Edit tour

Windows Analysis Report
https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview

Overview

General Information

Sample URL:	https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview
Analysis ID:	1432141
Infos:

Detection

Score:	20
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found suspicious QR code URL

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2492 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1712,i,15347724259960520691,9144545762647224658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:/// MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6632 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2076,i,12905221470938519090,15953591901878050253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://%3cfnc1%3e(5)%3cfnc1%3e(%02)/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6944 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1996,i,5466060823698890482,1351892748397088521,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Snort Signatures

⊘No Snort rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Found suspicious QR code URL

Source: QR Code extractor	URL: http://
Source: QR Code extractor	URL: http://
Source: QR Code extractor	URL: http://<FNC1>(5)<FNC1>()
Source: QR Code extractor	URL: http://<FNC1>(5)<FNC1>()

Source: unknown

HTTPS traffic detected: 142.250.217.225:443 -> 192.168.2.4:49771 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 142.250.217.225:443 -> 192.168.2.4:49771 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGKHVrrEGIjCGTIFNgwCqg6KBz5rBbLFCyjWo_wrNhn_m27xtdwcxgTfsjn6kArLmSGZDuCewgJQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-13; NID=513=Ws_e_nPexgfWAEfZbob3hrKGg3KYFME7eNdM-xfXzPQYJXs631GXMmHGczvDE67LJo-xVXwx8CMCLG965WWcGpFRNCn6Hjo6fIPF5GKPSE0Tf4qOS0fmxxy4z_BAcv_kvBMLhR-q-Rh__FepvOm68kV5N9yQRabxOD4msc1vAEQ
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGKHVrrEGIjCAwqd5aHTOlyUE6jH5e1xF0ingjmOr7JoUxUSGQTlQ_ULyex8YCxJ6Uqj_J6tA-uMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-13; NID=513=J8wI918jBuekBOhaX-d_kvPVQRcHa-wmBbUOae9IYz8kZsYDXxABP7oKFgAbeAIkVmjS9ME9mO0tiLg9tuXX_wemhEQIRILKrelluDp3BZ7YF2opnWNCUx2jnOls0Af1q4t3-kGQ5Dp9D8qh83yClTVpEpVKC8VtsUNo0rq-AVU
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRmgZjcGKHVrrEGIjAM6pg0sk4j-FMPZ_hJZJKTKDM0SVUw_6TyPx8OtG0dA6bxJcOs3Tnu_R8uc-avnL0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gXs2eAYyfceFPPD&MD=oK8VXYh3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview HTTP/1.1Host: 6125106173.docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
Source: global traffic	HTTP traffic detected: GET /drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview HTTP/1.1Host: docs.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/css/4013897977-preview_css_ltr.css HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/previewAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
Source: global traffic	HTTP traffic detected: GET /static/drawings/client/js/2099830619-preview_core.js HTTP/1.1Host: docs.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/previewAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://docs.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo HTTP/1.1Host: lh7-us.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo HTTP/1.1Accept: /User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35 Safari/537.36Host: lh7-us.googleusercontent.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs HTTP/1.1Accept: /User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35 Safari/537.36Host: lh7-us.googleusercontent.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gXs2eAYyfceFPPD&MD=oK8VXYh3 HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 6125106173.docs.google.com
Source: global traffic	DNS traffic detected: DNS query: docs.google.com
Source: global traffic	DNS traffic detected: DNS query: lh7-us.googleusercontent.com

Source: chromecache_56.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_56.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_56.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.4:49773 version: TLS 1.2

Source: classification engine

Classification label: sus20.phis.win@28/17@14/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1712,i,15347724259960520691,9144545762647224658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://%3cfnc1%3e(5)%3cfnc1%3e(%02)/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2076,i,12905221470938519090,15953591901878050253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1996,i,5466060823698890482,1351892748397088521,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1712,i,15347724259960520691,9144545762647224658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2076,i,12905221470938519090,15953591901878050253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1996,i,5466060823698890482,1351892748397088521,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
docs.google.com	172.217.2.206	true	false	high
browserchannel-sites.l.google.com	173.194.210.189	true	false	high
www.google.com	142.250.64.196	true	false	high
googlehosted.l.googleusercontent.com	142.250.217.225	true	false	high
6125106173.docs.google.com	unknown	unknown	false	high
lh7-us.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.google.com/async/ddljson?async=ntp:2	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGKHVrrEGIjCGTIFNgwCqg6KBz5rBbLFCyjWo_wrNhn_m27xtdwcxgTfsjn6kArLmSGZDuCewgJQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://lh7-us.googleusercontent.com/drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs	false	high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw	false	high
https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview	false	high
https://docs.google.com/static/drawings/client/js/2099830619-preview_core.js	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGKHVrrEGIjCAwqd5aHTOlyUE6jH5e1xF0ingjmOr7JoUxUSGQTlQ_ULyex8YCxJ6Uqj_J6tA-uMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://lh7-us.googleusercontent.com/drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo	false	high
https://www.google.com/async/newtab_promos	false	high
https://www.google.com/async/newtab_ogb?hl=en-US&async=fixed:0	false	high
https://docs.google.com/static/drawings/client/css/4013897977-preview_css_ltr.css	false	high
https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRmgZjcGKHVrrEGIjAM6pg0sk4j-FMPZ_hJZJKTKDM0SVUw_6TyPx8OtG0dA6bxJcOs3Tnu_R8uc-avnL0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM	false	high
https://docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_56.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
173.194.210.189	browserchannel-sites.l.google.com	United States	15169	GOOGLEUS	false
142.250.64.196	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.217.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.64.193	unknown	United States	15169	GOOGLEUS	false
172.217.2.206	docs.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432141
Start date and time:	2024-04-26 15:21:43 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus20.phis.win@28/17@14/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.189.131, 192.178.50.46, 74.125.139.84, 34.104.35.123, 199.232.214.172, 192.229.211.108, 142.250.217.163, 192.178.50.35, 142.250.217.227, 192.178.50.78
Excluded domains from analysis (whitelisted): clients1.google.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Simulations

Behavior and APIs

⊘No simulations

QR Codes

Source	URL
Screenshot	http://
Screenshot	http://<FNC1>(5)<FNC1>()

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10838)
Category:	downloaded
Size (bytes):	10843
Entropy (8bit):	5.7441828064880225
Encrypted:	false
SSDEEP:	192:2TlH6666Cno8spEwBaQSw5Y4Uq2j0/4H4N6Wcgz8b9tH6666nWylkR0tK0Gc89Sh:6lH6666gHM1aQSwSskZHAFz8b/H6666J
MD5:	6904DF8B59E0CF08F2FD8C27CDFEB060
SHA1:	B42FC278A239ED24E5D961813DF722972E6916F7
SHA-256:	993BA3C8E60BB6725B75E5A06AF18C525AAE35BE3782749103C4757C676F874B
SHA-512:	2EFD1AF95F5898672C6B6BFF4B603689E356489E05F493BC0577914093568D17077B24D8992948556AB0E2BE0F87F18D7DE21C6A75DD0AEEA849C04CE40CC4D8
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
Preview:	)]}'.["",["slack stewart butterfield","nasa artemis space launch system","nasa mars spiders","indianapolis indy eleven","express stores closing list","nicholas chavez general hospital","south carolina cicadas","frank csorba death"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChgIkk4SEwoRVHJlbmRpbmcgc2VhcmNoZXM\u003d","google:suggestdetail":[{"google:entityinfo":"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

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1093x258, components 3
Category:	downloaded
Size (bytes):	36227
Entropy (8bit):	7.6657360938016765
Encrypted:	false
SSDEEP:	768:PWFDcFDcFDcFDcFDcFDcFDcNNNNNoYA1NfNNNNNNewTBIZooCQbMZuSqDc:PWFDcFDcFDcFDcFDcFDcFDcNNNNNol1B
MD5:	7C994C5A9FCB34424FA9370A073EFA4E
SHA1:	05B2166A867EF4A24D1DC1580D04434F8E434EA8
SHA-256:	9ED0B8FAD124D066CA1873FB802DDD168466B7B83906ADB3271146F63E4A1A59
SHA-512:	1DD7B8BF832A79ACB13E0E501C05DBFACA06EAA807DAF706869B0E8665735D89FAE51E625BFB04406335A5BD08C1A5F382B63E4BC5F13405DFF061FCAE679E5E
Malicious:	false
Reputation:	low
URL:	https://lh7-us.googleusercontent.com/drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................E.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	300418
Entropy (8bit):	4.956078815427159
Encrypted:	false
SSDEEP:	1536:S+AR1FUCKg+66SVAxzSme8fIh4pwxjvUzfMHU1uORkhcJCpnCOk9D04vi+XwHq+E:JHpX++zPBVegyQ
MD5:	60A0103AE8D6CE88A68DAACE0E9490F2
SHA1:	26575E0240B10A1DD0EE8DC9A01C243E7DF374C4
SHA-256:	6F8C59A8C5607D48702BE665341A39233A61383BCB76A795BA399D97306DC391
SHA-512:	74B64B7B01DF8A4D23F84E7EC0D65F1365DA9F5F4138526F48749D2A34A211BFAE9404A6208D450249B36D3F560CD26828F164E51AA5E9D0097FCB1A56294591
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/drawings/client/css/4013897977-preview_css_ltr.css
Preview:	.jfk-butterBar{border-radius:2px;box-shadow:0 2px 4px rgba(0,0,0,.2);transition:all 0s linear 1s,opacity 1s;border-style:solid;border-width:0;font-size:11px;height:0;opacity:0;visibility:hidden;overflow:hidden;padding:0;text-align:center}.jfk-butterBar-info{background-color:#f9edbe;border-color:#f0c36d;color:#333}.jfk-butterBar-error{background-color:#484848;border-color:#202020;color:#fff}.jfk-butterBar-promo{background-color:#d6e9f8;border-color:#4d90f0;color:#333}.jfk-butterBar-warning{background-color:#dd4b39;border-color:#602019;color:#fff}.jfk-butterBar-shown{transition:opacity .218s;border-width:1px;min-height:14px;height:auto;opacity:1;visibility:visible;padding:6px 16px}.jfk-butterBar-mini.jfk-butterBar-shown{padding:2px 16px}.docs-butterbar-container{font-weight:500;height:0;position:absolute;text-align:center;top:32px;width:100%;z-index:1004}.docs-hub-butterbar{top:57px}.docs-gm .docs-butterbar-container{font-weight:400}.docs-butterbar-container.docs-butterbar-container-comp

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3027)
Category:	downloaded
Size (bytes):	93577
Entropy (8bit):	5.460281602221212
Encrypted:	false
SSDEEP:	1536:CJmTS5du5i9jRf00sWghx/IgSJngFPN3kBj5wuhEXGPmVBNCffW:C9duaIWyORnyTNOfW
MD5:	CBB9062CD00D5BB48E95426C9E056BE1
SHA1:	61ED2BE5057E4205998344A9C596CBF9823D9E14
SHA-256:	3F1A4505A002690C2AAD38403236FF15B9B37D908CE4994972E81F1320D0E2E6
SHA-512:	23B443079B9161DD02610B67DA59588CD140EA90C2EEF0526F53F7F8A5CB3003949AE97A3AE6540D238CBB9DEE02D99973A42E5CB640359811DE630BF013D515
Malicious:	false
Reputation:	low
URL:	https://docs.google.com/static/drawings/client/js/2099830619-preview_core.js
Preview:	function _F_toggles_initialize(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0./.var aa="Edge",ba="Error in protected function: ",ca="Missing error cause.",da="Not available",ea="SCRIPT",fa="_/wa/",ha="boolean",ia="buildLabel",ja="complete",ka="error",la="fatal",p="function",ma="gssmodulesetproto",na="incident",oa="nonce",q="number",r="object",pa="prerender",qa="severity-unprefixed",u="string",ra="success";function v(){return function(){}}function sa(a){return function(){return this[a]}}function ta(a){return function(){return a}}var w,ua=[];.function va(a){return function(){return ua[a].apply(this,arguments)}}function wa(a){var c=0;return function(){return c<a.length?{done:!1,value:a[c++]}:{done:!0}}}var xa=typeof Object.defineProperties==p?Object.defineProperty:function(a,c,d){if(a=

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.6405445103388026
Encrypted:	false
SSDEEP:	6:a6nvQhIhIhIhIhIhIhIhIhIhIhIhIh6NQhIhIhIhIhIhIhIhIhIhIhIhIhIhIhIL:XvPN5ZNZX5hV
MD5:	45E6383ED6764BCF66BB7CDA685BDEF8
SHA1:	321AE49DC907E998D30E89BFE19B611CFEF2B222
SHA-256:	9FEA566760E23830FB440B59122AFE4636A63E1997DBEAFC60A701BBE213B165
SHA-512:	D1F29A7F13C231AFFD42DACA34E142AE225A50E97D173033F38E977F255B83C78B4AF30969474E59E269310D045DEB2712AA307D4E3301F04496BDD0CAD12B7A
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/drawings/images/favicon5.ico
Preview:	............ .h.......(....... ..... .....@...................7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..P[..........7D......................7D..7D..7D..7D..7D..7D..v...............7D......................7D..7D..7D..7D..7D..7D..................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..........................P[..7D..7D..7D..7D..7D..7D..7D..7D..7D..DP..................v...7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=upper-left], baseline, precision 8, 1093x258, components 3
Category:	dropped
Size (bytes):	36227
Entropy (8bit):	7.6657360938016765
Encrypted:	false
SSDEEP:	768:PWFDcFDcFDcFDcFDcFDcFDcNNNNNoYA1NfNNNNNNewTBIZooCQbMZuSqDc:PWFDcFDcFDcFDcFDcFDcFDcNNNNNol1B
MD5:	7C994C5A9FCB34424FA9370A073EFA4E
SHA1:	05B2166A867EF4A24D1DC1580D04434F8E434EA8
SHA-256:	9ED0B8FAD124D066CA1873FB802DDD168466B7B83906ADB3271146F63E4A1A59
SHA-512:	1DD7B8BF832A79ACB13E0E501C05DBFACA06EAA807DAF706869B0E8665735D89FAE51E625BFB04406335A5BD08C1A5F382B63E4BC5F13405DFF061FCAE679E5E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....."Exif..MM..........................C....................................................................C.........................................................................E.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	21782
Entropy (8bit):	7.918471282697378
Encrypted:	false
SSDEEP:	384:XhnUCFsMqu76XdAHOBOvD+EYOcwIUabDx8/z9jQccaJ7bqD+g:xUCuMDWXdAHVSwcGKPOg
MD5:	8AD60FCC06F7EF85505F6F6FDB8548B7
SHA1:	7C0065220A89C47531DEFE2E4299C43D3A6D1439
SHA-256:	817722B8AF9F683EEBE6851A01E39B085CD661C4816572521364F070A4F5CB0F
SHA-512:	FC9F526902A532742DEB960D3A5ED98F65CC449BB4A0829F2D732B4B4AF5B9F4D8F4E27C2305682C81C5028BD803545F611A8B49D12743161D0BF2F3ED63C20A
Malicious:	false
Reputation:	low
URL:	https://lh7-us.googleusercontent.com/drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs
Preview:	.PNG........IHDR...............6... .IDATx...x[..._F.e..X.....G.]....({g.....Y.,...t...P...e.6P.x;.l..W..8.N..c...=.....st.\..MK.s....W....T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P..x..bI..lIx.....$L.,.4S...x`....B\....;R.@......nub.i......=.)...>k4._..1~.............%-.9{.,....../7;.%...!...As.T..P..O.~$...;p.-.K..6.7Dg....w....e\...K`L.t.xa...h/.!.........T....~../..T..P..`X.....#..F.Y......-@....'..!".....Y..~..#...E.......(`ID.....b=..QY0.....!.x ....P.^....WbZ.Td{.o[.p_/...T..P..j.,..%k..gM._.1.O...a.~.......P...G..."b.N..X:..G...P....T..P....Z..Y........<...`....N.I....%....ZS0....!..."...T.......q.5...........S..4z.L...IG.].e....'...B.aC,.?..P..?....%..4N-.P.........(....$2...q......u{m)..i.?...(...P..$.".0F:p...".e.......\.. g.K.`.^..I.`v.i...2... ....T.........D,4N.+....Wc0...o.. .<...$6....7.`S.......T P.X.Ixr..

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 400, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	21782
Entropy (8bit):	7.918471282697378
Encrypted:	false
SSDEEP:	384:XhnUCFsMqu76XdAHOBOvD+EYOcwIUabDx8/z9jQccaJ7bqD+g:xUCuMDWXdAHVSwcGKPOg
MD5:	8AD60FCC06F7EF85505F6F6FDB8548B7
SHA1:	7C0065220A89C47531DEFE2E4299C43D3A6D1439
SHA-256:	817722B8AF9F683EEBE6851A01E39B085CD661C4816572521364F070A4F5CB0F
SHA-512:	FC9F526902A532742DEB960D3A5ED98F65CC449BB4A0829F2D732B4B4AF5B9F4D8F4E27C2305682C81C5028BD803545F611A8B49D12743161D0BF2F3ED63C20A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............6... .IDATx...x[..._F.e..X.....G.]....({g.....Y.,...t...P...e.6P.x;.l..W..8.N..c...=.....st.\..MK.s....W....T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P.@......T..P..x..bI..lIx.....$L.,.4S...x`....B\....;R.@......nub.i......=.)...>k4._..1~.............%-.9{.,....../7;.%...!...As.T..P..O.~$...;p.-.K..6.7Dg....w....e\...K`L.t.xa...h/.!.........T....~../..T..P..`X.....#..F.Y......-@....'..!".....Y..~..#...E.......(`ID.....b=..QY0.....!.x ....P.^....WbZ.Td{.o[.p_/...T..P..j.,..%k..gM._.1.O...a.~.......P...G..."b.N..X:..G...P....T..P....Z..Y........<...`....N.I....%....ZS0....!..."...T.......q.5...........S..4z.L...IG.].e....'...B.aC,.?..P..?....%..4N-.P.........(....$2...q......u{m)..i.?...(...P..$.".0F:p...".e.......\.. g.K.`.^..I.`v.i...2... ....T.........D,4N.+....Wc0...o.. .<...$6....7.`S.......T P.X.Ixr..

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.6405445103388026
Encrypted:	false
SSDEEP:	6:a6nvQhIhIhIhIhIhIhIhIhIhIhIhIh6NQhIhIhIhIhIhIhIhIhIhIhIhIhIhIhIL:XvPN5ZNZX5hV
MD5:	45E6383ED6764BCF66BB7CDA685BDEF8
SHA1:	321AE49DC907E998D30E89BFE19B611CFEF2B222
SHA-256:	9FEA566760E23830FB440B59122AFE4636A63E1997DBEAFC60A701BBE213B165
SHA-512:	D1F29A7F13C231AFFD42DACA34E142AE225A50E97D173033F38E977F255B83C78B4AF30969474E59E269310D045DEB2712AA307D4E3301F04496BDD0CAD12B7A
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@...................7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D.7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D......................7D..7D..7D..7D..7D..7D..7D..P[..........7D......................7D..7D..7D..7D..7D..7D..v...............7D......................7D..7D..7D..7D..7D..7D..................7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..............................7D..7D..7D..7D..7D..7D..7D..7D..7D..........................P[..7D..7D..7D..7D..7D..7D..7D..7D..7D..DP..................v...7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D..7D

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 15:22:27.625524044 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 15:22:37.271110058 CEST	49675	443	192.168.2.4	173.222.162.32
Apr 26, 2024 15:22:40.829689980 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.829729080 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:40.829782963 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830034971 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830108881 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:40.830168962 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830187082 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:40.830199957 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830358982 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830362082 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830389977 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:40.830501080 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830652952 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830663919 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:40.830847025 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.830882072 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:40.830986977 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.831000090 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:40.831182957 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:40.831196070 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.164800882 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.198002100 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.198043108 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.199537992 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.199615955 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.200545073 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.200711012 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.200738907 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.200798035 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.205113888 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.205198050 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.205281973 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.205534935 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.205569983 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.206129074 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.206211090 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.206291914 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.206480980 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.206533909 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.216485977 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.216677904 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.216696024 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.217705965 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.217767954 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.219350100 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.219453096 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.219465017 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.223280907 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.223449945 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.223459959 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.225908995 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.226278067 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.226291895 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.227693081 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.227754116 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.228225946 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.228399038 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.228516102 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.228523016 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.229778051 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.229856968 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.230184078 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.230247974 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.230290890 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.260145903 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.272120953 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.299290895 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.299293995 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.299299002 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.299320936 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.299325943 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.436152935 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.436259985 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.489521027 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.489938021 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.519205093 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.519294977 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.519340992 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.519362926 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.520118952 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.520186901 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.520203114 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.529581070 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.529633999 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.529647112 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.534765005 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.534990072 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.535048008 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.536187887 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.536250114 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.536524057 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.536598921 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.536858082 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.536875963 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.540363073 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.540415049 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.540421009 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.540535927 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.540577888 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.540690899 CEST	49734	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.540709019 CEST	443	49734	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.577918053 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.599406958 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.599756002 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.599831104 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.600307941 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.601388931 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.601479053 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.765451908 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.888418913 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.888479948 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.888497114 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.888972998 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.889027119 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.889830112 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.889846087 CEST	443	49736	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.889853001 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.889889002 CEST	49736	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.892488956 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.898160934 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.898430109 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.898510933 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.898571968 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.899065971 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.899136066 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.899153948 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.907701969 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.907769918 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.907784939 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.910012007 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.910067081 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.910077095 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.910124063 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.910276890 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.910561085 CEST	49735	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.910571098 CEST	443	49735	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.912523031 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.912561893 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.912573099 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.912590027 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.912667990 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.912753105 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.912769079 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.912846088 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.913441896 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.913451910 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.919472933 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.919533968 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.919548035 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.919637918 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.919682980 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.923295975 CEST	49738	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.923326015 CEST	443	49738	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.936155081 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.969269991 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.969329119 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.969351053 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.969480038 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.969526052 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.970248938 CEST	49733	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.970258951 CEST	443	49733	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.971765041 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.971791983 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:41.971925974 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.972152948 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:41.972165108 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.093256950 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.093390942 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.093550920 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.093622923 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.093667984 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.093729019 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.093750000 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.093884945 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.093938112 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.142868996 CEST	49737	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.142903090 CEST	443	49737	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.244646072 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.246890068 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.246906042 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.248646021 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.261156082 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.261313915 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.261321068 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.261450052 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.299634933 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.308409929 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.308434963 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.308901072 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.364430904 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.364553928 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.364574909 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.392504930 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.408132076 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.501873016 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.573992968 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.574127913 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.574196100 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.574208975 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.576018095 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.576309919 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.629183054 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.629322052 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.629391909 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:42.629410028 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.629617929 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:42.629662991 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.014987946 CEST	49742	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.015017986 CEST	443	49742	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.018215895 CEST	49741	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.018239021 CEST	443	49741	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.318090916 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.318131924 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.318192959 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.322454929 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.322465897 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.714787006 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.715240002 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.715267897 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.716428041 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.717032909 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:44.717206955 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:44.765311956 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:49.771018028 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:49.771048069 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:49.771111965 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:49.772710085 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:49.772725105 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.050899029 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.050971031 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.061516047 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.061532974 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.061904907 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.155622005 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.163496971 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.208156109 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.292695045 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.292768955 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.292889118 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.293832064 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.293854952 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.293870926 CEST	49746	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.293875933 CEST	443	49746	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.343434095 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.343513012 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.343600035 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.345098019 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.345132113 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.599617004 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.599697113 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.601372957 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.601392031 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.601737976 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.604172945 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.637337923 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:50.637391090 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:50.637471914 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:50.638921976 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:50.638933897 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:50.648156881 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.769052029 CEST	49672	443	192.168.2.4	173.222.162.32
Apr 26, 2024 15:22:50.769114971 CEST	443	49672	173.222.162.32	192.168.2.4
Apr 26, 2024 15:22:50.848562002 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.848638058 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.848743916 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.851037025 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.851067066 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:50.851119995 CEST	49747	443	192.168.2.4	23.204.76.112
Apr 26, 2024 15:22:50.851135969 CEST	443	49747	23.204.76.112	192.168.2.4
Apr 26, 2024 15:22:51.174633026 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:51.180130005 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:51.181519985 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:51.184968948 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:51.184981108 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:51.185383081 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:51.389965057 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:51.726486921 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:51.772118092 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552097082 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552134037 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552141905 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552176952 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:52.552202940 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552251101 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552278042 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552309990 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.552326918 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:52.552326918 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:52.552326918 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:52.552326918 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:52.552344084 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:52.741079092 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.741091013 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.741146088 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:52.741161108 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.741187096 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:52.741230011 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:53.865910053 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:53.865910053 CEST	49748	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:22:53.865932941 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:53.865945101 CEST	443	49748	52.165.165.26	192.168.2.4
Apr 26, 2024 15:22:54.700212955 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:54.700368881 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:22:54.700424910 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:55.500878096 CEST	49744	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:22:55.500907898 CEST	443	49744	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:06.762469053 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:06.762501955 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:06.762571096 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:06.762681961 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:06.762748003 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:06.762820005 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:06.762895107 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:06.762908936 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:06.763108015 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:06.763144016 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.125504017 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.128391981 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.128441095 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.130090952 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.130163908 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.134428978 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.139955997 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.139971972 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.141117096 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.141215086 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.141782045 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.141844988 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.141906977 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.141938925 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.146610975 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.146714926 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.187817097 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.187819958 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.187827110 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.233903885 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.575809002 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.575984001 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.576034069 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.603223085 CEST	49755	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:07.603254080 CEST	443	49755	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:07.736074924 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:07.736113071 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:07.736380100 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:07.736814022 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:07.736825943 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.062769890 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.063009024 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.063030958 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.063532114 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.063597918 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.064541101 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.064593077 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.391457081 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.391608953 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.394720078 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.394747019 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.437015057 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.857307911 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.857381105 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.867724895 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.867785931 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.884813070 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.884890079 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.889471054 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.889540911 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.900353909 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.900461912 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.900479078 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.911045074 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.911128998 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.911205053 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.911222935 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.911267996 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.921830893 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:08.975502968 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:08.975522995 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.018481016 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.208779097 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213116884 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213244915 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213310957 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.213325024 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213378906 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.213385105 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213470936 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213587999 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213629961 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.213639021 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213675976 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.213686943 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213862896 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213946104 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.213999033 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.214006901 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214045048 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.214050055 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214167118 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214262009 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214308977 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.214317083 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214355946 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.214361906 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214484930 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214565039 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214608908 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.214617968 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214652061 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.214665890 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214900970 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.214978933 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215028048 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.215038061 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215075016 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.215080976 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215204000 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215300083 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215353966 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.215362072 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215400934 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.215405941 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215533018 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215620995 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215665102 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.215675116 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.215713024 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:09.215718031 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.216008902 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:09.216198921 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.366924047 CEST	49756	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.366959095 CEST	443	49756	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:10.667159081 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.667202950 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:10.667330980 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.668066978 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.668081045 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:10.669214010 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.669251919 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:10.669307947 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.674652100 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:10.674669981 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.064827919 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.064992905 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.065437078 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.065454960 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.065820932 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.065840960 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.065857887 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.066721916 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.066786051 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.067095041 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.067238092 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.067945004 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.068149090 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.068509102 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.108155012 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.112144947 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.524033070 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.524178028 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.524230957 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.524247885 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.524324894 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.524374008 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.524379015 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.535659075 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.535706043 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.535738945 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.535748005 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.535764933 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.535804033 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.535814047 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.536830902 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.536880016 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.536886930 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.548738003 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.548795938 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.548804998 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.549994946 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.550044060 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.550050020 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.561917067 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.561960936 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.561970949 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.563225031 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.563273907 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.563281059 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.575122118 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.575170994 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.575179100 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.576379061 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.576426029 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.576431990 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.588390112 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.588434935 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.588443041 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.589673996 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.589720964 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.589726925 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.601686001 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.601730108 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.601738930 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.708626032 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.708704948 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.708714008 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.715311050 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.715445995 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.715451956 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.722798109 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.722863913 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.722893953 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.722906113 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.722999096 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.728456974 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.728538990 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.728569984 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.728578091 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.728869915 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.729533911 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.741657972 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.742602110 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.742774010 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.742794991 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.742810011 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.742925882 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.754873991 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.754944086 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.754952908 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.755806923 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.768184900 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.768327951 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.768435955 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.768441916 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.768533945 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.769082069 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.769113064 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.769269943 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.769284010 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.769565105 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.781358957 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.782290936 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.794575930 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.794656992 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.794780970 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.794786930 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.794852972 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.795999050 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.796029091 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.796159029 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.796170950 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.796261072 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.807219028 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.808691025 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.818927050 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.819006920 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.819036961 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.819046021 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.821919918 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.821929932 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.821944952 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.821971893 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.821984053 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.824338913 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.830794096 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.834547997 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.842251062 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.842322111 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.842351913 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.842359066 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.842560053 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.842564106 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.846371889 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.846401930 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.846483946 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.846493959 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.846667051 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.854057074 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.854204893 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.854211092 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.857908964 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.865823984 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.865967035 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.865972996 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.870528936 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.870582104 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.870673895 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.870685101 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.870960951 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.880153894 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.880361080 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.880367041 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.883764029 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.892818928 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.893064976 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.893071890 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.913615942 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.913641930 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.914027929 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.914038897 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.914196968 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.922370911 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.922544003 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.922550917 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.925808907 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.931653023 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.931941986 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.931947947 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.934794903 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.934819937 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.934945107 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.934956074 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.935035944 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.935065985 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.935141087 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.935146093 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.935165882 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.935919046 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.936144114 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.936148882 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.938685894 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.938731909 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.938759089 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.938774109 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.939287901 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.939296961 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.940200090 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.942291975 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.942297935 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.943392992 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.945595026 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.945677042 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.945678949 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.945682049 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.945687056 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.950838089 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.950962067 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.950972080 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.957545996 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.957583904 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.957600117 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.957657099 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.957658052 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.957664013 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.957665920 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.957935095 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.966052055 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.969407082 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.969432116 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.969553947 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.969567060 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.969650984 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.971167088 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.971266985 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.971363068 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.971369028 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.971600056 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.973987103 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.981525898 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.984601021 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.984631062 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.984764099 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.984787941 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.984963894 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.987063885 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.987174034 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.987472057 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.987482071 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.987674952 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.989629984 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.994611979 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.996572971 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.996604919 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.996881008 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:11.996895075 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:11.997364998 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.002322912 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.002402067 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.002432108 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.002439022 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.002479076 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.004093885 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.010315895 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.010643005 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.011285067 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.011647940 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.011682987 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.011754036 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.011764050 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.011872053 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.012118101 CEST	49757	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.012132883 CEST	443	49757	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.019525051 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.026709080 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.026730061 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.026949883 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.026963949 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.027226925 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.034282923 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.041778088 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.041809082 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.041929007 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.041939974 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.042114019 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.049318075 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.056715012 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.056858063 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.056866884 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.060616016 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.061362028 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.061368942 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.067769051 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.068062067 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.068070889 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.074909925 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.075061083 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.075069904 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.081728935 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.082766056 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.082777977 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.088752985 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.089150906 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.089164019 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.095324993 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.098202944 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.098215103 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.102173090 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.102276087 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.102291107 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.108824968 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.110327959 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.110340118 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.115616083 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.115731955 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.115741014 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.123131037 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.123455048 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.123462915 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.129333019 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.129605055 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.129615068 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.145382881 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.145675898 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.145687103 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.158792019 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.158826113 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.158998966 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.159013987 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.159110069 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.164472103 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.280345917 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.280354977 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.361738920 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.361794949 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.361833096 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.361844063 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.361881971 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.361922026 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.361937046 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.361979008 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362014055 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362029076 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362085104 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362121105 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362121105 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362138033 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362170935 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362202883 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362243891 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362283945 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362292051 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362317085 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362353086 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362355947 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362369061 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362396002 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362437963 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362503052 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362530947 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362538099 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362572908 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362600088 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362607002 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362648010 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362672091 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362680912 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362726927 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362759113 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362766027 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362804890 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362828970 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362838030 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362879992 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362907887 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.362915993 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.362976074 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363003969 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363018036 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363065958 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363092899 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363106012 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363151073 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363171101 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363179922 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363223076 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363267899 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363295078 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363302946 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363349915 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363354921 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363365889 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363389015 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363444090 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363490105 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363514900 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363522053 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363595009 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363612890 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363620996 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363668919 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363708973 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363734961 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363743067 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363789082 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363821030 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363827944 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363871098 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363898039 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363907099 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363938093 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.363948107 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.363991976 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364033937 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364061117 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364070892 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364115000 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364125013 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364204884 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364231110 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364238977 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364280939 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364306927 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364314079 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364353895 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364388943 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364397049 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364463091 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364469051 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364478111 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364556074 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364584923 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364593983 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364636898 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364675045 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364722013 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364722967 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364732027 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364767075 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364809036 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364846945 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364862919 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364871025 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364895105 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.364919901 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364963055 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.364989996 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365005016 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365046978 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365076065 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365083933 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365123987 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365149021 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365155935 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365202904 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365227938 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365243912 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365303040 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365329981 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365338087 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365402937 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365432024 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365438938 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365494967 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365524054 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365531921 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365573883 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365602016 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365609884 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365644932 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365677118 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365684032 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365730047 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365756989 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365765095 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365828037 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365859032 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.365865946 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365909100 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.365952015 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366000891 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366029978 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366044044 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366080046 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366108894 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366117001 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366158962 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366167068 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366177082 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366240978 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366286039 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366321087 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366328001 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366372108 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366430998 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366463900 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366475105 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366486073 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366527081 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366532087 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366532087 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366569996 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366607904 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366616964 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366672039 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366715908 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366759062 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366791010 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366797924 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366816998 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366838932 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366888046 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366903067 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366910934 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.366933107 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.366959095 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.367002010 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.367003918 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.367017031 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.367032051 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.367058992 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.367068052 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.367233038 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.367345095 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.369961023 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.369961023 CEST	49758	443	192.168.2.4	172.217.2.206
Apr 26, 2024 15:23:12.369983912 CEST	443	49758	172.217.2.206	192.168.2.4
Apr 26, 2024 15:23:12.695085049 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:12.695148945 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:12.695202112 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:12.695213079 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:12.695244074 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:12.695292950 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:12.695559978 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:12.695576906 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:12.696516991 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:12.696530104 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:13.066332102 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:13.084187984 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:13.106375933 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:13.186259985 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.047933102 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.047966957 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.048073053 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.048108101 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.048446894 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.048460960 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.048501968 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.049067020 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.049114943 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.049124002 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.049160004 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.049665928 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.049731970 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.052212954 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.052272081 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.052278042 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.102154970 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.526691914 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.526829004 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.527051926 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.527365923 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.527378082 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.527388096 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.527554035 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.527565956 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.572969913 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.621629000 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.980206966 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.983510017 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.983593941 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.983616114 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.989223003 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:14.989295006 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:14.989324093 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.004244089 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.004303932 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.004313946 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.018270016 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021361113 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021361113 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021425009 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021454096 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.021460056 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.021462917 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021488905 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021513939 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.021521091 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021626949 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.021671057 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.021680117 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.032340050 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.032407999 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.032414913 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.036238909 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.036308050 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.036318064 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.053224087 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.053277969 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.053298950 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.053308964 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.053337097 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.053344965 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.053873062 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.053935051 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.053941965 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.060637951 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.060693026 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.060702085 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.069972038 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.070039988 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.070046902 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.070277929 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.070353031 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.073679924 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.073746920 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.073754072 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.086726904 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.086841106 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.086852074 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.099816084 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.099879026 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.099888086 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.135013103 CEST	49761	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.135050058 CEST	443	49761	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.202349901 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.202392101 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.202409983 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.202425957 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.202477932 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.208731890 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.221746922 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.221792936 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.221803904 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.221812963 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.221849918 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.234797001 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.247872114 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.247924089 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.247955084 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.247967958 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.248009920 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.260889053 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.273899078 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.273958921 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.273972988 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.274007082 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.274056911 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.300638914 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.300681114 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.300733089 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.301495075 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.301508904 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.302752018 CEST	49760	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:15.302778959 CEST	443	49760	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:15.358145952 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.358222008 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.358298063 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.358510017 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.358561993 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.685118914 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.685450077 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.685477972 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.686212063 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.686291933 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.687222958 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.687283993 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.687290907 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.687633038 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.687755108 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.687787056 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.694318056 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.694550991 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.694561005 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.695750952 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.695821047 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.698257923 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.698321104 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.698327065 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.698869944 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.698946953 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.698966026 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.728142977 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.740173101 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.811731100 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.811752081 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.871262074 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:15.871270895 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:15.983625889 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.005579948 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.005670071 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.005722046 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.010937929 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.011010885 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.011032104 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.021886110 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.021954060 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.021984100 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.032536983 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.032602072 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.032618046 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.043431044 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.043507099 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.043521881 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.054126978 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.054229975 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.054244995 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.064826965 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.064902067 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.064918041 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.068591118 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.075630903 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.075685978 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.075701952 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.075973988 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.076025009 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.076039076 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.082524061 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.082568884 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.082575083 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.091778040 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.091845036 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.091861010 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.091881990 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.091937065 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.092176914 CEST	49763	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.092206001 CEST	443	49763	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.095606089 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.095928907 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.095936060 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.108556986 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.108613014 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.108619928 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.121512890 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.121563911 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.121570110 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.134505987 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.134625912 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.134633064 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.147444963 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.147499084 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.147506952 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.160468102 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.160532951 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.160538912 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.253433943 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.253500938 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.253509045 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.259841919 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.259917021 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.259994984 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.260004044 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.262216091 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.273013115 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.285844088 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.285897017 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.285906076 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.298842907 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.298890114 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.298896074 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.311619997 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.311669111 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.311675072 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.324707985 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.324757099 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.324762106 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.324955940 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:16.325020075 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.325361967 CEST	49762	443	192.168.2.4	142.250.64.193
Apr 26, 2024 15:23:16.325375080 CEST	443	49762	142.250.64.193	192.168.2.4
Apr 26, 2024 15:23:18.267220020 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:18.267256975 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:18.267420053 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:18.327131033 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:18.327150106 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:18.716656923 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:18.716753960 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:18.717745066 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:18.717792034 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:18.717803955 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:18.741820097 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:18.741827965 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:18.742216110 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:18.822767973 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:18.868124962 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.095293999 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.103035927 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.103080034 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.103115082 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.107956886 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.108016968 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.108023882 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.120879889 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.120927095 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.120933056 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.133843899 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.133897066 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.133903027 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.145414114 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.145469904 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.145474911 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.159764051 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.159811020 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.159817934 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.173250914 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.173309088 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.173316002 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.187766075 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.187822104 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.187830925 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.228668928 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.228674889 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.298455954 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.298516035 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.298523903 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.304733992 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.304789066 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.304795980 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.350645065 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.533051968 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533241034 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533283949 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.533299923 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533410072 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533459902 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.533464909 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533551931 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533593893 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.533598900 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533801079 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533852100 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.533857107 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.533977032 CEST	443	49771	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.534029961 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.555085897 CEST	49771	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.584359884 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.584439993 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.584538937 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.584721088 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.584748983 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.979573965 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:19.981216908 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:19.981271029 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.356235027 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.365895033 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.367744923 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.367765903 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.383025885 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.383102894 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.383105993 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.383131027 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.383176088 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.390177965 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.402806044 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.402863026 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.402877092 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.412739992 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.412810087 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.412889004 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.412899971 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.412945032 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.425755978 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.438747883 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.438796997 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.438811064 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.451540947 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.451611042 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.451617956 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.451644897 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.451692104 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.466557026 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.466744900 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.466923952 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.466944933 CEST	443	49772	142.250.217.225	192.168.2.4
Apr 26, 2024 15:23:20.466957092 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:20.466988087 CEST	49772	443	192.168.2.4	142.250.217.225
Apr 26, 2024 15:23:30.964761019 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:30.964801073 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:30.964875937 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:30.965303898 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:30.965322018 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.491190910 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.491274118 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.493319035 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.493330956 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.493822098 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.502749920 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.544122934 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.998689890 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.998747110 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.998788118 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.998816013 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.998858929 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.998882055 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.998912096 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.999002934 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.999064922 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.999084949 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.999097109 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.999212980 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:31.999223948 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.999244928 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:31.999294996 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:32.001439095 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:32.001471996 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:32.001491070 CEST	49773	443	192.168.2.4	52.165.165.26
Apr 26, 2024 15:23:32.001499891 CEST	443	49773	52.165.165.26	192.168.2.4
Apr 26, 2024 15:23:44.375544071 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:44.375586987 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:44.375865936 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:44.375865936 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:44.375904083 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:44.484324932 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 26, 2024 15:23:44.484328985 CEST	49724	80	192.168.2.4	23.45.182.91
Apr 26, 2024 15:23:44.609076023 CEST	80	49724	23.45.182.91	192.168.2.4
Apr 26, 2024 15:23:44.609210968 CEST	49724	80	192.168.2.4	23.45.182.91
Apr 26, 2024 15:23:44.615554094 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 26, 2024 15:23:44.615572929 CEST	80	49723	199.232.210.172	192.168.2.4
Apr 26, 2024 15:23:44.615660906 CEST	49723	80	192.168.2.4	199.232.210.172
Apr 26, 2024 15:23:44.778336048 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:44.778671980 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:44.778696060 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:44.779160023 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:44.779498100 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:44.779592991 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:44.827487946 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:52.187062979 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:23:52.187078953 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:23:54.758965969 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:54.759119034 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:23:54.759201050 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:55.741969109 CEST	49775	443	192.168.2.4	142.250.64.196
Apr 26, 2024 15:23:55.742023945 CEST	443	49775	142.250.64.196	192.168.2.4
Apr 26, 2024 15:24:07.489943981 CEST	49754	443	192.168.2.4	173.194.210.189
Apr 26, 2024 15:24:07.490120888 CEST	443	49754	173.194.210.189	192.168.2.4
Apr 26, 2024 15:24:07.490180969 CEST	49754	443	192.168.2.4	173.194.210.189

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 15:22:39.814513922 CEST	53	60537	1.1.1.1	192.168.2.4
Apr 26, 2024 15:22:39.854787111 CEST	53	64004	1.1.1.1	192.168.2.4
Apr 26, 2024 15:22:40.659657955 CEST	55812	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:22:40.660582066 CEST	56836	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:22:40.808469057 CEST	53	56836	1.1.1.1	192.168.2.4
Apr 26, 2024 15:22:40.808494091 CEST	53	55812	1.1.1.1	192.168.2.4
Apr 26, 2024 15:22:41.013958931 CEST	53	56861	1.1.1.1	192.168.2.4
Apr 26, 2024 15:22:56.053178072 CEST	138	138	192.168.2.4	192.168.2.255
Apr 26, 2024 15:22:58.908734083 CEST	53	55938	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:06.557280064 CEST	58796	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:06.557616949 CEST	59809	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:06.736227036 CEST	53	59809	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:06.736246109 CEST	53	58796	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:07.608475924 CEST	52796	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:07.609250069 CEST	63889	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:07.734846115 CEST	53	52796	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:07.734927893 CEST	53	63889	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:12.551387072 CEST	50983	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:12.551388025 CEST	63049	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:12.678667068 CEST	53	50983	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:12.678738117 CEST	53	63049	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:12.681566954 CEST	53	54862	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:15.167964935 CEST	60805	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:15.168275118 CEST	62337	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:15.292912960 CEST	53	62337	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:15.293052912 CEST	53	60805	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:15.461193085 CEST	53	57790	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:16.432521105 CEST	53	58106	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:18.135263920 CEST	58508	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:18.261852980 CEST	53	58508	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:18.394268990 CEST	53	52619	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:33.361047029 CEST	49464	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:33.486183882 CEST	53	49464	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:39.701709986 CEST	53	60488	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:41.211596012 CEST	53	63229	1.1.1.1	192.168.2.4
Apr 26, 2024 15:23:52.750564098 CEST	49609	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:23:52.876458883 CEST	53	49609	1.1.1.1	192.168.2.4
Apr 26, 2024 15:24:08.065613985 CEST	53	56198	1.1.1.1	192.168.2.4
Apr 26, 2024 15:24:23.016042948 CEST	56987	53	192.168.2.4	1.1.1.1
Apr 26, 2024 15:24:23.142127037 CEST	53	56987	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Apr 26, 2024 15:22:40.659657955 CEST	192.168.2.4	1.1.1.1	0x55fe	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:22:40.660582066 CEST	192.168.2.4	1.1.1.1	0x33fd	Standard query (0)	www.google.com	65	IN (0x0001)	false
Apr 26, 2024 15:23:06.557280064 CEST	192.168.2.4	1.1.1.1	0x420	Standard query (0)	6125106173.docs.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:06.557616949 CEST	192.168.2.4	1.1.1.1	0xd37b	Standard query (0)	6125106173.docs.google.com	65	IN (0x0001)	false
Apr 26, 2024 15:23:07.608475924 CEST	192.168.2.4	1.1.1.1	0x27ce	Standard query (0)	docs.google.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:07.609250069 CEST	192.168.2.4	1.1.1.1	0x2edb	Standard query (0)	docs.google.com	65	IN (0x0001)	false
Apr 26, 2024 15:23:12.551387072 CEST	192.168.2.4	1.1.1.1	0x4a40	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:12.551388025 CEST	192.168.2.4	1.1.1.1	0xe89	Standard query (0)	lh7-us.googleusercontent.com	65	IN (0x0001)	false
Apr 26, 2024 15:23:15.167964935 CEST	192.168.2.4	1.1.1.1	0x4e15	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:15.168275118 CEST	192.168.2.4	1.1.1.1	0x5626	Standard query (0)	lh7-us.googleusercontent.com	65	IN (0x0001)	false
Apr 26, 2024 15:23:18.135263920 CEST	192.168.2.4	1.1.1.1	0x4bdd	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:33.361047029 CEST	192.168.2.4	1.1.1.1	0x8950	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:52.750564098 CEST	192.168.2.4	1.1.1.1	0xf253	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:24:23.016042948 CEST	192.168.2.4	1.1.1.1	0x23bb	Standard query (0)	lh7-us.googleusercontent.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 26, 2024 15:22:40.808469057 CEST	1.1.1.1	192.168.2.4	0x33fd	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 26, 2024 15:22:40.808494091 CEST	1.1.1.1	192.168.2.4	0x55fe	No error (0)	www.google.com		142.250.64.196	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:06.736227036 CEST	1.1.1.1	192.168.2.4	0xd37b	No error (0)	6125106173.docs.google.com	browserchannel-sites.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:06.736246109 CEST	1.1.1.1	192.168.2.4	0x420	No error (0)	6125106173.docs.google.com	browserchannel-sites.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:06.736246109 CEST	1.1.1.1	192.168.2.4	0x420	No error (0)	browserchannel-sites.l.google.com		173.194.210.189	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:07.734846115 CEST	1.1.1.1	192.168.2.4	0x27ce	No error (0)	docs.google.com		172.217.2.206	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:12.678667068 CEST	1.1.1.1	192.168.2.4	0x4a40	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:12.678667068 CEST	1.1.1.1	192.168.2.4	0x4a40	No error (0)	googlehosted.l.googleusercontent.com		142.250.217.225	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:12.678738117 CEST	1.1.1.1	192.168.2.4	0xe89	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:15.292912960 CEST	1.1.1.1	192.168.2.4	0x5626	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:15.293052912 CEST	1.1.1.1	192.168.2.4	0x4e15	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:15.293052912 CEST	1.1.1.1	192.168.2.4	0x4e15	No error (0)	googlehosted.l.googleusercontent.com		142.250.64.193	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:18.261852980 CEST	1.1.1.1	192.168.2.4	0x4bdd	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:18.261852980 CEST	1.1.1.1	192.168.2.4	0x4bdd	No error (0)	googlehosted.l.googleusercontent.com		142.250.217.225	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:33.486183882 CEST	1.1.1.1	192.168.2.4	0x8950	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:33.486183882 CEST	1.1.1.1	192.168.2.4	0x8950	No error (0)	googlehosted.l.googleusercontent.com		142.250.217.225	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:23:52.876458883 CEST	1.1.1.1	192.168.2.4	0xf253	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:23:52.876458883 CEST	1.1.1.1	192.168.2.4	0xf253	No error (0)	googlehosted.l.googleusercontent.com		142.250.217.225	A (IP address)	IN (0x0001)	false
Apr 26, 2024 15:24:23.142127037 CEST	1.1.1.1	192.168.2.4	0x23bb	No error (0)	lh7-us.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 26, 2024 15:24:23.142127037 CEST	1.1.1.1	192.168.2.4	0x23bb	No error (0)	googlehosted.l.googleusercontent.com		172.217.165.193	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.google.com

fs.microsoft.com

slscr.update.microsoft.com

6125106173.docs.google.com

docs.google.com

https:

lh7-us.googleusercontent.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49734	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:41 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:22:41 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 13:22:41 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-psw1bQexSIYs-2c68t1Gzg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 31 63 38 37 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 6c 61 63 6b 20 73 74 65 77 61 72 74 20 62 75 74 74 65 72 66 69 65 6c 64 22 2c 22 6e 61 73 61 20 61 72 74 65 6d 69 73 20 73 70 61 63 65 20 6c 61 75 6e 63 68 20 73 79 73 74 65 6d 22 2c 22 6e 61 73 61 20 6d 61 72 73 20 73 70 69 64 65 72 73 22 2c 22 69 6e 64 69 61 6e 61 70 6f 6c 69 73 20 69 6e 64 79 20 65 6c 65 76 65 6e 22 2c 22 65 78 70 72 65 73 73 20 73 74 6f 72 65 73 20 63 6c 6f 73 69 6e 67 20 6c 69 73 74 22 2c 22 6e 69 63 68 6f 6c 61 73 20 63 68 61 76 65 7a 20 67 65 6e 65 72 61 6c 20 68 6f 73 70 69 74 61 6c 22 2c 22 73 6f 75 74 68 20 63 61 72 6f 6c 69 6e 61 20 63 69 63 61 64 61 73 22 2c 22 66 72 61 6e 6b 20 63 73 6f 72 62 61 20 64 65 61 74 68 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 Data Ascii: 1c87)]}'["",["slack stewart butterfield","nasa artemis space launch system","nasa mars spiders","indianapolis indy eleven","express stores closing list","nicholas chavez general hospital","south carolina cicadas","frank csorba death"],["","","","","","
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 53 56 7a 56 73 55 30 31 71 53 48 4a 55 64 54 45 78 55 31 4e 50 4d 57 31 31 57 46 5a 47 61 6d 78 72 51 33 64 53 62 6b 39 6a 63 47 74 72 62 6a 5a 73 55 6a 59 35 4d 55 45 7a 54 58 42 75 56 30 70 55 52 32 6c 79 52 55 31 4a 52 69 74 75 4d 6b 45 35 53 7a 42 30 55 6e 4a 57 56 6e 59 78 59 57 67 30 61 6e 4d 72 65 6b 70 61 64 44 49 30 52 56 52 4a 55 30 4e 44 63 6d 4a 58 53 45 56 46 5a 45 52 57 63 57 5a 56 53 55 77 72 65 47 68 4f 4e 33 41 34 56 45 74 36 62 55 39 48 4e 47 4e 75 5a 55 64 52 52 45 39 59 51 6b 4a 51 65 45 6c 55 4e 57 35 33 51 58 46 7a 54 55 35 34 54 43 73 7a 51 6b 6b 7a 52 45 39 52 61 44 56 57 54 45 70 78 56 6e 68 68 55 58 5a 61 65 45 68 68 63 47 74 46 61 48 6c 32 52 6b 68 42 4d 6d 35 75 65 54 5a 6c 62 46 6c 55 62 32 4e 43 64 57 39 73 57 45 74 33 4d 6b Data Ascii: SVzVsU01qSHJUdTExU1NPMW11WFZGamxrQ3dSbk9jcGtrbjZsUjY5MUEzTXBuV0pUR2lyRU1JRituMkE5SzB0UnJWVnYxYWg0anMrekpadDI0RVRJU0NDcmJXSEVFZERWcWZVSUwreGhON3A4VEt6bU9HNGNuZUdRRE9YQkJQeElUNW53QXFzTU54TCszQkkzRE9RaDVWTEpxVnhhUXZaeEhhcGtFaHl2RkhBMm5ueTZlbFlUb2NCdW9sWEt3Mk
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 78 55 46 55 76 61 57 70 61 52 30 4a 42 51 6e 56 79 52 33 6b 79 4c 30 68 70 4e 31 46 30 63 6d 77 79 51 55 46 42 62 45 39 47 55 6b 78 69 57 6c 46 33 55 6a 4a 61 5a 57 67 33 56 32 35 42 51 55 52 53 54 46 52 6e 64 31 56 75 62 7a 64 55 52 32 4a 75 4d 6b 35 79 61 48 59 34 54 48 46 77 59 57 70 6c 5a 47 35 32 55 31 6b 79 62 56 64 55 62 47 31 55 55 55 56 35 55 45 30 77 53 46 56 52 61 33 5a 61 56 55 5a 70 64 56 6c 74 63 58 52 6b 4d 7a 59 33 61 6b 70 4d 4e 44 4e 6b 4e 6e 70 53 62 45 49 34 51 55 4a 44 5a 6b 46 43 65 56 52 45 51 32 49 79 64 44 64 74 4c 31 46 56 63 33 6c 61 53 6b 6c 6b 55 55 64 68 59 33 52 6a 62 47 4e 68 4e 45 63 34 63 6a 64 4e 54 45 31 57 5a 6b 64 75 4e 6c 4e 31 51 55 4a 78 4d 30 46 42 51 31 52 42 51 54 56 6d 5a 55 70 55 55 6e 63 34 53 6a 46 70 53 6c Data Ascii: xUFUvaWpaR0JBQnVyR3kyL0hpN1F0cmwyQUFBbE9GUkxiWlF3UjJaZWg3V25BQURSTFRnd1VubzdUR2JuMk5yaHY4THFwYWplZG52U1kybVdUbG1UUUV5UE0wSFVRa3ZaVUZpdVltcXRkMzY3akpMNDNkNnpSbEI4QUJDZkFCeVREQ2IydDdtL1FVc3laSklkUUdhY3RjbGNhNEc4cjdNTE1WZkduNlN1QUJxM0FBQ1RBQTVmZUpUUnc4SjFpSl
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 35 33 4d 6d 4e 43 56 56 64 70 59 55 70 70 5a 32 74 48 61 54 46 4c 4d 53 39 32 54 7a 56 49 64 56 5a 71 4f 44 4e 68 53 56 4a 6d 4d 6a 6c 69 62 56 6c 71 4f 56 4e 49 4e 43 74 71 4c 32 63 35 61 6a 51 34 57 6a 52 4c 55 57 51 72 53 44 6c 51 61 54 42 69 4b 30 4d 34 4e 31 56 42 4e 6c 4d 34 63 58 4a 4e 62 47 64 58 62 6e 70 44 57 48 49 77 4d 6b 5a 68 52 69 39 75 61 32 56 57 53 45 74 33 51 6d 6c 7a 5a 48 46 4f 64 45 4e 34 53 55 68 35 65 6c 49 76 61 6d 4a 33 4d 33 46 36 52 6e 42 68 61 31 46 6e 55 31 67 72 4f 47 52 53 4c 31 52 5a 51 55 35 68 53 43 39 46 4f 56 46 35 4e 44 5a 49 52 33 64 7a 54 6c 6c 49 64 33 4a 59 4b 30 39 69 4d 6e 46 43 4c 7a 42 6b 4c 32 70 50 56 53 74 32 5a 54 6b 33 63 58 45 7a 62 57 6f 7a 62 30 68 44 61 48 51 7a 4e 6b 4e 45 61 46 41 30 4b 32 46 45 61 Data Ascii: 53MmNCVVdpYUppZ2tHaTFLMS92TzVIdVZqODNhSVJmMjlibVlqOVNINCtqL2c5ajQ4WjRLUWQrSDlQaTBiK0M4N1VBNlM4cXJNbGdXbnpDWHIwMkZhRi9ua2VWSEt3QmlzZHFOdEN4SUh5elIvamJ3M3F6RnBha1FnU1grOGRSL1RZQU5hSC9FOVF5NDZIR3dzTllId3JYK09iMnFCLzBkL2pPVSt2ZTk3cXEzbWozb0hDaHQzNkNEaFA0K2FEa
2024-04-26 13:22:41 UTC	499	IN	Data Raw: 57 46 75 59 58 42 76 62 47 6c 7a 49 47 6c 75 5a 48 6b 67 5a 57 78 6c 64 6d 56 75 53 67 63 6a 59 54 4d 78 59 6a 49 34 55 6b 56 6e 63 31 39 7a 63 33 41 39 5a 55 70 36 61 6a 52 30 54 46 41 78 56 47 4e 76 63 55 52 52 63 30 74 36 57 54 4a 5a 55 46 4e 54 65 55 31 34 54 48 6c 56 65 6b 31 54 65 58 70 4a 65 6a 68 72 63 31 5a 6e 51 6e 6c 4c 61 46 5a 54 59 7a 46 4d 54 46 56 32 54 55 45 34 4d 6e 4e 4f 55 6e 64 77 42 77 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 Data Ascii: WFuYXBvbGlzIGluZHkgZWxldmVuSgcjYTMxYjI4UkVnc19zc3A9ZUp6ajR0TFAxVGNvcURRc0t6WTJZUFNTeU14THlVek1TeXpJejhrc1ZnQnlLaFZTYzFMTFV2TUE4MnNOUndwBw\u003d\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggestrelevance":[1257,1256,12
2024-04-26 13:22:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49736	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:41 UTC	510	OUT	GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:22:41 UTC	1843	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGKHVrrEGIjCGTIFNgwCqg6KBz5rBbLFCyjWo_wrNhn_m27xtdwcxgTfsjn6kArLmSGZDuCewgJQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIodWusQYQ_IKq8AISBGaBmNw Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 13:22:41 GMT Server: gws Content-Length: 458 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-13; expires=Sun, 26-May-2024 13:22:41 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=Ws_e_nPexgfWAEfZbob3hrKGg3KYFME7eNdM-xfXzPQYJXs631GXMmHGczvDE67LJo-xVXwx8CMCLG965WWcGpFRNCn6Hjo6fIPF5GKPSE0Tf4qOS0fmxxy4z_BAcv_kvBMLhR-q-Rh__FepvOm68kV5N9yQRabxOD4msc1vAEQ; expires=Sat, 26-Oct-2024 13:22:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:22:41 UTC	458	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 25 33 46 68 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fh

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49733	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:41 UTC	353	OUT	GET /async/ddljson?async=ntp:2 HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:22:41 UTC	1816	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRmgZjcGKHVrrEGIjAM6pg0sk4j-FMPZ_hJZJKTKDM0SVUw_6TyPx8OtG0dA6bxJcOs3Tnu_R8uc-avnL0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIodWusQYQhOP1mgMSBGaBmNw Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 13:22:41 GMT Server: gws Content-Length: 427 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-13; expires=Sun, 26-May-2024 13:22:41 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ; expires=Sat, 26-Oct-2024 13:22:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:22:41 UTC	427	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 25 33 46 61 73 79 6e Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/ddljson%3Fasyn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49735	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:41 UTC	353	OUT	GET /async/newtab_promos HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:22:41 UTC	1761	IN	HTTP/1.1 302 Found Location: https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGKHVrrEGIjCAwqd5aHTOlyUE6jH5e1xF0ingjmOr7JoUxUSGQTlQ_ULyex8YCxJ6Uqj_J6tA-uMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM x-hallmonitor-challenge: CgwIodWusQYQuJPN-gISBGaBmNw Content-Type: text/html; charset=UTF-8 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 26 Apr 2024 13:22:41 GMT Server: gws Content-Length: 417 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: 1P_JAR=2024-04-26-13; expires=Sun, 26-May-2024 13:22:41 GMT; path=/; domain=.google.com; Secure; SameSite=none Set-Cookie: NID=513=J8wI918jBuekBOhaX-d_kvPVQRcHa-wmBbUOae9IYz8kZsYDXxABP7oKFgAbeAIkVmjS9ME9mO0tiLg9tuXX_wemhEQIRILKrelluDp3BZ7YF2opnWNCUx2jnOls0Af1q4t3-kGQ5Dp9D8qh83yClTVpEpVKC8VtsUNo0rq-AVU; expires=Sat, 26-Oct-2024 13:22:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:22:41 UTC	417	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 6f 72 72 79 2f 69 6e 64 65 78 3f 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 26 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.com/sorry/index?continue=https://www.google.com/async/newtab_promos&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49738	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:41 UTC	607	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:22:41 UTC	1703	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 13:22:41 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-SsScVttLC0oTMXbAMpvwEA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Origin-Trial: Ap+qNlnLzJDKSmEHjzM5ilaa908GuehlLqGb6ezME5lkhelj20qVzfv06zPmQ3LodoeujZuphAolrnhnPA8w4AIAAABfeyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJQZXJtaXNzaW9uc1BvbGljeVVubG9hZCIsImV4cGlyeSI6MTY4NTY2Mzk5OX0= Origin-Trial: AvudrjMZqL7335p1KLV2lHo1kxdMeIN0dUI15d0CPz9dovVLCcXk8OAqjho1DX4s6NbHbA/AGobuGvcZv0drGgQAAAB9eyJvcmlnaW4iOiJodHRwczovL3d3dy5nb29nbGUuY29tOjQ0MyIsImZlYXR1cmUiOiJCYWNrRm9yd2FyZENhY2hlTm90UmVzdG9yZWRSZWFzb25zIiwiZXhwaXJ5IjoxNjkxNTM5MTk5LCJpc1N1YmRvbWFpbiI6dHJ1ZX0= Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 32 61 35 62 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 6c 61 63 6b 20 73 74 65 77 61 72 74 20 62 75 74 74 65 72 66 69 65 6c 64 22 2c 22 6e 61 73 61 20 61 72 74 65 6d 69 73 20 73 70 61 63 65 20 6c 61 75 6e 63 68 20 73 79 73 74 65 6d 22 2c 22 6e 61 73 61 20 6d 61 72 73 20 73 70 69 64 65 72 73 22 2c 22 69 6e 64 69 61 6e 61 70 6f 6c 69 73 20 69 6e 64 79 20 65 6c 65 76 65 6e 22 2c 22 65 78 70 72 65 73 73 20 73 74 6f 72 65 73 20 63 6c 6f 73 69 6e 67 20 6c 69 73 74 22 2c 22 6e 69 63 68 6f 6c 61 73 20 63 68 61 76 65 7a 20 67 65 6e 65 72 61 6c 20 68 6f 73 70 69 74 61 6c 22 2c 22 73 6f 75 74 68 20 63 61 72 6f 6c 69 6e 61 20 63 69 63 61 64 61 73 22 2c 22 66 72 61 6e 6b 20 63 73 6f 72 62 61 20 64 65 61 74 68 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 Data Ascii: 2a5b)]}'["",["slack stewart butterfield","nasa artemis space launch system","nasa mars spiders","indianapolis indy eleven","express stores closing list","nicholas chavez general hospital","south carolina cicadas","frank csorba death"],["","","","","","
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 53 56 7a 56 73 55 30 31 71 53 48 4a 55 64 54 45 78 55 31 4e 50 4d 57 31 31 57 46 5a 47 61 6d 78 72 51 33 64 53 62 6b 39 6a 63 47 74 72 62 6a 5a 73 55 6a 59 35 4d 55 45 7a 54 58 42 75 56 30 70 55 52 32 6c 79 52 55 31 4a 52 69 74 75 4d 6b 45 35 53 7a 42 30 55 6e 4a 57 56 6e 59 78 59 57 67 30 61 6e 4d 72 65 6b 70 61 64 44 49 30 52 56 52 4a 55 30 4e 44 63 6d 4a 58 53 45 56 46 5a 45 52 57 63 57 5a 56 53 55 77 72 65 47 68 4f 4e 33 41 34 56 45 74 36 62 55 39 48 4e 47 4e 75 5a 55 64 52 52 45 39 59 51 6b 4a 51 65 45 6c 55 4e 57 35 33 51 58 46 7a 54 55 35 34 54 43 73 7a 51 6b 6b 7a 52 45 39 52 61 44 56 57 54 45 70 78 56 6e 68 68 55 58 5a 61 65 45 68 68 63 47 74 46 61 48 6c 32 52 6b 68 42 4d 6d 35 75 65 54 5a 6c 62 46 6c 55 62 32 4e 43 64 57 39 73 57 45 74 33 4d 6b Data Ascii: SVzVsU01qSHJUdTExU1NPMW11WFZGamxrQ3dSbk9jcGtrbjZsUjY5MUEzTXBuV0pUR2lyRU1JRituMkE5SzB0UnJWVnYxYWg0anMrekpadDI0RVRJU0NDcmJXSEVFZERWcWZVSUwreGhON3A4VEt6bU9HNGNuZUdRRE9YQkJQeElUNW53QXFzTU54TCszQkkzRE9RaDVWTEpxVnhhUXZaeEhhcGtFaHl2RkhBMm5ueTZlbFlUb2NCdW9sWEt3Mk
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 78 55 46 55 76 61 57 70 61 52 30 4a 42 51 6e 56 79 52 33 6b 79 4c 30 68 70 4e 31 46 30 63 6d 77 79 51 55 46 42 62 45 39 47 55 6b 78 69 57 6c 46 33 55 6a 4a 61 5a 57 67 33 56 32 35 42 51 55 52 53 54 46 52 6e 64 31 56 75 62 7a 64 55 52 32 4a 75 4d 6b 35 79 61 48 59 34 54 48 46 77 59 57 70 6c 5a 47 35 32 55 31 6b 79 62 56 64 55 62 47 31 55 55 55 56 35 55 45 30 77 53 46 56 52 61 33 5a 61 56 55 5a 70 64 56 6c 74 63 58 52 6b 4d 7a 59 33 61 6b 70 4d 4e 44 4e 6b 4e 6e 70 53 62 45 49 34 51 55 4a 44 5a 6b 46 43 65 56 52 45 51 32 49 79 64 44 64 74 4c 31 46 56 63 33 6c 61 53 6b 6c 6b 55 55 64 68 59 33 52 6a 62 47 4e 68 4e 45 63 34 63 6a 64 4e 54 45 31 57 5a 6b 64 75 4e 6c 4e 31 51 55 4a 78 4d 30 46 42 51 31 52 42 51 54 56 6d 5a 55 70 55 55 6e 63 34 53 6a 46 70 53 6c Data Ascii: xUFUvaWpaR0JBQnVyR3kyL0hpN1F0cmwyQUFBbE9GUkxiWlF3UjJaZWg3V25BQURSTFRnd1VubzdUR2JuMk5yaHY4THFwYWplZG52U1kybVdUbG1UUUV5UE0wSFVRa3ZaVUZpdVltcXRkMzY3akpMNDNkNnpSbEI4QUJDZkFCeVREQ2IydDdtL1FVc3laSklkUUdhY3RjbGNhNEc4cjdNTE1WZkduNlN1QUJxM0FBQ1RBQTVmZUpUUnc4SjFpSl
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 35 33 4d 6d 4e 43 56 56 64 70 59 55 70 70 5a 32 74 48 61 54 46 4c 4d 53 39 32 54 7a 56 49 64 56 5a 71 4f 44 4e 68 53 56 4a 6d 4d 6a 6c 69 62 56 6c 71 4f 56 4e 49 4e 43 74 71 4c 32 63 35 61 6a 51 34 57 6a 52 4c 55 57 51 72 53 44 6c 51 61 54 42 69 4b 30 4d 34 4e 31 56 42 4e 6c 4d 34 63 58 4a 4e 62 47 64 58 62 6e 70 44 57 48 49 77 4d 6b 5a 68 52 69 39 75 61 32 56 57 53 45 74 33 51 6d 6c 7a 5a 48 46 4f 64 45 4e 34 53 55 68 35 65 6c 49 76 61 6d 4a 33 4d 33 46 36 52 6e 42 68 61 31 46 6e 55 31 67 72 4f 47 52 53 4c 31 52 5a 51 55 35 68 53 43 39 46 4f 56 46 35 4e 44 5a 49 52 33 64 7a 54 6c 6c 49 64 33 4a 59 4b 30 39 69 4d 6e 46 43 4c 7a 42 6b 4c 32 70 50 56 53 74 32 5a 54 6b 33 63 58 45 7a 62 57 6f 7a 62 30 68 44 61 48 51 7a 4e 6b 4e 45 61 46 41 30 4b 32 46 45 61 Data Ascii: 53MmNCVVdpYUppZ2tHaTFLMS92TzVIdVZqODNhSVJmMjlibVlqOVNINCtqL2c5ajQ4WjRLUWQrSDlQaTBiK0M4N1VBNlM4cXJNbGdXbnpDWHIwMkZhRi9ua2VWSEt3QmlzZHFOdEN4SUh5elIvamJ3M3F6RnBha1FnU1grOGRSL1RZQU5hSC9FOVF5NDZIR3dzTllId3JYK09iMnFCLzBkL2pPVSt2ZTk3cXEzbWozb0hDaHQzNkNEaFA0K2FEa
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 57 46 75 59 58 42 76 62 47 6c 7a 49 47 6c 75 5a 48 6b 67 5a 57 78 6c 64 6d 56 75 53 67 63 6a 59 54 4d 78 59 6a 49 34 55 6b 56 6e 63 31 39 7a 63 33 41 39 5a 55 70 36 61 6a 52 30 54 46 41 78 56 47 4e 76 63 55 52 52 63 30 74 36 57 54 4a 5a 55 46 4e 54 65 55 31 34 54 48 6c 56 65 6b 31 54 65 58 70 4a 65 6a 68 72 63 31 5a 6e 51 6e 6c 4c 61 46 5a 54 59 7a 46 4d 54 46 56 32 54 55 45 34 4d 6e 4e 4f 55 6e 64 77 42 77 5c 75 30 30 33 64 5c 75 30 30 33 64 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 67 6f 6f 67 6c 65 3a 65 6e 74 69 74 79 69 6e 66 6f 22 3a 22 43 67 30 76 5a 79 38 78 4d 58 45 30 62 46 39 78 4d 57 78 7a 45 68 6c 4f 61 57 4e 6f 62 32 78 68 63 79 42 44 61 47 46 32 5a 58 6f 67 34 6f 43 55 49 45 46 6a 64 47 39 79 4d Data Ascii: WFuYXBvbGlzIGluZHkgZWxldmVuSgcjYTMxYjI4UkVnc19zc3A9ZUp6ajR0TFAxVGNvcURRc0t6WTJZUFNTeU14THlVek1TeXpJejhrc1ZnQnlLaFZTYzFMTFV2TUE4MnNOUndwBw\u003d\u003d","zl":10002},{"zl":10002},{"google:entityinfo":"Cg0vZy8xMXE0bF9xMWxzEhlOaWNob2xhcyBDaGF2ZXog4oCUIEFjdG9yM
2024-04-26 13:22:41 UTC	1703	IN	Data Raw: 57 70 78 5a 6a 56 69 52 48 5a 54 57 6e 46 71 63 55 63 34 53 32 39 53 56 43 74 79 64 33 4a 6e 5a 6d 5a 44 4d 58 63 7a 62 45 6c 35 56 33 52 74 62 30 74 30 51 54 42 55 55 32 31 68 53 6d 51 33 59 56 52 31 62 7a 4d 31 61 31 64 48 52 30 64 51 54 45 56 4f 56 54 6c 56 57 6a 5a 31 56 31 46 79 63 46 5a 45 53 56 4a 46 64 54 6b 35 61 30 63 78 4b 32 77 72 4d 6b 52 71 55 6b 70 4e 57 55 6c 48 51 32 64 44 52 6b 73 79 59 55 64 74 62 33 70 4d 54 45 74 36 63 57 51 78 52 57 46 72 61 7a 52 53 5a 55 6f 31 4d 33 49 34 64 48 46 46 52 6b 78 4c 63 30 78 4c 55 56 4d 31 56 57 78 55 4d 45 35 6e 56 44 46 33 64 31 52 36 52 6d 39 5a 53 45 6f 78 65 46 4a 35 4d 6b 34 35 65 46 6b 33 57 48 68 34 63 57 4e 76 62 7a 68 32 63 47 35 47 54 6c 4e 4b 51 57 70 76 57 54 6c 4c 4d 30 46 42 54 79 39 4d Data Ascii: WpxZjViRHZTWnFqcUc4S29SVCtyd3JnZmZDMXczbEl5V3Rtb0t0QTBUU21hSmQ3YVR1bzM1a1dHR0dQTEVOVTlVWjZ1V1FycFZESVJFdTk5a0cxK2wrMkRqUkpNWUlHQ2dDRksyYUdtb3pMTEt6cWQxRWFrazRSZUo1M3I4dHFFRkxLc0xLUVM1VWxUME5nVDF3d1R6Rm9ZSEoxeFJ5Mk45eFk3WHh4cWNvbzh2cG5GTlNKQWpvWTlLM0FBTy9M
2024-04-26 13:22:41 UTC	633	IN	Data Raw: 51 56 46 30 63 56 46 70 4d 6e 42 57 57 58 52 6a 57 44 56 6b 63 6d 34 32 4e 46 52 6c 53 45 39 4b 62 6e 6b 32 64 48 5a 59 53 6b 6b 32 5a 6b 73 33 55 6a 4a 43 64 44 64 71 61 31 49 72 55 48 5a 70 61 54 56 43 62 54 6c 47 56 6c 56 30 56 46 5a 44 55 30 5a 6e 5a 6c 64 46 55 6d 64 6d 52 45 68 4d 5a 47 49 7a 57 47 4e 75 63 47 68 57 62 6a 51 72 57 47 70 70 5a 30 35 6d 59 30 4a 48 61 6d 4d 76 4c 31 6f 36 49 47 35 70 59 32 68 76 62 47 46 7a 49 47 4e 6f 59 58 5a 6c 65 69 42 6e 5a 57 35 6c 63 6d 46 73 49 47 68 76 63 33 42 70 64 47 46 73 53 67 63 6a 4e 7a 51 33 59 7a 4d 77 55 6c 5a 6e 63 31 39 7a 63 33 41 39 5a 55 70 36 61 6a 52 30 56 6c 41 78 65 6d 4d 77 54 45 52 55 53 6d 6c 54 4f 44 42 36 51 32 73 79 57 56 42 53 55 33 6c 4e 64 45 31 36 63 32 70 51 55 31 4e 34 56 31 4e Data Ascii: QVF0cVFpMnBWWXRjWDVkcm42NFRlSE9Kbnk2dHZYSkk2Zks3UjJCdDdqa1IrUHZpaTVCbTlGVlV0VFZDU0ZnZldFUmdmREhMZGIzWGNucGhWbjQrWGppZ05mY0JHamMvL1o6IG5pY2hvbGFzIGNoYXZleiBnZW5lcmFsIGhvc3BpdGFsSgcjNzQ3YzMwUlZnc19zc3A9ZUp6ajR0VlAxemMwTERUSmlTODB6Q2syWVBSU3lNdE16c2pQU1N4V1N
2024-04-26 13:22:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49737	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:41 UTC	912	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGKHVrrEGIjCGTIFNgwCqg6KBz5rBbLFCyjWo_wrNhn_m27xtdwcxgTfsjn6kArLmSGZDuCewgJQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-13; NID=513=Ws_e_nPexgfWAEfZbob3hrKGg3KYFME7eNdM-xfXzPQYJXs631GXMmHGczvDE67LJo-xVXwx8CMCLG965WWcGpFRNCn6Hjo6fIPF5GKPSE0Tf4qOS0fmxxy4z_BAcv_kvBMLhR-q-Rh__FepvOm68kV5N9yQRabxOD4msc1vAEQ
2024-04-26 13:22:42 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 13:22:41 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3186 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:22:42 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 6f 67 62 3f 68 6c 3d 65 6e 2d 55 53 26 61 6d 70 3b 61 73 79 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_ogb?hl=en-US&asy
2024-04-26 13:22:42 UTC	1255	IN	Data Raw: 0a 3c 73 63 72 69 70 74 3e 76 61 72 20 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 79 59 59 6d 67 37 56 68 67 Data Ascii: <script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="yYYmg7Vhg
2024-04-26 13:22:42 UTC	1032	IN	Data Raw: 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 34 65 6d 3b 22 3e 0a 54 68 69 73 20 70 61 67 65 20 61 70 70 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 Data Ascii: ; line-height:1.4em;">This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly aft

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49741	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:42 UTC	738	OUT	GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGKHVrrEGIjCAwqd5aHTOlyUE6jH5e1xF0ingjmOr7JoUxUSGQTlQ_ULyex8YCxJ6Uqj_J6tA-uMyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-13; NID=513=J8wI918jBuekBOhaX-d_kvPVQRcHa-wmBbUOae9IYz8kZsYDXxABP7oKFgAbeAIkVmjS9ME9mO0tiLg9tuXX_wemhEQIRILKrelluDp3BZ7YF2opnWNCUx2jnOls0Af1q4t3-kGQ5Dp9D8qh83yClTVpEpVKC8VtsUNo0rq-AVU
2024-04-26 13:22:42 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 13:22:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3114 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:22:42 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 6e 65 77 74 61 62 5f 70 72 6f 6d 6f 73 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/newtab_promos</title></head
2024-04-26 13:22:42 UTC	1255	IN	Data Raw: 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 34 4e 57 64 31 56 59 50 37 74 35 4c 47 65 32 6c 41 36 37 6d 79 78 36 4b 66 36 6b 6c 70 33 67 43 6b Data Ascii: ack = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="4NWd1VYP7t5LGe2lA67myx6Kf6klp3gCk
2024-04-26 13:22:42 UTC	960	IN	Data Raw: 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e 74 69 6d 65 2c 20 73 6f 6c 76 69 6e Data Ascii: ogle automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the meantime, solvin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	142.250.64.196	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:42 UTC	742	OUT	GET /sorry/index?continue=https://www.google.com/async/ddljson%3Fasync%3Dntp:2&q=EgRmgZjcGKHVrrEGIjAM6pg0sk4j-FMPZ_hJZJKTKDM0SVUw_6TyPx8OtG0dA6bxJcOs3Tnu_R8uc-avnL0yAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1 Host: www.google.com Connection: keep-alive Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
2024-04-26 13:22:42 UTC	356	IN	HTTP/1.1 429 Too Many Requests Date: Fri, 26 Apr 2024 13:22:42 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Content-Type: text/html Server: HTTP server (unknown) Content-Length: 3132 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:22:42 UTC	899	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 74 69 74 6c 65 3e 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 73 79 6e 63 2f 64 64 6c 6a 73 6f 6e 3f 61 73 79 6e 63 3d 6e 74 70 3a 32 3c 2f 74 69 74 6c 65 3e Data Ascii: <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"><html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>https://www.google.com/async/ddljson?async=ntp:2</title>
2024-04-26 13:22:42 UTC	1255	IN	Data Raw: 74 43 61 6c 6c 62 61 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 28 72 65 73 70 6f 6e 73 65 29 20 7b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 61 70 74 63 68 61 2d 66 6f 72 6d 27 29 2e 73 75 62 6d 69 74 28 29 3b 7d 3b 3c 2f 73 63 72 69 70 74 3e 0a 3c 64 69 76 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 22 20 63 6c 61 73 73 3d 22 67 2d 72 65 63 61 70 74 63 68 61 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 36 4c 66 77 75 79 55 54 41 41 41 41 41 4f 41 6d 6f 53 30 66 64 71 69 6a 43 32 50 62 62 64 48 34 6b 6a 71 36 32 59 31 62 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 73 75 62 6d 69 74 43 61 6c 6c 62 61 63 6b 22 20 64 61 74 61 2d 73 3d 22 68 4f 73 62 4d 6d 5f 35 5f 45 4e 49 2d 44 53 36 71 6b 51 6f 43 4b 71 62 52 58 6c Data Ascii: tCallback = function(response) {document.getElementById('captcha-form').submit();};</script><div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="hOsbMm_5_ENI-DS6qkQoCKqbRXl
2024-04-26 13:22:42 UTC	978	IN	Data Raw: 65 61 72 73 20 77 68 65 6e 20 47 6f 6f 67 6c 65 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 64 65 74 65 63 74 73 20 72 65 71 75 65 73 74 73 20 63 6f 6d 69 6e 67 20 66 72 6f 6d 20 79 6f 75 72 20 63 6f 6d 70 75 74 65 72 20 6e 65 74 77 6f 72 6b 20 77 68 69 63 68 20 61 70 70 65 61 72 20 74 6f 20 62 65 20 69 6e 20 76 69 6f 6c 61 74 69 6f 6e 20 6f 66 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 6f 6c 69 63 69 65 73 2f 74 65 72 6d 73 2f 22 3e 54 65 72 6d 73 20 6f 66 20 53 65 72 76 69 63 65 3c 2f 61 3e 2e 20 54 68 65 20 62 6c 6f 63 6b 20 77 69 6c 6c 20 65 78 70 69 72 65 20 73 68 6f 72 74 6c 79 20 61 66 74 65 72 20 74 68 6f 73 65 20 72 65 71 75 65 73 74 73 20 73 74 6f 70 2e 20 20 49 6e 20 74 68 65 20 6d 65 61 6e Data Ascii: ears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop. In the mean

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49746	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:50 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 13:22:50 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=63655 Date: Fri, 26 Apr 2024 13:22:50 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49747	23.204.76.112	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:50 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-26 13:22:50 UTC	530	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0DZ+oYgAAAABSxwJpMgMuSLkfS640ajfFQVRBRURHRTEyMTkAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=63649 Date: Fri, 26 Apr 2024 13:22:50 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-26 13:22:50 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49748	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:22:51 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gXs2eAYyfceFPPD&MD=oK8VXYh3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 13:22:52 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 4165f534-edc9-40aa-9158-8dcaf1b53d8a MS-RequestId: 9b9c7646-e419-45e2-8986-047839c64c51 MS-CV: yPLoFf6Bs0SNAHqQ.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 13:22:51 GMT Connection: close Content-Length: 24490
2024-04-26 13:22:52 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-04-26 13:22:52 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	173.194.210.189	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:07 UTC	1080	OUT	GET /drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview HTTP/1.1 Host: 6125106173.docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
2024-04-26 13:23:07 UTC	636	IN	HTTP/1.1 302 Moved Temporarily Content-Type: text/html; charset=UTF-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 13:23:07 GMT Location: https://docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 13:23:07 UTC	303	IN	Data Raw: 31 32 38 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 72 61 77 69 6e 67 73 2f 64 2f 31 73 6b 78 6b 64 66 49 41 6d 55 4f 7a 59 38 50 32 6d 77 32 66 41 4f 75 6f 4c 56 45 71 75 77 67 35 77 Data Ascii: 128<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5w
2024-04-26 13:23:07 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49756	172.217.2.206	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:08 UTC	1069	OUT	GET /drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview HTTP/1.1 Host: docs.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
2024-04-26 13:23:08 UTC	2421	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 13:23:08 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: base-uri 'self';object-src 'self' blob:;report-uri https://docs.google.com/drawings/cspreport;script-src 'report-sample' 'nonce-9CkICyLETjWMi76uTkmOlg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval' Reporting-Endpoints: default="/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/web-reports?context=eJwNz2tQ1GUYBfBnn_f5qygloqiQqHSRUmFMdCJ2cdn97wroNF5QXzLH1FEUatSo0UlRzMvYoGRRCjLpijKGqYSWlaVZ6oA6mcS4itdQIPESCrSBKy6dD79PZ-acOT0P9Ar1z6Ag0jSsm6ZN4Omh6VRPTTm9NB2Eb4M1reutaU-IpvZ-mqLDNJ2GbwZoOgEjB2oqgDciNEVGaiodrClziKax0Zr6jNQ0IgZ5rKZCu6Yy2DNe03dT0QHR6ZpeA_Wmpr5QPVNTHVyeq-kOBM3XFA6tGZp4oaazWZquQO0aTU2weIOm1XAoT9Nv0H8TfkB8vqYUCBRpena7pn4Vml6Em8c1NUNUpaZXofoC9sBerWkS7KjBLyhs0PQVHG7UdBIq4RI0PtLkg-kBTQvAvSSdpoN30H3ugLXD73MeXJ7Vwn9B_0UtPBgm5LbwVLAMa-W4gla2wtzCVs6EAbdbeQiUxLbxPqid3sZ1kJrbxlOgqYePH8GpWB9vH-XjmFU-HgvXPvJxPWT95ONsyH-nnbfCDVsHN0JZYgdXwNuODl4IozM6OAHa8zq4CxLOPWYnLA_1cy5YPvdz6DY_793l5yMlfpYxnRwM9uJOToYkTyenQHvOU-6C0PKnHAFNzwe4c2qAJS3A1lkBNiHnaoDXw0zq4nlQNqiLKyBjRRcvhvMhpLzQtJjUI1iUTWopFFwkVQxPakmpK6SW1ZFaDZYGUkHweLdFjSm1KBtY8lkFQfNpVm2_s3oCIbdYhcM1pVQ9DElTKhpOTFOqCqrXK1ULCzcqtRS29BR1aKioo2B7mCAuyO5tlRXw0hqrxMC0u1aZBefvWcULc5utkgk1LVa5Crk-q2yEnyfZpLnQJv_BqgM22QBpEYnyFhxzJsppoKJECYIvw8dJKeTFjZMC2DZ_nOyEcsMu38Nwh11Gw7l0u9TAwU_scgTunbFLK9yqtstdmGxLknTYmpUkO2DU_iSJhz7eJAkHR7JDUqEqxSHVED7RIVHgL3MI73PIDKdTZkNVkVMuwKf7nVIEH1xySg4UDDClGAKTTek2xZRVS0zZAI1LTfkHri0zpR6eWWlKGNzfYkob_PKZKZXQv8KUwTDKa0o8fB3lksMw3-mSd-H8UZd4Ie5Xl1jhxhmXNMILZ10yAiZCGrwPKyH4gUv6wROLWxS7Zafhlr1wJ9ItD-H199zigL0et5RDw3G3PIDKKrf8AZduu-UmXPzbLdchPmO8JEH3LcnSG67fS5YGyA1LkfBdKRIFcX1TxQrmilSZCAkfp4oT0o0JMgc2d58gX8CcHzzGIph31GNkQelJj3EAYuo9xlgYemuX8TKs7FtirIOBz5UYQyFudokRdqXEiIRzUANRsbuNV8D4cLcRBgU_lhrFEBrc45i3_FC3kLq1f_7LEd0nZy9Ylrlg-f-a4Am5" Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 13:23:08 UTC	2421	IN	Data Raw: 32 37 30 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 39 43 6b 49 43 79 4c 45 54 6a 57 4d 69 37 36 75 54 6b 6d 4f 6c 67 22 3e 76 61 72 20 44 4f 43 53 5f 74 69 6d 69 6e 67 3d 7b 7d 3b 20 44 4f 43 53 5f 74 69 6d 69 6e 67 5b 27 70 6c 73 27 5d 3d 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 47 45 54 20 43 4f 49 4e 20 35 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 61 72 74 69 63 6c 65 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 Data Ascii: 270d<!DOCTYPE html><html lang="en"><head><script nonce="9CkICyLETjWMi76uTkmOlg">var DOCS_timing={}; DOCS_timing['pls']=new Date().getTime();</script><meta property="og:title" content="GET COIN 5"><meta property="og:type" content="article"><meta property
2024-04-26 13:23:08 UTC	2421	IN	Data Raw: 22 3a 31 2c 22 64 6f 63 73 2d 65 6e 73 64 77 6d 22 3a 30 2c 22 64 6f 63 73 2d 77 69 7a 2d 65 6e 64 6d 22 3a 31 2c 22 64 6f 63 73 2d 65 6f 64 70 73 77 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 6f 64 77 6d 22 3a 31 2c 22 64 6f 63 73 2d 65 70 70 64 6d 22 3a 31 2c 22 64 6f 63 73 2d 77 69 7a 2d 65 70 64 77 6d 22 3a 31 2c 22 64 6f 63 73 2d 65 70 64 77 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 72 64 64 6d 22 3a 31 2c 22 64 6f 63 73 2d 65 64 73 65 64 77 22 3a 31 2c 22 64 6f 63 73 2d 65 6d 73 65 64 77 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 73 64 6f 64 77 6d 22 3a 31 2c 22 64 6f 63 73 2d 65 73 69 64 6d 22 3a 31 2c 22 64 6f 63 73 2d 65 73 64 77 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 73 70 64 77 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 73 66 64 6d 22 3a 31 2c 22 64 6f 63 73 2d 65 74 73 73 Data Ascii: ":1,"docs-ensdwm":0,"docs-wiz-endm":1,"docs-eodpswm":0,"docs-eodwm":1,"docs-eppdm":1,"docs-wiz-epdwm":1,"docs-epdwm":0,"docs-erddm":1,"docs-edsedw":1,"docs-emsedwm":0,"docs-esdodwm":1,"docs-esidm":1,"docs-esdwm":0,"docs-espdwm":0,"docs-esfdm":1,"docs-etss
2024-04-26 13:23:08 UTC	2421	IN	Data Raw: 22 64 6f 63 73 2d 6f 66 66 6c 69 6e 65 2d 63 6f 70 79 22 3a 30 2c 22 64 6f 63 73 2d 63 6c 73 76 6e 22 3a 30 2c 22 64 6f 63 73 2d 72 6c 73 76 6e 22 3a 30 2c 22 64 6f 63 73 2d 6f 66 66 6c 69 6e 65 2d 64 65 73 6b 74 6f 70 2d 6d 6d 73 22 3a 32 30 30 30 30 30 30 30 30 2c 22 64 6f 63 73 2d 6f 66 66 6c 69 6e 65 2d 75 65 62 69 65 22 3a 31 2c 22 64 6f 63 73 2d 6c 6f 63 61 6c 73 74 6f 72 65 2d 65 70 6c 61 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 6d 61 73 6c 22 3a 30 2c 22 66 61 74 72 61 22 3a 31 2c 22 64 6f 63 73 2d 65 65 69 63 22 3a 30 2c 22 64 6f 63 73 2d 73 77 2d 65 66 63 72 22 3a 31 2c 22 64 6f 63 73 2d 73 77 2d 65 68 6e 75 72 22 3a 30 2c 22 64 6f 63 73 2d 65 69 65 64 22 3a 30 2c 22 64 6f 63 73 2d 65 69 6f 61 77 6f 22 3a 30 2c 22 64 6f 63 73 2d 65 6d 63 63 74 22 3a Data Ascii: "docs-offline-copy":0,"docs-clsvn":0,"docs-rlsvn":0,"docs-offline-desktop-mms":200000000,"docs-offline-uebie":1,"docs-localstore-eplam":0,"docs-emasl":0,"fatra":1,"docs-eeic":0,"docs-sw-efcr":1,"docs-sw-ehnur":0,"docs-eied":0,"docs-eioawo":0,"docs-emcct":
2024-04-26 13:23:08 UTC	2421	IN	Data Raw: 31 2c 37 31 36 31 36 38 35 31 2c 37 31 36 31 36 38 39 31 2c 37 31 36 32 35 37 34 38 2c 37 31 36 33 31 33 36 33 2c 37 31 36 33 32 32 39 34 2c 37 31 36 33 38 35 31 31 2c 37 31 36 35 39 38 34 31 2c 37 31 36 37 31 37 32 36 2c 37 31 36 37 39 34 36 38 2c 37 31 36 38 31 39 39 38 2c 37 31 36 38 38 39 32 36 2c 37 31 36 38 39 39 34 38 2c 37 31 37 32 32 35 36 30 2c 37 31 37 39 38 35 34 33 2c 37 31 38 32 32 30 35 32 2c 37 31 38 33 32 39 35 39 2c 37 31 38 36 38 34 34 39 2c 37 31 38 39 37 39 31 35 2c 37 31 39 32 34 32 39 39 2c 37 31 39 32 37 38 37 34 2c 37 31 39 35 39 39 30 34 2c 37 31 39 36 30 34 36 38 2c 39 34 33 35 33 32 35 36 2c 39 34 33 35 33 37 37 30 2c 39 34 33 35 36 31 34 30 2c 39 34 33 36 34 34 36 39 2c 39 34 34 32 39 34 38 30 2c 39 34 34 34 32 33 37 31 2c 39 Data Ascii: 1,71616851,71616891,71625748,71631363,71632294,71638511,71659841,71671726,71679468,71681998,71688926,71689948,71722560,71798543,71822052,71832959,71868449,71897915,71924299,71927874,71959904,71960468,94353256,94353770,94356140,94364469,94429480,94442371,9
2024-04-26 13:23:08 UTC	321	IN	Data Raw: 51 22 2c 22 31 37 68 45 44 38 6b 47 35 30 6b 4c 55 6b 70 73 50 31 39 30 54 54 68 51 6e 33 44 41 22 2c 22 42 44 4e 5a 52 34 50 58 78 30 6b 4c 55 6b 70 73 50 31 39 30 53 4a 74 4e 50 6b 59 74 22 2c 22 45 74 6a 35 77 4a 43 51 6b 30 6b 4c 55 6b 70 73 50 31 39 30 4e 77 69 4c 38 55 4d 61 22 2c 22 78 43 4c 62 62 44 55 50 41 30 6b 4c 55 6b 70 73 50 31 39 30 58 6b 47 4a 69 50 55 6d 22 2c 22 32 4e 55 6b 6f 5a 65 68 57 30 6b 4c 55 6b 70 73 50 31 39 30 55 55 4e 4c 69 58 57 39 22 2c 22 79 75 76 59 74 64 35 35 39 30 6b 4c 55 6b 70 73 50 31 39 30 51 79 61 35 4b 34 55 52 22 2c 22 5a 48 34 72 7a 74 32 75 6b 30 6b 4c 55 6b 70 73 50 31 39 30 55 44 6b 46 35 42 6b 71 22 2c 22 75 51 55 51 68 6e 35 37 41 30 6b 4c 55 6b 70 73 50 31 39 30 57 48 6f 69 68 50 34 31 22 2c 22 39 33 77 Data Ascii: Q","17hED8kG50kLUkpsP190TThQn3DA","BDNZR4PXx0kLUkpsP190SJtNPkYt","Etj5wJCQk0kLUkpsP190NwiL8UMa","xCLbbDUPA0kLUkpsP190XkGJiPUm","2NUkoZehW0kLUkpsP190UUNLiXW9","yuvYtd5590kLUkpsP190Qya5K4UR","ZH4rzt2uk0kLUkpsP190UDkF5Bkq","uQUQhn57A0kLUkpsP190WHoihP41","93w
2024-04-26 13:23:08 UTC	1255	IN	Data Raw: 38 30 30 30 0d 0a 71 6a 4b 37 30 6b 4c 55 6b 70 73 50 31 39 30 53 63 50 65 68 67 41 57 22 2c 22 4a 79 46 52 32 74 59 57 5a 30 6b 4c 55 6b 70 73 50 31 39 30 52 6e 33 48 7a 6b 78 54 22 2c 22 75 66 58 6a 37 76 6d 65 4a 30 6b 4c 55 6b 70 73 50 31 39 30 51 55 52 68 76 4a 6e 32 22 2c 22 4b 46 6b 73 37 55 65 5a 33 30 6b 4c 55 6b 70 73 50 31 39 30 55 55 4d 52 36 63 76 68 22 2c 22 4c 63 54 61 36 45 6a 65 43 30 6b 4c 55 6b 70 73 50 31 39 30 52 4b 67 76 57 35 71 69 22 2c 22 73 33 55 46 63 6a 47 6a 74 30 6b 4c 55 6b 70 73 50 31 39 30 5a 34 35 66 74 57 52 72 22 2c 22 6f 39 39 65 77 42 51 58 79 30 6b 4c 55 6b 70 73 50 31 39 30 4e 71 32 71 72 36 74 66 22 2c 22 50 48 56 79 79 35 75 53 53 30 6b 4c 55 6b 70 73 50 31 39 30 53 55 73 59 6f 38 67 51 22 2c 22 79 5a 6e 32 31 61 Data Ascii: 8000qjK70kLUkpsP190ScPehgAW","JyFR2tYWZ0kLUkpsP190Rn3HzkxT","ufXj7vmeJ0kLUkpsP190QURhvJn2","KFks7UeZ30kLUkpsP190UUMR6cvh","LcTa6EjeC0kLUkpsP190RKgvW5qi","s3UFcjGjt0kLUkpsP190Z45ftWRr","o99ewBQXy0kLUkpsP190Nq2qr6tf","PHVyy5uSS0kLUkpsP190SUsYo8gQ","yZn21a
2024-04-26 13:23:08 UTC	1255	IN	Data Raw: 53 47 6b 47 66 30 57 32 74 64 79 70 55 46 22 2c 22 66 6f 73 57 37 37 72 76 66 30 6d 45 52 71 53 47 6b 47 66 30 55 6e 7a 51 50 6d 41 42 22 2c 22 77 46 38 53 6b 32 34 31 65 30 6d 45 52 71 53 47 6b 47 66 30 59 4e 74 4e 36 67 70 56 22 2c 22 69 6a 55 68 64 78 32 51 4e 30 6d 45 52 71 53 47 6b 47 66 30 54 53 44 32 36 69 42 4a 22 2c 22 33 69 42 4c 61 4d 6e 75 47 30 6d 45 52 71 53 47 6b 47 66 30 56 64 59 38 58 75 4c 53 22 2c 22 63 46 52 37 37 59 45 47 6f 30 69 53 46 54 43 62 69 45 42 30 50 63 4d 44 57 6a 58 32 22 2c 22 65 76 55 59 75 4e 43 53 38 30 6d 45 52 71 53 47 6b 47 66 30 50 73 69 38 6a 33 44 77 22 2c 22 73 6f 57 6e 63 52 56 37 43 30 6d 45 52 71 53 47 6b 47 66 30 50 5a 68 65 58 72 57 41 22 2c 22 54 76 6a 6f 69 43 61 61 72 30 6d 45 52 71 53 47 6b 47 66 30 53 Data Ascii: SGkGf0W2tdypUF","fosW77rvf0mERqSGkGf0UnzQPmAB","wF8Sk241e0mERqSGkGf0YNtN6gpV","ijUhdx2QN0mERqSGkGf0TSD26iBJ","3iBLaMnuG0mERqSGkGf0VdY8XuLS","cFR77YEGo0iSFTCbiEB0PcMDWjX2","evUYuNCS80mERqSGkGf0Psi8j3Dw","soWncRV7C0mERqSGkGf0PZheXrWA","TvjoiCaar0mERqSGkGf0S
2024-04-26 13:23:08 UTC	1255	IN	Data Raw: 2c 22 64 6f 63 73 2d 69 63 64 6d 74 22 3a 5b 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 69 6d 61 67 65 2f 6a 70 65 67 22 5d 2c 22 64 6f 63 73 2d 6d 69 70 22 3a 32 35 30 30 30 30 30 30 2c 22 64 6f 63 73 2d 6d 69 66 22 3a 31 30 30 30 2c 22 64 6f 63 73 2d 6d 73 69 64 22 3a 33 32 37 36 37 2c 22 64 6f 63 73 2d 65 6d 69 64 22 3a 30 2c 22 64 6f 63 73 2d 6d 69 62 22 3a 35 32 34 32 38 38 30 30 2c 22 64 6f 63 73 2d 6d 69 64 22 3a 32 30 34 38 2c 22 64 6f 63 73 2d 72 69 64 22 3a 31 30 32 34 2c 22 64 6f 63 73 2d 65 63 69 67 22 3a 30 2c 22 64 6f 63 73 2d 65 69 66 61 6d 22 3a 30 2c 22 64 6f 63 73 2d 73 75 70 22 3a 22 2f 64 72 61 77 69 6e 67 73 22 2c 22 64 6f 63 73 2d 73 65 75 22 3a 22 68 74 74 70 73 3a 2f 2f 64 6f 63 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 64 72 61 77 69 6e Data Ascii: ,"docs-icdmt":["image/png","image/jpeg"],"docs-mip":25000000,"docs-mif":1000,"docs-msid":32767,"docs-emid":0,"docs-mib":52428800,"docs-mid":2048,"docs-rid":1024,"docs-ecig":0,"docs-eifam":0,"docs-sup":"/drawings","docs-seu":"https://docs.google.com/drawin
2024-04-26 13:23:08 UTC	1255	IN	Data Raw: 73 2d 75 61 71 73 22 3a 30 2c 22 64 6f 63 73 2d 65 6c 70 61 66 22 3a 30 2c 22 64 6f 63 73 2d 65 63 6c 70 61 22 3a 30 2c 22 64 6f 63 73 2d 65 63 6c 70 6f 69 63 22 3a 30 2c 22 64 6f 63 73 2d 65 64 70 32 22 3a 30 2c 22 64 6f 63 73 2d 69 69 64 70 6d 22 3a 30 2c 22 64 6f 63 73 2d 6d 65 66 75 22 3a 30 2c 22 64 6f 63 73 2d 69 69 63 70 22 3a 30 2c 22 64 6f 63 73 2d 65 61 65 6c 70 22 3a 30 2c 22 64 6f 63 73 2d 65 64 76 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 6c 70 61 72 22 3a 30 2c 22 64 6f 63 73 2d 61 63 61 70 22 3a 5b 22 64 6f 63 73 2e 73 65 63 75 72 69 74 79 2e 61 63 63 65 73 73 5f 63 61 70 61 62 69 6c 69 74 69 65 73 22 2c 31 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 31 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c Data Ascii: s-uaqs":0,"docs-elpaf":0,"docs-eclpa":0,"docs-eclpoic":0,"docs-edp2":0,"docs-iidpm":0,"docs-mefu":0,"docs-iicp":0,"docs-eaelp":0,"docs-edvm":0,"docs-elpar":0,"docs-acap":["docs.security.access_capabilities",1,0,0,0,0,0,0,0,0,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,
2024-04-26 13:23:08 UTC	1255	IN	Data Raw: 73 2d 63 74 74 6d 74 65 71 22 3a 30 2c 22 64 6f 63 6f 73 2d 65 64 63 65 73 22 3a 31 2c 22 64 6f 63 73 2d 64 65 63 22 3a 30 2c 22 64 6f 63 73 2d 65 63 74 74 22 3a 30 2c 22 64 6f 63 73 2d 65 62 62 6f 75 66 22 3a 30 2c 22 64 6f 63 73 2d 65 63 67 64 22 3a 30 2c 22 64 6f 63 73 2d 64 73 70 73 22 3a 31 2c 22 64 6f 63 73 2d 65 63 65 63 73 22 3a 30 2c 22 64 6f 63 73 2d 65 6c 63 66 64 22 3a 30 2c 22 64 6f 63 73 2d 65 64 6d 69 74 6d 22 3a 30 2c 22 64 6f 63 73 2d 65 6e 6a 65 63 22 3a 31 2c 22 73 65 72 76 65 72 5f 74 69 6d 65 5f 6d 73 22 3a 31 37 31 34 31 33 37 37 38 38 37 37 30 2c 22 67 61 69 61 5f 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 22 2c 22 64 6f 63 73 2d 75 73 70 22 3a 22 64 72 61 77 69 6e 67 73 5f 77 65 62 22 2c 22 64 6f 63 73 2d 69 73 62 22 3a 31 2c 22 64 6f Data Ascii: s-cttmteq":0,"docos-edces":1,"docs-dec":0,"docs-ectt":0,"docs-ebbouf":0,"docs-ecgd":0,"docs-dsps":1,"docs-ececs":0,"docs-elcfd":0,"docs-edmitm":0,"docs-enjec":1,"server_time_ms":1714137788770,"gaia_session_id":"","docs-usp":"drawings_web","docs-isb":1,"do

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	172.217.2.206	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:11 UTC	997	OUT	GET /static/drawings/client/css/4013897977-preview_css_ltr.css HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
2024-04-26 13:23:11 UTC	781	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 300418 Date: Fri, 26 Apr 2024 13:23:11 GMT Expires: Sat, 26 Apr 2025 13:23:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 18 Apr 2024 17:40:37 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:11 UTC	474	IN	Data Raw: 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 73 20 6c 69 6e 65 61 72 20 31 73 2c 6f 70 61 63 69 74 79 20 31 73 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 68 65 69 67 68 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 69 6e Data Ascii: .jfk-butterBar{border-radius:2px;box-shadow:0 2px 4px rgba(0,0,0,.2);transition:all 0s linear 1s,opacity 1s;border-style:solid;border-width:0;font-size:11px;height:0;opacity:0;visibility:hidden;overflow:hidden;padding:0;text-align:center}.jfk-butterBar-in
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 6b 2d 62 75 74 74 65 72 42 61 72 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 34 62 33 39 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 36 30 32 30 31 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 73 68 6f 77 6e 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 31 38 73 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 34 70 78 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 6f 70 61 63 69 74 79 3a 31 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 3b 70 61 64 64 69 6e 67 3a 36 70 78 20 31 36 70 78 7d 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 6d 69 6e 69 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 73 68 6f 77 6e 7b 70 Data Ascii: k-butterBar-warning{background-color:#dd4b39;border-color:#602019;color:#fff}.jfk-butterBar-shown{transition:opacity .218s;border-width:1px;min-height:14px;height:auto;opacity:1;visibility:visible;padding:6px 16px}.jfk-butterBar-mini.jfk-butterBar-shown{p
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 69 73 69 74 65 64 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 36 36 36 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 2c 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 64 69 73 6d 69 73 73 2c 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 70 61 64 64 69 6e 67 Data Ascii: isited,a.docs-butterbar-link:link,a.docs-butterbar-link:visited{color:#666;cursor:pointer;text-decoration:underline}.docs-butterbar-butter-action,.docs-butterbar-dismiss,.docs-butterbar-link,a.docs-butterbar-link:link,a.docs-butterbar-link:visited{padding
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 6e 6f 2d 70 61 64 3a 6c 69 6e 6b 2c 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 76 69 73 69 74 65 64 2c 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 61 64 64 38 65 36 7d 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 69 6e 66 6f 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b Data Ascii: no-pad:link,.jfk-butterBar-error a.docs-butterbar-link-no-pad:visited,.jfk-butterBar-error a.docs-butterbar-link:link,.jfk-butterBar-error a.docs-butterbar-link:visited{color:#add8e6}.docs-gm .jfk-butterBar-info .docs-butterbar-butter-action,.docs-gm .jfk
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 75 74 74 65 72 62 61 72 2d 64 69 73 6d 69 73 73 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 6c 69 6e 6b 2c 2e 64 6f 63 73 2d 67 6d 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 20 61 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 76 69 73 69 74 65 Data Ascii: utterbar-dismiss,.docs-gm .jfk-butterBar-error .docs-butterbar-link,.docs-gm .jfk-butterBar-error .docs-butterbar-link-no-pad,.docs-gm .jfk-butterBar-error a.docs-butterbar-link-no-pad:link,.docs-gm .jfk-butterBar-error a.docs-butterbar-link-no-pad:visite
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 63 63 63 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 65 72 72 6f 72 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 69 6e 66 6f 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 6a 66 6b 2d 62 75 74 74 65 72 42 61 72 2d 77 61 72 6e 69 6e 67 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 30 33 30 33 30 3b 63 6f 6c 6f 72 3a 23 66 32 66 32 66 32 3b 66 6f 6e 74 2d 66 61 Data Ascii: .docs-butterbar-butter-action:hover{color:#ccc;cursor:default}.docs-grille-gm3 .jfk-butterBar,.docs-grille-gm3 .jfk-butterBar-error,.docs-grille-gm3 .jfk-butterBar-info,.docs-grille-gm3 .jfk-butterBar-warning{background-color:#303030;color:#f2f2f2;font-fa
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 30 70 78 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 63 6f 6c 6f 72 3a 23 61 38 63 37 66 61 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 77 72 61 70 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 62 75 74 74 65 72 2d 61 63 74 69 6f 6e 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 66 6f 6e 74 2d 66 61 Data Ascii: 0px;white-space:nowrap;color:#a8c7fa;height:auto;text-decoration:none}.docs-grille-gm3.docs-grille-gm3.docs-gm .docs-butterbar-wrap .docs-butterbar-butter-action{border:1px solid transparent;border-radius:100px;box-sizing:border-box;cursor:pointer;font-fa
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 65 72 62 61 72 2d 64 69 73 6d 69 73 73 3a 66 6f 63 75 73 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 61 63 74 69 76 65 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 2d 6e 6f 2d 70 61 64 3a 66 6f 63 75 73 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 62 75 74 74 65 72 62 61 72 2d 6c 69 6e 6b 3a 66 6f 63 75 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 31 36 38 2c 31 39 39 2c 32 35 30 2c 2e 31 32 29 7d 40 6d 65 64 69 61 20 28 66 6f Data Ascii: erbar-dismiss:focus,.docs-grille-gm3 .docs-butterbar-link-no-pad:active,.docs-grille-gm3 .docs-butterbar-link-no-pad:focus,.docs-grille-gm3 .docs-butterbar-link:active,.docs-grille-gm3 .docs-butterbar-link:focus{background:rgba(168,199,250,.12)}@media (fo
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 6e 5f 73 70 72 69 74 65 36 36 37 5f 67 72 65 79 5f 6d 65 64 69 75 6d 2e 73 76 67 29 7d 2e 64 6f 63 73 2d 67 72 69 6c 6c 65 2d 67 6d 33 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 2c 2e 64 6f 63 73 2d 69 63 6f 6e 73 2d 63 6c 65 61 6e 75 70 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 7b 63 6f 6e 74 65 6e 74 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 73 73 6c 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 6d 61 74 65 72 69 61 6c 5f 63 6f 6d 6d 6f 6e 5f 73 70 72 69 74 65 36 36 37 5f 67 6d 33 5f 67 72 65 79 5f 6d 65 64 69 75 6d 2e 73 76 67 29 7d 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 2d 63 6f 6e 74 Data Ascii: n_sprite667_grey_medium.svg)}.docs-grille-gm3 .docs-material .docs-icon-img,.docs-icons-cleanup .docs-material .docs-icon-img{content:url(https://ssl.gstatic.com/docs/common/material_common_sprite667_gm3_grey_medium.svg)}.docs-material .docs-icon-img-cont
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 61 6e 61 6c 79 74 69 63 73 2d 73 69 64 65 62 61 72 2d 74 61 62 2d 73 65 6c 65 63 74 65 64 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 3a 62 65 66 6f 72 65 2c 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 64 6f 63 73 2d 73 6d 61 72 74 2d 73 75 6d 6d 61 72 79 2d 74 69 6e 74 65 64 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 3a 62 65 66 6f 72 65 2c 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 6d 61 74 65 72 69 61 6c 20 2e 6b 69 78 2d 63 61 6c 65 6e 64 61 72 2d 74 65 6d 70 6c 61 74 65 2d 64 61 74 65 2d 72 61 6e 67 65 2d 70 69 63 6b 65 72 2d 62 6c 75 65 2d 69 63 6f 6e 20 2e 64 6f 63 73 2d 69 63 6f 6e 2d 69 6d 67 3a 62 65 66 6f 72 65 2c 2e 64 6f 63 73 2d 67 6d 20 2e 64 6f 63 73 2d 6d 61 Data Ascii: -material .docs-analytics-sidebar-tab-selected .docs-icon-img:before,.docs-gm .docs-material .docs-smart-summary-tinted.docs-icon-img:before,.docs-gm .docs-material .kix-calendar-template-date-range-picker-blue-icon .docs-icon-img:before,.docs-gm .docs-ma

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49757	172.217.2.206	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:11 UTC	978	OUT	GET /static/drawings/client/js/2099830619-preview_core.js HTTP/1.1 Host: docs.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 1P_JAR=2024-04-26-13; NID=513=Hd7lUxgTF9XSdNjzXGaez1z9qfPxsKWTEpeSFGxE3rVtV-36CR2JAGbH1lf1Qqp-9_yJUfy0OxWdKrzQfQbSrrCzShYktUAkpoSCBmew7oUmSLTQfrJr9Cvm7FeNCvu4Yrg1w-WDCoISQozQ3ldkeIMC1W7iyg4pLYvGHUYSApQ
2024-04-26 13:23:11 UTC	787	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/docs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs" Report-To: {"group":"docs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs"}]} Content-Length: 93577 Date: Fri, 26 Apr 2024 13:23:11 GMT Expires: Sat, 26 Apr 2025 13:23:11 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 18 Apr 2024 13:21:44 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:11 UTC	468	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 28 5b 5d 29 3b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 Data Ascii: function _F_toggles_initialize(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]}_F_toggles_initialize([]);/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-Li
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 2c 70 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 6d 61 3d 22 67 73 73 6d 6f 64 75 6c 65 73 65 74 70 72 6f 74 6f 22 2c 6e 61 3d 22 69 6e 63 69 64 65 6e 74 22 2c 6f 61 3d 22 6e 6f 6e 63 65 22 2c 71 3d 22 6e 75 6d 62 65 72 22 2c 72 3d 22 6f 62 6a 65 63 74 22 2c 70 61 3d 22 70 72 65 72 65 6e 64 65 72 22 2c 71 61 3d 22 73 65 76 65 72 69 74 79 2d 75 6e 70 72 65 66 69 78 65 64 22 2c 75 3d 22 73 74 72 69 6e 67 22 2c 72 61 3d 22 73 75 63 63 65 73 73 22 3b 66 75 6e 63 74 69 6f 6e 20 76 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 61 5d 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e Data Ascii: ,p="function",ma="gssmodulesetproto",na="incident",oa="nonce",q="number",r="object",pa="prerender",qa="severity-unprefixed",u="string",ra="success";function v(){return function(){}}function sa(a){return function(){return this[a]}}function ta(a){return fun
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 73 61 28 22 67 22 29 3b 76 61 72 20 65 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2b 22 5f 22 2c 66 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 78 28 22 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 61 3d 53 79 6d 62 6f 6c 28 22 63 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 41 72 72 61 79 20 49 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 41 72 72 61 79 20 55 69 6e 74 38 43 6c 61 6d 70 65 64 41 72 72 61 79 20 49 6e 74 31 36 41 72 72 61 79 20 55 69 6e 74 31 36 41 72 72 61 79 20 49 6e 74 33 32 41 72 72 61 79 20 55 69 6e 74 33 32 41 72 Data Ascii: ;d.prototype.toString=sa("g");var e="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",f=0;return c});x("Symbol.iterator",function(a){if(a)return a;a=Symbol("c");for(var c="Array Int8Array Uint8Array Uint8ClampedArray Int16Array Uint16Array Int32Array Uint32Ar
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 75 63 74 6f 72 3d 61 3b 69 66 28 48 61 29 48 61 28 61 2c 63 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 64 20 69 6e 20 63 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 64 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 65 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 63 2c 64 29 3b 65 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 64 2c 65 29 7d 65 6c 73 65 20 61 5b 64 5d 3d 63 5b 64 5d 3b 61 2e 52 3d 63 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 63 2c 64 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 66 60 22 2b 64 29 3b 69 66 28 Data Ascii: uctor=a;if(Ha)Ha(a,c);else for(var d in c)if("prototype"!=d)if(Object.defineProperties){var e=Object.getOwnPropertyDescriptor(c,d);e&&Object.defineProperty(a,d,e)}else a[d]=c[d];a.R=c.prototype}function Ia(a,c,d){if(null==a)throw new TypeError("f`"+d);if(
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 66 28 6c 29 7b 69 66 28 21 41 28 6c 2c 68 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 64 3b 78 61 28 6c 2c 68 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 64 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 66 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 Data Ascii: f(l){if(!A(l,h)){var m=new d;xa(l,h,{value:m})}}function g(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof d)return n;Object.isExtensible(n)&&f(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.sea
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 43 2e 6b 65 79 21 3d 3d 43 2e 6b 65 79 7c 7c 6c 3d 3d 3d 43 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 4a 3a 43 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 0a 4a 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 63 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 79 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c Data Ascii: n[k];if(l!==l&&C.key!==C.key\|\|l===C.key)return{id:m,list:n,index:k,J:C}}return{id:m,list:n,index:-1,J:void 0}}function f(k){this[0]={};this[1]=c();this.size=0;if(k){k=y(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}if(function(){if(!a\|\|
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 29 7b 72 65 74 75 72 6e 28 6b 3d 65 28 74 68 69 73 2c 6b 29 2e 4a 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 6b 65 79 7d 29 7d 3b 66 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 Data Ascii: ){return(k=e(this,k).J)&&k.value};f.prototype.entries=function(){return d(this,function(k){return[k.key,k.value]})};f.prototype.keys=function(){return d(this,function(k){return k.key})};f.prototype.values=function(){return d(this,function(k){return k.valu
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 3a 21 31 7d 7d 65 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 66 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 3b 72 65 74 75 72 6e 20 66 7d 78 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 78 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: :!1}}e=!0;return{done:!0,value:void 0}}};f[Symbol.iterator]=function(){return f};return f}x("Array.prototype.keys",function(a){return a?a:function(){return Ka(this,function(c){return c})}});x("Array.prototype.values",function(a){return a?a:function(){retu
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 64 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 64 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 67 2e 63 6c 65 61 72 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 68 61 73 28 64 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 2e 65 6e 74 72 69 65 73 28 29 7d Data Ascii: turn this};c.prototype.delete=function(d){d=this.g.delete(d);this.size=this.g.size;return d};c.prototype.clear=function(){this.g.clear();this.size=0};c.prototype.has=function(d){return this.g.has(d)};c.prototype.entries=function(){return this.g.entries()}
2024-04-26 13:23:11 UTC	1255	IN	Data Raw: 72 6e 20 30 3e 3d 66 7d 7d 29 3b 76 61 72 20 4c 61 3d 4c 61 7c 7c 7b 7d 2c 42 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 2c 63 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 64 3d 42 3b 61 5b 30 5d 69 6e 20 64 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 2e 65 78 65 63 53 63 72 69 70 74 7c 7c 64 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 61 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 65 3b 61 2e 6c 65 6e 67 74 68 26 26 28 65 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 76 6f 69 64 20 30 3d 3d 3d 63 3f 64 5b 65 5d 26 26 64 5b 65 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3f 64 3d 64 5b 65 5d 3a 64 3d 64 5b 65 5d 3d 7b 7d 3a 64 Data Ascii: rn 0>=f}});var La=La\|\|{},B=this\|\|self;function Ma(a,c){a=a.split(".");var d=B;a[0]in d\|\|"undefined"==typeof d.execScript\|\|d.execScript("var "+a[0]);for(var e;a.length&&(e=a.shift());)a.length\|\|void 0===c?d[e]&&d[e]!==Object.prototype[e]?d=d[e]:d=d[e]={}:d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	142.250.217.225	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:14 UTC	908	OUT	GET /drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo HTTP/1.1 Host: lh7-us.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:23:15 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v0" Expires: Sat, 27 Apr 2024 13:23:14 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 13:23:14 GMT Server: fife Content-Length: 36227 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:15 UTC	733	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 02 04 45 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF``"ExifMM*CCE"
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 47 c4 60 3f e3 eb 4b ff 00 c0 25 ff 00 1a fc d6 a7 89 b1 53 6a 36 b7 a3 7f 8f 32 fc 91 fd 59 85 fa 26 d4 95 24 ea 39 df ce a4 63 f8 2a 73 b7 fe 04 cf d8 1f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a cf fe 22 72 ec bf f0 17 ff 00 c9 1d 1f f1 29 6f bc bf f0 6c 7f f9 49 fb 01 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 e8 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f5 f8 ff 00 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 44 f5 d9 7f e0 2f ff 00 92 0f f8 94 b7 de 5f f8 36 3f fc a4 fd 80 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff Data Ascii: G`?K%Sj62Y&$9c*s\|EO_G>Ss'u/GxGo"r)olIIK~P$?:_~tGD/_6?~P$
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: cb ff 00 06 c7 ff 00 94 9f b0 1f f0 f9 4f d9 cf fe 8a 04 9f f8 21 d4 bf f9 1e 8f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 5f 8f ff 00 f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c4 4f 5d 97 fe 02 ff 00 f9 20 ff 00 89 4b 7d e5 ff 00 83 63 ff 00 ca 4f d8 0f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e2 27 ae cb ff 00 01 7f fc 90 7f c4 a5 be f2 ff 00 c1 b1 ff 00 e5 27 ec 07 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 a3 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d7 e3 ff 00 fc 3c 23 e2 37 fc fc e9 7f f8 04 3f c6 8f f8 78 47 c4 6f Data Ascii: O!\|EO__?K!4O] K}cO\|EO_G>Ss'u/GxGo?''>Ss'u/G)9@:#<#7?xGo
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 87 52 ff 00 e4 7a fc 7f ff 00 87 84 7c 46 ff 00 9f 9d 2f ff 00 00 87 f8 d1 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 22 7a ec bf f0 17 ff 00 c9 07 fc 4a 5b ef 2f fc 1b 1f fe 52 7e c0 7f c3 e5 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a 3f e1 f2 9f b3 9f fd 14 09 3f f0 43 a9 7f f2 3d 7e 3f ff 00 c3 c2 3e 23 7f cf ce 97 ff 00 80 43 fc 68 ff 00 87 84 7c 46 ff 00 9f 9d 2f ff 00 00 87 f8 d1 ff 00 11 3d 76 5f f8 0b ff 00 e4 83 fe 25 2d f7 97 fe 0d 8f ff 00 29 3f 60 3f e1 f2 9f b3 9f fd 14 09 3f f0 43 a9 7f f2 3d 1f f0 f9 4f d9 cf fe 8a 04 9f f8 21 d4 bf f9 1e bf 1f ff 00 e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c3 c2 3e 23 7f cf ce 97 ff 00 80 43 fc 68 ff 00 88 9e bb 2f fc 05 ff 00 f2 41 ff 00 12 96 fb cb ff 00 06 c7 ff 00 94 9f b0 1f f0 f9 4f d9 cf Data Ascii: Rz\|F/?:_"zJ[/R~?g?(Rz??C=~?>#Ch\|F/=v_%-)?`??C=O!K!4>#Ch/AO
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: ff 00 80 bf fe 48 3f e2 52 df 79 7f e0 d8 ff 00 f2 93 f6 03 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d1 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 eb f1 ff 00 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 3c 23 e2 37 fc fc e9 7f f8 04 3f c6 8f f8 89 eb b2 ff 00 c0 5f ff 00 24 1f f1 29 6f bc bf f0 6c 7f f9 49 fb 01 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 e8 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f5 f8 ff 00 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 44 f5 d9 7f e0 2f ff 00 92 0f f8 94 b7 de 5f f8 36 3f fc a4 fd 80 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f4 7f c3 e5 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a fc 7f ff 00 87 84 7c 46 ff 00 Data Ascii: H?Ry)9@:#IK~tG<#7?_$)olIIK~P$?:_~tGD/_6?~P$?g?(Rz\|F
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 5f 8f ff 00 f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c4 4f 5d 97 fe 02 ff 00 f9 20 ff 00 89 4b 7d e5 ff 00 83 63 ff 00 ca 4f d8 0f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e2 27 ae cb ff 00 01 7f fc 90 7f c4 a5 be f2 ff 00 c1 b1 ff 00 e5 27 ec 07 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 a3 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d7 e3 ff 00 fc 3c 23 e2 37 fc fc e9 7f f8 04 3f c6 8f f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f1 13 d7 65 ff 00 80 bf fe 48 3f e2 52 df 79 7f e0 d8 ff 00 Data Ascii: EO__?K!4O] K}cO\|EO_G>Ss'u/GxGo?''>Ss'u/G)9@:#<#7?xGoeH?Ry
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e6 8e 91 ac dc 68 5a ad bd e5 ac cd 05 d5 a4 8b 34 52 29 c3 46 ea 41 04 7d 08 af da ff 00 f8 20 ff 00 8b 5f c5 3f b2 46 bb 1a e5 6c b4 ff 00 15 5e 43 65 1e 7f d5 42 f0 db ce 14 7f c0 a5 6f ce bf 0f fc ca fd a5 ff 00 83 79 4f fc 61 e7 88 7f ec 69 9b ff 00 48 ac ab f4 df 0c 65 25 98 ca 3d 39 59 fc a3 f4 b6 a1 4d f0 b5 2a d6 f7 bd a4 75 f9 3f eb e6 7d f3 45 14 57 ef 67 f9 c2 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 Data Ascii: FQQoeeXFQQoeeXFQQoeeXFQQoeeXFQQhZ4R)FA} _?Fl^CeBoyOaiHe%=9YM*u?}EWgQEQEQEQEQEQEQE
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 9e e2 8f 88 1f 00 fc 79 f0 9f 49 8b 50 f1 57 82 3c 5d e1 9b 19 a5 16 f1 5c ea ba 35 cd 94 32 4a 55 98 20 69 11 54 b1 55 62 14 1c e1 58 f6 35 fa 65 ff 00 04 0b fd a1 fe 1e fc 23 fd 95 7c 51 63 e2 df 1a 78 47 c3 7a 84 de 2c 9e 78 ad f5 5d 5e de ce 59 22 36 76 4b bc 2c 8e ac 54 b2 b8 07 18 ca 91 d8 d2 ff 00 c1 7d 7f 68 8f 87 bf 17 3f 65 5f 0b d8 f8 47 c6 9e 11 f1 25 fc 3e 2c b7 b8 96 df 4a d5 ad ef 26 8e 21 67 78 a5 ca c6 ec c1 43 3a 8c e3 19 65 1d c5 1f ea 76 13 fb 1f fb 47 da be 7e 5b db 4f bb b8 ff 00 e2 3b 67 9f eb e7 fa ad f5 38 fb 1f 6d ec f9 ed 2b f2 f7 ed e6 7e 4e f9 bf 4a 3c df a5 41 be 8d f5 f9 cf 29 fd 4d cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 67 d2 b7 3c 03 f0 e3 c4 9f 15 b5 99 34 ef 0b f8 7b 5c f1 2e a1 14 26 e1 ed 74 ab 09 6f 26 48 83 Data Ascii: yIPW<]\52JU iTUbX5e#\|QcxGz,x]^Y"6vK,T}h?e_G%>,J&!gxC:evG~[O;g8m+~NJ<A)MO(~7g<4{\.&to&H
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 8d f5 f9 e7 29 fd 3d cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 ce 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 2b Data Ascii: )=O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49761	142.250.217.225	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:14 UTC	908	OUT	GET /drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs HTTP/1.1 Host: lh7-us.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://docs.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:23:14 UTC	521	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v0" Expires: Sat, 27 Apr 2024 13:23:14 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 13:23:14 GMT Server: fife Content-Length: 21782 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:14 UTC	734	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 01 ed 9d 07 78 5b e5 d9 fe 5f 46 0b 65 94 99 58 db a1 f0 f5 fb ca 47 07 5d fc db d2 c1 28 7b 67 da ce 8e 87 b2 09 59 b6 2c 07 b7 a4 74 00 a5 b4 50 a0 14 0a 65 97 36 50 92 78 3b 8b 6c c7 b6 86 57 e2 ec 38 de 4e bc b2 63 df ff ef 3d b2 a8 e3 d8 f1 92 ac 73 74 ee 5c 97 2e 4d 4b ef b9 73 f4 fc f4 cc 57 08 fe a3 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 Data Ascii: PNGIHDR6 IDATxx[_FeXG]({gY,tPe6Px;lW8Nc=st\.MKsWTP@TP@TP@TP@TP@TP@TP@TP@TP
2024-04-26 13:23:14 UTC	1255	IN	Data Raw: f6 14 5a 53 30 d5 9a 88 ef 09 21 2e e4 7f 22 15 a0 02 54 80 0a 0c b1 02 17 09 71 bd 35 19 bf 1a e1 c0 c7 c3 a3 b2 8e f9 c2 53 03 f4 34 7a 82 4c c0 00 e2 87 49 47 f2 5d 02 65 c6 f6 ea c8 27 f1 be d5 89 f9 42 88 61 43 2c 1f 3f 8e 0a 50 01 2a a0 3f 05 ac c9 88 b2 25 9e c8 34 4e 2d a8 50 f2 1a d1 12 1a 01 06 87 1f 28 01 07 88 1f 24 32 b4 e5 0b 71 19 e2 dd ed e6 f9 75 7b 6d 29 f8 b7 69 cc 87 3f d2 df ff 28 8f 98 0a 50 01 2a 10 24 05 22 1d 30 46 3a 70 9b cd 81 d7 22 c6 65 f4 bd 82 ca 0f 81 c1 5c 07 13 20 67 e5 4b 8a 60 9c 5e 8c 88 49 1b 60 76 e2 69 b3 03 df 32 a5 e2 da 20 c9 ca b7 a5 02 54 80 0a 84 ad 02 17 ca ea a5 c8 44 2c 34 4e c9 2b 89 88 ca ec b9 57 63 30 80 e8 ed 6f 87 0c 20 9d 3c 13 7f be 24 36 1f e6 05 87 37 c8 92 60 53 12 e8 99 84 ed a9 ce 03 a3 02 54 Data Ascii: ZS0!."Tq5S4zLIG]e'BaC,?P?%4N-P($2qu{m)i?(P$"0F:p"e\ gK`^I`vi2 TD,4N+Wc0o <$67`ST
2024-04-26 13:23:14 UTC	1255	IN	Data Raw: 8e 48 c6 1c cb ec 8a dc 88 a8 ac d3 be 84 38 c3 53 3e 8f 2b a7 7f bd 2b 04 48 ff 01 e2 0f 73 7d 3e 29 b8 f0 88 d5 89 0f ac c9 98 61 7d f5 83 eb fd e7 29 af a9 00 15 50 91 02 91 49 98 66 9b d7 b0 ce 1c eb d9 65 88 ca 82 41 4f fd 1a 81 f0 36 ba 7b 0f 02 64 e0 00 f1 83 c4 9f 2f 91 5b f4 2e 6a 2e 89 74 e2 63 4b 32 1e 55 d1 57 87 4b a1 02 fa 53 c0 94 8a 4b 64 77 b8 69 66 c5 bf 0d e3 d7 1d d1 f4 d4 db ee 8c b7 1a 1e 23 40 02 00 90 ce 21 2e 5f 7f 89 dc 59 d1 34 7b 77 bd 65 09 5e b4 3a 71 bd dc 95 52 7f df 60 1e 31 15 18 7a 05 ae b5 26 e1 c7 91 0e a4 18 26 6d da a3 84 a7 e8 69 f4 2f 2c d5 1f 30 11 20 01 06 48 17 98 c8 7c 49 bc 0b e6 f9 f5 5b 2d 29 98 65 4a c6 0f d9 5f 32 f4 46 85 9f 18 e6 0a 5c 33 1f ff 13 e9 c0 2f 6d f3 1b b3 0d 31 6b 8e f8 4a 6e 99 d7 18 50 5e Data Ascii: H8S>++Hs}>)a})PIfeAO6{d/[.j.tcK2UWKSKdwif#@!._Y4{we^:qR`1z&&mi/,0 H\|I[-)eJ_2F\3/m1kJnP^
2024-04-26 13:23:14 UTC	1255	IN	Data Raw: c7 15 88 1c dc 6b 4c c6 4f fa 62 73 f8 9a 30 51 c0 96 8c 07 23 a2 73 4f 10 1e 84 47 8f f0 20 40 08 10 3f 28 ce 75 2d c7 a3 cc dc 51 cd 06 c4 30 81 43 1f 0e c3 62 9c b8 a1 c6 37 7e 84 06 f4 9c 06 d4 5f 8d a4 d7 6b 86 b0 08 91 73 c1 c3 ff 9c bd 08 e6 b9 95 a5 42 88 2b fa 60 7f f8 12 2d 2b 60 79 a2 21 87 39 0f 82 b3 4f e0 24 40 08 10 3f 24 7a bb b6 17 c9 f1 f1 9f 6a d9 36 72 ed bd 28 60 73 e0 95 3e 19 0e bd fe e2 e6 71 9f 39 71 80 00 21 40 7a 03 c7 19 cf bb 61 75 e0 e9 5e cc 10 9f d6 a2 02 96 44 dc 63 98 b0 ae 91 79 0f 7a 1f 7d fe 11 41 80 10 20 67 00 c2 3f ea a4 a7 6b 2f 8c b3 76 57 99 93 58 99 a5 45 46 f4 b8 e6 61 a9 b8 cc 32 bf 39 97 f0 20 3c fa 0c 0f e9 8d 11 20 04 48 bf 00 d2 d1 23 92 82 7f 8e 48 c5 c5 3d 1a 24 3e a1 2d 05 e4 fe c8 84 07 e1 d1 2f 78 10 Data Ascii: kLObs0Q#sOG @?(u-Q0Cb7~_ksB+`-+`y!9O$@?$zj6r(`s>q9q!@zau^Dcyz}A g?k/vWXEFa29 < H#H=$>-/x
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 55 c8 2a 6c 82 e7 20 b0 eb 10 50 5e 07 94 d5 00 a5 d5 40 49 55 3b bc 15 a7 e1 39 70 f6 a5 60 df 69 d4 37 b7 a3 ba b1 e7 4b 4d 63 3b ea 9a db d1 d0 02 1c 3a 02 1c 3e 0a 34 1d 07 5a 4f 02 87 8e 01 25 07 4f 61 6b 69 2b de cd ad c3 b3 ef ec c7 82 e7 77 62 cc 92 52 88 29 1e 88 d1 85 10 13 5c b8 36 be 23 0c 36 54 46 8d 9f 33 74 5e 10 01 42 80 10 20 ea 03 88 cc 5d 5c 21 3d 8d 7b 33 20 be b1 1c df b2 af 45 ea ab 45 f8 7b da 7e ac d8 d4 80 f5 a5 47 50 54 d9 8e 1d b5 3e 50 48 8f a2 27 50 74 07 0f f9 98 04 88 84 c3 b9 00 d2 db 73 75 cd 40 7d 8b 0f 2c 87 8f 01 fb ea db e0 dd 73 0c ab 0b 1a f1 4e 7a 35 9c af ec 81 88 71 43 dc 97 af c0 24 42 e6 50 ec f4 4e c2 c6 3b 21 40 08 10 02 44 1d 00 b9 36 2a 07 5f 90 49 ee 07 33 21 6e 5e 0e 71 57 26 7e f5 e6 76 64 6e 3b 8c bc 9d Data Ascii: Ul P^@IU;9p`i7KMc;:>4ZO%Oaki+wbR)\6#6TF3t^B ]\!={3 EE{~GPT>PH'Ptsu@},sNz5qC$BPN;!@D6_I3!n^qW&~vdn;
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 10 65 1f f1 d1 d9 f8 5b da 01 94 28 a5 b9 ea ae b0 ea 0c 8a 9e 6e 87 1b 40 24 44 64 cf 88 4c b0 af 2f 6a c1 8d 73 8a 20 26 b9 86 e6 97 b8 5e 3d 1e 02 84 00 21 40 7a 06 88 12 b2 7a 30 03 3f 9e be 16 2b b7 d4 a3 ac 16 83 de 87 a3 27 83 3e d4 8f 87 23 40 fc 79 11 09 11 cf 9e 63 88 fd 6d 39 c4 d8 42 18 b9 89 55 70 40 4a 80 10 20 04 48 0f 00 91 c9 f2 bb d3 71 ef e3 1b 90 eb 6e 52 f6 e6 18 6a 23 1f cc cf 0b 67 80 48 90 48 88 ec ae 39 89 f8 67 76 42 3c 52 40 88 04 c3 4b 22 40 08 10 02 e4 6c 80 44 48 78 dc 95 0e 7b ea 56 6c da 7e 54 33 bd 1d fd 01 4e b8 03 44 42 44 8e 42 d9 5f 7f 1a 4b df dc af 4c f7 0d 7a 4e 20 18 46 5a cd ef 49 80 10 20 04 c8 d9 00 11 3f 4f 47 ea 1f 3d ca be e3 72 bf f1 fe 18 66 ad bc 56 0f 00 a9 91 10 69 05 fe b5 b6 1e 22 d6 83 08 ee 7c 18 d8 Data Ascii: e[(n@$DdL/js &^=!@zz0?+'>#@ycm9BUp@J HqnRj#gHH9gvB<R@K"@lDHx{Vl~T3NDBDB_KLzN FZI ?OG=rfVi"\|
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 5f bf 62 af 8a f7 e0 0b b1 6e 88 a9 6e 88 e8 42 88 fb f2 21 26 78 f0 6e 76 2d ca 0e 1c 47 e5 e1 36 25 cc 55 1b e0 bc 89 32 9e a4 b9 63 30 22 67 5b f5 eb ff 2c a8 a0 21 40 34 00 8c ae 4b 24 40 fa 05 10 f9 eb 7b 42 ca 66 65 1f 73 99 4c 56 2b 18 7a 5b 97 04 87 2c 39 ce db 7d 02 1f ad a9 c2 a2 3f 7a 20 1b 21 e5 18 96 f3 c7 64 43 ee 61 d2 23 2c a2 bb 79 6e 00 00 e9 6a 8c 0c 76 0f ae 8c 73 43 3c 5a a0 0c 2d 4c 7a 75 0f d6 16 34 2a 79 93 c3 47 02 93 80 97 9e c7 a1 a3 9c aa db 55 7b 55 dc 27 40 ba 5a 67 0d dc 27 40 fa 6c 28 af 1c 97 8d af c5 e4 e2 e3 f5 75 9a ae ba 92 b9 0d 39 e4 f1 8d e5 fb 30 7d 69 1e c4 bd 19 10 0f 64 e0 aa a8 1c c8 f0 5c bf c0 e1 87 49 00 00 e2 37 62 26 bb 07 d7 c4 7b 20 62 5c 10 d1 6e 2c 78 61 17 3e f9 ac 1e b5 ad 40 43 eb c0 43 5b 12 1e 72 Data Ascii: _bnnB!&xnv-G6%U2c0"g[,!@4K$@{BfesLV+z[,9}?z !dCa#,ynjvsC<Z-Lzu4*yGU{U'@Zg'@l(u90}id\I7b&{ b\n,xa>@CC[r
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: e4 0c 80 c8 4d 93 66 2f cd 43 e1 be 53 50 e3 b8 76 d9 e7 b1 ae b8 05 3f 9e b9 0e 62 8c 0a 3c 0f 3f 48 08 10 02 84 00 d1 01 30 ba 1e 22 01 f2 39 40 94 cd a2 1e cb c2 2b 1f ef 55 e5 cc 2b 59 71 25 c1 96 f0 eb 7c c8 06 c7 80 74 90 fb 01 30 d8 6b 02 84 00 21 40 ba 5a 57 1d dc 27 40 3e 37 c4 72 d7 bd 9b a2 72 90 b7 e7 a4 2a 93 e7 32 ef f1 eb d7 4b 20 7e b4 02 86 50 56 5c 75 07 1b 02 84 00 21 40 74 00 8c ae 87 48 80 7c 0e 10 f9 ab 7e ee ef 5d d8 d5 a0 be d2 5d b9 7b a0 dc c8 4a fc cf f2 e0 4c d3 ed 0e 0a fd 79 8c 00 21 40 08 90 ae d6 55 07 f7 09 10 05 20 4a ef c7 d7 97 23 ab a0 49 75 43 13 8b 2b db b0 79 e7 71 fc 7c c6 5a 75 e5 3d 3a 03 86 00 21 40 08 10 1d 00 a3 eb 21 12 20 0a 40 2e 97 53 77 c7 e6 a2 b8 4a 5d 9b 45 c9 44 be ec 34 ff e5 cb 45 90 63 e5 55 95 f7 Data Ascii: Mf/CSPv?b<?H0"9@+U+Yq%\|t0k!@ZW'@>7rr*2K ~PV\u!@tH\|~]]{JLy!@U J#IuC+yq\|Zu=:!@! @.SwJ]ED4EcU
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: 3e 95 87 82 bd 27 11 6a 80 48 0f 28 7f ef 29 cc 7c 7a 1b c4 63 59 04 c8 20 c3 40 03 cd 3f a8 e1 ef 6a 9a da b1 b7 e6 24 c4 18 17 0c 7a ab c4 92 21 ac 05 f5 6b 08 10 6d 21 e9 7c d3 cc 7d 19 86 18 7d e5 40 e4 2f fd 45 cf 17 c2 b5 ef 54 c8 bd 8f a2 83 6d 58 5b d4 82 c7 16 6c c0 79 a3 b5 d5 ff 21 bd 18 7a 20 81 f3 40 24 40 f6 d7 9e c2 35 f3 4a f0 25 bd 55 62 d9 bd 30 2d 6a cc 10 42 9c af 2d 13 aa ef d5 9e 67 9d 7d f0 13 dd 01 e4 81 0c 38 5f 29 82 7b 7f e8 01 22 fb 3f 32 b6 1d c6 2d 09 6b 20 43 6b 81 0a 2d 0d d5 fb 10 20 81 05 48 45 c3 69 c4 fe ae 1c 62 b2 4b 5f a5 bc f6 22 58 13 8f 7e 22 84 38 4f df 26 59 5b 47 7f 9e 65 6e cd 3f 75 07 90 7b d2 f1 cc bb e5 ca 14 de 50 e7 3f 4a aa da f1 8f 35 d5 10 0f 65 21 42 4b f3 af 3a 37 12 8a 4f c0 2a ac c0 80 a4 f2 50 1b Data Ascii: >'jH()\|zcY @?j$z!km!\|}}@/ETmX[ly!z @$@5J%Ub0-jB-g}8_){"?2-k Ck- HEibK_"X~"8O&Y[Gen?u{P?J5e!BK:7O*P
2024-04-26 13:23:15 UTC	1255	IN	Data Raw: d4 1c a6 18 58 20 55 1e 6e c3 d3 6f ee d3 d9 7e 20 ca 18 93 57 b5 67 3a b9 62 45 81 eb 12 f1 ec 80 7a 2a 34 da 91 3e 2c 2a 07 e2 9e 4c e4 ed 3c 0e 6f 45 5b 48 3d 10 09 90 ed b5 c0 6f de de 01 f1 08 3d 10 3d 7b 20 35 8d ed 38 78 a8 0d ce 57 76 43 4c d0 d7 86 52 36 27 7e 47 73 ac 51 05 46 24 e3 b7 7a 02 88 f2 ab f9 c6 4f b1 79 fb 51 55 00 44 26 d2 97 6f aa 87 75 4c 36 ae d5 d8 b6 b6 f4 40 02 e7 81 d4 34 b5 63 7f fd 29 dc 9e 52 06 31 c5 ad 9f 0d a5 e2 5d b0 39 f1 b4 46 cd 27 97 1d 99 8c 5f 45 44 69 ef d7 ef 40 a1 a7 18 bd 1f ae c4 c7 1b 1b d4 b1 2b 61 45 1b f2 f6 9c c4 b7 46 67 e3 4a 02 24 b8 1b 36 a9 78 64 8a 04 c8 de da 93 10 71 5e 5c 1d a7 1f 80 18 e2 f2 61 4d c6 02 5a 62 8d 2a 60 4d c4 fc 88 71 da 1c a5 31 10 88 18 3b 7a 41 fe f4 e1 4e 94 d5 20 e4 21 2c Data Ascii: X Uno~ Wg:bEz4>,L<oE[H=o=={ 58xWvCLR6'~GsQF$zOyQUD&ouL6@4c)R1]9F'_EDi@+aEFgJ$6xdq^\aMZb*`Mq1;zAN !,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49763	142.250.64.193	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:15 UTC	633	OUT	GET /drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs HTTP/1.1 Host: lh7-us.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:23:15 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 21782 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 13:23:14 GMT Expires: Sat, 27 Apr 2024 13:23:14 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v0" Content-Type: image/png Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:15 UTC	726	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 01 ed 9d 07 78 5b e5 d9 fe 5f 46 0b 65 94 99 58 db a1 f0 f5 fb ca 47 07 5d fc db d2 c1 28 7b 67 da ce 8e 87 b2 09 59 b6 2c 07 b7 a4 74 00 a5 b4 50 a0 14 0a 65 97 36 50 92 78 3b 8b 6c c7 b6 86 57 e2 ec 38 de 4e bc b2 63 df ff ef 3d b2 a8 e3 d8 f1 92 ac 73 74 ee 5c 97 2e 4d 4b ef b9 73 f4 fc f4 cc 57 08 fe a3 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 Data Ascii: PNGIHDR6 IDATxx[_FeXG]({gY,tPe6Px;lW8Nc=st\.MKsWTP@TP@TP@TP@TP@TP@TP@TP@TP
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 82 cc 99 f8 f2 25 11 b3 f6 14 5a 53 30 d5 9a 88 ef 09 21 2e e4 7f 22 15 a0 02 54 80 0a 0c b1 02 17 09 71 bd 35 19 bf 1a e1 c0 c7 c3 a3 b2 8e f9 c2 53 03 f4 34 7a 82 4c c0 00 e2 87 49 47 f2 5d 02 65 c6 f6 ea c8 27 f1 be d5 89 f9 42 88 61 43 2c 1f 3f 8e 0a 50 01 2a a0 3f 05 ac c9 88 b2 25 9e c8 34 4e 2d a8 50 f2 1a d1 12 1a 01 06 87 1f 28 01 07 88 1f 24 32 b4 e5 0b 71 19 e2 dd ed e6 f9 75 7b 6d 29 f8 b7 69 cc 87 3f d2 df ff 28 8f 98 0a 50 01 2a 10 24 05 22 1d 30 46 3a 70 9b cd 81 d7 22 c6 65 f4 bd 82 ca 0f 81 c1 5c 07 13 20 67 e5 4b 8a 60 9c 5e 8c 88 49 1b 60 76 e2 69 b3 03 df 32 a5 e2 da 20 c9 ca b7 a5 02 54 80 0a 84 ad 02 17 ca ea a5 c8 44 2c 34 4e c9 2b 89 88 ca ec b9 57 63 30 80 e8 ed 6f 87 0c 20 9d 3c 13 7f be 24 36 1f e6 05 87 37 c8 92 60 53 12 e8 99 Data Ascii: %ZS0!."Tq5S4zLIG]e'BaC,?P?%4N-P($2qu{m)i?(P$"0F:p"e\ gK`^I`vi2 TD,4N+Wc0o <$67`S
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 54 80 0a f8 15 90 5b a1 8e 48 c6 1c cb ec 8a dc 88 a8 ac d3 be 84 38 c3 53 3e 8f 2b a7 7f bd 2b 04 48 ff 01 e2 0f 73 7d 3e 29 b8 f0 88 d5 89 0f ac c9 98 61 7d f5 83 eb fd e7 29 af a9 00 15 50 91 02 91 49 98 66 9b d7 b0 ce 1c eb d9 65 88 ca 82 41 4f fd 1a 81 f0 36 ba 7b 0f 02 64 e0 00 f1 83 c4 9f 2f 91 5b f4 2e 6a 2e 89 74 e2 63 4b 32 1e 55 d1 57 87 4b a1 02 fa 53 c0 94 8a 4b 64 77 b8 69 66 c5 bf 0d e3 d7 1d d1 f4 d4 db ee 8c b7 1a 1e 23 40 02 00 90 ce 21 2e 5f 7f 89 dc 59 d1 34 7b 77 bd 65 09 5e b4 3a 71 bd dc 95 52 7f df 60 1e 31 15 18 7a 05 ae b5 26 e1 c7 91 0e a4 18 26 6d da a3 84 a7 e8 69 f4 2f 2c d5 1f 30 11 20 01 06 48 17 98 c8 7c 49 bc 0b e6 f9 f5 5b 2d 29 98 65 4a c6 0f d9 5f 32 f4 46 85 9f 18 e6 0a 5c 33 1f ff 13 e9 c0 2f 6d f3 1b b3 0d 31 6b 8e Data Ascii: T[H8S>++Hs}>)a})PIfeAO6{d/[.j.tcK2UWKSKdwif#@!._Y4{we^:qR`1z&&mi/,0 H\|I[-)eJ_2F\3/m1k
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 0f 02 84 f0 e8 09 1e fe c7 15 88 1c dc 6b 4c c6 4f fa 62 73 f8 9a 30 51 c0 96 8c 07 23 a2 73 4f 10 1e 84 47 8f f0 20 40 08 10 3f 28 ce 75 2d c7 a3 cc dc 51 cd 06 c4 30 81 43 1f 0e c3 62 9c b8 a1 c6 37 7e 84 06 f4 9c 06 d4 5f 8d a4 d7 6b 86 b0 08 91 73 c1 c3 ff 9c bd 08 e6 b9 95 a5 42 88 2b fa 60 7f f8 12 2d 2b 60 79 a2 21 87 39 0f 82 b3 4f e0 24 40 08 10 3f 24 7a bb b6 17 c9 f1 f1 9f 6a d9 36 72 ed bd 28 60 73 e0 95 3e 19 0e bd fe e2 e6 71 9f 39 71 80 00 21 40 7a 03 c7 19 cf bb 61 75 e0 e9 5e cc 10 9f d6 a2 02 96 44 dc 63 98 b0 ae 91 79 0f 7a 1f 7d fe 11 41 80 10 20 67 00 c2 3f ea a4 a7 6b 2f 8c b3 76 57 99 93 58 99 a5 45 46 f4 b8 e6 61 a9 b8 cc 32 bf 39 97 f0 20 3c fa 0c 0f e9 8d 11 20 04 48 bf 00 d2 d1 23 92 82 7f 8e 48 c5 c5 3d 1a 24 3e a1 2d 05 e4 fe Data Ascii: kLObs0Q#sOG @?(u-Q0Cb7~_ksB+`-+`y!9O$@?$zj6r(`s>q9q!@zau^Dcyz}A g?k/vWXEFa29 < H#H=$>-
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 16 e0 37 6f 96 e1 c3 d5 55 c8 2a 6c 82 e7 20 b0 eb 10 50 5e 07 94 d5 00 a5 d5 40 49 55 3b bc 15 a7 e1 39 70 f6 a5 60 df 69 d4 37 b7 a3 ba b1 e7 4b 4d 63 3b ea 9a db d1 d0 02 1c 3a 02 1c 3e 0a 34 1d 07 5a 4f 02 87 8e 01 25 07 4f 61 6b 69 2b de cd ad c3 b3 ef ec c7 82 e7 77 62 cc 92 52 88 29 1e 88 d1 85 10 13 5c b8 36 be 23 0c 36 54 46 8d 9f 33 74 5e 10 01 42 80 10 20 ea 03 88 cc 5d 5c 21 3d 8d 7b 33 20 be b1 1c df b2 af 45 ea ab 45 f8 7b da 7e ac d8 d4 80 f5 a5 47 50 54 d9 8e 1d b5 3e 50 48 8f a2 27 50 74 07 0f f9 98 04 88 84 c3 b9 00 d2 db 73 75 cd 40 7d 8b 0f 2c 87 8f 01 fb ea db e0 dd 73 0c ab 0b 1a f1 4e 7a 35 9c af ec 81 88 71 43 dc 97 af c0 24 42 e6 50 ec f4 4e c2 c6 3b 21 40 08 10 02 44 1d 00 b9 36 2a 07 5f 90 49 ee 07 33 21 6e 5e 0e 71 57 26 7e f5 Data Ascii: 7oUl P^@IU;9p`i7KMc;:>4ZO%Oaki+wbR)\6#6TF3t^B ]\!={3 EE{~GPT>PH'Ptsu@},sNz5qC$BPN;!@D6_I3!n^qW&~
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 5a 04 08 01 42 80 f4 0e 10 65 1f f1 d1 d9 f8 5b da 01 94 28 a5 b9 ea ae b0 ea 0c 8a 9e 6e 87 1b 40 24 44 64 cf 88 4c b0 af 2f 6a c1 8d 73 8a 20 26 b9 86 e6 97 b8 5e 3d 1e 02 84 00 21 40 7a 06 88 12 b2 7a 30 03 3f 9e be 16 2b b7 d4 a3 ac 16 83 de 87 a3 27 83 3e d4 8f 87 23 40 fc 79 11 09 11 cf 9e 63 88 fd 6d 39 c4 d8 42 18 b9 89 55 70 40 4a 80 10 20 04 48 0f 00 91 c9 f2 bb d3 71 ef e3 1b 90 eb 6e 52 f6 e6 18 6a 23 1f cc cf 0b 67 80 48 90 48 88 ec ae 39 89 f8 67 76 42 3c 52 40 88 04 c3 4b 22 40 08 10 02 e4 6c 80 44 48 78 dc 95 0e 7b ea 56 6c da 7e 54 33 bd 1d fd 01 4e b8 03 44 42 44 8e 42 d9 5f 7f 1a 4b df dc af 4c f7 0d 7a 4e 20 18 46 5a cd ef 49 80 10 20 04 c8 d9 00 11 3f 4f 47 ea 1f 3d ca be e3 72 bf f1 fe 18 66 ad bc 56 0f 00 a9 91 10 69 05 fe b5 b6 1e Data Ascii: ZBe[(n@$DdL/js &^=!@zz0?+'>#@ycm9BUp@J HqnRj#gHH9gvB<R@K"@lDHx{Vl~T3NDBDB_KLzN FZI ?OG=rfVi
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: f4 10 c7 65 c0 38 bd b8 5f bf 62 af 8a f7 e0 0b b1 6e 88 a9 6e 88 e8 42 88 fb f2 21 26 78 f0 6e 76 2d ca 0e 1c 47 e5 e1 36 25 cc 55 1b e0 bc 89 32 9e a4 b9 63 30 22 67 5b f5 eb ff 2c a8 a0 21 40 34 00 8c ae 4b 24 40 fa 05 10 f9 eb 7b 42 ca 66 65 1f 73 99 4c 56 2b 18 7a 5b 97 04 87 2c 39 ce db 7d 02 1f ad a9 c2 a2 3f 7a 20 1b 21 e5 18 96 f3 c7 64 43 ee 61 d2 23 2c a2 bb 79 6e 00 00 e9 6a 8c 0c 76 0f ae 8c 73 43 3c 5a a0 0c 2d 4c 7a 75 0f d6 16 34 2a 79 93 c3 47 02 93 80 97 9e c7 a1 a3 9c aa db 55 7b 55 dc 27 40 ba 5a 67 0d dc 27 40 fa 6c 28 af 1c 97 8d af c5 e4 e2 e3 f5 75 9a ae ba 92 b9 0d 39 e4 f1 8d e5 fb 30 7d 69 1e c4 bd 19 10 0f 64 e0 aa a8 1c c8 f0 5c bf c0 e1 87 49 00 00 e2 37 62 26 bb 07 d7 c4 7b 20 62 5c 10 d1 6e 2c 78 61 17 3e f9 ac 1e b5 ad 40 Data Ascii: e8_bnnB!&xnv-G6%U2c0"g[,!@4K$@{BfesLV+z[,9}?z !dCa#,ynjvsC<Z-Lzu4*yGU{U'@Zg'@l(u90}id\I7b&{ b\n,xa>@
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 02 a4 ab 75 d5 c1 7d 02 e4 0c 80 c8 4d 93 66 2f cd 43 e1 be 53 50 e3 b8 76 d9 e7 b1 ae b8 05 3f 9e b9 0e 62 8c 0a 3c 0f 3f 48 08 10 02 84 00 d1 01 30 ba 1e 22 01 f2 39 40 94 cd a2 1e cb c2 2b 1f ef 55 e5 cc 2b 59 71 25 c1 96 f0 eb 7c c8 06 c7 80 74 90 fb 01 30 d8 6b 02 84 00 21 40 ba 5a 57 1d dc 27 40 3e 37 c4 72 d7 bd 9b a2 72 90 b7 e7 a4 2a 93 e7 32 ef f1 eb d7 4b 20 7e b4 02 86 50 56 5c 75 07 1b 02 84 00 21 40 74 00 8c ae 87 48 80 7c 0e 10 f9 ab 7e ee ef 5d d8 d5 a0 be d2 5d b9 7b a0 dc c8 4a fc cf f2 e0 4c d3 ed 0e 0a fd 79 8c 00 21 40 08 90 ae d6 55 07 f7 09 10 05 20 4a ef c7 d7 97 23 ab a0 49 75 43 13 8b 2b db b0 79 e7 71 fc 7c c6 5a 75 e5 3d 3a 03 86 00 21 40 08 10 1d 00 a3 eb 21 12 20 0a 40 2e 97 53 77 c7 e6 a2 b8 4a 5d 9b 45 c9 44 be ec 34 ff e5 Data Ascii: u}Mf/CSPv?b<?H0"9@+U+Yq%\|t0k!@ZW'@>7rr*2K ~PV\u!@tH\|~]]{JLy!@U J#IuC+yq\|Zu=:!@! @.SwJ]ED4
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: bd 46 6f 00 91 03 14 a7 3e 95 87 82 bd 27 11 6a 80 48 0f 28 7f ef 29 cc 7c 7a 1b c4 63 59 04 c8 20 c3 40 03 cd 3f a8 e1 ef 6a 9a da b1 b7 e6 24 c4 18 17 0c 7a ab c4 92 21 ac 05 f5 6b 08 10 6d 21 e9 7c d3 cc 7d 19 86 18 7d e5 40 e4 2f fd 45 cf 17 c2 b5 ef 54 c8 bd 8f a2 83 6d 58 5b d4 82 c7 16 6c c0 79 a3 b5 d5 ff 21 bd 18 7a 20 81 f3 40 24 40 f6 d7 9e c2 35 f3 4a f0 25 bd 55 62 d9 bd 30 2d 6a cc 10 42 9c af 2d 13 aa ef d5 9e 67 9d 7d f0 13 dd 01 e4 81 0c 38 5f 29 82 7b 7f e8 01 22 fb 3f 32 b6 1d c6 2d 09 6b 20 43 6b 81 0a 2d 0d d5 fb 10 20 81 05 48 45 c3 69 c4 fe ae 1c 62 b2 4b 5f a5 bc f6 22 58 13 8f 7e 22 84 38 4f df 26 59 5b 47 7f 9e 65 6e cd 3f 75 07 90 7b d2 f1 cc bb e5 ca 14 de 50 e7 3f 4a aa da f1 8f 35 d5 10 0f 65 21 42 4b f3 af 3a 37 12 8a 4f c0 Data Ascii: Fo>'jH()\|zcY @?j$z!km!\|}}@/ETmX[ly!z @$@5J%Ub0-jB-g}8_){"?2-k Ck- HEibK_"X~"8O&Y[Gen?u{P?J5e!BK:7O
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 92 9e 2b 80 78 44 7b e5 d4 1c a6 18 58 20 55 1e 6e c3 d3 6f ee d3 d9 7e 20 ca 18 93 57 b5 67 3a b9 62 45 81 eb 12 f1 ec 80 7a 2a 34 da 91 3e 2c 2a 07 e2 9e 4c e4 ed 3c 0e 6f 45 5b 48 3d 10 09 90 ed b5 c0 6f de de 01 f1 08 3d 10 3d 7b 20 35 8d ed 38 78 a8 0d ce 57 76 43 4c d0 d7 86 52 36 27 7e 47 73 ac 51 05 46 24 e3 b7 7a 02 88 f2 ab f9 c6 4f b1 79 fb 51 55 00 44 26 d2 97 6f aa 87 75 4c 36 ae d5 d8 b6 b6 f4 40 02 e7 81 d4 34 b5 63 7f fd 29 dc 9e 52 06 31 c5 ad 9f 0d a5 e2 5d b0 39 f1 b4 46 cd 27 97 1d 99 8c 5f 45 44 69 ef d7 ef 40 a1 a7 18 bd 1f ae c4 c7 1b 1b d4 b1 2b 61 45 1b f2 f6 9c c4 b7 46 67 e3 4a 02 24 b8 1b 36 a9 78 64 8a 04 c8 de da 93 10 71 5e 5c 1d a7 1f 80 18 e2 f2 61 4d c6 02 5a 62 8d 2a 60 4d c4 fc 88 71 da 1c a5 31 10 88 18 3b 7a 41 fe f4 Data Ascii: +xD{X Uno~ Wg:bEz4>,L<oE[H=o=={ 58xWvCLR6'~GsQF$zOyQUD&ouL6@4c)R1]9F'_EDi@+aEFgJ$6xdq^\aMZb*`Mq1;zA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49762	142.250.64.193	443	4500	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:15 UTC	633	OUT	GET /drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo HTTP/1.1 Host: lh7-us.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 13:23:16 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 36227 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 13:23:14 GMT Expires: Sat, 27 Apr 2024 13:23:14 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v0" Content-Type: image/jpeg Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:16 UTC	725	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 02 04 45 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF``"ExifMM*CCE"
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 96 3f 87 e3 53 8f f8 28 47 c4 60 3f e3 eb 4b ff 00 c0 25 ff 00 1a fc d6 a7 89 b1 53 6a 36 b7 a3 7f 8f 32 fc 91 fd 59 85 fa 26 d4 95 24 ea 39 df ce a4 63 f8 2a 73 b7 fe 04 cf d8 1f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a cf fe 22 72 ec bf f0 17 ff 00 c9 1d 1f f1 29 6f bc bf f0 6c 7f f9 49 fb 01 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 e8 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f5 f8 ff 00 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 44 f5 d9 7f e0 2f ff 00 92 0f f8 94 b7 de 5f f8 36 3f fc a4 fd 80 ff 00 87 ca 7e ce 7f f4 Data Ascii: ?S(G`?K%Sj62Y&$9c*s\|EO_G>Ss'u/GxGo"r)olIIK~P$?:_~tGD/_6?~
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 00 f2 41 ff 00 12 96 fb cb ff 00 06 c7 ff 00 94 9f b0 1f f0 f9 4f d9 cf fe 8a 04 9f f8 21 d4 bf f9 1e 8f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 5f 8f ff 00 f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c4 4f 5d 97 fe 02 ff 00 f9 20 ff 00 89 4b 7d e5 ff 00 83 63 ff 00 ca 4f d8 0f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e2 27 ae cb ff 00 01 7f fc 90 7f c4 a5 be f2 ff 00 c1 b1 ff 00 e5 27 ec 07 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 a3 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d7 e3 ff 00 fc 3c 23 e2 37 fc fc e9 7f f8 04 Data Ascii: AO!\|EO__?K!4O] K}cO\|EO_G>Ss'u/GxGo?''>Ss'u/G)9@:#<#7
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a fc 7f ff 00 87 84 7c 46 ff 00 9f 9d 2f ff 00 00 87 f8 d1 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 22 7a ec bf f0 17 ff 00 c9 07 fc 4a 5b ef 2f fc 1b 1f fe 52 7e c0 7f c3 e5 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a 3f e1 f2 9f b3 9f fd 14 09 3f f0 43 a9 7f f2 3d 7e 3f ff 00 c3 c2 3e 23 7f cf ce 97 ff 00 80 43 fc 68 ff 00 87 84 7c 46 ff 00 9f 9d 2f ff 00 00 87 f8 d1 ff 00 11 3d 76 5f f8 0b ff 00 e4 83 fe 25 2d f7 97 fe 0d 8f ff 00 29 3f 60 3f e1 f2 9f b3 9f fd 14 09 3f f0 43 a9 7f f2 3d 1f f0 f9 4f d9 cf fe 8a 04 9f f8 21 d4 bf f9 1e bf 1f ff 00 e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c3 c2 3e 23 7f cf ce 97 ff 00 80 43 fc 68 ff 00 88 9e bb 2f fc 05 ff 00 f2 41 ff 00 12 96 fb cb ff 00 06 c7 ff 00 94 Data Ascii: ?g?(Rz\|F/?:_"zJ[/R~?g?(Rz??C=~?>#Ch\|F/=v_%-)?`??C=O!K!4>#Ch/A
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 08 7f 8d 1f f1 13 d7 65 ff 00 80 bf fe 48 3f e2 52 df 79 7f e0 d8 ff 00 f2 93 f6 03 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d1 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 eb f1 ff 00 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 3c 23 e2 37 fc fc e9 7f f8 04 3f c6 8f f8 89 eb b2 ff 00 c0 5f ff 00 24 1f f1 29 6f bc bf f0 6c 7f f9 49 fb 01 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 e8 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f5 f8 ff 00 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 44 f5 d9 7f e0 2f ff 00 92 0f f8 94 b7 de 5f f8 36 3f fc a4 fd 80 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f4 7f c3 e5 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a fc 7f Data Ascii: eH?Ry)9@:#IK~tG<#7?_$)olIIK~P$?:_~tGD/_6?~P$?g?(Rz
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: d4 bf f9 1e 8f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 5f 8f ff 00 f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c4 4f 5d 97 fe 02 ff 00 f9 20 ff 00 89 4b 7d e5 ff 00 83 63 ff 00 ca 4f d8 0f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e2 27 ae cb ff 00 01 7f fc 90 7f c4 a5 be f2 ff 00 c1 b1 ff 00 e5 27 ec 07 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 a3 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d7 e3 ff 00 fc 3c 23 e2 37 fc fc e9 7f f8 04 3f c6 8f f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f1 13 d7 65 ff 00 80 bf fe 48 3f e2 Data Ascii: \|EO__?K!4O] K}cO\|EO_G>Ss'u/GxGo?''>Ss'u/G)9@:#<#7?xGoeH?
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e6 8e 91 ac dc 68 5a ad bd e5 ac cd 05 d5 a4 8b 34 52 29 c3 46 ea 41 04 7d 08 af da ff 00 f8 20 ff 00 8b 5f c5 3f b2 46 bb 1a e5 6c b4 ff 00 15 5e 43 65 1e 7f d5 42 f0 db ce 14 7f c0 a5 6f ce bf 0f fc ca fd a5 ff 00 83 79 4f fc 61 e7 88 7f ec 69 9b ff 00 48 ac ab f4 df 0c 65 25 98 ca 3d 39 59 fc a3 f4 b6 a1 4d f0 b5 2a d6 f7 bd a4 75 f9 3f eb e6 7d f3 45 14 57 ef 67 f9 c2 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 Data Ascii: eeXFQQoeeXFQQoeeXFQQoeeXFQQoeeXFQQhZ4R)FA} _?Fl^CeBoyOaiHe%=9YM*u?}EWgQEQEQEQEQE
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: 32 86 0a ca 4a 93 9c 32 9e e2 8f 88 1f 00 fc 79 f0 9f 49 8b 50 f1 57 82 3c 5d e1 9b 19 a5 16 f1 5c ea ba 35 cd 94 32 4a 55 98 20 69 11 54 b1 55 62 14 1c e1 58 f6 35 fa 65 ff 00 04 0b fd a1 fe 1e fc 23 fd 95 7c 51 63 e2 df 1a 78 47 c3 7a 84 de 2c 9e 78 ad f5 5d 5e de ce 59 22 36 76 4b bc 2c 8e ac 54 b2 b8 07 18 ca 91 d8 d2 ff 00 c1 7d 7f 68 8f 87 bf 17 3f 65 5f 0b d8 f8 47 c6 9e 11 f1 25 fc 3e 2c b7 b8 96 df 4a d5 ad ef 26 8e 21 67 78 a5 ca c6 ec c1 43 3a 8c e3 19 65 1d c5 1f ea 76 13 fb 1f fb 47 da be 7e 5b db 4f bb b8 ff 00 e2 3b 67 9f eb e7 fa ad f5 38 fb 1f 6d ec f9 ed 2b f2 f7 ed e6 7e 4e f9 bf 4a 3c df a5 41 be 8d f5 f9 cf 29 fd 4d cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 67 d2 b7 3c 03 f0 e3 c4 9f 15 b5 99 34 ef 0b f8 7b 5c f1 2e a1 14 26 e1 Data Ascii: 2J2yIPW<]\52JU iTUbX5e#\|QcxGz,x]^Y"6vK,T}h?e_G%>,J&!gxC:evG~[O;g8m+~NJ<A)MO(~7g<4{\.&
2024-04-26 13:23:16 UTC	1255	IN	Data Raw: f9 bf 4a 3c df a5 41 be 8d f5 f9 e7 29 fd 3d cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 ce 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 Data Ascii: J<A)=O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.4	49771	142.250.217.225	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:18 UTC	387	OUT	GET /drawings/AFUiIQ_VXsB-s8LtgOBeLC1lfL44D-LruraHz4l-xbvB-2a7pqISDjOot3qHG83vA4RN62hT3c6FUYdMToQC8IsqB2381mPM7dEFRltBm_KpuZg7If7SlgXeRMqLtlPiPH1kQ9ekIDTG9DD1k5s5wpFruxKX453TgljRIz3EfpsXSdo HTTP/1.1 Accept: / User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35 Safari/537.36 Host: lh7-us.googleusercontent.com Connection: Keep-Alive
2024-04-26 13:23:19 UTC	530	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 36227 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 13:23:14 GMT Expires: Sat, 27 Apr 2024 13:23:14 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v0" Content-Type: image/jpeg Vary: Origin Age: 4 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:19 UTC	725	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 01 02 04 45 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIF``"ExifMM*CCE"
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: 96 3f 87 e3 53 8f f8 28 47 c4 60 3f e3 eb 4b ff 00 c0 25 ff 00 1a fc d6 a7 89 b1 53 6a 36 b7 a3 7f 8f 32 fc 91 fd 59 85 fa 26 d4 95 24 ea 39 df ce a4 63 f8 2a 73 b7 fe 04 cf d8 1f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a cf fe 22 72 ec bf f0 17 ff 00 c9 1d 1f f1 29 6f bc bf f0 6c 7f f9 49 fb 01 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 e8 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f5 f8 ff 00 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 44 f5 d9 7f e0 2f ff 00 92 0f f8 94 b7 de 5f f8 36 3f fc a4 fd 80 ff 00 87 ca 7e ce 7f f4 Data Ascii: ?S(G`?K%Sj62Y&$9c*s\|EO_G>Ss'u/GxGo"r)olIIK~P$?:_~tGD/_6?~
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: 00 f2 41 ff 00 12 96 fb cb ff 00 06 c7 ff 00 94 9f b0 1f f0 f9 4f d9 cf fe 8a 04 9f f8 21 d4 bf f9 1e 8f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 5f 8f ff 00 f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c4 4f 5d 97 fe 02 ff 00 f9 20 ff 00 89 4b 7d e5 ff 00 83 63 ff 00 ca 4f d8 0f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e2 27 ae cb ff 00 01 7f fc 90 7f c4 a5 be f2 ff 00 c1 b1 ff 00 e5 27 ec 07 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 a3 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d7 e3 ff 00 fc 3c 23 e2 37 fc fc e9 7f f8 04 Data Ascii: AO!\|EO__?K!4O] K}cO\|EO_G>Ss'u/GxGo?''>Ss'u/G)9@:#<#7
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a fc 7f ff 00 87 84 7c 46 ff 00 9f 9d 2f ff 00 00 87 f8 d1 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 22 7a ec bf f0 17 ff 00 c9 07 fc 4a 5b ef 2f fc 1b 1f fe 52 7e c0 7f c3 e5 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a 3f e1 f2 9f b3 9f fd 14 09 3f f0 43 a9 7f f2 3d 7e 3f ff 00 c3 c2 3e 23 7f cf ce 97 ff 00 80 43 fc 68 ff 00 87 84 7c 46 ff 00 9f 9d 2f ff 00 00 87 f8 d1 ff 00 11 3d 76 5f f8 0b ff 00 e4 83 fe 25 2d f7 97 fe 0d 8f ff 00 29 3f 60 3f e1 f2 9f b3 9f fd 14 09 3f f0 43 a9 7f f2 3d 1f f0 f9 4f d9 cf fe 8a 04 9f f8 21 d4 bf f9 1e bf 1f ff 00 e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c3 c2 3e 23 7f cf ce 97 ff 00 80 43 fc 68 ff 00 88 9e bb 2f fc 05 ff 00 f2 41 ff 00 12 96 fb cb ff 00 06 c7 ff 00 94 Data Ascii: ?g?(Rz\|F/?:_"zJ[/R~?g?(Rz??C=~?>#Ch\|F/=v_%-)?`??C=O!K!4>#Ch/A
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: 08 7f 8d 1f f1 13 d7 65 ff 00 80 bf fe 48 3f e2 52 df 79 7f e0 d8 ff 00 f2 93 f6 03 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d1 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 eb f1 ff 00 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 3c 23 e2 37 fc fc e9 7f f8 04 3f c6 8f f8 89 eb b2 ff 00 c0 5f ff 00 24 1f f1 29 6f bc bf f0 6c 7f f9 49 fb 01 ff 00 0f 94 fd 9c ff 00 e8 a0 49 ff 00 82 1d 4b ff 00 91 e8 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f5 f8 ff 00 ff 00 0f 08 f8 8d ff 00 3f 3a 5f fe 01 0f f1 a3 fe 1e 11 f1 1b fe 7e 74 bf fc 02 1f e3 47 fc 44 f5 d9 7f e0 2f ff 00 92 0f f8 94 b7 de 5f f8 36 3f fc a4 fd 80 ff 00 87 ca 7e ce 7f f4 50 24 ff 00 c1 0e a5 ff 00 c8 f4 7f c3 e5 3f 67 3f fa 28 12 7f e0 87 52 ff 00 e4 7a fc 7f Data Ascii: eH?Ry)9@:#IK~tG<#7?_$)olIIK~P$?:_~tGD/_6?~P$?g?(Rz
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: d4 bf f9 1e 8f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 5f 8f ff 00 f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e1 e1 1f 11 bf e7 e7 4b ff 00 c0 21 fe 34 7f c4 4f 5d 97 fe 02 ff 00 f9 20 ff 00 89 4b 7d e5 ff 00 83 63 ff 00 ca 4f d8 0f f8 7c a7 ec e7 ff 00 45 02 4f fc 10 ea 5f fc 8f 47 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 af c7 ff 00 f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f0 f0 8f 88 df f3 f3 a5 ff 00 e0 10 ff 00 1a 3f e2 27 ae cb ff 00 01 7f fc 90 7f c4 a5 be f2 ff 00 c1 b1 ff 00 e5 27 ec 07 fc 3e 53 f6 73 ff 00 a2 81 27 fe 08 75 2f fe 47 a3 fe 1f 29 fb 39 ff 00 d1 40 93 ff 00 04 3a 97 ff 00 23 d7 e3 ff 00 fc 3c 23 e2 37 fc fc e9 7f f8 04 3f c6 8f f8 78 47 c4 6f f9 f9 d2 ff 00 f0 08 7f 8d 1f f1 13 d7 65 ff 00 80 bf fe 48 3f e2 Data Ascii: \|EO__?K!4O] K}cO\|EO_G>Ss'u/GxGo?''>Ss'u/G)9@:#<#7?xGoeH?
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e5 8d f4 6f aa fe 65 1e 65 1c 81 ce 58 df 46 fa af e6 51 e6 51 c8 1c e6 8e 91 ac dc 68 5a ad bd e5 ac cd 05 d5 a4 8b 34 52 29 c3 46 ea 41 04 7d 08 af da ff 00 f8 20 ff 00 8b 5f c5 3f b2 46 bb 1a e5 6c b4 ff 00 15 5e 43 65 1e 7f d5 42 f0 db ce 14 7f c0 a5 6f ce bf 0f fc ca fd a5 ff 00 83 79 4f fc 61 e7 88 7f ec 69 9b ff 00 48 ac ab f4 df 0c 65 25 98 ca 3d 39 59 fc a3 f4 b6 a1 4d f0 b5 2a d6 f7 bd a4 75 f9 3f eb e6 7d f3 45 14 57 ef 67 f9 c2 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 Data Ascii: eeXFQQoeeXFQQoeeXFQQoeeXFQQoeeXFQQhZ4R)FA} _?Fl^CeBoyOaiHe%=9YM*u?}EWgQEQEQEQEQE
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: 32 86 0a ca 4a 93 9c 32 9e e2 8f 88 1f 00 fc 79 f0 9f 49 8b 50 f1 57 82 3c 5d e1 9b 19 a5 16 f1 5c ea ba 35 cd 94 32 4a 55 98 20 69 11 54 b1 55 62 14 1c e1 58 f6 35 fa 65 ff 00 04 0b fd a1 fe 1e fc 23 fd 95 7c 51 63 e2 df 1a 78 47 c3 7a 84 de 2c 9e 78 ad f5 5d 5e de ce 59 22 36 76 4b bc 2c 8e ac 54 b2 b8 07 18 ca 91 d8 d2 ff 00 c1 7d 7f 68 8f 87 bf 17 3f 65 5f 0b d8 f8 47 c6 9e 11 f1 25 fc 3e 2c b7 b8 96 df 4a d5 ad ef 26 8e 21 67 78 a5 ca c6 ec c1 43 3a 8c e3 19 65 1d c5 1f ea 76 13 fb 1f fb 47 da be 7e 5b db 4f bb b8 ff 00 e2 3b 67 9f eb e7 fa ad f5 38 fb 1f 6d ec f9 ed 2b f2 f7 ed e6 7e 4e f9 bf 4a 3c df a5 41 be 8d f5 f9 cf 29 fd 4d cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 67 d2 b7 3c 03 f0 e3 c4 9f 15 b5 99 34 ef 0b f8 7b 5c f1 2e a1 14 26 e1 Data Ascii: 2J2yIPW<]\52JU iTUbX5e#\|QcxGz,x]^Y"6vK,T}h?e_G%>,J&!gxC:evG~[O;g8m+~NJ<A)MO(~7g<4{\.&
2024-04-26 13:23:19 UTC	1255	IN	Data Raw: f9 bf 4a 3c df a5 41 be 8d f5 f9 e7 29 fd 3d cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 ce 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 7d 1c a1 cc 4f e6 fd 28 f3 7e 95 06 fa 37 d1 ca 1c c4 fe 6f d2 8f 37 e9 50 6f a3 Data Ascii: J<A)=O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po}O(~7o7Po

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49772	142.250.217.225	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:19 UTC	363	OUT	GET /drawings/AFUiIQ8MRM9WEJ3IbNxbP-A6EFAove5OIO45p7cWz5_F8KVL3_ECysjZGhCu5hPbIy8CoQUWblDdNlIn_h_dppVwHto9P_HNaXSxXliaIeHW7bvAzszH2oFzIVD2iTxLEeGz0dMx8kYwhjGArg-b7Z6wGkilrPj4Zx6ZZ2eEudTZvLs HTTP/1.1 Accept: / User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35 Safari/537.36 Host: lh7-us.googleusercontent.com
2024-04-26 13:23:20 UTC	529	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 21782 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 13:23:14 GMT Expires: Sat, 27 Apr 2024 13:23:14 GMT Cache-Control: public, max-age=86400, no-transform ETag: "v0" Content-Type: image/png Vary: Origin Age: 6 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 13:23:20 UTC	726	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 01 90 08 06 00 00 00 80 bf 36 cc 00 00 20 00 49 44 41 54 78 01 ed 9d 07 78 5b e5 d9 fe 5f 46 0b 65 94 99 58 db a1 f0 f5 fb ca 47 07 5d fc db d2 c1 28 7b 67 da ce 8e 87 b2 09 59 b6 2c 07 b7 a4 74 00 a5 b4 50 a0 14 0a 65 97 36 50 92 78 3b 8b 6c c7 b6 86 57 e2 ec 38 de 4e bc b2 63 df ff ef 3d b2 a8 e3 d8 f1 92 ac 73 74 ee 5c 97 2e 4d 4b ef b9 73 f4 fc f4 cc 57 08 fe a3 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 2a 40 05 a8 00 15 a0 02 54 80 0a 50 01 Data Ascii: PNGIHDR6 IDATxx[_FeXG]({gY,tPe6Px;lW8Nc=st\.MKsWTP@TP@TP@TP@TP@TP@TP@TP@TP
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: 82 cc 99 f8 f2 25 11 b3 f6 14 5a 53 30 d5 9a 88 ef 09 21 2e e4 7f 22 15 a0 02 54 80 0a 0c b1 02 17 09 71 bd 35 19 bf 1a e1 c0 c7 c3 a3 b2 8e f9 c2 53 03 f4 34 7a 82 4c c0 00 e2 87 49 47 f2 5d 02 65 c6 f6 ea c8 27 f1 be d5 89 f9 42 88 61 43 2c 1f 3f 8e 0a 50 01 2a a0 3f 05 ac c9 88 b2 25 9e c8 34 4e 2d a8 50 f2 1a d1 12 1a 01 06 87 1f 28 01 07 88 1f 24 32 b4 e5 0b 71 19 e2 dd ed e6 f9 75 7b 6d 29 f8 b7 69 cc 87 3f d2 df ff 28 8f 98 0a 50 01 2a 10 24 05 22 1d 30 46 3a 70 9b cd 81 d7 22 c6 65 f4 bd 82 ca 0f 81 c1 5c 07 13 20 67 e5 4b 8a 60 9c 5e 8c 88 49 1b 60 76 e2 69 b3 03 df 32 a5 e2 da 20 c9 ca b7 a5 02 54 80 0a 84 ad 02 17 ca ea a5 c8 44 2c 34 4e c9 2b 89 88 ca ec b9 57 63 30 80 e8 ed 6f 87 0c 20 9d 3c 13 7f be 24 36 1f e6 05 87 37 c8 92 60 53 12 e8 99 Data Ascii: %ZS0!."Tq5S4zLIG]e'BaC,?P?%4N-P($2qu{m)i?(P$"0F:p"e\ gK`^I`vi2 TD,4N+Wc0o <$67`S
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: 54 80 0a f8 15 90 5b a1 8e 48 c6 1c cb ec 8a dc 88 a8 ac d3 be 84 38 c3 53 3e 8f 2b a7 7f bd 2b 04 48 ff 01 e2 0f 73 7d 3e 29 b8 f0 88 d5 89 0f ac c9 98 61 7d f5 83 eb fd e7 29 af a9 00 15 50 91 02 91 49 98 66 9b d7 b0 ce 1c eb d9 65 88 ca 82 41 4f fd 1a 81 f0 36 ba 7b 0f 02 64 e0 00 f1 83 c4 9f 2f 91 5b f4 2e 6a 2e 89 74 e2 63 4b 32 1e 55 d1 57 87 4b a1 02 fa 53 c0 94 8a 4b 64 77 b8 69 66 c5 bf 0d e3 d7 1d d1 f4 d4 db ee 8c b7 1a 1e 23 40 02 00 90 ce 21 2e 5f 7f 89 dc 59 d1 34 7b 77 bd 65 09 5e b4 3a 71 bd dc 95 52 7f df 60 1e 31 15 18 7a 05 ae b5 26 e1 c7 91 0e a4 18 26 6d da a3 84 a7 e8 69 f4 2f 2c d5 1f 30 11 20 01 06 48 17 98 c8 7c 49 bc 0b e6 f9 f5 5b 2d 29 98 65 4a c6 0f d9 5f 32 f4 46 85 9f 18 e6 0a 5c 33 1f ff 13 e9 c0 2f 6d f3 1b b3 0d 31 6b 8e Data Ascii: T[H8S>++Hs}>)a})PIfeAO6{d/[.j.tcK2UWKSKdwif#@!._Y4{we^:qR`1z&&mi/,0 H\|I[-)eJ_2F\3/m1k
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: 0f 02 84 f0 e8 09 1e fe c7 15 88 1c dc 6b 4c c6 4f fa 62 73 f8 9a 30 51 c0 96 8c 07 23 a2 73 4f 10 1e 84 47 8f f0 20 40 08 10 3f 28 ce 75 2d c7 a3 cc dc 51 cd 06 c4 30 81 43 1f 0e c3 62 9c b8 a1 c6 37 7e 84 06 f4 9c 06 d4 5f 8d a4 d7 6b 86 b0 08 91 73 c1 c3 ff 9c bd 08 e6 b9 95 a5 42 88 2b fa 60 7f f8 12 2d 2b 60 79 a2 21 87 39 0f 82 b3 4f e0 24 40 08 10 3f 24 7a bb b6 17 c9 f1 f1 9f 6a d9 36 72 ed bd 28 60 73 e0 95 3e 19 0e bd fe e2 e6 71 9f 39 71 80 00 21 40 7a 03 c7 19 cf bb 61 75 e0 e9 5e cc 10 9f d6 a2 02 96 44 dc 63 98 b0 ae 91 79 0f 7a 1f 7d fe 11 41 80 10 20 67 00 c2 3f ea a4 a7 6b 2f 8c b3 76 57 99 93 58 99 a5 45 46 f4 b8 e6 61 a9 b8 cc 32 bf 39 97 f0 20 3c fa 0c 0f e9 8d 11 20 04 48 bf 00 d2 d1 23 92 82 7f 8e 48 c5 c5 3d 1a 24 3e a1 2d 05 e4 fe Data Ascii: kLObs0Q#sOG @?(u-Q0Cb7~_ksB+`-+`y!9O$@?$zj6r(`s>q9q!@zau^Dcyz}A g?k/vWXEFa29 < H#H=$>-
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: 16 e0 37 6f 96 e1 c3 d5 55 c8 2a 6c 82 e7 20 b0 eb 10 50 5e 07 94 d5 00 a5 d5 40 49 55 3b bc 15 a7 e1 39 70 f6 a5 60 df 69 d4 37 b7 a3 ba b1 e7 4b 4d 63 3b ea 9a db d1 d0 02 1c 3a 02 1c 3e 0a 34 1d 07 5a 4f 02 87 8e 01 25 07 4f 61 6b 69 2b de cd ad c3 b3 ef ec c7 82 e7 77 62 cc 92 52 88 29 1e 88 d1 85 10 13 5c b8 36 be 23 0c 36 54 46 8d 9f 33 74 5e 10 01 42 80 10 20 ea 03 88 cc 5d 5c 21 3d 8d 7b 33 20 be b1 1c df b2 af 45 ea ab 45 f8 7b da 7e ac d8 d4 80 f5 a5 47 50 54 d9 8e 1d b5 3e 50 48 8f a2 27 50 74 07 0f f9 98 04 88 84 c3 b9 00 d2 db 73 75 cd 40 7d 8b 0f 2c 87 8f 01 fb ea db e0 dd 73 0c ab 0b 1a f1 4e 7a 35 9c af ec 81 88 71 43 dc 97 af c0 24 42 e6 50 ec f4 4e c2 c6 3b 21 40 08 10 02 44 1d 00 b9 36 2a 07 5f 90 49 ee 07 33 21 6e 5e 0e 71 57 26 7e f5 Data Ascii: 7oUl P^@IU;9p`i7KMc;:>4ZO%Oaki+wbR)\6#6TF3t^B ]\!={3 EE{~GPT>PH'Ptsu@},sNz5qC$BPN;!@D6_I3!n^qW&~
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: 5a 04 08 01 42 80 f4 0e 10 65 1f f1 d1 d9 f8 5b da 01 94 28 a5 b9 ea ae b0 ea 0c 8a 9e 6e 87 1b 40 24 44 64 cf 88 4c b0 af 2f 6a c1 8d 73 8a 20 26 b9 86 e6 97 b8 5e 3d 1e 02 84 00 21 40 7a 06 88 12 b2 7a 30 03 3f 9e be 16 2b b7 d4 a3 ac 16 83 de 87 a3 27 83 3e d4 8f 87 23 40 fc 79 11 09 11 cf 9e 63 88 fd 6d 39 c4 d8 42 18 b9 89 55 70 40 4a 80 10 20 04 48 0f 00 91 c9 f2 bb d3 71 ef e3 1b 90 eb 6e 52 f6 e6 18 6a 23 1f cc cf 0b 67 80 48 90 48 88 ec ae 39 89 f8 67 76 42 3c 52 40 88 04 c3 4b 22 40 08 10 02 e4 6c 80 44 48 78 dc 95 0e 7b ea 56 6c da 7e 54 33 bd 1d fd 01 4e b8 03 44 42 44 8e 42 d9 5f 7f 1a 4b df dc af 4c f7 0d 7a 4e 20 18 46 5a cd ef 49 80 10 20 04 c8 d9 00 11 3f 4f 47 ea 1f 3d ca be e3 72 bf f1 fe 18 66 ad bc 56 0f 00 a9 91 10 69 05 fe b5 b6 1e Data Ascii: ZBe[(n@$DdL/js &^=!@zz0?+'>#@ycm9BUp@J HqnRj#gHH9gvB<R@K"@lDHx{Vl~T3NDBDB_KLzN FZI ?OG=rfVi
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: f4 10 c7 65 c0 38 bd b8 5f bf 62 af 8a f7 e0 0b b1 6e 88 a9 6e 88 e8 42 88 fb f2 21 26 78 f0 6e 76 2d ca 0e 1c 47 e5 e1 36 25 cc 55 1b e0 bc 89 32 9e a4 b9 63 30 22 67 5b f5 eb ff 2c a8 a0 21 40 34 00 8c ae 4b 24 40 fa 05 10 f9 eb 7b 42 ca 66 65 1f 73 99 4c 56 2b 18 7a 5b 97 04 87 2c 39 ce db 7d 02 1f ad a9 c2 a2 3f 7a 20 1b 21 e5 18 96 f3 c7 64 43 ee 61 d2 23 2c a2 bb 79 6e 00 00 e9 6a 8c 0c 76 0f ae 8c 73 43 3c 5a a0 0c 2d 4c 7a 75 0f d6 16 34 2a 79 93 c3 47 02 93 80 97 9e c7 a1 a3 9c aa db 55 7b 55 dc 27 40 ba 5a 67 0d dc 27 40 fa 6c 28 af 1c 97 8d af c5 e4 e2 e3 f5 75 9a ae ba 92 b9 0d 39 e4 f1 8d e5 fb 30 7d 69 1e c4 bd 19 10 0f 64 e0 aa a8 1c c8 f0 5c bf c0 e1 87 49 00 00 e2 37 62 26 bb 07 d7 c4 7b 20 62 5c 10 d1 6e 2c 78 61 17 3e f9 ac 1e b5 ad 40 Data Ascii: e8_bnnB!&xnv-G6%U2c0"g[,!@4K$@{BfesLV+z[,9}?z !dCa#,ynjvsC<Z-Lzu4*yGU{U'@Zg'@l(u90}id\I7b&{ b\n,xa>@
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: 02 a4 ab 75 d5 c1 7d 02 e4 0c 80 c8 4d 93 66 2f cd 43 e1 be 53 50 e3 b8 76 d9 e7 b1 ae b8 05 3f 9e b9 0e 62 8c 0a 3c 0f 3f 48 08 10 02 84 00 d1 01 30 ba 1e 22 01 f2 39 40 94 cd a2 1e cb c2 2b 1f ef 55 e5 cc 2b 59 71 25 c1 96 f0 eb 7c c8 06 c7 80 74 90 fb 01 30 d8 6b 02 84 00 21 40 ba 5a 57 1d dc 27 40 3e 37 c4 72 d7 bd 9b a2 72 90 b7 e7 a4 2a 93 e7 32 ef f1 eb d7 4b 20 7e b4 02 86 50 56 5c 75 07 1b 02 84 00 21 40 74 00 8c ae 87 48 80 7c 0e 10 f9 ab 7e ee ef 5d d8 d5 a0 be d2 5d b9 7b a0 dc c8 4a fc cf f2 e0 4c d3 ed 0e 0a fd 79 8c 00 21 40 08 90 ae d6 55 07 f7 09 10 05 20 4a ef c7 d7 97 23 ab a0 49 75 43 13 8b 2b db b0 79 e7 71 fc 7c c6 5a 75 e5 3d 3a 03 86 00 21 40 08 10 1d 00 a3 eb 21 12 20 0a 40 2e 97 53 77 c7 e6 a2 b8 4a 5d 9b 45 c9 44 be ec 34 ff e5 Data Ascii: u}Mf/CSPv?b<?H0"9@+U+Yq%\|t0k!@ZW'@>7rr*2K ~PV\u!@tH\|~]]{JLy!@U J#IuC+yq\|Zu=:!@! @.SwJ]ED4
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: bd 46 6f 00 91 03 14 a7 3e 95 87 82 bd 27 11 6a 80 48 0f 28 7f ef 29 cc 7c 7a 1b c4 63 59 04 c8 20 c3 40 03 cd 3f a8 e1 ef 6a 9a da b1 b7 e6 24 c4 18 17 0c 7a ab c4 92 21 ac 05 f5 6b 08 10 6d 21 e9 7c d3 cc 7d 19 86 18 7d e5 40 e4 2f fd 45 cf 17 c2 b5 ef 54 c8 bd 8f a2 83 6d 58 5b d4 82 c7 16 6c c0 79 a3 b5 d5 ff 21 bd 18 7a 20 81 f3 40 24 40 f6 d7 9e c2 35 f3 4a f0 25 bd 55 62 d9 bd 30 2d 6a cc 10 42 9c af 2d 13 aa ef d5 9e 67 9d 7d f0 13 dd 01 e4 81 0c 38 5f 29 82 7b 7f e8 01 22 fb 3f 32 b6 1d c6 2d 09 6b 20 43 6b 81 0a 2d 0d d5 fb 10 20 81 05 48 45 c3 69 c4 fe ae 1c 62 b2 4b 5f a5 bc f6 22 58 13 8f 7e 22 84 38 4f df 26 59 5b 47 7f 9e 65 6e cd 3f 75 07 90 7b d2 f1 cc bb e5 ca 14 de 50 e7 3f 4a aa da f1 8f 35 d5 10 0f 65 21 42 4b f3 af 3a 37 12 8a 4f c0 Data Ascii: Fo>'jH()\|zcY @?j$z!km!\|}}@/ETmX[ly!z @$@5J%Ub0-jB-g}8_){"?2-k Ck- HEibK_"X~"8O&Y[Gen?u{P?J5e!BK:7O
2024-04-26 13:23:20 UTC	1255	IN	Data Raw: 92 9e 2b 80 78 44 7b e5 d4 1c a6 18 58 20 55 1e 6e c3 d3 6f ee d3 d9 7e 20 ca 18 93 57 b5 67 3a b9 62 45 81 eb 12 f1 ec 80 7a 2a 34 da 91 3e 2c 2a 07 e2 9e 4c e4 ed 3c 0e 6f 45 5b 48 3d 10 09 90 ed b5 c0 6f de de 01 f1 08 3d 10 3d 7b 20 35 8d ed 38 78 a8 0d ce 57 76 43 4c d0 d7 86 52 36 27 7e 47 73 ac 51 05 46 24 e3 b7 7a 02 88 f2 ab f9 c6 4f b1 79 fb 51 55 00 44 26 d2 97 6f aa 87 75 4c 36 ae d5 d8 b6 b6 f4 40 02 e7 81 d4 34 b5 63 7f fd 29 dc 9e 52 06 31 c5 ad 9f 0d a5 e2 5d b0 39 f1 b4 46 cd 27 97 1d 99 8c 5f 45 44 69 ef d7 ef 40 a1 a7 18 bd 1f ae c4 c7 1b 1b d4 b1 2b 61 45 1b f2 f6 9c c4 b7 46 67 e3 4a 02 24 b8 1b 36 a9 78 64 8a 04 c8 de da 93 10 71 5e 5c 1d a7 1f 80 18 e2 f2 61 4d c6 02 5a 62 8d 2a 60 4d c4 fc 88 71 da 1c a5 31 10 88 18 3b 7a 41 fe f4 Data Ascii: +xD{X Uno~ Wg:bEz4>,L<oE[H=o=={ 58xWvCLR6'~GsQF$zOyQUD&ouL6@4c)R1]9F'_EDi@+aEFgJ$6xdq^\aMZb*`Mq1;zA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49773	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-04-26 13:23:31 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=gXs2eAYyfceFPPD&MD=oK8VXYh3 HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-04-26 13:23:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 8f6f9d9a-8faa-4fb6-b3f3-59d5e5d6a1c7 MS-RequestId: 9b356531-fe9b-478c-aaf3-6db6d26a28bb MS-CV: hPXYDbfO0E+ZxN6o.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 26 Apr 2024 13:23:31 GMT Connection: close Content-Length: 25457
2024-04-26 13:23:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-04-26 13:23:31 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2492, Parent PID: 5180

General

Target ID:	0
Start time:	15:22:31
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4500, Parent PID: 2492

General

Target ID:	2
Start time:	15:22:38
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2144 --field-trial-handle=1712,i,15347724259960520691,9144545762647224658,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6332, Parent PID: 3912

General

Target ID:	3
Start time:	15:22:39
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http:///
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6412, Parent PID: 3912

General

Target ID:	4
Start time:	15:22:39
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument http://%3cfnc1%3e(5)%3cfnc1%3e(%02)/
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6632, Parent PID: 6332

General

Target ID:	5
Start time:	15:22:39
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1812 --field-trial-handle=2076,i,12905221470938519090,15953591901878050253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6944, Parent PID: 6412

General

Target ID:	6
Start time:	15:22:40
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1916 --field-trial-handle=1996,i,5466060823698890482,1351892748397088521,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7152, Parent PID: 5180

General

Target ID:	10
Start time:	15:23:05
Start date:	26/04/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 2492, Parent PID: 5180

General

Chronological Activities

Analysis Process: chrome.exePID: 4500, Parent PID: 2492

Windows Analysis Report
https://6125106173.docs.google.com/drawings/d/1skxkdfIAmUOzY8P2mw2fAOuoLVEquwg5wjlqsJfNzHs/preview