Edit tour

Windows Analysis Report
https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ

Overview

General Information

Sample URL:	https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ
Analysis ID:	1446627
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3164 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2076,i,18174622302486856701,2373706481918358607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: sites.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: lh6.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: lh5.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /_/view/logImpressions?authuser=0 HTTP/1.1Host: sites.google.comConnection: keep-aliveContent-Length: 3083sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded;charset=UTF-8Accept: */*Origin: https://sites.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU

Source: chromecache_61.2.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_61.2.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_61.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_61.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_80.2.dr, chromecache_61.2.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_63.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_80.2.dr, chromecache_61.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_80.2.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_80.2.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_80.2.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_61.2.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_61.2.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_61.2.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_61.2.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_80.2.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_61.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_61.2.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_61.2.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_61.2.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_61.2.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_80.2.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_80.2.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlSHYjedg.wo
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlWHYg.woff2
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlYHYjedg.wo
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlZHYjedg.wo
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3IWkUHHAIjg75cFRf3bXL8LICs1_Fv40pKlN4NNSeSASz7FmlbHYjedg.wo
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlM-vWjMY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMOvWjMY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMevWjMY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMuvWjMY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlOevWjMY.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2)
Source: chromecache_76.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPuvWjMY.woff2)
Source: chromecache_80.2.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_63.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_80.2.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_61.2.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_80.2.dr, chromecache_61.2.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_63.2.dr	String found in binary or memory: https://rapid.corp.google.com/
Source: chromecache_63.2.dr	String found in binary or memory: https://scriptz.corp.google.com/
Source: chromecache_77.2.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/no_results_error.png
Source: chromecache_61.2.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_80.2.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_77.2.dr	String found in binary or memory: https://support.google.com/cloudsearch/answer/6172299
Source: chromecache_80.2.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_63.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_80.2.dr, chromecache_61.2.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_63.2.dr	String found in binary or memory: https://workspace.google.com/products/sites/
Source: chromecache_80.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_80.2.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_61.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_61.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_61.2.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_80.2.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_80.2.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61529
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61529 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.43.61.160:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@16/42@20/11

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2076,i,18174622302486856701,2373706481918358607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2076,i,18174622302486856701,2373706481918358607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://developers.google.com/identity/gsi/web/guides/gis-migration)	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://classroom.google.com/sharewidget?usegapi=1	0%	URL Reputation	safe
https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html	0%	URL Reputation	safe
https://workspace.google.com/products/sites/	0%	URL Reputation	safe
https://console.developers.google.com/	0%	URL Reputation	safe
https://www.youtube.com/subscribe_embed?usegapi=1	0%	URL Reputation	safe
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	100%	URL Reputation	phishing
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	0%	URL Reputation	safe
https://plus.google.com	0%	URL Reputation	safe
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	0%	URL Reputation	safe
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1	0%	URL Reputation	safe
https://csp.withgoogle.com/csp/lcreport/	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget	0%	URL Reputation	safe
https://developers.google.com/api-client-library/javascript/reference/referencedocs	0%	URL Reputation	safe
https://angular.io/license	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://developers.google.com/	0%	URL Reputation	safe
https://families.google.com/webcreation?usegapi=1&usegapi=1	0%	URL Reputation	safe
https://fonts.google.com/license/googlerestricted	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe
https://play.google.com/log?format=json&hasfast=true&authuser=0	0%	Avira URL Cloud	safe
https://sites.google.com/_/view/logImpressions?authuser=0	0%	Avira URL Cloud	safe
https://play.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://scriptz.corp.google.com/	0%	Avira URL Cloud	safe
https://lh5.googleusercontent.com/QmMtUfcZb8HCPTk7mycilQNRSxsgN1pfissSxL8rc_Lw5Ka89R6W3KNq9kcVUYqo9yEwlvZ4j7pFViSwROUBDFs=w16383	0%	Avira URL Cloud	safe
https://www.google.com/shopping/customerreviews/optin?usegapi=1	0%	Avira URL Cloud	safe
https://www.google.com/shopping/customerreviews/badge?usegapi=1	0%	Avira URL Cloud	safe
https://drive.google.com/savetodrivebutton?usegapi=1	0%	Avira URL Cloud	safe
https://lh6.googleusercontent.com/xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280	0%	Avira URL Cloud	safe
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	0%	Avira URL Cloud	safe
https://rapid.corp.google.com/	0%	Avira URL Cloud	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs	0%	Avira URL Cloud	safe
https://apis.google.com/js/client.js?onload=gapiLoaded	0%	Avira URL Cloud	safe
https://support.google.com/cloudsearch/answer/6172299	0%	Avira URL Cloud	safe
https://clients6.google.com	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
plus.l.google.com	142.250.184.206	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
sites.google.com	142.250.186.142	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
googlehosted.l.googleusercontent.com	216.58.206.65	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
lh5.googleusercontent.com	unknown	unknown	false	unknown
lh6.googleusercontent.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://sites.google.com/_/view/logImpressions?authuser=0	false	Avira URL Cloud: safe	unknown
https://lh5.googleusercontent.com/QmMtUfcZb8HCPTk7mycilQNRSxsgN1pfissSxL8rc_Lw5Ka89R6W3KNq9kcVUYqo9yEwlvZ4j7pFViSwROUBDFs=w16383	false	Avira URL Cloud: safe	unknown
https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ	false		unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	Avira URL Cloud: safe	unknown
https://lh6.googleusercontent.com/xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/client.js?onload=gapiLoaded	false	Avira URL Cloud: safe	unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://scriptz.corp.google.com/	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/client.js	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://classroom.google.com/sharewidget?usegapi=1	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://workspace.google.com/products/sites/	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://console.developers.google.com/	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_80.2.dr	true	URL Reputation: phishing	unknown
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_80.2.dr, chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_80.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com/log?format=json&hasfast=true	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://csp.withgoogle.com/csp/lcreport/	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://pay.google.com/gp/v/widget/save	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_80.2.dr	false	Avira URL Cloud: safe	unknown
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_80.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_80.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/api-client-library/javascript/reference/referencedocs	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://rapid.corp.google.com/	chromecache_63.2.dr	false	Avira URL Cloud: safe	unknown
https://angular.io/license	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_80.2.dr, chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://families.google.com/webcreation?usegapi=1&usegapi=1	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://fonts.google.com/license/googlerestricted	chromecache_76.2.dr	false	URL Reputation: safe	unknown
https://domains.google.com/suggest/flow	chromecache_61.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/cloudsearch/answer/6172299	chromecache_77.2.dr	false	Avira URL Cloud: safe	unknown
https://clients6.google.com	chromecache_61.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
216.58.206.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.181.225	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.186.142	sites.google.com	United States	15169	GOOGLEUS	false
142.250.184.206	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.33	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1446627
Start date and time:	2024-05-23 18:17:29 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@16/42@20/11

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 142.250.185.238, 173.194.76.84, 34.104.35.123, 172.217.16.195, 142.250.186.138, 142.250.186.170, 142.250.186.42, 216.58.212.138, 142.250.185.202, 142.250.185.170, 142.250.185.74, 142.250.184.202, 172.217.18.106, 142.250.181.234, 172.217.16.202, 216.58.206.42, 142.250.185.234, 142.250.184.234, 142.250.185.106, 142.250.185.138, 142.250.185.131, 142.250.186.99, 40.68.123.157, 199.232.210.172, 192.229.221.95, 20.166.126.56, 13.85.23.206, 131.107.255.255, 20.12.23.50, 40.127.169.103
Excluded domains from analysis (whitelisted): fonts.googleapis.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
VT rate limit hit for: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ

Input	Output
URL: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ Model: Perplexity: mixtral-8x7b-instruct	```json { "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button or login button is mentioned in the text.", "The text is promoting a dating site, not a login form." ] }
MEET UNDER THE RADAR GIRLS JOIN FREE HOOKUP WITH A SUGAR BABY This is a dating site that allows you to rneet women quickly. Every day we have thousands of new users who want only one thing- serious acquaintances. JOIN WITH US NOW
URL: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ Model: Perplexity: mixtral-8x7b-instruct	```json { "loginform": false, "reasons": [ "No input fields for username or password are present in the text.", "No submit button or login action is mentioned in the text.", "The text is promoting a dating site, not a login form." ] }
MEET UNDER THE RADAR GIRLS JOIN FREE HOOKUP WITH A SUGAR BABY This is a dating site that allows you to rneet women quickly. Every day we have thousands of new users who want only one thing- serious acquaintances. JOIN WITH US NOW
URL: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be related to Google services, including OAuth2 authentication and Google Drive/Docs integration. There are no obvious signs of malicious behavior such as obfuscation, data exfiltration, or unauthorized access attempts. The presence of API keys and client IDs is typical for legitimate service integrations. The risk score is set to 1 due to the presence of sensitive information like API keys, which should be handled securely." }
_at_config = [null,"AIzaSyChg3MFqzdi1P5J-YvEyakkSA1yU7HRcDI","897606708560-a63d8ia0t9dhtpdt4i3djab2m42see7o.apps.googleusercontent.com",null,null,null,null,null,null,null,null,null,null,null,"SITES_%s",null,null,null,null,null,null,null,null,null,["AHKXmL0Eu5L-Fo1-OgGlx3Om0SiuZ2rZX7J5UtsI94wKvP5_uFRGTeYkGWkLpFnc8NN-qq4HbuI5",1,"COeZqrGWpIYDFfDAzgAd7qELWA",1716481098943714,[5703839,5704621,5706832,5706836,5707711,5737800,5738529,5740814,5743124,5747261,5748029,5752694,5753329,5754229,5755096,5758823,5762259,5764268,5765551,5766777,5773678,5774347,5774852,5776517,5777194,5784947,5784967,5791299,5791782,5796151,5796473,5797291,14101306,14101502,14101510,14101534,49372443,49375322,49451559,49472071,49512373,49622831,49623181,49644023,49769345,49822929,49823172,49833470,49842863,49924714,50166959,50221728,50266230,50273536,50297084,50297434,50335897,50360148,50498915,50515335,50520321,50529111,50586970,70971264,70979410,71008281,71035308,71038263,71079946,71085249,71123572,71185178,71197834,71238954,71254282,71289154,71330601,71346960,71386853,71387897,71473309,71478208,71489168,71528605,71530091,71531305,71533377,71536924,71544842,71554480,71569467,71573878,71582416,71612845,71614603,71624114,71625588,71632274,71658048,71659821,71671626,71689868,71829558,71868509,71897835,71924359,71960548,94327679,94339155,94353376,94356210,94364529,94367316,94415373,94429580,94434265,94442451,94514769,94604999,94630911,94681202,94887680]],null,null,null,null,0,null,null,null,null,null,null,null,null,null,"https://drive.google.com",null,null,null,null,null,null,null,null,null,0,1,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"v2internal","https://docs.google.com",null,null,null,null,null,null,"https://sites.google.com/new/",null,null,null,null,null,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,1,"",null,null,null,null,null,null,null,null,null,null,null,null,6,null,null,"https://accounts.google.com/o/oauth2/auth","https://accounts.google.com/o/oauth2/postmessageRelay",null,null,null,null,78,"https://sites.google.com/new/?usp\u003dviewer_footer",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"https://www.gstatic.com/atari/embeds/83a60601c213b72fb19c1855fb0c5f26/intermediate-frame-minified.html",0,null,"v2beta",null,null,null,null,null,null,4,"https://accounts.google.com/o/oauth2/iframe",null,null,null,null,null,null,"https://1856312437-atari-embeds.googleusercontent.com/embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null
URL: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code appears to be configuration data for a web application, likely related to document or site viewing/editing functionalities. There are no evident signs of malicious behavior such as obfuscated code, suspicious network requests, or attempts to capture sensitive user information. The presence of tracking or advertisement functionality is considered no risk as per the given instructions." }
_docs_flag_initialData={"atari-emtpr":false,"atari-ebidm":true,"atari-ebids":true,"atari-edtm":true,"atari-eibrm":false,"atari-ectm":false,"atari-ects":false,"docs-text-elei":false,"docs-text-usc":true,"atari-bae":false,"docs-text-emtps":true,"docs-text-etsrdpn":false,"docs-text-etsrds":false,"docs-text-erdfs":false,"docs-text-endes":false,"docs-text-escpv":true,"docs-text-ecfs":false,"docs-text-ecis":false,"docs-text-eectfs":false,"docs-text-edctzs":true,"docs-text-eetxpc":false,"docs-text-eetxp":false,"docs-text-ertkmcp":true,"docs-text-ettctvs":false,"docs-text-ettts":false,"docs-text-escoubs":false,"docs-text-escitrbs":false,"docs-text-emscts":false,"docs-text-ecgvd":false,"docs-text-esbbs":false,"docs-text-esbbcis":false,"docs-text-etccdts":false,"docs-text-etcchrs":false,"docs-text-etctrs":false,"docs-text-eltbbs":false,"docs-text-edltts":false,"docs-text-ecltts":false,"docs-text-etb":false,"docs-text-esbefr":false,"docs-text-ipi":false,"docs-etshc":false,"docs-text-tbcb":2.0E7,"docs-efsmsdl":false,"docs-text-etof":false,"docs-text-ehlb":false,"docs-text-epa":true,"docs-text-ecls":true,"docs-text-dwit":false,"docs-text-elawp":false,"docs-eec":false,"docs-ecot":"","docs-text-enbcr":false,"docs-text-svofc":false,"docs-sup":"","umss":false,"docs-eldi":false,"docs-dli":false,"docs-liap":"/logImpressions","ilcm":{"eui":"AHKXmL0Eu5L-Fo1-OgGlx3Om0SiuZ2rZX7J5UtsI94wKvP5_uFRGTeYkGWkLpFnc8NN-qq4HbuI5","je":1,"sstu":1716481098943714,"si":"COeZqrGWpIYDFfDAzgAd7qELWA","gsc":null,"ei":[5703839,5704621,5706832,5706836,5707711,5737800,5738529,5740814,5743124,5747261,5748029,5752694,5753329,5754229,5755096,5758823,5762259,5764268,5765551,5766777,5773678,5774347,5774852,5776517,5777194,5784947,5784967,5791299,5791782,5796151,5796473,5797291,14101306,14101502,14101510,14101534,49372443,49375322,49451559,49472071,49512373,49622831,49623181,49644023,49769345,49822929,49823172,49833470,49842863,49924714,50166959,50221728,50266230,50273536,50297084,50297434,50335897,50360148,50498915,50515335,50520321,50529111,50586970,70971264,70979410,71008281,71035308,71038263,71079946,71085249,71123572,71185178,71197834,71238954,71254282,71289154,71330601,71346960,71386853,71387897,71473309,71478208,71489168,71528605,71530091,71531305,71533377,71536924,71544842,71554480,71569467,71573878,71582416,71612845,71614603,71624114,71625588,71632274,71658048,71659821,71671626,71689868,71829558,71868509,71897835,71924359,71960548,94327679,94339155,94353376,94356210,94364529,94367316,94415373,94429580,94434265,94442451,94514769,94604999,94630911,94681202,94887680],"crc":0,"cvi":[]},"docs-ccdil":false,"docs-eil":true,"info_params":{},"docs-cajct":"CANARY_TYPE_NONE","buildLabel":"editors.sites-viewer-frontend_20240514.03_p0","docs-show_debug_info":false,"atari-jefp":"/_/view/jserror","docs-jern":"view","atari-rhpp":"/_/view","docs-ecuach":false,"docs-cclt":2033,"docs-ecci":true,"docs-esi":false,"docs-ecil":false,"docs-efypr":true,"docs-eyprp":true,"docs-eytpgcv":0}; _docs_flag_cek= null ;
URL: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ Model: gpt-4o	```json { "riskscore": 1, "reasons": "The provided JavaScript code does not exhibit any malicious behavior. It checks for the existence of an image URL and sets a flag when the image is loaded. The only potential risk is the use of the 'globals' object, which could be manipulated elsewhere in the code, but this is not inherently malicious." }
const imageUrl = null ; function bgImgLoaded() { if (!globals.headerBgImgLoaded) { globals.headerBgImgLoaded = new Date().getTime(); } else { globals.headerBgImgLoaded(); } } if (imageUrl) { const img = new Image(); img.src = imageUrl; img.onload = bgImgLoaded; globals.headerBgImgExists = true; } else { globals.headerBgImgExists = false; }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2124)
Category:	downloaded
Size (bytes):	325611
Entropy (8bit):	5.5233999895423835
Encrypted:	false
SSDEEP:	6144:l9y0krrBj/k2V72JetI/sZnGq7p9+Of1kIpAzwCuPQBmgC:3yzrhn+etI/GB7TVFX
MD5:	5E1F51F81D8CCC6A9416F2343BB51285
SHA1:	263266F4B4808A8CF944854AFDE4A8B928336AC9
SHA-256:	D7C8CAD0D955B575B2210F6ACBE90B948313F78B49B1A6B3804615DE4E198AC3
SHA-512:	F152D02B1B2D1BB27476538094BAFE9AF0CB885FCD347B01CD1392ECB9576FABBB87459A2B16E81DDAA386C5A56046B7FD195718F5DD4B448C1708B90573EEB3
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs
Preview:	gapi.loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);.var ba,ca,da,na,pa,va,wa,za;ba=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_.ma=da(this);na=function(a,b){if(b)a:{var c=_.ma;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}};.na("Symbol",function(a){if(a)re

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 48236, version 1.0
Category:	downloaded
Size (bytes):	48236
Entropy (8bit):	7.994912604882335
Encrypted:	true
SSDEEP:	768:uj6JxavgLx5rjTH3CdZ3y11o4uMb2IVEhiB6z6GAAHJApICtBgso6HaOjTXHRWK:ujoa4LxZPCdm3B2IVEhiB62apApISxos
MD5:	015C126A3520C9A8F6A27979D0266E96
SHA1:	2ACF956561D44434A6D84204670CF849D3215D5F
SHA-256:	3C4D6A1421C7DDB7E404521FE8C4CD5BE5AF446D7689CD880BE26612EAAD3CFA
SHA-512:	02A20F2788BB1C3B2C7D3142C664CDEC306B6BA5366E57E33C008EDB3EB78638B98DC03CDF932A9DC440DED7827956F99117E7A3A4D55ACADD29B006032D9C5C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
Preview:	wOF2.......l......D...............................O..B..h?HVAR.x.`?STAT.$'...0+...\|.../V........+..2.0..6.6.$..`. ..~......[B4q.....t..P.M_.z...1..R.S...u.#..R....fR.1.N.v.N.P...;.2........!Z......Qs...5f.G.K.an2&....2.........C.H.t..N!.....nh.<(.vN.....j.._.L.P.t..Ai.%.............._I.i,..o,C.].H.X9.....a.=N....k.....n.L..k.f.u..{...:.}^\[..~5...Z`...........`!...%4..,...K0..&.a/....P....S....m.Z......u...D.j.F...f.0`I.`.`.h#..)(FQ.F!o$........S.).MV8%Rh...r...x...T]$.=......Y...!.3.&U..."....Q....{.l/0..d..4iJ/..}...3....i[Z..NG.WD...>.[U..Q.h..@m.=..S...1C2...d...<..v.?.q.f..n...OUz.....&Z......Z."..N.....n...9.B..C..W....}...W..6Zs.i.+Z........jB.n..x.8M.....q..@I....-.%..,C,..K..#.2...4)/.v_..x.<....t.....%[.4?.=j.V..jj''..W.u..q....I.L.=......E...\.M.7{.>......W........C.`...,9$......\..o........y...4A..m.P.,X..=?.:................wF`..+.P..........M!.4.......l.>M..t.ff5r..^..Z.g...!fA,hIIQ...e.R>B.AH.VuX..>..\.=.ky...1>C....>C.c.;...6D.

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	621663
Entropy (8bit):	5.549961726272506
Encrypted:	false
SSDEEP:	6144:yfGaftpH4DQ5tqM0P6tvnp6h4WG8iWSs6Yoqf8MzDBZayPDdBHzJ0KGsHL29tZon:yfjZtV0P6FptWVtzDBZDPgY
MD5:	B134EAEB306D02884A0D15CBDA4372F7
SHA1:	A91229899F880691CFF2FEB9171D3A0937700453
SHA-256:	645DE90FF4B5FF8A0ACD1C9B73D410C163844B46ACD44D837F50E1334B32A448
SHA-512:	CB113B5E2778E6993BB5667DE26C402DB4B7D68E233895C996F662B4A93F4A2F6B60AC1C52CFE3DF4984C0CE09D2D6F3D90F840265D5657E689F350D406B68F9
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.rygr0iys9xQ.O/am=BgM/d=1/rs=AGEqA5lZFZLd7dVCuaCGQ1MrEhrm_lk1Ww/m=view
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x306, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright 2024 Google, Inc. SPDX-License-Identifier: MIT././. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause././*.. Copyright 2019 Google Inc... Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limit

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	dropped
Size (bytes):	1150
Entropy (8bit):	2.3710475547263856
Encrypted:	false
SSDEEP:	6:RlMRQ8W828W828W828W828S8eftXfc/lk:Ry3X3X3X3XjeVUk
MD5:	EA69A3F95DD5484853D128186DB7E13D
SHA1:	5FDB5FE05108FD6E5386BBDA06778AF4B446DC6A
SHA-256:	8179E80BCFEF62154D1FF7371A1C60BD2C6C1E71C3DA2F4A8B1DB518A1900EC2
SHA-512:	2169D31065059C3677D025F27A5650C1E35BF83B6D6B3D80842B0809FF67E85388CB00213A4BD3FA76F71909A21298C824B39299A3980BA3B11C0297DB472610
Malicious:	false
Reputation:	low
Preview:	............ .h.......(....... ..... .....@....................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 900 x 250
Category:	dropped
Size (bytes):	76230
Entropy (8bit):	7.948024444908805
Encrypted:	false
SSDEEP:	1536:cvQtsu2aR9siDyt0Dg9XR8DMqTi3qBY4FhnmO75e58LL+WtUUNoJ:uaRGilMh8D7hnmO7s24UiJ
MD5:	924FCADB85AB71898B5976E967121D00
SHA1:	8E9A57C92A068E0E22A697B957DB4043D0A5BA53
SHA-256:	0B201E0AC37055CCB8D2F0BAA2F6B32A141DEA926C50B059D98897D27CBD93BB
SHA-512:	B15A6ED1EF31435F4946E23B1683874B5609A06B2A27BFDFB9DB26D12437EAA404612F93B00DD79E36EC169DFEB63868C318415C75F5829B730CABC892ABFB06
Malicious:	false
Reputation:	low
Preview:	GIF89a............c...wE,..mb]ynj.......1.qT"""....]......m.dD._>.gRTLJG........10,...yU.......R7.......m...........kaQ%...k.iE....{.kR...tT...+($..~.K?.ZO....................u.dC...yU._?........xe..r..e.L3.\|n...qS..d...cRV.&...o8&.,.......oN.jT...........w}.....:;$#.......r...I>=.y]....TB........jL...~.kY...s^...9+..YJ.tb.....l.@/.vl.p_+#(.a..u.cJ.aYg[[a..000..T;....Z5R/(..D...9...yp.g\d-...vo.).v.....lQK....NB..E.s.g.va...W;...cK...[D.......c(((._M.\|^.H7.tZ...w........D-..(.........l.c[............la..l.mW...\|b...........uZ.]O..i.dJ;55.gI..........,,,..., !...dQ.yU.........iE...y.tR.........u...p.........z[....jK.\|...q[.s...i.mP...........................................................................!..NETSCAPE2.0.....!...d...,...............H......\....#J.H....3j.... C..I...(S.....0a.I...5...iC..@...9.g.H.U:...P.J.J5..W.b..+W....K...h.....[..K...J....w..<q..<8...]bY...&.#K.L....3k.....c

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1815)
Category:	downloaded
Size (bytes):	48622
Entropy (8bit):	5.606034565500903
Encrypted:	false
SSDEEP:	768:ASgURNNYTvu/j57T98YbFiW9cdZlEJGdgqtHFc8ycfpPBkG+2TveeDZxyJC1SVSh:SURBRTbF59BGdgqtqqe2TvpxKC1SAVHn
MD5:	005ECC727C952BF7086C33EED4F913F1
SHA1:	0179D64C66DE76B65952EFF816FE70140C964452
SHA-256:	93ABC7717038EAAA4DC7B09B05D1AFD6C7A614FA9A725CA1D5E83698DE7135FC
SHA-512:	C565A39191C13286F9ABB0E89FC0BF327B2EE4BD012FD392E8A94EB2441C045BA016CBB5FD99A657BCD45C651A8A6A420B74D1B15A7C145B71BD3DA88C2F7021
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.rygr0iys9xQ.O/am=BgM/d=0/rs=AGEqA5lZFZLd7dVCuaCGQ1MrEhrm_lk1Ww/m=sy14,sy17,sy15,sy18,sy19,sy1b,fuVYe,vVEdxc,sy1c,sy1d,sy1e,CG0Qwb"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var IGa,JGa,KGa,LGa,oB,MGa,QGa,SGa,TGa,RGa,UGa,VGa,WGa,rB,XGa,sB,ZGa,$Ga,YGa,aHa,qB,pB,bHa,PGa,OGa;IGa=function(a,c){var d=a.length;if(d!==c.length)return!1;for(var e=0;e<d;e++)if(a[e]!==c[e])return!1;return!0};JGa=function(a,c){if("string"===typeof c)try{c=_.db(c)}catch(d){return!1}return _.eb(c)&&IGa(a,c)};KGa=function(a,c,d,e,f){var g;return null!=(g=a<e?c[a+f]:void 0)?g:null==d?void 0:d[a]};.LGa=function(a,c){if(!Array.isArray(a)\|\|!Array.isArray(c))return 0;a=a[0];c=c[0];return a===c?0:a<c?-1:1};_.NGa=function(a,c){var d=_.Gb(),e;if(_.xb(a)){var f=a.da;null!=e\|\|(e=f[d]);var g=_.Db(a)}else if(Array.isArray(a))f=a;else return!1;if(_.xb(c))a=c.da,null!=e\|\|(e=a[d]),g=g\|\|_.Db(c);else if(Array.isArray(c))a=c;else return!1;var k;return MGa(f,a,null!=(k=g)?k:_.Dc,e,2)};oB=function(a,c,d){return MGa(a,c,void 0,d,0)};.MGa=function(a,c,d,e,f){null!=pB&&Array.isArray(a)&&Array.isArray(c)&&pB.push(e?"cc":"cn");i

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 640x480, components 3
Category:	downloaded
Size (bytes):	16888
Entropy (8bit):	7.889704511976435
Encrypted:	false
SSDEEP:	384:Z+nhhSbIvbBGVeHoCvE3a7efY4v7FUF9ndfrd7eK5Pi:0/T3PEmp4v7+5Brd7eGPi
MD5:	5A1C57451E9EB6BCF89BF0946EF11A37
SHA1:	D4AD58B87A1B0998E7646175DB0D1DC273E88DF5
SHA-256:	3BC66F5EE3258FF8923F8F38E593C984A1390FF33A887C8FAB89A3D474AED7C6
SHA-512:	8EAE829D942F560F857D620087ADEF25F996F95647B0E3A439999001D1C6C9D1FF193152782FA91A553B7F77628BCFD702FED3AB52841242B86BBD2BDD89DC24
Malicious:	false
Reputation:	low
URL:	https://lh5.googleusercontent.com/QmMtUfcZb8HCPTk7mycilQNRSxsgN1pfissSxL8rc_Lw5Ka89R6W3KNq9kcVUYqo9yEwlvZ4j7pFViSwROUBDFs=w16383
Preview:	.....C....................................................................C............................................................................"..................................../....................!1AQ.aq......"2....BRrb..............................................................?..7SK...U}.2...6..Z...;.....M>..,.2.\|...X'?....l.....2.H Q..7.Y.3~;F.....D.1#d:.Mc......"0.7!.........x./&...G....?...#....C.X.Y....8...Dq..p._z.f.....Y.....c..s.`...$...$...5Tc.pFw2h...B.{......7g..(.._....6......D}. .o.......q..@N........j...p#.U.$1.Y.+..$....rZ1$gc\|.....x./j.."........;<......m.... ..!..@....s...E+....9bF.i\;...L......d....z;.......q/.9........&.(y..1..6p.pA....c....A.Q..;.zl.l..JO..E.^.GN......B.*=.A.AU\|L...>` ."..26.L.x.j@<..Q..~.)..!i.1...`..T.............;.;..5'E..r2....?.....H. ..Y#..N..1^..t9.I.....&._..y.....(....~.#....;.j..........@!.f...H....s/4N.Y_..gz.k,.].y.<.......~...T.5.%...Q./ARe.....(.@.Rd.b..r..G........GT.'...T..5..(I..b.=...^%DjZ7-.x

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1907)
Category:	downloaded
Size (bytes):	38088
Entropy (8bit):	5.666532915988719
Encrypted:	false
SSDEEP:	768:x9JDvnczOVmUbv5rhMCWR63hHFYJJCZRrJ9:JjcSVfbvlbT/ZRr7
MD5:	C9F48CD4C7F71D2DF11B968E59DA4C2F
SHA1:	0574A9970BE02F357C0D137CB408D583B3E01171
SHA-256:	B67A6B75760BDC9CA7221CB824923FB131A70B8F016DECA1F3848EDF74A31AB1
SHA-512:	9DF052596E34C2F8261BF98A150C2B9230EFB6B7C0164F090B57C9F69ABDE4DCF18D7A38ED3185BB6479D5EAB12753A9B4365E8B93986C2BA95D9667C89FC9EC
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.rygr0iys9xQ.O/am=BgM/d=0/rs=AGEqA5lZFZLd7dVCuaCGQ1MrEhrm_lk1Ww/m=sy1f,sy1h,sy1i,sy1g,FoQBg"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.BJa=function(a){for(var c=[],d=0,e=0;e<a.length;e++){var f=a.charCodeAt(e);128>f?c[d++]=f:(2048>f?c[d++]=f>>6\|192:(55296==(f&64512)&&e+1<a.length&&56320==(a.charCodeAt(e+1)&64512)?(f=65536+((f&1023)<<10)+(a.charCodeAt(++e)&1023),c[d++]=f>>18\|240,c[d++]=f>>12&63\|128):c[d++]=f>>12\|224,c[d++]=f>>6&63\|128),c[d++]=f&63\|128)}return c};_.vC=function(a,c,d){return _.bq(_.gq(a,c),c,d)};_.wC=function(){this.blockSize=-1};.}catch(e){_._DumpException(e)}.try{.var xC,yC,CJa,DJa,GJa,HJa,AC,NJa,OJa,PJa,QJa,DC,RJa,TJa,UJa,FC;xC=function(a,c){this.F=a;this.H=c;this.B=!0};yC=function(a){var c={};a=a.replace(/\r/g,"").split("\n");for(var d=0;d<a.length;d++){var e=a[d],f=e.indexOf(":");0>f\|\|(c[e.substring(0,f)]=e.substring(f+2,e.length))}return c};CJa=function(a){var c="";_.bd(a,function(d,e){c+=e+": "+d+"\r\n"});return c};DJa=function(){};_.EJa=function(a,c){return void 0==a.B?_.It(c,"gaia_session_id"):a.B};._.zC=functi

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	23268
Entropy (8bit):	5.467317234311414
Encrypted:	false
SSDEEP:	192:a/KWbqXV6uyErbqGIwYjc1Yk/MoBqNf6uyCrbqGIwYpa1GT/7Hqqmg6uy5rbqGI7:kaHq904Zq9H3gq9C+owzf1
MD5:	2C9B72E7FEA5F224A645CF63387F510C
SHA1:	E5788C6EC4EBD39014A13FFED7030A02B80D0EC0
SHA-256:	FD4B6A709B2A9DC8545D313B5BE63805C19331671B25050BB687CDD18E77C74E
SHA-512:	5D3ECEE1A51C1937C58F297C9A577E2AD3100FFCEDD4894AC08C02E2382ACD911E4AB5249E2F2269ACCD2F644A56C4D3706686332BB2F78779B287A0AF164D05
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Oswald%3A400%2C600%2C700%7COpen%20Sans%3A400%2C600%2C700&display=swap
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Open Sans';. font-style: normal;. font-weight: 400;. font-stretch: 100%;. font-display: swap;. src: url(https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:Hn8ohkYn:H8ohkY
MD5:	900914BC560773CAF9E095A8F17F6E37
SHA1:	51E0C4C0C0902C50F0D7E7581E0EDB0DCC191D7D
SHA-256:	08E437A7674E58F221D4EE6D5742EF2643929FB566511709F988B5EBE4FE4C1E
SHA-512:	2B48B170CEEBD6DB978D4DC79710A746903473B7C378FA25D6564AD6F6D2141A080E83C66D79688C35D3146F6DBFE996D3232C7A643F7767B8124C18065DB1C2
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlDJtSIgVjqBRIFDb2Fgw8=?alt=proto
Preview:	CgkKBw29hYMPGgA=

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	2.3710475547263856
Encrypted:	false
SSDEEP:	6:RlMRQ8W828W828W828W828S8eftXfc/lk:Ry3X3X3X3XjeVUk
MD5:	EA69A3F95DD5484853D128186DB7E13D
SHA1:	5FDB5FE05108FD6E5386BBDA06778AF4B446DC6A
SHA-256:	8179E80BCFEF62154D1FF7371A1C60BD2C6C1E71C3DA2F4A8B1DB518A1900EC2
SHA-512:	2169D31065059C3677D025F27A5650C1E35BF83B6D6B3D80842B0809FF67E85388CB00213A4BD3FA76F71909A21298C824B39299A3980BA3B11C0297DB472610
Malicious:	false
Reputation:	low
URL:	https://ssl.gstatic.com/atari/images/public/favicon.ico
Preview:	............ .h.......(....... ..... .....@....................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>......................P>..P>..............P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..........................................P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P>..P

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1162)
Category:	downloaded
Size (bytes):	30481
Entropy (8bit):	5.421781139623137
Encrypted:	false
SSDEEP:	768:SnkJox04Oh9piCY6+G70opGzI6NnG/XFXRmQLx8qRCfTYS6Vq+c2F13/XsuNxZ3d:FrcIbR86Vq+c2F13/XsuzZcgNC9M5r
MD5:	086E5D8976CEEAF85126435212DC0E01
SHA1:	EFDB8183DFB1D743AB5F1751D9EC41F79200FE49
SHA-256:	D891DCDEF86CD9BC9633F8081B4949EC9B6933D2CC6B46BE94A26072A83E48BA
SHA-512:	522D99E6C62CF055B5B1C30783ACD46666AEE7F96D9FC2D6B4ABC194ABF406BB05EA3237350D03F69575FE05CC8B26C13A0375D208FD54CBA4AC1F7426F1A777
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.rygr0iys9xQ.O/am=BgM/d=0/rs=AGEqA5lZFZLd7dVCuaCGQ1MrEhrm_lk1Ww/m=sy2z,IZT63,vfuNJf,sy3n,sy3r,sy3t,sy44,sy42,sy43,siKnQd,sy16,sy3l,sy3s,sy3u,sy30,YNjGDd,sy3v,PrPYRd,iFQyKf,hc6Ubd,sy45,SpsfSb,sy3o,sy3q,wR5FRb,pXdRYb,dIoSBb,zbML3c"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.iyb=function(a,c){c=void 0===c?window:c;c=void 0===c?window:c;return(c=c.WIZ_global_data)&&a in c?c[a]:null};.}catch(e){_._DumpException(e)}.try{._.v("IZT63");.var kNb=function(){var a=_.iyb("nQyAE",window),c;if((c=_.iyb("TSDtV",window))&&"string"===typeof c){var d=_.xj(_.bo(c,hNb),iNb,1,_.sj())[0];if(d){c={};d=_.xj(d,jNb,2,_.sj());d=_.q(d);for(var e=d.next();!e.done;e=d.next()){e=e.value;var f=_.H(e,7);switch(_.vj(e,t8)){case 3:c[f]=_.G(e,_.uj(e,t8,3));break;case 2:c[f]=_.Gj(e,_.uj(e,t8,2));break;case 4:c[f]=_.Ij(e,_.uj(e,t8,4));break;case 5:c[f]=_.H(e,_.uj(e,t8,5))}}}else c={}}else c={};if(c&&0<Object.keys(c).length)for(d=_.q(Object.keys(c)),e=d.next();!e.done;e=.d.next())e=e.value,e in a\|\|(a[e]=c[e]);return a};var jNb=function(a){this.da=_.u(a)};_.C(jNb,_.I);jNb.prototype.setBooleanValue=function(a){return _.tj(this,3,t8,_.Mb(a))};var t8=[2,3,4,5,6];var iNb=function(a){this.da=_.u(a)};_.C(iNb,_.I);

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 34184, version 1.0
Category:	downloaded
Size (bytes):	34184
Entropy (8bit):	7.99444009565784
Encrypted:	true
SSDEEP:	768:8pJf8lXHzTyT3P9QWCHmzL3WbHPBBWQfIKkydgMbG48B/u:u0lDTyrKWCHeL3OBDwKdmp9u
MD5:	1ACA735014A6BB648F468EE476680D5B
SHA1:	6D28E3AE6E42784769199948211E3AA0806FA62C
SHA-256:	E563F60814C73C0F4261067BD14C15F2C7F72ED2906670ED4076EBE0D6E9244A
SHA-512:	808AA9AF5A3164F31466AF4BAC25C8A8C3F19910579CF176033359500C8E26F0A96CDC68CCF8808B65937DC87C121238C1C1B0BE296D4306D5D197A1E4C38E86
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPjIUvQ.woff2
Preview:	wOF2..............X......................................4?HVAR.k.`?STAT..'...J/<.....`..(..Z.0..N.6.$.... .....K..[O;q..w....z.....%.O.t'.R....6.{..@.k......C.B..Z.uU.}..!.".....]jK.`&.\..4...US.......x..C...1g.:.+.?.t<....J...C.p.c..J...........V..H1.6.~..n.]~"R>..s....7....FE1.S/m....}..<....M..IHB.._8.d.3"......8..t.;f._~X.A.&n.1..t..v...n.._............eS.......!V."v6.xm\|M..O.z..,....,...N.1......y^7...^^.$.!.$<V..B....."j..!2..Y"..{w!..Z.[...]H....M-.".8j.<..X.[{..UI....ML.J.?4B.....]..4..()^Bi.4iD/..]....../I.-.J[D...........c...)63.U.rFpW5}.9$..2...t..:.MW.c.N...lK...3^......./..v. !...;..v.w./^S...\U....\|.......Y9...a.z.....i..$J.U...Ks....0Q.........iy.....M..@..........&..c.kh.(<.O.....~..#.-.gfw.t...nbo...]0'G.!.2.8....y.K..;%......_).W..?.'.DTR.H....G.Al..d......g>.6..(.."4l...3$...\_.W}..R...\.o........`..q...@XG.wpN......!....&...\.&.....N..5..n......g..bR......HV...s...e..r.0ty&.SW.j.{I...".m .s..T....l....@th:..aM.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	89012
Entropy (8bit):	5.617249331259722
Encrypted:	false
SSDEEP:	1536:D4G2cIK1mYfjmAuYvxw34TFKQdA08uD81qfu2:DScIK1mIw3Cu2
MD5:	1E7815628A497BEBE30D024A82DD90F3
SHA1:	7E4C66A3D6522D6A2350A890D6635743AFC3E71D
SHA-256:	977FADB252CE26E6F2B80DA027F3BBB2945D41C316347588F7549701DF45F2C0
SHA-512:	902F19F05DF406A6A61D766C61044879B3EABA7E8B6C679E98F665CE26DC29D28FA89C3ABC45C8A53D2C6B406529CFF30DBE43E88F8A365A53990ED1B065CFDA
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.rygr0iys9xQ.O/am=BgM/d=0/rs=AGEqA5lZFZLd7dVCuaCGQ1MrEhrm_lk1Ww/m=NTMZac,m9oV,rCcCxc,RAnnUd,sy2y,gJzDyc,sy37,sy38,uu7UOe,sy39,soHxf,sy3a,uY3Nvd,syu,syt,sy20,sy2s,HYv29e"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.v("NTMZac");.var I8=function(a){_.M.call(this,a.za)};_.C(I8,_.M);I8.Ia=_.M.Ia;I8.ma=_.M.ma;I8.prototype.Tk=function(){throw Error("vh");};I8.prototype.gE=function(){throw Error("vh");};I8.prototype.Qb=function(){throw Error("vh");};_.wp(_.lqa,I8);._.x();.}catch(e){_._DumpException(e)}.try{._.v("m9oV");._.i4=function(a){_.M.call(this,a.za);this.enabled=!1};_.C(_.i4,_.M);_.i4.Ia=_.M.Ia;_.i4.ma=_.M.ma;_.i4.prototype.Xa=function(a){this.enabled=a};_.i4.prototype.isEnabled=function(){return this.enabled};_.wp(_.lDa,_.i4);._.x();.}catch(e){_._DumpException(e)}.try{._.v("rCcCxc");._.r2=function(a){_.M.call(this,a.za);this.B=[]};_.C(_.r2,_.M);_.r2.Ia=_.M.Ia;_.r2.ma=_.M.ma;_.r2.prototype.hJ=function(){for(var a=this.B.length-1;0<=a;a--){var c=this.B[a],d=new _.gp(c.element);if(!c.IU\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-uGFO6d")\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-FNFY6c")\|\|d.jb("bwApif-Sx9Kwc-OWXEXe-FnSee")\|\|d.jb("VfPpkd-Sx9Kw

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (383)
Category:	downloaded
Size (bytes):	855
Entropy (8bit):	5.4091661848252075
Encrypted:	false
SSDEEP:	24:kbidWw1ud9zPALkQNnhx3Ya16Z1y3yfNZxjprx:w0y1PlAFTAIifNZxjprx
MD5:	2FB959DD5CFC5E232011F94935B6EB3F
SHA1:	22721190C306B809CA8BA54232B4AE70F5BE2CA9
SHA-256:	16EF5AD8C500F13B9736FBB380462693BA2C38B67119E3891F51AAAD597C8AAF
SHA-512:	3087293E7B976204EEE0116291F8A982CECD143D53FA07E55E8D022B6C5A01321B4C1E5156F881A37321C34FB7D9A390F69F7CFB3A4F77D95AA56629CB900C89
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.rygr0iys9xQ.O/am=BgM/d=0/rs=AGEqA5lZFZLd7dVCuaCGQ1MrEhrm_lk1Ww/m=sy33,TRvtze"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{.var OAb,NAb,QAb;OAb=function(a){return(a=NAb.exec(a))&&a[1]?a[1]:""};_.PAb=function(a){var c=OAb(a);return a.substring(c.length)};_.RAb=function(){void 0===QAb&&(QAb=OAb(location.pathname));return QAb};NAb=RegExp("^(/prod\|/corp\|/scary)?/");QAb=void 0;.}catch(e){_._DumpException(e)}.try{._.v("TRvtze");.var c4=function(a){_.M.call(this,a.za);this.B=a.Na.configuration;this.C=_.Dt()};_.C(c4,_.M);c4.Ia=_.M.Ia;c4.ma=function(){return{Na:{configuration:_.Kp},service:{flags:_.Tu}}};c4.prototype.F=function(){return _.RAb()};c4.prototype.D=function(){return _.Ft(this.C,"atari-rhpp")?_.It(this.C,"atari-rhpp"):_.rj(this.B.get(),213)?"/_":_.RAb()+"/u/"+this.B.xg().Mj()+"/_"};_.wp(_.hCa,c4);._.x();.}catch(e){_._DumpException(e)}.}).call(this,this.default_vw);.// Google Inc..

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1572)
Category:	downloaded
Size (bytes):	33553
Entropy (8bit):	5.564750847289923
Encrypted:	false
SSDEEP:	768:2G0SoGIr9iykWXc8VV4ucbxiyXdpGupDB:2G0Sr
MD5:	5FB14DD3D3DCA5F9349C5F6160C10297
SHA1:	5401FB3033AAA39410472FEA1BE6FCCCA0FA5320
SHA-256:	2DD1C1C9BBB75704B7B000DB161EA0EC0BFFCC1141B9983D18649083C7532964
SHA-512:	05AB9688406495F96D81CA66570A9784112A41864EF5084E50E58E2E5CEB93D80C415F61FBF9D2D5E39B141D2FCC0084FC151F26C646183DBCC8C11E906B66F3
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Google+Sans:400,500\|Roboto:300,400,500,700\|Source+Code+Pro:400,700&display=swap"
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ armenian /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiIUvaYr.woff2) format('woff2');. unicode-range: U+0308, U+0530-058F, U+2010, U+2024, U+25CC, U+FB13-FB17;.}./ bengali /.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/googlesans/v59/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RPiAUvaYr.woff2) format('woff2');. unicode-range: U+0951-0952, U+0964-0965, U+0980-09FE, U+1CD0, U+1CD2, U+1CD5-1CD6, U+1CD8, U+1CE1, U+1CEA, U+1CED, U+1CF2, U+1CF5-1CF7, U+200C-200D, U+20B9, U+25CC, U+A8F1;.}./ cyrillic-ext */.@font-face {. font-family: 'Google Sans';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.g

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1124)
Category:	downloaded
Size (bytes):	69761
Entropy (8bit):	5.654288084940438
Encrypted:	false
SSDEEP:	1536:0KMTCdpqZ3vvIdXNIE496o9t2mFPJh1QdhRC:TpqedXqEQFgRC
MD5:	273FD4010371A7C82AEA378F4074ED9E
SHA1:	53C7C2C8C3DA072F7AB4AB04963D809B83D90C09
SHA-256:	2F69776E85A8FA55027A58AF9E256922DC07BD0D158A1A815F5CD91B7C1A64BB
SHA-512:	1A82B2C26F3EBA54573A0D5B48248213F466C0530C5CD0BE44A35C6964C0A3FC9BFBDB033459B3251FC0CAB1EA98392A94429D283E4934D8E91AB6D795965E3B
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.rygr0iys9xQ.O/am=BgM/d=0/rs=AGEqA5lZFZLd7dVCuaCGQ1MrEhrm_lk1Ww/m=MpJwZc,n73qwf,A4UTCb,mzzZzc,CHCSlb,qAKInc,sy34,abQiW,syy,PVlQOd,NPKaK,sy5,BVgquf,fmklff,TGYpv,KUM7Z,qEW1W,oNFsLb,sy3z,yxTchf,sy40,sy41,xQtZb,yf2Bs,sy2,sy9,yyxWAc,qddgKe,sy36,SM1lmd,sy7,sy6,syz,RRzQxe,sy8,syb,sy2d,syl,sya,fNFZH,sy35,sym,RrXLpc,cgRV2c,sy11,sy1w,o1L5Wb,X4BaPc,syf,sy1a,Md9ENb"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.v("MpJwZc");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("n73qwf");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("A4UTCb");.._.x();.}catch(e){_._DumpException(e)}.try{._.v("mzzZzc");.var IFa;_.QA=function(a){_.M.call(this,a.za)};_.C(_.QA,_.M);_.QA.Ia=_.M.Ia;_.QA.ma=_.M.ma;IFa=function(a){a=_.Wd(a,function(c){return _.Vd(c)&&"yDmH0d"===c.id});return _.Vd(a)?a:null};_.RA=function(a){var c=a?_.Xd(a):document,d;return null!=(d=a?IFa(a):c.getElementById("yDmH0d"))?d:c.body};_.wp(_.pq,_.QA);._.x();.}catch(e){_._DumpException(e)}.try{._.v("CHCSlb");._.PA=function(a){_.M.call(this,a.za)};_.C(_.PA,_.M);_.PA.Ia=_.M.Ia;_.PA.ma=_.M.ma;_.wp(_.Aka,_.PA);._.x();.}catch(e){_._DumpException(e)}.try{._.v("qAKInc");.var y3=function(a){_.xp.call(this,a.za);this.B=this.getData("active").B(!1);this.C=this.S("vyyg5");this.F=_.Ge(_.He(this).Dc().eb(function(){var c=this.V();this.B?c.Ua("qs41qe"):c.Ua("sf4e6b");this.B&

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, baseline, precision 8, 640x480, components 3
Category:	dropped
Size (bytes):	16888
Entropy (8bit):	7.889704511976435
Encrypted:	false
SSDEEP:	384:Z+nhhSbIvbBGVeHoCvE3a7efY4v7FUF9ndfrd7eK5Pi:0/T3PEmp4v7+5Brd7eGPi
MD5:	5A1C57451E9EB6BCF89BF0946EF11A37
SHA1:	D4AD58B87A1B0998E7646175DB0D1DC273E88DF5
SHA-256:	3BC66F5EE3258FF8923F8F38E593C984A1390FF33A887C8FAB89A3D474AED7C6
SHA-512:	8EAE829D942F560F857D620087ADEF25F996F95647B0E3A439999001D1C6C9D1FF193152782FA91A553B7F77628BCFD702FED3AB52841242B86BBD2BDD89DC24
Malicious:	false
Reputation:	low
Preview:	.....C....................................................................C............................................................................"..................................../....................!1AQ.aq......"2....BRrb..............................................................?..7SK...U}.2...6..Z...;.....M>..,.2.\|...X'?....l.....2.H Q..7.Y.3~;F.....D.1#d:.Mc......"0.7!.........x./&...G....?...#....C.X.Y....8...Dq..p._z.f.....Y.....c..s.`...$...$...5Tc.pFw2h...B.{......7g..(.._....6......D}. .o.......q..@N........j...p#.U.$1.Y.+..$....rZ1$gc\|.....x./j.."........;<......m.... ..!..@....s...E+....9bF.i\;...L......d....z;.......q/.9........&.(y..1..6p.pA....c....A.Q..;.zl.l..JO..E.^.GN......B.*=.A.AU\|L...>` ."..26.L.x.j@<..Q..~.)..!i.1...`..T.............;.;..5'E..r2....?.....H. ..Y#..N..1^..t9.I.....&._..y.....(....~.#....;.j..........@!.f...H....s/4N.Y_..gz.k,.].y.<.......~...T.5.%...Q./ARe.....(.@.Rd.b..r..G........GT.'...T..5..(I..b.=...^%DjZ7-.x

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2054)
Category:	downloaded
Size (bytes):	15101
Entropy (8bit):	5.465936504550983
Encrypted:	false
SSDEEP:	384:IQojHdEA+ggCiU7nnaClpFI+5SYOelHO91hIuW:IQumA+QDnR/OGJ
MD5:	DD0B0375CC2A3D403DA00E73AEC15547
SHA1:	5E96F522053EA3F00ECC0FF4EA7669635A07FD46
SHA-256:	F861338D79C2BC27AB5809805C8243B416AD1D38BB28B18BDDBCF7293AFC27F6
SHA-512:	38776B2EFEADADC21E2E66BDE7D602C81B7544906381E1DAFE6EB643E4B7F2C7D4D94A6187ECD8430216F8D48DC4EFE0AE8416FCDB39089A17CF41377696CF04
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/client.js?onload=gapiLoaded
Preview:	(function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},ca=ba(this),g=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-.1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};.g("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=h(this

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	1437587
Entropy (8bit):	5.663767474686967
Encrypted:	false
SSDEEP:	6144:R5Lq3j6/8+wq3j6/8+Kq3j6/8+tq3j6/8+Iq3j6/8+pVFzkkCuQISNt1/oCIODtU:R5QVFDC4Ch5O2n8ljTDgA
MD5:	A40AA5E06F716C72CDF306BD138B54D3
SHA1:	662BE5D609295BB1B2D20D598D360A90A99BE2C8
SHA-256:	1C8AA13BD3E762C61911EE5B2D98638C3EAA1E9D97F81A309A4B15F405C9C7D7
SHA-512:	AD9B1FB62E9A1D50ED983BF2F19767FA4D87504C7319D339E3B81039EB918DA3078595FB54502FB626C215335A796342094496F1085E497041C74FB8EBC25D75
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/_/atari/_/ss/k=atari.vw.lGQS2EVBgYs.L.W.O/am=BgM/d=1/rs=AGEqA5mAC-8frHcMXMoiRZo8i6RqcgywkQ
Preview:	.VIpgJd-TzA9Ye-eEGnhe{position:relative;display:-moz-inline-box;display:inline-block}* html .VIpgJd-TzA9Ye-eEGnhe{display:inline}:first-child+html .VIpgJd-TzA9Ye-eEGnhe{display:inline}/! normalize.css v2.1.1 \| MIT License \| git.io/normalize */article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,video{display:inline-block}audio:not([controls]){display:none;height:0}[hidden]{display:none}html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{box-sizing:content-box;height:0}mark{background:#ff0;color:#000}code,kbd,pre,samp{font-family:monospace,serif;font-size:1em}pre{white-space:pre-wrap}q{quotes:"\201C" "\201D" "\2018" "\2019"}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-ali

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 900 x 250
Category:	downloaded
Size (bytes):	76230
Entropy (8bit):	7.948024444908805
Encrypted:	false
SSDEEP:	1536:cvQtsu2aR9siDyt0Dg9XR8DMqTi3qBY4FhnmO75e58LL+WtUUNoJ:uaRGilMh8D7hnmO7s24UiJ
MD5:	924FCADB85AB71898B5976E967121D00
SHA1:	8E9A57C92A068E0E22A697B957DB4043D0A5BA53
SHA-256:	0B201E0AC37055CCB8D2F0BAA2F6B32A141DEA926C50B059D98897D27CBD93BB
SHA-512:	B15A6ED1EF31435F4946E23B1683874B5609A06B2A27BFDFB9DB26D12437EAA404612F93B00DD79E36EC169DFEB63868C318415C75F5829B730CABC892ABFB06
Malicious:	false
Reputation:	low
URL:	https://lh6.googleusercontent.com/xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280
Preview:	GIF89a............c...wE,..mb]ynj.......1.qT"""....]......m.dD._>.gRTLJG........10,...yU.......R7.......m...........kaQ%...k.iE....{.kR...tT...+($..~.K?.ZO....................u.dC...yU._?........xe..r..e.L3.\|n...qS..d...cRV.&...o8&.,.......oN.jT...........w}.....:;$#.......r...I>=.y]....TB........jL...~.kY...s^...9+..YJ.tb.....l.@/.vl.p_+#(.a..u.cJ.aYg[[a..000..T;....Z5R/(..D...9...yp.g\d-...vo.).v.....lQK....NB..E.s.g.va...W;...cK...[D.......c(((._M.\|^.H7.tZ...w........D-..(.........l.c[............la..l.mW...\|b...........uZ.]O..i.dJ;55.gI..........,,,..., !...dQ.yU.........iE...y.tR.........u...p.........z[....jK.\|...q[.s...i.mP...........................................................................!..NETSCAPE2.0.....!...d...,...............H......\....#J.H....3j.... C..I...(S.....0a.I...5...iC..@...9.g.H.U:...P.J.J5..W.b..+W....K...h.....[..K...J....w..<q..<8...]bY...&.#K.L....3k.....c

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2024 18:18:10.844475985 CEST	49675	443	192.168.2.4	173.222.162.32
May 23, 2024 18:18:11.563198090 CEST	49678	443	192.168.2.4	104.46.162.224
May 23, 2024 18:18:17.885833979 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:17.885927916 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:17.886027098 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:17.886451960 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:17.886503935 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:17.886820078 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:17.886877060 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:17.886910915 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:17.887125015 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:17.887142897 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.540916920 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.541237116 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.541296959 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.542572021 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.542690039 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.545063972 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.545145035 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.547478914 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.547574997 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.547688961 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.547705889 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.553750038 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.555027962 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.555068016 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.555425882 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.555525064 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.556034088 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.556092024 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.556250095 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.556308031 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.596649885 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.611888885 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:18.611921072 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:18.658924103 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.102976084 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.103079081 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.103111029 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.104882002 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.104948997 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.104963064 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.107938051 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.108036995 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.108066082 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.118339062 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.118433952 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.118452072 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.119909048 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.119966984 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.119980097 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.124665976 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.124735117 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.124747992 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.125143051 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.125202894 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.125214100 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.176382065 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.189002037 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.189165115 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.191459894 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.191574097 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.191893101 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.192004919 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.197196960 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.197280884 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.203178883 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.203262091 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.209675074 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.209768057 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.213154078 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.213232994 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.215481043 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.221623898 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.221693039 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.221736908 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.222222090 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:19.222305059 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:19.222389936 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:19.223541975 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:19.223579884 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:19.227274895 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.227350950 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.227401972 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.233164072 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.233234882 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.233262062 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.238279104 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.238352060 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.238372087 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.244889021 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.244987011 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.245003939 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.245105982 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.245151043 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.245277882 CEST	49735	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:19.245291948 CEST	443	49735	142.250.186.142	192.168.2.4
May 23, 2024 18:18:19.881114960 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:19.881908894 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:19.881974936 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:19.882992029 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:19.883080006 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:19.885409117 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:19.885481119 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:19.886017084 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:19.886034966 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:19.936799049 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.171704054 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.175787926 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.175834894 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.175877094 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.183079958 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.183125019 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.183135033 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.185956001 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.185983896 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.185998917 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.186009884 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.186048031 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.190387011 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.208589077 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.208632946 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.208642960 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.227149963 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.227237940 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.227246046 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.227260113 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.227304935 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.229443073 CEST	49738	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:20.229459047 CEST	443	49738	142.250.184.206	192.168.2.4
May 23, 2024 18:18:20.313525915 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:20.313549995 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:20.313601017 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:20.316401005 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:20.316415071 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:20.453644037 CEST	49675	443	192.168.2.4	173.222.162.32
May 23, 2024 18:18:21.057126999 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:21.057192087 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:21.057296038 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:21.057878017 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:21.057905912 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:21.131117105 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.153706074 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.153724909 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.155267954 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.156063080 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.157805920 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.157902002 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.157911062 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.160305023 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.160305023 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.160326004 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.160504103 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.202517986 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.202534914 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.249114037 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.577887058 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:21.577955961 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:21.578919888 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:21.582716942 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:21.582760096 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:21.588509083 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.588557005 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.588607073 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.588622093 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.590396881 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.590445995 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.590466022 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.591094971 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.591247082 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.591259003 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.592361927 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.592408895 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.592423916 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.595838070 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.595884085 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.595901966 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.604209900 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.604258060 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.604285955 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.607902050 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.607949972 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.607971907 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.617108107 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.617156029 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.617177010 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.618648052 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:21.618683100 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:21.618733883 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:21.630708933 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:21.630736113 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:21.657747984 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.682307005 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.682806015 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.682857990 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.682879925 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.683748960 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.683793068 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.683804035 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.689026117 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.689083099 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.689100027 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.694864035 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.694915056 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.694931984 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.701447010 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.701574087 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.701744080 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.701762915 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.701802969 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.705739975 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.711113930 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.711160898 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.711175919 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.717459917 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.717505932 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.717520952 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.722826004 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.722871065 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.722882986 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.724461079 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:21.725013018 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:21.725020885 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:21.726432085 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:21.726506948 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:21.729165077 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.729199886 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.729207039 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.729221106 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.729260921 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.730159044 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:21.730226994 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:21.733666897 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.738452911 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.738501072 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.738512993 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.743550062 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.743607998 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.743623018 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.748621941 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.748672009 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.748683929 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.753820896 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.753870964 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.753890038 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.759037971 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.759102106 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.759121895 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.775068045 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.775124073 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.775141954 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.776077986 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.776123047 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.776130915 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.776751041 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.776792049 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.776797056 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.779124022 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:21.779138088 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:21.779617071 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.779670954 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.779685974 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.779798031 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.779848099 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.805352926 CEST	49745	443	192.168.2.4	216.58.206.65
May 23, 2024 18:18:21.805365086 CEST	443	49745	216.58.206.65	192.168.2.4
May 23, 2024 18:18:21.822288990 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:22.242517948 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:22.242614985 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:22.242701054 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:22.244735003 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:22.244774103 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:22.277858973 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.278168917 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.278208971 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.278518915 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.278815031 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.278894901 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.278964996 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.326510906 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.421294928 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.421581030 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.421603918 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.422113895 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.422173023 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.423124075 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.423177958 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.423182964 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.468427896 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.564935923 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.565536022 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.565735102 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.565792084 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.566893101 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.566967964 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.567003965 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.572892904 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.572948933 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.572964907 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.575114965 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.575141907 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.575242996 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.575253010 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.575292110 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.578309059 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.582804918 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.582876921 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.582887888 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.585024118 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.585169077 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.585179090 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.606503010 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.612884045 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.612903118 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.625119925 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.631007910 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:22.631041050 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:22.633003950 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:22.633419037 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:22.633450031 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:22.656478882 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.659101963 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.660377979 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.661098003 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.661134005 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.661175013 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.661406994 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.663429022 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.665344954 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.665997028 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.666004896 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.671641111 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.673064947 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.674285889 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.674299002 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.674427032 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.677166939 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.682987928 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.683130026 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.683137894 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.688446999 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.688858032 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.689012051 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.689019918 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.689655066 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.693970919 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.700146914 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.700419903 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.701745987 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.701761007 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.706223965 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.710937023 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.710946083 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.711885929 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.713535070 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.718453884 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.720165014 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.720172882 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.754847050 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.754882097 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.755100012 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.755111933 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.755732059 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.755759001 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.755767107 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.755822897 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.756311893 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.759242058 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.759267092 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.759426117 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.759433985 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.759480953 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.760057926 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.761461020 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.761919975 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.762021065 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.762028933 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.762254000 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.762392998 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.777909040 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.778064966 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.778084993 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.779046059 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.779350996 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.779360056 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.783574104 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.783726931 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.783901930 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.783915997 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.785255909 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.785263062 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.788825035 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.788904905 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.788912058 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.793648958 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.794519901 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.794528008 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.798440933 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.799654961 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.799662113 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.803436995 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.805928946 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.806890965 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.806900024 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.807610035 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.809329033 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.814244986 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.814606905 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.814614058 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.815860033 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.815989017 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.815995932 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.825078011 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.825922966 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.825953007 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.826549053 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.826570988 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.826580048 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.826875925 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.827070951 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.836637974 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.837436914 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.837445021 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.838057995 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.838987112 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.838993073 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.855715036 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.855856895 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.855885983 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.856633902 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.858571053 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.858597994 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.858674049 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.858674049 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.858684063 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.861047029 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.861077070 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.861112118 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.861131907 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.861140013 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.861890078 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.863568068 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.863600016 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.863625050 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.863634109 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.863641024 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.863687038 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.865842104 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.865874052 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.865901947 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.865967989 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.865967989 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.865977049 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.867719889 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.868921995 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.869179010 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.869203091 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.869215012 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.869882107 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.871781111 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.872328043 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.872337103 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.873722076 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.874129057 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.874264956 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.874274015 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.874975920 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.875296116 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.876136065 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.876538992 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.876548052 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.877274036 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.877717018 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.878154039 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.878161907 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.878880024 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.878885984 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.882110119 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.882137060 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.882504940 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.882508039 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.882528067 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.884890079 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.889292002 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.889858007 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.889882088 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.889883041 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.889892101 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.890716076 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.893349886 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.893924952 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.893932104 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.894150972 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.894632101 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.894643068 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.894649982 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.896904945 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.896929979 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.896930933 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.896939993 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.897041082 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.899884939 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.901148081 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.901171923 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.901231050 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.901231050 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.901238918 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.904500961 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.904898882 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.904922962 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.904993057 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.904993057 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.905004025 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.910454035 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.910829067 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.910973072 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.910979986 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.911541939 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.912116051 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.913499117 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:22.913537025 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.913544893 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.914391994 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.914539099 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:22.917135000 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:22.917146921 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:22.917656898 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:22.917723894 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.918524981 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.918534040 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.919017076 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.919312954 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.920095921 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.920608044 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.920631886 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.920640945 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.920892954 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.920897961 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.920903921 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.920989990 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.921092987 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.921099901 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.921869993 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.923249006 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.923275948 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.923300028 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.923321009 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.923327923 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.923351049 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.924052954 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.925270081 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.925292015 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.925297022 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.925304890 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.926203966 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.926521063 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.926528931 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.926878929 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.926882982 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.930933952 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.932303905 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.932327986 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.932370901 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.932373047 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.932374001 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.932379961 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.932892084 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.934788942 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.935772896 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.938574076 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.938576937 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.943011999 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.943598032 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.943667889 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.943670034 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.943671942 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.943676949 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.944405079 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.944823027 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.944847107 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.945591927 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.945617914 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.945626020 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.946054935 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.946079016 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.946082115 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.946090937 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.946885109 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.947154999 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.947201967 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.947225094 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.947232008 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.947812080 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.948101997 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.948173046 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.949074030 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.949091911 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.949142933 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.949142933 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.949151993 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.949928999 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.949949980 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:22.949954033 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.950016975 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.950025082 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.950515032 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:22.950552940 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.950865984 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.951824903 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.952092886 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.952121973 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.952147961 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.952172041 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.952179909 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.952207088 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.952888966 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.955919027 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.960829020 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.960856915 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:22.961077929 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.961086988 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.961095095 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.961364985 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.961373091 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.966654062 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.967077017 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.967103958 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.967189074 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.967189074 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.967202902 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.967569113 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.967855930 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.970984936 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.971014023 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.972146034 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.972173929 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.972186089 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.972666025 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.972934961 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.972963095 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.972970963 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.972996950 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.976280928 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.976453066 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.976699114 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.976701021 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.976712942 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.976738930 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.977266073 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.977298021 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.977323055 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.977329969 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.980726004 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.982887983 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.983385086 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.983747959 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.983809948 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.983817101 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.984235048 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.984486103 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.984512091 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.984518051 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.985899925 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.990262985 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.991051912 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.991091967 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.991117954 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.991125107 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.993220091 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.993227005 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.995398045 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.995537043 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.995865107 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.995873928 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.996354103 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.996380091 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.996381044 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.996391058 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:22.997884035 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:22.997891903 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:23.002254963 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:23.005001068 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:23.009664059 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:23.009706974 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:23.009776115 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:23.009891033 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:23.042881966 CEST	49748	443	192.168.2.4	216.58.206.33
May 23, 2024 18:18:23.042896986 CEST	443	49748	216.58.206.33	192.168.2.4
May 23, 2024 18:18:23.081396103 CEST	49747	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:23.081413031 CEST	443	49747	142.250.184.206	192.168.2.4
May 23, 2024 18:18:23.172754049 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:23.214533091 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.281997919 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:23.282057047 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:23.282377005 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:23.282377005 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:23.282447100 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:23.372272015 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.372441053 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.372729063 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:23.372787952 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.372812986 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:23.372812986 CEST	49751	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:23.372823954 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.372833014 CEST	443	49751	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.430670977 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:23.430737019 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.431307077 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:23.431718111 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:23.431756973 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:23.432007074 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.433967113 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.434026003 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.434562922 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.434736013 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.435553074 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.436271906 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.436288118 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.437159061 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.437246084 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.438127041 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.438152075 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.482822895 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.911626101 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.911741972 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.911801100 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.911823034 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.914654016 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.914710045 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.914731979 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.923726082 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.923785925 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.923805952 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.924376011 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.924427986 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.924433947 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.932002068 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.932058096 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.932071924 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.935107946 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.935172081 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.935183048 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.939171076 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.939239979 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.939253092 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.945827961 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.945877075 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.945888996 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.989248991 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.996068954 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.996956110 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:23.997009039 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:23.997025013 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.000179052 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.000260115 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.000277042 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.006269932 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.006340027 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.006360054 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.011930943 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.011991978 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.012012005 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.020277023 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.020350933 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.020366907 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.024866104 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.024939060 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.024949074 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.032752991 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.032821894 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.032840967 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.036057949 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.036144018 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.036163092 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.039216995 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.041970015 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.042035103 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.042047977 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.047437906 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.047491074 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.047497034 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.052804947 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.052874088 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.052892923 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.065182924 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.065270901 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.065279961 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.067322969 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.067385912 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.067390919 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.069804907 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.069864035 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.069869041 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.075064898 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.075120926 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.075126886 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.076118946 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.076170921 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.076176882 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.082202911 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.089910030 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.089962959 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.089967966 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.091415882 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.091473103 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.091481924 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.093316078 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.093375921 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.093381882 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.096239090 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.096266031 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.097820044 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.097907066 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.098826885 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.098881006 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.098886967 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.099020004 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.099114895 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.100339890 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.100414038 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.100429058 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.103108883 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.103255987 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.103311062 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.120604992 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:24.120699883 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:24.149424076 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.149483919 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.200087070 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.390718937 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:24.390851974 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:24.390897989 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:24.402087927 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:24.402160883 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:24.402236938 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:24.403119087 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:24.403147936 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:24.468796968 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.468914986 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.468986034 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.469048023 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.478136063 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.478197098 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.478218079 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.487651110 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.487708092 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.487720013 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.489348888 CEST	49753	443	192.168.2.4	142.250.181.225
May 23, 2024 18:18:24.489360094 CEST	443	49753	142.250.181.225	192.168.2.4
May 23, 2024 18:18:24.494004965 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.494055986 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.494066000 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.546823025 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.549662113 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:24.549696922 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:24.550812960 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:24.553145885 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:24.594500065 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:24.807352066 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.813700914 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.813834906 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.813847065 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.813905954 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.813960075 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.814002991 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.814192057 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.814249992 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.823788881 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:24.824084997 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:24.824230909 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:24.915401936 CEST	49736	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:24.915446997 CEST	443	49736	142.250.186.142	192.168.2.4
May 23, 2024 18:18:24.930660009 CEST	49759	443	192.168.2.4	142.250.186.33
May 23, 2024 18:18:24.930699110 CEST	443	49759	142.250.186.33	192.168.2.4
May 23, 2024 18:18:24.985255957 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:24.991489887 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:24.991554976 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:24.996961117 CEST	49760	443	192.168.2.4	23.43.61.160
May 23, 2024 18:18:24.996978998 CEST	443	49760	23.43.61.160	192.168.2.4
May 23, 2024 18:18:25.092437983 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.129463911 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.129555941 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.129637003 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.131058931 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.131088972 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.131547928 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.131619930 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.132234097 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.132291079 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.134135962 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.134203911 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.134466887 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.134552002 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.135068893 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.135083914 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.288749933 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.449831009 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.452588081 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.452697039 CEST	443	49761	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.452784061 CEST	49761	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.456934929 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.456990957 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.457075119 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.457680941 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:25.457698107 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:25.819101095 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.819451094 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.819509983 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.819900990 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.819998026 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.820620060 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.820694923 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.820945024 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.821091890 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.821507931 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:25.821525097 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:25.867216110 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:26.111114025 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.111669064 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.111735106 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.112107038 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.112191916 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.112780094 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.112854004 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.113589048 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.113667965 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.113905907 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.113929033 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.114053965 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.114092112 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.157408953 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.253519058 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:26.253875017 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:26.253992081 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:26.285482883 CEST	49763	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:26.285526037 CEST	443	49763	142.250.186.174	192.168.2.4
May 23, 2024 18:18:26.458889961 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.459193945 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:26.459290028 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.697443008 CEST	49766	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:26.697516918 CEST	443	49766	142.250.185.142	192.168.2.4
May 23, 2024 18:18:27.428037882 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:27.428080082 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:27.428142071 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:27.435781002 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:27.435796022 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:27.491673946 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:27.491720915 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:27.491806984 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:27.493072987 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:27.493091106 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.103336096 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.197125912 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.198466063 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:28.272598028 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:28.272624016 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.272979975 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:28.272989988 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.273993015 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.274688959 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.279232979 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:28.279335022 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.282557964 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:28.282776117 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.286752939 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:28.286957026 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:28.286986113 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.287431955 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:28.287465096 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:28.287611008 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.591283083 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.591666937 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.591770887 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:28.594026089 CEST	49769	443	192.168.2.4	142.250.185.142
May 23, 2024 18:18:28.594043016 CEST	443	49769	142.250.185.142	192.168.2.4
May 23, 2024 18:18:28.680608034 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.680784941 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:28.680846930 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:28.697149038 CEST	49770	443	192.168.2.4	142.250.186.142
May 23, 2024 18:18:28.697211027 CEST	443	49770	142.250.186.142	192.168.2.4
May 23, 2024 18:18:30.016074896 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:30.016128063 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:30.016184092 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:30.016416073 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:30.016427994 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:30.059940100 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:30.060029030 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:30.060102940 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:30.061281919 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:30.061315060 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:30.727358103 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:30.743166924 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:30.890079975 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:30.934550047 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:30.934722900 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:31.433408976 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.433481932 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.433697939 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:31.433768034 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:31.435034037 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.435070992 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.435113907 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.435290098 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:31.435695887 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:31.435909986 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:31.436008930 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:31.437567949 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.437622070 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.437638998 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.438148022 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.438301086 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.438312054 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.438333988 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.482516050 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:31.499336004 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.499370098 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.613723040 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:31.613867044 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:31.613924026 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:31.623202085 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.629470110 CEST	49746	443	192.168.2.4	172.217.18.4
May 23, 2024 18:18:31.629533052 CEST	443	49746	172.217.18.4	192.168.2.4
May 23, 2024 18:18:31.661164045 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.661273956 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.661452055 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.661510944 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.662262917 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.662319899 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.662390947 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.662453890 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.662767887 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.662796974 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.663887978 CEST	443	49772	142.250.184.206	192.168.2.4
May 23, 2024 18:18:31.663960934 CEST	49772	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:31.740593910 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:31.740737915 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:31.740921974 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:31.741230011 CEST	49771	443	192.168.2.4	142.250.186.174
May 23, 2024 18:18:31.741267920 CEST	443	49771	142.250.186.174	192.168.2.4
May 23, 2024 18:18:32.401366949 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.401791096 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.401854038 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.403132915 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.403206110 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.405596972 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.405668974 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.405921936 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.406090021 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.406096935 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.450491905 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.531276941 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.531333923 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.578142881 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.752542973 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.752649069 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.752918959 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.752981901 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.753899097 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:32.754008055 CEST	443	49774	142.250.184.206	192.168.2.4
May 23, 2024 18:18:32.754275084 CEST	49774	443	192.168.2.4	142.250.184.206
May 23, 2024 18:18:36.920485020 CEST	61526	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:36.925525904 CEST	53	61526	1.1.1.1	192.168.2.4
May 23, 2024 18:18:36.925610065 CEST	61526	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:36.929205894 CEST	61526	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:36.976996899 CEST	53	61526	1.1.1.1	192.168.2.4
May 23, 2024 18:18:37.398016930 CEST	53	61526	1.1.1.1	192.168.2.4
May 23, 2024 18:18:37.398828983 CEST	61526	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:37.457768917 CEST	53	61526	1.1.1.1	192.168.2.4
May 23, 2024 18:18:37.457941055 CEST	61526	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:41.435290098 CEST	80	49723	46.228.146.0	192.168.2.4
May 23, 2024 18:18:41.435446978 CEST	49723	80	192.168.2.4	46.228.146.0
May 23, 2024 18:18:41.435619116 CEST	49723	80	192.168.2.4	46.228.146.0
May 23, 2024 18:18:41.492249012 CEST	80	49723	46.228.146.0	192.168.2.4
May 23, 2024 18:18:56.343925953 CEST	80	49724	46.228.146.0	192.168.2.4
May 23, 2024 18:18:56.344170094 CEST	49724	80	192.168.2.4	46.228.146.0
May 23, 2024 18:18:56.344170094 CEST	49724	80	192.168.2.4	46.228.146.0
May 23, 2024 18:18:56.379918098 CEST	80	49724	46.228.146.0	192.168.2.4
May 23, 2024 18:19:21.017972946 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:21.018003941 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:21.018084049 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:21.019519091 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:21.019535065 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:21.688703060 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:21.699384928 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:21.699403048 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:21.700505972 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:21.700851917 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:21.701018095 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:21.750269890 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:31.584892988 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:31.584965944 CEST	443	61529	172.217.18.4	192.168.2.4
May 23, 2024 18:19:31.585014105 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:33.218025923 CEST	61529	443	192.168.2.4	172.217.18.4
May 23, 2024 18:19:33.218059063 CEST	443	61529	172.217.18.4	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 23, 2024 18:18:16.452620983 CEST	53	64491	1.1.1.1	192.168.2.4
May 23, 2024 18:18:16.500633001 CEST	53	64629	1.1.1.1	192.168.2.4
May 23, 2024 18:18:17.527945995 CEST	53	63005	1.1.1.1	192.168.2.4
May 23, 2024 18:18:17.869061947 CEST	56661	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:17.869250059 CEST	55102	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:17.876548052 CEST	53	56661	1.1.1.1	192.168.2.4
May 23, 2024 18:18:17.885318995 CEST	53	55102	1.1.1.1	192.168.2.4
May 23, 2024 18:18:19.211558104 CEST	59575	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:19.211744070 CEST	55322	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:19.221188068 CEST	53	59575	1.1.1.1	192.168.2.4
May 23, 2024 18:18:19.221359015 CEST	53	55322	1.1.1.1	192.168.2.4
May 23, 2024 18:18:19.221388102 CEST	53	53426	1.1.1.1	192.168.2.4
May 23, 2024 18:18:19.221417904 CEST	53	64988	1.1.1.1	192.168.2.4
May 23, 2024 18:18:20.257412910 CEST	53	63227	1.1.1.1	192.168.2.4
May 23, 2024 18:18:20.300062895 CEST	60484	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:20.300791979 CEST	52955	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:20.311878920 CEST	53	60484	1.1.1.1	192.168.2.4
May 23, 2024 18:18:20.311944962 CEST	53	52955	1.1.1.1	192.168.2.4
May 23, 2024 18:18:21.005402088 CEST	60365	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:21.005690098 CEST	56656	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:21.032290936 CEST	53	56656	1.1.1.1	192.168.2.4
May 23, 2024 18:18:21.032295942 CEST	53	60365	1.1.1.1	192.168.2.4
May 23, 2024 18:18:21.582730055 CEST	61259	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:21.583127975 CEST	64487	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:21.601321936 CEST	53	64487	1.1.1.1	192.168.2.4
May 23, 2024 18:18:21.601334095 CEST	53	61259	1.1.1.1	192.168.2.4
May 23, 2024 18:18:22.585000038 CEST	53	54895	1.1.1.1	192.168.2.4
May 23, 2024 18:18:22.586817980 CEST	62159	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:22.587143898 CEST	63523	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:22.630182981 CEST	53	62159	1.1.1.1	192.168.2.4
May 23, 2024 18:18:22.630189896 CEST	53	63523	1.1.1.1	192.168.2.4
May 23, 2024 18:18:23.255312920 CEST	51194	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:23.255312920 CEST	57476	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:23.272491932 CEST	53	51194	1.1.1.1	192.168.2.4
May 23, 2024 18:18:23.277529955 CEST	53	57476	1.1.1.1	192.168.2.4
May 23, 2024 18:18:24.386466026 CEST	51638	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:24.386650085 CEST	63978	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:24.394062042 CEST	53	51638	1.1.1.1	192.168.2.4
May 23, 2024 18:18:24.398859978 CEST	53	63978	1.1.1.1	192.168.2.4
May 23, 2024 18:18:24.987582922 CEST	59541	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:24.988286972 CEST	54061	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:25.077825069 CEST	53	59541	1.1.1.1	192.168.2.4
May 23, 2024 18:18:25.077838898 CEST	53	54061	1.1.1.1	192.168.2.4
May 23, 2024 18:18:26.012733936 CEST	53	64000	1.1.1.1	192.168.2.4
May 23, 2024 18:18:30.009666920 CEST	50359	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:30.009799957 CEST	54614	53	192.168.2.4	1.1.1.1
May 23, 2024 18:18:30.017242908 CEST	53	50359	1.1.1.1	192.168.2.4
May 23, 2024 18:18:30.031205893 CEST	53	61877	1.1.1.1	192.168.2.4
May 23, 2024 18:18:30.031241894 CEST	53	54614	1.1.1.1	192.168.2.4
May 23, 2024 18:18:34.552803040 CEST	53	64941	1.1.1.1	192.168.2.4
May 23, 2024 18:18:36.918471098 CEST	53	61670	1.1.1.1	192.168.2.4
May 23, 2024 18:18:42.083414078 CEST	138	138	192.168.2.4	192.168.2.255
May 23, 2024 18:18:53.830522060 CEST	53	52344	1.1.1.1	192.168.2.4
May 23, 2024 18:19:16.243264914 CEST	53	52878	1.1.1.1	192.168.2.4
May 23, 2024 18:19:16.837076902 CEST	53	52337	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 23, 2024 18:18:26.012825012 CEST	192.168.2.4	1.1.1.1	c21e	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 23, 2024 18:18:17.869061947 CEST	192.168.2.4	1.1.1.1	0xaf93	Standard query (0)	sites.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:17.869250059 CEST	192.168.2.4	1.1.1.1	0x8e50	Standard query (0)	sites.google.com	65	IN (0x0001)	false
May 23, 2024 18:18:19.211558104 CEST	192.168.2.4	1.1.1.1	0x2980	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:19.211744070 CEST	192.168.2.4	1.1.1.1	0x9aad	Standard query (0)	apis.google.com	65	IN (0x0001)	false
May 23, 2024 18:18:20.300062895 CEST	192.168.2.4	1.1.1.1	0x90ec	Standard query (0)	lh6.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:20.300791979 CEST	192.168.2.4	1.1.1.1	0x2777	Standard query (0)	lh6.googleusercontent.com	65	IN (0x0001)	false
May 23, 2024 18:18:21.005402088 CEST	192.168.2.4	1.1.1.1	0x353	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:21.005690098 CEST	192.168.2.4	1.1.1.1	0xe8e9	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 23, 2024 18:18:21.582730055 CEST	192.168.2.4	1.1.1.1	0xb83c	Standard query (0)	lh5.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:21.583127975 CEST	192.168.2.4	1.1.1.1	0xce4b	Standard query (0)	lh5.googleusercontent.com	65	IN (0x0001)	false
May 23, 2024 18:18:22.586817980 CEST	192.168.2.4	1.1.1.1	0xcd46	Standard query (0)	lh6.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:22.587143898 CEST	192.168.2.4	1.1.1.1	0xde38	Standard query (0)	lh6.googleusercontent.com	65	IN (0x0001)	false
May 23, 2024 18:18:23.255312920 CEST	192.168.2.4	1.1.1.1	0x834	Standard query (0)	lh5.googleusercontent.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:23.255312920 CEST	192.168.2.4	1.1.1.1	0x223f	Standard query (0)	lh5.googleusercontent.com	65	IN (0x0001)	false
May 23, 2024 18:18:24.386466026 CEST	192.168.2.4	1.1.1.1	0x3acb	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:24.386650085 CEST	192.168.2.4	1.1.1.1	0xcdb7	Standard query (0)	play.google.com	65	IN (0x0001)	false
May 23, 2024 18:18:24.987582922 CEST	192.168.2.4	1.1.1.1	0xfc5e	Standard query (0)	sites.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:24.988286972 CEST	192.168.2.4	1.1.1.1	0x3693	Standard query (0)	sites.google.com	65	IN (0x0001)	false
May 23, 2024 18:18:30.009666920 CEST	192.168.2.4	1.1.1.1	0x6fc2	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:30.009799957 CEST	192.168.2.4	1.1.1.1	0x650	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 23, 2024 18:18:17.876548052 CEST	1.1.1.1	192.168.2.4	0xaf93	No error (0)	sites.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:19.221188068 CEST	1.1.1.1	192.168.2.4	0x2980	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:19.221188068 CEST	1.1.1.1	192.168.2.4	0x2980	No error (0)	plus.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:19.221359015 CEST	1.1.1.1	192.168.2.4	0x9aad	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:20.311878920 CEST	1.1.1.1	192.168.2.4	0x90ec	No error (0)	lh6.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:20.311878920 CEST	1.1.1.1	192.168.2.4	0x90ec	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.65	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:20.311944962 CEST	1.1.1.1	192.168.2.4	0x2777	No error (0)	lh6.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:21.032290936 CEST	1.1.1.1	192.168.2.4	0xe8e9	No error (0)	www.google.com			65	IN (0x0001)	false
May 23, 2024 18:18:21.032295942 CEST	1.1.1.1	192.168.2.4	0x353	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:21.601321936 CEST	1.1.1.1	192.168.2.4	0xce4b	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:21.601334095 CEST	1.1.1.1	192.168.2.4	0xb83c	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:21.601334095 CEST	1.1.1.1	192.168.2.4	0xb83c	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.33	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:22.630182981 CEST	1.1.1.1	192.168.2.4	0xcd46	No error (0)	lh6.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:22.630182981 CEST	1.1.1.1	192.168.2.4	0xcd46	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.225	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:22.630189896 CEST	1.1.1.1	192.168.2.4	0xde38	No error (0)	lh6.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:23.272491932 CEST	1.1.1.1	192.168.2.4	0x834	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:23.272491932 CEST	1.1.1.1	192.168.2.4	0x834	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.33	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:23.277529955 CEST	1.1.1.1	192.168.2.4	0x223f	No error (0)	lh5.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:24.394062042 CEST	1.1.1.1	192.168.2.4	0x3acb	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:25.077825069 CEST	1.1.1.1	192.168.2.4	0xfc5e	No error (0)	sites.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:30.017242908 CEST	1.1.1.1	192.168.2.4	0x6fc2	No error (0)	play.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:34.187104940 CEST	1.1.1.1	192.168.2.4	0x45f3	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:34.187104940 CEST	1.1.1.1	192.168.2.4	0x45f3	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
May 23, 2024 18:18:34.778126001 CEST	1.1.1.1	192.168.2.4	0xc5b2	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
May 23, 2024 18:18:34.778126001 CEST	1.1.1.1	192.168.2.4	0xc5b2	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

sites.google.com

https:

apis.google.com

lh6.googleusercontent.com

lh5.googleusercontent.com

play.google.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	142.250.186.142	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:18 UTC	830	OUT	GET /view/bakcsa3/?yj0&d=DwMFaQ HTTP/1.1 Host: sites.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 16:18:19 UTC	2438	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: DENY Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 23 May 2024 16:18:18 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Resource-Policy: same-site Content-Security-Policy: base-uri 'self';object-src 'none';report-uri /_/view/cspreport;script-src 'report-sample' 'nonce-QTVWdhJ6DyAMeTZ1Vj88wQ' 'unsafe-inline' 'unsafe-eval';worker-src 'self';frame-ancestors https://google-admin.corp.google.com/ reporting-endpoints: default="/web-reports?jobset=prod&context=eJwNyH9MzXscx_H3_XzfH1p-JY1JWIbmR3XIj9Yp1flBxYYjPt91R6aOe0_ZSafTSdjKr2WRlc2WYd-jWKZarc2wMb_ulpiNGbIx4nbHZaxfnIZzvP547Lk9wy-NNcIUtY9TtCFKUS7cmqYouU5RFkyuVxQLwUZFE08r4iZFUZDWpSj-Cgo7uxX5oK9H0QA4Hykqh_uPFfWCeqPoL7j3WdFTODusqA2MUUUd4AoqqoRt03Vyw48ZOo2L0Wl4pk48S6fyuTodgeg4nRZCgV2nMqiAGkjappMVpm7XaT7Eleq0ElwenSrhTLlOrZCy6AUFYcziFzQLpmwdEDPA8feAyIPZJwdFHKS_GxRroL1qSFyBuMQRkQhHTCOiDr4eGBHfobL4uzgAPakB8QRupAXEP_DNGRBBaKkNiA7Y8WBUFEHL_l-iAxodQeEHN4WEDwIxIUEzQ2J4T0j8BMfekMiDhgjSTsO6EtJy4c86oRVA1SOh1cDoW6H90Se09ZqmKXD0a1oe7PmawtWQM8nMDphcbebpcOGjmdsgccTMK0E0pnI4XG9L5Tuwy5LGXohMWsXRcLBwFdfCHJnOC0FkpnM4pPSkswViizN4AYS1ZnAEvF6dyf0wkJPJo3Cq0cLn4FqrhW_D0ecWrodTu618Dgp8Vi6G2H1WXgBLDlk5E6IarBwDotPK4XDpmZU7ISnCxmZwx9rYB_ctNn4MF6_buB0O3bbxMWjqt3EX7PpkYy_USjufhOQiO2fAvFI7x4PFsHMOHP7PzschOX81J4Rl8QrY7M_irfA-Mps_QdXebK6BV2Nz-F-o2GTIKlhbbchN0HvVkG_h_7uGHATXe0OWwrovhswFedkvJ8DhPr88Dk-G_PIlPJxyXj6FD83nZXZCk9wIt040y24IDTXLomsXpAfoTYuMHB_2oPdm15iI-ped3Vo0b3E5K-Ysdha6vCWesoQyl [TRUNCATED] Referrer-Policy: strict-origin-when-cross-origin Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU; expires=Fri, 22-Nov-2024 16:18:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 51 54 56 57 64 68 4a 36 44 79 41 4d 65 54 5a 31 56 6a 38 38 77 51 22 3e 76 61 72 20 44 4f 43 53 5f 74 69 6d 69 6e 67 3d 7b 7d 3b 20 44 4f 43 53 5f 74 69 6d 69 6e 67 5b 27 73 6c 27 5d 3d 6e 65 77 20 44 61 74 65 28 29 2e 67 65 74 54 69 6d 65 28 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 51 54 56 57 64 68 4a 36 44 79 41 4d 65 54 5a 31 56 6a Data Ascii: 8000<!DOCTYPE html><html lang="en-US" itemscope itemtype="http://schema.org/WebPage"><head><meta charset="utf-8"><script nonce="QTVWdhJ6DyAMeTZ1Vj88wQ">var DOCS_timing={}; DOCS_timing['sl']=new Date().getTime();</script><script nonce="QTVWdhJ6DyAMeTZ1Vj
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 2c 35 30 34 39 38 39 31 35 2c 35 30 35 31 35 33 33 35 2c 35 30 35 32 30 33 32 31 2c 35 30 35 32 39 31 31 31 2c 35 30 35 38 36 39 37 30 2c 37 30 39 37 31 32 36 34 2c 37 30 39 37 39 34 31 30 2c 37 31 30 30 38 32 38 31 2c 37 31 30 33 35 33 30 38 2c 37 31 30 33 38 32 36 33 2c 37 31 30 37 39 39 34 36 2c 37 31 30 38 35 32 34 39 2c 37 31 31 32 33 35 37 32 2c 37 31 31 38 35 31 37 38 2c 37 31 31 39 37 38 33 34 2c 37 31 32 33 38 39 35 34 2c 37 31 32 35 34 32 38 32 2c 37 31 32 38 39 31 35 34 2c 37 31 33 33 30 36 30 31 2c 37 31 33 34 36 39 36 30 2c 37 31 33 38 36 38 35 33 2c 37 31 33 38 37 38 39 37 2c 37 31 34 37 33 33 30 39 2c 37 31 34 37 38 32 30 38 2c 37 31 34 38 39 31 36 38 2c 37 31 35 32 38 36 30 35 2c 37 31 35 33 30 30 39 31 2c 37 31 35 33 31 33 30 35 2c 37 31 Data Ascii: ,50498915,50515335,50520321,50529111,50586970,70971264,70979410,71008281,71035308,71038263,71079946,71085249,71123572,71185178,71197834,71238954,71254282,71289154,71330601,71346960,71386853,71387897,71473309,71478208,71489168,71528605,71530091,71531305,71
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 38 34 2d 4f 78 64 37 5a 36 68 5f 36 44 62 6e 52 6e 76 35 75 4f 4e 36 77 53 62 72 62 75 4b 74 31 45 67 58 6e 4b 51 3d 77 31 32 38 30 22 3e 3c 6d 65 74 61 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 55 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 6c 68 36 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 78 6f 45 35 2d 51 70 6c 56 6c 6d 44 76 41 45 69 61 6c 35 34 78 69 58 47 74 77 47 4d 49 68 39 77 59 46 5a 62 51 59 65 76 53 51 6f 4f 4a 44 61 65 7a 68 6a 48 39 39 74 47 53 6e 35 6e 41 4e 55 52 45 30 53 73 75 69 53 50 6f 79 64 49 5a 36 57 37 67 6e 32 4a 56 47 34 4d 6e 56 55 56 38 34 2d 4f 78 64 37 5a 36 68 5f 36 44 62 6e 52 6e 76 35 75 4f 4e 36 77 53 62 72 62 75 4b 74 31 45 67 58 6e 4b 51 3d 77 31 32 38 30 22 3e 3c 6d Data Ascii: 84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280"><meta itemprop="imageUrl" content="https://lh6.googleusercontent.com/xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280"><m
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 70 78 29 7b 2e 4f 31 33 58 4a 66 20 2e 51 6d 70 49 72 66 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 4f 31 33 58 4a 66 20 2e 51 6d 70 49 72 66 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 39 70 78 29 7b 2e 4f 31 33 58 4a 66 7b 68 65 69 67 68 74 3a 20 32 35 30 70 78 3b 7d 7d 2e 53 42 72 57 31 7b 68 65 69 67 68 74 3a 20 34 33 30 70 78 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 32 30 70 78 3b 20 70 61 64 64 69 6e 67 Data Ascii: px){.O13XJf .QmpIrf{font-size: 13pt;}}@media only screen and (min-width: 480px) and (max-width: 767px){.O13XJf .QmpIrf{font-size: 13pt;}}@media only screen and (max-width: 479px){.O13XJf{height: 250px;}}.SBrW1{height: 430px; padding-bottom: 120px; padding
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 34 4a 64 3a 66 6f 63 75 73 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 31 2c 33 31 2c 33 31 2c 31 29 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 7d 2e 4c 42 72 77 7a 63 20 2e 6f 4e 73 66 6a 66 2e 5a 6a 69 65 63 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 33 31 2c 33 31 2c 33 31 2c 31 29 3b 7d 2e 4c 42 72 77 7a 63 20 2e 7a 44 55 67 4c 63 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 30 34 2c 32 30 34 2c 32 30 34 2c 31 29 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 20 31 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 7d 2e 47 42 79 34 48 20 2e 6f 4e 73 66 6a 66 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c Data Ascii: 4Jd:focus:before{border-color: rgba(31,31,31,1); display: block;}.LBrwzc .oNsfjf.Zjiec{color: rgba(31,31,31,1);}.LBrwzc .zDUgLc{border-bottom-color: rgba(204,204,204,1); border-bottom-width: 1px; border-bottom-style: solid;}.GBy4H .oNsfjf{color: rgba(255,
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 33 29 3b 7d 2e 7a 44 55 67 4c 63 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 20 6f 70 61 63 69 74 79 3a 20 31 3b 7d 2e 54 6c 66 6d 53 63 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 4f 73 77 61 6c 64 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 36 3b 7d 2e 75 35 66 69 79 63 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 38 38 3b 7d 2e 6a 67 58 67 53 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 Data Ascii: 3);}.zDUgLc{background-color: rgba(255,255,255,1); opacity: 1;}.TlfmSc{font-family: Oswald; font-weight: 400; font-size: 16pt; line-height: 1.26;}.u5fiyc{line-height: 1.88;}.jgXgSe{font-family: 'Open Sans'; font-weight: 400; font-size: 12pt; line-height:
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 56 42 65 65 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 61 48 4d 37 65 64 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 4f 6d 51 47 35 65 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 4e 48 44 34 47 66 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 64 75 52 6a 70 62 20 2e 4f 55 47 45 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 7d 2e 6c 51 41 48 62 64 20 2e 4a 59 56 42 65 65 20 2e 4f 55 47 45 72 7b 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c Data Ascii: VBee{color: rgba(255,255,255,1);}.lQAHbd .aHM7ed{color: rgba(255,255,255,1);}.lQAHbd .OmQG5e{color: rgba(255,255,255,1);}.lQAHbd .NHD4Gf{color: rgba(255,255,255,1);}.lQAHbd .duRjpb .OUGEr{color: rgba(255,255,255,1);}.lQAHbd .JYVBee .OUGEr{color: rgba(255,
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 65 77 39 6b 65 7b 66 69 6c 6c 3a 20 72 67 62 61 28 33 31 2c 33 31 2c 33 31 2c 31 29 3b 7d 2e 74 70 6d 6d 43 62 20 2e 51 6d 70 49 72 66 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 34 33 2c 37 39 2c 37 36 2c 31 29 3b 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 34 33 2c 37 39 2c 37 36 2c 31 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 39 70 78 29 7b 2e 74 70 6d 6d 43 62 Data Ascii: ew9ke{fill: rgba(31,31,31,1);}.tpmmCb .QmpIrf{background-color: rgba(255,255,255,1); border-color: rgba(243,79,76,1); color: rgba(243,79,76,1); font-family: 'Open Sans'; font-size: 13pt; line-height: 22px;}@media only screen and (max-width: 479px){.tpmmCb
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 70 65 6e 20 53 61 6e 73 27 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 7d 2e 63 4a 67 44 65 63 20 2e 4b 6a 77 4b 6d 63 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 30 2e 31 30 30 30 30 30 30 30 31 35 29 3b 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 39 70 78 29 7b 2e 63 4a 67 44 65 63 20 2e 78 6b 55 6f 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 Data Ascii: gba(255,255,255,1); font-family: 'Open Sans'; font-size: 13pt; line-height: 22px;}.cJgDec .KjwKmc:hover{background-color: rgba(255,255,255,0.1000000015);}@media only screen and (max-width: 479px){.cJgDec .xkUom{font-size: 13pt;}}@media only screen and (mi
2024-05-23 16:18:19 UTC	2438	IN	Data Raw: 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 4f 31 33 58 4a 66 20 2e 78 6b 55 6f 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 34 37 39 70 78 29 7b 2e 4f 31 33 58 4a 66 20 2e 4b 6a 77 4b 6d 63 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 38 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 4f 31 33 58 4a 66 20 2e 4b 6a 77 4b 6d 63 7b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 74 3b 7d 7d 2e 59 34 43 70 47 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: 0px) and (max-width: 767px){.O13XJf .xkUom{font-size: 13pt;}}@media only screen and (max-width: 479px){.O13XJf .KjwKmc{font-size: 13pt;}}@media only screen and (min-width: 480px) and (max-width: 767px){.O13XJf .KjwKmc{font-size: 13pt;}}.Y4CpGd{font-family

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	142.250.184.206	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:19 UTC	878	OUT	GET /js/client.js?onload=gapiLoaded HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
2024-05-23 16:18:20 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 15101 Date: Thu, 23 May 2024 16:18:20 GMT Expires: Thu, 23 May 2024 16:18:20 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "3767fe962befa4de" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:20 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 6e 75 6c 6c 3d 3d 61 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(null==a)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 76 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 76 61 72 20 78 3d 7b 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 76 61 72 20 41 3d 7b 7d 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 41 21 3d 3d 41 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 74 68 69 73 2e 73 3d 22 22 7d 3b 42 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 2e 74 6f 53 Data Ascii: ring=function(){return this.v.toString()};var x={};new y("about:invalid#zClosurez");new y("about:blank");var A={},B=function(){if(A!==A)throw Error("SafeStyle is not meant to be built directly");this.s=""};B.prototype.toString=function(){return this.s.toS
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 7b 62 3d 4b 2e 68 3b 76 61 72 20 63 3d 52 65 67 45 78 70 28 22 28 5b 23 5d 2e 2a 26 7c 5b 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 2c 64 3d 52 65 67 45 78 70 28 22 28 5b 3f 23 5d 2e 2a 26 7c 5b 3f 23 5d 29 6a 73 68 3d 28 5b 5e 26 23 5d 2a 29 22 2c 22 67 22 29 3b 69 66 28 61 3d 61 26 26 28 63 2e 65 78 65 63 28 61 29 7c 7c 64 2e 65 78 65 63 28 61 29 29 29 74 72 79 7b 62 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 5b 32 5d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 72 65 74 75 72 6e 20 62 7d 2c 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 48 28 4b 2c 22 50 51 22 2c 5b 5d 29 3b 4b 2e 50 51 3d 5b 5d 3b 76 61 72 20 63 3d 62 2e 6c 65 6e 67 74 68 3b 69 66 28 30 3d 3d 3d 63 29 61 28 29 3b 65 6c 73 65 20 66 6f Data Ascii: {b=K.h;var c=RegExp("([#].&\|[#])jsh=([^&#])","g"),d=RegExp("([?#].&\|[?#])jsh=([^&#])","g");if(a=a&&(c.exec(a)\|\|d.exec(a)))try{b=decodeURIComponent(a[2])}catch(e){}}return b},pa=function(a){var b=H(K,"PQ",[]);K.PQ=[];var c=b.length;if(0===c)a();else fo
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 3d 62 2e 6d 61 74 63 68 28 41 61 29 3b 28 64 3d 62 2e 6d 61 74 63 68 28 42 61 29 29 26 26 31 3d 3d 3d 64 2e 6c 65 6e 67 74 68 26 26 43 61 2e 74 65 73 74 28 62 29 26 26 63 26 26 31 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 56 28 22 66 61 69 6c 65 64 20 73 61 6e 69 74 79 3a 20 22 2b 61 29 3b 74 72 79 7b 61 3d 22 3f 22 3b 69 66 28 65 26 26 30 3c 65 2e 6c 65 6e 67 74 68 29 7b 63 3d 62 3d 30 3b 66 6f 72 28 64 3d 7b 7d 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 70 3d 65 5b 63 2b 2b 5d 3b 66 3d 76 6f 69 64 20 30 3b 6b 3d 74 79 70 65 6f 66 20 70 3b 66 3d 22 6f 62 6a 65 63 74 22 3d 3d 6b 26 26 6e 75 6c 6c 21 3d 0a 70 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 6b 3f 22 6f 22 2b 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f Data Ascii: =b.match(Aa);(d=b.match(Ba))&&1===d.length&&Ca.test(b)&&c&&1===c.length\|\|V("failed sanity: "+a);try{a="?";if(e&&0<e.length){c=b=0;for(d={};c<e.length;){var p=e[c++];f=void 0;k=typeof p;f="object"==k&&null!=p\|\|"function"==k?"o"+(Object.prototype.hasOwnPro
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 29 3b 63 3d 57 28 61 2c 22 6b 22 2c 21 30 29 3b 64 3d 57 28 61 2c 22 61 6d 22 29 3b 65 3d 57 28 61 2c 22 72 73 22 29 3b 61 3d 57 28 61 2c 22 74 22 29 3b 72 65 74 75 72 6e 7b 70 61 74 68 50 72 65 66 69 78 3a 62 2c 76 65 72 73 69 6f 6e 3a 63 2c 67 3a 64 2c 69 3a 65 2c 6a 3a 61 7d 7d 2c 46 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 7b 76 61 72 20 65 3d 61 5b 63 5d 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2d 2f 67 2c 22 5f 22 29 3b 7a 61 2e 74 65 73 74 28 65 29 26 26 62 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 2c 22 29 7d 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b Data Ascii: );c=W(a,"k",!0);d=W(a,"am");e=W(a,"rs");a=W(a,"t");return{pathPrefix:b,version:c,g:d,i:e,j:a}},Fa=function(a){for(var b=[],c=0,d=a.length;c<d;++c){var e=a[c].replace(/\./g,"_").replace(/-/g,"_");za.test(e)&&b.push(e)}return b.join(",")},W=function(a,b,c){
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 29 3a 28 47 2e 68 65 61 64 7c 7c 47 2e 62 6f 64 79 7c 7c 47 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 7d 2c 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 4d 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 64 3d 62 3d 3d 3d 6f 61 28 29 3f 48 28 4a 2c 22 5f 22 2c 49 28 29 29 3a 49 28 29 3b 64 3d 48 28 4e 28 62 29 2c 22 5f 22 2c 64 29 3b 61 28 64 29 7d 2c 63 29 7d 2c 50 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 0a 62 7c 7c 7b 7d 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 28 63 3d 7b 7d 2c 63 2e 63 61 6c 6c 62 61 63 6b 3d 62 29 3b 76 61 72 20 64 3d 28 62 3d 63 29 26 26 62 2e 5f 63 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 55 Data Ascii: ):(G.head\|\|G.body\|\|G.documentElement).appendChild(b)},Na=function(a,b,c){Ma(function(){var d=b===oa()?H(J,"_",I()):I();d=H(N(b),"_",d);a(d)},c)},Pa=function(a,b){var c=b\|\|{};"function"==typeof b&&(c={},c.callback=b);var d=(b=c)&&b._c;if(d)for(var e=0;e<U
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 77 29 3b 4a 5b 54 5d 3d 6e 75 6c 6c 7d 3b 61 3d 44 61 28 63 2c 71 2c 22 67 61 70 69 2e 22 2b 54 2c 6c 2c 54 61 29 3b 6c 2e 70 75 73 68 2e 61 70 70 6c 79 28 6c 2c 71 29 3b 51 28 22 6d 6c 30 22 2c 71 2c 4c 29 3b 62 2e 73 79 6e 63 7c 7c 46 2e 5f 5f 5f 67 61 70 69 73 79 6e 63 3f 4c 61 28 61 29 3a 4b 61 28 61 29 7d 65 6c 73 65 20 75 5b 76 5d 28 6c 61 29 7d 65 6c 73 65 20 73 61 28 71 29 26 26 65 26 26 65 28 29 7d 2c 51 61 3b 76 61 72 20 52 61 3d 6e 75 6c 6c 2c 5a 3d 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 5a 26 26 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 74 72 79 7b 52 61 3d 5a 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 61 70 69 23 67 61 70 69 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 72 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 72 2c 63 Data Ascii: w);J[T]=null};a=Da(c,q,"gapi."+T,l,Ta);l.push.apply(l,q);Q("ml0",q,L);b.sync\|\|F.___gapisync?La(a):Ka(a)}else u[v](la)}else sa(q)&&e&&e()},Qa;var Ra=null,Z=m.trustedTypes;if(Z&&Z.createPolicy)try{Ra=Z.createPolicy("gapi#gapi",{createHTML:r,createScript:r,c
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 65 6e 61 62 6c 65 4d 75 6c 74 69 6c 6f 67 69 6e 3a 21 30 2c 22 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6e 66 69 67 22 3a 7b 61 75 74 68 3a 7b 75 73 65 46 69 72 73 74 50 61 72 74 79 41 75 74 68 56 32 3a 21 30 7d 2c 72 6f 6f 74 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6e 74 65 6e 74 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 22 2c 22 72 6f 6f 74 2d 31 70 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6c 69 65 6e 74 73 36 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 7d 2c 69 6e 6c 69 6e 65 3a 7b 63 73 73 3a 31 7d 2c 0a 64 69 73 61 62 6c 65 52 65 61 6c 74 69 6d 65 43 61 6c 6c 62 61 63 6b 3a 21 31 2c 64 72 69 76 65 5f 73 68 61 72 65 3a 7b 73 6b 69 70 49 6e 69 74 43 6f 6d 6d 61 6e 64 3a 21 30 7d 2c 63 73 69 3a 7b 72 61 74 65 3a 2e 30 31 7d 2c 63 Data Ascii: google.com"},enableMultilogin:!0,"googleapis.config":{auth:{useFirstPartyAuthV2:!0},root:"https://content.googleapis.com","root-1p":"https://clients6.google.com"},inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},c
2024-05-23 16:18:20 UTC	1390	IN	Data Raw: 2f 64 61 74 61 63 6f 6e 6e 65 63 74 6f 72 2e 63 6f 72 70 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 75 69 2f 77 69 64 67 65 74 76 69 65 77 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 73 75 72 76 65 79 6f 70 74 69 6e 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 73 68 6f 70 70 69 6e 67 2f 63 75 73 74 6f 6d 65 72 72 65 76 69 65 77 73 2f 6f 70 74 69 6e 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 73 68 6f 72 74 6c 69 73 74 73 3a 7b 75 72 6c 3a 22 22 7d 2c 68 61 6e 67 6f 75 74 3a 7b 75 72 6c 3a 22 68 74 74 70 73 3a 2f 2f 74 61 6c 6b 67 61 64 67 65 74 2e 67 6f 6f 67 Data Ascii: /dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1"},surveyoptin:{url:"https://www.google.com/shopping/customerreviews/optin?usegapi=1"},":socialhost:":"https://apis.google.com",shortlists:{url:""},hangout:{url:"https://talkgadget.goog

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49745	216.58.206.65	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:21 UTC	866	OUT	GET /xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280 HTTP/1.1 Host: lh6.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 16:18:21 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/gif Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 24 May 2024 16:18:21 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="Untitled.gif" X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 16:18:21 GMT Server: fife Content-Length: 76230 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:21 UTC	868	IN	Data Raw: 47 49 46 38 39 61 84 03 fa 00 f7 00 00 00 00 00 b4 82 63 a7 8b 83 77 45 2c e8 c9 b4 6d 62 5d 79 6e 6a b6 a4 9e ee e6 e4 95 12 31 a6 71 54 22 22 22 e9 b0 0e b8 82 5d c5 b6 b3 db cf d3 c5 92 6d a3 64 44 a8 5f 3e 9d 67 52 54 4c 4a 47 17 0c f5 87 a3 fb f7 f3 31 30 2c c5 b4 ad ae 79 55 eb d5 c7 10 10 10 8c 52 37 f3 e7 eb f8 bf ca d4 90 6d a2 9a 99 ce c6 c2 c5 bc ba ee dc d3 ab 6b 61 51 25 17 bc 85 6b a5 69 45 ba ac a7 c5 95 7b a3 6b 52 dd cd c5 b1 74 54 b1 8e 83 2b 28 24 95 83 7e 88 4b 3f 84 5a 4f 1a 1a 1a f5 ee ed e7 e3 e3 0c 0c 0c d6 a4 89 f7 ef e6 c7 ba b5 c7 9a 75 ab 64 43 ca 9c 85 ba 79 55 9d 5f 3f d8 c7 c0 d2 bd c1 ea e3 df a8 78 65 bb 8c 72 b6 8a 65 85 4c 33 a4 7c 6e ff e7 d9 ac 71 53 be 89 64 f9 d1 d6 ac 63 52 56 1b 26 ff ff fe 6f 38 26 e2 bc a7 2c 13 Data Ascii: GIF89acwE,mb]ynj1qT"""]mdD_>gRTLJG10,yUR7mkaQ%kiE{kRtT+($~K?ZOudCyU_?xereL3\|nqSdcRV&o8&,
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: 84 c5 b2 a5 cb 97 30 61 d9 98 49 b3 a6 cd 9b 35 c7 d0 d4 69 43 a7 cf 9e 40 7f 0a ed 39 c6 67 d1 a3 48 93 2a 55 3a a3 a9 d3 a7 50 a3 4a 9d 4a 35 ea 82 19 57 b3 62 dd aa b5 2b 57 ac 0b c2 8a 1d 4b b6 ac d9 b3 68 d3 aa 0d fb d5 ab db b6 5b ab ca 9d 4b b7 ea d2 bb 4a 89 16 0d ca 77 e8 d0 99 3c 71 0a 1e 3c 38 a6 e1 c3 88 5d 62 59 cc b8 b1 e3 26 90 23 4b 9e 4c b9 b2 e5 cb 98 33 6b de cc f9 c2 05 63 a0 43 8b 1e 0d 79 34 e8 61 a8 87 85 46 bd 3a b5 6b d5 a0 b5 69 bb 75 2b 35 ed 5b 9e 73 eb d6 8d 3a b7 eb dc a1 75 07 f7 0c 7a b7 e7 db ba 6f a3 be 4d 9b b5 69 d1 a9 4f 0f f3 fc fa 37 f5 ea cf b3 6b 37 4d 7c f8 75 e3 c7 9b 4f ff 07 1e 5b db 77 de bd bb 1b 03 df 9d bd f0 f5 be 51 cb d6 06 9a 79 6e e6 f2 67 d3 be bf 3f 7c 7f e6 02 25 76 18 61 04 e2 14 98 5f 7d 25 78 94 Data Ascii: 0aI5iC@9gH*U:PJJ5Wb+WKh[KJw<q<8]bY&#KL3kcCy4aF:kiu+5[s:uzoMiO7k7M\|uO[wQyng?\|%va_}%x
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: 48 fa d3 68 b1 b2 d4 42 63 72 d3 5a 71 ea a6 ed d6 74 52 0d 4a e7 99 ad f1 9f 92 2e ea d2 30 be c6 83 f3 31 4f d5 72 b7 ae 9b 16 d2 18 3a bd ab 6e e0 14 1f 47 de 46 78 e6 14 6a 50 87 8a 3c c4 bc d2 70 ee 5c a5 13 9f 22 cf a6 6e 92 6f f9 5c 98 54 ab ca da d6 72 0f 2c 1a 4a ed 5b 4e bb d5 e8 ff 19 74 6d 5f 75 25 3b 67 22 56 98 40 f4 ac c0 55 ab 70 81 c4 56 d4 4c e6 69 72 05 20 5d b5 79 c0 2a 61 cd 84 25 ad 5a 33 e3 93 9d 6c 85 29 82 ad c3 5c 61 ad a9 4c 02 ee 55 5d e9 69 12 63 61 7a 01 ca 26 6b 5d 3c 25 a7 7e 80 c7 c8 8e 6e 96 a8 2f 61 27 4f 5a 74 d0 8d 8d 76 9e 4c 45 25 85 f6 cb c9 0b b5 f6 bf 00 26 e2 de 32 64 cf da 42 e5 b6 ee 54 95 e1 64 d8 5b df 02 f7 c1 b7 1c ae 84 77 74 9b b7 c2 ec 65 44 ba ee 60 37 8a 53 b1 91 f7 ae cf 05 e1 77 a7 8b 3a d3 d0 cc 82 Data Ascii: HhBcrZqtRJ.01Or:nGFxjP<p\"no\Tr,J[Ntm_u%;g"V@UpVLir ]y*a%Z3l)\aLU]icaz&k]<%~n/a'OZtvLE%&2dBTd[wteD`7Sw:
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: 09 91 15 40 5a 63 90 91 0d 02 05 38 89 88 10 b9 8b d3 17 49 55 84 7d 29 b0 78 51 39 95 85 10 95 c1 18 66 b7 b0 0d 76 08 3b 92 f1 7e 2a 28 76 e2 f4 87 4b e7 83 52 a2 04 82 a0 93 d8 98 96 6a b9 96 6c d9 96 d1 58 88 4a b0 4b 9a 55 2f a2 b8 65 36 90 00 88 b8 08 28 37 06 3a 89 14 8f b8 05 47 f1 97 63 80 97 90 f8 8f 00 89 88 09 00 15 84 49 08 86 b9 00 89 68 08 20 b2 08 79 29 16 90 18 91 63 f1 97 61 e8 98 8e 28 09 30 49 16 91 b8 05 61 b1 98 8b 70 0c c7 a0 85 4a 29 16 8b c9 88 8b f0 09 ac d9 9a ac f9 88 9c 69 16 4c 90 88 4c 90 99 a8 c9 88 d0 b8 05 2d e9 90 a7 59 16 a9 b9 88 5b 90 0c a7 34 03 b3 e9 88 86 d9 14 4a e9 14 bf a9 88 5b 00 05 7e 79 88 80 79 17 15 80 96 89 d8 9c 69 a3 60 d4 97 38 52 b9 9d 55 c9 9d 29 70 95 13 d6 7d db ff 61 61 5d e9 95 c6 d8 3b 54 23 52 Data Ascii: @Zc8IU})xQ9fv;~*(vKRjlXJKU/e6(7:GcIh y)ca(0IapJ)iLL-Y[4J[~yyi`8RU)p}aa];T#R
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: 6c 3c c0 1a ac 88 da cc 98 a6 e9 aa 91 da 9b a1 8b c0 ac 8a a3 82 7c c7 e0 1c ab 7c 8c b9 71 3c b3 13 dc 9a 16 3a 08 78 3c a2 0f 5c a2 3d 0b 86 cd bc 00 b9 09 c9 c0 aa 93 c2 aa 37 25 ac 55 98 4c b4 b7 9a 97 2f 9c 86 c3 bb 88 18 ec ac 0c 32 6a 1d c3 60 a8 dc ca 16 ed b5 aa 9c d1 b0 4c 51 b2 dc 2d 96 91 ae c7 d4 4d e9 09 6d 30 78 4c 4d 10 a6 c0 9c d2 2a 3d 8d 92 e0 19 ca 96 42 74 09 8e ac 42 8a 36 ff 94 aa d0 69 03 00 4b b4 06 1a cd 0c ca d3 8a d8 a0 bf 2b 17 23 9c 15 69 fc ab a9 da cd 40 3b b4 8f 6a 9c e3 1c a3 3f 6d c7 f7 dc c7 7f 29 d5 c0 19 c8 ed dc ac 99 1b ab 0b c0 04 9f fa bf 6f 5c 9a 57 58 b9 5c 80 98 20 3c a9 43 db 88 16 4b c9 bc 2a c2 f4 78 9c 07 8d d6 97 dc c9 4b b1 08 61 3a c3 eb 86 c3 49 5a 23 ac 9c d1 7c dd d7 1b 1d cb 47 57 4d 43 52 cb 1b c6 Data Ascii: l<\|\|q<:x<\=7%UL/2j`LQ-Mm0xLM=BtB6iK+#i@;j?m)o\WX\ <CKxKa:IZ#\|GWMCR
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: cb b7 6e 19 23 5d da d8 30 d4 c3 4c 9b b6 9c da 74 6a d8 a8 57 97 96 ff 2c 99 b4 36 dc da 50 d7 be 50 5a b4 6c d2 bc 77 f3 8e 58 dc f8 71 e4 c9 95 1f 67 10 c8 39 83 83 ce 9f cf 14 24 3d 10 74 42 d5 a5 0b 32 a8 dd 3a f7 ec d2 b1 1b 6f fe 3c 79 f9 eb 07 29 59 c7 ee 3d 10 78 e3 ee e1 2f a7 5f df be 64 d1 b7 f0 e7 bf 85 9a 3f 00 00 f8 12 50 2f b9 0a 9c ab 1a 04 4f 42 6b 91 45 10 ac 46 41 b1 96 fb 4a 39 ad 26 a4 c9 aa 05 2a bc 6a 43 a0 68 da 42 ad a0 14 a2 ea a9 88 96 c2 4a b9 a8 44 4c 4e 92 8b 62 3a 69 90 97 72 32 48 12 97 30 1a 89 46 95 3c 3a 66 c7 93 8e db 09 26 8f 6c 3c 68 10 1e 67 cc 68 10 aa 8a 54 0e 47 26 66 14 88 44 83 98 60 aa 25 85 0a 32 cb 29 85 9a 8c e8 c3 0e 99 d8 90 a1 ae 5a d2 ca 10 30 2d f4 71 8c 45 8a fb b0 b8 0a c6 72 ab 2d 03 e3 a4 6b 40 3a Data Ascii: n#]0LtjW,6PPZlwXqg9$=tB2:o<y)Y=x/_d?P/OBkEFAJ9&*jChBJDLNb:ir2H0F<:f&l<hghTG&fD`%2)Z0-qEr-k@:
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: 69 99 0b 3c 77 ad 8f 14 0d 65 58 d3 04 4a 5d 06 53 06 2c a0 25 4b 93 1b dd f8 d5 93 c0 e9 cf 2d c0 00 06 50 05 b0 54 94 75 9b 60 59 69 2b af 45 d6 3a f0 4d 25 72 58 25 08 fc e6 d7 82 b6 ec 10 b0 d6 36 59 f6 a2 ca b2 f9 c1 6c 9d 36 fb 2c 62 da 56 2c b4 f5 e1 68 83 6a c4 a2 04 f5 b5 0b 68 6d 85 2d 7c 61 d6 4e 78 89 43 f5 e6 6c 19 ac e0 62 2e d5 2e e7 db 2d 5e 8e 21 80 9a 11 72 b8 5b b5 42 8b 5d fc 62 18 c7 f8 c5 c9 cd 2a 59 49 61 b3 46 6c a3 32 c8 c0 aa 07 a6 ab cf ea 4e ea 9f db 4d da 5c bf 6b 50 bc 96 ff 2a 36 e6 05 03 91 37 19 e0 fa 68 cd bd ba dc 6f 61 9d f3 d1 f9 82 b0 be b8 7a ef 45 cd 23 1f a0 f8 b7 38 62 86 32 49 63 a8 49 5f 9e 59 34 c0 ac a1 88 e3 04 62 d0 ce 20 2c 0c 6e 70 37 bd 25 61 0d 8f 11 c3 7b e6 73 9f 47 97 67 a0 3a 18 71 74 3e 6a 52 39 eb Data Ascii: i<weXJ]S,%K-PTu`Yi+E:M%rX%6Yl6,bV,hjhm-\|aNxClb..-^!r[B]bYIaFl2NM\kP67hoazE#8b2IcI_Y4b ,np7%a{sGg:qt>jR9
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: cc cc 81 a4 80 38 1b 8b 14 d0 cc 88 74 23 0a 48 01 29 00 4d d3 3c 02 29 48 01 9f d4 a6 d1 2c cd d3 d4 cc d4 5c cd d1 c1 cc d3 a4 80 18 a1 4d d3 54 06 8c c0 84 d3 e4 85 a6 e3 85 ff d3 4c 01 a4 c3 cd d7 3c cd 59 d8 47 17 cc 85 d7 9c c9 97 98 05 e3 1c 9d 3a 38 cd 5c 50 08 e2 d4 4c 0a 50 08 3e 28 4e ed 04 4d 29 28 ca d7 84 4a 1f fa 4c d3 dc 00 db c2 3a 1e 14 10 0a a8 01 2f f0 02 ad d4 ca 33 78 cf 70 98 85 59 e0 86 70 40 3b 70 40 85 42 81 42 4b 88 1f fa 51 4b b1 7a 82 b1 0a d0 42 6a 3f ff 6c 3b 9c 79 82 ad 82 27 5d b4 19 04 b0 8c 46 f8 03 29 a8 cb cd b8 cb 31 24 c3 62 44 16 4b 62 32 30 f0 4b f5 ba ab a5 c1 01 29 78 46 02 98 37 54 80 4c c1 31 51 14 35 51 73 a4 01 1a a8 b9 5b a0 4c 94 b9 a3 93 19 19 2c 78 cd 79 1c 99 0a 89 82 d7 04 a2 60 80 84 ed 3c cd 28 b8 4e Data Ascii: 8t#H)M<)H,\MTL<YG:8\PLP>(NM)(JL:/3xpYp@;p@BBKQKzBj?l;y']F)1$bDKb20K)xF7TL1Q5Qs[L,xy`<(N
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: be 1b 20 3b 9e 45 42 9c 26 3b 21 06 66 9e ee 69 83 38 e2 73 0c 6a 1a 8a d1 75 54 da 28 56 53 c1 3d cd 1e 92 d6 f1 84 01 21 a5 00 a9 d2 4e eb 2d 0a a6 06 cd 0d 70 ea e2 81 6a e7 2c 4e 3a 8e d7 e5 3c ba ad 36 4d f1 4d ba 66 ce 4c f3 d5 cc 32 6e 9d 7a 8d 86 8b c4 84 aa e6 4e de 7b 6b 82 24 c9 a3 b3 e3 d3 bc df 26 3d cd bc cd 63 29 3e 1e a0 d4 47 74 5d 49 a2 04 5c 7d 05 60 a5 ae ad c2 6d 37 e7 03 c2 81 55 dc f6 24 e8 08 5e 4f 59 a0 dc 47 83 34 85 66 e8 4d d3 34 4f eb 34 4c 8b b1 e2 4a 82 54 48 00 8a 06 04 8b 6e 83 13 98 04 53 a8 dc fb 01 bf 9a 69 04 0b 00 04 38 a0 82 bd 2b 69 09 0d 32 95 b6 50 63 a4 59 c9 c0 81 ff 58 95 9f ca 6e b1 5d de e5 54 cc e9 7c f3 65 9f 3e ee 14 c5 46 64 24 30 35 ab 0d 16 c5 0d 00 61 e2 9c 43 b0 91 69 5e 1c cd d1 41 ae 10 ba 75 0a 22 Data Ascii: ;EB&;!fi8sjuT(VS=!N-pj,N:<6MMfL2nzN{k$&=c)>Gt]I\}`m7U$^OYG4fM4O4LJTHnSi8+i2PcYXn]T\|e>Fd$05aCi^Au"
2024-05-23 16:18:21 UTC	1390	IN	Data Raw: 32 1b 6d d8 a8 71 21 86 79 68 b8 61 36 1d 66 13 47 42 92 1c 34 22 89 25 9a 78 22 8a 29 aa b8 22 8b 2d ba f8 22 21 09 59 60 41 7c 0d f1 17 11 8e 0f 41 d4 10 46 1c 85 94 19 66 1f 55 36 12 16 55 19 e0 58 4c 90 09 85 64 55 51 1c 06 94 91 82 91 d5 97 53 8b 59 d5 97 95 06 f8 01 43 55 78 bd ff c5 15 58 47 7d a9 14 59 66 19 f9 65 96 63 76 65 40 55 90 70 55 80 5d 3a 85 d1 94 32 47 49 35 55 96 54 be f0 42 61 47 f1 f4 a4 60 59 de 84 e4 63 55 11 2a d9 90 43 fe 18 52 0a b3 38 da 4a 2b 9f 71 33 29 2f 95 86 56 29 1b 99 3e 93 c1 33 cf 84 13 8e 0a b2 ed a6 1b 38 a5 9a 7a ea 35 a9 42 80 07 2d 70 c0 f1 ca ab aa 98 42 cb 24 d2 d4 c6 c8 0d 56 fc f1 c4 13 7f fc b1 dc 72 d2 48 90 48 2a d2 49 07 87 75 aa 10 47 8a 25 dd 79 67 49 23 d1 c6 81 6c 1c 93 58 11 0b 7c d9 6a fb 5e 43 f6 Data Ascii: 2mq!yha6fGB4"%x")"-"!Y`A\|AFfU6UXLdUQSYCUxXG}Yfecve@UpU]:2GI5UTBaG`YcUCR8J+q3)/V)>38z5B-pB$VrHHIuG%ygI#lX\|j^C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	142.250.184.206	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:22 UTC	994	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
2024-05-23 16:18:22 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 325611 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 22 May 2024 08:55:51 GMT Expires: Thu, 22 May 2025 08:55:51 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 15 Apr 2024 18:15:45 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 112951 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:22 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 32 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 63 61 2c 64 61 2c 6e 61 2c 70 61 2c 76 61 2c 77 61 2c 7a 61 3b 62 61 3d 66 75 6e 63 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){("undefined"!==typeof globalThis?globalThis:"undefined"!==typeof self?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x20000, ]);var ba,ca,da,na,pa,va,wa,za;ba=func
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 64 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};da=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 76 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 77 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e Data Ascii: Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return{next:ba(a)};throw Error("b`"+String(a));};va=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};wa="function"==typeof Object.assign?Object.
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 6c 73 3d 5b 5d 3b 74 68 69 73 2e 73 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 59 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 6a 4b 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.ls=[];this.sV=!1;var k=this.DF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.DF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Yda),reject:h(this.jK)}};e.prototype.Yda=functi
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 75 6c 6c 21 3d 74 68 69 73 2e 6c 73 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 6c 73 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 73 50 28 74 68 69 73 2e 6c 73 5b 68 5d 29 3b 0a 74 68 69 73 2e 6c 73 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 41 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 44 46 28 29 3b 68 2e 42 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 42 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 44 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(null!=this.ls){for(var h=0;h<this.ls.length;++h)f.sP(this.ls[h]);this.ls=null}};var f=new b;e.prototype.Afa=function(h){var k=this.DF();h.By(k.resolve,k.reject)};e.prototype.Bfa=function(h,k){var l=this.DF();try{h.call(k,l.resolve
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 49 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d 29 Data Ascii: gular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ia(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}})
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 6b 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6d Data Ascii: tion(a){if(function(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var k=Object.seal({x:4}),l=new a(_.ua([[k,"s"]]));if("s"!=l.get(k)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var m
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6d 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 0a 6e 3b 21 28 6e 3d 6d 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6e 3d 6e 2e 76 61 6c 75 65 2c 6b 2e 63 61 6c 6c 28 6c 2c 6e 5b 31 5d 2c 6e 5b 30 5d 2c 74 68 69 73 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 64 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 Data Ascii: totype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=function(k,l){for(var m=this.entries(),n;!(n=m.next()).done;)n=n.value,k.call(l,n[1],n[0],this)};c.prototype[Symbol.iterator]=c.prototype.entries;var d=function(k,l)
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 75 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 31 21 3d 64 2e 73 69 7a 65 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 32 21 3d 64 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 Data Ascii: ntries\|\|"function"!=typeof Object.seal)return!1;try{var c=Object.seal({x:4}),d=new a(_.ua([c]));if(!d.has(c)\|\|1!=d.size\|\|d.add(c)!=d\|\|1!=d.size\|\|d.add({x:4})!=d\|\|2!=d.size)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)retur
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 7d 29 7d 7d 29 3b 0a 6e 61 28 22 41 72 72 61 79 2e 66 72 6f 6d 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 2c 64 29 7b 63 3d 6e 75 6c 6c 21 3d 63 3f 63 3a 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 7d 3b 76 61 72 20 65 3d 5b 5d 2c 66 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 62 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 29 7b 62 3d 66 2e 63 61 6c 6c 28 62 Data Ascii: :function(){return Ka(this,function(b,c){return c})}});na("Array.from",function(a){return a?a:function(b,c,d){c=null!=c?c:function(k){return k};var e=[],f="undefined"!=typeof Symbol&&Symbol.iterator&&b[Symbol.iterator];if("function"==typeof f){b=f.call(b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	216.58.206.33	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:22 UTC	824	OUT	GET /QmMtUfcZb8HCPTk7mycilQNRSxsgN1pfissSxL8rc_Lw5Ka89R6W3KNq9kcVUYqo9yEwlvZ4j7pFViSwROUBDFs=w16383 HTTP/1.1 Host: lh5.googleusercontent.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 16:18:22 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 24 May 2024 16:18:22 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="Untitled.jpg" X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 16:18:22 GMT Server: fife Content-Length: 16888 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:22 UTC	867	IN	Data Raw: ff d8 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 01 e0 02 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 08 ff c4 00 2f 10 00 02 02 02 01 03 03 03 05 01 01 01 01 00 03 00 01 11 00 21 31 41 51 02 61 71 81 91 a1 12 b1 c1 22 32 d1 f0 f1 e1 42 52 72 62 82 b2 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CC"/!1AQaq"2BRrb
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 91 3b bc 6a 1d 99 00 e5 c0 be ac a3 9f ed 40 21 81 66 e1 8c eb d6 48 db c9 db 81 ad 73 2f 34 4e 2e 59 5f 89 97 67 7a 84 6b 2c 11 5d a6 79 c6 3c c5 e4 13 02 fb b3 0a 7e a3 ac 9c 54 9b 35 e9 25 dd c0 84 51 10 2f 41 52 65 15 bc cb 87 cd 11 28 11 40 91 52 64 ac 62 e5 e3 72 81 a5 47 15 0e ab c7 de 1f 07 c4 47 54 82 27 09 8a e6 54 ae 12 35 93 f1 28 49 85 cb 62 a4 3d ee 05 eb 5e 25 44 6a 5a 37 2d a3 78 81 6e 49 fa 48 17 2e 00 80 d6 b2 f5 0c d2 91 c3 c6 e5 02 3d a2 c3 c2 82 ed 99 0b 1c c0 7c 2a f6 90 fe b9 24 75 e4 c8 87 02 7a 1f 31 49 fd 3b 83 2e ef 93 24 2b e2 15 22 da 62 40 e1 f3 99 13 58 90 3f 51 c1 81 62 04 85 d9 49 5e c8 92 90 68 df 71 2d e2 cc 3e 6f 88 ff 00 54 0b 28 10 dc 92 02 ef 88 24 51 fb 47 c3 94 08 da 8f 8b 97 d2 89 1b 8f 50 1d 2a c0 5c 48 07 c8 70 Data Ascii: ;j@!fHs/4N.Y_gzk,]y<~T5%Q/ARe(@RdbrGGT'T5(Ib=^%DjZ7-xnIH.=\|$uz1I;.$+"b@X?QbI^hq->oT($QGP\Hp
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: fc 4b bc a8 29 0e ff 00 11 01 1a cb e6 5c 5f ac 35 8b 1d e1 5a 39 20 cc cd 31 8f 6b 93 bf 49 14 67 17 51 02 f4 3c 95 02 78 15 10 82 70 20 06 00 c7 cc ca bd bd cd 3f 99 10 f8 0a 10 24 1a af b4 0d 16 1c 42 e0 dc 17 77 00 1a a0 64 50 aa ce 23 d4 8e 03 26 10 84 d0 fb 44 7d a4 81 40 05 da 43 e5 40 96 0a af 15 23 c1 0a 43 c6 ea 0e 50 a4 5b 40 48 0a 15 53 37 bf 69 12 cf f1 20 d0 2c 7d e3 d2 36 45 c0 2e fe 3f 32 02 b7 8e 20 38 74 7d 63 d4 0d da 99 35 2c 63 44 bb 85 43 ab e9 44 f1 89 11 aa 89 20 8f 1a 99 f3 e9 72 87 94 80 ec 65 f4 8d 80 a4 00 24 07 e6 a4 42 3a f6 90 47 40 0c 43 fb e2 58 f7 88 54 ad 18 1a 4c e8 d4 02 1d 95 dd a8 90 89 d9 3a 73 24 b0 b5 aa 81 ae 04 0e 0d 3f 31 6d 06 e1 e2 dd c0 18 16 00 f2 e5 5f e4 7a 8e 6c 7a 4b e9 ae e2 06 49 67 ab 46 49 b0 57 bc Data Ascii: K)\_5Z9 1kIgQ<xp ?$BwdP#&D}@C@#CP[@HS7i ,}6E.?2 8t}c5,cDCD re$B:G@CXTL:s$?1m_zlzKIgFIW
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 81 20 b0 04 52 a3 78 dc 90 c6 fb dc 03 86 56 1c 83 27 4f 5d e5 82 c8 4c 6c c8 86 68 38 42 71 00 4d 0e cf 88 93 8e f8 d3 80 fb 6b f3 20 b8 e2 2c 8b ae 28 e6 64 30 55 89 a1 6b 8d 5f 68 55 8c 50 f1 1d a4 bf b8 95 a2 59 3d e5 ac b2 73 03 2b 80 bb 48 5a 21 9f 32 7d 3a f6 30 01 f8 e6 54 38 cd 3e d3 28 04 f1 ba 8d 1f 59 01 00 d0 af 85 1d 70 e0 aa ab 88 82 3a 75 cc 0b 5c 77 91 0d a0 a4 48 ac 1e d2 ac c0 af 03 26 02 80 f8 89 b4 83 be 25 4b 38 d2 80 9b 2c 8f 0a 15 54 4b 10 37 84 a2 fc 5c 08 d6 6a 40 95 77 f8 8f ff 00 28 78 ba 96 31 a9 14 0d 94 04 8f 8f 48 f0 8e e0 2c 2d 79 80 f0 00 f6 32 d8 7c c3 ca fe 65 fb 58 df 68 06 11 d7 68 96 cb aa 8d 77 81 ed ec 2e 50 e3 b6 a5 6e c6 24 0e 52 70 0b 72 29 7e a2 5d 26 ec 76 3b 96 f0 14 8f cc a2 28 ff 00 10 5c 6f 88 ef fb 50 a2 Data Ascii: RxV'O]Llh8BqMk ,(d0Uk_hUPY=s+HZ!2}:0T8>(Yp:u\wH&%K8,TK7\j@w(x1H,-y2\|eXhhw.Pn$Rpr)~]&v;(\oP
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: b9 be 04 09 42 eb d2 54 68 58 7b d7 79 1b 1f cc 85 64 09 67 25 29 01 dc d4 9e 38 d4 81 40 82 87 a4 88 f0 8f c4 0b 27 93 2f 92 79 96 0d bf 33 59 32 83 cd 01 2d a6 7d e1 e3 3d a2 a8 db 5a 90 20 de 64 00 24 4a eb 95 20 51 07 5c ca a8 d1 af bc 3c 47 29 88 b5 c1 e5 48 06 aa 1c b5 34 84 2b d7 30 22 2e ee 36 0c 0d 15 f6 32 47 ab 1e b0 17 61 09 1b ef 7c 48 f4 a1 7e 4c 49 03 e9 47 98 55 aa 3a bb 97 65 da 02 ed 08 e7 81 02 0c 79 97 66 a4 af a9 5c cb ab 81 1f 41 e2 49 55 3c 19 56 eb 4e 44 56 41 ee 21 10 3c 55 cc ee a2 6d 50 a8 2a b2 25 44 6c 5c 40 24 f8 cc ba 45 91 be 20 43 c5 f9 84 5c 80 73 97 2a 05 29 0a a1 e6 59 90 24 55 66 1d fb c9 31 e3 e2 4b fc 81 13 eb 2b 88 0b 2f c4 b4 1a f0 e0 49 af 18 97 8e 6e 58 c1 72 02 ac 8f 53 02 2b 00 b8 77 0d 44 ee 09 70 a0 22 bc 00 Data Ascii: BThX{ydg%)8@'/y3Y2-}=Z d$J Q\<G)H4+0".62Ga\|H~LIGU:eyf\AIU<VNDVA!<UmP%Dl\@$E C\s)Y$Uf1K+/InXrS+wDp"
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 83 46 fc 4a 13 7c 47 39 52 05 ec 00 9d fd a2 09 20 32 78 15 22 a0 36 06 63 e2 8b 96 70 de 04 18 fa 68 39 41 ef 7f 69 04 48 ff 00 64 28 94 fe ac f8 80 a0 eb 8e 64 0f 42 da 1e 4c 29 55 01 98 90 51 de 64 90 df b4 00 8b 07 91 1a 0c 32 b7 2d a1 97 a9 00 78 34 20 14 bc 73 22 89 c1 0f 89 22 3f 70 31 16 3f 88 17 c0 f3 2c 6a 34 41 7e eb 13 2a f1 02 59 48 c8 a0 68 78 71 20 02 c1 24 73 2d 99 41 8b 51 6a dc b2 d8 bf 67 0d a3 77 70 88 62 cf bc 1d ba 31 21 f2 b9 50 c5 c2 9a 52 48 51 b9 00 07 99 02 3e 20 09 b5 34 00 1d 2f 24 f1 25 93 7e 54 88 03 07 d6 40 2b ba 82 48 0d 47 a4 64 d2 97 7c 70 4c a0 f5 52 2b c7 ac 45 2c cb ff 00 40 b6 41 72 08 79 21 c9 a3 8c ca 80 f4 cc 06 b8 81 27 80 7c c5 0d 8d ee 47 cb 91 2c de e0 49 2d 54 8a 27 bf 61 11 0c 73 0a 53 b0 1d f3 05 5f 97 22 Data Ascii: FJ\|G9R 2x"6cph9AiHd(dBL)UQd2-x4 s""?p1?,j4A~*YHhxq $s-AQjgwpb1!PRHQ> 4/$%~T@+HGd\|pLR+E,@Ary!'\|G,I-T'asS_"
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 55 13 20 08 af e6 6b 1c c0 de a2 08 81 92 e5 43 3e ce 26 8e 7b 43 50 21 22 32 22 79 0c 9f 32 27 be 60 09 dd f6 94 75 7f ec 30 d4 09 0d 4b 22 e5 d3 21 de 11 1e e1 cb 3d d0 cc 8d 9e de 24 0f 98 54 28 58 be f1 61 58 50 3e fe 63 8d bf 48 01 e6 e2 b5 8d c3 63 31 1d 4a 8e 20 2f de 48 6c 38 34 de 62 09 17 93 0a ba a8 97 7d e1 ce fb 4d 5f ac c8 c8 2d 11 02 27 60 44 f6 f5 96 4f 24 ea 47 f5 04 59 dc 01 33 e2 28 1d 91 c4 81 0b 19 81 1b 10 27 da b9 9a 4b 21 e8 81 0f 57 2c 8f ed c0 3a 8d 85 52 08 6f de a2 43 c5 e8 09 0a bc c2 01 95 47 4e 5f fe 41 f0 e2 3f 49 a9 a6 a1 59 68 1f 38 32 60 d1 1f 54 93 20 8a 38 91 0c d4 0b 47 e2 42 ad 2e e2 4b 8c 18 32 0b 5e b2 a2 f8 d4 47 32 45 9d 21 72 2c 80 c8 72 0b c9 91 da c1 1e 0c 93 af c4 89 d9 bf 98 02 07 f9 88 44 b2 fd 38 97 48 06 Data Ascii: U kC>&{CP!"2"y2'`u0K"!=$T(XaXP>cHc1J /Hl84b}M_-'`DO$GY3('K!W,:RoCGN_A?IYh82`T 8GB.K2^G2E!r,rD8H
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 3f d5 21 7f 7a 30 20 14 1f be a0 20 fd 42 ac d4 10 3e 04 d8 fd cb 03 b7 da 64 e8 d0 26 93 b8 55 8e f0 37 c0 85 f8 88 14 7e 90 f3 e2 00 d4 d5 83 65 77 10 ea 29 ae 34 35 00 0a 67 78 ed 08 d5 1a cf ae e2 4e 5b 25 fa c1 11 4b 30 47 75 79 95 57 d5 81 d5 67 26 3f 57 4f 4d 8c 48 1f 7c c0 75 11 c5 09 06 9d fe e5 6e a6 5f e9 c7 72 a3 d4 51 47 d2 48 80 eb f1 02 fa 93 e0 44 6b 43 93 cc cd 8e 9e e7 e6 21 9c 81 c4 10 82 00 7d 26 92 a8 3c ac fb 44 e5 04 0e eb 10 26 8a c9 e6 15 02 c1 65 1f 30 35 a6 05 48 fe a2 48 49 cb 04 5f fc 84 17 e2 e6 ba 81 c2 c4 89 26 ca 79 85 b7 66 b9 95 4e 3f 4a 4a 1f 4a 17 f1 20 2c 58 1d 94 99 e9 e4 5f b4 20 24 63 e0 48 03 93 12 1d 9c c3 03 25 e4 19 10 2b c6 78 8b 44 3f 5a 92 5c 04 2e 45 6f d2 00 f6 dd dc 49 7b 83 a8 81 6e 51 38 16 0d 79 12 24 Data Ascii: ?!z0 B>d&U7~ew)45gxN[%K0GuyWg&?WOMH\|un_rQGHDkC!}&<D&e05HHI_&yfN?JJJ ,X_ $cH%+xD?Z\.EoI{nQ8y$
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 0e 96 20 58 43 2a 5e 90 76 8f a4 48 4b 7e 60 5e 77 0e 7f 32 3d a3 ef 08 8d 51 32 37 0a 91 14 16 a0 5e 44 5e b0 73 79 90 c8 c7 78 3c 2b 50 24 f3 ae 23 c6 f9 81 17 29 44 05 18 d2 0a 4e 58 df a4 80 25 44 94 68 9f 48 6a bd a4 76 e5 0d 13 e7 bc b0 6e 04 33 ff 00 60 7b 40 7e f1 5b d7 de 01 92 09 c4 5b d7 e2 40 78 2f b4 b6 fd 9c b9 71 f3 80 75 02 77 7e 91 21 63 e2 44 7b a7 98 74 b7 59 85 3c 5f 99 26 a5 7d 41 09 63 b0 3a 85 37 9f 9e 24 81 c7 ac 15 ac 4b b1 a1 02 2f 60 8d 45 36 78 d7 33 2d ea 6b a5 6f d6 11 10 8c b4 58 5c 5e 25 ae 22 47 a1 e2 14 1a f3 8a 8f d4 68 62 44 71 fe c8 1b cd 08 03 d1 0c f3 22 15 5a f3 16 1e 28 c3 c9 2a 04 b6 72 b9 90 b2 35 f3 01 77 f9 96 78 ae f2 a1 b9 63 68 41 10 c5 3a ae 24 1a d4 81 4e 0b 28 3f cc 55 7a ea 19 0e 02 9e 1f 69 74 9d e7 b4 Data Ascii: XC^vHK~`^w2=Q27^D^syx<+P$#)DNX%DhHjvn3`{@~[[@x/quw~!cD{tY<_&}Ac:7$K/`E6x3-koX\^%"GhbDq"Z(r5wxchA:$N(?Uzit
2024-05-23 16:18:22 UTC	1390	IN	Data Raw: 03 fb c4 71 8c 48 1b a2 98 e2 47 a7 a8 32 98 81 59 08 26 37 c4 8d 82 ef fc 8d 0f 3b 62 16 48 fa ad ea 41 24 4f de 69 da 13 14 fc ea 69 f0 c1 c1 10 a9 24 8d 9e 23 e9 06 41 f1 ed 07 eb 7b dc 29 cb f8 91 1f 49 e2 2e b3 8b 95 03 a5 28 30 51 5e b2 14 7e f7 0a e4 2c 9e f0 05 7b 6a 06 80 41 62 44 07 a1 eb 20 5a ba c4 9f 03 e2 41 20 86 b9 50 ce 2c 44 20 0b cf 68 70 43 ac 40 51 65 07 5e f3 24 0d 4d 7d 5d bb dc 9a b1 98 11 05 58 50 3b e6 0c 1d be 64 ca 0c dc 21 01 56 66 48 ed 35 43 a9 37 33 43 35 09 56 8a c0 12 34 21 b1 2c c2 15 78 10 15 89 50 15 21 68 3c ca 23 6c 48 92 c6 cf 89 6d 89 1d a9 02 bc f7 52 f1 23 03 e1 c0 78 97 9a 10 6b 42 34 ff 00 32 81 c9 16 e4 0f b4 8d d0 fb c8 10 7e 0c 30 79 32 5a f7 a9 60 ea 50 fb 19 1a 1f 78 13 a1 2f 26 03 e9 ed 04 1c 8d 72 23 a5 Data Ascii: qHG2Y&7;bHA$Oii$#A{)I.(0Q^~,{jAbD ZA P,D hpC@Qe^$M}]XP;d!VfH5C73C5V4!,xP!h<#lHmR#xkB42~0y2Z`Px/&r#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49751	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:23 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 16:18:23 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=258712 Date: Thu, 23 May 2024 16:18:23 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49753	142.250.181.225	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:23 UTC	582	OUT	GET /xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280 HTTP/1.1 Host: lh6.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 16:18:23 UTC	522	IN	HTTP/1.1 200 OK Content-Type: image/gif Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 24 May 2024 16:18:23 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="Untitled.gif" X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 16:18:23 GMT Server: fife Content-Length: 76230 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:23 UTC	868	IN	Data Raw: 47 49 46 38 39 61 84 03 fa 00 f7 00 00 00 00 00 b4 82 63 a7 8b 83 77 45 2c e8 c9 b4 6d 62 5d 79 6e 6a b6 a4 9e ee e6 e4 95 12 31 a6 71 54 22 22 22 e9 b0 0e b8 82 5d c5 b6 b3 db cf d3 c5 92 6d a3 64 44 a8 5f 3e 9d 67 52 54 4c 4a 47 17 0c f5 87 a3 fb f7 f3 31 30 2c c5 b4 ad ae 79 55 eb d5 c7 10 10 10 8c 52 37 f3 e7 eb f8 bf ca d4 90 6d a2 9a 99 ce c6 c2 c5 bc ba ee dc d3 ab 6b 61 51 25 17 bc 85 6b a5 69 45 ba ac a7 c5 95 7b a3 6b 52 dd cd c5 b1 74 54 b1 8e 83 2b 28 24 95 83 7e 88 4b 3f 84 5a 4f 1a 1a 1a f5 ee ed e7 e3 e3 0c 0c 0c d6 a4 89 f7 ef e6 c7 ba b5 c7 9a 75 ab 64 43 ca 9c 85 ba 79 55 9d 5f 3f d8 c7 c0 d2 bd c1 ea e3 df a8 78 65 bb 8c 72 b6 8a 65 85 4c 33 a4 7c 6e ff e7 d9 ac 71 53 be 89 64 f9 d1 d6 ac 63 52 56 1b 26 ff ff fe 6f 38 26 e2 bc a7 2c 13 Data Ascii: GIF89acwE,mb]ynj1qT"""]mdD_>gRTLJG10,yUR7mkaQ%kiE{kRtT+($~K?ZOudCyU_?xereL3\|nqSdcRV&o8&,
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: 84 c5 b2 a5 cb 97 30 61 d9 98 49 b3 a6 cd 9b 35 c7 d0 d4 69 43 a7 cf 9e 40 7f 0a ed 39 c6 67 d1 a3 48 93 2a 55 3a a3 a9 d3 a7 50 a3 4a 9d 4a 35 ea 82 19 57 b3 62 dd aa b5 2b 57 ac 0b c2 8a 1d 4b b6 ac d9 b3 68 d3 aa 0d fb d5 ab db b6 5b ab ca 9d 4b b7 ea d2 bb 4a 89 16 0d ca 77 e8 d0 99 3c 71 0a 1e 3c 38 a6 e1 c3 88 5d 62 59 cc b8 b1 e3 26 90 23 4b 9e 4c b9 b2 e5 cb 98 33 6b de cc f9 c2 05 63 a0 43 8b 1e 0d 79 34 e8 61 a8 87 85 46 bd 3a b5 6b d5 a0 b5 69 bb 75 2b 35 ed 5b 9e 73 eb d6 8d 3a b7 eb dc a1 75 07 f7 0c 7a b7 e7 db ba 6f a3 be 4d 9b b5 69 d1 a9 4f 0f f3 fc fa 37 f5 ea cf b3 6b 37 4d 7c f8 75 e3 c7 9b 4f ff 07 1e 5b db 77 de bd bb 1b 03 df 9d bd f0 f5 be 51 cb d6 06 9a 79 6e e6 f2 67 d3 be bf 3f 7c 7f e6 02 25 76 18 61 04 e2 14 98 5f 7d 25 78 94 Data Ascii: 0aI5iC@9gH*U:PJJ5Wb+WKh[KJw<q<8]bY&#KL3kcCy4aF:kiu+5[s:uzoMiO7k7M\|uO[wQyng?\|%va_}%x
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: 48 fa d3 68 b1 b2 d4 42 63 72 d3 5a 71 ea a6 ed d6 74 52 0d 4a e7 99 ad f1 9f 92 2e ea d2 30 be c6 83 f3 31 4f d5 72 b7 ae 9b 16 d2 18 3a bd ab 6e e0 14 1f 47 de 46 78 e6 14 6a 50 87 8a 3c c4 bc d2 70 ee 5c a5 13 9f 22 cf a6 6e 92 6f f9 5c 98 54 ab ca da d6 72 0f 2c 1a 4a ed 5b 4e bb d5 e8 ff 19 74 6d 5f 75 25 3b 67 22 56 98 40 f4 ac c0 55 ab 70 81 c4 56 d4 4c e6 69 72 05 20 5d b5 79 c0 2a 61 cd 84 25 ad 5a 33 e3 93 9d 6c 85 29 82 ad c3 5c 61 ad a9 4c 02 ee 55 5d e9 69 12 63 61 7a 01 ca 26 6b 5d 3c 25 a7 7e 80 c7 c8 8e 6e 96 a8 2f 61 27 4f 5a 74 d0 8d 8d 76 9e 4c 45 25 85 f6 cb c9 0b b5 f6 bf 00 26 e2 de 32 64 cf da 42 e5 b6 ee 54 95 e1 64 d8 5b df 02 f7 c1 b7 1c ae 84 77 74 9b b7 c2 ec 65 44 ba ee 60 37 8a 53 b1 91 f7 ae cf 05 e1 77 a7 8b 3a d3 d0 cc 82 Data Ascii: HhBcrZqtRJ.01Or:nGFxjP<p\"no\Tr,J[Ntm_u%;g"V@UpVLir ]y*a%Z3l)\aLU]icaz&k]<%~n/a'OZtvLE%&2dBTd[wteD`7Sw:
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: 09 91 15 40 5a 63 90 91 0d 02 05 38 89 88 10 b9 8b d3 17 49 55 84 7d 29 b0 78 51 39 95 85 10 95 c1 18 66 b7 b0 0d 76 08 3b 92 f1 7e 2a 28 76 e2 f4 87 4b e7 83 52 a2 04 82 a0 93 d8 98 96 6a b9 96 6c d9 96 d1 58 88 4a b0 4b 9a 55 2f a2 b8 65 36 90 00 88 b8 08 28 37 06 3a 89 14 8f b8 05 47 f1 97 63 80 97 90 f8 8f 00 89 88 09 00 15 84 49 08 86 b9 00 89 68 08 20 b2 08 79 29 16 90 18 91 63 f1 97 61 e8 98 8e 28 09 30 49 16 91 b8 05 61 b1 98 8b 70 0c c7 a0 85 4a 29 16 8b c9 88 8b f0 09 ac d9 9a ac f9 88 9c 69 16 4c 90 88 4c 90 99 a8 c9 88 d0 b8 05 2d e9 90 a7 59 16 a9 b9 88 5b 90 0c a7 34 03 b3 e9 88 86 d9 14 4a e9 14 bf a9 88 5b 00 05 7e 79 88 80 79 17 15 80 96 89 d8 9c 69 a3 60 d4 97 38 52 b9 9d 55 c9 9d 29 70 95 13 d6 7d db ff 61 61 5d e9 95 c6 d8 3b 54 23 52 Data Ascii: @Zc8IU})xQ9fv;~*(vKRjlXJKU/e6(7:GcIh y)ca(0IapJ)iLL-Y[4J[~yyi`8RU)p}aa];T#R
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: 6c 3c c0 1a ac 88 da cc 98 a6 e9 aa 91 da 9b a1 8b c0 ac 8a a3 82 7c c7 e0 1c ab 7c 8c b9 71 3c b3 13 dc 9a 16 3a 08 78 3c a2 0f 5c a2 3d 0b 86 cd bc 00 b9 09 c9 c0 aa 93 c2 aa 37 25 ac 55 98 4c b4 b7 9a 97 2f 9c 86 c3 bb 88 18 ec ac 0c 32 6a 1d c3 60 a8 dc ca 16 ed b5 aa 9c d1 b0 4c 51 b2 dc 2d 96 91 ae c7 d4 4d e9 09 6d 30 78 4c 4d 10 a6 c0 9c d2 2a 3d 8d 92 e0 19 ca 96 42 74 09 8e ac 42 8a 36 ff 94 aa d0 69 03 00 4b b4 06 1a cd 0c ca d3 8a d8 a0 bf 2b 17 23 9c 15 69 fc ab a9 da cd 40 3b b4 8f 6a 9c e3 1c a3 3f 6d c7 f7 dc c7 7f 29 d5 c0 19 c8 ed dc ac 99 1b ab 0b c0 04 9f fa bf 6f 5c 9a 57 58 b9 5c 80 98 20 3c a9 43 db 88 16 4b c9 bc 2a c2 f4 78 9c 07 8d d6 97 dc c9 4b b1 08 61 3a c3 eb 86 c3 49 5a 23 ac 9c d1 7c dd d7 1b 1d cb 47 57 4d 43 52 cb 1b c6 Data Ascii: l<\|\|q<:x<\=7%UL/2j`LQ-Mm0xLM=BtB6iK+#i@;j?m)o\WX\ <CKxKa:IZ#\|GWMCR
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: cb b7 6e 19 23 5d da d8 30 d4 c3 4c 9b b6 9c da 74 6a d8 a8 57 97 96 ff 2c 99 b4 36 dc da 50 d7 be 50 5a b4 6c d2 bc 77 f3 8e 58 dc f8 71 e4 c9 95 1f 67 10 c8 39 83 83 ce 9f cf 14 24 3d 10 74 42 d5 a5 0b 32 a8 dd 3a f7 ec d2 b1 1b 6f fe 3c 79 f9 eb 07 29 59 c7 ee 3d 10 78 e3 ee e1 2f a7 5f df be 64 d1 b7 f0 e7 bf 85 9a 3f 00 00 f8 12 50 2f b9 0a 9c ab 1a 04 4f 42 6b 91 45 10 ac 46 41 b1 96 fb 4a 39 ad 26 a4 c9 aa 05 2a bc 6a 43 a0 68 da 42 ad a0 14 a2 ea a9 88 96 c2 4a b9 a8 44 4c 4e 92 8b 62 3a 69 90 97 72 32 48 12 97 30 1a 89 46 95 3c 3a 66 c7 93 8e db 09 26 8f 6c 3c 68 10 1e 67 cc 68 10 aa 8a 54 0e 47 26 66 14 88 44 83 98 60 aa 25 85 0a 32 cb 29 85 9a 8c e8 c3 0e 99 d8 90 a1 ae 5a d2 ca 10 30 2d f4 71 8c 45 8a fb b0 b8 0a c6 72 ab 2d 03 e3 a4 6b 40 3a Data Ascii: n#]0LtjW,6PPZlwXqg9$=tB2:o<y)Y=x/_d?P/OBkEFAJ9&*jChBJDLNb:ir2H0F<:f&l<hghTG&fD`%2)Z0-qEr-k@:
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: 69 99 0b 3c 77 ad 8f 14 0d 65 58 d3 04 4a 5d 06 53 06 2c a0 25 4b 93 1b dd f8 d5 93 c0 e9 cf 2d c0 00 06 50 05 b0 54 94 75 9b 60 59 69 2b af 45 d6 3a f0 4d 25 72 58 25 08 fc e6 d7 82 b6 ec 10 b0 d6 36 59 f6 a2 ca b2 f9 c1 6c 9d 36 fb 2c 62 da 56 2c b4 f5 e1 68 83 6a c4 a2 04 f5 b5 0b 68 6d 85 2d 7c 61 d6 4e 78 89 43 f5 e6 6c 19 ac e0 62 2e d5 2e e7 db 2d 5e 8e 21 80 9a 11 72 b8 5b b5 42 8b 5d fc 62 18 c7 f8 c5 c9 cd 2a 59 49 61 b3 46 6c a3 32 c8 c0 aa 07 a6 ab cf ea 4e ea 9f db 4d da 5c bf 6b 50 bc 96 ff 2a 36 e6 05 03 91 37 19 e0 fa 68 cd bd ba dc 6f 61 9d f3 d1 f9 82 b0 be b8 7a ef 45 cd 23 1f a0 f8 b7 38 62 86 32 49 63 a8 49 5f 9e 59 34 c0 ac a1 88 e3 04 62 d0 ce 20 2c 0c 6e 70 37 bd 25 61 0d 8f 11 c3 7b e6 73 9f 47 97 67 a0 3a 18 71 74 3e 6a 52 39 eb Data Ascii: i<weXJ]S,%K-PTu`Yi+E:M%rX%6Yl6,bV,hjhm-\|aNxClb..-^!r[B]bYIaFl2NM\kP67hoazE#8b2IcI_Y4b ,np7%a{sGg:qt>jR9
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: cc cc 81 a4 80 38 1b 8b 14 d0 cc 88 74 23 0a 48 01 29 00 4d d3 3c 02 29 48 01 9f d4 a6 d1 2c cd d3 d4 cc d4 5c cd d1 c1 cc d3 a4 80 18 a1 4d d3 54 06 8c c0 84 d3 e4 85 a6 e3 85 ff d3 4c 01 a4 c3 cd d7 3c cd 59 d8 47 17 cc 85 d7 9c c9 97 98 05 e3 1c 9d 3a 38 cd 5c 50 08 e2 d4 4c 0a 50 08 3e 28 4e ed 04 4d 29 28 ca d7 84 4a 1f fa 4c d3 dc 00 db c2 3a 1e 14 10 0a a8 01 2f f0 02 ad d4 ca 33 78 cf 70 98 85 59 e0 86 70 40 3b 70 40 85 42 81 42 4b 88 1f fa 51 4b b1 7a 82 b1 0a d0 42 6a 3f ff 6c 3b 9c 79 82 ad 82 27 5d b4 19 04 b0 8c 46 f8 03 29 a8 cb cd b8 cb 31 24 c3 62 44 16 4b 62 32 30 f0 4b f5 ba ab a5 c1 01 29 78 46 02 98 37 54 80 4c c1 31 51 14 35 51 73 a4 01 1a a8 b9 5b a0 4c 94 b9 a3 93 19 19 2c 78 cd 79 1c 99 0a 89 82 d7 04 a2 60 80 84 ed 3c cd 28 b8 4e Data Ascii: 8t#H)M<)H,\MTL<YG:8\PLP>(NM)(JL:/3xpYp@;p@BBKQKzBj?l;y']F)1$bDKb20K)xF7TL1Q5Qs[L,xy`<(N
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: be 1b 20 3b 9e 45 42 9c 26 3b 21 06 66 9e ee 69 83 38 e2 73 0c 6a 1a 8a d1 75 54 da 28 56 53 c1 3d cd 1e 92 d6 f1 84 01 21 a5 00 a9 d2 4e eb 2d 0a a6 06 cd 0d 70 ea e2 81 6a e7 2c 4e 3a 8e d7 e5 3c ba ad 36 4d f1 4d ba 66 ce 4c f3 d5 cc 32 6e 9d 7a 8d 86 8b c4 84 aa e6 4e de 7b 6b 82 24 c9 a3 b3 e3 d3 bc df 26 3d cd bc cd 63 29 3e 1e a0 d4 47 74 5d 49 a2 04 5c 7d 05 60 a5 ae ad c2 6d 37 e7 03 c2 81 55 dc f6 24 e8 08 5e 4f 59 a0 dc 47 83 34 85 66 e8 4d d3 34 4f eb 34 4c 8b b1 e2 4a 82 54 48 00 8a 06 04 8b 6e 83 13 98 04 53 a8 dc fb 01 bf 9a 69 04 0b 00 04 38 a0 82 bd 2b 69 09 0d 32 95 b6 50 63 a4 59 c9 c0 81 ff 58 95 9f ca 6e b1 5d de e5 54 cc e9 7c f3 65 9f 3e ee 14 c5 46 64 24 30 35 ab 0d 16 c5 0d 00 61 e2 9c 43 b0 91 69 5e 1c cd d1 41 ae 10 ba 75 0a 22 Data Ascii: ;EB&;!fi8sjuT(VS=!N-pj,N:<6MMfL2nzN{k$&=c)>Gt]I\}`m7U$^OYG4fM4O4LJTHnSi8+i2PcYXn]T\|e>Fd$05aCi^Au"
2024-05-23 16:18:23 UTC	1390	IN	Data Raw: 32 1b 6d d8 a8 71 21 86 79 68 b8 61 36 1d 66 13 47 42 92 1c 34 22 89 25 9a 78 22 8a 29 aa b8 22 8b 2d ba f8 22 21 09 59 60 41 7c 0d f1 17 11 8e 0f 41 d4 10 46 1c 85 94 19 66 1f 55 36 12 16 55 19 e0 58 4c 90 09 85 64 55 51 1c 06 94 91 82 91 d5 97 53 8b 59 d5 97 95 06 f8 01 43 55 78 bd ff c5 15 58 47 7d a9 14 59 66 19 f9 65 96 63 76 65 40 55 90 70 55 80 5d 3a 85 d1 94 32 47 49 35 55 96 54 be f0 42 61 47 f1 f4 a4 60 59 de 84 e4 63 55 11 2a d9 90 43 fe 18 52 0a b3 38 da 4a 2b 9f 71 33 29 2f 95 86 56 29 1b 99 3e 93 c1 33 cf 84 13 8e 0a b2 ed a6 1b 38 a5 9a 7a ea 35 a9 42 80 07 2d 70 c0 f1 ca ab aa 98 42 cb 24 d2 d4 c6 c8 0d 56 fc f1 c4 13 7f fc b1 dc 72 d2 48 90 48 2a d2 49 07 87 75 aa 10 47 8a 25 dd 79 67 49 23 d1 c6 81 6c 1c 93 58 11 0b 7c d9 6a fb 5e 43 f6 Data Ascii: 2mq!yha6fGB4"%x")"-"!Y`A\|AFfU6UXLdUQSYCUxXG}Yfecve@UpU]:2GI5UTBaG`YcUCR8J+q3)/V)>38z5B-pB$VrHHIuG%ygI#lX\|j^C

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49759	142.250.186.33	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:24 UTC	540	OUT	GET /QmMtUfcZb8HCPTk7mycilQNRSxsgN1pfissSxL8rc_Lw5Ka89R6W3KNq9kcVUYqo9yEwlvZ4j7pFViSwROUBDFs=w16383 HTTP/1.1 Host: lh5.googleusercontent.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 16:18:24 UTC	523	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Fri, 24 May 2024 16:18:24 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="Untitled.jpg" X-Content-Type-Options: nosniff Date: Thu, 23 May 2024 16:18:24 GMT Server: fife Content-Length: 16888 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:24 UTC	867	IN	Data Raw: ff d8 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 01 e0 02 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 08 ff c4 00 2f 10 00 02 02 02 01 03 03 03 05 01 01 01 01 00 03 00 01 11 00 21 31 41 51 02 61 71 81 91 a1 12 b1 c1 22 32 d1 f0 f1 e1 42 52 72 62 82 b2 ff c4 00 16 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: CC"/!1AQaq"2BRrb
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: 91 3b bc 6a 1d 99 00 e5 c0 be ac a3 9f ed 40 21 81 66 e1 8c eb d6 48 db c9 db 81 ad 73 2f 34 4e 2e 59 5f 89 97 67 7a 84 6b 2c 11 5d a6 79 c6 3c c5 e4 13 02 fb b3 0a 7e a3 ac 9c 54 9b 35 e9 25 dd c0 84 51 10 2f 41 52 65 15 bc cb 87 cd 11 28 11 40 91 52 64 ac 62 e5 e3 72 81 a5 47 15 0e ab c7 de 1f 07 c4 47 54 82 27 09 8a e6 54 ae 12 35 93 f1 28 49 85 cb 62 a4 3d ee 05 eb 5e 25 44 6a 5a 37 2d a3 78 81 6e 49 fa 48 17 2e 00 80 d6 b2 f5 0c d2 91 c3 c6 e5 02 3d a2 c3 c2 82 ed 99 0b 1c c0 7c 2a f6 90 fe b9 24 75 e4 c8 87 02 7a 1f 31 49 fd 3b 83 2e ef 93 24 2b e2 15 22 da 62 40 e1 f3 99 13 58 90 3f 51 c1 81 62 04 85 d9 49 5e c8 92 90 68 df 71 2d e2 cc 3e 6f 88 ff 00 54 0b 28 10 dc 92 02 ef 88 24 51 fb 47 c3 94 08 da 8f 8b 97 d2 89 1b 8f 50 1d 2a c0 5c 48 07 c8 70 Data Ascii: ;j@!fHs/4N.Y_gzk,]y<~T5%Q/ARe(@RdbrGGT'T5(Ib=^%DjZ7-xnIH.=\|$uz1I;.$+"b@X?QbI^hq->oT($QGP\Hp
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: fc 4b bc a8 29 0e ff 00 11 01 1a cb e6 5c 5f ac 35 8b 1d e1 5a 39 20 cc cd 31 8f 6b 93 bf 49 14 67 17 51 02 f4 3c 95 02 78 15 10 82 70 20 06 00 c7 cc ca bd bd cd 3f 99 10 f8 0a 10 24 1a af b4 0d 16 1c 42 e0 dc 17 77 00 1a a0 64 50 aa ce 23 d4 8e 03 26 10 84 d0 fb 44 7d a4 81 40 05 da 43 e5 40 96 0a af 15 23 c1 0a 43 c6 ea 0e 50 a4 5b 40 48 0a 15 53 37 bf 69 12 cf f1 20 d0 2c 7d e3 d2 36 45 c0 2e fe 3f 32 02 b7 8e 20 38 74 7d 63 d4 0d da 99 35 2c 63 44 bb 85 43 ab e9 44 f1 89 11 aa 89 20 8f 1a 99 f3 e9 72 87 94 80 ec 65 f4 8d 80 a4 00 24 07 e6 a4 42 3a f6 90 47 40 0c 43 fb e2 58 f7 88 54 ad 18 1a 4c e8 d4 02 1d 95 dd a8 90 89 d9 3a 73 24 b0 b5 aa 81 ae 04 0e 0d 3f 31 6d 06 e1 e2 dd c0 18 16 00 f2 e5 5f e4 7a 8e 6c 7a 4b e9 ae e2 06 49 67 ab 46 49 b0 57 bc Data Ascii: K)\_5Z9 1kIgQ<xp ?$BwdP#&D}@C@#CP[@HS7i ,}6E.?2 8t}c5,cDCD re$B:G@CXTL:s$?1m_zlzKIgFIW
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: 81 20 b0 04 52 a3 78 dc 90 c6 fb dc 03 86 56 1c 83 27 4f 5d e5 82 c8 4c 6c c8 86 68 38 42 71 00 4d 0e cf 88 93 8e f8 d3 80 fb 6b f3 20 b8 e2 2c 8b ae 28 e6 64 30 55 89 a1 6b 8d 5f 68 55 8c 50 f1 1d a4 bf b8 95 a2 59 3d e5 ac b2 73 03 2b 80 bb 48 5a 21 9f 32 7d 3a f6 30 01 f8 e6 54 38 cd 3e d3 28 04 f1 ba 8d 1f 59 01 00 d0 af 85 1d 70 e0 aa ab 88 82 3a 75 cc 0b 5c 77 91 0d a0 a4 48 ac 1e d2 ac c0 af 03 26 02 80 f8 89 b4 83 be 25 4b 38 d2 80 9b 2c 8f 0a 15 54 4b 10 37 84 a2 fc 5c 08 d6 6a 40 95 77 f8 8f ff 00 28 78 ba 96 31 a9 14 0d 94 04 8f 8f 48 f0 8e e0 2c 2d 79 80 f0 00 f6 32 d8 7c c3 ca fe 65 fb 58 df 68 06 11 d7 68 96 cb aa 8d 77 81 ed ec 2e 50 e3 b6 a5 6e c6 24 0e 52 70 0b 72 29 7e a2 5d 26 ec 76 3b 96 f0 14 8f cc a2 28 ff 00 10 5c 6f 88 ef fb 50 a2 Data Ascii: RxV'O]Llh8BqMk ,(d0Uk_hUPY=s+HZ!2}:0T8>(Yp:u\wH&%K8,TK7\j@w(x1H,-y2\|eXhhw.Pn$Rpr)~]&v;(\oP
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: b9 be 04 09 42 eb d2 54 68 58 7b d7 79 1b 1f cc 85 64 09 67 25 29 01 dc d4 9e 38 d4 81 40 82 87 a4 88 f0 8f c4 0b 27 93 2f 92 79 96 0d bf 33 59 32 83 cd 01 2d a6 7d e1 e3 3d a2 a8 db 5a 90 20 de 64 00 24 4a eb 95 20 51 07 5c ca a8 d1 af bc 3c 47 29 88 b5 c1 e5 48 06 aa 1c b5 34 84 2b d7 30 22 2e ee 36 0c 0d 15 f6 32 47 ab 1e b0 17 61 09 1b ef 7c 48 f4 a1 7e 4c 49 03 e9 47 98 55 aa 3a bb 97 65 da 02 ed 08 e7 81 02 0c 79 97 66 a4 af a9 5c cb ab 81 1f 41 e2 49 55 3c 19 56 eb 4e 44 56 41 ee 21 10 3c 55 cc ee a2 6d 50 a8 2a b2 25 44 6c 5c 40 24 f8 cc ba 45 91 be 20 43 c5 f9 84 5c 80 73 97 2a 05 29 0a a1 e6 59 90 24 55 66 1d fb c9 31 e3 e2 4b fc 81 13 eb 2b 88 0b 2f c4 b4 1a f0 e0 49 af 18 97 8e 6e 58 c1 72 02 ac 8f 53 02 2b 00 b8 77 0d 44 ee 09 70 a0 22 bc 00 Data Ascii: BThX{ydg%)8@'/y3Y2-}=Z d$J Q\<G)H4+0".62Ga\|H~LIGU:eyf\AIU<VNDVA!<UmP%Dl\@$E C\s)Y$Uf1K+/InXrS+wDp"
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: 83 46 fc 4a 13 7c 47 39 52 05 ec 00 9d fd a2 09 20 32 78 15 22 a0 36 06 63 e2 8b 96 70 de 04 18 fa 68 39 41 ef 7f 69 04 48 ff 00 64 28 94 fe ac f8 80 a0 eb 8e 64 0f 42 da 1e 4c 29 55 01 98 90 51 de 64 90 df b4 00 8b 07 91 1a 0c 32 b7 2d a1 97 a9 00 78 34 20 14 bc 73 22 89 c1 0f 89 22 3f 70 31 16 3f 88 17 c0 f3 2c 6a 34 41 7e eb 13 2a f1 02 59 48 c8 a0 68 78 71 20 02 c1 24 73 2d 99 41 8b 51 6a dc b2 d8 bf 67 0d a3 77 70 88 62 cf bc 1d ba 31 21 f2 b9 50 c5 c2 9a 52 48 51 b9 00 07 99 02 3e 20 09 b5 34 00 1d 2f 24 f1 25 93 7e 54 88 03 07 d6 40 2b ba 82 48 0d 47 a4 64 d2 97 7c 70 4c a0 f5 52 2b c7 ac 45 2c cb ff 00 40 b6 41 72 08 79 21 c9 a3 8c ca 80 f4 cc 06 b8 81 27 80 7c c5 0d 8d ee 47 cb 91 2c de e0 49 2d 54 8a 27 bf 61 11 0c 73 0a 53 b0 1d f3 05 5f 97 22 Data Ascii: FJ\|G9R 2x"6cph9AiHd(dBL)UQd2-x4 s""?p1?,j4A~*YHhxq $s-AQjgwpb1!PRHQ> 4/$%~T@+HGd\|pLR+E,@Ary!'\|G,I-T'asS_"
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: 55 13 20 08 af e6 6b 1c c0 de a2 08 81 92 e5 43 3e ce 26 8e 7b 43 50 21 22 32 22 79 0c 9f 32 27 be 60 09 dd f6 94 75 7f ec 30 d4 09 0d 4b 22 e5 d3 21 de 11 1e e1 cb 3d d0 cc 8d 9e de 24 0f 98 54 28 58 be f1 61 58 50 3e fe 63 8d bf 48 01 e6 e2 b5 8d c3 63 31 1d 4a 8e 20 2f de 48 6c 38 34 de 62 09 17 93 0a ba a8 97 7d e1 ce fb 4d 5f ac c8 c8 2d 11 02 27 60 44 f6 f5 96 4f 24 ea 47 f5 04 59 dc 01 33 e2 28 1d 91 c4 81 0b 19 81 1b 10 27 da b9 9a 4b 21 e8 81 0f 57 2c 8f ed c0 3a 8d 85 52 08 6f de a2 43 c5 e8 09 0a bc c2 01 95 47 4e 5f fe 41 f0 e2 3f 49 a9 a6 a1 59 68 1f 38 32 60 d1 1f 54 93 20 8a 38 91 0c d4 0b 47 e2 42 ad 2e e2 4b 8c 18 32 0b 5e b2 a2 f8 d4 47 32 45 9d 21 72 2c 80 c8 72 0b c9 91 da c1 1e 0c 93 af c4 89 d9 bf 98 02 07 f9 88 44 b2 fd 38 97 48 06 Data Ascii: U kC>&{CP!"2"y2'`u0K"!=$T(XaXP>cHc1J /Hl84b}M_-'`DO$GY3('K!W,:RoCGN_A?IYh82`T 8GB.K2^G2E!r,rD8H
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: 3f d5 21 7f 7a 30 20 14 1f be a0 20 fd 42 ac d4 10 3e 04 d8 fd cb 03 b7 da 64 e8 d0 26 93 b8 55 8e f0 37 c0 85 f8 88 14 7e 90 f3 e2 00 d4 d5 83 65 77 10 ea 29 ae 34 35 00 0a 67 78 ed 08 d5 1a cf ae e2 4e 5b 25 fa c1 11 4b 30 47 75 79 95 57 d5 81 d5 67 26 3f 57 4f 4d 8c 48 1f 7c c0 75 11 c5 09 06 9d fe e5 6e a6 5f e9 c7 72 a3 d4 51 47 d2 48 80 eb f1 02 fa 93 e0 44 6b 43 93 cc cd 8e 9e e7 e6 21 9c 81 c4 10 82 00 7d 26 92 a8 3c ac fb 44 e5 04 0e eb 10 26 8a c9 e6 15 02 c1 65 1f 30 35 a6 05 48 fe a2 48 49 cb 04 5f fc 84 17 e2 e6 ba 81 c2 c4 89 26 ca 79 85 b7 66 b9 95 4e 3f 4a 4a 1f 4a 17 f1 20 2c 58 1d 94 99 e9 e4 5f b4 20 24 63 e0 48 03 93 12 1d 9c c3 03 25 e4 19 10 2b c6 78 8b 44 3f 5a 92 5c 04 2e 45 6f d2 00 f6 dd dc 49 7b 83 a8 81 6e 51 38 16 0d 79 12 24 Data Ascii: ?!z0 B>d&U7~ew)45gxN[%K0GuyWg&?WOMH\|un_rQGHDkC!}&<D&e05HHI_&yfN?JJJ ,X_ $cH%+xD?Z\.EoI{nQ8y$
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: 0e 96 20 58 43 2a 5e 90 76 8f a4 48 4b 7e 60 5e 77 0e 7f 32 3d a3 ef 08 8d 51 32 37 0a 91 14 16 a0 5e 44 5e b0 73 79 90 c8 c7 78 3c 2b 50 24 f3 ae 23 c6 f9 81 17 29 44 05 18 d2 0a 4e 58 df a4 80 25 44 94 68 9f 48 6a bd a4 76 e5 0d 13 e7 bc b0 6e 04 33 ff 00 60 7b 40 7e f1 5b d7 de 01 92 09 c4 5b d7 e2 40 78 2f b4 b6 fd 9c b9 71 f3 80 75 02 77 7e 91 21 63 e2 44 7b a7 98 74 b7 59 85 3c 5f 99 26 a5 7d 41 09 63 b0 3a 85 37 9f 9e 24 81 c7 ac 15 ac 4b b1 a1 02 2f 60 8d 45 36 78 d7 33 2d ea 6b a5 6f d6 11 10 8c b4 58 5c 5e 25 ae 22 47 a1 e2 14 1a f3 8a 8f d4 68 62 44 71 fe c8 1b cd 08 03 d1 0c f3 22 15 5a f3 16 1e 28 c3 c9 2a 04 b6 72 b9 90 b2 35 f3 01 77 f9 96 78 ae f2 a1 b9 63 68 41 10 c5 3a ae 24 1a d4 81 4e 0b 28 3f cc 55 7a ea 19 0e 02 9e 1f 69 74 9d e7 b4 Data Ascii: XC^vHK~`^w2=Q27^D^syx<+P$#)DNX%DhHjvn3`{@~[[@x/quw~!cD{tY<_&}Ac:7$K/`E6x3-koX\^%"GhbDq"Z(r5wxchA:$N(?Uzit
2024-05-23 16:18:24 UTC	1390	IN	Data Raw: 03 fb c4 71 8c 48 1b a2 98 e2 47 a7 a8 32 98 81 59 08 26 37 c4 8d 82 ef fc 8d 0f 3b 62 16 48 fa ad ea 41 24 4f de 69 da 13 14 fc ea 69 f0 c1 c1 10 a9 24 8d 9e 23 e9 06 41 f1 ed 07 eb 7b dc 29 cb f8 91 1f 49 e2 2e b3 8b 95 03 a5 28 30 51 5e b2 14 7e f7 0a e4 2c 9e f0 05 7b 6a 06 80 41 62 44 07 a1 eb 20 5a ba c4 9f 03 e2 41 20 86 b9 50 ce 2c 44 20 0b cf 68 70 43 ac 40 51 65 07 5e f3 24 0d 4d 7d 5d bb dc 9a b1 98 11 05 58 50 3b e6 0c 1d be 64 ca 0c dc 21 01 56 66 48 ed 35 43 a9 37 33 43 35 09 56 8a c0 12 34 21 b1 2c c2 15 78 10 15 89 50 15 21 68 3c ca 23 6c 48 92 c6 cf 89 6d 89 1d a9 02 bc f7 52 f1 23 03 e1 c0 78 97 9a 10 6b 42 34 ff 00 32 81 c9 16 e4 0f b4 8d d0 fb c8 10 7e 0c 30 79 32 5a f7 a9 60 ea 50 fb 19 1a 1f 78 13 a1 2f 26 03 e9 ed 04 1c 8d 72 23 a5 Data Ascii: qHG2Y&7;bHA$Oii$#A{)I.(0Q^~,{jAbD ZA P,D hpC@Qe^$M}]XP;d!VfH5C73C5V4!,xP!h<#lHmR#xkB42~0y2Z`Px/&r#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49736	142.250.186.142	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:24 UTC	1025	OUT	POST /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive Content-Length: 3083 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://sites.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
2024-05-23 16:18:24 UTC	3083	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 37 31 36 34 38 31 31 30 33 38 35 32 30 30 30 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 31 37 31 36 34 38 31 31 30 33 38 35 32 30 30 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 37 31 36 25 32 43 6e 75 6c 6c 25 32 43 31 25 32 43 31 25 35 44 25 35 44 25 32 43 25 35 42 25 32 32 43 4f 65 5a 71 72 47 57 70 49 59 44 46 66 44 41 7a 67 41 64 37 71 45 4c 57 41 25 32 32 25 32 43 31 37 31 36 34 38 31 31 30 33 38 35 31 30 30 30 25 32 43 31 37 31 36 34 38 31 30 39 38 39 34 33 37 31 34 25 32 43 25 32 32 41 48 4b 58 6d 4c 30 45 75 35 4c 2d 46 6f 31 2d 4f Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C1%2C1716481103852000%2Cnull%2Cnull%2Cnull%2C%5B%5B1716481103852000%5D%2Cnull%2C1%5D%2Cnull%2C716%2Cnull%2C1%2C1%5D%5D%2C%5B%22COeZqrGWpIYDFfDAzgAd7qELWA%22%2C1716481103851000%2C1716481098943714%2C%22AHKXmL0Eu5L-Fo1-O
2024-05-23 16:18:24 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 23 May 2024 16:18:24 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 16:18:24 UTC	22	IN	Data Raw: 31 30 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 66 2e 6d 74 22 5d 5d 0d 0a Data Ascii: 10)]}'[["f.mt"]]
2024-05-23 16:18:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49760	23.43.61.160	443

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:24 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-23 16:18:24 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=258557 Date: Thu, 23 May 2024 16:18:24 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-23 16:18:24 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49761	142.250.185.142	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:25 UTC	543	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://sites.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-23 16:18:25 UTC	517	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Thu, 23 May 2024 16:18:25 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49763	142.250.186.174	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:25 UTC	658	OUT	GET /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
2024-05-23 16:18:26 UTC	578	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 23 May 2024 16:18:26 GMT X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 16:18:26 UTC	61	IN	Data Raw: 33 37 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 5d 0d 0a Data Ascii: 37)]}'[["er",null,null,null,null,400,null,null,null,3]]
2024-05-23 16:18:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49766	142.250.185.142	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:26 UTC	1000	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 2589 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
2024-05-23 16:18:26 UTC	2589	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 31 36 34 38 31 31 30 33 38 35 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 2c 31 37 31 36 34 38 31 31 30 33 38 35 32 30 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 31 37 31 36 34 38 31 31 30 33 38 35 32 30 30 30 5d 2c 6e 75 6c 6c 2c 31 5d 2c 6e 75 6c 6c 2c 37 31 36 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,null,[4,0,0,0,0]]],2033,[["1716481103858",null,null,null,null,null,null,"[[[null,null,1,1716481103852000,null,null,null,[[1716481103852000],null,1],null,716,null,
2024-05-23 16:18:26 UTC	922	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk; expires=Fri, 22-Nov-2024 16:18:26 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Thu, 23 May 2024 16:18:26 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Thu, 23 May 2024 16:18:26 GMT Connection: close Transfer-Encoding: chunked
2024-05-23 16:18:26 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-23 16:18:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49770	142.250.186.142	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:28 UTC	1025	OUT	POST /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive Content-Length: 4537 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded;charset=UTF-8 Accept: / Origin: https://sites.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk
2024-05-23 16:18:28 UTC	4537	OUT	Data Raw: 69 6d 70 72 65 73 73 69 6f 6e 42 61 74 63 68 3d 25 35 42 25 35 42 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 32 25 32 43 31 37 31 36 34 38 31 31 30 33 38 36 34 30 30 30 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 25 35 42 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 39 38 34 25 32 43 31 32 38 30 25 35 44 25 35 44 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c 25 32 43 25 35 42 25 35 42 30 25 32 43 30 25 35 44 25 32 43 6e 75 6c 6c 25 32 43 6e 75 6c 6c Data Ascii: impressionBatch=%5B%5B%5Bnull%2Cnull%2C2%2C1716481103864000%2C%5Bnull%2Cnull%2Cnull%2C%5B%5B%5B907%2C1280%5D%2C%5B984%2C1280%5D%5D%5D%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2Cnull%2C%5B%5B0%2C0%5D%2Cnull%2Cnull
2024-05-23 16:18:28 UTC	699	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 23 May 2024 16:18:28 GMT Content-Disposition: attachment; filename="response.bin"; filename*=UTF-8''response.bin X-Content-Type-Options: nosniff Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 16:18:28 UTC	22	IN	Data Raw: 31 30 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 66 2e 6d 74 22 5d 5d 0d 0a Data Ascii: 10)]}'[["f.mt"]]
2024-05-23 16:18:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49769	142.250.185.142	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:28 UTC	1000	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 3670 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://sites.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk
2024-05-23 16:18:28 UTC	3670	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 32 30 33 33 2c 5b 5b 22 31 37 31 36 34 38 31 31 30 36 38 36 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[4,0,0,0,0]]],2033,[["1716481106866",null,null,n
2024-05-23 16:18:28 UTC	520	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Thu, 23 May 2024 16:18:28 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 16:18:28 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-05-23 16:18:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49771	142.250.186.174	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:31 UTC	658	OUT	GET /_/view/logImpressions?authuser=0 HTTP/1.1 Host: sites.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk
2024-05-23 16:18:31 UTC	578	IN	HTTP/1.1 400 Bad Request Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 23 May 2024 16:18:31 GMT X-Content-Type-Options: nosniff Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-05-23 16:18:31 UTC	61	IN	Data Raw: 33 37 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 33 5d 5d 0d 0a Data Ascii: 37)]}'[["er",null,null,null,null,400,null,null,null,3]]
2024-05-23 16:18:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49772	142.250.184.206	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:31 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk
2024-05-23 16:18:31 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 16:18:31 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:31 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-23 16:18:31 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49774	142.250.184.206	443	4248	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-23 16:18:32 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk
2024-05-23 16:18:32 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 May 2024 16:18:32 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-23 16:18:32 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-05-23 16:18:32 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Target ID:	0
Start time:	12:18:13
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	12:18:15
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2116 --field-trial-handle=2076,i,18174622302486856701,2373706481918358607,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	12:18:17
Start date:	23/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 23.43.61.160
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 46.228.146.0
Source: unknown	TCP traffic detected without corresponding DNS query: 46.228.146.0
Source: unknown	TCP traffic detected without corresponding DNS query: 46.228.146.0
Source: unknown	TCP traffic detected without corresponding DNS query: 46.228.146.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /view/bakcsa3/?yj0&d=DwMFaQ HTTP/1.1Host: sites.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/client.js?onload=gapiLoaded HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
Source: global traffic	HTTP traffic detected: GET /xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280 HTTP/1.1Host: lh6.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.JisoxTPHVRs.O/m=client/rt=j/sv=1/d=1/ed=1/am=AAAC/rs=AHpOoo9VOmUKkb8FAwL65OiDUU4etqWcRg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
Source: global traffic	HTTP traffic detected: GET /QmMtUfcZb8HCPTk7mycilQNRSxsgN1pfissSxL8rc_Lw5Ka89R6W3KNq9kcVUYqo9yEwlvZ4j7pFViSwROUBDFs=w16383 HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCI/KzQEIucrNAQii0c0BCIrTzQEIntbNAQin2M0BCPnA1BUY9snNARi60s0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xoE5-QplVlmDvAEial54xiXGtwGMIh9wYFZbQYevSQoOJDaezhjH99tGSn5nANURE0SsuiSPoydIZ6W7gn2JVG4MnVUV84-Oxd7Z6h_6DbnRnv5uON6wSbrbuKt1EgXnKQ=w1280 HTTP/1.1Host: lh6.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /QmMtUfcZb8HCPTk7mycilQNRSxsgN1pfissSxL8rc_Lw5Ka89R6W3KNq9kcVUYqo9yEwlvZ4j7pFViSwROUBDFs=w16383 HTTP/1.1Host: lh5.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /_/view/logImpressions?authuser=0 HTTP/1.1Host: sites.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=f0fAD8GgDTUmmcgKlHxIMtQkfJq9RX1jylxUZDMvms-irktsGZZgHcowyIIXckl6EjvoPHlEHvO-cA-HW1z_eB2-aj9A850Y2SuAezJzdpU8s7aydtMfNmsn4Bn-sOCItCGWm8quFvsBYQeD4O6PiRrbinLAbs4mpY17SRaj_BU
Source: global traffic	HTTP traffic detected: GET /_/view/logImpressions?authuser=0 HTTP/1.1Host: sites.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=514=dT3DeILQtg6xCs18-uG2zfZHBxZf-br-NMDkzwpGwdl-R1-b9b-JFXxPd7oUJ8cfRnBlm_Dx43-Of17cUb_FWwEidOOBNtvGRFqFPejd-1-mlakj2u7czuuGLSmbpeI6EkH9ba1ATn1nN0vgGWEWbBNjx7k-PUG-Xm3q0MkxGVk

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

Windows Analysis Report
https://sites.google.com/view/bakcsa3/?yj0&d=DwMFaQ