Edit tour

Windows Analysis Report
https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk

Overview

General Information

Sample URL:	https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk
Analysis ID:	1438245
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5840 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2096,i,3259511740123321582,4811320085073021387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5148 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fdrive.google.com%2Fdrivesharing%2Fclientmodel%3Fid%3D12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps%3A%2F%2Fdrive.google.com&followup=https%3A%2F%2Fdrive.google.com%2Fdrivesharing%2Fclientmodel%3Fid%3D12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps%3A%2F%2Fdrive.google.com&ifkv=AaSxoQwno2fSZZK4Hk5vEE5Opmd9YYkUIM1dK7xRA0A4oP58Ue8gNFq_7TZhnGhwTJ946Uq64wlb_w&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S2013655146%3A1715170523562473&theme=mn&ddm=0

HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49774 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 96.7.158.101:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.7.158.101:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49800 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49774 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 96.7.158.101
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 40.127.169.103
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: global traffic	HTTP traffic detected: GET /file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /auth_warmup HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
Source: global traffic	HTTP traffic detected: GET /drivesharing/clientmodel?id=12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-01/archive?ck=drive&ds=APznzaZx5nAprH_U-3S3p79NDN5zTZblloNhn_gSJSBxMg9DJiUArmcek9liWF_JNJjgJCQjzuwJqwz8Qa4fO0JUELJuF1IfxlPeYN0XvjwrcgCVROX6dofUomAg0MaI4bw5Rkjjs2NQXBzRqEBHpcNzUtMMaUSkC6pFkQUQBfsNwREzd_x6dAXXxMtFWS8_UnvaIAKhEtSAN1F2n5lKGcutXt5vlY-rp_jmDPdOMFTS_QOXC1M55k_ij8cmxTaO15S7tX98BDWS34Hi1ZR9bLX9_lpXMnVWiNRT-OOBSXM3Zk9pTPtQ1Y3eWdMAoiQR9lwtB6EtD3YhrP91HR78LhZababXRODFCD_A1U1iyaSxj5Xh3tv1ePF2GaQtI6X8SWaIcV0JfDNwtYMaO7WygrawGKsZK88ANQ%3D%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /viewer2/prod-01/archive?ck=drive&ds=APznzaZx5nAprH_U-3S3p79NDN5zTZblloNhn_gSJSBxMg9DJiUArmcek9liWF_JNJjgJCQjzuwJqwz8Qa4fO0JUELJuF1IfxlPeYN0XvjwrcgCVROX6dofUomAg0MaI4bw5Rkjjs2NQXBzRqEBHpcNzUtMMaUSkC6pFkQUQBfsNwREzd_x6dAXXxMtFWS8_UnvaIAKhEtSAN1F2n5lKGcutXt5vlY-rp_jmDPdOMFTS_QOXC1M55k_ij8cmxTaO15S7tX98BDWS34Hi1ZR9bLX9_lpXMnVWiNRT-OOBSXM3Zk9pTPtQ1Y3eWdMAoiQR9lwtB6EtD3YhrP91HR78LhZababXRODFCD_A1U1iyaSxj5Xh3tv1ePF2GaQtI6X8SWaIcV0JfDNwtYMaO7WygrawGKsZK88ANQ%3D%3D&authuser=0&page=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://content.googleapis.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXkZwHTpU45pOMB&MD=+MDlyW+f HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/docos/p/sync?resourcekey&id=12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv&reqid=0 HTTP/1.1Host: drive.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjVb9SFnDTZyqkqHArY-sJwqn-ErkFj9L3KnrN0g71pcwcnP-g=s64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a-/ALV-UjVb9SFnDTZyqkqHArY-sJwqn-ErkFj9L3KnrN0g71pcwcnP-g=s64 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXkZwHTpU45pOMB&MD=+MDlyW+f HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: chromecache_89.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_104.2.dr	String found in binary or memory: ff=u(["https://sandbox.google.com/tools/feedback/"]),gf=u(["https://www.google.cn/tools/feedback/"]),hf=u(["https://help.youtube.com/tools/feedback/"]),jf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),kf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),lf=u(["https://localhost.corp.google.com/inapp/"]),mf=u(["https://localhost.proxy.googlers.com/inapp/"]),nf=S(Pe),of=[S(Qe),S(Re)],pf=[S(Se),S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af)],qf=[S(bf),S(cf)],rf= equals www.youtube.com (Youtube)
Source: chromecache_81.2.dr	String found in binary or memory: var xzb=function(a){return ph(function(){return JC(a,wzb,l5a)},function(b,c){(void 0===c\|\|500>c)&&b.cancel()},function(b,c){(void 0===c\|\|500>c)&&b.cancel()}).then()},yzb=function(a,b){b.then(function(){a.state=2;for(var c=n(a.C),d=c.next();!d.done;d=c.next())d.value.Nc.resolve();a.C.splice(0,a.C.length)},function(){var c=a.C.shift();c?(yzb(a,c.promise),c.Nc.resolve()):a.state=0})};var zzb=function(a){J.call(this);this.context=a;a=this.context.fa();this.C=SC(a)\|\|new VF;this.He=new Sh(F(this.C,6,"AIzaSyDVQw45DwoYh632gvsP5vPDqEKvb-Ywnb8"),ki(a)\|\|"0",F(this.C,7,"https://workspacevideo-pa.googleapis.com"),void 0,!0,void 0,!0,void 0,void 0);this.He.init();this.sa(this.He)};N(zzb,J);var Azb=function(a){XF.call(this,a.ma());this.context=a};N(Azb,XF);Azb.prototype.D=function(){return"onYouTubeIframeAPIReady"};Azb.prototype.H=function(){var a=SC(this.context.fa())\|\|new VF;return WAa(F(a,1,"https://www.youtube.com"),"iframe_api")};Azb.prototype.C=function(){return xj("YT.Player",this.ma().getWindow())};var rJ=function(a){If.call(this);this.C=a;this.sa(this.C);var b=a.fa();a=a.ma();this.L=null;this.ha=!1;this.R=0;this.O=null;CC(b)\|\|uf(b,83);var c=M(b,hD,112);c=null!=c?D(c,1):null;c="string"===typeof c?pe(c):"https://drive.google.com";this.Ha=TOa(c);this.J=new yh(this);this.sa(this.J);this.D=new dhb;this.sa(this.D);Bzb(this,b,a);c=this.C.fa();var d=M(c,hD,112);null!=d&&oi(d,7)&&(cF(this.D,new f7a(this.C)),cF(this.D,new mD(this.C)));(d=Rh(c))&&G(d,7,!1)&&(cF(this.D,new oD(this.C)),cF(this.D,new m7a(this.C))); equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: blobcomments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: peoplestackwebexperiments-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com

Source: unknown

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 1998sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://drive.google.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://drive.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs

Source: chromecache_92.2.dr, chromecache_81.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_104.2.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_81.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_113.2.dr, chromecache_88.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch
Source: chromecache_113.2.dr, chromecache_88.2.dr	String found in binary or memory: http://www.bohemiancoding.com/sketch/ns
Source: chromecache_86.2.dr, chromecache_81.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_92.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_92.2.dr, chromecache_117.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_92.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_89.2.dr, chromecache_116.2.dr, chromecache_117.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_89.2.dr, chromecache_116.2.dr, chromecache_117.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_96.2.dr, chromecache_81.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_104.2.dr, chromecache_81.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_89.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_85.2.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_81.2.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_89.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_89.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_81.2.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_96.2.dr, chromecache_116.2.dr, chromecache_92.2.dr, chromecache_117.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_92.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_96.2.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_96.2.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_89.2.dr, chromecache_116.2.dr, chromecache_92.2.dr, chromecache_117.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_92.2.dr, chromecache_81.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_116.2.dr, chromecache_117.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_89.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_92.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_92.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_92.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_92.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_81.2.dr	String found in binary or memory: https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview
Source: chromecache_116.2.dr, chromecache_117.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_81.2.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_81.2.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_81.2.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_81.2.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_89.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_81.2.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_81.2.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_89.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_104.2.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_104.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_104.2.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_104.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_104.2.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_104.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_104.2.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_94.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_81.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_81.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_96.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/e/notoemoji/
Source: chromecache_94.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_86.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_81.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_104.2.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_104.2.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_96.2.dr, chromecache_81.2.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_104.2.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_81.2.dr	String found in binary or memory: https://mygoogle.corp.google.com/help/answer/9011840
Source: chromecache_81.2.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_81.2.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_81.2.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_81.2.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_89.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_81.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_89.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_117.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_89.2.dr, chromecache_116.2.dr, chromecache_117.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_81.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_81.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_81.2.dr	String found in binary or memory: https://policies.google.com/terms/generative-ai
Source: chromecache_81.2.dr	String found in binary or memory: https://preprod-dynamite-alpha-us-signaler-pa.clients6.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://preprod-dynamite-alpha-us-signaler-pa.googleapis.com
Source: chromecache_81.2.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_104.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_104.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_104.2.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_81.2.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_81.2.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_92.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_89.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_104.2.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_104.2.dr, chromecache_81.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_96.2.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_96.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129
Source: chromecache_96.2.dr	String found in binary or memory: https://support.google.com/docs/answer/65129?hl=en-GB
Source: chromecache_96.2.dr	String found in binary or memory: https://support.google.com/docs?p=comments_guide
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_requester_terms
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_terms
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/google-workspace-individual/?p=esignature_signer_tos
Source: chromecache_104.2.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_104.2.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_81.2.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420
Source: chromecache_89.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_104.2.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_81.2.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_89.2.dr, chromecache_116.2.dr, chromecache_117.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_81.2.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_104.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_81.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_81.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_89.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_89.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_104.2.dr, chromecache_81.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_104.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_104.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_104.2.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_92.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_117.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_117.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_86.2.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/calendar_2020q4/v13/192px.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/tasks/v10/192px.svg
Source: chromecache_86.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_86.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_86.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_86.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_89.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_email_address_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_name_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_copy_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_cut_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/email_copy_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/info_outline_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/phone_copy_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_grey300.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_off_grey200.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_email_address_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_name_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_copy_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_cut_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/email_copy_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/info_outline_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/phone_copy_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_grey700.svg
Source: chromecache_96.2.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_off_grey700.svg
Source: chromecache_81.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_104.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_81.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_89.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789

Source: unknown	HTTPS traffic detected: 96.7.158.101:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 96.7.158.101:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.127.169.103:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49800 version: TLS 1.2

Source: classification engine

Classification label: clean1.win@18/71@26/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2096,i,3259511740123321582,4811320085073021387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2096,i,3259511740123321582,4811320085073021387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://www.broofa.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
blobcomments-pa.clients6.google.com	142.250.217.106	true	false	high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
play.google.com	142.251.33.110	true	false	high
plus.l.google.com	142.251.33.78	true	false	high
drive.google.com	142.250.69.206	true	false	high
www.google.com	142.251.215.228	true	false	high
peoplestackwebexperiments-pa.clients6.google.com	142.250.69.202	true	false	high
googlehosted.l.googleusercontent.com	142.251.33.97	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
about:blank	false	Avira URL Cloud: safe	low
https://lh3.googleusercontent.com/a-/ALV-UjVb9SFnDTZyqkqHArY-sJwqn-ErkFj9L3KnrN0g71pcwcnP-g=s64	false		high
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png	false		high
https://play.google.com/log?format=json&hasfast=true	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0	false		high
https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/docos/p/sync?resourcekey&id=12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv&reqid=0	false		high
https://drive.google.com/viewer2/prod-01/archive?ck=drive&ds=APznzaZx5nAprH_U-3S3p79NDN5zTZblloNhn_gSJSBxMg9DJiUArmcek9liWF_JNJjgJCQjzuwJqwz8Qa4fO0JUELJuF1IfxlPeYN0XvjwrcgCVROX6dofUomAg0MaI4bw5Rkjjs2NQXBzRqEBHpcNzUtMMaUSkC6pFkQUQBfsNwREzd_x6dAXXxMtFWS8_UnvaIAKhEtSAN1F2n5lKGcutXt5vlY-rp_jmDPdOMFTS_QOXC1M55k_ij8cmxTaO15S7tX98BDWS34Hi1ZR9bLX9_lpXMnVWiNRT-OOBSXM3Zk9pTPtQ1Y3eWdMAoiQR9lwtB6EtD3YhrP91HR78LhZababXRODFCD_A1U1iyaSxj5Xh3tv1ePF2GaQtI6X8SWaIcV0JfDNwtYMaO7WygrawGKsZK88ANQ%3D%3D&authuser=0&page=0	false		high
https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk	false		high
https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view	false		high
https://drive.google.com/auth_warmup	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_81.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_104.2.dr	false		high
http://www.broofa.com	chromecache_86.2.dr, chromecache_81.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_104.2.dr, chromecache_81.2.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_104.2.dr	false		high
https://support.google.com	chromecache_81.2.dr	false		high
https://apis.google.com/js/googleapis.proxy.js	chromecache_89.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_104.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_104.2.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_89.2.dr	false		high
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_81.2.dr	false		high
https://help.youtube.com/tools/feedback/	chromecache_104.2.dr	false		high
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_81.2.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_89.2.dr, chromecache_116.2.dr, chromecache_117.2.dr	false		high
https://docs.google.com/document/d/1kganm9BHI3TsF8ogVulX2o4DzzO8XA4gu8aIKneTTNU/preview	chromecache_81.2.dr	false		high
https://policies.google.com/terms	chromecache_81.2.dr	false		high
https://www.youtube.com	chromecache_81.2.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_104.2.dr	false		high
https://www.google.com	chromecache_81.2.dr	false		high
https://support.google.com/drive/answer/2407404?hl=en	chromecache_81.2.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_89.2.dr	false		high
https://workspace.google.com	chromecache_81.2.dr	false		high
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_81.2.dr	false		high
https://support.google.com/legal/answer/3110420	chromecache_81.2.dr	false		high
https://support.google.com/docs/answer/49114	chromecache_81.2.dr	false		high
https://support.google.com/drive/answer/2423694	chromecache_81.2.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_terms	chromecache_81.2.dr	false		high
https://drive-thirdparty.googleusercontent.com/	chromecache_81.2.dr	false		high
https://content-googleapis-test.sandbox.google.com	chromecache_96.2.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_89.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_104.2.dr	false	URL Reputation: safe	unknown
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_81.2.dr	false		high
https://developers.google.com/	chromecache_92.2.dr	false		high
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_81.2.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_92.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_104.2.dr, chromecache_81.2.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_104.2.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_81.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_96.2.dr, chromecache_81.2.dr	false		high
https://www.google.com/tools/feedback/	chromecache_104.2.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_89.2.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_104.2.dr	false		high
https://punctual-dev.corp.google.com	chromecache_81.2.dr	false		high
https://plus.google.com	chromecache_117.2.dr	false		high
https://support.google.com/google-workspace-individual/?p=esignature_signer_tos	chromecache_81.2.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_104.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_104.2.dr	false		high
https://clients5.google.com/webstore/wall/widget	chromecache_81.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_104.2.dr	false		high
https://preprod-dynamite-alpha-us-signaler-pa.clients6.google.com	chromecache_81.2.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_104.2.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_104.2.dr	false		high
https://content-googleapis-staging.sandbox.google.com	chromecache_96.2.dr	false		high
https://localhost.corp.google.com/inapp/	chromecache_104.2.dr	false		high
https://support.google.com/drive/answer/7650301	chromecache_81.2.dr	false		high
https://drive.google.com	chromecache_81.2.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_89.2.dr	false		high
https://policies.google.com/privacy	chromecache_81.2.dr	false		high
https://drive.google.com/requestreview?id=	chromecache_81.2.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_104.2.dr	false		high
https://drive.google.com/drive/my-drive	chromecache_81.2.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_94.2.dr	false		high
https://clients6.google.com	chromecache_96.2.dr, chromecache_116.2.dr, chromecache_92.2.dr, chromecache_117.2.dr	false		high
http://localhost.corp.google.com/inapp/	chromecache_104.2.dr	false		high
https://play.google.com	chromecache_81.2.dr	false		high
https://clients5.google.com	chromecache_81.2.dr	false		high
https://console.developers.google.com/	chromecache_92.2.dr	false		high
https://signaler-pa.youtube.com	chromecache_81.2.dr	false		high
https://support.google.com/docs/answer/65129?hl=en-GB	chromecache_96.2.dr	false		high
https://support.google.com/inapp/%	chromecache_104.2.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_104.2.dr	false		high
https://drivemetadata.clients6.google.com	chromecache_81.2.dr	false		high
https://support.google.com/docs/answer/148505	chromecache_81.2.dr	false		high
https://support.google.com/	chromecache_104.2.dr, chromecache_81.2.dr	false		high
https://support.google.com/docs/answer/37603	chromecache_81.2.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_89.2.dr	false		high
https://support.google.com/contacts/answer/7345608	chromecache_96.2.dr	false		high
https://csp.withgoogle.com/csp/lcreport/	chromecache_116.2.dr, chromecache_117.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_89.2.dr	false		high
https://scone-pa.clients6.google.com	chromecache_104.2.dr	false		high
https://lh3.googleusercontent.com/a/default-user	chromecache_96.2.dr, chromecache_81.2.dr	false		high
https://support.google.com/inapp/	chromecache_104.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_104.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_92.2.dr	false		high
https://apis.google.com	chromecache_89.2.dr, chromecache_116.2.dr, chromecache_117.2.dr	false		high
https://asx-frontend-autopush.corp.google.com/tools/feedback/	chromecache_104.2.dr	false		high
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_104.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_116.2.dr, chromecache_117.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.14.206	unknown	United States	15169	GOOGLEUS	false
142.251.33.110	play.google.com	United States	15169	GOOGLEUS	false
142.250.217.78	unknown	United States	15169	GOOGLEUS	false
142.251.33.78	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.217.100	unknown	United States	15169	GOOGLEUS	false
142.251.215.228	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.251.33.97	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.69.206	drive.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1438245
Start date and time:	2024-05-08 14:14:25 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@18/71@26/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.99, 172.217.14.238, 172.253.117.84, 34.104.35.123, 142.251.33.106, 142.251.33.99, 142.251.211.227, 142.250.217.74, 142.251.33.74, 142.250.69.202, 172.217.14.202, 172.217.14.234, 142.251.215.234, 142.251.211.234, 142.250.217.106, 142.250.217.67, 199.232.214.172, 192.229.211.108, 13.95.31.18, 52.165.164.15, 142.251.215.227
Excluded domains from analysis (whitelisted): fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, content.googleapis.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, update.googleapis.com, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 11:15:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.972627054483651
Encrypted:	false
SSDEEP:	48:862duOTOKZR8HPidAKZdA19ehwiZUklqehmy+3:8Hv4hy
MD5:	695AA74F67D6D99CC9D10EEE39464005
SHA1:	A1157151D0021B260CB4D998AAE710ABE9639035
SHA-256:	FF9B596B38F6E1358D436A298BD481DD20AC8CF8C457E1B1ABB0626F54EFE045
SHA-512:	F2379F73CC7272F5AF3CCA161C1852BA1C1D1D1DDF80933F0CAF8610C9902BE59A1D327355B4C3AC3DB97459B8C287F91F39FA341DCA479AD423E77CE12E2A10
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......bA...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K~.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 11:15:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.985330586245944
Encrypted:	false
SSDEEP:	48:802duOTOKZR8HPidAKZdA1weh/iZUkAQkqehRy+2:8hvS9QQy
MD5:	7C28E4ACAF4B029883440C6AB86BA12A
SHA1:	68F4E7EAD37FCCED87420BD647FEE0F9CC3DC3F3
SHA-256:	F7C89E703E6C3C435CD35A0474300D27AB7A81B83A135B0079AB538E40691AAB
SHA-512:	E2D82752D617581CA2F9822123436A600967B93ADD57E58015561758FF926E029A304C7FD5C87F46843BBA739F94487437B19024D2FC8E895D6D8CE9C944B62A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......bA...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K~.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.000409489462322
Encrypted:	false
SSDEEP:	48:8xV2duOTOKZRsHPidAKZdA14tseh7sFiZUkmgqeh7sTy+BX:8xkvqnty
MD5:	8CD96D0EBFB3BE40C833194C4C445159
SHA1:	3A69C7DEAEB24D6DF663118C03E668EA3DA99F55
SHA-256:	39045A864673721844E921B1E6ED15B179898460A37EC47DAEBDB355DD51260C
SHA-512:	CDAEA15199A230DB4337CAA15E2CDD85EF58D4D07B489E76EB58C2CB144ADCAA83B59B4B207A31D96942A87EBFB6ACE8C7C155B3A046BB9ABD22CA902FC11945
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K~.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 11:15:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9848962270241883
Encrypted:	false
SSDEEP:	48:8Q2duOTOKZR8HPidAKZdA1vehDiZUkwqeh1y+R:8lv5by
MD5:	BA999439A16AE409AAD1F236E989B24B
SHA1:	BFE5EF71602C52DD9329B592939EF5E24973BF37
SHA-256:	85FBAB8C5F8E3747E15F2248F8411E557D6BD3DAABA1C7FCF0D98F2140CF3864
SHA-512:	75EB9AFAB18D5903FCB6168B0AFCE0A73EBE3AC269DD956C4B014FCA5B694F97F5A01E264CE26B628C99422104905944EA92BE0E2D7D75C00B55D22D8FD0F734
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..... .bA...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K~.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 11:15:16 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.977908959508335
Encrypted:	false
SSDEEP:	48:832duOTOKZR8HPidAKZdA1hehBiZUk1W1qeh/y+C:82vJ9fy
MD5:	A46E60DA4E7B32A10E23C69582B643D8
SHA1:	AA77C067682515B5138CDAC42E42762CDA8C2918
SHA-256:	F0828A8E4939188BFD1BF8AEDBFF39A1E7E41B1392DAECA011BDEA28B2802555
SHA-512:	23022F08F955E767FC4B5FC75E34BED093945AF80BBC9C84794B61781B5436761580F0CC6115534CD9C7F42183E7033D2AD43381C55CEFE8B068F4F35D8D4547
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......bA...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K~.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 8 11:15:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.989208550316788
Encrypted:	false
SSDEEP:	48:8Li2duOTOKZR8HPidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbty+yT+:8DvVT/TbxWOvTbty7T
MD5:	DAD5B37C0944C4D13DB64896DECE10DE
SHA1:	5758B5C84737CF8DA8BDDEC0F426D2597EA67481
SHA-256:	F9AD7CE6DBB3283EECD9F6D31A1E3DB57E1B85779EBD5151AEA8AA1ABBCA72A8
SHA-512:	11BBAEE248F87B9F3911B074578FAC7D04A017BDEE21DD21C3663DCA012AA8066388768477AFFA26FFD93DB9E95408BFFECEB78E21982169224D711C080F98FE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......bA...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X.a....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.a....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X.a....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X.a..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.a...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........K~.N.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 100

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1851
Entropy (8bit):	4.425951750953481
Encrypted:	false
SSDEEP:	24:Gv7F9NHXTY1jXLYAMzoVDxx0qQ3mHb3XSG0I2aVwALbvfbaMUW:GDFHTY1jbYTshxxWmHbX0I2cdbHbd
MD5:	41A1BC2FA7FBA0E8F1C3CA3B037B4B61
SHA1:	DA89FF3A9FC29743489C1820BC0F327B92EC9241
SHA-256:	5CD42A62552A673DCCCC069203DEB6F456E3680D72BE85C5B5410793E17144A7
SHA-512:	8686AA71390DA2FF41C7ACCD531AAD93CB4EA79990CCB159F448D6C3692B706613E676385A3BCB144A065B409498CFD9E66B62402DBAB45B3C74C8E591636364
Malicious:	false
Reputation:	low
URL:	https://blobcomments-pa.clients6.google.com/v1/metadata?docId=12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv&revisionId=0B1aiaUwakVgTYW90NUxnRitIdkxyUnpBTVg2NUdGdGVXQnRZPQ&userLocale=en-GB&timeZoneId=Etc%2FGMT-2&documentResourceKey.resourceKey&forceImportEnabled=true&key=AIzaSyCMp6sr4oTC18AWkE2Ii4UBZHTHEpGZWZM&%24unique=gc797
Preview:	{. "serializedDocosKeyData": "[null,null,0,null,null,null,null,1,[\"Anonymous\",null,\"//ssl.gstatic.com/docs/common/blue_silhouette96-0.png\",\"ANONYMOUS_105250506097979753968\",1,null,1,null,1],1,\"AAHRpnXvg7lyfCGXPDBFaaMj8qvATUdOxIkjQOEtkdERCcNkLdCAkItF1Zh_3vNvrgDOGyc-88S4WOFo2agLF37qnWlJotim_UQ\",null,null,null,null,null,1,null,null,1,null,null,null,null,1,0,null,null,null,0,null,null,0,null,null,null,null,1,0,null,null,null,null,[\"tf\",60000,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,0,0,null,null,null,1,null,null,null,null,null,null,0,null,null,\"\",null,0,null,null,null,null,0],[[5703839,5704621,5704745,5705893,5707899,5711538,5712270,5712639,5712647,5713195,5714051,5737800,5748810,5792878,48966262,49372463,49375342,49451659,49453005,49472091,49622751,49623141,49643963,49769

Chrome Cache Entry: 101

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 102

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=a6hqqmaxcy6y
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 103

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 104

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3383)
Category:	downloaded
Size (bytes):	108457
Entropy (8bit):	5.48559468980492
Encrypted:	false
SSDEEP:	1536:dQed4sDzUVRhLgvIDTxF9/a4+ECrOd/FeSWiSyz2NUAMSceu4GseEP2q:pV8JpTxv9erMmi72NUAMIGs3
MD5:	936C777790659F304D0D75DD37C349C5
SHA1:	C02A937CC205D9D9332B92E05C69836CEAFEE53A
SHA-256:	1252984607640507F1E1AED2558E401937EE530BB81FB2237619B15F953052B1
SHA-512:	7B93634962EA45C2AC645A9CC8BC959846DD453CDA1CC8113CFECD5B29E88F78AC8C16DCD0C29B21F2ECC2F17F17363CDE7D82D04844D5BE50F8E0131B123F01
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Preview:	(function(){var m,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},da=ca(this),r=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.r("Symbol",function(a){if(a)return a;var b=function(g,f){this.uc=g;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.uc};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function

Chrome Cache Entry: 105

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 106

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 107

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	105
Entropy (8bit):	5.39264560441531
Encrypted:	false
SSDEEP:	3:yionv//thPl9ytsti8TuLj9PGVJuR2up:6v/lhPStki8+9PGVnup
MD5:	BFC48DF4E020D16249862A8EDC5BD42E
SHA1:	54BB411DC2D8E1B84F7559BD32DA79AA4808BDD0
SHA-256:	8B581B79700F57BB3E1D4C12152A204F81FC75A1BFE05477E4922AA60152F657
SHA-512:	34F33C7F1CAD2D3B239C89DDD44CC26925797D561DD9EFAF7D1F45AEC6A79392FABDA6C1B764C3D019056F8A65A59303D407BD308016A855D478B0C8E1AD7839
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_1_folder_x16.png
Preview:	.PNG........IHDR................$...0IDAT(.c...?...q..@..3..L.!.............3..%)..K...U.......IEND.B`.

Chrome Cache Entry: 108

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	209
Entropy (8bit):	6.668570364625647
Encrypted:	false
SSDEEP:	6:6v/lhP+Bw51z9YaD6kDNsPl2PLIUdyDXwn/jp:6v/7IwrnPDNe2PLIUdyDXwn/N
MD5:	E718A1B337A3197CBC7ED8C8F560FB5D
SHA1:	703765677CFEA246D06C2481E0BB495EC3D095F3
SHA-256:	933453961F18E84204C8A3A13FBF771DF892E18DFD0C820C4437D99CC0EDED60
SHA-512:	8328FCF407EA2510F910FE3C729615061CE44AA049FA7CA7278FEA81AF533607541CB15700C01DB2BD5070DB8816B6CF8A5E2AFAE2CACCF9E83B4AA3B2567145
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/doclist/images/mediatype/icon_2_archive_x16.png
Preview:	.PNG........IHDR................a....IDATx......1..].@#\.../R..@'.@....@.f......bY........W9g...>.......4..=.U...`...........z...w.....bY..P...n2=....%...L..\@%P....!...U.m....e..-.~9.....IEND.B`.

Chrome Cache Entry: 109

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (997)
Category:	downloaded
Size (bytes):	6742
Entropy (8bit):	5.443076015162164
Encrypted:	false
SSDEEP:	96:rw/+NI8kMPfbH/5HbfJ/irRYdpdPyBcRpLoNS9WJNbOy1hEnRT99:rxN/zfbhbfJqrRL4MNS9WH3WRT99
MD5:	BBECDF7AB66A8640099816AEBD2B3BC6
SHA1:	163C0FB32D7EC552890DB6115103C2CFB15B5717
SHA-256:	D2F2BE2F25425965AFD8D6076248E14999DD97D85BAB9A580124832985F7959D
SHA-512:	F05C9D440DD4C41DFE57123644041D2EB260BA69ED5584C382A90D6D51102265541062B0B8E4D683BC557DFE45D61F21E0303E5DE12BDA159EAE4FDD4F8E0449
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en_GB.34kfJgAry94.O/am=ABg/d=0/rs=AO0039s8gBAD0z1C0ZXPGP2PO1Lpokeglg/m=MpJwZc,UUJqVe,sy5,s39S4,syn,pw70Gc"
Preview:	try{.z("MpJwZc");..A();.}catch(e){_DumpException(e)}.try{.z("UUJqVe");..A();.}catch(e){_DumpException(e)}.try{.Ue(Rw);.}catch(e){_DumpException(e)}.try{.z("s39S4");.var jSb=function(a,b,c){c?a.setAttribute(b,c):a.removeAttribute(b);a.hasAttribute("c-wiz")\|\|(b=a,"C-DATA"===a.tagName&&(b=a.parentElement),PGa(b,!1))},kSb=function(a,b,c){var d=a.getAttribute(b)\|\|"";c=String(c\|\|"");c=c.split(";").filter(function(e){return e});d=d.split(";").filter(function(e){return Ig(e,":.CLIENT")});Fa(c,d);(c=c.join(";"))?a.setAttribute(b,c):a.removeAttribute(b);jha(a)},oSb=function(){lSb\|\|(lSb=!0,mSb=ufa,ufa=function(a){mSb&&mSb(a);for(var b=0;b<a.length;b++){var c=a[b];Je(c)&&.We(c).LAa(c)}},nSb=vfa,vfa=function(a){nSb&&nSb(a);for(var b=0;b<a.length;b++){var c=a[b];Je(c)&&We(c).MAa(c)}})},pSb=function(a){if(a=a\|\|document.body){var b=document.head.querySelector("style[data-late-css]");a=n(Array.from(a.querySelectorAll("style[data-server-css-collection], link[data-server-css-collection]")));for(var c=a.n

Chrome Cache Entry: 110

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 111

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	105
Entropy (8bit):	5.39264560441531
Encrypted:	false
SSDEEP:	3:yionv//thPl9ytsti8TuLj9PGVJuR2up:6v/lhPStki8+9PGVnup
MD5:	BFC48DF4E020D16249862A8EDC5BD42E
SHA1:	54BB411DC2D8E1B84F7559BD32DA79AA4808BDD0
SHA-256:	8B581B79700F57BB3E1D4C12152A204F81FC75A1BFE05477E4922AA60152F657
SHA-512:	34F33C7F1CAD2D3B239C89DDD44CC26925797D561DD9EFAF7D1F45AEC6A79392FABDA6C1B764C3D019056F8A65A59303D407BD308016A855D478B0C8E1AD7839
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................$...0IDAT(.c...?...q..@..3..L.!.............3..%)..K...U.......IEND.B`.

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	118370
Entropy (8bit):	5.846748398907928
Encrypted:	false
SSDEEP:	3072:Dz9w9o3/vsq1xCLqrQcS8xriAX7E1fbaRrcjS57l+QDk/J0/JOBv3:Dz9McHCLqEcS8xOAX7E1f2BP0
MD5:	BA7AB7044D6C6C0240C3917858948CFF
SHA1:	3B840B104CB3D74D5A35FBD193ACA32D27815D3E
SHA-256:	0189F7C6ED35A7BE5E51A30366FBC54C9C9E27D2511DB44895D85A1458F83AB5
SHA-512:	660D3407052C6965E6451C8D2AA9DC302C0F97129864E320731B89174F2A87B776201A57AA30A8CCF1A455700A6D9E2C42A070CC0F964D14A6D9E73DA47C4697
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/viewer/v3/v-sprite56.svg
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="3980px" viewBox="0 0 31 3980" preserveAspectRatio="none"><g transform="translate(0,960)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,432)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2152)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10.0

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	209
Entropy (8bit):	6.668570364625647
Encrypted:	false
SSDEEP:	6:6v/lhP+Bw51z9YaD6kDNsPl2PLIUdyDXwn/jp:6v/7IwrnPDNe2PLIUdyDXwn/N
MD5:	E718A1B337A3197CBC7ED8C8F560FB5D
SHA1:	703765677CFEA246D06C2481E0BB495EC3D095F3
SHA-256:	933453961F18E84204C8A3A13FBF771DF892E18DFD0C820C4437D99CC0EDED60
SHA-512:	8328FCF407EA2510F910FE3C729615061CE44AA049FA7CA7278FEA81AF533607541CB15700C01DB2BD5070DB8816B6CF8A5E2AFAE2CACCF9E83B4AA3B2567145
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....IDATx......1..].@#\.../R..@'.@....@.f......bY........W9g...>.......4..=.U...`...........z...w.....bY..P...n2=....%...L..\@%P....!...U.m....e..-.~9.....IEND.B`.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	121628
Entropy (8bit):	5.506662476672723
Encrypted:	false
SSDEEP:	3072:QI9yvwslCsrCF9f/U2Dj3Fkk7rEehA5L1kx:l9ygsrieDkVaL1kx
MD5:	F46ACD807A10216E6EEE8EA51E0F14D6
SHA1:	4702F47070F7046689432DCF605F11364BC0FBED
SHA-256:	D6B84873D27E7E83CF5184AAEF778F1CCB896467576CD8AF2CAD09B31B3C6086
SHA-512:	811263DC85C8DAA3A6E5D8A002CCCB953CD01E6A77797109835FE8B07CABE0DEE7EB126274E84266229880A90782B3B016BA034E31F0E3B259BF9E66CA797028
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0"
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	79644
Entropy (8bit):	5.598027612956531
Encrypted:	false
SSDEEP:	1536:TVp1T5UI9yvkVs5yC9waydVo/29oN7VC6parVqvAq:QI9yvwsl5NYlrV/q
MD5:	5845C4B4039A782892BA98EEFE3537FE
SHA1:	53094E84BE77E96AFE3B3F3CF337044A8AC3C4DB
SHA-256:	F730FB8496D16C5F117388BB3F5F2B117DB2D49AA9C35E7BFD5318C7253DBFD2
SHA-512:	57C823B9BD9F56F2081766D9F083FDC70BA6277B3B1A897BF75891329E83F95C967A647676C3573E33471D3A8F61F599D4A1949303D2033DC25CAD37CE76A602
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAmlNHcUu78_khIFDQbtu_8=?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	333
Entropy (8bit):	6.9957069437218315
Encrypted:	false
SSDEEP:	6:6v/lhPB7rEKKcJo2ltL70+3z73S+9wcgNbg8f4UxMNlm9Hbp:6v/7Z/PJFtL70az7iqf6jxM0
MD5:	C5D27D213FDF0A83783C76F7DB91E9A9
SHA1:	6EFC214E562B8F2F0B769C1974F485715EFC26A1
SHA-256:	D7A8DDC19CAB32B0D9D9B7B0AB33725B2241B79A69D67DEDE7510814BA0D65BD
SHA-512:	7A6C0659FFF9BCE56A8BFD7F3E02119F624D8AF4178FFCA4EA5B0B1C90F70143BD60BF24BEB21C6E6B6DA7282E733448A3111B49BE5CB7024682E2AA0D2D7CD4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@.....%......sBIT.....O.....IDATh..A..0.E..N....[...8$.O...[2.....t._.SeN...H....H....H.....X...x.6W..%c.....s... _!Kz.mF`..X@..@ ...W. ..KH.T.6.`#.6.`.....!.RL..QP.....O....Kp.Z.j$5.S..../b..I9...1.X.E..n!>].........h.%`.^.y.c.wT 5..{).....5.I`pz...d.........q$.F.l$.F.l$.F.l.-.J.9.T.....IEND.B`.

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (597)
Category:	downloaded
Size (bytes):	1759049
Entropy (8bit):	5.629754091814043
Encrypted:	false
SSDEEP:	24576:XjAR7w7LFOUvMB3BZ1Ih+ssz1M8A5Qpyj6mO+Jigi+xRD:XjAR7w7LFOUUB3BZ1Iuzi8B2D
MD5:	60B42368273C03A937F40E339BB29A52
SHA1:	C542037A8545D2282EF33A68C262A36987C7A398
SHA-256:	5B42939D9E0285E943F61CA508A14C706388919D934D50838567884E8FC990F6
SHA-512:	BB823F1C3AFC83D5187EAEB5D44FFB2637B6731855D6D4E483D977A02CD417717FB9A43E4B0B63B578081DA2524E87760CD1B6ADF50064AF116093D0A5B6DA9A
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en_GB.34kfJgAry94.O/am=ABg/d=1/rs=AO0039s8gBAD0z1C0ZXPGP2PO1Lpokeglg/m=v,wb"
Preview:	try{.var _F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};_F_toggles_initialize([0x1800, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././... Copyright (c) 2015-2018 Google, Inc., Netflix, Inc., Microsoft Corp. and contributors. Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at. http://www.apache.org/licenses/LICENSE-2.0. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License.././. SPDX-License-Identifier: Apache-2.0././*. Copyright The Closure

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=covw9sjjldx6
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3170
Entropy (8bit):	7.934630496764965
Encrypted:	false
SSDEEP:	96:c2ZEPhMXQnPkVrTEnGD9c4vnrmBYBaSfS18:c2/XQnPGroGD9vvnXVaq
MD5:	9D73B3AA30BCE9D8F166DE5178AE4338
SHA1:	D0CBC46850D8ED54625A3B2B01A2C31F37977E75
SHA-256:	DBEF5E5530003B7233E944856C23D1437902A2D3568CDFD2BEAF2166E9CA9139
SHA-512:	8E55D1677CDBFE9DB6700840041C815329A57DF69E303ADC1F994757C64100FE4A3A17E86EF4613F4243E29014517234DEBFBCEE58DAB9FC56C81DD147FDC058
Malicious:	false
Reputation:	low
URL:	https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png
Preview:	.PNG........IHDR.......6.....%.`....)IDATx..].pT..>.l......b..(Hv7 D7.n.8....V..H_.R;S.hY`w.(...N_R."0`.-.A..\|.N..`....n..{.&..l.o..;.....a....d..$.................J.1......7+.c...o..T/.~V.r.....D..G.Ic.....E_.FUR.&..U%...X.4!!Q.H";......e(Ic...$..."1..jR[.L..../Ek.}AH...W.L.V....Y..S..q...!._r.D....G,%...Hu.$q..\.j.x...G.....]....B.i.I.+B.....Hu.....Q...K;...J.q..._......_.x....A:......j....:c...^.....k=GIj..Y]B.V..m...Y.\....$..!....+.R%..U/;p.....R4.g.R...XH.3%..JHHby.eqOZdnS..$.. ....dn...$.w....E.o.8...b@.z.)5.L4\|.F...9......pP.8.\|....-.M..:..ux...7.]...'..(q..~.....KQ.W..,b..L<.Y.].V+....t4.$.V.O.....D.5..v.j...Hd.M....z.......V..q.p.......;:.J.%2.G.;./.E...!.H. ..../Dk.8.T....+..%Vs4..DC.R.`..Z..........0.[)N!.....%.>&.b.$.M....P.!...!....'Kv..Nd...mvR.:.L....w..y%.i..H..u....s.Se1.[.)."..)%.I.....(.#M..4.@....#.....X..P<...k..g....O..I..>-...'._.Q..T.y.=Z.GR{]..&t}......>J..!,..X6.HC..$.:.}..z...._b.b.4.E.....;.Ha.?s.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 64 x 64, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	333
Entropy (8bit):	6.9957069437218315
Encrypted:	false
SSDEEP:	6:6v/lhPB7rEKKcJo2ltL70+3z73S+9wcgNbg8f4UxMNlm9Hbp:6v/7Z/PJFtL70az7iqf6jxM0
MD5:	C5D27D213FDF0A83783C76F7DB91E9A9
SHA1:	6EFC214E562B8F2F0B769C1974F485715EFC26A1
SHA-256:	D7A8DDC19CAB32B0D9D9B7B0AB33725B2241B79A69D67DEDE7510814BA0D65BD
SHA-512:	7A6C0659FFF9BCE56A8BFD7F3E02119F624D8AF4178FFCA4EA5B0B1C90F70143BD60BF24BEB21C6E6B6DA7282E733448A3111B49BE5CB7024682E2AA0D2D7CD4
Malicious:	false
Reputation:	low
URL:	https://lh3.googleusercontent.com/a-/ALV-UjVb9SFnDTZyqkqHArY-sJwqn-ErkFj9L3KnrN0g71pcwcnP-g=s64
Preview:	.PNG........IHDR...@...@.....%......sBIT.....O.....IDATh..A..0.E..N....[...8$.O...[2.....t._.SeN...H....H....H.....X...x.6W..%c.....s... _!Kz.mF`..X@..@ ...W. ..KH.T.6.`#.6.`.....!.RL..QP.....O....Kp.Z.j$5.S..../b..I9...1.X.E..n!>].........h.%`.^.y.c.wT 5..{).....5.I`pz...d.........q$.F.l$.F.l$.F.l.-.J.9.T.....IEND.B`.

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	382
Entropy (8bit):	5.402943492774068
Encrypted:	false
SSDEEP:	6:hxuJLzLMb038G1W0RNjm7fVBeQDXY2F6YkAbvOm/esHeO1W0RNJ4Nhdx434QL:hYA01W0Rg79hLFBkAb2m/esHvW0RH4NW
MD5:	4A6045C5CC99A75C422BCA6CF6C4D029
SHA1:	B7BD7BEE5C8C5B128C69BBB021684D871E0C05DD
SHA-256:	7AE1B8F2A6D0DD214B0C12F9898328396DA94FCB26BDFD7D1D921627AADF662B
SHA-512:	2FE496890A6EC3F4C19192C42A634336AFFA9DD91E9AC28BEEE0C4DFE8337E2908728B4628C32EB3BB9F3DAFD0B6FA9F6B230CFC6DD0F473604564481876FC3A
Malicious:	false
Reputation:	low
URL:	https://content.googleapis.com/static/proxy.html?usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.gapi.en.SCWmpDDGjPk.O%2Fam%3DAAAC%2Fd%3D1%2Frs%3DAHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA%2Fm%3D__features__
Preview:	<!DOCTYPE html>.<html>.<head>.<title></title>.<meta http-equiv="X-UA-Compatible" content="IE=edge" />.<script nonce="lxqCfUeKqM5f-OZVBHF7RA">. window['startup'] = function() {. googleapis.server.init();. };.</script>.<script src="https://apis.google.com/js/googleapis.proxy.js?onload=startup" async defer nonce="lxqCfUeKqM5f-OZVBHF7RA"></script>.</head>.<body>.</body>.</html>.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2294)
Category:	downloaded
Size (bytes):	212455
Entropy (8bit):	5.517029873591766
Encrypted:	false
SSDEEP:	6144:B6vYMpJFK9FbQXD0VzvW1BKo6JMcwM5IRxUYidOxx7w04X46/PysGmOAi:IAMpJFsFbQXDoW1BKo6JMcD5IR6YidOx
MD5:	0A9CA0B85493CDB03AE2EBBCC05096B0
SHA1:	7AFA52AEC7E615DCF90187BC77E4BE2A04BCCE78
SHA-256:	FC7C9DDA5CC36489EEFE65E42DEDBFF1156D6BA48E6E4068311A95BF360A3152
SHA-512:	0CF7612D7E165C61D4912963913431B2587CFC70A53DBED2B756DE26C4875E4DA71F2704543A3830B4C1F5EAB1E919574520ABE78A6ACDC7CB5BC4BDF47EB665
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/og/_/js/k=og.qtm.en_US.HXYu-DUGTMg.2019.O/rt=j/m=qabr,q_dnp,qapid,qads,q_dg/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTtRvtbBFIN3h-_jsv-ID1cELyEQ1w"
Preview:	this.gbar_=this.gbar_\|\|{};(function(_){var window=this;.try{._.ke=function(a){return _.ld(a)&&1==a.nodeType};_.le=function(a,b){if("textContent"in a)a.textContent=b;else if(3==a.nodeType)a.data=String(b);else if(a.firstChild&&3==a.firstChild.nodeType){for(;a.lastChild!=a.firstChild;)a.removeChild(a.lastChild);a.firstChild.data=String(b)}else _.ie(a),a.appendChild(_.je(a).createTextNode(String(b)))};var me;_.ne=function(a,b,c){Array.isArray(c)&&(c=c.join(" "));var d="aria-"+b;""===c\|\|void 0==c?(me\|\|(me={atomic:!1,autocomplete:"none",dropeffect:"none",haspopup:!1,live:"off",multiline:!1,multiselectable:!1,orientation:"vertical",readonly:!1,relevant:"additions text",required:!1,sort:"none",busy:!1,disabled:!1,hidden:!1,invalid:"false"}),c=me,b in c?a.setAttribute(d,c[b]):a.removeAttribute(d)):a.setAttribute(d,c)};var re;_.qe=function(a,b,c,d,e,f){if(_.Mb&&e)return _.oe(a);if(e&&!d)return!1;if(!_.Kb){"number"===typeof b&&(b=_.pe(b));var g=17==b\|\|18==b\|\|_.Mb&&91==b;if((!c\|\|_.Mb)&&g\|\|_.Mb&&1

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	464
Entropy (8bit):	4.758217138015706
Encrypted:	false
SSDEEP:	12:uZC4v1CYZOgX8XP9GTBdA37dpXaGC8aLK:uZC4vgYZLPQ5C8a+
MD5:	BA6AB51487CFAEF8F7E56133C34AAE37
SHA1:	19DF244D1D07FF43020A7B001A5B27498507CB7D
SHA-256:	FB20FC7C1F7CFCF723EFCEE54434C316E05EE614F707502344330828FFC1CC98
SHA-512:	95EC94EE16487C430C45E98CF822425F2C7934F69CA257C5E20B1F9E659D6BBF6519E09AD65CE18DA8CA3786D477FC93286F3C6C6AAA1C08B319A4B9AAE854EA
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "blobcomments-pa.googleapis.com",. "consumer": "projects/298134251447". }. }. ]. }.}.

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	118370
Entropy (8bit):	5.846748398907928
Encrypted:	false
SSDEEP:	3072:Dz9w9o3/vsq1xCLqrQcS8xriAX7E1fbaRrcjS57l+QDk/J0/JOBv3:Dz9McHCLqEcS8xOAX7E1f2BP0
MD5:	BA7AB7044D6C6C0240C3917858948CFF
SHA1:	3B840B104CB3D74D5A35FBD193ACA32D27815D3E
SHA-256:	0189F7C6ED35A7BE5E51A30366FBC54C9C9E27D2511DB44895D85A1458F83AB5
SHA-512:	660D3407052C6965E6451C8D2AA9DC302C0F97129864E320731B89174F2A87B776201A57AA30A8CCF1A455700A6D9E2C42A070CC0F964D14A6D9E73DA47C4697
Malicious:	false
Reputation:	low
Preview:	<?xml version='1.0' encoding='UTF-8'?><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" x="0" y="0" width="31px" height="3980px" viewBox="0 0 31 3980" preserveAspectRatio="none"><g transform="translate(0,960)"><path d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,432)"><path fill="#C4C7C5" d="M20 2H4c-1.1 0-2 .9-2 2v18l4-4h14c1.1 0 2-.9 2-2V4c0-1.1-.9-2-2-2zm0 14H4V4h16v12zm-9-5H7V9h4V5h2v4h4v2h-4v4h-2v-4z"/></g><g transform="translate(0,2152)"><path d="M17.705 10.1401L14.3 4H9.70001L3.60001 15L5.70001 19H13.8027C14.2671 19.8028 14.9121 20.488 15.6822 21H5.70001C5.00001 21 4.30001 20.6 3.90001 19.9L1.80001 15.9C1.50001 15.3 1.50001 14.6 1.80001 14L8.00001 3C8.30001 2.4 9.00001 2 9.70001 2H14.3C15 2 15.7 2.4 16.1 3L20.0307 10.0882C19.6959 10.0

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15118
Entropy (8bit):	5.4657756428542035
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFC+5SYOelHO91eIuW:IQumA+QDnRNOG6
MD5:	EAB0DC82067FB5758A121009C7040231
SHA1:	8D869354F7A947ECC087B23868999BC53F77BDF7
SHA-256:	9C77D6DB3131248F92AE41075F189B4ECC2E51BCFDCCA143719A83145F8AC070
SHA-512:	280694C2A85A67CFFB24DEED946E46D7BF8F2C52194EEE037F981CA25A58730974B5F0CDC74CE86E81C5D252362E6792EB0B38C8816B3BF6C096A58C6C84F1C4
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/googleapis.proxy.js?onload=startup
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2566850
Entropy (8bit):	5.689671279024877
Encrypted:	false
SSDEEP:	24576:UCoBZ7KPOoNms5bIjTdRy7Tnv4eDEELsl5:yBZ7KPOoN95my7Tnv4eDEEL45
MD5:	C1FF39B98EC16FFF8698C27468A7C676
SHA1:	40BEB2301616450E33B31E7D60CDC776657F4719
SHA-256:	C2A2E94E07145046BED4F0FF8DBD32AF1595CD963561EA1224E16D56D4CCD4DF
SHA-512:	806516DA176059ABE48E2F8BAC93A9078645CABF34E277C0B605B42CBEB5B907F1C0510F3C742DE6394778A9F6ED655A3F6C8B84D18FF189B7A0D98CC3A2326E
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/apps-fileview/_/ss/k=apps-fileview.v.lYgTTI8AY9g.L.W.O/am=ABg/d=0/rs=AO0039tGaG0dDIakMsXIvy9Aw-P8VSDESg
Preview:	@-webkit-keyframes mdc-ripple-fg-radius-in{0%{-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-transform:translate(var(--mdc-ripple-fg-translate-start,0)) scale(1);-webkit-transform:translate(var(--mdc-ripple-fg-translate-start,0)) scale(1);transform:translate(var(--mdc-ripple-fg-translate-start,0)) scale(1)}to{-webkit-transform:translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1));-webkit-transform:translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1));transform:translate(var(--mdc-ripple-fg-translate-end,0)) scale(var(--mdc-ripple-fg-scale,1))}}@keyframes mdc-ripple-fg-radius-in{0%{-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-animation-timing-function:cubic-bezier(0.4,0,0.2,1);animation-timing-function:cubic-bezier(0.4,0,0.2,1);-webkit-transform:translate(var(--mdc-ripple-fg

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (962)
Category:	downloaded
Size (bytes):	14733
Entropy (8bit):	5.623935606996715
Encrypted:	false
SSDEEP:	192:CbQQgr7NQnHnRuxZVBPpRopmylvk1GZHpJSs0i34XQgTkbxWkgH0:CbQ3QnofZclvkwpJn07ARbl
MD5:	1F793C92BD1DC3E776B4B61FE46CC648
SHA1:	8C231CFB41183F041FC5793D465F1B74CAD872C6
SHA-256:	B87B7A49267E1712F9D29ED6DBE99FF290CBEE4DEA826ECC98E7FF3CD03158DE
SHA-512:	4D0F9CD509E4D3AF34385360E335AB4F330EC597D5793CE6EDBA8DDB23F3B87EA5563D574C7656F686561FBF2DC2F72A50711F34917F3A1B432BC919220D09FF
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en_GB.34kfJgAry94.O/am=ABg/d=0/rs=AO0039s8gBAD0z1C0ZXPGP2PO1Lpokeglg/m=sy5t,sy5x,sy5w,G5ZZUb,sy5y,a9i3ec,J9ssyb"
Preview:	try{.var NTc=function(){HF.apply(this,arguments)};N(NTc,HF);NTc.prototype.enqueue=function(a,b){this.insert(a,b)};var OTc=function(a,b){a%=b;return 0>a*b?a+b:a},PTc=function(a){return 1-Math.pow(1-a,3)};.}catch(e){_DumpException(e)}.try{.var oJd=function(a,b){this.C=a instanceof Pr?a:new Pr(a,b)};Cj(oJd,g_a);oJd.prototype.Pd=function(a,b,c,d){var e=Ur(a);var f=e.body;e=e.documentElement;e=new Pr(f.scrollLeft\|\|e.scrollLeft,f.scrollTop\|\|e.scrollTop);f=this.C.x+e.x;e=this.C.y+e.y;var g=h_a(a);f-=g.x;e-=g.y;DA(new Pr(f,e),a,b,c,null,null,d)};var pJd=function(a,b){oJd.call(this,a,b)};Cj(pJd,oJd);pJd.prototype.F=0;pJd.prototype.D=function(a){this.F=a};.pJd.prototype.Pd=function(a,b,c,d){var e=Dt(Bt(a)),f=$r(Hd(a).Jd);f=new Pr(this.C.x+f.scrollLeft,this.C.y+f.scrollTop);var g=b,k=DA(f,a,g,c,e,10,d);if(0!=(k&496)){if(k&16\|\|k&32)g^=4;if(k&64\|\|k&128)g^=1;k=DA(f,a,g,c,e,10,d);0!=(k&496)&&DA(f,a,b,c,e,this.F,d)}};var Q5=function(a,b){gB.call(this,a,b);this.DF=!0;$A(this,!0);this.va(!1,!0);this.C=n

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1293)
Category:	downloaded
Size (bytes):	208027
Entropy (8bit):	5.521227524487725
Encrypted:	false
SSDEEP:	3072:DZPnV7GetUe8q2fFZO3v2hLbs4unPb1Qq7p9+OyqnMrVsxpo0ahXSuPQBmgC:JV7setI/sZnGq7p9+OypAzwCuPQBmgC
MD5:	E2965C7B2C07132BA0770965EFE81CA4
SHA1:	B1AA82452465DD74BC80BDA33C62CE7ECB172064
SHA-256:	82B3F379A1BBB41DE5081E80DD9583AD5E77C011B501CDE5F9317463001F3CA2
SHA-512:	B88E3C8D16B64DB36D5A87808C04CA91A30525765ED7ECF117684C2A99F3BC6F12CA7B93C3BFCA99F7A3225A638A7ED0F1D25F47555EF3044A49575777F00DC3
Malicious:	false
Reputation:	low
URL:	"https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1"
Preview:	gapi.loaded_1(function(_){var window=this;._.yh=(window.gapi\|\|{}).load;._.Ko=_.lf(_.yf,"rw",_.mf());.var Lo=function(a,b){(a=_.Ko[a])&&a.state<b&&(a.state=b)};var Mo=function(a){a=(a=_.Ko[a])?a.oid:void 0;if(a){var b=_.hf.getElementById(a);b&&b.parentNode.removeChild(b);delete _.Ko[a];Mo(a)}};_.No=function(a){a=a.container;"string"===typeof a&&(a=document.getElementById(a));return a};_.Oo=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};._.Po=function(a,b){var c={},d=a.Gc(),e=b&&b.width,f=b&&b.height,h=b&&b.verticalAlign;h&&(c.verticalAlign=h);e\|\|(e=d.width\|\|a.width);f\|\|(f=d.height\|\|a.height);d.width=c.width=e;d.height=c.height=f;d=a.getIframeEl();e=a.getId();Lo(e,2);a:{e=a.getSiteEl();c=c\|\|{};if(_.yf.oa){var k=d.id;if(k){f=(f=_.Ko[k])?f.state:void 0;if(1===f\|\|4===f)break a;Mo(k)}}(f=e.nextSibling)&&f.dataset&&f.dataset.gapistub&&(e.parentNode.removeChild(f),e.style.cssText="");f=c.width;h=

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/docs/common/cleardot.gif?zx=foslbqt778ti
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	27287
Entropy (8bit):	5.5846008987990015
Encrypted:	false
SSDEEP:	192:ocbwXTbdhGo+7y0zhY7UVbqGIwDqwK2qiHd4HwwsIw6h5oxQ1fohjQ/VbqGIw4NZ:a3eVqS2LWuqlF7isqfq
MD5:	A4D49184D5EE811D1F859C928D41BEE6
SHA1:	ACD6B3AD62D31E9E2CB37E2E931CC78CAAE5FCC0
SHA-256:	10FB805E679F1F472880CE7651D5B39F8EE4DA5483CA55F96C26898FB115DB9F
SHA-512:	FABC6066E832443B87FD3D95567F7144CB01A6A23F080D1CF625B6537FFDF39BB15E67F3A6A4938E8F49E84C88839C79E3FF50A2239809CE17DEB0C6800AE42B
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans:300,400,500,700"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_I

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1841)
Category:	downloaded
Size (bytes):	936931
Entropy (8bit):	5.552086128299591
Encrypted:	false
SSDEEP:	12288:G8xWM8wzswKhfxLCtGeB2rY7zgJ+hoS8cyTiI:Gg8VpCtBB2rYoBS8cyb
MD5:	298D44CF3F67842626FCC491DF230DE9
SHA1:	AAB1261CE5A8D6335A5A2F962AA194E6029EA9C6
SHA-256:	2D6A0979709E301734C97FC66D5D94AB3F515A4AF9ECCFF49C09F0FD31BB9749
SHA-512:	1CB3A4BA9C71E8BF2C59018055D68C804310545640BC0540AD12F22262C38A31080CD2D6C5C1B3935C4227A134BE3AAD0103BBD54E5C8379F68500562CB05B17
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/apps-fileview/_/js/k=apps-fileview.v.en_GB.34kfJgAry94.O/am=ABg/d=0/rs=AO0039s8gBAD0z1C0ZXPGP2PO1Lpokeglg/m=dSirkf,sy5s,sy1p,n90YA,ZGAB2e,sLGWFe,sy1k,sy2s,sy1r,sy3h,sy16,M79aPc,sys,syu,sy13,sy1m,sy1q,sy1x,sy2k,sy2t,sy30,sy37,sy3j,sy3t,sy59,nJ4XF,sy5u,sy5v,UKcSG,AtsVYc"
Preview:	try{.z("dSirkf");..A();.}catch(e){_DumpException(e)}.try{.z("n90YA");.var MTc=new Er;MTc.altKey=!0;MTc.keyCode=39;(new Er).keyCode=13;.A();.}catch(e){_DumpException(e)}.try{.z("ZGAB2e");..A();.}catch(e){_DumpException(e)}.try{.z("sLGWFe");..A();.}catch(e){_DumpException(e)}.try{.var LN=function(a){this.da=q(a)};N(LN,v);LN.prototype.Kk=function(){return Yh(this,7)};var MN=function(a){this.da=q(a)};N(MN,v);MN.prototype.getName=function(){return F(this,4)};MN.prototype.Hp=function(){return F(this,11)};var NN=function(a){this.da=q(a)};N(NN,v);NN.prototype.getInfo=function(){return M(this,MN,1)};NN.prototype.Dl=function(){return M(this,LN,3)};.}catch(e){_DumpException(e)}.try{.var M0b=function(a){this.da=q(a)};N(M0b,v);M0b.prototype.getSeconds=function(){return ve(this,1)};.}catch(e){_DumpException(e)}.try{.var Pac=function(a){return a instanceof HO},HO=function(a,b){Dn.call(this,a,b)};N(HO,Dn);HO.prototype.Qv=function(a){a=L(a,Pac,HO);if(!Sl(this.constructor,a.constructor))throw a=new Bn,Y

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/images/branding/product/1x/drive_2020q4_32dp.png
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	626
Entropy (8bit):	4.60225951443478
Encrypted:	false
SSDEEP:	12:uZC4eGZC4SfPQgsyw1CYZOgX8XP9GTBdA3YNdpXaD8aLK:uZC4e6C4STwgYZLPQSXa+
MD5:	83A8719F50F54A04835CF33B68E9DA68
SHA1:	9A5B826814B6AF5960092F0D995E5D9C6317FC49
SHA-256:	E4C44B356156B57A483B9B8468946997FDEFFBCD600482C0B362ED9768A071FA
SHA-512:	D1BAC50E7CD13A1654A9A20F245CA53C4E100155F3669DF6A431E75FF198C2D2798A5C58EF46F335A69FA632CA08E0763F7B08D07721E2F82490565EE92942C3
Malicious:	false
Reputation:	low
Preview:	{. "error": {. "code": 403,. "message": "Requests from referer \u003cempty\u003e are blocked.",. "errors": [. {. "message": "Requests from referer \u003cempty\u003e are blocked.",. "domain": "global",. "reason": "forbidden". }. ],. "status": "PERMISSION_DENIED",. "details": [. {. "@type": "type.googleapis.com/google.rpc.ErrorInfo",. "reason": "API_KEY_HTTP_REFERRER_BLOCKED",. "domain": "googleapis.com",. "metadata": {. "service": "drive.googleapis.com",. "consumer": "projects/847707997455". }. }. ]. }.}.

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.690596689293278
Encrypted:	false
SSDEEP:	24:ars5HGJLO4eG5bQxWGUpbIW779bHBoLU489YmBZo:arssA4L6hvaZ7wv8mmI
MD5:	916C9BCCCF19525AD9D3CD1514008746
SHA1:	9CCCE6978D2417927B5150FFAAC22F907FF27B6E
SHA-256:	358E814139D3ED8469B36935A071BE6696CCAD7DD9BDBFDB80C052B068AE2A50
SHA-512:	B73C1A81997ABE12DBA4AE1FA38F070079448C3798E7161C9262CCBA6EE6A91E8A243F0E4888C8AEF33CE1CF83818FC44C85AE454A522A079D08121CD8628D00
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....IDATx.b .....+......m..dW.@..tm.Y.....m.....m.m..L.\|.....{..b...t..........=H..qt..V..X..<jQc...p...fdU.\2.....9T...Jz!9...L.)&.....n....`~.T.\.\.$.....qQ.....LFOx......^&,"bB..Lh9$_.6<...A...Q.T&y.,'...p...W`.2.?X(.o.4.J?.2...@.4.....X..c......[UZJ...MN.].z..f..DFe.J.....:!r...0X......).....^..!....u..c..R4.GH....Y....E....Q......+!..)...e"......,.Ge.r.T..!..r..(.\|.9f...}......(...s..N...[..~.%6QF..g..r......CN.e"(..uY.h._1.H.e....r.k..%^S.c..<..0.s.j..,D........]..y.2(..OC.o\.3..".....cw...:;.btq......w=.......R-[].4..]...?.....o..K../cC.<O...y..O.......{.-'Ln9..M.*6t.(.........o.K.$....bz.X._d......Z].U.....t....Bf.Zl.^vA._..g.{l....V...{....=.jua..[...k......j....Y\...!..+.m..X..t(....."..Mz.26l....7X.C...-...Z.lvl.......y}x..........7.m.VV....IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 8, 2024 14:15:08.629847050 CEST	49675	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:08.629852057 CEST	49674	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:08.754961967 CEST	49673	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:16.542638063 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.542686939 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.542757034 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.543045998 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.543081045 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.543143988 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.543267965 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.543278933 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.543555975 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.543570042 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.879719973 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.880119085 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.880129099 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.880501032 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.880599976 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.881211996 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.881275892 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.881370068 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.881612062 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.881628990 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.882028103 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.882090092 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.882730961 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.882796049 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.885426044 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.885490894 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.885581970 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.885643005 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.885971069 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:16.885977983 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:16.949424028 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.026824951 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.026842117 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.135571957 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.602580070 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.608230114 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.608328104 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.608354092 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.619699001 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.619776964 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.619786024 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.631138086 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.631242990 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.631249905 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.642657995 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.642749071 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.642760038 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.654057980 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.654122114 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.654128075 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.665585995 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.665694952 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.665705919 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.712227106 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.764661074 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.770212889 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.770241022 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.770345926 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.770356894 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.770405054 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.781682014 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.793134928 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.793163061 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.793199062 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.793210983 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.793256044 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.804594040 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.804641962 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.804701090 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.804707050 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.816031933 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.816097021 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.816109896 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.827512026 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.827585936 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.827591896 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.839029074 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.839103937 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.839109898 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.851836920 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.852010965 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.852018118 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.861156940 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.861251116 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.861255884 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.871119022 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.871207952 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.871217012 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.882178068 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.882256985 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.882265091 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.898842096 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.898874044 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.898910999 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.898920059 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.898967028 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.905284882 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.915086031 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.915115118 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.915148973 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.915158033 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.915205956 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.927761078 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.932590008 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.932642937 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.932668924 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.932674885 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.932722092 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.940587997 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.948308945 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.948364973 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.948374033 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.959244013 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.959320068 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.959326029 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.962910891 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.962992907 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.962997913 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.969922066 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.969984055 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.969990969 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.977219105 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.977252007 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.977282047 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.977288008 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.977325916 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.977346897 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.977418900 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:17.977497101 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.984348059 CEST	49710	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:17.984366894 CEST	443	49710	142.250.69.206	192.168.2.5
May 8, 2024 14:15:18.242418051 CEST	49675	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:18.242423058 CEST	49674	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:18.365859985 CEST	49673	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:19.242938042 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:19.242971897 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:19.243030071 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:19.243259907 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:19.243272066 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:19.581305981 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:19.581528902 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:19.581552982 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:19.582581043 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:19.582633018 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:19.732640028 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:19.732808113 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:19.774890900 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:19.774914026 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:19.799321890 CEST	443	49703	23.1.237.91	192.168.2.5
May 8, 2024 14:15:19.799468994 CEST	49703	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:19.820637941 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:21.012223005 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.013050079 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.013081074 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.013406992 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.013765097 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.013780117 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.060122013 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.062877893 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.062920094 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.063194990 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.063858986 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.063873053 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.240078926 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.240176916 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.240298033 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.241065025 CEST	49709	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.241086960 CEST	443	49709	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.348125935 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.348465919 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.348486900 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.348846912 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.349107027 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.349162102 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.349401951 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.392121077 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.393297911 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:21.393337011 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:21.393435955 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:21.395587921 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:21.395598888 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:21.400496960 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.400738001 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.400747061 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.401115894 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.401175976 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.401820898 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.401869059 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.688568115 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.688702106 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.714039087 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.714061022 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.714103937 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.714139938 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.733000040 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:21.733092070 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:21.752960920 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.753035069 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.753051043 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.754761934 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.760119915 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:21.763262033 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:21.895790100 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.959728956 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.959764957 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:21.959830999 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.960999966 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:21.961018085 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.036129951 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.036154032 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.036261082 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.036521912 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.036535025 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.101749897 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.103059053 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.103146076 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.105889082 CEST	49722	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.105904102 CEST	443	49722	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.163345098 CEST	49721	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.163366079 CEST	443	49721	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.296498060 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.373816967 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.467544079 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.467561007 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.468002081 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.468040943 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.468064070 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.468595028 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.468780041 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.468842030 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.469861984 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.469937086 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.470026970 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.470244884 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.470287085 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.470299006 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.516119003 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.516161919 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:22.516191006 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:22.516515017 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:22.569926023 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:22.783183098 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:22.824121952 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:22.856340885 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.864276886 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.864339113 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.865773916 CEST	49725	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.865796089 CEST	443	49725	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.875073910 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.875123024 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.875149012 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.875178099 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.875305891 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.884224892 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.884321928 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:22.884408951 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.884408951 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:22.901341915 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.901370049 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.901585102 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.908087015 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:22.908107042 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:22.946230888 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:22.946342945 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:22.946398020 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:22.946897984 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:22.946909904 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:22.946950912 CEST	49724	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:22.946955919 CEST	443	49724	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.000685930 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.000718117 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.000854969 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.001533031 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.001549006 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.032501936 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.032526970 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.032602072 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.033744097 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.033756971 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.044583082 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.044604063 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.044694901 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.045188904 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.045211077 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.045432091 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.045977116 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.045989037 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.046365023 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.046380043 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.198729992 CEST	49727	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.198755980 CEST	443	49727	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.202785015 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.202804089 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.202985048 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.203279972 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.203291893 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.232038975 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.232048035 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.232192993 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.232368946 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.232378006 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.242614031 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.242831945 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.242850065 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.243206978 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.243539095 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.243604898 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.243823051 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.243851900 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.243870974 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.336354971 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.336559057 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.336565971 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.336913109 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.337212086 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.337266922 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.337434053 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.337465048 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.337467909 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.365395069 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.365467072 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.366965055 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.366975069 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.367240906 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.368424892 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.384762049 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.384989023 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.385009050 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.385071039 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.385449886 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.385467052 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.386197090 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.386257887 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.386351109 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.386418104 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.416106939 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.543592930 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.544290066 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.544300079 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.544790983 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.544855118 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.545450926 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.545512915 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.545722008 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.545775890 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.545877934 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.565875053 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.566286087 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.566304922 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.566623926 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.566680908 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.567236900 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.567293882 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.586246014 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.586267948 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.603863001 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.603986979 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.611763954 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.612688065 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.612760067 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.621885061 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.621917963 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.622771025 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.622914076 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.623493910 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.623619080 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.623692989 CEST	49731	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.623711109 CEST	443	49731	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.626000881 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.626018047 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.626090050 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.626106977 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.632168055 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.666332006 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.700417042 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.700510025 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.700586081 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.711071968 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.711833000 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.713362932 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.715234995 CEST	49734	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:23.715244055 CEST	443	49734	142.251.33.110	192.168.2.5
May 8, 2024 14:15:23.741144896 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.741168022 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.789758921 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.789804935 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.789834976 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.789877892 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.789886951 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.789895058 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.789923906 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.800970078 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.801009893 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.801034927 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.801048994 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.801120996 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.812493086 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.823759079 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.823781967 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.823829889 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.823844910 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.823884964 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.840981007 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.874008894 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.874042034 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.874059916 CEST	49735	443	192.168.2.5	96.7.158.101
May 8, 2024 14:15:23.874068975 CEST	443	49735	96.7.158.101	192.168.2.5
May 8, 2024 14:15:23.882716894 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.912317038 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.912357092 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.912422895 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.912439108 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.948137045 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.948229074 CEST	443	49738	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.948304892 CEST	49738	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.950963020 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.950988054 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.951147079 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.951592922 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.951637983 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.951668978 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.951685905 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.951704025 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.951740980 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.951780081 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.951780081 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.951793909 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.951817036 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.951817989 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.957087994 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.957117081 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.957165956 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.957181931 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.957221031 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.962791920 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.962821007 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.962831020 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.962846041 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.962865114 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.962889910 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.962903976 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.962908983 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.967196941 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:23.967215061 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:23.968460083 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.971927881 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.972078085 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.972145081 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.974308968 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.974361897 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.974370003 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.975533962 CEST	49741	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:23.975544930 CEST	443	49741	142.250.217.78	192.168.2.5
May 8, 2024 14:15:23.979883909 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.979911089 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.979944944 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.979965925 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.980020046 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.985647917 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.985697985 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:23.985704899 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:23.991318941 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.002747059 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.002773046 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.002830029 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.002850056 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.002893925 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.014087915 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.024641991 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.024673939 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.024688959 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.024702072 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.024768114 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.035193920 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.045726061 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.045756102 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.045806885 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.045814991 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.045864105 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.056302071 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.066924095 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.066953897 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.067102909 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.067111969 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.067154884 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.077440977 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.088006973 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.088037014 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.088109016 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.088118076 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.088279009 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.113348961 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.113353968 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.113383055 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.113418102 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.113440037 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.116142988 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.118026018 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.118052006 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.118100882 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.118108988 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.118143082 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.119024038 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.126818895 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.130466938 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.130506992 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.130523920 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.130533934 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.130577087 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.135185957 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.135210037 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.135294914 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.135309935 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.135423899 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.141792059 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.142931938 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.150768995 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.150798082 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.150825977 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.150835037 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.150871992 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.150876999 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.153122902 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.153162003 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.153208971 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.153217077 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.153264999 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.158202887 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.158406973 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.158427000 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.164583921 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.165537119 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.165602922 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.165611029 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.172907114 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.172950029 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.172955990 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.175961018 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.176023006 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.176070929 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.176079988 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.176130056 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.180253029 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.180296898 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.180306911 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.186698914 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.191310883 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.191344976 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.191348076 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.191356897 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.191401005 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.197391033 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.197433949 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.197446108 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.197454929 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.197583914 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.198636055 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.206046104 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.206078053 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.206124067 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.206134081 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.206171989 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.208268881 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.213365078 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.218871117 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.218918085 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.218945980 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.218961954 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.219046116 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.220792055 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.220823050 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.220859051 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.220871925 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.220911980 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.228147030 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.229526997 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.239064932 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.239104986 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.239157915 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.239173889 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.239217043 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.240318060 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.240358114 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.240362883 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.240372896 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.240411997 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.242568016 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.251411915 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.251466990 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.251478910 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.252675056 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.256515980 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.256568909 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.256576061 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.263063908 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.263135910 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.263143063 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.269570112 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.269610882 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.269617081 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.279381990 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.279428959 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.279438972 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.279453993 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.279556036 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.280637980 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.280666113 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.280683994 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.280690908 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.280761003 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.282676935 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.287086010 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.289733887 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.289783955 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.289793968 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.293426037 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.293454885 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.293487072 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.293494940 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.293545961 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.297287941 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.297471046 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.297513962 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.297566891 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.297574997 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.297677040 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.301301956 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.301346064 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.301352024 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.303184032 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.303196907 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.303211927 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.303231001 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.303237915 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.303280115 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.304368019 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.307090998 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.307437897 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.307461023 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.307905912 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.307976007 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.308743954 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.308794975 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.310513973 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.310554981 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.310606956 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.310616016 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.310885906 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.310920000 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.310930014 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.310946941 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.310952902 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.314129114 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.314712048 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.319824934 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.320272923 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.320327997 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.320333958 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.324048996 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.324105978 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.324147940 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.324155092 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.324203968 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.326431990 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.326476097 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.326529980 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.326548100 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.327203989 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.327250957 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.330728054 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.332187891 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.332215071 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.332241058 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.332250118 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.332277060 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.333352089 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.336774111 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.338139057 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.338155031 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.340344906 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.340450048 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.340456009 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.341739893 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.342134953 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.342144012 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.343027115 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.343087912 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.343095064 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.343491077 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.343544960 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.343552113 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.345537901 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.345583916 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.345590115 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.346508026 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.346600056 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.346793890 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.346810102 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.349117041 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.349180937 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.349185944 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.350888014 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.350955009 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.350963116 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.352649927 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.352722883 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.352730036 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.356127024 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.356188059 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.356194973 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.358176947 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.358243942 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.358253002 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.360023975 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.360074043 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.360083103 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.363042116 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.363082886 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.363089085 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.365525961 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.365577936 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.365586996 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.366420984 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.366472006 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.366477966 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.369801998 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.369949102 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.369955063 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.372881889 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.372925043 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.372931957 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.374726057 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.374779940 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.374788046 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.374793053 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.374851942 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.378096104 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.380228043 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.380276918 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.380283117 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.381263971 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.381299019 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.381309986 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.381315947 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.381360054 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.384582996 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.387499094 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.387563944 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.387572050 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.387752056 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.387794018 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.387801886 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.387806892 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.387850046 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.390964031 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.394119024 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.394151926 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.394195080 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.394201994 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.394237041 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.394845963 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.395009995 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.395016909 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.398545980 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.400995016 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.401048899 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.401061058 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.402184963 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.402290106 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.402297020 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.403563976 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.403606892 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.403606892 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.403620958 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.403666019 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.406686068 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.409822941 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.409864902 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.409890890 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.409898996 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.409944057 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.412951946 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.414444923 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.414537907 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.414544106 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.416070938 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.416125059 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.416172981 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.416179895 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.416260958 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.417452097 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.417515039 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.417521000 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.420515060 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.420567989 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.421133041 CEST	49736	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.421144962 CEST	443	49736	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.422630072 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.431410074 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.431477070 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.431485891 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.434762001 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.438132048 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.438139915 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.439697027 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.439759016 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.439764977 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.445080042 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.445142031 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.445151091 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.451378107 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.454143047 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.454154015 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.457722902 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.457787037 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.457792997 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.466260910 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.468077898 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.468153954 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.468158960 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.468173981 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.468211889 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.468219042 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.468251944 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.468257904 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.468291998 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.504281044 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.563731909 CEST	49737	443	192.168.2.5	142.251.33.78
May 8, 2024 14:15:24.563767910 CEST	443	49737	142.251.33.78	192.168.2.5
May 8, 2024 14:15:24.580179930 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:24.628118992 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:24.667809010 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.667846918 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.667891026 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.667923927 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.805840015 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.817415953 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.817492008 CEST	443	49749	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.817548037 CEST	49749	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.830627918 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.830667973 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.830724001 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.853893042 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:24.853918076 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:24.913387060 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:24.913434982 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:24.913467884 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:24.913503885 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:24.913535118 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:24.913588047 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:24.913595915 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:24.913605928 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:24.913642883 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:25.143520117 CEST	49717	443	192.168.2.5	142.251.215.228
May 8, 2024 14:15:25.143553019 CEST	443	49717	142.251.215.228	192.168.2.5
May 8, 2024 14:15:25.187361956 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.201639891 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.201668024 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.202024937 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.202089071 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.202652931 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.202708006 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.214730024 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.214798927 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.215398073 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.215431929 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.306595087 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.559010029 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.559058905 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.559164047 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.559185028 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.563807011 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.563855886 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.564002037 CEST	443	49753	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.564024925 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.564058065 CEST	49753	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.565083981 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.565129042 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.565186024 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.566277027 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:25.566293955 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:25.900078058 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:26.008882046 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.298054934 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.298094988 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.298644066 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.298655033 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.298702955 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.299267054 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.299312115 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.301287889 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.301345110 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.302146912 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.302155972 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.499862909 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.502904892 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.502944946 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.502984047 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.503005981 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.545582056 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.545636892 CEST	443	49756	142.250.69.206	192.168.2.5
May 8, 2024 14:15:27.545764923 CEST	49756	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:27.595354080 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:27.595391989 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:27.595453978 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:27.595681906 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:27.595691919 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:27.725719929 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:27.725749016 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:27.725820065 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:27.726187944 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:27.726203918 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:27.928771973 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:27.929260969 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:27.929286957 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:27.930309057 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:27.930399895 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:27.930963993 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:27.931031942 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:27.931380987 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:27.931387901 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.055284023 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.060128927 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.105998993 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.106014013 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.107263088 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.107326984 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.108212948 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.108283043 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.108491898 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.108501911 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.257767916 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.265347004 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.265408993 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.265443087 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.265446901 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.265477896 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.265513897 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.265517950 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.265527964 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.265557051 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.265561104 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.276500940 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.276544094 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.276565075 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.287945986 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.288012981 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.288027048 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.299210072 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.299252033 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.299272060 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.310659885 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.310720921 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.317926884 CEST	49758	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.317950964 CEST	443	49758	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.360992908 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.361043930 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.361144066 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.361474037 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.361485004 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.395975113 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.396032095 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.396074057 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.396087885 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.396203995 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.396261930 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.397207022 CEST	49759	443	192.168.2.5	142.250.217.100
May 8, 2024 14:15:28.397222996 CEST	443	49759	142.250.217.100	192.168.2.5
May 8, 2024 14:15:28.695602894 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.696255922 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.696279049 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.696666002 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.698158026 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.698260069 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.698894024 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:28.744117022 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:28.878967047 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:28.879014969 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:28.879199028 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:28.880413055 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:28.880424976 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:29.027102947 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.027149916 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.027204037 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.027230978 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.027236938 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.027260065 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.028120041 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.028125048 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.032108068 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.038724899 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.050302982 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.050333977 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.050649881 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.050666094 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.052294970 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.061511993 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.074242115 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.080112934 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.080121994 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.149317026 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.198276997 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.203916073 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.203948021 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.203979969 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.204004049 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.204108953 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.215547085 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.226943970 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.226979971 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.227340937 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.227348089 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.227495909 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.237047911 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.248281002 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.248305082 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.248327017 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.248332024 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.248378038 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.258882999 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.269532919 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.269562960 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.269592047 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.269597054 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.270929098 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.280041933 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.290704012 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.290741920 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.290770054 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.290791988 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.290878057 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.303369999 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.314563990 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.314591885 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.315119982 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.315124989 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.315427065 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.322853088 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.334016085 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.334048986 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.334089994 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.334095001 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.336210012 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.362488985 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.368341923 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.368371010 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.368395090 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.368407965 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.368479967 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.379007101 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.389640093 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.389668941 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.389911890 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.389923096 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.389970064 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.400309086 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.410850048 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.410890102 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.410912991 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.410921097 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.411362886 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.419871092 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.431173086 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.431212902 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.431617975 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.431642056 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.431763887 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.440263033 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.451405048 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.451524019 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.451546907 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.454905033 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.455045938 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.455060959 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.462208986 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.462392092 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.462414026 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.471759081 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:29.472040892 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.472040892 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.797477961 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:29.797553062 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:29.801337957 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:29.801351070 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:29.801650047 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:29.960046053 CEST	49761	443	192.168.2.5	172.217.14.206
May 8, 2024 14:15:29.960051060 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:29.960067034 CEST	443	49761	172.217.14.206	192.168.2.5
May 8, 2024 14:15:30.155778885 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.155822992 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.155898094 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.156264067 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.156286001 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.396493912 CEST	49703	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:30.405949116 CEST	49703	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:30.408025026 CEST	49774	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:30.408055067 CEST	443	49774	23.1.237.91	192.168.2.5
May 8, 2024 14:15:30.408128977 CEST	49774	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:30.409178972 CEST	49774	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:30.409193039 CEST	443	49774	23.1.237.91	192.168.2.5
May 8, 2024 14:15:30.490302086 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.490617037 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.490643024 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.491027117 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.492115021 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.492177010 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.492331028 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.517977953 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:30.536128998 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.560116053 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:30.587215900 CEST	443	49703	23.1.237.91	192.168.2.5
May 8, 2024 14:15:30.596564054 CEST	443	49703	23.1.237.91	192.168.2.5
May 8, 2024 14:15:30.803949118 CEST	443	49774	23.1.237.91	192.168.2.5
May 8, 2024 14:15:30.804049015 CEST	49774	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:30.937448025 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.941201925 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.941342115 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.942110062 CEST	49769	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:30.942136049 CEST	443	49769	142.250.69.206	192.168.2.5
May 8, 2024 14:15:30.951647997 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:30.951702118 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:30.951817036 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:30.952404022 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:30.952445030 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:30.952610970 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:30.953530073 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:30.953528881 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:30.953543901 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:30.953547955 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.121736050 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121763945 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121771097 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121783972 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121793032 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121800900 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121859074 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:31.121891022 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121901989 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121911049 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121931076 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121951103 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:31.121963978 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.121989012 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:31.122066975 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:31.288094997 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.289347887 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.289674044 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:31.289700985 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.290110111 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.290148973 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:31.290164948 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.290529013 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.294665098 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:31.294753075 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.295048952 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:31.295146942 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:31.295146942 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:31.295180082 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.295202971 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.295361042 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:31.340131998 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.502096891 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:31.502130032 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.502202988 CEST	49763	443	192.168.2.5	40.127.169.103
May 8, 2024 14:15:31.502209902 CEST	443	49763	40.127.169.103	192.168.2.5
May 8, 2024 14:15:31.662053108 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.662681103 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.666214943 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:31.699872971 CEST	49778	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:31.699911118 CEST	443	49778	142.251.33.110	192.168.2.5
May 8, 2024 14:15:31.733357906 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:31.733392000 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:31.733480930 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:31.733928919 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:31.733937979 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:31.752466917 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.752511024 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.752535105 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.752571106 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:31.752584934 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.752619982 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:31.758579969 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.758754015 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:31.759594917 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:31.760387897 CEST	49777	443	192.168.2.5	142.250.217.78
May 8, 2024 14:15:31.760396004 CEST	443	49777	142.250.217.78	192.168.2.5
May 8, 2024 14:15:32.066979885 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.068727016 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.068749905 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.069190025 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.069252968 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.069925070 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.069983959 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.071016073 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.071104050 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.071700096 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.071706057 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.148580074 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.436265945 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.436311007 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.436372042 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.436393023 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.442665100 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:32.442720890 CEST	443	49783	142.250.69.206	192.168.2.5
May 8, 2024 14:15:32.442776918 CEST	49783	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:40.150115013 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.150147915 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.150424957 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.152244091 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.152254105 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.152256966 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.152283907 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.152475119 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.152760983 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.152772903 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.487114906 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.487622976 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.487646103 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.487973928 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.488481998 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.488507986 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.488507986 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.488512993 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.488543987 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.489869118 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.490205050 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.490219116 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.490540981 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.490931988 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.490988016 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.491086960 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.491086960 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.491101980 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.538839102 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.851998091 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.852669954 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.852765083 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.856389999 CEST	49787	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.856405973 CEST	443	49787	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.859158993 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.859270096 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.859333038 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.860831022 CEST	49786	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:40.860843897 CEST	443	49786	142.251.33.110	192.168.2.5
May 8, 2024 14:15:40.868427038 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:40.868463993 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:40.868599892 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:40.868921041 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:40.868937969 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.205307961 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.218966007 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.218996048 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.219432116 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.219500065 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.220061064 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.220113039 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.230583906 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.230705023 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.241887093 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.241924047 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.287884951 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.571908951 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.571948051 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.572019100 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.572050095 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.574199915 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.574240923 CEST	443	49788	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.574299097 CEST	49788	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.575335979 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.575371027 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.575453043 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.576612949 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.576623917 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.912691116 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.913067102 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.913086891 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.913408041 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.913471937 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.914021969 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.914076090 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.914253950 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.914303064 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.914607048 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:41.914613008 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:41.959777117 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:42.286933899 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:42.286973953 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:42.287036896 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:42.287064075 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:42.289589882 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:42.289632082 CEST	443	49789	142.250.69.206	192.168.2.5
May 8, 2024 14:15:42.289777994 CEST	49789	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:47.680687904 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:47.680716038 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:47.680816889 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:47.681006908 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:47.681021929 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.023610115 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.024190903 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.024208069 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.024847984 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.024967909 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.025990009 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.026089907 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.026098013 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.031759024 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.031759024 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.031779051 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.031920910 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.084615946 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.084625959 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.131577969 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.449683905 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.452656984 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.452917099 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.454106092 CEST	49793	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.454129934 CEST	443	49793	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.621136904 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.621181965 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.621304989 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.621557951 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.621583939 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.959212065 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.959578991 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.959592104 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.959923983 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.960120916 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.960541010 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.960733891 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.960741997 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:48.961126089 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.961126089 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:48.961184025 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:49.006525993 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:49.006536007 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:49.053401947 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:49.293150902 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:49.296128988 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:49.296482086 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:49.296482086 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:49.600348949 CEST	49795	443	192.168.2.5	142.251.33.97
May 8, 2024 14:15:49.600380898 CEST	443	49795	142.251.33.97	192.168.2.5
May 8, 2024 14:15:49.990351915 CEST	443	49774	23.1.237.91	192.168.2.5
May 8, 2024 14:15:49.990567923 CEST	49774	443	192.168.2.5	23.1.237.91
May 8, 2024 14:15:51.296222925 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.296256065 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.296324015 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.296617985 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.296627998 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.637845039 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.678670883 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.678694010 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.679341078 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.679406881 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.680110931 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.680157900 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.680839062 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.680922031 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.682549000 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:51.682554960 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:51.725684881 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.006442070 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.006531000 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.006630898 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.007613897 CEST	49796	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.007638931 CEST	443	49796	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.009562969 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.009604931 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.010171890 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.010468006 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.010483027 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.347135067 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.347738981 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.347764969 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.348140001 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.350783110 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.350783110 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.350799084 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.350843906 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.350918055 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.392132998 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.397557020 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.712584019 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.713016033 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.713459969 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.713740110 CEST	49798	443	192.168.2.5	142.251.33.110
May 8, 2024 14:15:52.713766098 CEST	443	49798	142.251.33.110	192.168.2.5
May 8, 2024 14:15:52.741246939 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:52.741283894 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:52.741662979 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:52.742098093 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:52.742119074 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.078340054 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.086119890 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.086148024 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.086656094 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.086728096 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.087390900 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.087444067 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.089823961 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.089890003 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.090774059 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.090787888 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.132157087 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.449754000 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.449794054 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.449835062 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.449862003 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.451983929 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:15:53.452018976 CEST	443	49799	142.250.69.206	192.168.2.5
May 8, 2024 14:15:53.452068090 CEST	49799	443	192.168.2.5	142.250.69.206
May 8, 2024 14:16:08.302267075 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:08.302311897 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:08.302576065 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:08.303632021 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:08.303647995 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:08.975192070 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:08.975261927 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:08.984457016 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:08.984476089 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:08.984736919 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:09.001063108 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:09.044116020 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:09.630191088 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:09.630211115 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:09.630228996 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:09.630300045 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:09.630315065 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:09.630368948 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:09.630379915 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:09.630583048 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:09.638017893 CEST	49800	443	192.168.2.5	52.165.165.26
May 8, 2024 14:16:09.638036966 CEST	443	49800	52.165.165.26	192.168.2.5
May 8, 2024 14:16:19.126305103 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:19.126336098 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:19.126486063 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:19.127403021 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:19.127413988 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:19.462779999 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:19.463099957 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:19.463121891 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:19.463439941 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:19.463783979 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:19.463845015 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:19.507332087 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:29.504909039 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:29.504988909 CEST	443	49804	142.251.215.228	192.168.2.5
May 8, 2024 14:16:29.505045891 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:31.264499903 CEST	49804	443	192.168.2.5	142.251.215.228
May 8, 2024 14:16:31.264528990 CEST	443	49804	142.251.215.228	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 8, 2024 14:15:15.171250105 CEST	53	49586	1.1.1.1	192.168.2.5
May 8, 2024 14:15:15.179195881 CEST	53	65076	1.1.1.1	192.168.2.5
May 8, 2024 14:15:16.121958971 CEST	53	53700	1.1.1.1	192.168.2.5
May 8, 2024 14:15:16.377580881 CEST	60856	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:16.379091978 CEST	52626	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:16.540626049 CEST	53	60856	1.1.1.1	192.168.2.5
May 8, 2024 14:15:16.542009115 CEST	53	52626	1.1.1.1	192.168.2.5
May 8, 2024 14:15:17.811176062 CEST	53	62426	1.1.1.1	192.168.2.5
May 8, 2024 14:15:17.812377930 CEST	53	59281	1.1.1.1	192.168.2.5
May 8, 2024 14:15:18.723051071 CEST	53	55935	1.1.1.1	192.168.2.5
May 8, 2024 14:15:19.075927019 CEST	49783	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:19.076277018 CEST	54482	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:19.238575935 CEST	53	49783	1.1.1.1	192.168.2.5
May 8, 2024 14:15:19.238965988 CEST	53	54482	1.1.1.1	192.168.2.5
May 8, 2024 14:15:20.896687031 CEST	58891	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:20.897294044 CEST	63128	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:21.059189081 CEST	53	58891	1.1.1.1	192.168.2.5
May 8, 2024 14:15:21.060813904 CEST	53	63128	1.1.1.1	192.168.2.5
May 8, 2024 14:15:21.240708113 CEST	53	58222	1.1.1.1	192.168.2.5
May 8, 2024 14:15:22.321434975 CEST	53	49850	1.1.1.1	192.168.2.5
May 8, 2024 14:15:22.878741026 CEST	56722	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:22.879250050 CEST	57023	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:23.038403988 CEST	53475	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:23.039503098 CEST	63567	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:23.043373108 CEST	53	56722	1.1.1.1	192.168.2.5
May 8, 2024 14:15:23.043792009 CEST	53	57023	1.1.1.1	192.168.2.5
May 8, 2024 14:15:23.067508936 CEST	51178	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:23.067991972 CEST	58695	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:23.201354980 CEST	53	53475	1.1.1.1	192.168.2.5
May 8, 2024 14:15:23.202241898 CEST	53	63567	1.1.1.1	192.168.2.5
May 8, 2024 14:15:23.205530882 CEST	53	60212	1.1.1.1	192.168.2.5
May 8, 2024 14:15:23.230062962 CEST	53	51178	1.1.1.1	192.168.2.5
May 8, 2024 14:15:23.231615067 CEST	53	58695	1.1.1.1	192.168.2.5
May 8, 2024 14:15:24.864645004 CEST	52948	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:24.865025997 CEST	51228	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:25.022267103 CEST	53	60340	1.1.1.1	192.168.2.5
May 8, 2024 14:15:25.035084963 CEST	53	52948	1.1.1.1	192.168.2.5
May 8, 2024 14:15:25.073852062 CEST	53	51228	1.1.1.1	192.168.2.5
May 8, 2024 14:15:27.427083969 CEST	61650	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:27.427421093 CEST	60900	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:27.562355995 CEST	55066	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:27.562469959 CEST	56659	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:27.593318939 CEST	53	61650	1.1.1.1	192.168.2.5
May 8, 2024 14:15:27.594821930 CEST	53	60900	1.1.1.1	192.168.2.5
May 8, 2024 14:15:27.724932909 CEST	53	56659	1.1.1.1	192.168.2.5
May 8, 2024 14:15:27.725208998 CEST	53	55066	1.1.1.1	192.168.2.5
May 8, 2024 14:15:28.338596106 CEST	56931	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:28.338778019 CEST	63434	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:28.502003908 CEST	53	56931	1.1.1.1	192.168.2.5
May 8, 2024 14:15:28.509814024 CEST	53	63434	1.1.1.1	192.168.2.5
May 8, 2024 14:15:30.138319969 CEST	55959	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:30.138500929 CEST	60860	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:30.301263094 CEST	53	55959	1.1.1.1	192.168.2.5
May 8, 2024 14:15:30.302366018 CEST	53	60860	1.1.1.1	192.168.2.5
May 8, 2024 14:15:33.535137892 CEST	53	54385	1.1.1.1	192.168.2.5
May 8, 2024 14:15:47.516556025 CEST	63921	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:47.517031908 CEST	57821	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:47.667685032 CEST	53	57895	1.1.1.1	192.168.2.5
May 8, 2024 14:15:47.679181099 CEST	53	63921	1.1.1.1	192.168.2.5
May 8, 2024 14:15:47.680246115 CEST	53	57821	1.1.1.1	192.168.2.5
May 8, 2024 14:15:48.456526995 CEST	56665	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:48.456983089 CEST	58253	53	192.168.2.5	1.1.1.1
May 8, 2024 14:15:48.619286060 CEST	53	56665	1.1.1.1	192.168.2.5
May 8, 2024 14:15:48.620515108 CEST	53	58253	1.1.1.1	192.168.2.5
May 8, 2024 14:15:52.897253990 CEST	53	53379	1.1.1.1	192.168.2.5
May 8, 2024 14:16:14.830909967 CEST	53	49162	1.1.1.1	192.168.2.5
May 8, 2024 14:16:15.498796940 CEST	53	49427	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 8, 2024 14:15:16.377580881 CEST	192.168.2.5	1.1.1.1	0xbd6b	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:16.379091978 CEST	192.168.2.5	1.1.1.1	0xe88a	Standard query (0)	drive.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:19.075927019 CEST	192.168.2.5	1.1.1.1	0x687c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:19.076277018 CEST	192.168.2.5	1.1.1.1	0xed05	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:20.896687031 CEST	192.168.2.5	1.1.1.1	0x7911	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:20.897294044 CEST	192.168.2.5	1.1.1.1	0xb50e	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:22.878741026 CEST	192.168.2.5	1.1.1.1	0xfb4f	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:22.879250050 CEST	192.168.2.5	1.1.1.1	0x28ab	Standard query (0)	apis.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:23.038403988 CEST	192.168.2.5	1.1.1.1	0x57a8	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:23.039503098 CEST	192.168.2.5	1.1.1.1	0xca2c	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:23.067508936 CEST	192.168.2.5	1.1.1.1	0xc2f0	Standard query (0)	drive.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:23.067991972 CEST	192.168.2.5	1.1.1.1	0x4517	Standard query (0)	drive.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:24.864645004 CEST	192.168.2.5	1.1.1.1	0xeda2	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:24.865025997 CEST	192.168.2.5	1.1.1.1	0xbf64	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:27.427083969 CEST	192.168.2.5	1.1.1.1	0x642d	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:27.427421093 CEST	192.168.2.5	1.1.1.1	0xa2ad	Standard query (0)	apis.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:27.562355995 CEST	192.168.2.5	1.1.1.1	0xbacf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:27.562469959 CEST	192.168.2.5	1.1.1.1	0x1f4f	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:28.338596106 CEST	192.168.2.5	1.1.1.1	0xc93b	Standard query (0)	blobcomments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:28.338778019 CEST	192.168.2.5	1.1.1.1	0x3031	Standard query (0)	blobcomments-pa.clients6.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:30.138319969 CEST	192.168.2.5	1.1.1.1	0x9a4b	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:30.138500929 CEST	192.168.2.5	1.1.1.1	0xcdc7	Standard query (0)	peoplestackwebexperiments-pa.clients6.google.com	65	IN (0x0001)	false
May 8, 2024 14:15:47.516556025 CEST	192.168.2.5	1.1.1.1	0xf416	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:47.517031908 CEST	192.168.2.5	1.1.1.1	0x2d47	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
May 8, 2024 14:15:48.456526995 CEST	192.168.2.5	1.1.1.1	0x9ee6	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:48.456983089 CEST	192.168.2.5	1.1.1.1	0x10f8	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 8, 2024 14:15:16.540626049 CEST	1.1.1.1	192.168.2.5	0xbd6b	No error (0)	drive.google.com		142.250.69.206	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:19.238575935 CEST	1.1.1.1	192.168.2.5	0x687c	No error (0)	www.google.com		142.251.215.228	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:19.238965988 CEST	1.1.1.1	192.168.2.5	0xed05	No error (0)	www.google.com			65	IN (0x0001)	false
May 8, 2024 14:15:21.059189081 CEST	1.1.1.1	192.168.2.5	0x7911	No error (0)	play.google.com		142.251.33.110	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:23.043373108 CEST	1.1.1.1	192.168.2.5	0xfb4f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:23.043373108 CEST	1.1.1.1	192.168.2.5	0xfb4f	No error (0)	plus.l.google.com		142.251.33.78	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:23.043792009 CEST	1.1.1.1	192.168.2.5	0x28ab	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:23.201354980 CEST	1.1.1.1	192.168.2.5	0x57a8	No error (0)	play.google.com		142.250.69.206	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:23.230062962 CEST	1.1.1.1	192.168.2.5	0xc2f0	No error (0)	drive.google.com		142.250.217.78	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:25.035084963 CEST	1.1.1.1	192.168.2.5	0xeda2	No error (0)	blobcomments-pa.clients6.google.com		142.250.217.106	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:27.593318939 CEST	1.1.1.1	192.168.2.5	0x642d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:27.593318939 CEST	1.1.1.1	192.168.2.5	0x642d	No error (0)	plus.l.google.com		172.217.14.206	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:27.594821930 CEST	1.1.1.1	192.168.2.5	0xa2ad	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:27.724932909 CEST	1.1.1.1	192.168.2.5	0x1f4f	No error (0)	www.google.com			65	IN (0x0001)	false
May 8, 2024 14:15:27.725208998 CEST	1.1.1.1	192.168.2.5	0xbacf	No error (0)	www.google.com		142.250.217.100	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:28.502003908 CEST	1.1.1.1	192.168.2.5	0xc93b	No error (0)	blobcomments-pa.clients6.google.com		142.250.69.202	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:29.803570986 CEST	1.1.1.1	192.168.2.5	0x9c06	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:29.803570986 CEST	1.1.1.1	192.168.2.5	0x9c06	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:30.129136086 CEST	1.1.1.1	192.168.2.5	0xc448	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:30.129136086 CEST	1.1.1.1	192.168.2.5	0xc448	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:30.301263094 CEST	1.1.1.1	192.168.2.5	0x9a4b	No error (0)	peoplestackwebexperiments-pa.clients6.google.com		142.250.69.202	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:44.141628981 CEST	1.1.1.1	192.168.2.5	0xc36e	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:44.141628981 CEST	1.1.1.1	192.168.2.5	0xc36e	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:47.679181099 CEST	1.1.1.1	192.168.2.5	0xf416	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:47.679181099 CEST	1.1.1.1	192.168.2.5	0xf416	No error (0)	googlehosted.l.googleusercontent.com		142.251.33.97	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:47.680246115 CEST	1.1.1.1	192.168.2.5	0x2d47	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:48.619286060 CEST	1.1.1.1	192.168.2.5	0x9ee6	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:15:48.619286060 CEST	1.1.1.1	192.168.2.5	0x9ee6	No error (0)	googlehosted.l.googleusercontent.com		142.251.33.97	A (IP address)	IN (0x0001)	false
May 8, 2024 14:15:48.620515108 CEST	1.1.1.1	192.168.2.5	0x10f8	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 8, 2024 14:16:07.983695030 CEST	1.1.1.1	192.168.2.5	0x36f5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 8, 2024 14:16:07.983695030 CEST	1.1.1.1	192.168.2.5	0x36f5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 8, 2024 14:16:31.452510118 CEST	1.1.1.1	192.168.2.5	0xd9da	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 8, 2024 14:16:31.452510118 CEST	1.1.1.1	192.168.2.5	0xd9da	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

drive.google.com

https:

play.google.com

apis.google.com

www.google.com

lh3.googleusercontent.com

fs.microsoft.com

slscr.update.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:16 UTC	862	OUT	GET /file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 12:15:17 UTC	1315	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 May 2024 12:15:17 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: script-src 'report-sample' 'nonce-wMSmOruP8pHNtXOdAtZDRg' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Set-Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs; expires=Thu, 07-Nov-2024 12:15:17 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 34 37 32 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 74 72 61 6e 73 6c 61 74 65 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 3b 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 38 31 34 75 56 33 69 61 56 73 65 31 73 36 64 33 6b 71 58 42 75 51 22 3e 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 Data Ascii: 4727<!DOCTYPE html><html><head><meta name="google" content="notranslate"><meta http-equiv="X-UA-Compatible" content="IE=edge;"><style nonce="814uV3iaVse1s6d3kqXBuQ">@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstati
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6b 43 6e 71 45 75 39 32 46 72 31 4d 75 35 31 78 47 49 7a 49 46 4b 77 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 41 46 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 31 45 30 30 2d 31 Data Ascii: 0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:italic;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)format('woff2');unicode-range:U+0100-02AF,U+0304,U+0308,U+0329,U+1E00-1
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 33 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 53 55 35 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 37 30 2d 30 33 37 37 2c 55 2b 30 33 37 41 2d 30 33 37 46 2c 55 2b 30 33 38 34 2d 30 33 38 41 2c 55 2b 30 33 38 43 2c 55 2b 30 33 38 45 2d 30 33 41 31 2c 55 2b 30 33 41 33 2d 30 33 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 Data Ascii: ce{font-family:'Roboto';font-style:normal;font-weight:300;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)format('woff2');unicode-range:U+0370-0377,U+037A-037F,U+0384-038A,U+038C,U+038E-03A1,U+03A3-03FF;}@font-face{font-family:'
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 35 6d 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 Data Ascii: );unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)format('woff2');unicode-range:U+03
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 34 6d 78 4b 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 30 30 30 2d 30 30 46 46 2c 55 2b 30 31 33 31 2c 55 2b 30 31 35 32 2d 30 31 35 33 2c 55 2b 30 32 42 42 2d 30 32 42 43 2c 55 2b 30 32 43 36 2c 55 2b 30 32 44 41 2c 55 2b 30 32 44 43 2c 55 2b 30 33 30 34 2c 55 2b 30 33 30 38 2c 55 2b 30 33 32 39 2c 55 2b 32 30 30 30 2d 32 Data Ascii: ont-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2)format('woff2');unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-2
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 32 2d 30 31 30 33 2c 55 2b 30 31 31 30 2d 30 31 31 31 2c 55 2b 30 31 32 38 2d 30 31 32 39 2c 55 2b 30 31 36 38 2d 30 31 36 39 2c 55 2b 30 31 41 30 2d 30 31 41 31 2c 55 2b 30 31 41 46 2d 30 31 42 30 2c 55 2b 30 33 30 30 2d 30 33 30 31 2c 55 2b 30 33 30 33 2d 30 33 30 34 2c 55 2b 30 33 30 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b Data Ascii: FOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)format('woff2');unicode-range:U+0102-0103,U+0110-0111,U+0128-0129,U+0168-0169,U+01A0-01A1,U+01AF-01B0,U+0300-0301,U+0303-0304,U+0308-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB;}@font-face{font-family:'Roboto';font-style:normal;
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 31 46 30 30 2d 31 46 46 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f Data Ascii: o';font-style:normal;font-weight:700;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)format('woff2');unicode-range:U+1F00-1FFF;}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;src:url(//fonts.gstatic.com/s/robo
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 45 46 46 2c 55 2b 46 46 46 44 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 74 69 74 6c 65 3e 53 74 69 63 6b 52 50 47 2e 7a 69 70 20 2d 20 47 6f 6f 67 6c 65 20 44 72 69 76 65 3c 2f 74 69 74 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 77 4d 53 6d 4f 72 75 50 38 70 48 4e 74 58 4f 64 41 74 5a 44 52 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 5b 27 5f 44 52 49 56 45 5f 56 49 45 57 45 52 5f 49 56 49 53 27 5d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3b 0a 20 20 20 20 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 Data Ascii: EFF,U+FFFD;}</style><meta name="referrer" content="origin"><title>StickRPG.zip - Google Drive</title><script nonce="wMSmOruP8pHNtXOdAtZDRg"> window['_DRIVE_VIEWER_IVIS'] = document.visibilityState; </script><meta property="og:title" cont
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 22 3a 30 2c 22 64 6f 63 73 2d 6c 73 64 22 3a 33 2c 22 64 6f 63 73 2d 6f 72 6c 22 3a 31 2c 22 64 6f 63 73 2d 73 68 64 6e 22 3a 30 2c 22 64 6f 63 73 2d 74 66 68 22 3a 22 22 2c 22 64 6f 63 73 2d 65 65 74 74 22 3a 74 72 75 65 2c 22 69 6e 66 6f 5f 70 61 72 61 6d 73 22 3a 7b 7d 2c 22 64 6f 63 73 2d 65 63 64 68 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 61 72 77 64 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 62 75 77 64 77 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 63 73 64 77 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 64 63 65 69 64 77 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 65 63 64 77 6d 22 3a 74 72 75 65 2c 22 64 6f 63 73 2d 65 65 65 67 72 73 64 6d 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 65 63 70 64 6d 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 Data Ascii: ":0,"docs-lsd":3,"docs-orl":1,"docs-shdn":0,"docs-tfh":"","docs-eett":true,"info_params":{},"docs-ecdh":false,"docs-earwdm":true,"docs-ebuwdwm":true,"docs-ecsdwm":true,"docs-edceidwm":true,"docs-eecdwm":true,"docs-eeegrsdm":false,"docs-eecpdm":false,"docs
2024-05-08 12:15:17 UTC	1315	IN	Data Raw: 6f 6d 2f 64 6f 63 73 2f 63 6f 6d 6d 6f 6e 2f 6e 65 74 63 68 65 63 6b 2e 67 69 66 22 2c 22 64 6f 63 73 2d 65 63 75 61 63 68 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 63 63 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 65 73 69 22 3a 66 61 6c 73 65 2c 22 64 6f 63 73 2d 63 65 69 22 3a 7b 22 69 22 3a 5b 35 30 32 36 36 30 37 30 2c 34 39 38 33 33 34 39 30 2c 37 31 36 31 34 35 36 33 2c 35 30 35 32 39 32 37 31 2c 35 37 31 32 36 34 37 2c 37 31 39 32 34 33 33 39 2c 35 30 30 38 32 38 34 38 2c 35 30 32 39 37 33 37 34 2c 35 37 31 31 35 33 38 2c 37 31 35 35 34 33 32 30 2c 39 34 33 38 31 38 37 34 2c 34 39 34 37 32 30 39 31 2c 35 30 32 32 34 32 39 33 2c 39 34 35 30 37 36 31 35 2c 39 34 36 31 38 35 37 30 2c 37 31 35 33 30 31 39 31 2c 37 31 34 30 31 35 31 36 2c 35 37 30 Data Ascii: om/docs/common/netcheck.gif","docs-ecuach":false,"docs-ecci":false,"docs-esi":false,"docs-cei":{"i":[50266070,49833490,71614563,50529271,5712647,71924339,50082848,50297374,5711538,71554320,94381874,49472091,50224293,94507615,94618570,71530191,71401516,570

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49709	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:21 UTC	1025	OUT	GET /auth_warmup HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
2024-05-08 12:15:21 UTC	1658	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 May 2024 12:15:21 GMT Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-mDYzaZBEJAVemdwI0DmFCQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveOsidBootstrap/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveOsidBootstrap/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveOsidBootstrap/cspreport Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/DriveOsidBootstrap/web-reports?context=eJzjEtDikmJw15BicEqfwRoCxELcHDdvvt3IJvBh_iF7AG0QCas" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49721	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:21 UTC	1146	OUT	GET /drivesharing/clientmodel?id=12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv&foreignService=texmex&authuser=0&origin=https%3A%2F%2Fdrive.google.com HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
2024-05-08 12:15:21 UTC	1993	IN	HTTP/1.1 302 Found Content-Type: application/binary X-Frame-Options: ALLOW-FROM https://drive.google.com Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Content-Security-Policy: frame-ancestors https://drive.google.com Content-Security-Policy: require-trusted-types-for 'script';report-uri /drivesharing/_/DriveShareDialogUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-0bOwj3bxlkbjHP_oL3Pm4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /drivesharing/_/DriveShareDialogUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /drivesharing/_/DriveShareDialogUi/cspreport/allowlist Location: https://accounts.google.com/ServiceLogin?passive=1209600&osid=1&continue=https://drive.google.com/drivesharing/clientmodel?id%3D12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com&followup=https://drive.google.com/drivesharing/clientmodel?id%3D12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv%26foreignService%3Dtexmex%26authuser%3D0%26origin%3Dhttps://drive.google.com Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Date: Wed, 08 May 2024 12:15:21 GMT Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49722	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:21 UTC	969	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1998 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
2024-05-08 12:15:21 UTC	1998	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 35 31 37 30 35 31 39 36 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 31 35 31 37 30 35 31 39 36 33 35 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 31 35 31 37 30 35 31 39 36 33 35 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c 31 2c 31 5d Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,null,[4,0,0,0,0]]],189,[["1715170519636",null,null,null,null,null,null,"[[[null,null,1,1715170519635000,null,null,null,[[1715170519635000],null,1],null,716,null,1,1]
2024-05-08 12:15:22 UTC	922	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=NOfty0M-093wm3oHCzP88dg9GP3RROGKa8hxQW55DulMnuubt9MLAsHePvfdsANcoEXLi8chkMFbCAfHJRhzjSF1YNlsYjhi02HkeixRy5JU2NDtkEHpOnWju8MWNwl2yewDLX9utHTrXyExxBDTIJvUmdfoHT1xPGgfxET2y8M; expires=Thu, 07-Nov-2024 12:15:21 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 08 May 2024 12:15:22 GMT Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49727	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:22 UTC	1325	OUT	GET /viewer2/prod-01/archive?ck=drive&ds=APznzaZx5nAprH_U-3S3p79NDN5zTZblloNhn_gSJSBxMg9DJiUArmcek9liWF_JNJjgJCQjzuwJqwz8Qa4fO0JUELJuF1IfxlPeYN0XvjwrcgCVROX6dofUomAg0MaI4bw5Rkjjs2NQXBzRqEBHpcNzUtMMaUSkC6pFkQUQBfsNwREzd_x6dAXXxMtFWS8_UnvaIAKhEtSAN1F2n5lKGcutXt5vlY-rp_jmDPdOMFTS_QOXC1M55k_ij8cmxTaO15S7tX98BDWS34Hi1ZR9bLX9_lpXMnVWiNRT-OOBSXM3Zk9pTPtQ1Y3eWdMAoiQR9lwtB6EtD3YhrP91HR78LhZababXRODFCD_A1U1iyaSxj5Xh3tv1ePF2GaQtI6X8SWaIcV0JfDNwtYMaO7WygrawGKsZK88ANQ%3D%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
2024-05-08 12:15:22 UTC	2052	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 May 2024 12:15:22 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: script-src 'report-sample' 'nonce-YFsPfMDKyY6sGhcUwEVN4Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzjktDikmJw15BicNu9k8kbiJ3SZ7CGALEQD8etm283sgksuHbnHRMA3dEN5A" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:22 UTC	1982	IN	Data Raw: 37 62 37 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 53 74 69 63 6b 52 50 47 22 2c 31 2c 6e 75 6c 6c 2c 5b 2d 36 32 31 33 35 35 39 36 38 30 30 5d 2c 31 31 38 35 33 37 2c 5b 5b 22 73 74 69 63 6b 20 64 6f 64 67 65 2e 70 6e 67 22 2c 6e 75 6c 6c 2c 22 69 6d 61 67 65 2f 70 6e 67 22 2c 5b 31 37 31 34 39 31 39 35 32 30 5d 2c 35 39 30 31 5d 2c 5b 22 2e 69 64 65 61 22 2c 31 2c 6e 75 6c 6c 2c 5b 2d 36 32 31 33 35 35 39 36 38 30 30 5d 2c 33 38 39 33 2c 5b 5b 22 2e 67 69 74 69 67 6e 6f 72 65 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 37 31 34 39 31 39 35 32 30 5d 2c 35 30 5d 2c 5b 22 6d 69 73 63 2e 78 6d 6c 22 2c 6e 75 6c 6c 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 6e 64 72 6f 69 64 2e 70 61 63 6b 61 67 65 2d 78 6d 6c 22 2c 5b 31 37 31 34 39 31 39 35 32 30 5d 2c Data Ascii: 7b7)]}'[[["StickRPG",1,null,[-62135596800],118537,[["stick dodge.png",null,"image/png",[1714919520],5901],[".idea",1,null,[-62135596800],3893,[[".gitignore",null,null,[1714919520],50],["misc.xml",null,"application/vnd.android.package-xml",[1714919520],
2024-05-08 12:15:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49725	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:22 UTC	969	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 4775 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=LDrJ9zBTfV3pZoB17-ucCt8Zz8qN3VlMNirXBwN3lL38osEIIBAicWnp7d6uNnjQtfdG6fx8PX6cjx7dUbpzl-GQN9nP0JawAN4gykMhvMcwX9a7Z26i2B-_oWa2zcc57PgU34WY5gxt8OX9jNFYivIltP70VHJOUxgoiTCuyDs
2024-05-08 12:15:22 UTC	4775	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 35 31 37 30 35 32 30 37 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1715170520700",null,null,null,
2024-05-08 12:15:22 UTC	922	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8; expires=Thu, 07-Nov-2024 12:15:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 08 May 2024 12:15:22 GMT Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	96.7.158.101	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:22 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-08 12:15:22 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=67700 Date: Wed, 08 May 2024 12:15:22 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49731	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:23 UTC	969	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3954 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:23 UTC	3954	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 35 31 37 30 35 32 31 36 33 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1715170521636",null,null,null,
2024-05-08 12:15:23 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49734	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:23 UTC	991	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 912 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:23 UTC	912	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 31 35 31 37 30 35 32 30 37 33 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1715170520737",null,null,null,
2024-05-08 12:15:23 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49735	96.7.158.101	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:23 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-08 12:15:23 UTC	534	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0gZGqYgAAAAALDuImPJT0QKVHnlugaXU1UERYMzFFREdFMDIxMgBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=51162 Date: Wed, 08 May 2024 12:15:23 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-08 12:15:23 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49738	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:23 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:23 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:23 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:23 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:23 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49741	142.250.217.78	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:23 UTC	1104	OUT	GET /viewer2/prod-01/archive?ck=drive&ds=APznzaZx5nAprH_U-3S3p79NDN5zTZblloNhn_gSJSBxMg9DJiUArmcek9liWF_JNJjgJCQjzuwJqwz8Qa4fO0JUELJuF1IfxlPeYN0XvjwrcgCVROX6dofUomAg0MaI4bw5Rkjjs2NQXBzRqEBHpcNzUtMMaUSkC6pFkQUQBfsNwREzd_x6dAXXxMtFWS8_UnvaIAKhEtSAN1F2n5lKGcutXt5vlY-rp_jmDPdOMFTS_QOXC1M55k_ij8cmxTaO15S7tX98BDWS34Hi1ZR9bLX9_lpXMnVWiNRT-OOBSXM3Zk9pTPtQ1Y3eWdMAoiQR9lwtB6EtD3YhrP91HR78LhZababXRODFCD_A1U1iyaSxj5Xh3tv1ePF2GaQtI6X8SWaIcV0JfDNwtYMaO7WygrawGKsZK88ANQ%3D%3D&authuser=0&page=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:23 UTC	2052	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 May 2024 12:15:23 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version= Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AppsViewerFrontendHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-V1QikpL17-e0bX3gIToyiA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AppsViewerFrontendHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AppsViewerFrontendHttp/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="AppsViewerFrontendHttp" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"AppsViewerFrontendHttp","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/AppsViewerFrontendHttp"}]} reporting-endpoints: default="/_/AppsViewerFrontendHttp/web-reports?context=eJzjktDikmJw15BicNu9k8kbiJ3SZ7CGALEQD8ftm283sgnM2L9mBjMA3B0NQQ" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:23 UTC	1982	IN	Data Raw: 37 62 37 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 53 74 69 63 6b 52 50 47 22 2c 31 2c 6e 75 6c 6c 2c 5b 2d 36 32 31 33 35 35 39 36 38 30 30 5d 2c 31 31 38 35 33 37 2c 5b 5b 22 73 74 69 63 6b 20 64 6f 64 67 65 2e 70 6e 67 22 2c 6e 75 6c 6c 2c 22 69 6d 61 67 65 2f 70 6e 67 22 2c 5b 31 37 31 34 39 31 39 35 32 30 5d 2c 35 39 30 31 5d 2c 5b 22 2e 69 64 65 61 22 2c 31 2c 6e 75 6c 6c 2c 5b 2d 36 32 31 33 35 35 39 36 38 30 30 5d 2c 33 38 39 33 2c 5b 5b 22 2e 67 69 74 69 67 6e 6f 72 65 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 37 31 34 39 31 39 35 32 30 5d 2c 35 30 5d 2c 5b 22 6d 69 73 63 2e 78 6d 6c 22 2c 6e 75 6c 6c 2c 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 76 6e 64 2e 61 6e 64 72 6f 69 64 2e 70 61 63 6b 61 67 65 2d 78 6d 6c 22 2c 5b 31 37 31 34 39 31 39 35 32 30 5d 2c Data Ascii: 7b7)]}'[[["StickRPG",1,null,[-62135596800],118537,[["stick dodge.png",null,"image/png",[1714919520],5901],[".idea",1,null,[-62135596800],3893,[[".gitignore",null,null,[1714919520],50],["misc.xml",null,"application/vnd.android.package-xml",[1714919520],
2024-05-08 12:15:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49737	142.251.33.78	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:23 UTC	1013	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:23 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 121628 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 06 May 2024 09:28:45 GMT Expires: Tue, 06 May 2025 09:28:45 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 182798 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:23 UTC	339	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 7d 7d 3b 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c Data Ascii: }};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 6f 6e 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 Data Ascii: on"===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="und
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 2e 50 66 29 7b 74 68 69 73 2e 50 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d Data Ascii: .Pf){this.Pf=[];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 74 6f 74 79 70 65 2e 6e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 Data Ascii: totype.nea=function(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)ret
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 3b 74 68 69 73 2e 73 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 Data Ascii: ;this.sV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b Data Ascii: ct.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 20 62 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d Data Ascii: b=new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 6d 3d 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 Data Ascii: m=b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(f
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d Data Ascii: urn!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49736	142.251.33.78	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:23 UTC	1024	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=client/exm=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:23 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 208027 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 01 May 2024 13:29:55 GMT Expires: Thu, 01 May 2025 13:29:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 600328 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:23 UTC	339	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 79 68 3d 28 77 69 6e 64 6f 77 2e 67 61 70 69 7c 7c 7b 7d 29 2e 6c 6f 61 64 3b 0a 5f 2e 4b 6f 3d 5f 2e 6c 66 28 5f 2e 79 66 2c 22 72 77 22 2c 5f 2e 6d 66 28 29 29 3b 0a 76 61 72 20 4c 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 28 61 3d 5f 2e 4b 6f 5b 61 5d 29 26 26 61 2e 73 74 61 74 65 3c 62 26 26 28 61 2e 73 74 61 74 65 3d 62 29 7d 3b 76 61 72 20 4d 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 61 3d 5f 2e 4b 6f 5b 61 5d 29 3f 61 2e 6f 69 64 3a 76 6f 69 64 20 30 3b 69 66 28 61 29 7b 76 61 72 20 62 3d 5f 2e 68 66 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.yh=(window.gapi\|\|{}).load;_.Ko=_.lf(_.yf,"rw",_.mf());var Lo=function(a,b){(a=_.Ko[a])&&a.state<b&&(a.state=b)};var Mo=function(a){a=(a=_.Ko[a])?a.oid:void 0;if(a){var b=_.hf.getElementById(a);b&&b.parentNode
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 65 6f 66 20 61 26 26 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 5f 2e 4f 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 63 6c 69 65 6e 74 57 69 64 74 68 3b 72 65 74 75 72 6e 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 2d 31 30 30 30 30 70 78 3b 77 69 64 74 68 3a 22 2b 28 62 3f 62 2b 22 70 78 22 3a 61 2e 73 74 79 6c 65 2e 77 69 64 74 68 7c 7c 22 33 30 30 70 78 22 29 2b 22 3b 6d 61 72 67 69 6e 3a 30 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 22 7d 3b 0a 5f 2e 50 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 7b 7d 2c 64 3d 61 2e 47 63 28 29 2c 65 3d 62 26 26 62 2e 77 69 64 74 68 2c 66 3d 62 26 26 Data Ascii: eof a&&(a=document.getElementById(a));return a};_.Oo=function(a){var b=a.clientWidth;return"position:absolute;top:-10000px;width:"+(b?b+"px":a.style.width\|\|"300px")+";margin:0px;border-style:none;"};_.Po=function(a,b){var c={},d=a.Gc(),e=b&&b.width,f=b&&
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 61 29 7b 76 61 72 20 62 3d 61 2e 67 65 74 53 69 74 65 45 6c 28 29 3b 62 26 26 62 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 2e 67 65 74 49 66 72 61 6d 65 45 6c 28 29 29 7d 3b 5f 2e 52 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 77 68 65 72 65 3d 5f 2e 4e 6f 28 61 29 3b 76 61 72 20 62 3d 61 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 3d 61 2e 6d 65 73 73 61 67 65 48 61 6e 64 6c 65 72 73 7c 7c 7b 7d 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 5f 2e 50 6f 28 74 68 69 73 2c 65 29 7d 3b 62 2e 5f 72 65 61 64 79 3d 63 3b 62 2e 5f 72 65 6e 64 65 72 73 74 61 72 74 3d 63 3b 76 61 72 20 64 3d 61 2e 6f 6e 43 6c 6f 73 65 3b 61 2e 6f 6e 43 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 26 26 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3b 5f 2e 51 6f 28 74 Data Ascii: a){var b=a.getSiteEl();b&&b.removeChild(a.getIframeEl())};_.Ro=function(a){a.where=_.No(a);var b=a.messageHandlers=a.messageHandlers\|\|{},c=function(e){_.Po(this,e)};b._ready=c;b._renderstart=c;var d=a.onClose;a.onClose=function(e){d&&d.call(this,e);_.Qo(t
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 6b 6e 2e 63 61 6c 6c 28 62 2c 61 29 7d 3b 64 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6c 66 28 5f 2e 79 66 2c 22 77 61 74 74 22 2c 5f 2e 6d 66 28 29 29 5b 61 5d 7d 3b 65 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 3f 5f 2e 52 6d 28 29 5b 63 5d 7c 7c 61 5b 63 5d 7c 7c 22 22 3a 5f 2e 52 6d 28 29 5b 63 5d 7c 7c 22 22 7d 7d 3b 5f 2e 66 70 3d 7b 63 61 6c 6c 62 61 63 6b 3a 31 2c 63 6c 69 65 6e 74 69 64 3a 31 2c 63 6f 6f 6b 69 65 70 6f 6c 69 63 79 3a 31 2c 6f 70 65 6e 69 64 72 65 61 6c 6d 3a 2d 31 2c 69 6e 63 6c 75 64 65 67 72 61 6e 74 65 64 73 63 6f 70 65 73 3a 2d 31 2c 72 65 71 75 65 73 74 76 69 73 69 62 6c 65 61 63 74 69 6f 6e 73 3a 31 2c 73 63 6f Data Ascii: kn.call(b,a)};dp=function(a){return _.lf(_.yf,"watt",_.mf())[a]};ep=function(a){return function(b,c){return a?_.Rm()[c]\|\|a[c]\|\|"":_.Rm()[c]\|\|""}};_.fp={callback:1,clientid:1,cookiepolicy:1,openidrealm:-1,includegrantedscopes:-1,requestvisibleactions:1,sco
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 26 28 61 3d 63 2e 67 77 69 64 67 65 74 26 26 63 2e 67 77 69 64 67 65 74 2e 64 62 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 76 6f 69 64 20 30 7d 3b 5f 2e 6e 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 6e 75 6c 6c 3d 3d 61 26 26 63 26 26 28 61 3d 63 2e 65 63 70 2c 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 63 2e 67 77 69 64 67 65 74 26 26 63 2e 67 77 69 64 67 65 74 2e 65 63 70 29 29 3b 72 65 74 75 72 6e 20 61 7c 7c 76 6f 69 64 20 30 7d 3b 5f 2e 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 5f 2e 6c 70 28 61 2c 62 2c 63 2c 62 2e 61 63 74 69 6f 6e 3f 76 6f 69 64 20 30 3a 22 70 75 62 6c 69 73 68 65 72 22 29 7d 3b 76 61 72 20 70 70 2c 71 70 2c 72 70 2c 73 70 2c 74 70 2c 75 70 2c 77 70 2c 76 70 3b 70 70 3d 7b 73 65 3a 22 30 22 7d Data Ascii: &(a=c.gwidget&&c.gwidget.db));return a\|\|void 0};_.np=function(a,b,c){null==a&&c&&(a=c.ecp,null==a&&(a=c.gwidget&&c.gwidget.ecp));return a\|\|void 0};_.op=function(a,b,c){return _.lp(a,b,c,b.action?void 0:"publisher")};var pp,qp,rp,sp,tp,up,wp,vp;pp={se:"0"}
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 2b 61 2b 22 5f 22 2b 74 70 5b 61 5d 2b 2b 7d 3b 76 70 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 6f 69 64 20 30 3b 22 6e 75 6d 62 65 72 22 3d 3d 3d 74 79 70 65 6f 66 20 61 3f 62 3d 61 3a 22 73 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 61 26 26 28 62 3d 70 61 72 73 65 49 6e 74 28 61 2c 31 30 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 76 61 72 20 58 6f 3d 5f 2e 77 6b 28 5b 22 64 61 74 61 2d 22 5d 29 2c 7a 70 2c 41 70 2c 42 70 2c 43 70 2c 44 70 3d 2f 28 3f 3a 5e 7c 5c 73 29 67 2d 28 28 5c 53 29 2a 29 28 3f 3a 24 7c 5c 73 29 2f 2c 45 70 3d 7b 70 6c 75 73 6f 6e 65 3a 21 30 2c 61 75 74 6f 63 6f 6d 70 6c 65 74 65 3a 21 30 2c 70 72 6f 66 69 6c 65 3a 21 30 2c 73 69 67 6e 69 6e 3a 21 30 2c 73 69 67 6e 69 6e 32 3a 21 30 7d 3b 7a 70 3d 5f 2e 6c 66 Data Ascii: +a+"_"+tp[a]++};vp=function(a){var b=void 0;"number"===typeof a?b=a:"string"===typeof a&&(b=parseInt(a,10));return b};var Xo=_.wk(["data-"]),zp,Ap,Bp,Cp,Dp=/(?:^\|\s)g-((\S)*)(?:$\|\s)/,Ep={plusone:!0,autocomplete:!0,profile:!0,signin:!0,signin2:!0};zp=_.lf
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 63 61 74 63 68 28 71 29 7b 5f 2e 50 67 2e 6c 6f 67 28 71 29 3b 72 65 74 75 72 6e 7d 65 3d 5b 5d 3b 66 6f 72 28 63 20 69 6e 20 61 29 7b 64 3d 61 5b 63 5d 3b 76 61 72 20 70 3d 30 3b 66 6f 72 28 62 3d 64 2e 6c 65 6e 67 74 68 3b 70 3c 62 3b 70 2b 2b 29 66 3d 64 5b 70 5d 2c 49 70 28 63 2c 66 2c 77 70 28 66 29 2c 65 2c 62 29 7d 7d 3b 76 61 72 20 4b 70 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 64 70 28 61 29 3b 62 26 26 63 3f 28 63 28 62 29 2c 28 63 3d 62 2e 69 66 72 61 6d 65 4e 6f 64 65 29 26 26 63 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 67 61 70 69 61 74 74 61 63 68 65 64 22 2c 21 30 29 29 3a 5f 2e 70 66 2e 6c 6f 61 64 28 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 64 70 28 61 29 2c 65 3d 62 26 26 62 2e 69 Data Ascii: catch(q){_.Pg.log(q);return}e=[];for(c in a){d=a[c];var p=0;for(b=d.length;p<b;p++)f=d[p],Ip(c,f,wp(f),e,b)}};var Kp=function(a,b){var c=dp(a);b&&c?(c(b),(c=b.iframeNode)&&c.setAttribute("data-gapiattached",!0)):_.pf.load(a,function(){var d=dp(a),e=b&&b.i
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 6d 5b 6c 5d 3b 66 5b 70 5d 3d 5f 2e 67 66 2e 6c 6f 63 61 74 69 6f 6e 5b 70 5d 7d 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 70 6c 75 73 22 3a 63 61 73 65 20 22 66 6f 6c 6c 6f 77 22 3a 66 2e 75 72 6c 3d 5f 2e 6f 70 28 66 2e 68 72 65 66 2c 63 2c 6e 75 6c 6c 29 3b 64 65 6c 65 74 65 20 66 2e 68 72 65 66 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 70 6c 75 73 6f 6e 65 22 3a 6d 3d 28 6d 3d 63 2e 68 72 65 66 29 3f 69 70 28 6d 29 3a 6a 70 28 29 3b 66 2e 75 72 6c 3d 6d 3b 66 2e 64 62 3d 5f 2e 6d 70 28 63 2e 64 62 2c 76 6f 69 64 20 30 2c 5f 2e 47 66 28 29 29 3b 66 2e 65 63 70 3d 5f 2e 6e 70 28 63 2e 65 63 70 2c 76 6f 69 64 20 30 2c 5f 2e 47 66 28 29 29 3b 64 65 6c 65 74 65 20 66 2e 68 72 65 66 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 73 69 67 6e 69 6e 22 3a 66 2e 75 Data Ascii: m[l];f[p]=_.gf.location[p]}switch(a){case "plus":case "follow":f.url=_.op(f.href,c,null);delete f.href;break;case "plusone":m=(m=c.href)?ip(m):jp();f.url=m;f.db=_.mp(c.db,void 0,_.Gf());f.ecp=_.np(c.ecp,void 0,_.Gf());delete f.href;break;case "signin":f.u
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 65 72 48 54 4d 4c 29 26 26 61 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5c 73 5c 78 61 30 5d 2b 7c 5b 5c 73 5c 78 61 30 5d 2b 24 2f 67 2c 22 22 29 3f 30 3a 31 7d 65 6c 73 65 7b 69 66 28 41 70 5b 62 5d 29 72 65 74 75 72 6e 20 30 3b 69 66 28 7a 70 5b 62 5d 29 72 65 74 75 72 6e 20 31 7d 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 3b 5f 2e 6c 66 28 5f 2e 70 66 2c 22 70 6c 61 74 66 6f 72 6d 22 2c 7b 7d 29 2e 67 6f 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 4a 70 28 61 2c 62 29 7d 3b 76 61 72 20 4d 70 3d 5f 2e 6c 66 28 5f 2e 79 66 2c 22 70 65 72 66 22 2c 5f 2e 6d 66 28 29 29 2c 47 70 3d 5f 2e 6c 66 28 4d 70 2c 22 67 22 2c 5f 2e 6d 66 28 29 29 2c 4e 70 3d 5f 2e 6c 66 28 4d 70 2c 22 69 22 2c 5f 2e 6d 66 28 29 29 2c 4f 70 2c 50 70 2c 51 70 2c 48 70 2c 53 70 2c 54 70 2c 55 Data Ascii: erHTML)&&a.replace(/^[\s\xa0]+\|[\s\xa0]+$/g,"")?0:1}else{if(Ap[b])return 0;if(zp[b])return 1}}return null};_.lf(_.pf,"platform",{}).go=function(a,b){Jp(a,b)};var Mp=_.lf(_.yf,"perf",_.mf()),Gp=_.lf(Mp,"g",_.mf()),Np=_.lf(Mp,"i",_.mf()),Op,Pp,Qp,Hp,Sp,Tp,U
2024-05-08 12:15:23 UTC	1255	IN	Data Raw: 22 2c 76 6f 69 64 20 30 2c 65 29 2c 66 2e 74 69 63 6b 28 22 77 74 73 72 74 5f 22 2c 22 5f 77 74 73 72 74 22 2c 63 29 2c 66 2e 74 69 63 6b 28 22 74 62 73 64 5f 22 2c 22 77 74 73 72 74 5f 22 29 29 7d 74 72 79 7b 62 3d 6e 75 6c 6c 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 26 26 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2e 70 61 67 65 54 29 2c 66 26 26 30 3c 65 26 26 28 66 2e 74 69 63 6b 28 22 5f 74 62 6e 64 22 2c 76 6f 69 64 20 30 2c 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 2e 63 73 69 28 29 2e 73 74 61 72 74 45 29 2c 66 2e 74 69 63 6b 28 22 74 62 6e 64 5f 22 2c 22 5f 74 62 6e 64 22 2c 65 29 29 29 2c 6e 75 6c 6c 3d 3d 62 26 26 77 69 6e 64 6f 77 2e Data Ascii: ",void 0,e),f.tick("wtsrt_","_wtsrt",c),f.tick("tbsd_","wtsrt_"))}try{b=null,window.chrome&&window.chrome.csi&&(b=Math.floor(window.chrome.csi().pageT),f&&0<e&&(f.tick("_tbnd",void 0,window.chrome.csi().startE),f.tick("tbnd_","_tbnd",e))),null==b&&window.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49749	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:24 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:24 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:24 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49717	142.251.215.228	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:24 UTC	969	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://accounts.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:24 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Wed, 08 May 2024 12:15:24 GMT Expires: Wed, 08 May 2024 12:15:24 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:24 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-05-08 12:15:24 UTC	1255	IN	Data Raw: 3a 9b 02 75 78 c5 f7 87 37 97 5d 86 eb c2 27 90 d0 28 71 ed aa aa 84 7e 07 e9 86 09 f2 0e 4b 51 c8 57 e2 ad 97 9c 2c 62 b5 d6 4c 3c b7 59 09 5d 9b 56 2b ee ca a8 a1 ba 74 34 bc 24 a3 56 dc ba 4f 09 8f f6 bd 8e 44 a2 35 0c b1 76 9e 6a 81 f6 ae 48 64 10 4d fc f6 b4 12 7a 9b 88 94 b3 1a b8 9e 56 83 f3 71 bf 70 89 ee 97 c4 e0 8e c6 d2 3b 3a 1b 4a de 25 32 e5 ac 47 c9 3b b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 Data Ascii: :ux7]'(q~KQW,bL<Y]V+t4$VOD5vjHdMzVqp;:J%2G;/E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHu
2024-05-08 12:15:24 UTC	1255	IN	Data Raw: e2 16 73 bd 7d 41 a9 cd 5e 6b a1 2d fd 0d 7e be 97 dd e0 62 a6 99 70 2f 7e 4f 5e 26 93 61 26 ec e2 d8 18 32 cb d0 18 66 b7 a6 f2 2c 56 4b 21 29 0e 37 94 5d 2a 5c 00 ae 93 21 56 26 cf 8d 1d ec 69 99 b5 2f bb 23 96 f6 b8 57 62 ed 8b 4c b8 c8 19 99 82 6d 14 3b fd 1a 44 14 bd 09 98 6d 2b dd 84 32 9b 07 3d 15 a4 f9 5a 59 05 d7 53 0f b2 89 3c 90 99 fe 47 e1 e4 a9 70 fa 1d 77 c1 7b 68 1e 53 9a f8 7b 9e 5c b0 95 21 c5 5c 97 c1 fb 3c 46 ae 78 21 af 8c f3 72 cf 8c 5b 5b e1 e6 df 05 87 7d fd 04 ef 20 8d 75 55 22 f8 1e 65 e0 0b 5a 2b 2b cf 11 7d 05 a8 be f8 47 b7 22 97 5f cb 45 2e 20 c4 49 1b 90 1f 0a 4f fc 20 1d 66 74 a8 6d d0 57 44 31 98 0b aa 86 b7 73 e2 aa 79 0f 91 a0 b6 07 29 1a 4a 5e 77 fc 3b 20 94 36 95 6c 67 84 d2 a5 76 f1 11 ba 72 d1 32 23 1c 00 ad 4b 7d 21 Data Ascii: s}A^k-~bp/~O^&a&2f,VK!)7]*\!V&i/#WbLm;Dm+2=ZYS<Gpw{hS{\!\<Fx!r[[} uU"eZ++}G"_E. IO ftmWD1sy)J^w; 6lgvr2#K}!
2024-05-08 12:15:24 UTC	76	IN	Data Raw: 25 14 54 77 f9 54 45 09 c7 c0 b3 31 f0 04 69 9c 1e e7 ca 39 c7 1e dd 99 bd 0e 81 bc 90 90 f0 02 94 bd a8 07 eb 02 fc 57 7c f8 5a 48 48 48 48 48 48 48 48 48 48 10 fe 07 d8 95 18 53 b9 4a 7f b2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: %TwTE1i9W\|ZHHHHHHHHHHSJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49753	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:25 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:25 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:25 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:25 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:25 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49756	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:27 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:27 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:27 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:27 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:27 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49758	172.217.14.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:27 UTC	892	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:28 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15118 Date: Wed, 08 May 2024 12:15:28 GMT Expires: Wed, 08 May 2024 12:15:28 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "9bc2326c55ad9a5d" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:28 UTC	418	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 2c 63 61 3d 62 61 28 74 68 69 73 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 63 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 0a 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: d global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6d 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 6e 3d 22 63 6c 6f 73 75 72 65 5f 75 69 64 5f 22 2b 28 31 45 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3e 3e 3e 30 29 2c 64 61 3d 30 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 79 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 78 21 3d 3d 78 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 55 72 6c 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 76 3d 61 7d 3b 79 Data Ascii: ght The Closure Library Authors. SPDX-License-Identifier: Apache-2.0/var m=this\|\|self,n="closure_uid_"+(1E9Math.random()>>>0),da=0,r=function(a){return a};var y=function(a){if(x!==x)throw Error("SafeUrl is not meant to be built directly");this.v=a};y
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 2c 6d 61 3d 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 63 7d 2c 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 6f 72 74 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 76 6f 69 64 20 30 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 65 21 3d 63 26 26 62 2e 70 75 73 68 28 65 29 3b 63 3d 65 7d 72 65 74 75 72 6e 20 62 7d 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3b 69 66 28 28 61 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 29 26 26 6d 61 2e 74 65 73 74 28 61 29 29 61 3d 61 28 6e 75 6c 6c 29 3b 65 6c 73 65 7b 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 Data Ascii: ,ma=/\[native code\]/,H=function(a,b,c){return a[b]=a[b]\|\|c},na=function(a){a=a.sort();for(var b=[],c=void 0,d=0;d<a.length;d++){var e=a[d];e!=c&&b.push(e);c=e}return b},I=function(){var a;if((a=Object.create)&&ma.test(a))a=a(null);else{a={};for(var b in
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 63 3f 4b 5b 62 5d 3d 48 28 4b 2c 62 2c 5b 5d 29 2e 63 6f 6e 63 61 74 28 63 29 3a 48 28 4b 2c 62 2c 63 29 7d 69 66 28 62 3d 61 2e 75 29 61 3d 48 28 4b 2c 22 75 73 22 2c 5b 5d 29 2c 61 2e 70 75 73 68 28 62 29 2c 28 62 3d 2f 5e 68 74 74 70 73 3a 28 2e 2a 29 24 2f 2e 65 78 65 63 28 62 29 29 26 26 61 2e 70 75 73 68 28 22 68 74 74 70 3a 22 2b 62 5b 31 5d 29 7d 5d 29 3b 76 61 72 20 76 61 3d 2f 5e 28 5c 2f 5b 61 2d Data Ascii: ;};U.push(["jsl",function(a){for(var b in a)if(Object.prototype.hasOwnProperty.call(a,b)){var c=a[b];"object"==typeof c?K[b]=H(K,b,[]).concat(c):H(K,b,c)}if(b=a.u)a=H(K,"us",[]),a.push(b),(b=/^https:(.*)$/.exec(b))&&a.push("http:"+b[1])}]);var va=/^(\/[a-
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 29 7d 2c 45 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 2f 22 21 3d 3d 61 2e 63 68 61 72 41 74 28 30 29 26 26 56 28 22 72 65 6c 61 74 69 76 65 20 70 61 74 68 22 29 3b 66 6f 72 28 76 61 72 20 62 3d 61 2e 73 75 62 73 74 72 69 6e Data Ascii: ,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join("")},Ea=function(a){"/"!==a.charAt(0)&&V("relative path");for(var b=a.substrin
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 5f 30 2d 39 5c 2f 41 2d 5a 61 2d 7a 5d 2b 3d 7b 30 2c 32 7d 24 2f 2c 49 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 30 3e 66 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 4a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4b 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 61 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 48 61 29 3f 61 3a 4b 2e 6e Data Ascii: _0-9\/A-Za-z]+={0,2}$/,Ia=function(a,b){for(var c=[],d=0;d<a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=0>f}f&&c.push(e)}return c},Ja=function(){var a=K.nonce;return void 0!==a?a&&a===String(a)&&a.match(Ha)?a:K.n
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 3a 20 21 68 69 6e 74 22 29 3b 4f 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 4f 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 21 21 4b 2e 67 6c 72 70 3b 61 3d 6e 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 65 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 66 3d 62 2e 63 6f 6e 66 69 67 2c 6b 3d 62 2e 74 69 6d 65 6f 75 74 2c 74 3d 62 2e 6f 6e 74 69 6d 65 6f 75 74 2c 6c 3d 62 2e 6f 6e 65 72 72 6f 72 2c 70 3d 76 6f 69 64 20 30 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6c 26 26 28 70 3d 6c 29 3b 76 61 72 20 7a 3d 6e 75 6c 6c 2c 52 3d 21 31 3b 69 66 28 6b 26 26 21 74 7c 7c 21 6b 26 26 74 29 74 68 72 6f 77 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 Data Ascii: : !hint");Oa(b\|\|[],c,a)},Oa=function(a,b,c){var d=!!K.glrp;a=na(a)\|\|[];var e=b.callback,f=b.config,k=b.timeout,t=b.ontimeout,l=b.onerror,p=void 0;"function"==typeof l&&(p=l);var z=null,R=!1;if(k&&!t\|\|!k&&t)throw"Timeout requires both the timeout parameter
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 61 2e 6d 65 73 73 61 67 65 29 7d 51 61 3d 52 61 3b 76 61 72 20 59 3d 51 61 3b 76 61 72 20 4d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 4b 2e 68 65 65 26 26 30 3c 4b 2e 68 65 6c 29 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 62 26 26 62 28 63 29 2c 4b 2e 68 65 6c 2d 2d 2c 50 61 28 22 64 65 62 75 67 5f 65 72 72 6f 72 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 77 69 6e 64 6f 77 2e 5f 5f 5f 6a 73 6c 2e 68 65 66 6e 28 63 29 7d 63 61 74 63 68 28 64 29 7b 74 68 72 6f 77 20 63 3b 7d 7d 29 7d 65 6c 73 65 20 74 72 79 7b 72 65 74 75 72 6e 20 61 28 29 7d 63 61 74 63 68 28 63 29 7b 74 68 72 6f 77 20 62 26 26 62 28 63 29 2c 63 3b 7d 7d 3b 76 61 72 20 53 61 3d 4a 2e 6c 6f 61 64 3b 53 61 26 26 48 28 4b 2c 22 6f 6c 22 2c Data Ascii: a.message)}Qa=Ra;var Y=Qa;var Ma=function(a,b){if(K.hee&&0<K.hel)try{return a()}catch(c){b&&b(c),K.hel--,Pa("debug_error",function(){try{window.___jsl.hefn(c)}catch(d){throw c;}})}else try{return a()}catch(c){throw b&&b(c),c;}};var Sa=J.load;Sa&&H(K,"ol",
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 65 3a 7b 63 73 73 3a 31 7d 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 3a 2e 30 31 7d 2c 63 6c 69 65 6e 74 3a 7b 63 6f 72 73 3a 21 31 7d 2c 73 69 67 6e 49 6e 44 65 70 72 65 63 61 74 69 6f 6e 3a 7b 72 61 74 65 3a 30 7d 2c 69 6e 63 6c 75 64 65 5f 67 72 61 6e 74 65 64 5f 73 63 6f 70 65 73 3a 21 30 2c 6c 6c 61 6e 67 3a 22 65 6e 22 2c 69 66 72 61 6d 65 73 3a 7b 79 6f 75 74 75 62 65 3a 7b 70 61 72 61 6d 73 3a 7b 6c 6f 63 61 74 69 6f 6e 3a 5b 22 73 65 61 72 63 68 22 2c 22 68 61 73 68 22 5d 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a Data Ascii: e:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49759	142.250.217.100	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:28 UTC	683	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_150x54dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:28 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 3170 Date: Wed, 08 May 2024 12:15:28 GMT Expires: Wed, 08 May 2024 12:15:28 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:28 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 36 08 06 00 00 00 25 1d 60 0c 00 00 0c 29 49 44 41 54 78 da ed 5d 0b 70 54 d5 19 3e 98 6c 00 1f 88 da 97 b5 82 62 ad 14 28 48 76 37 20 44 37 f7 6e 08 38 83 a2 a5 b4 56 ab a5 48 5f 82 52 3b 53 1f 68 59 60 77 13 28 b6 d5 2a b6 4e 5f 52 ab 22 30 60 a9 2d e6 41 a9 1d 7c b4 2a 4e c5 fa 60 b0 a8 80 ec 6e 02 84 7b ef 26 90 84 6c ff 6f e0 0e 3b 9b ff de bd 8f 84 61 9a f3 cd 9c d9 64 ef dd 24 e7 f0 9d ff f1 fd ff b9 08 09 09 09 89 fe 89 e9 b1 dc e9 4a 9d 31 ae 2a 91 9d a1 d4 1a 37 2b 09 63 8e 9a d4 6f a0 a1 54 2f cf 7e 56 e4 72 03 84 84 84 13 44 eb da 47 a8 49 63 11 91 e7 e5 aa b8 d6 45 5f e7 ac 46 55 52 db a3 26 f4 df 55 25 8c a9 b1 58 ee 34 21 21 51 88 48 22 3b 91 c8 f4 1c 08 e3 65 28 49 63 07 Data Ascii: PNGIHDR6%`)IDATx]pT>lb(Hv7 D7n8VH_R;ShY`w(N_R"0`-A\|N`n{&lo;ad$J1*7+coT/~VrDGIcE_FUR&U%X4!!QH";e(Ic
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: 3a 9b 02 75 78 c5 f7 87 37 97 5d 86 eb c2 27 90 d0 28 71 ed aa aa 84 7e 07 e9 86 09 f2 0e 4b 51 c8 57 e2 ad 97 9c 2c 62 b5 d6 4c 3c b7 59 09 5d 9b 56 2b ee ca a8 a1 ba 74 34 bc 24 a3 56 dc ba 4f 09 8f f6 bd 8e 44 a2 35 0c b1 76 9e 6a 81 f6 ae 48 64 10 4d fc f6 b4 12 7a 9b 88 94 b3 1a b8 9e 56 83 f3 71 bf 70 89 ee 97 c4 e0 8e c6 d2 3b 3a 1b 4a de 25 32 e5 ac 47 c9 3b b8 2f b7 45 0c f2 e2 21 88 48 cb 20 df d8 08 c8 2f 44 6b db ae 38 9e 54 fd 99 be 7f 2b 7f f8 25 56 73 34 14 ce 44 43 1b 52 d1 60 a7 f5 5a 06 df c2 e6 05 c1 bc 0a a2 1f 30 13 5b 29 4e 21 a4 ab 83 95 19 25 fc 3e 26 ec 62 ec 24 92 4d 12 0e d1 d1 50 1a 21 c2 fc 97 21 92 1d c1 de 27 4b 76 a5 e3 b5 4e 64 af a1 b5 6d 76 52 fa 3a 96 4c e9 0b e8 eb 77 0b af 79 25 d6 8e 69 9f 1f 48 eb f2 b0 bb 75 0c d5 Data Ascii: :ux7]'(q~KQW,bL<Y]V+t4$VOD5vjHdMzVqp;:J%2G;/E!H /Dk8T+%Vs4DCR`Z0[)N!%>&b$MP!!'KvNdmvR:Lwy%iHu
2024-05-08 12:15:28 UTC	1255	IN	Data Raw: e2 16 73 bd 7d 41 a9 cd 5e 6b a1 2d fd 0d 7e be 97 dd e0 62 a6 99 70 2f 7e 4f 5e 26 93 61 26 ec e2 d8 18 32 cb d0 18 66 b7 a6 f2 2c 56 4b 21 29 0e 37 94 5d 2a 5c 00 ae 93 21 56 26 cf 8d 1d ec 69 99 b5 2f bb 23 96 f6 b8 57 62 ed 8b 4c b8 c8 19 99 82 6d 14 3b fd 1a 44 14 bd 09 98 6d 2b dd 84 32 9b 07 3d 15 a4 f9 5a 59 05 d7 53 0f b2 89 3c 90 99 fe 47 e1 e4 a9 70 fa 1d 77 c1 7b 68 1e 53 9a f8 7b 9e 5c b0 95 21 c5 5c 97 c1 fb 3c 46 ae 78 21 af 8c f3 72 cf 8c 5b 5b e1 e6 df 05 87 7d fd 04 ef 20 8d 75 55 22 f8 1e 65 e0 0b 5a 2b 2b cf 11 7d 05 a8 be f8 47 b7 22 97 5f cb 45 2e 20 c4 49 1b 90 1f 0a 4f fc 20 1d 66 74 a8 6d d0 57 44 31 98 0b aa 86 b7 73 e2 aa 79 0f 91 a0 b6 07 29 1a 4a 5e 77 fc 3b 20 94 36 95 6c 67 84 d2 a5 76 f1 11 ba 72 d1 32 23 1c 00 ad 4b 7d 21 Data Ascii: s}A^k-~bp/~O^&a&2f,VK!)7]*\!V&i/#WbLm;Dm+2=ZYS<Gpw{hS{\!\<Fx!r[[} uU"eZ++}G"_E. IO ftmWD1sy)J^w; 6lgvr2#K}!
2024-05-08 12:15:28 UTC	76	IN	Data Raw: 25 14 54 77 f9 54 45 09 c7 c0 b3 31 f0 04 69 9c 1e e7 ca 39 c7 1e dd 99 bd 0e 81 bc 90 90 f0 02 94 bd a8 07 eb 02 fc 57 7c f8 5a 48 48 48 48 48 48 48 48 48 48 10 fe 07 d8 95 18 53 b9 4a 7f b2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: %TwTE1i9W\|ZHHHHHHHHHHSJIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49761	172.217.14.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:28 UTC	1013	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SCWmpDDGjPk.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo_Pl64J0IIHlj2zBtEJ3ZwdaJC3HA/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://content.googleapis.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:29 UTC	914	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 79644 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 07 May 2024 17:28:16 GMT Expires: Wed, 07 May 2025 17:28:16 GMT Cache-Control: public, max-age=31536000 Age: 67632 Last-Modified: Mon, 15 Apr 2024 17:34:54 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:29 UTC	341	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 3b 63 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f Data Ascii: ;ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"o
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 22 3d 3d 3d 74 79 70 65 6f 66 20 64 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 64 2e 70 72 6f 74 6f 74 79 70 65 5b 61 5d 26 26 63 61 28 64 2e 70 72 6f 74 6f 74 79 70 65 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 61 28 62 61 28 74 68 69 73 29 29 7d 7d 29 7d 72 65 74 75 72 6e 20 61 7d 29 3b 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 7b 6e 65 78 74 3a 61 7d 3b 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 5f 2e 75 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 Data Ascii: "===typeof d&&"function"!=typeof d.prototype[a]&&ca(d.prototype,a,{configurable:!0,writable:!0,value:function(){return pa(ba(this))}})}return a});pa=function(a){a={next:a};a[Symbol.iterator]=function(){return this};return a};_.ua=function(a){var b="undef
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 66 29 7b 74 68 69 73 2e 50 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 74 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 45 37 28 29 7d 29 7d 74 68 69 73 2e 50 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6d 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 45 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 50 66 26 26 74 68 69 73 2e 50 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 50 66 3b 74 68 69 73 2e 50 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e 75 Data Ascii: f){this.Pf=[];var k=this;this.tP(function(){k.E7()})}this.Pf.push(h)};var d=_.ma.setTimeout;b.prototype.tP=function(h){d(h,0)};b.prototype.E7=function(){for(;this.Pf&&this.Pf.length;){var h=this.Pf;this.Pf=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=nu
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 74 79 70 65 2e 6e 65 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 68 2e 67 63 61 28 29 29 7b 76 61 72 20 6b 3d 5f 2e 6d 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 6b 26 26 6b 2e 65 72 72 6f 72 28 68 2e 46 66 29 7d 7d 2c 0a 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 63 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 73 56 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 68 3d 5f 2e 6d 61 2e 43 75 73 74 6f 6d 45 76 65 6e 74 2c 6b 3d 5f 2e 6d 61 2e 45 76 65 6e 74 2c 6c 3d 5f 2e 6d 61 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 3b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 6c 29 72 65 74 75 72 Data Ascii: type.nea=function(){var h=this;d(function(){if(h.gca()){var k=_.ma.console;"undefined"!==typeof k&&k.error(h.Ff)}},1)};e.prototype.gca=function(){if(this.sV)return!1;var h=_.ma.CustomEvent,k=_.ma.Event,l=_.ma.dispatchEvent;if("undefined"===typeof l)retur
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 68 69 73 2e 73 56 3d 21 30 7d 3b 65 2e 72 65 73 6f 6c 76 65 3d 63 3b 65 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6c 28 68 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 5f 2e 75 61 28 68 29 2c 6e 3d 6d 2e 6e 65 78 74 28 29 3b 21 6e 2e 64 6f 6e 65 3b 6e 3d 6d 2e 6e 65 78 74 28 29 29 63 28 6e 2e 76 61 6c 75 65 29 2e 42 79 28 6b 2c 6c 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 5f 2e 75 61 28 68 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6c 2e 64 6f 6e 65 3f 63 28 5b Data Ascii: his.sV=!0};e.resolve=c;e.reject=function(h){return new e(function(k,l){l(h)})};e.race=function(h){return new e(function(k,l){for(var m=_.ua(h),n=m.next();!n.done;n=m.next())c(n.value).By(k,l)})};e.all=function(h){var k=_.ua(h),l=k.next();return l.done?c([
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 20 61 28 5b 5b 6c 2c 32 5d 2c 5b 6d 2c 33 5d 5d 29 3b 69 66 28 32 21 3d 6e 2e 67 65 74 28 6c 29 7c 7c 33 21 3d 6e 2e 67 65 74 28 6d 29 29 72 65 74 75 72 6e 21 31 3b 6e 2e 64 65 6c 65 74 65 28 6c 29 3b 6e 2e 73 65 74 28 6d 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6c 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6d 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 Data Ascii: .seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new a([[l,2],[m,3]]);if(2!=n.get(l)\|\|3!=n.get(m))return!1;n.delete(l);n.set(m,4);return!n.has(l)&&4==n.get(m)}catch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e(
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 3d 6e 65 77 20 57 65 61 6b 4d 61 70 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 0a 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 6b 29 7b 6b 3d 5f 2e 75 61 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 6b 3d 30 3d 3d 3d 6b 3f 30 3a 6b 3b 76 61 72 20 6d 3d 64 28 74 68 69 73 2c 6b 29 3b 6d 2e 6c 69 73 74 7c 7c 28 6d 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6d 2e 69 64 5d 3d 5b 5d 29 3b 6d 2e 6e 66 3f 6d 2e 6e 66 2e 76 61 6c 75 65 3d 6c 3a 28 6d 2e 6e Data Ascii: =new WeakMap,c=function(k){this[0]={};this[1]=f();this.size=0;if(k){k=_.ua(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}};c.prototype.set=function(k,l){k=0===k?0:k;var m=d(this,k);m.list\|\|(m.list=this[0][m.id]=[]);m.nf?m.nf.value=l:(m.n
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 62 2e 67 65 74 28 6c 29 3a 28 6d 3d 22 22 2b 20 2b 2b 68 2c 62 2e 73 65 74 28 6c 2c 6d 29 29 3a 6d 3d 22 70 5f 22 2b 6c 3b 76 61 72 20 6e 3d 6b 5b 30 5d 5b 6d 5d 3b 69 66 28 6e 26 26 76 61 28 6b 5b 30 5d 2c 6d 29 29 66 6f 72 28 6b 3d 30 3b 6b 3c 6e 2e 6c 65 6e 67 74 68 3b 6b 2b 2b 29 7b 76 61 72 20 70 3d 6e 5b 6b 5d 3b 69 66 28 6c 21 3d 3d 6c 26 26 70 2e 6b 65 79 21 3d 3d 70 2e 6b 65 79 7c 7c 6c 3d 3d 3d 70 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 6b 2c 6e 66 3a 70 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6d 2c 6c 69 73 74 3a 6e 2c 69 6e 64 65 78 3a 2d 31 2c 6e 66 3a 76 6f 69 64 20 30 7d 7d 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 76 61 72 20 6d 3d 6b 5b 31 5d 3b 72 65 74 75 72 6e 20 70 61 28 66 75 6e Data Ascii: b.get(l):(m=""+ ++h,b.set(l,m)):m="p_"+l;var n=k[0][m];if(n&&va(k[0],m))for(k=0;k<n.length;k++){var p=n[k];if(l!==l&&p.key!==p.key\|\|l===p.key)return{id:m,list:n,index:k,nf:p}}return{id:m,list:n,index:-1,nf:void 0}},e=function(k,l){var m=k[1];return pa(fun
2024-05-08 12:15:29 UTC	1255	IN	Data Raw: 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 34 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 74 68 69 73 2e 44 61 3d 6e 65 77 20 4d 61 70 3b 69 66 28 63 29 7b 63 3d 0a 5f Data Ascii: n!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|4!=f.value[0].x\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var b=function(c){this.Da=new Map;if(c){c=_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49769	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:30 UTC	1139	OUT	POST /file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/docos/p/sync?resourcekey&id=12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive Content-Length: 75 X-Build: apps-fileview.texmex_20240425.01_p0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:30 UTC	75	OUT	Data Raw: 70 3d 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 32 32 31 32 77 67 64 6f 56 43 55 74 7a 76 39 55 61 48 4d 62 68 74 70 44 45 6e 76 64 34 4b 65 35 62 7a 76 25 32 32 25 35 44 Data Ascii: p=%5Bnull%2Cnull%2Cnull%2Cnull%2C%2212wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv%22%5D
2024-05-08 12:15:30 UTC	724	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Robots-Tag: noindex, nofollow, nosnippet Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 May 2024 12:15:30 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:30 UTC	49	IN	Data Raw: 32 62 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 73 72 22 2c 6e 75 6c 6c 2c 31 37 31 35 31 36 39 39 33 30 38 33 31 5d 2c 5b 22 64 69 22 2c 33 30 5d 5d 0d 0a Data Ascii: 2b)]}'[["sr",null,1715169930831],["di",30]]
2024-05-08 12:15:30 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49763	40.127.169.103	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:30 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXkZwHTpU45pOMB&MD=+MDlyW+f HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-08 12:15:31 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 1f0c6c0e-2e1a-430d-94d0-7347c612fcdf MS-RequestId: 683ce696-0b6a-4e25-8c15-8e4226261298 MS-CV: Tamwvccp9EaW6EEk.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 08 May 2024 12:15:29 GMT Connection: close Content-Length: 24490
2024-05-08 12:15:31 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-08 12:15:31 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49778	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:31 UTC	969	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3923 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:31 UTC	3923	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 39 2c 5b 5b 22 31 37 31 35 31 37 30 35 32 39 36 39 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],189,[["1715170529697",null,null,null,
2024-05-08 12:15:31 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:31 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:31 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49777	142.250.217.78	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:31 UTC	736	OUT	GET /file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/docos/p/sync?resourcekey&id=12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv&reqid=0 HTTP/1.1 Host: drive.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:31 UTC	862	IN	HTTP/1.1 405 Method Not Allowed Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 08 May 2024 12:15:31 GMT Content-Type: text/html; charset=utf-8 Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt Content-Security-Policy: script-src 'report-sample' 'nonce-OmTuW_yBmrGzuopRyXNm6A' 'unsafe-inline' 'unsafe-eval' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/viewer/ Referrer-Policy: strict-origin-when-cross-origin Allow: POST X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:31 UTC	393	IN	Data Raw: 62 64 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 20 77 6f 72 64 20 70 72 6f 63 65 73 73 69 6e 67 2c 20 73 70 72 65 61 64 73 68 65 65 74 73 20 61 6e 64 20 70 72 65 73 65 6e 74 61 74 69 6f 6e 73 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 2c 20 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 30 22 3e 3c Data Ascii: bd8<!DOCTYPE html><html lang="en"><head><meta name="description" content="Web word processing, spreadsheets and presentations"><meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=0"><
2024-05-08 12:15:31 UTC	1255	IN	Data Raw: 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 72 6f 64 75 63 74 2b 53 61 6e 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 4c 4d 59 72 30 6f 72 4e 77 72 6d 72 57 4f 4e 4a 4e 79 6c 6c 71 51 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 4c 4d 59 72 30 6f 72 4e 77 72 6d 72 57 4f 4e 4a 4e 79 6c 6c 71 51 22 3e 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d Data Ascii: en-cross-origin"><link href="//fonts.googleapis.com/css?family=Product+Sans" rel="stylesheet" type="text/css" nonce="LMYr0orNwrmrWONJNyllqQ"><style nonce="LMYr0orNwrmrWONJNyllqQ">.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-
2024-05-08 12:15:31 UTC	1255	IN	Data Raw: 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 61 2c 20 61 3a 6c 69 6e 6b 2c 20 61 3a 76 69 73 69 74 65 64 20 7b 63 6f 6c 6f 72 3a 20 23 31 31 32 41 42 42 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 6e 6f 6e 63 65 3d 22 4c 4d 59 72 30 6f 72 4e 77 72 6d 72 57 4f 4e 4a 4e 79 6c 6c 71 51 22 3e 2e 65 72 72 6f 72 4d 65 73 73 61 67 65 20 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 74 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 35 30 25 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 3c Data Ascii: nt-family: Arial,sans-serif; font-size: 13px; margin: 0; padding: 0;}a, a:link, a:visited {color: #112ABB;}</style><style type="text/css" nonce="LMYr0orNwrmrWONJNyllqQ">.errorMessage {font-size: 12pt; font-weight: bold; line-height: 150%;}</style></head><
2024-05-08 12:15:31 UTC	136	IN	Data Raw: 70 78 3b 7d 23 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 20 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 34 30 70 78 3b 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: px;}#innerContainer {margin-bottom: 20px; margin-left: 40px; margin-right: 40px; margin-top: 80px; position: relative;}</style></html>
2024-05-08 12:15:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49783	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:32 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:32 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:32 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:32 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49787	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:40 UTC	968	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 987 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:40 UTC	987	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 32 35 30 2c 5b 5b 22 31 37 31 35 31 37 30 35 32 38 38 38 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],1250,[["1715170528886",null,null,null
2024-05-08 12:15:40 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:40 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49786	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:40 UTC	968	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 620 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:40 UTC	620	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 37 34 2c 5b 5b 22 31 37 31 35 31 37 30 35 32 38 38 38 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],574,[["1715170528888",null,null,null,
2024-05-08 12:15:40 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:40 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49788	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:41 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:41 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:41 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:41 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:41 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49789	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:41 UTC	653	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:42 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:42 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:42 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:42 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49793	142.251.33.97	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:48 UTC	791	OUT	GET /a-/ALV-UjVb9SFnDTZyqkqHArY-sJwqn-ErkFj9L3KnrN0g71pcwcnP-g=s64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 12:15:48 UTC	507	IN	HTTP/1.1 200 OK Content-Type: image/png Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Expires: Thu, 09 May 2024 12:15:48 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Date: Wed, 08 May 2024 12:15:48 GMT Server: fife Content-Length: 333 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:48 UTC	333	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 02 00 00 00 25 0b e6 89 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 01 05 49 44 41 54 68 81 ed 98 41 12 82 30 0c 45 c1 e1 4e ba d4 83 c8 e1 bc 88 5b 8f e5 b6 c2 38 24 e9 4f bf 19 ff 5b 32 0c fd af a1 d0 74 be 5f cf 53 65 4e ec 00 bd 48 80 8d 04 d8 48 80 8d 04 d8 48 80 8d 04 d8 94 17 58 92 9e fb 78 be 36 57 d6 db 25 63 a0 19 db 0f ec 73 ef c1 9a 20 5f 21 4b 7a fb 6d 46 60 02 ae 58 40 07 8c 40 20 10 ca a1 fc 57 08 20 10 9e 4b 48 11 54 01 36 12 60 23 01 36 12 60 03 10 08 ef 2e 21 db 52 4c 05 02 51 50 9b ea f2 af 90 1a 9a 4f 0e c3 c1 1b 4b 70 05 5a da 6a 24 35 c4 53 aa c0 18 ca 2f 62 09 b0 49 39 d8 fa f6 31 cd 58 ca 98 45 1c eb 6e 21 3e 5d 02 a8 a3 91 1e 93 88 00 f6 68 ad 25 60 Data Ascii: PNGIHDR@@%sBITOIDAThA0EN[8$O[2t_SeNHHHXx6W%cs _!KzmF`X@@ W KHT6`#6`.!RLQPOKpZj$5S/bI91XEn!>]h%`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49795	142.251.33.97	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:48 UTC	507	OUT	GET /a-/ALV-UjVb9SFnDTZyqkqHArY-sJwqn-ErkFj9L3KnrN0g71pcwcnP-g=s64 HTTP/1.1 Host: lh3.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 12:15:49 UTC	515	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.png" X-Content-Type-Options: nosniff Server: fife Content-Length: 333 X-XSS-Protection: 0 Date: Wed, 08 May 2024 12:15:48 GMT Expires: Thu, 09 May 2024 12:15:48 GMT Cache-Control: public, max-age=86400, no-transform Content-Type: image/png Vary: Origin Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:49 UTC	333	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 40 00 00 00 40 08 02 00 00 00 25 0b e6 89 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 01 05 49 44 41 54 68 81 ed 98 41 12 82 30 0c 45 c1 e1 4e ba d4 83 c8 e1 bc 88 5b 8f e5 b6 c2 38 24 e9 4f bf 19 ff 5b 32 0c fd af a1 d0 74 be 5f cf 53 65 4e ec 00 bd 48 80 8d 04 d8 48 80 8d 04 d8 48 80 8d 04 d8 94 17 58 92 9e fb 78 be 36 57 d6 db 25 63 a0 19 db 0f ec 73 ef c1 9a 20 5f 21 4b 7a fb 6d 46 60 02 ae 58 40 07 8c 40 20 10 ca a1 fc 57 08 20 10 9e 4b 48 11 54 01 36 12 60 23 01 36 12 60 03 10 08 ef 2e 21 db 52 4c 05 02 51 50 9b ea f2 af 90 1a 9a 4f 0e c3 c1 1b 4b 70 05 5a da 6a 24 35 c4 53 aa c0 18 ca 2f 62 09 b0 49 39 d8 fa f6 31 cd 58 ca 98 45 1c eb 6e 21 3e 5d 02 a8 a3 91 1e 93 88 00 f6 68 ad 25 60 Data Ascii: PNGIHDR@@%sBITOIDAThA0EN[8$O[2t_SeNHHHXx6W%cs _!KzmF`X@@ W KHT6`#6`.!RLQPOKpZj$5S/bI91XEn!>]h%`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49796	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:51 UTC	543	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://drive.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-08 12:15:52 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:51 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49798	142.251.33.110	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:52 UTC	1000	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1251 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://drive.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://drive.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:52 UTC	1251	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 30 36 2c 5b 5b 22 31 37 31 35 31 37 30 35 34 39 37 31 31 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2006,[["1715170549711",null,null,null
2024-05-08 12:15:52 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://drive.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 08 May 2024 12:15:52 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-08 12:15:52 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-08 12:15:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49799	142.250.69.206	443	5584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:15:53 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=bSSVaOnUMe2pdvInaAxjtpj5OYa71e5iX74519oy8_6eDxZey4xuNRF6Kb4PdqOJjEAoQEyv0J9KXZysigw-bfMElUgEZdsqScEvgaOZ6Ng3YN7p66pSDZiCvGjy4UQ2Rr1sSTlscTWDZaxX_fQrbfTHHwNG3fee-I6zo9v9Dy8
2024-05-08 12:15:53 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 08 May 2024 12:15:53 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-08 12:15:53 UTC	985	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-08 12:15:53 UTC	570	IN	Data Raw: 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 Data Ascii: -image:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) 0}}@media only screen and (-webkit-min-device-pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-rep

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49800	52.165.165.26	443

Timestamp	Bytes transferred	Direction	Data
2024-05-08 12:16:08 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cXkZwHTpU45pOMB&MD=+MDlyW+f HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-08 12:16:09 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_2160" MS-CorrelationId: 3b9bd474-2f1b-49e1-9960-a6547ab7cf8f MS-RequestId: a5b05b0c-ba0f-42d9-bf30-5d13bc70e600 MS-CV: 9j6cCE1UqUutPX+/.0 X-Microsoft-SLSClientCache: 2160 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 08 May 2024 12:16:09 GMT Connection: close Content-Length: 25457
2024-05-08 12:16:09 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-08 12:16:09 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	14:15:09
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:15:12
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2124 --field-trial-handle=2096,i,3259511740123321582,4811320085073021387,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:15:15
Start date:	08/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Windows Analysis Report
https://drive.google.com/file/d/12wgdoVCUtzv9UaHMbhtpDEnvd4Ke5bzv/view?usp=drivesdk