 4a 31 d1 0b 31 5a 00 31 06 0f 41 3c 00 00 82 01 60 41 40 05 2d 42 50 42 0b 52 04 21 88 06 5d 0c d1 09 00 5f 9c 40 01 62 01 74 e1 4b 07 5a 90 80 e1 a4 aa 05 30 40 18 5c 64 00 80 15 a0 64 61 83 Data Ascii: 6FY.+PQBB@l\eChqYCL&@P:p !@[A(@q0&31040pB#V `[@6 fD5aiV</% BbE;dQ- _pB? @XQDJ11Z1A<`A@-BPBR!]_@btKZ0@\dda
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 21 22 21 5a 5a 5a 98 97 98 d0 cf d0 8a 8a 8a 31 31 31 70 6f 70 a8 a7 a8 ca c9 ca e5 e5 e5 a0 9f a0 90 8f 90 04 05 04 3f 40 3f b5 b5 b5 0e 14 0e 87 88 87 4f 50 4f 6e 6d 6e 19 1a 19 47 48 47 c6 c5 c6 29 2a 29 62 61 62 e1 e1 e1 07 0c 07 7f 80 7f be be be db db db 3a 3a 3a 42 42 42 15 16 15 52 52 52 20 1d 20 4a 4a 4a 30 2e 30 68 67 68 0c 0d 0c 82 82 82 7a 7a 7a 26 26 26 5d 5d 5d 9a 9a 9a d1 d1 d1 35 36 35 a9 a9 a9 a2 a1 a2 92 91 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff 80 00 82 83 84 85 00 5b 00 35 Data Ascii: !"!ZZZ111pop?@?OPOnmnGHG)*)bab:::BBBRRR JJJ0.0hghzzz&&&]]]565[5
2024-04-26 11:29:17 UTC	1255	IN	Data Raw: 15 52 40 5f 03 2c 70 1d c4 29 5c 21 c4 ff f8 00 bc 20 c4 16 9a 8d bf 02 f9 a6 53 a1 c2 76 3a 79 41 84 16 1f 0a d2 84 a2 18 60 61 c5 0b 4f c0 80 40 11 0f 10 04 80 24 90 a3 2d 14 e1 05 0f d8 81 10 5a 27 04 29 38 8d 06 45 50 c1 fd 26 53 bf b8 d0 80 06 02 38 41 14 d4 d5 84 d8 0d e2 82 4e 01 41 14 2e f8 82 13 98 f0 04 8f 43 c0 13 b0 00 01 15 88 03 6f 86 88 a0 28 a8 d0 80 2b 8c 60 41 5b c0 d8 07 ae d0 ab 5e 35 c1 09 2b f8 40 0a 0a f5 9f 26 44 a1 02 41 40 9b 09 76 45 08 75 01 80 09 0b 70 c2 02 9a 20 81 01 08 e1 80 34 28 00 00 4e d0 04 bd 8d 60 05 48 49 01 15 ae 00 3d 18 90 e0 8c 03 00 c2 0e 9c 52 88 d8 9d 20 05 10 18 40 14 46 08 80 0e 04 68 00 2f 30 5d ec a8 20 04 09 ac a0 08 91 63 82 10 76 00 83 27 0a e0 00 d0 90 44 a1 9e 90 9a 27 42 40 0a 52 e8 8c 14 78 d1 3b Data Ascii: R@_,p)\! Sv:yA`aO@$-Z')8EP&S8ANA.Co(+`A[^5+@&DA@vEup 4(N`HI=R @Fh/0] cv'D'B@Rx;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49803	142.250.64.225	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:18 UTC	508	OUT	GET /a-/ALV-UjU2mXLWCJzi1jm2LT5yGThl-tAzKHxVR-sixA5EW9xURqjmIyc=s64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 11:29:18 UTC	531	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.gif" X-Content-Type-Options: nosniff Server: fife Content-Length: 108096 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 11:29:17 GMT Expires: Sat, 27 Apr 2024 11:29:17 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v1b" Content-Type: image/gif Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:18 UTC	724	IN	Data Raw: 47 49 46 38 39 61 40 00 40 00 f6 00 00 00 00 00 82 82 82 3f 40 3f c2 c2 c2 1f 20 1f 5f 60 5f a2 a2 a2 0f 10 0f 2f 30 2f 52 52 52 6f 70 6f 92 92 92 e2 e1 e2 b2 b2 b2 d2 d1 d2 48 47 48 68 67 68 18 17 18 38 37 38 07 09 07 2a 2a 2a 8a 89 8a 5a 59 5a 7a 79 7a 9a 9a 9a ba ba ba ca ca ca aa a9 aa 47 48 47 27 28 27 67 68 67 17 19 17 37 38 37 d8 d8 d8 4e 4e 4e 6e 6e 6e 1d 1e 1d 3e 3d 3e 10 0e 10 08 07 08 88 87 88 42 41 42 21 21 21 62 61 62 a8 a7 a8 12 12 12 32 31 32 58 57 58 72 71 72 98 97 98 fe fd fe b8 b7 b8 09 09 09 30 2f 30 90 8f 90 60 5f 60 80 7f 80 a0 9f a0 c0 bf c0 d0 cf d0 05 06 05 85 85 85 c6 c5 c6 a6 a6 a6 56 55 56 95 95 95 ee ee ee b6 b6 b6 d4 d4 d4 49 49 49 69 69 69 1a 1a 1a 39 39 39 2d 2d 2d 8e 8d 8e 5e 5e 5e 7e 7d 7e 9e 9d 9e bd bd bd cf cf cf ae ad Data Ascii: GIF89a@@?@? _`_/0/RRRopoHGHhgh878***ZYZzyzGHG'('ghg787NNNnnn>=>BAB!!!bab212XWXrqr0/0`_`VUVIIIiii999---^^^~}~
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 42 8e 0d 0d 32 18 40 81 c5 82 08 11 01 36 f0 e0 61 05 99 0b 20 4b 00 24 58 a0 c5 02 12 20 3f 86 30 01 82 05 8b 12 03 49 36 29 81 31 b7 4a 95 5d 18 56 69 51 50 99 04 8d 02 37 49 c0 48 e0 a2 56 10 28 40 ac bc 10 a0 22 85 ca 5a 9a 2e 0c 84 4a cb 45 93 20 30 04 21 d9 00 40 85 15 23 00 40 af 5a 11 64 84 16 2e 47 40 2c f0 91 0e 4a 13 4d 2a 2f 2c d0 90 c1 46 f7 04 24 1a 60 a9 5e 02 08 00 2e 45 a4 40 1d 13 02 1e 70 c1 06 3e 04 25 17 07 36 61 02 c2 08 24 90 60 45 73 bc 70 47 40 16 52 18 c0 01 00 56 7c 53 04 10 60 d9 c4 83 60 4b 64 00 c4 07 00 10 00 c0 0a 01 d8 60 41 26 17 04 f1 0a 12 82 a8 10 04 13 5b a4 68 04 78 08 5c 31 02 16 5c 20 91 c0 12 7e 95 b0 41 76 2b b0 06 85 ff 03 3e 18 c0 c4 02 2b 5c 12 80 40 0d 30 c9 42 11 b8 30 91 01 08 2a 34 67 c0 2a 56 64 b7 c4 05 Data Ascii: B2@6a K$X ?0I6)1J]ViQP7IHV(@"Z.JE 0!@#@Zd.G@,JM/,F$`^.E@p>%6a$`EspG@RV\|S``Kd`A&[hx\1\ ~Av+>+\@0B04g*Vd
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 7d 7d 3f 40 3f bb ba bb 1f 20 1f 5f 60 5f 9e 9e 9e 0f 10 0f 4f 50 4f 2f 30 2f 8e 8d 8e 6f 71 6f e6 e5 e6 ae ad ae ca c9 ca 18 17 18 58 57 58 05 09 05 4a 4a 4a 2a 2a 2a 68 67 68 37 38 37 86 86 86 a6 a5 a6 96 95 96 c2 c2 c2 78 77 78 47 48 47 27 28 27 17 18 17 57 58 57 38 37 38 b6 b6 b6 d2 d1 d2 1d 1d 1d 5e 5e 5e 10 0e 10 6e 6e 6e 08 06 08 80 7f 80 41 41 41 c0 bf c0 22 22 22 62 61 62 a0 9f a0 11 12 11 52 52 52 32 32 32 90 8f 90 72 72 72 b0 af b0 0a 0a 0a 50 4f 50 30 2f 30 3a 3a 3a 8a 8a 8a a8 a7 a8 98 97 98 04 05 04 be bd be f4 f3 f4 ce cd ce 19 1a 19 5a 59 5a 4d 4e 4d 2d 2e 2d 6a 6a 6a 87 88 87 c5 c5 c5 7a 7a 7a d7 d6 d7 20 1f 20 60 5f 60 70 6f 70 82 82 82 45 45 45 25 26 25 65 65 65 a1 a1 a1 16 16 16 55 55 55 35 35 35 92 91 92 75 75 75 b2 b1 b2 0d 0e 0d 3d Data Ascii: }}?@? _`_OPO/0/oqoXWXJJJ***hgh787xwxGHG'('WXW878^^^nnnAAA"""babRRR222rrrPOP0/0:::ZYZMNM-.-jjjzzz `_`popEEE%&%eeeUUU555uuu=
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 6d c4 2c 26 48 11 72 c3 5d 43 00 41 09 25 5c 36 5b de 39 61 b3 c2 0b 14 14 c0 20 be 38 1c 37 88 4f 4e 7c c0 80 2f 37 a0 b7 83 98 2e 54 83 40 c7 2c 48 b1 35 14 50 58 d1 04 0d 2b 2c 65 94 11 b5 01 e0 83 0f e1 ec 25 88 11 40 1c e0 42 d0 42 0c 90 d8 0f 2e ac 50 4d 13 42 ac 00 c3 d4 2e 34 71 42 a6 14 3c 06 c3 0e f5 b2 fd ea c3 00 f0 53 bc 4e 3b 08 51 c2 0a 89 01 26 44 d1 2b 08 71 45 d7 1e 54 5f 73 0a 27 c8 70 85 0e 46 20 63 48 12 46 18 21 c3 ff 08 49 ac c0 c1 0e 30 58 f1 7a 13 c7 45 11 84 97 3f 42 21 3b 00 1d a4 54 c0 f9 e5 a0 43 08 0b 17 28 20 43 13 29 48 01 04 5e d0 9d 1d f8 c7 05 be 08 89 af 16 45 01 ac fd 00 04 f3 f1 52 05 60 10 bc 57 09 c2 82 88 48 42 13 82 20 05 29 20 01 09 76 eb 40 14 48 40 c2 bd a4 80 79 91 b3 91 0b 80 00 05 5f 89 a3 65 86 10 09 22 98 Data Ascii: m,&Hr]CA%\6[9a 87ON\|/7.T@,H5PX+,e%@BB.PMB.4qB<SN;Q&D+qET_s'pF cHF!I0XzE?B!;TC( C)H^ER`WHB ) v@H@y_e"
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 8d 02 43 46 44 10 14 c3 9a 20 84 00 a2 34 d0 d7 45 89 94 2b 26 a0 60 c1 02 43 8a 85 22 eb 08 65 f0 f1 81 00 81 75 0a 22 20 25 a0 40 90 25 06 4a a6 32 a9 51 03 c0 90 0b 58 3c 48 d8 f2 61 89 0f 27 4e 12 fc 1e 64 23 0b 85 ef 2b 96 4c 40 a2 d6 40 83 0e 00 9e f4 d8 b2 02 80 8e 08 05 32 7a a0 12 c5 05 13 07 0e 50 20 f1 50 23 00 05 2a 53 09 12 c0 02 82 9c 60 a0 0b 04 70 60 56 15 31 3c e0 04 00 58 58 c2 84 0b 0e a1 00 02 00 90 24 70 81 04 8a 60 91 80 0a 88 41 30 88 13 28 3c 30 82 03 e8 01 c0 45 04 f6 00 a0 00 85 06 a4 57 14 17 0a 60 51 83 7a 05 3c a0 22 84 0e 24 51 04 0c 8c c1 90 1b 15 31 54 e1 82 03 34 4c 10 41 ff 00 b3 7d a0 04 51 06 78 41 c5 3e 36 74 10 01 22 57 14 a0 00 4a 57 78 e1 85 02 60 75 a1 80 13 85 01 d0 58 4e 01 70 71 44 11 45 00 d0 83 20 3e 28 a0 40 Data Ascii: CFD 4E+&`C"eu" %@%J2QX<Ha'Nd#+L@@2zP P#*S`p`V1<XX$p`A0(<0EW`Qz<"$Q1T4LA}QxA>6t"WJWx`uXNpqDE >(@
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 38 37 16 18 16 57 58 57 97 98 97 fa f9 fa da da da 2d 2d 2d 6d 6d 6d 3d 3d 3d 1d 1d 1d 5d 5d 5d 9e 9d 9e 09 09 09 4d 4e 4d ae ae ae 88 87 88 42 42 42 c8 c7 c8 22 22 22 62 62 62 a2 a1 a2 32 32 32 11 11 11 52 52 52 92 91 92 78 77 78 ef ee ef 90 8f 90 80 7f 80 c0 bf c0 05 05 05 85 85 85 c6 c5 c6 75 75 75 e6 e6 e6 b6 b6 b6 d6 d6 d6 29 29 29 6a 6a 6a 3a 3a 3a 19 19 19 5a 5a 5a 9a 99 9a 05 0c 05 4a 4a 4a aa a9 aa 8e 8d 8e 7d 7d 7d cd cd cd be bd be de de de 31 2f 31 70 6f 70 40 3f 40 20 1f 20 60 5f 60 a0 9f a0 0c 0d 0c 50 4f 50 b0 af b0 45 45 45 25 25 25 66 66 66 a6 a5 a6 35 36 35 15 15 15 56 56 56 95 95 95 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 87WXW---mmm===]]]MNMBBB"""bbb222RRRxwxuuu)))jjj:::ZZZJJJ}}}1/1pop@?@ `_`POPEEE%%%fff565VVV
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 35 ba 0d 48 64 91 3b da 5f 21 31 f8 e0 1e c0 09 7a ac cb 38 52 c4 8c 82 14 71 43 02 29 68 6e 43 0a 59 b0 9c 00 13 40 9a d0 36 0b 61 a4 a0 fd 09 05 18 31 5f 06 43 68 52 88 ff 00 e4 f3 05 43 11 f0 d5 82 c4 fa 48 80 61 82 17 ff ee 6d 83 96 00 c8 20 43 16 5c 78 70 83 09 06 e0 20 46 13 81 1a 04 45 b2 40 0a 9b 31 e1 06 95 c3 44 da 52 c0 2f 26 2c 6b 30 7f 63 c1 c8 6a 60 01 15 74 e1 69 7d 81 c4 d3 66 50 8b 16 d8 e0 08 09 00 5d 72 60 40 10 82 b4 a0 06 3e 80 1e 26 04 71 83 1a 2c e7 07 63 c8 45 23 8c a0 81 13 fe 2b 09 36 80 40 12 e4 27 21 12 aa a0 85 3e 90 81 04 7d 70 84 0f de c0 07 7f 42 1f 17 4e 56 08 19 98 60 6f 57 38 c2 05 c0 10 86 ef 68 2f 05 6e f2 81 ee 90 b0 a6 bd 15 c1 6c 33 e8 42 64 ca 03 09 8e 1c e1 08 0c 8c 91 0c 8e 70 c4 57 6d 29 0b 70 dc 9b 04 ff 75 98 Data Ascii: 5Hd;_!1z8RqC)hnCY@6a1_ChRCHam C\xp FE@1DR/&,k0cj`ti}fP]r`@>&q,cE#+6@'!>}pBNV`oW8h/nl3BdpWm)pu
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: f3 48 0c 54 c1 22 23 00 92 16 36 46 a7 0b 59 01 2e 80 0a 2b 50 1c 85 51 85 c1 42 10 ee c1 b0 c4 42 87 d8 40 84 11 00 6c 91 c2 0a 0d 5c f5 c2 02 04 fc 65 c3 16 43 68 71 15 00 59 bc 90 43 4c 26 a0 40 50 07 3a 70 c1 01 05 14 20 21 88 0d 40 98 c4 85 17 5b 00 90 02 41 9d 28 b0 40 16 71 05 30 04 26 33 10 31 c3 0b 97 84 11 91 13 30 34 30 06 11 15 70 b6 42 23 18 56 90 02 ff 0d 20 60 c1 05 10 5b b4 40 82 03 a1 01 b0 00 03 36 20 66 1e 44 d3 35 61 02 69 56 3c f0 80 94 2f 04 d0 82 25 83 04 20 03 0c 13 08 42 82 17 62 9c f3 45 16 3b 64 51 c4 16 2d 02 f0 83 20 5f fc 70 42 16 3f cc 20 40 07 02 58 51 44 00 4a 31 d1 0b 31 5a 00 31 06 0f 41 3c 00 00 82 01 60 41 40 05 2d 42 50 42 0b 52 04 21 88 06 5d 0c d1 09 00 5f 9c 40 01 62 01 74 e1 4b 07 5a 90 80 e1 a4 aa 05 30 40 18 5c Data Ascii: HT"#6FY.+PQBB@l\eChqYCL&@P:p !@[A(@q0&31040pB#V `[@6 fD5aiV</% BbE;dQ- _pB? @XQDJ11Z1A<`A@-BPBR!]_@btKZ0@\
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 7f 80 78 77 78 b8 b7 b8 21 22 21 5a 5a 5a 98 97 98 d0 cf d0 8a 8a 8a 31 31 31 70 6f 70 a8 a7 a8 ca c9 ca e5 e5 e5 a0 9f a0 90 8f 90 04 05 04 3f 40 3f b5 b5 b5 0e 14 0e 87 88 87 4f 50 4f 6e 6d 6e 19 1a 19 47 48 47 c6 c5 c6 29 2a 29 62 61 62 e1 e1 e1 07 0c 07 7f 80 7f be be be db db db 3a 3a 3a 42 42 42 15 16 15 52 52 52 20 1d 20 4a 4a 4a 30 2e 30 68 67 68 0c 0d 0c 82 82 82 7a 7a 7a 26 26 26 5d 5d 5d 9a 9a 9a d1 d1 d1 35 36 35 a9 a9 a9 a2 a1 a2 92 91 92 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 ff 80 00 Data Ascii: xwx!"!ZZZ111pop?@?OPOnmnGHG)*)bab:::BBBRRR JJJ0.0hghzzz&&&]]]565
2024-04-26 11:29:18 UTC	1255	IN	Data Raw: 01 12 a3 44 21 40 03 d1 15 52 40 5f 03 2c 70 1d c4 29 5c 21 c4 ff f8 00 bc 20 c4 16 9a 8d bf 02 f9 a6 53 a1 c2 76 3a 79 41 84 16 1f 0a d2 84 a2 18 60 61 c5 0b 4f c0 80 40 11 0f 10 04 80 24 90 a3 2d 14 e1 05 0f d8 81 10 5a 27 04 29 38 8d 06 45 50 c1 fd 26 53 bf b8 d0 80 06 02 38 41 14 d4 d5 84 d8 0d e2 82 4e 01 41 14 2e f8 82 13 98 f0 04 8f 43 c0 13 b0 00 01 15 88 03 6f 86 88 a0 28 a8 d0 80 2b 8c 60 41 5b c0 d8 07 ae d0 ab 5e 35 c1 09 2b f8 40 0a 0a f5 9f 26 44 a1 02 41 40 9b 09 76 45 08 75 01 80 09 0b 70 c2 02 9a 20 81 01 08 e1 80 34 28 00 00 4e d0 04 bd 8d 60 05 48 49 01 15 ae 00 3d 18 90 e0 8c 03 00 c2 0e 9c 52 88 d8 9d 20 05 10 18 40 14 46 08 80 0e 04 68 00 2f 30 5d ec a8 20 04 09 ac a0 08 91 63 82 10 76 00 83 27 0a e0 00 d0 90 44 a1 9e 90 9a 27 42 40 Data Ascii: D!@R@_,p)\! Sv:yA`aO@$-Z')8EP&S8ANA.Co(+`A[^5+@&DA@vEup 4(N`HI=R @Fh/0] cv'D'B@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49804	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:23 UTC	960	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 987 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:23 UTC	987	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 32 35 30 2c 5b 5b 22 31 37 31 34 31 33 30 39 35 31 37 39 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1250,[["1714130951794",null,null,null
2024-04-26 11:29:23 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 11:29:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49805	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:23 UTC	960	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:23 UTC	620	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 37 34 2c 5b 5b 22 31 37 31 34 31 33 30 39 35 31 37 39 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],574,[["1714130951795",null,null,null,
2024-04-26 11:29:23 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 11:29:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49806	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:24 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 11:29:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:24 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 11:29:24 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49807	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:25 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 11:29:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:25 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 11:29:25 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49810	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:31 UTC	543	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://drive.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 11:29:32 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:32 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49812	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:32 UTC	992	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1251 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:32 UTC	1251	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 30 36 2c 5b 5b 22 31 37 31 34 31 33 30 39 37 30 32 31 39 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2006,[["1714130970219",null,null,null
2024-04-26 11:29:32 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 26 Apr 2024 11:29:32 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 11:29:32 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-04-26 11:29:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49813	142.250.189.142	443	5088	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 11:29:33 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=DGx8IcyS7I3q2e-I1ed4wEnHCFKlikCcif-7d7KseeZ9ZULb1B5vgUkHV--0HY9ELLvyGQkhFN6Kc5bxgiowBem2p19uvcufBm4PVisSviRS6FmTaN7hLbyr7MLEfG3UUyrvLbboYPo-HuDqhTp3gUbHhLols3tE2OHJc2FHRDI
2024-04-26 11:29:33 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 26 Apr 2024 11:29:33 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 11:29:33 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-04-26 11:29:33 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Target ID:	0
Start time:	13:28:49
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	13:28:50
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2000,i,14581527048622102592,2490894029752333022,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	13:28:55
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
https://drive.google.com/file/d/1HmJh1r0AHBaVt_XxqEt2i6WUzzgePMuc/view